Wireshark-users: [Wireshark-users] L2CP and Slow Network
From: Josue Del Valle <jodelvalle@xxxxxxxxx>
Date: Mon, 3 Oct 2011 20:56:23 -0400
Hi,
We recently received a call from Brighthouse letting us know that we were sending to much L2CP traffic to them and they asked us if we could stop it because it could cause performance issues.
A week or so before the call I started noticing that our download speed had decreased a lot. We have a 10Mbps Fiber and never had issue with performance.
I mirrored some ports on the switch and ran Wireshark but I can't find any L2CP traffic originating from our network. The throughput on the LAN is fine. However, download is terrible.
I tried to download a 500MB file and the speed started at 240KB and it decreased the windows to less than 50KB and eventually the connection got dropped. I have tried to download files from multiple PC, Servers and different firewalls and I get the same result. I am not sure where to start troubleshooting. I also have one remote user who VPN to the network and have an IP Phone and she was getting disconnected too and her phone calls were breaking.
Your help will be greatly appreciated.
JD
We recently received a call from Brighthouse letting us know that we were sending to much L2CP traffic to them and they asked us if we could stop it because it could cause performance issues.
A week or so before the call I started noticing that our download speed had decreased a lot. We have a 10Mbps Fiber and never had issue with performance.
I mirrored some ports on the switch and ran Wireshark but I can't find any L2CP traffic originating from our network. The throughput on the LAN is fine. However, download is terrible.
I tried to download a 500MB file and the speed started at 240KB and it decreased the windows to less than 50KB and eventually the connection got dropped. I have tried to download files from multiple PC, Servers and different firewalls and I get the same result. I am not sure where to start troubleshooting. I also have one remote user who VPN to the network and have an IP Phone and she was getting disconnected too and her phone calls were breaking.
Your help will be greatly appreciated.
JD
No. Time Source Destination Protocol Length Info 1 0.000000 192.168.10.1 192.168.10.245 Syslog 223 LOCAL1.WARNING: Oct 3 19:44:18 MyFirewall firewall: Allow 1-Trusted 0-External 48 tcp 20 127 192.168.10.118 67.195.146.181 3749 80 offset 7 S 3565690819 win 65535 (HTTP-proxy.endusers-00) Frame 1: 223 bytes on wire (1784 bits), 223 bytes captured (1784 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.WARNING: Oct 3 19:44:18 MyFirewall firewall: Allow 1-Trusted 0-External 48 tcp 20 127 192.168.10.118 67.195.146.181 3749 80 offset 7 S 3565690819 win 65535 (HTTP-proxy.endusers-00) No. Time Source Destination Protocol Length Info 2 0.031955 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1 Ack=1 Win=52891 Len=0 Frame 2: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 3 0.031992 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 2#1] smtp > 23308 [ACK] Seq=1 Ack=1 Win=52891 Len=0 Frame 3: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 4 0.032022 206.225.164.186 192.168.10.207 SMTP 1434 C: hIJQ0wOMYDDoal0u98PpLdDVRCZzcyEeZEWO3PHzBDx7ZrpdO | n8MecBYNBHcPlF2BlY7hjAHAP0NcN4W8KQalc3yysG8ktEhZd2GYn58bgCR2H6ipl8Nf8IXqNrdy | S/aIZHKFtnl7CeBxvkJ69hXuAORkdDS0UUUUUUUUUUUUUUUUUUUUUUUUUH2rzDwRufVdSd8bvMAO | 3OPvN0zzXp9FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFcJ8RCRpigHYWuIgGGMg5 | PPJUcYzyQPUjrXaWoKwoCSxCrknqeBz1PX6n61PRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR | RRRRRRRXO+LR/wASm5OSuIyeDj04+h71f0VdljAvpEn8hWnRRRRRRRRRRRRRRRRRRRRRRRRRRRRR | RRRRRRRRRRRRRRRXFeNSxjtFQAs13FgE4BIyeSAxH1wfpXaDOOeD/n6UtFFFFFFFFFFFFFFFFFFF | FFFFFFFFFFFFFFFFFFFFFFFFFZ+rNssrhvSGU/kjVyHw1ZTo6gHkSSbvYlsj9MV39FFFFFFFFFFF | FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFcr40fZpE52h/lxggnGT97hWwR6nA9xVH4eBxpEe91kG | TtC4+QZ+62APmHfOT713FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFfPHxHuWXWjsw | rQrGQwHOdoYE5yDjtxXv9oWMKFuWKLk++BViiiiiiiiivMPEc9lYa/ay3UbSNKqCMqQuxt5QEgAF | weBhicdvSvTxTJI1kUo3KsCpHTIIwenPSuKf4daI/PksufSWX+rGttvDto1mmn4YQQsrKA3OUORk | kHPPWtwDAwO1Yt74dsb6SSaZN0k0flM25gdnoOcD6gZNXtPsItNgS2gBEUYwoJJOPqetZf8AwjFi | Ltr7a3nybwzbj8wcYK47ADpjB9zVrRdFg0SE29uWKF2f5yCQWOcZAHA7ZyfUmotY0G21jyzdF8QN | vUK21cjnJGDnp+VRyeHLWa/TUyZPOjUKoV8JgDAyAAT9N2D3FZlx4A0a5dpXhbe5LMRLLyTyTjeR | +lOtPAmlWcsc8KOrwNuU7ycn/aznIHat2w0e106SWS2XYbhgzjJILeozyM9+cVHq+iW+sLGlyGxD | IJF2kjkdj7GtcDaMDoKXOOKKKKKKKKKKKKKKKQnHtS5opNwBx36/hQCD0paKQHPSlo6UgIPSlry7 | wNsGpajmQF/NJ2qwIK7j83TPB468civUQaKjMyL1ZRzjkjr6fX2p6sG6EH6UtQfaof76dSPvDqOo | 69u Frame 4: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 278, Ack: 1, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 5 0.032051 206.225.164.186 192.168.10.207 SMTP 1434 C: 9Sq6t90g/Q06o1mRgWVlKg4JBBAI6gnsR3pyurfdIP0OadSMwUZJwB3NIrq33SD9DmkeRYxly | FGcZJA5PbmmieMoJAylD0bcNp/HOKcsiv90g/Qg0+kLBRk8CgMOgI4pGdU+8QuSAMnHJ6D6nsKHd | UGWIUepOKA65wCM+madSbhnbkZxnHfHrijIHHeloooooooooooooooooooorgPiTGJNIOc/LLGRj | PXlecIwx83coM4+bOFbu4RtRR6KB+lSUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUV | zfi2B7jTJYY2CGQomSMj55FTHtywORzxW5aQ+RCkX9xQv5DFWKKKKKKKKKKKKKKKKKKKKKKKKKKK | KKKKKKKKKKKKKKKKKK4rxshW3guQxU29zEwC4yxY7eCwYDGc8q30712i9BS0UUUUUUUUUUUUUUUU | UUUUUUUUUUUUUUUUUUUUUUUUUUUVR1MuLSYxqXfyn2qDgsdpwM9smud8B4/saAquzO8kZzz5jZP4 | nnHbpXYUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUVyfjksujXJUhcKucjOQXUYHIw | ckc8+mOapfDoltFiJx96QDCgcByOcAZPHJOSe5ruaKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK | KKKKKKKK+fvilGF1VMZy8CMenXe68ceijrnnPbive7ZGjiRXIZlUAkDaCQOSBk4Htk49TU1FFFFF | FFFeca/oH9ua9CGk8pLW3SVgDiRv3smNnoAVG5v4cjuQRqnwPZ5ys12hP924cfzzUE/gO3nAV7vU | CFYMoNxuAZejAMhwR2PUdqhHw9tjJvluryVSxdleUfMxGCxZVVs8DJzk4Gauf8INZL9yW7T/AHbh | /wCuaP8AhC4x9y+1JP8Aduj/AFQ1WPgGBwqS3V5LHH9xHl4XkE7dqrjIG30wc9QKmHgSzV8pNdou | AAqzuMHJycknqMDHbHvUVz4AtLpPLlub50zna04ZcjocOjDIrO/4VfZJ/q7m6T/gSf0QVat/h5bx | jbJdXUinII8wrkEAAccYHPbnPPSrw8ExIMR3moxgdAtyRj/x01U/4V9BuJ+13rB23OGlU7843biE | BJbaATnPA54qz/wgdkr5SW6RcABVncYOTzkknkYGPan/APCFRD7l5qMf+7dEfzU1A3gVGbc17fuN | 6uQ8wbcU+6SdgOQOAc5A6VUb4eR7lZLy6XBJb5z82Wz1yMcfLkfXrV8+BrfcGW7v0Zc7SLk5GeuC | VOM98dahm8BRXBBlvb+UDGRJMGyAc4J2A45PQ8ZOKIfh/aRYHn3RxuziZ Frame 5: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1658, Ack: 1, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6 0.032080 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 6: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 3038, Ack: 1, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7 0.032109 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 4418, Ack: 1, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8 0.032138 206.225.164.186 192.168.10.207 SMTP 1238 C: DATA fragment, 1184 bytes Frame 8: 1238 bytes on wire (9904 bits), 1238 bytes captured (9904 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 5798, Ack: 1, Len: 1184 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9 0.032175 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 6982, Ack: 1, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10 0.032192 206.225.164.186 192.168.10.207 SMTP 779 C: DATA fragment, 725 bytes Frame 10: 779 bytes on wire (6232 bits), 779 bytes captured (6232 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 8362, Ack: 1, Len: 725 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11 0.032209 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 2#2] smtp > 23308 [ACK] Seq=1 Ack=1 Win=52891 Len=0 Frame 11: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 12 0.032225 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 9087, Ack: 1, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13 0.032249 192.168.10.207 206.225.164.186 SMTP 180 S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 13: 180 bytes on wire (1440 bits), 180 bytes captured (1440 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1, Ack: 1, Len: 126 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14 0.032268 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=10467 Ack=127 Win=46048 Len=0 Frame 14: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 10467, Ack: 127, Len: 0 No. Time Source Destination Protocol Length Info 15 0.032284 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 13#1] smtp > 23308 [ACK] Seq=127 Ack=1 Win=52891 Len=0 Frame 15: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 16 0.032300 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 13#2] smtp > 23308 [ACK] Seq=127 Ack=1 Win=52891 Len=0 Frame 16: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 17 0.032316 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 13#3] smtp > 23308 [ACK] Seq=127 Ack=1 Win=52891 Len=0 Frame 17: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 18 0.032331 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 13#4] smtp > 23308 [ACK] Seq=127 Ack=1 Win=52891 Len=0 Frame 18: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 19 0.032347 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 13#5] smtp > 23308 [ACK] Seq=127 Ack=1 Win=52891 Len=0 Frame 19: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 20 0.032363 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 13#6] smtp > 23308 [ACK] Seq=127 Ack=1 Win=52891 Len=0 Frame 20: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 21 0.032379 206.225.164.186 192.168.10.207 SMTP 331 [TCP Fast Retransmission] C: DATA fragment, 277 bytes Frame 21: 331 bytes on wire (2648 bits), 331 bytes captured (2648 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1, Ack: 127, Len: 277 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22 0.032395 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 13#7] smtp > 23308 [ACK] Seq=127 Ack=1 Win=52891 Len=0 Frame 22: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 23 0.032411 206.225.164.186 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 23: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 278, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 24 0.032429 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 24: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 10467, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 25 0.032445 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 25: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 11847, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 26 0.032462 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=10467 Win=42425 Len=0 Frame 26: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 10467, Len: 0 No. Time Source Destination Protocol Length Info 27 0.032481 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 27: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 13227, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 28 0.032498 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 26#1] smtp > 23308 [ACK] Seq=127 Ack=10467 Win=42425 Len=0 Frame 28: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 10467, Len: 0 No. Time Source Destination Protocol Length Info 29 0.032514 206.225.164.186 192.168.10.207 SMTP 709 C: DATA fragment, 655 bytes Frame 29: 709 bytes on wire (5672 bits), 709 bytes captured (5672 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 14607, Ack: 127, Len: 655 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 30 0.032530 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 30: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 15262, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 31 0.032547 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=13227 Win=39665 Len=0 Frame 31: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 13227, Len: 0 No. Time Source Destination Protocol Length Info 32 0.032563 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=15262 Win=37630 Len=0 Frame 32: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 15262, Len: 0 No. Time Source Destination Protocol Length Info 33 0.032579 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 33: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 16642, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 34 0.032596 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 34: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 18022, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 35 0.032612 206.225.164.186 192.168.10.207 SMTP 1217 C: DATA fragment, 1163 bytes Frame 35: 1217 bytes on wire (9736 bits), 1217 bytes captured (9736 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 19402, Ack: 127, Len: 1163 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 36 0.032631 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 36: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 20565, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 37 0.032648 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=18022 Win=34870 Len=0 Frame 37: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 18022, Len: 0 No. Time Source Destination Protocol Length Info 38 0.032663 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=20565 Win=32327 Len=0 Frame 38: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 20565, Len: 0 No. Time Source Destination Protocol Length Info 39 0.032679 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 39: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 21945, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 40 0.032696 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 40: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 23325, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 41 0.032715 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 41: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 24705, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 42 0.032732 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 42: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 26085, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 43 0.032748 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=23325 Win=29567 Len=0 Frame 43: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 23325, Len: 0 No. Time Source Destination Protocol Length Info 44 0.032764 206.225.164.186 192.168.10.207 SMTP 495 C: DATA fragment, 441 bytes Frame 44: 495 bytes on wire (3960 bits), 495 bytes captured (3960 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 27465, Ack: 127, Len: 441 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 45 0.032782 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=26085 Win=26807 Len=0 Frame 45: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 26085, Len: 0 No. Time Source Destination Protocol Length Info 46 0.032798 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 46: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 27906, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 47 0.032815 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 47: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 29286, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 48 0.032831 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=27906 Win=24986 Len=0 Frame 48: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 27906, Len: 0 No. Time Source Destination Protocol Length Info 49 0.032849 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 49: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 30666, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 50 0.032865 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 50: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 32046, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 51 0.032883 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=30666 Win=22226 Len=0 Frame 51: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 30666, Len: 0 No. Time Source Destination Protocol Length Info 52 0.032899 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 52: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 33426, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 53 0.032917 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 53: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 34806, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 54 0.032933 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=33426 Win=19466 Len=0 Frame 54: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 33426, Len: 0 No. Time Source Destination Protocol Length Info 55 0.032951 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 55: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 36186, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 56 0.032970 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 56: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 37566, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 57 0.032986 206.225.164.186 192.168.10.207 SMTP 359 C: DATA fragment, 305 bytes Frame 57: 359 bytes on wire (2872 bits), 359 bytes captured (2872 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 38946, Ack: 127, Len: 305 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 58 0.033002 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=36186 Win=16706 Len=0 Frame 58: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 36186, Len: 0 No. Time Source Destination Protocol Length Info 59 0.033020 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 59: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 39251, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 60 0.033037 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 60: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 40631, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 61 0.033088 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 61: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 42011, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 62 0.033105 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=39251 Win=13641 Len=0 Frame 62: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 39251, Len: 0 No. Time Source Destination Protocol Length Info 63 0.033122 206.225.164.186 192.168.10.207 SMTP 1275 C: DATA fragment, 1221 bytes Frame 63: 1275 bytes on wire (10200 bits), 1275 bytes captured (10200 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 43391, Ack: 127, Len: 1221 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 64 0.033138 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=42011 Win=10881 Len=0 Frame 64: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 42011, Len: 0 No. Time Source Destination Protocol Length Info 65 0.033198 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 65: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 44612, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 66 0.033224 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 66: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 45992, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 67 0.033241 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 67: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 47372, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 68 0.033258 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=44612 Win=8280 Len=0 Frame 68: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 44612, Len: 0 No. Time Source Destination Protocol Length Info 69 0.033274 206.225.164.186 192.168.10.207 SMTP 742 C: DATA fragment, 688 bytes Frame 69: 742 bytes on wire (5936 bits), 742 bytes captured (5936 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 48752, Ack: 127, Len: 688 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 70 0.033291 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 70: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 49440, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 71 0.033309 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 71: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 50820, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 72 0.033326 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 72: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 52200, Ack: 127, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 73 0.033438 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=48752 Win=4140 Len=0 Frame 73: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 48752, Len: 0 No. Time Source Destination Protocol Length Info 74 0.033454 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=127 Ack=52892 Win=0 Len=0 Frame 74: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 52892, Len: 0 No. Time Source Destination Protocol Length Info 75 0.058782 192.168.10.207 182.178.75.135 TCP 62 smtp > 2018 [SYN, ACK] Seq=0 Ack=0 Win=16384 Len=0 MSS=1460 WS=1 Frame 75: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 2018 (2018), Seq: 0, Ack: 0, Len: 0 No. Time Source Destination Protocol Length Info 76 0.079741 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 76: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 77 0.079770 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 77: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 78 0.221201 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1605310720, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 78: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 79 0.221225 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1605310720, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 79: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 80 0.221238 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1605310720, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 80: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 81 0.221253 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1605310720, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 81: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 82 0.242226 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3474391296, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 82: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 83 0.242241 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3474391296, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 83: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 84 0.242255 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3474391296, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 84: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 85 0.242268 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3474391296, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 85: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 86 0.425638 182.178.75.135 192.168.10.207 TCP 60 2018 > smtp [ACK] Seq=0 Ack=1 Win=46720 Len=0 Frame 86: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 2018 (2018), Dst Port: smtp (25), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 87 0.425872 192.168.10.1 192.168.10.245 Syslog 204 LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 87: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 88 0.425979 192.168.10.207 182.178.75.135 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:43:53 -0400 Frame 88: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 2018 (2018), Seq: 1, Ack: 0, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 89 0.426041 182.178.75.135 192.168.10.207 TCP 60 2018 > smtp [ACK] Seq=0 Ack=122 Win=46659 Len=0 Frame 89: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 2018 (2018), Dst Port: smtp (25), Seq: 0, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 90 0.465594 190.233.185.172 192.168.10.207 TCP 62 22958 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 90: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.233.185.172 (190.233.185.172), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22958 (22958), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 91 0.465671 192.168.10.207 190.233.185.172 TCP 62 smtp > 22958 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 91: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.233.185.172 (190.233.185.172) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22958 (22958), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 92 0.553964 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 92: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 52892, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 93 0.554000 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=53580 Ack=169 Win=46720 Len=0 Frame 93: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 53580, Ack: 169, Len: 0 No. Time Source Destination Protocol Length Info 94 0.554083 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=169 Ack=52892 Win=0 Len=0 Frame 94: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 169, Ack: 52892, Len: 0 No. Time Source Destination Protocol Length Info 95 0.590573 192.168.10.67 192.168.10.204 TCP 367 [TCP segment of a reassembled PDU] Frame 95: 367 bytes on wire (2936 bits), 367 bytes captured (2936 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_39:6b:43 (00:18:8b:39:6b:43) Internet Protocol Version 4, Src: 192.168.10.67 (192.168.10.67), Dst: 192.168.10.204 (192.168.10.204) Transmission Control Protocol, Src Port: sai-sentlm (2640), Dst Port: http (80), Seq: 1, Ack: 1, Len: 313 No. Time Source Destination Protocol Length Info 96 0.590768 192.168.10.67 192.168.10.204 HTTP/XML 1248 POST /ClientWebService/client.asmx HTTP/1.1 Frame 96: 1248 bytes on wire (9984 bits), 1248 bytes captured (9984 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_39:6b:43 (00:18:8b:39:6b:43) Internet Protocol Version 4, Src: 192.168.10.67 (192.168.10.67), Dst: 192.168.10.204 (192.168.10.204) Transmission Control Protocol, Src Port: sai-sentlm (2640), Dst Port: http (80), Seq: 314, Ack: 1, Len: 1194 [2 Reassembled TCP Segments (1507 bytes): #95(313), #96(1194)] Hypertext Transfer Protocol eXtensible Markup Language No. Time Source Destination Protocol Length Info 97 0.590820 192.168.10.204 192.168.10.67 TCP 60 http > sai-sentlm [ACK] Seq=1 Ack=1508 Win=65535 Len=0 Frame 97: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:6b:43 (00:18:8b:39:6b:43), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Internet Protocol Version 4, Src: 192.168.10.204 (192.168.10.204), Dst: 192.168.10.67 (192.168.10.67) Transmission Control Protocol, Src Port: http (80), Dst Port: sai-sentlm (2640), Seq: 1, Ack: 1508, Len: 0 No. Time Source Destination Protocol Length Info 98 0.593182 192.168.10.204 192.168.10.67 TCP 1514 [TCP segment of a reassembled PDU] Frame 98: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Dell_39:6b:43 (00:18:8b:39:6b:43), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Internet Protocol Version 4, Src: 192.168.10.204 (192.168.10.204), Dst: 192.168.10.67 (192.168.10.67) Transmission Control Protocol, Src Port: http (80), Dst Port: sai-sentlm (2640), Seq: 1, Ack: 1508, Len: 1460 No. Time Source Destination Protocol Length Info 99 0.593235 192.168.10.204 192.168.10.67 TCP 76 [TCP segment of a reassembled PDU] Frame 99: 76 bytes on wire (608 bits), 76 bytes captured (608 bits) Ethernet II, Src: Dell_39:6b:43 (00:18:8b:39:6b:43), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Internet Protocol Version 4, Src: 192.168.10.204 (192.168.10.204), Dst: 192.168.10.67 (192.168.10.67) Transmission Control Protocol, Src Port: http (80), Dst Port: sai-sentlm (2640), Seq: 1461, Ack: 1508, Len: 22 No. Time Source Destination Protocol Length Info 100 0.593286 192.168.10.204 192.168.10.67 HTTP 60 HTTP/1.1 200 OK Frame 100: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:6b:43 (00:18:8b:39:6b:43), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Internet Protocol Version 4, Src: 192.168.10.204 (192.168.10.204), Dst: 192.168.10.67 (192.168.10.67) Transmission Control Protocol, Src Port: http (80), Dst Port: sai-sentlm (2640), Seq: 1483, Ack: 1508, Len: 5 [3 Reassembled TCP Segments (1487 bytes): #98(1460), #99(22), #100(5)] Hypertext Transfer Protocol No. Time Source Destination Protocol Length Info 101 0.593337 192.168.10.67 192.168.10.204 TCP 60 sai-sentlm > http [ACK] Seq=1508 Ack=1483 Win=65535 Len=0 Frame 101: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_39:6b:43 (00:18:8b:39:6b:43) Internet Protocol Version 4, Src: 192.168.10.67 (192.168.10.67), Dst: 192.168.10.204 (192.168.10.204) Transmission Control Protocol, Src Port: sai-sentlm (2640), Dst Port: http (80), Seq: 1508, Ack: 1483, Len: 0 No. Time Source Destination Protocol Length Info 102 0.629923 192.168.10.203 117.198.83.191 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 102: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 117.198.83.191 (117.198.83.191) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 103 0.667240 190.233.185.172 192.168.10.207 TCP 60 22958 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 103: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.233.185.172 (190.233.185.172), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22958 (22958), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 104 0.667390 192.168.10.1 192.168.10.245 Syslog 206 LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.233.185.172 7x.x.x.3 22958 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 104: 206 bytes on wire (1648 bits), 206 bytes captured (1648 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.233.185.172 7x.x.x.3 22958 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 105 0.667470 192.168.10.207 190.233.185.172 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:43:53 -0400 Frame 105: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.233.185.172 (190.233.185.172) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22958 (22958), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 106 0.667594 190.233.185.172 192.168.10.207 TCP 60 22958 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 106: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.233.185.172 (190.233.185.172), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22958 (22958), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 107 0.741607 192.168.10.67 192.168.10.204 TCP 60 sai-sentlm > http [ACK] Seq=1508 Ack=1488 Win=65530 Len=0 Frame 107: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_39:6b:43 (00:18:8b:39:6b:43) Internet Protocol Version 4, Src: 192.168.10.67 (192.168.10.67), Dst: 192.168.10.204 (192.168.10.204) Transmission Control Protocol, Src Port: sai-sentlm (2640), Dst Port: http (80), Seq: 1508, Ack: 1488, Len: 0 No. Time Source Destination Protocol Length Info 108 0.841187 182.178.75.135 192.168.10.207 SMTP 72 C: EHLO qniahex.com Frame 108: 72 bytes on wire (576 bits), 72 bytes captured (576 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 2018 (2018), Dst Port: smtp (25), Seq: 0, Ack: 122, Len: 18 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 109 0.841429 192.168.10.207 182.178.75.135 SMTP 245 S: 250-mail.mydomain.com Hello [182.178.75.135] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 109: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 2018 (2018), Seq: 122, Ack: 18, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 110 0.841486 182.178.75.135 192.168.10.207 TCP 60 2018 > smtp [ACK] Seq=18 Ack=313 Win=46564 Len=0 Frame 110: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 2018 (2018), Dst Port: smtp (25), Seq: 18, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 111 0.841727 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 111: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" No. Time Source Destination Protocol Length Info 112 0.842281 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=1 Ack=1 Win=1002 Len=1448 TSval=535459 TSecr=727447 Frame 112: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 1, Ack: 1, Len: 1448 Data (1448 bytes) 0000 17 03 01 21 10 b9 f8 e6 8c b5 a1 3a 71 35 29 30 ...!.......:q5)0 0010 aa 20 54 5f 6e 0d b1 9f b2 eb ee fa 18 af 37 ce . T_n.........7. 0020 10 aa c9 80 a5 57 2e 73 c3 a6 78 32 bf ee 1c 02 .....W.s..x2.... 0030 28 69 56 75 20 e1 91 71 8d 7b 97 bb 0c 59 90 80 (iVu ..q.{...Y.. 0040 2b 95 30 d7 fc 0f b4 12 33 df 9a 57 fb 6b 6c d5 +.0.....3..W.kl. 0050 1a 62 af 97 78 19 a6 60 db f3 b0 31 a7 1e 83 a4 .b..x..`...1.... 0060 81 b6 5e a8 aa 89 53 74 e8 16 ee 28 87 2c 0f a9 ..^...St...(.,.. 0070 cf 83 d1 8c a1 ba 69 8b 03 2f 94 87 df 2f 3a 0d ......i../.../:. 0080 2d db 7f 6a 1e 8b 6f 83 d8 30 94 8c ea 9a 46 00 -..j..o..0....F. 0090 1e a5 42 ac 0b ee c7 9b 46 b7 da ae 8b cc 8c 22 ..B.....F......" 00a0 cf 93 a6 24 5b 71 cd a1 2e fe 48 04 18 fc 5c 81 ...$[q....H...\. 00b0 77 f9 92 ed d6 70 05 02 c0 f3 50 64 f4 ea 55 15 w....p....Pd..U. 00c0 97 6e 8f 2f 1a 18 ab 03 f4 52 cf f3 73 27 4c 20 .n./.....R..s'L 00d0 71 03 e6 a2 01 7c 10 fd 28 5c 8f fa 67 33 9b e1 q....|..(\..g3.. 00e0 a7 3a 7f a9 8e 06 1c 6d 03 21 22 db 87 21 63 d1 .:.....m.!"..!c. 00f0 db b2 dd 1f b3 64 66 17 bb b4 a9 1b 47 97 d0 56 .....df.....G..V 0100 03 8f 3c 24 da bd 38 22 69 a1 e6 48 3a 7a 05 a6 ..<$..8"i..H:z.. 0110 d8 0c 5c c5 96 be ae 93 42 72 4f 7b 81 a8 69 b2 ..\.....BrO{..i. 0120 23 e9 78 58 72 3a 94 68 cf 6a 1e 2b cf 4e 98 6d #.xXr:.h.j.+.N.m 0130 09 52 bf dc ed a6 36 45 74 a8 25 22 60 7d d4 ae .R....6Et.%"`}.. 0140 00 af 82 85 b9 08 b6 09 37 ba 5a f2 7b b7 4a 17 ........7.Z.{.J. 0150 ff e9 6c b9 56 21 b5 db db db fe 70 4d 48 11 d5 ..l.V!.....pMH.. 0160 74 ae 3c 30 43 2b 09 ef 5c 03 6f 4a a3 51 45 69 t.<0C+..\.oJ.QEi 0170 e3 58 c7 e8 ce 8b a6 d7 01 af 66 1a c9 1d 61 37 .X........f...a7 0180 e1 e9 d8 df f5 ff 55 40 4a 18 0f ad fc dc bd 37 [email protected] 0190 8b 10 bc d0 d0 81 d9 e7 50 71 fd 54 35 e8 e9 7c ........Pq.T5..| 01a0 94 fa 37 c1 37 63 8d d9 fd 85 f7 b1 ba f4 fe 30 ..7.7c.........0 01b0 16 ac 38 f0 0a 89 63 9c f3 e8 dd cc f9 c7 b0 97 ..8...c......... 01c0 7f 28 a0 69 6d 08 2a 10 98 94 5b 1c 33 b6 a1 eb .(.im.*...[.3... 01d0 80 5b 8d 2b 3d cb 1a de 00 ed 9b 1e f6 bb e3 1a .[.+=........... 01e0 39 ff b0 21 9c 0a bd 79 b3 9c c0 52 b6 11 51 1f 9..!...y...R..Q. 01f0 33 dd 25 5f 05 6f d6 23 5b 43 f0 9d 5b 7a 71 6d 3.%_.o.#[C..[zqm 0200 e8 ee 50 3e 98 66 fa 09 59 0e b1 c2 0e 7c 13 f6 ..P>.f..Y....|.. 0210 b2 a5 a8 92 68 2c 32 60 b4 64 8a b3 6f d8 53 da ....h,2`.d..o.S. 0220 cb 8f 71 a9 9e 97 dc 74 c6 39 06 49 85 ca e2 59 ..q....t.9.I...Y 0230 09 cb 47 f0 72 58 a7 f0 bc b3 cf 4b f5 67 fb d1 ..G.rX.....K.g.. 0240 a1 6f be 8a 18 ca ad 66 17 b2 aa b8 2c a9 ff d6 .o.....f....,... 0250 c4 65 eb 9b 37 69 b3 bc 13 a8 2c b2 c2 4d 90 a2 .e..7i....,..M.. 0260 fe 2f 60 5c 9c 36 a3 9a 79 80 5c b7 2a 9a dc 9f ./`\.6..y.\.*... 0270 db ab 38 d8 14 20 90 ad 9d 1d 91 2a 4f b6 88 1e ..8.. .....*O... 0280 78 5e 89 42 08 50 0b f7 54 c3 d6 7b eb 1b 7b 0a x^.B.P..T..{..{. 0290 3d 99 8b a0 58 3c 0e e1 1a 13 6a 9c d0 31 39 67 =...X<....j..19g 02a0 16 e4 ad f9 91 2c 04 93 7e 63 f8 a4 c9 e4 3e 52 .....,..~c....>R 02b0 e3 cb 1a ba c3 6d 4d d7 18 34 d8 ef 74 9f 01 67 .....mM..4..t..g 02c0 c0 21 76 49 4a bc 25 5d 19 a9 5f a0 f9 f9 77 fa .!vIJ.%].._...w. 02d0 d5 6a 12 41 32 a6 9d 37 dd 69 46 cd 21 a7 61 8c .j.A2..7.iF.!.a. 02e0 8f ce e4 ee fc 41 de 76 4b 37 96 ca 24 9e be ab .....A.vK7..$... 02f0 ef ce 64 aa 29 c4 3f 79 11 e3 d3 9a e7 28 f0 47 ..d.).?y.....(.G 0300 f7 17 6d 68 15 31 ec 19 9d 82 0f a7 04 29 01 6b ..mh.1.......).k 0310 ff 6a d7 26 6c f4 8c ac 31 c7 c7 13 a5 4c c5 0a .j.&l...1....L.. 0320 5a 45 43 ff 34 a9 9d 50 d3 9f 36 90 11 8c f5 05 ZEC.4..P..6..... 0330 ff 6b 48 16 91 5d 92 f1 30 24 12 1c 12 26 43 ef .kH..]..0$...&C. 0340 71 c0 24 d7 13 1f f3 29 e4 eb 3e 3a f1 0a 3d 83 q.$....)..>:..=. 0350 ac fd 04 9a 3d 0c 9f 7b 18 f2 17 b2 f2 08 e8 ce ....=..{........ 0360 cc 4e c7 d7 07 9c 4c d4 0b 9f 0f 80 60 6f e4 9e .N....L.....`o.. 0370 94 82 24 82 37 4e c2 c9 9a 89 40 e2 65 39 4d 6a [email protected] 0380 58 4e 5f 4d 29 93 de 24 29 b9 17 69 f1 37 ee 0f XN_M)..$)..i.7.. 0390 b3 18 f8 b2 16 d7 4d d6 b7 89 34 6a 6f f2 51 b6 ......M...4jo.Q. 03a0 8d e2 c5 0c 43 d2 d3 56 2d 06 a3 db a5 d7 2b 64 ....C..V-.....+d 03b0 7b 64 1a 19 85 61 ee a6 c4 c6 b8 9d 46 b3 d9 df {d...a......F... 03c0 8f a2 f5 98 46 0c 25 41 d7 dc cc 6f 19 9a a0 70 ....F.%A...o...p 03d0 0a 73 17 1b 5f 24 9e bd 93 e5 ce 05 e8 9c a4 55 .s.._$.........U 03e0 74 fe 9a 59 1b 3a 51 34 4e 10 91 ee 21 45 99 bb t..Y.:Q4N...!E.. 03f0 9f 10 0e d7 14 c1 42 5f 63 10 4b d9 45 b2 97 2a ......B_c.K.E..* 0400 90 52 b7 07 cc 29 45 34 05 8f aa 04 89 25 27 23 .R...)E4.....%'# 0410 4b 64 c4 4b ec 80 72 3e 09 6e 01 1f 2c 80 aa 80 Kd.K..r>.n..,... 0420 c4 25 a8 73 64 68 68 4b e5 7c bd 71 55 85 13 5f .%.sdhhK.|.qU.._ 0430 3f cf d0 4f 9f d2 ae 75 7d 8c 10 39 f7 49 87 99 ?..O...u}..9.I.. 0440 31 60 42 a5 9f 43 77 26 2f 12 f3 ab ed 88 20 df 1`B..Cw&/..... . 0450 07 eb f2 af 98 6c 78 91 b2 74 95 1d 82 39 97 13 .....lx..t...9.. 0460 b1 47 ef c4 70 ba 01 94 43 9e 5b ac 30 eb 92 3c .G..p...C.[.0..< 0470 31 00 68 93 39 51 54 a2 86 9b 8f 31 51 25 a1 0c 1.h.9QT....1Q%.. 0480 eb 29 61 56 c4 ac 8c 46 e4 7b ad 78 41 fe 78 5c .)aV...F.{.xA.x\ 0490 e6 ec 5f e0 e3 98 6c 25 91 15 4f cf 6b 2e 3c 07 .._...l%..O.k.<. 04a0 a0 f9 15 b2 19 44 64 d4 44 bf a1 6d 23 06 c3 30 .....Dd.D..m#..0 04b0 57 08 5d a8 4f 45 59 61 58 ca fd 74 8b b4 de 50 W.].OEYaX..t...P 04c0 49 d2 54 0c 0c 46 86 86 a9 ea 09 82 9b 0f 97 a0 I.T..F.......... 04d0 21 0b e4 a1 a5 7c ce 3f b5 36 c8 70 7a 75 a9 e1 !....|.?.6.pzu.. 04e0 5b 6e 1d e1 1a a9 1f 67 94 2b 89 4d b8 f9 d0 40 [n.....g.+.M...@ 04f0 d5 41 2e 66 69 59 20 e2 96 15 28 53 0d 8f 33 b2 .A.fiY ...(S..3. 0500 3e de cd 01 a5 2f 8d 2d 0f fa 90 69 f6 67 3d 99 >..../.-...i.g=. 0510 62 31 bc 97 69 80 69 17 2f bf bc b8 f4 d4 76 87 b1..i.i./.....v. 0520 99 72 7f 0a 2d 18 49 49 80 7f 42 f6 3f a9 59 e1 .r..-.II..B.?.Y. 0530 be bb 5c 6f f1 10 ae 1f 44 3d 29 38 2e 2c e5 4d ..\o....D=)8.,.M 0540 e7 bb df 1b 7b a6 21 e3 47 c0 9e 49 b4 a0 54 f1 ....{.!.G..I..T. 0550 35 ff 5f a7 25 03 2c b7 03 5e ab 1c b9 08 24 89 5._.%.,..^....$. 0560 43 76 28 3f a1 96 b0 64 44 84 1a 79 59 04 47 ad Cv(?...dD..yY.G. 0570 75 e8 1e c3 fe 4d b5 bd d8 35 fc 18 37 09 48 2f u....M...5..7.H/ 0580 42 c6 27 04 f6 4e 85 88 fe a8 18 63 60 15 4c 80 B.'..N.....c`.L. 0590 9d 4a 78 8a bb cc db 11 c1 f2 cd fb 51 6a 59 37 .Jx.........QjY7 05a0 51 54 4d 9e b3 1d 2a b5 QTM...*. No. Time Source Destination Protocol Length Info 113 0.842368 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=1449 Ack=1 Win=1002 Len=1448 TSval=535459 TSecr=727447 Frame 113: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 1449, Ack: 1, Len: 1448 Data (1448 bytes) 0000 a4 91 65 fb 5c a4 74 70 44 41 fc 6d 57 ca 64 c1 ..e.\.tpDA.mW.d. 0010 c6 d8 05 b9 90 21 fe 6d 79 44 9a 18 bf d7 76 de .....!.myD....v. 0020 82 85 6c 1b d7 7d 69 a3 bd 8f 9a c7 a9 32 ae d2 ..l..}i......2.. 0030 f1 2b 10 d6 7b 06 0a 70 de 18 10 e1 78 d8 79 64 .+..{..p....x.yd 0040 34 9d 9e 13 ae 25 d5 4f bb 06 f3 86 57 14 61 e7 4....%.O....W.a. 0050 52 af df 59 24 53 5d 75 df 64 fc 17 77 b4 56 d2 R..Y$S]u.d..w.V. 0060 a4 bc cc 1d 2a ed f3 0c 20 99 47 e5 75 08 80 b2 ....*... .G.u... 0070 6e 73 29 ad 06 e4 2c 73 00 6c 5e aa 4d a9 44 8a ns)...,s.l^.M.D. 0080 63 3e 87 34 4d 10 40 fd 0e 37 69 fd 96 f0 30 77 c>[email protected] 0090 ef c7 85 a8 9b 32 2c 5b 22 28 68 02 cc 9f b9 66 .....2,["(h....f 00a0 ad 76 bf 3b c3 56 5b 5e bc b4 31 11 69 55 b1 56 .v.;.V[^..1.iU.V 00b0 bc 55 5f 8b 4c e3 62 11 01 8d fd 2a c8 79 38 c7 .U_.L.b....*.y8. 00c0 fe 31 f9 69 7a 3b 55 14 96 22 fc 69 b2 93 16 2f .1.iz;U..".i.../ 00d0 3e 16 d5 4a 5a 71 12 45 0c bd cd 1f c4 ea ae 7c >..JZq.E.......| 00e0 24 a9 27 22 23 55 8b 55 4e e6 64 79 b3 da 4a e8 $.'"#U.UN.dy..J. 00f0 fc 6c 88 2a 62 3b b8 c0 1d 0e b1 d3 d2 70 d7 c7 .l.*b;.......p.. 0100 39 dd 09 9f 64 83 3b c2 b5 78 b0 ac 91 d5 61 56 9...d.;..x....aV 0110 74 74 ad 49 a4 50 b6 40 d9 aa 01 19 67 79 9a 31 [email protected] 0120 53 9d e4 d5 77 b3 18 b3 61 dd 96 49 ed 85 08 35 S...w...a..I...5 0130 9b 9e 78 76 06 de 57 8d 7a e8 93 8f 05 ae 69 48 ..xv..W.z.....iH 0140 02 b3 5e 55 33 6a ae 4a 96 43 5a b4 4e 97 88 55 ..^U3j.J.CZ.N..U 0150 a1 11 7e b5 76 5b 90 d2 4e 12 7f c9 40 d9 e4 19 ..~.v[..N...@... 0160 5e 6f 4f 21 6b 3d 4e 13 f1 42 5f 5b 70 dc db ce ^oO!k=N..B_[p... 0170 e2 50 c2 cf 7b e2 14 75 6d 0f c5 06 49 e2 d9 9a .P..{..um...I... 0180 9d e9 ed b8 f5 68 8c f7 a3 24 80 ad ae ec e5 0e .....h...$...... 0190 11 d7 0c b1 9e 97 08 27 c0 40 e8 31 a9 6f 7b 59 .......'[email protected]{Y 01a0 f5 14 1b 41 e4 fa c1 4c 58 44 34 d9 cf 13 90 e6 ...A...LXD4..... 01b0 0e fd b7 a2 3c aa bc ed 09 59 00 28 77 5a 4d 43 ....<....Y.(wZMC 01c0 49 89 67 93 fc 41 87 c8 af 65 52 04 8b f7 79 b6 I.g..A...eR...y. 01d0 35 62 79 c1 02 29 7c 0c 37 28 c7 de a4 33 19 9f 5by..)|.7(...3.. 01e0 c2 ec cf 8c 23 15 d6 aa 1d 8b fb fd bb 95 63 cf ....#.........c. 01f0 22 6d 98 bf 78 c3 9a e8 6c 39 b2 63 57 e4 43 32 "m..x...l9.cW.C2 0200 89 6a 75 25 46 b7 85 be 77 62 84 a1 60 6a df be .ju%F...wb..`j.. 0210 da 68 30 3c cb 88 6f 9e d1 b7 f8 d1 00 59 25 fa .h0<..o......Y%. 0220 c9 b2 6a ab fb f4 f6 d0 3e 2f 92 ea ec 1b 90 34 ..j.....>/.....4 0230 62 44 e4 01 6e 83 fa 1a c8 c1 2f bb ae e0 45 84 bD..n...../...E. 0240 a2 c6 8d 56 dd 55 87 20 92 5d fe d8 72 5b b5 d5 ...V.U. .]..r[.. 0250 5c b5 ef 50 cd 92 18 1a 03 92 c6 64 23 e9 11 c7 \..P.......d#... 0260 d2 31 d4 00 8a bc 59 02 c4 2d 50 58 58 db 73 56 .1....Y..-PXX.sV 0270 94 79 13 05 8e b7 79 ed 89 ce f1 ed 04 77 7e 99 .y....y......w~. 0280 33 9b 8b 08 2c 5e 01 21 be 03 bb 64 59 40 d6 1f 3...,^.!...dY@.. 0290 60 8e d2 1e 74 82 9a 57 21 45 97 62 e1 79 ed 71 `...t..W!E.b.y.q 02a0 b3 12 d8 4a 5b 1d aa ec bd 6d 9e 3c 55 cd 5e da ...J[....m.<U.^. 02b0 a7 bd 3c c5 41 3e e5 37 51 30 2e e2 48 8c 4a 4b ..<.A>.7Q0..H.JK 02c0 f5 d4 97 d5 90 76 f3 31 99 17 65 22 16 8a 09 3c .....v.1..e"...< 02d0 14 7b 02 1b d1 dd 2c 90 e1 39 7c ca d6 e9 00 8c .{....,..9|..... 02e0 fa 6d 27 06 29 2b b1 f3 5b 8f ea fe 55 b0 ab c5 .m'.)+..[...U... 02f0 fe 90 09 29 2c ae 1f c7 cd 91 7a 89 2b 9d 05 c9 ...),.....z.+... 0300 fd 9a be 3f 65 4d a0 c4 25 70 90 2e d3 bc 9f de ...?eM..%p...... 0310 4a 8a 52 5f 67 62 53 dc 8d 66 41 c7 83 34 c6 0c J.R_gbS..fA..4.. 0320 ce 99 74 22 24 1b 7d 9d b2 79 23 69 10 5f 1d 19 ..t"$.}..y#i._.. 0330 cb 3a 54 c1 1f 4d 4d 62 f7 9e c8 c9 89 85 be fb .:T..MMb........ 0340 0b 47 a1 15 76 9f 1b d5 9e 47 92 6d f6 29 25 98 .G..v....G.m.)%. 0350 53 47 92 5f ea 69 48 0a 47 ea 67 a5 56 99 7e 13 SG._.iH.G.g.V.~. 0360 bd 08 2c 7b 72 dd 29 07 06 e0 32 9a 2f 02 d0 35 ..,{r.)...2./..5 0370 be 95 08 99 54 7a 4a cc 9c 0f 34 c5 e5 6b 8d 07 ....TzJ...4..k.. 0380 a8 1b c9 22 2b 74 19 92 c4 d6 e9 33 83 b4 1d 2e ..."+t.....3.... 0390 22 98 d7 3f 8c 45 4f 13 39 dd 88 e0 96 56 b0 88 "..?.EO.9....V.. 03a0 0f 6c 7b a0 a8 9d 62 a1 52 5f bd 75 8e da 66 00 .l{...b.R_.u..f. 03b0 c5 ff 17 e0 35 2a 66 54 5c 07 0c 54 78 2c 24 59 ....5*fT\..Tx,$Y 03c0 f3 7b a3 10 ee 82 d5 69 07 34 42 cb 65 5c dc 58 .{.....i.4B.e\.X 03d0 73 d2 e7 c5 1e 1d c4 19 6a 73 0b 9f 51 84 d6 fc s.......js..Q... 03e0 9f 39 b7 81 68 b8 09 8f 08 49 c7 86 bd 13 83 ea .9..h....I...... 03f0 48 6d 83 7e a4 66 c8 e1 8a 1b 82 2f 19 0c 80 97 Hm.~.f...../.... 0400 1b 64 c8 88 0b 7c 0b 5a 1f 3d 26 d9 45 e2 14 08 .d...|.Z.=&.E... 0410 6c df 29 f0 2d db 55 ec 89 7e ce e9 64 94 e5 4b l.).-.U..~..d..K 0420 e1 a7 80 09 89 6d 8a a8 09 cc 81 77 ae 0b c3 4a .....m.....w...J 0430 6e 05 63 64 f6 0a 89 cf 34 dd 9d 10 d1 45 52 f3 n.cd....4....ER. 0440 65 8a f8 86 c9 18 3f 23 36 bf 56 15 9e 9b da c5 e.....?#6.V..... 0450 0e 00 1e 12 1c fb 59 49 be 74 7f e3 75 fe 28 c8 ......YI.t..u.(. 0460 fe b1 db d4 9d 99 41 b6 68 08 80 e4 9a 5a db 69 ......A.h....Z.i 0470 83 61 4e b5 b4 ed 32 0c be ed ff 46 6c 83 da 24 .aN...2....Fl..$ 0480 af d3 7b 27 3f ef 60 a1 93 43 52 17 ac d2 e1 0e ..{'?.`..CR..... 0490 ae 32 01 bc 15 1a 2c f3 15 11 80 15 70 56 e1 df .2....,.....pV.. 04a0 76 a5 91 55 76 f3 02 26 45 ef 24 16 ed 7c 60 b5 v..Uv..&E.$..|`. 04b0 ac e4 3b fa de 21 55 75 e1 7f 54 dd cf 72 4c c9 ..;..!Uu..T..rL. 04c0 71 62 c7 68 05 49 86 3e c0 6b 3c bd 0a a9 c3 4a qb.h.I.>.k<....J 04d0 0d 02 9a 23 f4 aa 7b 55 11 d2 71 10 64 3b c6 cd ...#..{U..q.d;.. 04e0 e9 7e 38 de c8 4a 22 ae 5e 17 15 17 54 9b c4 55 .~8..J".^...T..U 04f0 db 8f af 21 22 a7 bd 17 f9 26 3e 99 6d 32 ab 39 ...!"....&>.m2.9 0500 69 80 08 75 58 5a c1 7e 6d a6 a1 d4 34 e1 4c 2c i..uXZ.~m...4.L, 0510 7a 18 a5 16 51 74 ca 64 e7 58 a9 c8 71 57 04 aa z...Qt.d.X..qW.. 0520 bd c6 17 4b 52 f2 02 46 8c fe 9f 92 1b 65 d4 bf ...KR..F.....e.. 0530 dc ae f6 ad 6d f6 fd e3 19 b7 35 50 70 85 9d 3d ....m.....5Pp..= 0540 99 36 b7 cc 0f 9c 9f a6 5b db 03 65 aa 32 cc 74 .6......[..e.2.t 0550 27 ca 11 f7 5e 5d 93 b6 e8 7a 2b 33 86 03 b8 0e '...^]...z+3.... 0560 85 2b f1 98 f3 a5 1c 84 27 53 7a 0d d5 45 8f 65 .+......'Sz..E.e 0570 e0 f3 76 4e 57 4f cf b9 ed d3 42 10 2a ac ff 19 ..vNWO....B.*... 0580 26 4c f4 ea 20 9b be a5 aa 07 9d 28 5d 06 8f 2b &L.. ......(]..+ 0590 3c 32 f3 74 66 d5 a7 0c 6c d1 01 09 ec bf 38 0f <2.tf...l.....8. 05a0 03 62 8a 02 e1 72 a3 9c .b...r.. No. Time Source Destination Protocol Length Info 114 0.842455 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=2897 Ack=1 Win=1002 Len=1448 TSval=535459 TSecr=727447 Frame 114: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 2897, Ack: 1, Len: 1448 Data (1448 bytes) 0000 c9 ee c5 4a 6f f3 8a ca b6 0b 0a 6d 73 e5 3c a1 ...Jo......ms.<. 0010 f9 98 72 d9 42 35 06 63 5e 4c 77 1b 1d e1 da 2b ..r.B5.c^Lw....+ 0020 98 1a 2d 2e 61 bd 1a 97 da 20 be 09 b7 d4 df 95 ..-.a.... ...... 0030 1c ff 54 51 53 bc ca 63 84 90 95 d0 de d4 57 02 ..TQS..c......W. 0040 47 85 6f 53 a0 dc de 8d 9e 3c 82 34 5b 68 bc df G.oS.....<.4[h.. 0050 e5 d3 ed 24 64 88 d4 72 2c 19 9e 24 54 ae c8 9b ...$d..r,..$T... 0060 40 ad 1b 84 af c4 64 55 ae 92 b9 ec 74 f3 d1 8e @.....dU....t... 0070 c4 c6 8f 14 91 66 7a 4b 54 26 75 cc 5d 36 89 78 .....fzKT&u.]6.x 0080 29 5c d7 cb 32 ed 0d 60 8d 4b 62 de 57 4a ec 95 )\..2..`.Kb.WJ.. 0090 08 96 0d 63 9a e2 9b 44 9c 2a d9 46 ac 50 bc 38 ...c...D.*.F.P.8 00a0 9b b5 ee d2 67 58 76 5b db 75 8c 71 21 fb 47 c8 ....gXv[.u.q!.G. 00b0 42 cc 1e b2 91 3e 18 ad ee 75 79 e6 2b b3 65 1c B....>...uy.+.e. 00c0 73 28 c5 5a 2e c5 32 5b 8c 47 d7 6b 25 55 a1 b0 s(.Z..2[.G.k%U.. 00d0 4c 9a 66 c5 7f 26 8c 9b cb 84 94 70 6a 57 bb 2f L.f..&.....pjW./ 00e0 5c f0 f3 7a dd 55 37 86 a4 e4 0d 84 87 83 fa 4c \..z.U7........L 00f0 f3 54 b5 e2 59 3b 8a 9c 47 58 bb d4 5c 8f 70 39 .T..Y;..GX..\.p9 0100 ac 21 00 60 82 38 57 2f 36 dc 27 65 dd 1b 7c c5 .!.`.8W/6.'e..|. 0110 52 7c 1c d4 68 b9 eb 49 43 db 21 11 c6 97 29 f1 R|..h..IC.!...). 0120 5a e5 99 71 a8 d6 90 e2 31 e3 42 dd 4c f3 37 38 Z..q....1.B.L.78 0130 82 80 d2 c4 4b d5 fa e0 b6 be a5 fe cc 28 bf a6 ....K........(.. 0140 0a e0 c2 5f 9b 5d 8a 19 c6 bd 6d d3 d4 07 7e 70 ..._.]....m...~p 0150 1d f3 91 ba 87 eb 2b 71 62 96 53 1c 94 90 03 62 ......+qb.S....b 0160 37 6b 0f 84 77 81 9c a1 96 03 c7 1b 6f 40 e6 07 7k..w.......o@.. 0170 7e 7c 02 e7 6e 95 72 b6 09 d2 0c f5 f0 51 76 5f ~|..n.r......Qv_ 0180 68 39 39 0c e2 a9 b7 b2 f5 e5 39 3d 75 fb 31 05 h99.......9=u.1. 0190 fb f9 ce 7a dd 9d 03 be 57 df b5 5e 67 cf af 43 ...z....W..^g..C 01a0 c0 78 14 b3 c6 d2 9d 2c 13 48 b3 1b 54 62 bf 82 .x.....,.H..Tb.. 01b0 be 5b 62 01 c5 24 6e 9d 52 cf 73 18 be 92 63 68 .[b..$n.R.s...ch 01c0 f3 17 22 e9 05 fc 38 f2 61 85 2c d8 37 45 29 7f .."...8.a.,.7E). 01d0 99 4a f6 dc 38 2e f5 bc 53 07 9b 99 78 08 39 65 .J..8...S...x.9e 01e0 91 36 88 aa 5b e7 31 a1 fc 82 98 26 c6 8f cd 73 .6..[.1....&...s 01f0 a9 88 4e 6b 24 18 a6 9b 91 ab 22 5f ab aa d6 d0 ..Nk$....."_.... 0200 91 59 97 17 d8 fb 46 ec e4 31 40 a2 db 4b c2 73 [email protected] 0210 a5 27 f6 d5 f5 86 1d 2a 3f de 52 8a ac 7a 7f 1f .'.....*?.R..z.. 0220 f8 57 80 39 8f 2d ef 62 fe a3 0c 4d f0 2a a7 f8 .W.9.-.b...M.*.. 0230 96 d0 99 bd 73 01 51 e3 56 ad 6b 71 4e 2d 43 3d ....s.Q.V.kqN-C= 0240 23 fc ef c3 ce 0f 69 60 a0 0e c1 94 6d 72 a8 88 #.....i`....mr.. 0250 68 df 1c a7 ce ad db 53 74 7b 17 4e f8 5f 91 46 h......St{.N._.F 0260 ee 80 bf 79 ad 12 65 67 ca b1 5b 0c d8 58 7c d9 ...y..eg..[..X|. 0270 10 50 8b c2 3d ea 19 fe 06 dc e0 b3 0b ba 79 49 .P..=.........yI 0280 53 dd c4 1c 72 81 fe ac 5d cd ec b7 7a 94 ae a3 S...r...]...z... 0290 40 22 3e 94 fd 9b 1a ab 48 f4 d5 2a e2 dd 9f 29 @">.....H..*...) 02a0 30 5d 89 dd 5f 92 fb 5d a4 85 c9 c3 c8 07 7e d1 0].._..]......~. 02b0 b8 e8 73 35 84 d6 d7 33 95 c3 dd 8b 9e 54 62 67 ..s5...3.....Tbg 02c0 1a f2 0d 66 b4 3a 79 d1 0d 73 5f 51 1b 42 2f 01 ...f.:y..s_Q.B/. 02d0 e1 05 0b c9 5d e8 f0 ed b0 f7 f6 3c 8b f0 7a fa ....]......<..z. 02e0 63 a1 d0 2b 20 34 88 55 6a e4 e9 3a f4 f4 95 2e c..+ 4.Uj..:.... 02f0 f4 b9 cf 7d f4 a7 ba e2 37 b6 43 c1 4b c1 9d 55 ...}....7.C.K..U 0300 6e 6b 10 e0 a5 8d 9f ad 82 a5 b5 9f 1e a7 cb 4b nk.............K 0310 40 50 20 fc 58 6d 5b 09 1f 70 9a 7b 19 b4 e9 44 @P .Xm[..p.{...D 0320 de 55 ea 78 08 95 af 48 16 11 c6 e6 9a da 38 c0 .U.x...H......8. 0330 32 61 4e 6e a1 27 b8 b6 c4 1d 92 e7 53 fd 90 c9 2aNn.'......S... 0340 f1 6e dd 10 6d d7 b2 fc da 7a 5d 2f d2 b0 86 39 .n..m....z]/...9 0350 ea 3f 5c da d2 ae a3 f5 11 08 f1 12 d4 71 ef 25 .?\..........q.% 0360 f5 7a 01 9f 54 56 62 fe 8f 9c 87 cc 46 52 b2 87 .z..TVb.....FR.. 0370 18 a9 e2 90 ce ea 5a 86 bc 35 99 d1 8f c3 a7 7f ......Z..5...... 0380 93 b0 d9 33 ea 62 4f a2 f4 40 61 b7 95 e0 67 17 [email protected]. 0390 ab 6e 27 7e 81 9b 40 39 2a c7 f9 4b 70 1f 57 4c .n'~..@9*..Kp.WL 03a0 cf 3c 35 3b 1f 8d e0 f8 b4 e8 60 56 c5 6d e2 7f .<5;......`V.m.. 03b0 ea 12 84 c6 5e ca 69 bf 2a 49 d4 b4 e4 d5 71 51 ....^.i.*I....qQ 03c0 11 3b 8a 67 43 35 30 8e 44 94 74 f5 e0 94 02 bb .;.gC50.D.t..... 03d0 2e 86 0a 6d 03 98 b9 fa e1 2d ed a8 bd 9d 37 bf ...m.....-....7. 03e0 b8 d7 05 18 d0 6b 25 1e e6 a5 44 58 45 5e 7e d5 .....k%...DXE^~. 03f0 08 3d fd 2f 27 50 d9 78 69 87 82 a5 76 8f 12 32 .=./'P.xi...v..2 0400 93 70 de 0d 6a 7d 1a 7f f4 bd f1 31 7c 59 8f cc .p..j}.....1|Y.. 0410 0b 5c 99 94 49 34 d4 58 33 9c 16 fc 91 d0 01 26 .\..I4.X3......& 0420 9d 6d ed 49 c5 24 b7 40 25 d0 aa 89 00 49 ed 1e .m.I.$.@%....I.. 0430 cc e5 aa db df 3f 60 82 27 d9 77 77 df 50 4a 0c .....?`.'.ww.PJ. 0440 42 1d d0 26 c6 b0 2d 91 2c e8 db 4e 4a f9 15 fc B..&..-.,..NJ... 0450 aa 1e ee be ec 02 e6 ed d5 45 01 0d 98 c5 57 3e .........E....W> 0460 cd a7 7f b8 4e fd c7 d7 77 88 b6 81 32 1a c8 dd ....N...w...2... 0470 5c 35 b6 aa 63 de b5 92 9e a9 ed ad a5 3a e6 0e \5..c........:.. 0480 1e 4b 2a cb c0 17 ad 6e ef 31 f9 68 74 8b 46 8e .K*....n.1.ht.F. 0490 6f 20 8c c6 08 75 69 37 4f 3c 46 7f b4 c2 9d f5 o ...ui7O<F..... 04a0 c5 97 a0 7d d9 1e 20 a4 c4 a0 48 5f 39 d7 e2 d0 ...}.. ...H_9... 04b0 7b 10 9b 1d db 48 b3 d5 35 92 0c 6f 17 14 83 78 {....H..5..o...x 04c0 c4 2b 0c 1d 7a 0d f0 6e 25 41 d0 82 81 b8 2a f7 .+..z..n%A....*. 04d0 ee 52 35 8b 22 d8 45 79 11 25 a4 54 ac 1b 8f 91 .R5.".Ey.%.T.... 04e0 bb 15 f6 e6 74 c8 8a f7 23 94 c2 86 05 2e be b5 ....t...#....... 04f0 51 ff c9 40 a0 b8 5b 70 32 3a 14 8a b5 4c 53 5b Q..@..[p2:...LS[ 0500 ac 75 45 d2 af af 12 29 bb c9 b5 e5 89 f2 a4 06 .uE....)........ 0510 2a 58 fb 95 e2 aa 30 ba 4d 5e 03 34 56 e4 9a b9 *X....0.M^.4V... 0520 e7 88 07 a3 38 a7 bf a6 90 d4 4c cc 3f 8f 10 8d ....8.....L.?... 0530 30 da 90 5d f6 47 af f7 47 9d 3f 50 ec 80 1b 2b 0..].G..G.?P...+ 0540 5a 2d 18 c1 0b 4c 87 60 ae ff 66 65 d9 bd 66 90 Z-...L.`..fe..f. 0550 6e 4d 6f c1 de ea 8b f8 f8 f2 9c 56 df ca 43 f8 nMo........V..C. 0560 0b 04 80 22 e7 66 38 2b 23 ed 9c 48 5e f3 c4 91 ...".f8+#..H^... 0570 f9 fe 76 d2 02 2c 4a 37 ec 86 a4 5a aa 85 18 76 ..v..,J7...Z...v 0580 1d eb bc 5f 2b 22 5c 1d 50 4c 34 58 67 fd 88 e0 ..._+"\.PL4Xg... 0590 a2 02 c2 71 0c 90 f0 0d 65 84 e8 5f f3 97 98 42 ...q....e.._...B 05a0 6c 12 05 de 36 96 b4 f1 l...6... No. Time Source Destination Protocol Length Info 115 0.842525 192.168.10.1 192.168.10.245 Syslog 277 LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 115: 277 bytes on wire (2216 bits), 277 bytes captured (2216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPEL No. Time Source Destination Protocol Length Info 116 0.842575 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=1 Ack=4345 Win=65535 Len=0 TSval=727491 TSecr=535459 Frame 116: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1, Ack: 4345, Len: 0 No. Time Source Destination Protocol Length Info 117 0.842664 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=4345 Ack=1 Win=1002 Len=1448 TSval=535459 TSecr=727491 Frame 117: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 4345, Ack: 1, Len: 1448 Data (1448 bytes) 0000 32 bc 90 37 5b 65 17 ab 60 af 0a 4b 60 54 a3 ce 2..7[e..`..K`T.. 0010 9f d0 77 41 88 55 45 53 c1 a6 35 22 0a fa bc b1 ..wA.UES..5".... 0020 06 b5 ed 21 c7 b9 17 d4 b4 02 3e 47 c2 14 e7 af ...!......>G.... 0030 84 7b 56 e7 af 99 dd 8c a2 d2 65 f6 30 63 34 1b .{V.......e.0c4. 0040 a8 5c af 88 e8 fe ec d4 9c b9 47 aa f0 e4 94 67 .\........G....g 0050 86 e5 18 fc e4 11 f2 ca c1 03 71 21 45 8b 04 99 ..........q!E... 0060 15 6c 04 78 5b f2 1d 9c 92 a5 cc 9c 6e f7 82 f6 .l.x[.......n... 0070 92 63 ba cb be 12 2f 9f 93 9f 78 57 b3 fd bb cf .c..../...xW.... 0080 61 66 77 70 ee eb e1 af b9 60 25 c2 c1 9a 41 bb afwp.....`%...A. 0090 cf 3f 40 fb 8c ec a8 e4 ad fd dd 5f 23 60 0b cd .?@........_#`.. 00a0 8f ee 83 82 0a d5 cd 13 69 ce 12 20 ef 4b 98 b3 ........i.. .K.. 00b0 7c ca a1 e1 4b 1e 1d 84 64 4c eb 1e 20 83 75 33 |...K...dL.. .u3 00c0 75 25 61 6b 9f 5c 73 7c b9 d6 75 72 12 09 21 cb u%ak.\s|..ur..!. 00d0 dc 82 d4 9a 1e 7a 77 a0 27 cb d9 20 97 d2 e9 1c .....zw.'.. .... 00e0 ec ad 4b 56 5a 5c c4 6d f8 e5 c7 ad c1 fa 49 d2 ..KVZ\.m......I. 00f0 dd 22 5c 5b 29 47 3c 87 32 47 2b 0b 3a 90 cf 4e ."\[)G<.2G+.:..N 0100 a0 cc 8d 93 78 9e ca dd 74 49 71 3b c6 3f 45 f9 ....x...tIq;.?E. 0110 33 e5 71 47 d3 99 ee cb 98 38 1e ca 52 68 24 81 3.qG.....8..Rh$. 0120 49 30 3f 32 8f 47 4d b6 f0 74 23 be c1 4c 71 26 I0?2.GM..t#..Lq& 0130 24 e6 49 8a d4 de 89 83 f5 10 db 03 3c dd 4a b5 $.I.........<.J. 0140 ee e5 0e 8d 3a f1 3b d6 38 08 03 01 dd 08 84 98 ....:.;.8....... 0150 e8 40 b0 bb 2b 8d 24 49 b0 fa 30 f5 17 a5 b4 eb .@..+.$I..0..... 0160 3f 4b eb af 69 e8 cd 82 16 4d 84 66 80 d9 b0 23 ?K..i....M.f...# 0170 f3 08 be 5e 9b 94 5f 92 1f c0 41 fc 2c d5 79 ba ...^.._...A.,.y. 0180 69 6a bc bf 04 7c 8f 3f 39 38 f8 5a 6f 8d ea 90 ij...|.?98.Zo... 0190 30 b3 22 85 cb 8f 68 ed c8 b6 2f 0d 26 57 54 3c 0."...h.../.&WT< 01a0 18 01 f0 ad ce 46 f5 27 3f 1d e9 79 68 59 98 4c .....F.'?..yhY.L 01b0 e1 8d 3c 67 67 af 15 7a d3 88 7f 6b 11 3f eb ae ..<gg..z...k.?.. 01c0 63 dc 04 49 46 81 c2 32 0f de 28 b6 00 2c d1 27 c..IF..2..(..,.' 01d0 2f ab da ff 74 a0 c6 51 68 ea 54 40 b4 31 30 b7 /[email protected]. 01e0 b6 21 a2 69 cc a1 0d 7d 5c 4a 8e c5 4d 25 33 4f .!.i...}\J..M%3O 01f0 d3 bd d0 6d 18 6e 1f 06 62 e6 fb 43 7f b7 29 7b ...m.n..b..C..){ 0200 10 a9 a2 5b 86 5d 8e 49 ec 37 9c 2d 08 db 25 54 ...[.].I.7.-..%T 0210 98 ce bb 87 10 17 ab 24 36 05 9e aa 2a be 64 ce .......$6...*.d. 0220 58 48 3e d7 7d 29 9b 83 2d d0 4b af 83 15 54 8c XH>.})..-.K...T. 0230 fd 8a 98 71 98 7f 1c d1 ed 3b 25 27 b4 38 76 0c ...q.....;%'.8v. 0240 4e 1d d9 65 63 18 5e 19 cd bf c3 74 63 44 f7 be N..ec.^....tcD.. 0250 2c 66 b4 73 ba e3 f2 e1 b6 ed cc e9 b6 92 11 b7 ,f.s............ 0260 5c 21 f4 6a 71 07 fa 77 30 15 03 74 84 1b 20 eb \!.jq..w0..t.. . 0270 55 ee c4 ab 3e f0 62 52 e1 c7 48 2c 59 fc 9b 5d U...>.bR..H,Y..] 0280 9e 9a 46 54 af 7f 6b e8 56 16 c3 a0 0b 3a 5a 01 ..FT..k.V....:Z. 0290 27 35 ca 92 b5 e6 88 ff bf ae 72 8b 80 d3 ee 7c '5........r....| 02a0 71 8b d6 15 99 30 03 c2 ed 4e b0 f1 c8 ad c6 32 q....0...N.....2 02b0 f7 0d f3 8f 3a c1 ec 4b c0 7d 0a c2 2b e9 f4 a7 ....:..K.}..+... 02c0 eb 22 5b ad 8c cf b6 00 d1 b9 9b cc 47 28 2d 91 ."[.........G(-. 02d0 b4 34 5f 0a 2e 47 d7 23 34 f4 ce f3 b2 2b ae a9 .4_..G.#4....+.. 02e0 96 f3 b5 0f 14 0f 7f 13 bf ae 96 28 5f 4c da bc ...........(_L.. 02f0 c8 b9 21 f5 1d 26 21 04 69 5e ff 4f 5e 99 3e 2b ..!..&!.i^.O^.>+ 0300 94 0e 48 99 b9 2e 83 36 86 a9 18 e9 ef 10 49 03 ..H....6......I. 0310 d4 75 d7 14 68 69 77 ea b2 c6 ae 75 3c ca 25 ee .u..hiw....u<.%. 0320 d3 a2 f3 51 68 5c dc 5c c0 f0 b1 ea ad 44 ab 5e ...Qh\.\.....D.^ 0330 d8 7d 75 f7 04 fb 2e 12 f6 ca 17 3c 66 14 66 b7 .}u........<f.f. 0340 29 89 bf 2a f3 d2 b4 21 8f 64 1d df 00 96 88 bf )..*...!.d...... 0350 7d 4e 12 54 97 91 75 20 ca aa b6 cd f6 12 a4 b6 }N.T..u ........ 0360 4e 72 6f 3f 6d 94 3f 71 8d ab 40 c7 96 31 8b 25 [email protected].% 0370 da 29 4e 64 07 2f ad 74 81 08 eb b5 ce e1 0f 25 .)Nd./.t.......% 0380 e9 ac 60 fe 6e 8d 79 86 09 f3 55 61 b8 89 cb db ..`.n.y...Ua.... 0390 0e 7f 2f fb c9 73 52 eb 0a 07 a0 41 7c fa e1 42 ../..sR....A|..B 03a0 08 ac ae ec b8 39 e7 ab fe 22 b7 a2 21 a7 e0 59 .....9..."..!..Y 03b0 17 10 d9 3f 6f f8 7b 96 8e 57 f9 f4 ef 67 88 d9 ...?o.{..W...g.. 03c0 f2 15 5d b2 c8 0b 22 67 d3 75 6c 5d a1 bf a7 4f ..]..."g.ul]...O 03d0 3b 69 b1 ef 4b 26 bb 5d 6e 35 09 2c 97 a5 ad 18 ;i..K&.]n5.,.... 03e0 4d c2 65 03 84 65 f1 8c fa 82 23 ea bc fa 7f 12 M.e..e....#..... 03f0 f3 62 65 76 a3 b1 0e 7b e9 22 6b c8 14 85 64 c1 .bev...{."k...d. 0400 d4 80 93 c1 e3 3a 07 64 5a 9d 1a 41 dc db 13 b7 .....:.dZ..A.... 0410 ed ae 1d 33 ec a3 e0 08 92 3d 2f fd 18 90 88 ab ...3.....=/..... 0420 a0 41 0f f1 03 50 b2 ce e9 18 67 17 9c ce 82 9f .A...P....g..... 0430 b3 1d 10 ac 21 3e 07 03 46 82 4d 44 84 91 a2 2b ....!>..F.MD...+ 0440 7c 6d 0c b0 c2 3e f3 08 63 e3 7d 21 e4 a6 dc df |m...>..c.}!.... 0450 7e a8 ab 52 12 d4 58 32 e9 3a 69 7f 7d c6 b9 28 ~..R..X2.:i.}..( 0460 d9 3c 87 cb 87 d8 95 83 87 fc 4c 58 62 de 5c dc .<........LXb.\. 0470 ea 39 8b 6d fb 17 38 93 62 ce 9d 0b 4e 22 b6 0f .9.m..8.b...N".. 0480 ec 0f a9 bf b5 f9 59 19 03 97 e0 fa ff 5c 10 54 ......Y......\.T 0490 fc f4 b9 c4 f9 6d 8a 01 69 03 22 03 fe d7 7b b8 .....m..i."...{. 04a0 78 ab e3 96 0c 99 c4 24 f4 0b f5 a6 6a 9e 89 67 x......$....j..g 04b0 ad 9b 6c f5 1b 80 d0 7f 16 f7 7d 56 2d 08 d4 86 ..l.......}V-... 04c0 77 b8 60 a1 6e 01 ca 74 fb c6 01 b6 38 9d c7 a7 w.`.n..t....8... 04d0 33 d8 61 94 87 92 eb 6f 14 19 48 a3 e1 0d 14 29 3.a....o..H....) 04e0 f5 23 7f 9f a3 1c c6 fc 11 98 5e 7f 65 64 be 0f .#........^.ed.. 04f0 05 ef b6 55 e2 76 cc 74 17 ae b0 ed 56 16 41 6d ...U.v.t....V.Am 0500 45 bf d0 71 90 03 09 cf 87 3c 50 b7 2d 5a d3 13 E..q.....<P.-Z.. 0510 4f 41 d6 f4 4b 66 f2 67 91 11 b2 34 96 67 fe 24 OA..Kf.g...4.g.$ 0520 34 b0 e2 c0 53 d9 38 a5 e1 6d b9 3e 60 c0 2c 65 4...S.8..m.>`.,e 0530 7e 64 fd 7b a6 2e 43 81 b5 2f 94 e4 cd ee 20 f5 ~d.{..C../.... . 0540 8c 8d 72 aa e6 74 1d 04 bc 22 47 4c 0d 8d 89 2d ..r..t..."GL...- 0550 78 99 44 29 56 9c db 41 6e 0f c2 81 0a 50 99 ea x.D)V..An....P.. 0560 4f 18 39 78 ed 92 d7 e1 81 5b 56 06 31 30 72 02 O.9x.....[V.10r. 0570 2b 68 c6 c7 39 41 8c b9 e8 81 14 68 01 5a 4a 54 +h..9A.....h.ZJT 0580 05 49 f5 19 e2 e3 03 a0 2b 19 6f 73 cd 30 32 3d .I......+.os.02= 0590 ca 30 79 af 91 7e a4 6e 2e 28 21 14 eb b8 2b 17 .0y..~.n.(!...+. 05a0 bb c9 04 0e 60 6e 27 e3 ....`n'. No. Time Source Destination Protocol Length Info 118 0.842743 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=5793 Ack=1 Win=1002 Len=1448 TSval=535459 TSecr=727491 Frame 118: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 5793, Ack: 1, Len: 1448 Data (1448 bytes) 0000 48 61 f1 d4 40 ee 13 30 86 d8 48 d5 cb 8a bd 65 [email protected] 0010 5b e3 6f 76 6c e2 84 10 3a 15 5b 76 f1 7d f5 d1 [.ovl...:.[v.}.. 0020 2a 47 26 14 c6 63 59 05 3e 07 bb 84 72 3f 53 78 *G&..cY.>...r?Sx 0030 8a 7a 7b bd fa 0a d4 98 bc 34 1c a4 d9 46 86 2e .z{......4...F.. 0040 84 15 a1 40 2d 50 d7 25 d4 dd 49 e5 e4 84 1d 14 ...@-P.%..I..... 0050 d5 5b 45 94 65 92 cc 11 de 68 cc b6 bf c1 65 df .[E.e....h....e. 0060 1c 8a 7d 09 ea ec 7b b1 b9 b1 7d 81 85 a0 ab 57 ..}...{...}....W 0070 a3 2d cd d9 22 aa 8b 2a 13 ad e5 8a af 3f 54 0d .-.."..*.....?T. 0080 86 e4 ce e0 8d a5 91 8b c5 c1 2b dd c5 90 68 ba ..........+...h. 0090 d9 6e 43 98 32 ba 13 3d ff 87 94 a4 fe b0 f0 86 .nC.2..=........ 00a0 9d 99 63 1d d0 32 27 4b a6 66 4b 45 04 fd 5c ee ..c..2'K.fKE..\. 00b0 9d 71 62 7e 7a d3 50 0e 43 a3 c4 c0 d5 42 a2 d5 .qb~z.P.C....B.. 00c0 58 d8 e3 f9 05 5b ac 23 3e 35 89 c4 8e 23 66 39 X....[.#>5...#f9 00d0 00 3e bd 93 93 84 bf 26 5a 24 1f 33 aa 29 cc dd .>.....&Z$.3.).. 00e0 52 28 57 a7 26 76 87 6c dc fe 6d 70 b6 ef 55 9a R(W.&v.l..mp..U. 00f0 e2 69 8d e7 d5 fb da bd c1 3f e4 0c c7 5d 86 ae .i.......?...].. 0100 25 95 32 c9 42 26 b9 a0 f3 d2 af cf d2 3c d6 cd %.2.B&.......<.. 0110 5f 5d b8 6f 19 d2 fd af fe 55 d0 cd f6 9d 2e d0 _].o.....U...... 0120 f0 d0 cc 31 39 9b e4 96 c9 7b 64 43 39 44 4b 99 ...19....{dC9DK. 0130 21 a7 fe 5d 7c a0 20 03 2c d6 ef 91 bf 55 79 bf !..]|. .,....Uy. 0140 e1 c1 64 e5 4d f4 ea ce 0d 9a c8 f0 b0 b7 42 51 ..d.M.........BQ 0150 6f 0f 41 01 18 81 c5 09 d4 c0 46 26 6a 6c c9 eb o.A.......F&jl.. 0160 31 ec 6b ba db aa f3 45 f1 6e ed a8 b9 5c d2 79 1.k....E.n...\.y 0170 8d 5d d1 bc 8b 16 0e 2f a1 ca 1c 7b 97 35 34 1f .]...../...{.54. 0180 6c da c5 63 9a 1d 4d 23 4e 81 63 e1 ac 44 67 f7 l..c..M#N.c..Dg. 0190 a3 1f b8 4b 16 de 9c 41 d2 bb 9c f4 ff 2f 18 db ...K...A...../.. 01a0 f6 14 e3 14 4e 61 1d 02 67 f5 69 e2 17 e6 64 e6 ....Na..g.i...d. 01b0 d2 9f 10 f3 6d f4 9f 13 91 0f 25 13 16 aa 21 30 ....m.....%...!0 01c0 65 fa 9a 7e 7f 35 3c 34 09 8a 32 fc 53 fd e6 52 e..~.5<4..2.S..R 01d0 95 3d 94 75 9a 98 87 f5 c9 f1 41 4a e7 aa 53 f2 .=.u......AJ..S. 01e0 df 93 b2 c3 89 bd fb 4d e2 5a d7 c3 8e c2 4b e1 .......M.Z....K. 01f0 e8 92 55 5b c9 ae 8e c2 61 ac aa 5d 91 61 a8 43 ..U[....a..].a.C 0200 2f 1d a5 1d e1 97 20 1d 20 d3 5c 8e bf b9 20 c8 /..... . .\... . 0210 77 b8 ce 8c 23 c7 28 ae 10 22 dc f9 71 05 ee 96 w...#.(.."..q... 0220 1d c1 a1 b6 31 f9 1e 35 c3 e7 bc fe 40 5a 21 0f ....1..5....@Z!. 0230 30 5a cb 11 20 76 33 33 51 ca 51 ca 58 81 2c d1 0Z.. v33Q.Q.X.,. 0240 bf ad b3 bd 52 ec fa ae 99 14 bc ec 34 cc e7 52 ....R.......4..R 0250 75 eb 23 7e f9 c2 36 c9 cf 1f 16 27 e2 32 66 b8 u.#~..6....'.2f. 0260 9c 54 59 3a 0c 1c a2 84 be fb 38 01 76 58 32 3b .TY:......8.vX2; 0270 27 24 fe 29 dc 10 e6 fa 57 e0 8f 1b 5d 9b 8a a4 '$.)....W...]... 0280 64 ee d7 1e 66 95 72 12 eb b0 d3 82 b5 c3 b9 e1 d...f.r......... 0290 81 70 b6 4d 80 31 cd 65 d0 76 83 2f 6a fd dd 88 .p.M.1.e.v./j... 02a0 d5 4b fc aa 87 a8 ff 83 3f 98 77 af 34 a4 9a 16 .K......?.w.4... 02b0 5e 1d 63 af 42 2d 1f 2e 1a 10 f2 c4 26 83 51 50 ^.c.B-......&.QP 02c0 97 c3 2e 80 9f 9f 66 a0 6d 9b a6 bf a8 d7 fa 34 ......f.m......4 02d0 09 0c d4 8d 4d 4e 6b e5 25 b3 47 2a 41 c9 a6 c8 ....MNk.%.G*A... 02e0 af 8f d5 b3 62 a8 14 c7 3e 86 4c 7a 3e 8a d7 7a ....b...>.Lz>..z 02f0 b6 54 7b 96 35 75 c8 0b 01 07 a3 0a 15 dd 4c 5a .T{.5u........LZ 0300 b6 7f a1 14 1b bb f5 70 83 af 17 ab a5 03 43 c7 .......p......C. 0310 20 d4 3a b7 0c 80 1a a2 a4 c4 ee 65 00 df e4 a7 .:........e.... 0320 79 6c 74 cf 09 c8 2c 79 1f b9 bb 4a 2c 48 bd 56 ylt...,y...J,H.V 0330 f9 7e 2c d5 5f f1 d5 b8 8a 5b 63 e6 15 1a 7d a9 .~,._....[c...}. 0340 6f b2 6d d6 d7 61 d1 ec 93 44 10 28 14 77 ed a5 o.m..a...D.(.w.. 0350 71 30 28 a9 63 ea 62 82 90 34 23 d4 5c 21 c4 5a q0(.c.b..4#.\!.Z 0360 44 c0 8d b1 30 67 98 d4 a8 66 90 2c 8b 9f ae 83 D...0g...f.,.... 0370 3d a7 be 98 0c 6d 85 69 45 42 93 82 03 84 25 ca =....m.iEB....%. 0380 27 39 58 ba 6d b9 e1 4a 27 30 2a a1 f1 1c 68 da '9X.m..J'0*...h. 0390 b2 a8 15 df 93 a6 13 57 89 6c 57 83 db da de 56 .......W.lW....V 03a0 bd 1c d5 8a bc f6 f0 ec 95 13 6c 4a af 02 de 88 ..........lJ.... 03b0 4d 35 70 66 a9 bd 22 a3 0f 41 ef 8f fd 91 a6 55 M5pf.."..A.....U 03c0 fe 43 de f7 8b 33 3f 57 b7 07 b8 33 10 c7 f4 4c .C...3?W...3...L 03d0 4d 17 ce a0 31 7e 2b 9f 9a 14 2b 71 d4 57 ab d8 M...1~+...+q.W.. 03e0 a3 1a 43 32 f0 c7 b5 39 9f ae f9 de 9f c7 45 06 ..C2...9......E. 03f0 6a 9d d6 50 a7 a3 f5 8b df 75 eb 5e 9f dd 61 cd j..P.....u.^..a. 0400 bb b7 d5 97 2b ab 30 da 5d 7b 32 d5 83 53 8f 89 ....+.0.]{2..S.. 0410 16 9d 73 68 40 b3 2a 90 61 74 8e 53 72 f0 74 ba ..sh@.*.at.Sr.t. 0420 47 7e 79 86 53 d8 1a 23 74 68 4d ac f6 4c 1d 79 G~y.S..#thM..L.y 0430 1b 27 0a 22 86 19 ae 01 37 37 38 46 d8 25 b1 8d .'."....778F.%.. 0440 a2 60 89 e1 7b 56 7b b5 ad f7 0c 1c a2 c6 cd 3c .`..{V{........< 0450 07 74 a4 b9 ab 23 62 a3 45 08 be 73 e5 fc 63 53 .t...#b.E..s..cS 0460 56 bd 5e 59 35 34 6a 4d 0a cf f9 f8 ac 6a 22 d4 V.^Y54jM.....j". 0470 0b 5d 63 72 d5 56 58 2c a3 e5 3a 1c 1c 65 3e 2e .]cr.VX,..:..e>. 0480 9a b7 86 dd a3 7b f5 58 bd b2 67 03 05 a8 26 c8 .....{.X..g...&. 0490 ec 30 4a 2c 2e bc 9c d3 61 82 f9 1b 8d e6 b7 31 .0J,....a......1 04a0 3a 78 a1 74 74 94 fd 69 d2 72 04 25 ae 4f c5 fa :x.tt..i.r.%.O.. 04b0 cc f0 38 94 d3 d6 12 33 2d bf 88 c0 bd 10 1d 7a ..8....3-......z 04c0 49 21 74 71 a7 44 95 3f d9 0b bb c7 7a c1 b8 ba I!tq.D.?....z... 04d0 4c c0 b7 cc 43 c7 11 1e cc ee 39 8a 58 b1 fe 75 L...C.....9.X..u 04e0 46 58 b9 9e 9c a7 d2 17 0b 64 4d e0 77 e2 ce 6a FX.......dM.w..j 04f0 88 d7 4d 0c 64 75 22 7e 09 14 9d 99 c3 b4 d8 77 ..M.du"~.......w 0500 02 4b 9c a2 26 65 fc 8e 99 d6 fd 2b 9a f2 1c 2f .K..&e.....+.../ 0510 75 b9 f2 2a b9 0e 34 47 30 2b 31 38 35 4e 68 db u..*..4G0+185Nh. 0520 51 f1 30 ca cf a9 70 60 5c 03 fc 02 8d f9 11 f8 Q.0...p`\....... 0530 af 57 24 e4 46 4c 0c 50 bb 86 78 cd 95 51 86 63 .W$.FL.P..x..Q.c 0540 9f c1 75 76 ec 9b b9 31 d1 0d 5c 46 33 d8 86 f5 ..uv...1..\F3... 0550 10 2b e2 9a 16 a7 f3 8b 97 87 69 a6 80 fc 35 0d .+........i...5. 0560 20 55 36 74 a2 8a c7 2f c6 f9 21 fc a6 d2 e6 d0 U6t.../..!..... 0570 ec 2a 44 42 25 ad 51 4d 9f 58 49 14 2d 2a 6c 18 .*DB%.QM.XI.-*l. 0580 01 96 87 40 10 eb 77 fc d8 ff da e3 64 e3 80 3c [email protected]..< 0590 77 38 df ae f1 b5 dc 60 a2 33 f9 bc 89 1f b1 4f w8.....`.3.....O 05a0 76 85 1d c9 7d f6 c4 a5 v...}... No. Time Source Destination Protocol Length Info 119 0.842847 192.168.10.1 192.168.10.203 TCP 1295 34433 > cds [PSH, ACK] Seq=7241 Ack=1 Win=1002 Len=1229 TSval=535459 TSecr=727491 Frame 119: 1295 bytes on wire (10360 bits), 1295 bytes captured (10360 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 7241, Ack: 1, Len: 1229 Data (1229 bytes) 0000 ef 9d 69 c0 74 ba b6 5c 87 cc f2 6f 32 23 6f 38 ..i.t..\...o2#o8 0010 88 8f 87 14 44 da aa 4a 4a 4a 43 5c 56 b7 39 1a ....D..JJJC\V.9. 0020 94 21 77 22 e7 0f f2 00 cc 64 f3 73 d2 aa 26 96 .!w".....d.s..&. 0030 92 f6 3c 76 39 ff 52 0c 08 d3 8a 31 a2 e5 04 a5 ..<v9.R....1.... 0040 d4 ea 4a 5c 61 28 91 b5 54 fc 7f 89 42 0c d6 8b ..J\a(..T...B... 0050 b3 51 18 3d 69 14 f4 c5 3b 25 53 36 58 6b 17 fa .Q.=i...;%S6Xk.. 0060 78 f3 8b 49 a1 19 69 a9 3e 40 a4 c4 da cc 72 47 x..I..i.>@....rG 0070 2d 66 99 00 f6 10 d0 1c 4a 27 d3 41 5a bf ec bf -f......J'.AZ... 0080 24 cb 25 90 11 d3 cd e1 70 2b e2 df fd cf c4 da $.%.....p+...... 0090 12 29 ce 2c ee 0e 89 97 82 0d b5 f8 33 e5 49 ab .).,........3.I. 00a0 ce 3c 3c e9 ce 18 29 c1 5c 21 a9 f9 60 00 95 71 .<<...).\!..`..q 00b0 a0 17 cd 76 fe 21 e4 ae c0 f4 60 97 9f 00 72 ac ...v.!....`...r. 00c0 e7 e8 3e 57 80 55 d5 0f d5 42 ee cb 82 72 fc 87 ..>W.U...B...r.. 00d0 80 d5 e2 a3 39 55 79 fe 24 9d 50 48 07 5f d6 2e ....9Uy.$.PH._.. 00e0 e0 d0 bf 13 a5 73 42 7d b7 ec 0b ca a8 74 55 58 .....sB}.....tUX 00f0 a5 3a 2e d6 48 00 1e 94 78 98 6b 49 59 44 81 4a .:..H...x.kIYD.J 0100 9e f4 36 e4 57 25 e7 6d 67 61 7b 66 52 f8 71 bb ..6.W%.mga{fR.q. 0110 2f 46 aa 4e b9 a6 96 96 e2 f9 19 6a 07 80 db 2f /F.N.......j.../ 0120 61 62 3a 5c ce 40 cb 57 8a 64 31 1e b6 59 e6 30 ab:\[email protected] 0130 a7 12 52 38 00 18 20 3c 9f 23 c3 b6 c1 b6 07 60 ..R8.. <.#.....` 0140 ad 80 d0 3d e4 f7 98 4c 02 01 ad 8b 05 be 00 ab ...=...L........ 0150 02 be 29 da 01 bd c3 a1 c9 0d e4 d1 04 55 79 d3 ..)..........Uy. 0160 66 c6 76 62 b0 ee 2e 9c 16 22 cf 75 36 e1 24 1a f.vb.....".u6.$. 0170 56 d5 a9 c8 fa 80 ef 02 68 fa cb d8 9c 7b 7d ac V.......h....{}. 0180 74 78 c5 37 21 9c c0 b3 70 72 d0 4d f7 38 17 ad tx.7!...pr.M.8.. 0190 33 6e 4b 45 3e 81 a1 04 e2 8c c2 5b a0 66 e4 b1 3nKE>......[.f.. 01a0 5e c7 af 67 f8 14 7d 72 37 a4 95 aa ee f2 54 90 ^..g..}r7.....T. 01b0 83 87 8b 54 c8 63 e0 a8 aa 3a ef d1 0d be 28 2e ...T.c...:....(. 01c0 36 9f e0 22 2a 6b c6 2f 24 77 43 18 eb 97 f4 5e 6.."*k./$wC....^ 01d0 6b c8 92 0d 23 0f 1e f2 f7 fe da c3 51 d5 23 df k...#.......Q.#. 01e0 8d bf 75 e6 84 ac 82 79 3a 3e 28 c4 f6 16 17 fd ..u....y:>(..... 01f0 4a cb 56 3c 55 14 c7 ca 60 0d 11 5e 5b df 6e e7 J.V<U...`..^[.n. 0200 4e 20 41 e9 7c b5 ae 91 69 63 a7 f8 a2 44 c7 79 N A.|...ic...D.y 0210 c6 56 e1 2b 75 00 ec 26 40 14 9c 91 0e 26 4d fe .V.+u..&@....&M. 0220 e1 c1 8b 9b 9c 23 e2 1f 28 e4 42 09 1d 27 80 ac .....#..(.B..'.. 0230 4d a6 2d 94 c7 2b 65 4c c6 80 e3 d9 03 1d 81 6a M.-..+eL.......j 0240 0b 3c 40 1f 8d 85 48 f2 ab f8 26 c5 12 00 86 3f .<@...H...&....? 0250 35 ed 9f 60 79 84 08 ca d1 e5 b5 0f e3 b9 b1 9e 5..`y........... 0260 2b 6c 54 92 6d 35 48 96 12 05 e6 74 94 d2 91 93 +lT.m5H....t.... 0270 ac 0a ae 16 c8 14 b5 f8 a7 80 5c e5 19 a6 0c 8c ..........\..... 0280 c7 c1 49 3f e9 8e b5 3a e9 9f 8a 83 00 08 f1 cb ..I?...:........ 0290 5d 09 07 1a 84 bc 04 40 40 3d 93 b8 ca ea c9 e9 ]......@@=...... 02a0 92 19 eb 5e d7 16 06 ef 0b 81 9b b9 df b4 be d1 ...^............ 02b0 12 3f 71 c8 df 63 d9 a5 1f ba fc f1 34 03 46 6c .?q..c......4.Fl 02c0 c5 0d 8b ef 38 6a 48 51 a3 e8 f6 17 03 5f 21 76 ....8jHQ....._!v 02d0 69 a0 7a 21 fc b8 13 5b d0 81 fe 27 7d fc 80 4e i.z!...[...'}..N 02e0 6e fb 10 65 5e d6 4d b8 2a 13 6d 9f e6 67 39 c8 n..e^.M.*.m..g9. 02f0 77 96 02 a9 23 45 2b aa 67 e2 eb b9 e9 bf 0e e2 w...#E+.g....... 0300 b3 aa c6 54 54 e5 b2 56 c8 31 34 03 f3 3c 48 7c ...TT..V.14..<H| 0310 e0 0d d3 f3 9e 15 61 b2 19 44 f9 66 fc 17 38 33 ......a..D.f..83 0320 99 90 e0 d0 bf 39 34 f7 5e ae 4c 1b a8 80 27 83 .....94.^.L...'. 0330 09 1b 70 21 1e fe e3 a5 6b f8 58 fd 0a 0b 2e 35 ..p!....k.X....5 0340 53 54 6b 7f 43 af b7 a9 c8 fe 25 bd c9 97 26 5b STk.C.....%...&[ 0350 74 0c 46 c3 cb f5 5f fa 3c 8b 16 fe 7e 99 cf 2c t.F..._.<...~.., 0360 4f 75 02 d0 b7 f5 c7 e7 5d 25 2e 59 7f 2e dd 48 Ou......]%.Y...H 0370 d8 62 da ef 7d 14 24 7c a7 cd c7 1c a1 38 2c 97 .b..}.$|.....8,. 0380 5a eb b1 0f 6c a4 3b ed 4b 09 3a 3c e8 34 8c 56 Z...l.;.K.:<.4.V 0390 dd bc 7c 52 4e dc 8c 31 96 dc a8 dc fc f4 bb b8 ..|RN..1........ 03a0 d7 16 e3 78 08 a6 3c b8 48 39 df 13 10 24 14 49 ...x..<.H9...$.I 03b0 28 67 9a f8 6a 99 33 e6 ac 6d 7e de 97 d6 71 ab (g..j.3..m~...q. 03c0 22 54 4f 2c d9 4b b4 2a 4e 83 d0 ef 31 07 ac dc "TO,.K.*N...1... 03d0 b0 a7 07 c1 9f 74 10 c1 97 4b 2a 3d 30 84 cb 5e .....t...K*=0..^ 03e0 57 04 ff ab 42 95 55 2f 8f 95 e2 d7 a5 e4 cb 17 W...B.U/........ 03f0 f4 e9 f1 35 7f ed ea c1 69 bf 39 e1 95 9c 25 85 ...5....i.9...%. 0400 c0 85 94 26 b2 bf e1 73 15 00 c8 2b ef 41 7f 3d ...&...s...+.A.= 0410 e9 8f 1e 9b b5 79 ce ec e5 f4 8e e6 49 36 93 38 .....y......I6.8 0420 38 53 22 18 72 c3 96 67 d2 f8 0d 94 fd d1 3a c2 8S".r..g......:. 0430 ce 98 4a d8 50 32 84 30 37 bc 2f 10 f7 3d 3d a9 ..J.P2.07./..==. 0440 98 a8 87 17 cc d2 03 f2 13 e8 99 33 c9 23 60 2a ...........3.#`* 0450 ce b6 fb 15 14 2b d6 66 87 12 d6 3b ad bc d3 0a .....+.f...;.... 0460 7d 35 c8 ea 58 44 c4 29 0d 38 ae 84 25 d0 d9 b1 }5..XD.).8..%... 0470 9d 74 8e 71 d0 c0 db d7 77 9f 5d 56 bb a5 83 13 .t.q....w.]V.... 0480 87 a8 71 73 27 a5 1e ce c0 f0 c1 91 8b ab 17 d1 ..qs'........... 0490 65 30 2c 67 0e 96 93 91 21 63 08 0f 20 57 56 b4 e0,g....!c.. WV. 04a0 11 cd 4b 8b da 79 e1 cb 26 cd 2c 0e 8b f3 1c 1b ..K..y..&.,..... 04b0 f1 78 68 1e c6 a0 13 15 1b 7c 2f 57 75 bf c9 df .xh......|/Wu... 04c0 69 ea ad f1 00 12 66 4d d2 66 f6 00 73 i.....fM.f..s No. Time Source Destination Protocol Length Info 120 0.842917 192.168.10.1 192.168.10.245 Syslog 270 LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 120: 270 bytes on wire (2160 bits), 270 bytes captured (2160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 121 0.842968 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=1 Ack=7241 Win=65535 Len=0 TSval=727491 TSecr=535459 Frame 121: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1, Ack: 7241, Len: 0 No. Time Source Destination Protocol Length Info 122 0.843046 192.168.10.1 192.168.10.245 Syslog 286 LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 122: 286 bytes on wire (2288 bits), 286 bytes captured (2288 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHAN No. Time Source Destination Protocol Length Info 123 0.843134 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=8470 Ack=1 Win=1002 Len=1448 TSval=535459 TSecr=727491 Frame 123: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 8470, Ack: 1, Len: 1448 Data (1448 bytes) 0000 17 03 01 03 40 72 4f b0 25 dc c1 5d 3e 5c e7 ea ....@rO.%..]>\.. 0010 6e bc 70 92 3b 66 b9 74 1a 00 84 79 51 a0 53 6a n.p.;f.t...yQ.Sj 0020 04 0e cb 4c 3c 24 8a 91 f4 a4 fa cf 39 ba 74 99 ...L<$......9.t. 0030 a8 c2 37 8d e7 28 36 98 52 22 f7 a2 0e e1 08 82 ..7..(6.R"...... 0040 ee fd 49 bc b0 0e 9e d8 f4 54 6c 7b e0 50 be 55 ..I......Tl{.P.U 0050 f5 4a a7 41 a4 46 f4 82 a1 2d a5 7f d7 25 c9 bc .J.A.F...-...%.. 0060 84 ed bc f0 bc 71 74 d3 21 61 52 26 ef 17 04 c6 .....qt.!aR&.... 0070 0e 5d d7 e3 20 d1 71 e5 4a 75 1c e9 85 26 e9 c0 .].. .q.Ju...&.. 0080 da 65 fc af a9 2b d2 d3 66 99 14 ad cf 50 85 03 .e...+..f....P.. 0090 27 a4 f0 e0 99 55 fc 1f 74 31 49 59 74 4c 6e e3 '....U..t1IYtLn. 00a0 00 df a7 4e 2b 80 7f 2a 07 c0 60 dd bd 9c 23 f4 ...N+..*..`...#. 00b0 5a 19 15 ba 57 8c ac d7 d6 63 fa 1e 6b d9 42 7e Z...W....c..k.B~ 00c0 ab b8 7b 8e 08 03 b6 fa 76 ad bb 7d 37 60 50 3d ..{.....v..}7`P= 00d0 74 02 f6 7f f5 02 25 01 b4 a7 85 c6 14 6d 01 64 t.....%......m.d 00e0 74 4b 43 1a 59 a8 fa 61 96 bc bb f0 33 a6 c0 ef tKC.Y..a....3... 00f0 70 6b 92 a2 f1 fa e2 bf 33 8c 78 5a b8 bb ca 66 pk......3.xZ...f 0100 f2 21 c1 95 ff e2 6a f2 54 47 4e 64 70 c4 f3 e5 .!....j.TGNdp... 0110 f7 9d de 7f d1 dd 39 70 31 73 a4 6c 3c 5a 6d b4 ......9p1s.l<Zm. 0120 07 fa 71 9a 05 ac d6 39 ba 9f 06 ab b7 f1 aa 3e ..q....9.......> 0130 d0 86 b6 e4 9f 2a c6 6e ab 34 49 cc 9f 9d 97 48 .....*.n.4I....H 0140 c7 b5 c5 e1 6a 2f be 9e 09 6a 85 5b cd 23 39 9b ....j/...j.[.#9. 0150 d4 4f ba 60 49 be 8d 61 e4 56 a3 ac 7a 4f 6e fc .O.`I..a.V..zOn. 0160 40 91 7e f8 45 70 77 07 af 3c 0a d7 fe 97 b6 5d @.~.Epw..<.....] 0170 30 fc 34 7b d1 47 ac 8b 78 be 8a 33 02 e8 26 26 0.4{.G..x..3..&& 0180 54 96 ad f4 8c 37 ea 44 07 86 5f 9c e5 ed 3f ae T....7.D.._...?. 0190 5a 9e 7e 26 eb 23 b7 0c b1 f9 4d 04 c7 69 20 3b Z.~&.#....M..i ; 01a0 72 f9 9b ac 26 a7 a1 70 9e 0d 88 4f 10 31 23 0e r...&..p...O.1#. 01b0 78 e4 d9 48 f4 c1 b8 2f 1c a0 fe 32 ad 08 42 7d x..H.../...2..B} 01c0 c5 84 f5 8f 5b 51 83 78 1b 48 73 6e e8 19 13 42 ....[Q.x.Hsn...B 01d0 3d dc 9f 84 9a d7 5e 68 5c f6 44 f8 d9 3d 87 3d =.....^h\.D..=.= 01e0 5f b9 0f d6 70 fe 00 2e f8 9f 1f 32 e7 25 9f 4e _...p......2.%.N 01f0 de a3 98 9c 46 6f 46 e9 16 15 63 d7 00 66 fe 47 ....FoF...c..f.G 0200 d3 a5 91 30 bb 8a 16 ff 7b a0 0b 38 c8 2f 14 81 ...0....{..8./.. 0210 f6 ec 49 ae 4b a7 d1 fe f8 ad e3 c5 9c d9 a7 56 ..I.K..........V 0220 cd 62 6a a7 2a 61 e6 ea a5 8c ec 23 52 53 f5 70 .bj.*a.....#RS.p 0230 71 f1 90 09 fb 1d bf e3 f0 9a 94 a8 e4 a3 f6 5c q..............\ 0240 b3 f4 17 28 e6 ee 28 75 71 50 ee 9d 1b 8f b5 57 ...(..(uqP.....W 0250 dd bd ab 47 c0 09 d6 e3 34 02 78 9a 31 7b bc c2 ...G....4.x.1{.. 0260 a4 ed e4 87 a0 c5 a0 ea 5f 03 24 b0 73 aa 23 d2 ........_.$.s.#. 0270 c0 b4 cc f1 9d 38 ca ba 37 42 45 24 fe 54 d4 d3 .....8..7BE$.T.. 0280 47 e9 c0 c1 00 db c0 bf 48 ed 1c 9f d9 73 00 03 G.......H....s.. 0290 f1 e5 c8 fb 08 43 d5 d1 d6 52 79 01 e6 30 e7 a0 .....C...Ry..0.. 02a0 6f 80 78 f5 67 a3 f0 5b ea be 95 38 f3 37 f3 a8 o.x.g..[...8.7.. 02b0 a1 6d 80 8d 64 6e 2d e4 90 23 6b 9d 65 f9 5c 32 .m..dn-..#k.e.\2 02c0 9e 6e 85 c9 a7 b7 2e 30 b1 d9 28 4d 1c 4b 49 97 .n.....0..(M.KI. 02d0 1d 89 9a 42 5c 45 0d ca 36 55 08 a8 4f 8b b6 b2 ...B\E..6U..O... 02e0 6e c9 68 57 bd ca eb 63 cb dc 61 f2 68 a6 cd 88 n.hW...c..a.h... 02f0 58 b3 38 2b 6d 4d b1 2b 54 f6 42 28 e4 ec 8c ef X.8+mM.+T.B(.... 0300 11 e0 1d 9c 0e b5 8c 3d 72 20 19 b8 54 8f 69 af .......=r ..T.i. 0310 c7 80 e4 8a a1 fa bc b9 ce c0 4f 75 95 3a e6 92 ..........Ou.:.. 0320 0c e8 e3 80 36 18 74 57 6d f0 da 2e b3 1b f0 84 ....6.tWm....... 0330 2d 03 38 5b 67 01 45 84 1e 13 66 cb cf ef 74 5f -.8[g.E...f...t_ 0340 19 70 e2 0d c1 17 03 01 03 50 38 39 94 98 de ce .p.......P89.... 0350 26 2d bd fd 6c 82 a3 16 a6 fb 77 6e 36 57 5d 14 &-..l.....wn6W]. 0360 73 d4 43 60 8a d1 1d 3f 41 48 cb fe 8b fd bc 4e s.C`...?AH.....N 0370 a8 cc 15 8a 37 c7 b2 1f bd da b4 fe a1 7e c8 7d ....7........~.} 0380 49 cb 38 01 78 11 89 9a 9f eb ed 3e 21 42 c7 a9 I.8.x......>!B.. 0390 75 36 d3 e3 60 9c e5 81 65 45 1a 7d 2f f4 24 11 u6..`...eE.}/.$. 03a0 44 5e db e3 e9 a3 13 d4 7f 4a e0 2c 43 30 33 56 D^.......J.,C03V 03b0 76 d4 1d 74 6d b2 03 f5 69 65 96 5f 82 94 89 cc v..tm...ie._.... 03c0 36 32 f5 ad 17 6e a5 4e 7d f0 51 f4 dd bf 73 c4 62...n.N}.Q...s. 03d0 dc 57 e9 dd 6d bd 93 36 f2 f7 6e 96 dc 45 a7 7e .W..m..6..n..E.~ 03e0 68 3a 30 bc 01 b0 7c 74 fb a2 2a 49 d3 88 b3 56 h:0...|t..*I...V 03f0 84 ed d4 bd cc 8f 0d 25 1e 13 2e 60 24 3c d3 d1 .......%...`$<.. 0400 7d 3a b1 4f c0 41 e0 4e 76 71 81 0d 3e 7d 87 14 }:.O.A.Nvq..>}.. 0410 17 9b 64 4a c9 e6 01 f2 9e 4f 02 29 f7 0c ed 81 ..dJ.....O.).... 0420 39 85 14 04 28 90 9f 95 34 00 1a f9 d1 84 a8 ae 9...(...4....... 0430 95 66 a2 9a 53 9d fd 42 a2 9a 4a 0e ee c0 e5 f1 .f..S..B..J..... 0440 84 c2 cb 0f 19 f1 96 97 7c 7d 1e ff 4a 7d 10 15 ........|}..J}.. 0450 3e a0 9f 4e c3 33 9a 70 e4 83 62 9e 7b 5a 16 30 >..N.3.p..b.{Z.0 0460 50 b6 ac 06 d1 3f 1f c6 8b 65 dc 3e 07 f2 56 05 P....?...e.>..V. 0470 8b 41 a3 59 9e 41 85 ac b4 85 ec 79 57 5b c7 97 .A.Y.A.....yW[.. 0480 c0 2e 2a 81 b5 a6 fa ee cc 09 25 35 f0 8c 7a fc ..*.......%5..z. 0490 57 01 60 e1 9f 53 93 4b b0 3f c4 1d 3e 33 13 a5 W.`..S.K.?..>3.. 04a0 65 7f 49 2b 35 70 d8 e9 38 12 18 e0 16 d9 7d c5 e.I+5p..8.....}. 04b0 db 5f 39 ca 54 e9 4e e3 82 0f 7f a6 ad ca de dc ._9.T.N......... 04c0 88 fc d2 45 9e 69 71 ee 3f 83 46 52 ac b4 0e 0c ...E.iq.?.FR.... 04d0 81 c6 7b 7b 65 bb a5 82 bf 07 b7 ec 8e 18 b9 d4 ..{{e........... 04e0 31 5f 93 3e af 1a df b1 4a 27 d8 34 96 84 81 2f 1_.>....J'.4.../ 04f0 3c 27 92 f1 e2 a6 e6 8b 99 83 c3 d9 f0 61 f8 92 <'...........a.. 0500 40 cd b8 68 dd d2 65 f6 df 68 fc 47 db 7a b0 33 @..h..e..h.G.z.3 0510 6e 46 27 ee e3 fc 1a 1c 2a e3 fe b9 4b b5 45 17 nF'.....*...K.E. 0520 55 11 32 07 4f 94 86 88 c2 72 bc 43 38 77 5f fd U.2.O....r.C8w_. 0530 a7 34 86 15 2b eb 4e ea 8b 9e 2f e8 be 00 dd d9 .4..+.N.../..... 0540 47 f3 48 4d 72 2e 13 a8 35 6c f4 1f 32 b9 27 e0 G.HMr...5l..2.'. 0550 a2 51 fd 8a 41 42 59 2c 69 40 d4 69 1e cf c3 35 .Q..ABY,[email protected] 0560 dc c6 32 ef 3f 53 fc 70 3e 42 a6 bc 3a 3b 23 cb ..2.?S.p>B..:;#. 0570 99 ee 1b 90 67 78 b0 df 94 39 c2 21 e5 76 6c ac ....gx...9.!.vl. 0580 1d c1 a0 8d 0c 72 38 8a b4 12 cd 6e 9b 93 2b 90 .....r8....n..+. 0590 1d 36 58 a8 a8 ee 01 7c 4a 60 3d 79 51 14 43 c4 .6X....|J`=yQ.C. 05a0 e4 cf 2a fe 03 33 2b e2 ..*..3+. No. Time Source Destination Protocol Length Info 124 0.843185 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=1 Ack=9918 Win=65535 Len=0 TSval=727491 TSecr=535459 Frame 124: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1, Ack: 9918, Len: 0 No. Time Source Destination Protocol Length Info 125 0.843237 192.168.10.1 192.168.10.203 TCP 308 34433 > cds [PSH, ACK] Seq=9918 Ack=1 Win=1002 Len=242 TSval=535459 TSecr=727491 Frame 125: 308 bytes on wire (2464 bits), 308 bytes captured (2464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 9918, Ack: 1, Len: 242 Data (242 bytes) 0000 1d e3 f2 f2 b9 e2 38 9c ee f9 a7 83 29 b0 cb c8 ......8.....)... 0010 49 9e f0 85 f3 a9 6c 80 3a 0e 37 0a b3 f3 5b 97 I.....l.:.7...[. 0020 48 59 bd a5 01 f3 51 4b 08 98 09 33 0c cd 7b d9 HY....QK...3..{. 0030 ce 8e 66 79 db 86 f2 b1 16 fd f7 ce 31 3f 90 cf ..fy........1?.. 0040 af 95 11 d7 06 d2 38 94 ce 1e d8 c5 57 b8 3c b5 ......8.....W.<. 0050 99 91 63 05 8c 6b 6f ca be 88 36 9d 06 48 dd 0e ..c..ko...6..H.. 0060 67 1a bd 4d 41 d7 de e9 f5 6f 9a f6 2a 77 6d ed g..MA....o..*wm. 0070 a1 e2 84 6a e5 e4 b8 2a a5 27 6f 6f 96 17 49 87 ...j...*.'oo..I. 0080 dc 7e 12 e5 ca 8a 04 9e de e2 a7 04 51 8f 31 48 .~..........Q.1H 0090 cf af b3 79 c5 e0 48 68 23 4d 4c c8 03 31 e6 8f ...y..Hh#ML..1.. 00a0 3f cf d6 d4 6f 52 a5 7f d2 ad d6 51 99 dc 82 cd ?...oR.....Q.... 00b0 5b 07 01 b0 e8 66 13 e0 e6 35 bf c3 31 d6 39 67 [....f...5..1.9g 00c0 a9 32 f1 4e 75 c4 cb 01 83 08 17 99 5f 27 2e cc .2.Nu......._'.. 00d0 0c 6c b2 83 84 ad 5a 6b de 48 44 f9 98 7b ff 85 .l....Zk.HD..{.. 00e0 04 3e fb af 83 cd ee 3a bc 37 1b ed 97 1a 37 40 .>.....:.7....7@ 00f0 1e 75 .u No. Time Source Destination Protocol Length Info 126 0.843304 192.168.10.1 192.168.10.245 Syslog 277 LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 126: 277 bytes on wire (2216 bits), 277 bytes captured (2216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINAR No. Time Source Destination Protocol Length Info 127 0.843372 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 127: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" No. Time Source Destination Protocol Length Info 128 0.843462 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=10160 Ack=1 Win=1002 Len=1448 TSval=535459 TSecr=727491 Frame 128: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 10160, Ack: 1, Len: 1448 Data (1448 bytes) 0000 17 03 01 03 40 bb 3e 81 f1 07 b1 a1 6b fb 8f 83 ....@.>.....k... 0010 3c d1 50 b4 e2 29 e7 a8 57 91 21 f0 13 51 4c 56 <.P..)..W.!..QLV 0020 3e bb 0e 34 c0 aa 82 b7 9b e6 ad 3c 64 43 9e 27 >..4.......<dC.' 0030 83 87 a8 2c a2 ff c8 4c 4a 8b 4e 19 eb ce 99 b2 ...,...LJ.N..... 0040 10 06 ae ba d9 e7 0c 5d 64 6b 76 9d 52 d2 c9 ae .......]dkv.R... 0050 fc 85 a0 8d 58 c6 74 d7 47 91 58 80 e3 3d 26 29 ....X.t.G.X..=&) 0060 aa f2 f0 1d 65 42 b4 8e be 44 06 3c 2d 7a 6c 8b ....eB...D.<-zl. 0070 fd 42 1a dc d5 bb ca e0 ce 15 56 fc 77 7d a0 24 .B........V.w}.$ 0080 43 35 04 5f ca 05 69 f2 12 11 0c aa 78 ce 00 80 C5._..i.....x... 0090 e0 7c 6a 96 9c ab 2d 0f c1 2c f4 d7 4e 73 f9 40 .|j...-..,..Ns.@ 00a0 51 de b0 0a c8 8c d8 4e a3 f2 b3 1f 99 4a b8 ea Q......N.....J.. 00b0 82 a2 76 83 e2 e9 bb 2c af 65 a1 96 62 43 70 52 ..v....,.e..bCpR 00c0 4d a1 cf 1c a7 9f 16 21 bb b9 74 c3 88 25 8a 6b M......!..t..%.k 00d0 ba 87 7d 98 d2 9b 7d ad 27 0a bd a6 57 cf 1a 5f ..}...}.'...W.._ 00e0 86 7c 52 0a 27 80 d1 59 16 4b 37 69 65 6f 23 9b .|R.'..Y.K7ieo#. 00f0 c0 dd 5f 48 bc 77 88 b6 36 24 7d 01 dc d8 64 74 .._H.w..6$}...dt 0100 4c 53 b0 60 b8 62 fa 97 b1 84 3a 99 ba 6b 24 76 LS.`.b....:..k$v 0110 13 6d 15 27 6f 4b 50 d3 3f 91 9e ee df 53 c6 2c .m.'oKP.?....S., 0120 cb f3 df b5 59 a2 92 8f dd 17 05 4f 99 ca 35 c9 ....Y......O..5. 0130 ab 64 59 a8 7e ac f4 e9 f0 91 da 31 d1 9d 8b 54 .dY.~......1...T 0140 e8 25 d7 e8 ea c9 4b 1c d2 fe 15 65 10 06 86 6c .%....K....e...l 0150 88 0d 36 b7 81 e7 21 e3 eb be 36 1a 3a f9 8c f4 ..6...!...6.:... 0160 a3 a6 14 9f 18 60 8d 81 ea 1a 9c 5f ca a6 68 10 .....`....._..h. 0170 75 6d aa 4e 72 db 0e 5f 8a 33 fb 39 3b f5 33 54 um.Nr.._.3.9;.3T 0180 bb 64 53 67 94 f9 af 94 8e 63 73 53 86 56 68 3a .dSg.....csS.Vh: 0190 2a 47 66 7f a1 43 b2 5a e5 12 cf 55 02 85 01 3f *Gf..C.Z...U...? 01a0 93 58 62 2c cd 18 40 9c eb c9 cd c4 ca 4f 7d 1e .Xb,[email protected]}. 01b0 86 32 f5 d6 21 ae df e8 d6 e1 13 62 20 d4 6c 92 .2..!......b .l. 01c0 d2 cd bd 25 a1 3a d4 db 63 45 42 f0 55 18 91 92 ...%.:..cEB.U... 01d0 73 a8 a6 60 b4 c3 9a 9e 81 4b 31 42 05 78 c9 56 s..`.....K1B.x.V 01e0 0d a2 e3 9a d6 98 30 0c a2 9b 03 a9 33 40 c8 9f ......0.....3@.. 01f0 dd 86 d9 77 a5 ed c0 c6 04 94 f4 49 b2 8c cb 2f ...w.......I.../ 0200 cd 18 8d ac 95 c6 d5 2d 53 d2 79 75 1b 4b b7 26 .......-S.yu.K.& 0210 6b 99 f0 50 3d 01 7b 02 88 0b dc 38 47 69 56 d8 k..P=.{....8GiV. 0220 ae f0 ef 2b 33 c8 4e a3 cf 33 a2 a1 7b 97 6a 60 ...+3.N..3..{.j` 0230 f2 91 bc e6 15 4e 61 9e db d0 47 e0 8f 8c 7c 6f .....Na...G...|o 0240 fc d1 e3 da 02 99 2a 9f 89 3d b1 f1 cf 4a dd 3d ......*..=...J.= 0250 13 25 42 71 d4 b5 15 ce 3d 12 4d 28 5e a7 bb 61 .%Bq....=.M(^..a 0260 a0 ba dc fe 35 4a 2f 2f e2 db be db 46 79 c8 ff ....5J//....Fy.. 0270 99 3d 22 0d be 33 94 82 1b 6e c0 74 63 63 32 c7 .="..3...n.tcc2. 0280 f7 74 ee 0a fa 67 45 b7 ec 39 94 0c 71 7f f9 a6 .t...gE..9..q... 0290 8f d9 03 3d 3b fb ed 4f 48 06 b8 00 25 f2 92 06 ...=;..OH...%... 02a0 d8 fc c8 bd 7d 91 1e 50 5e 44 41 95 ea 5a d5 6d ....}..P^DA..Z.m 02b0 80 de c1 58 55 49 74 b3 d3 26 1a 37 ee 5e 3a 28 ...XUIt..&.7.^:( 02c0 65 ea 60 72 2c a2 10 68 6f 93 81 b2 ff e6 75 fe e.`r,..ho.....u. 02d0 f2 af 17 ba ed fb 3a 3b d0 6c 3b 07 dd ae a4 3c ......:;.l;....< 02e0 f5 47 31 70 e3 f4 f4 3f 8b ed f1 b0 0d 4b ab e1 .G1p...?.....K.. 02f0 b4 60 f7 90 5a 8d 79 6d 2c b7 8a d1 f3 72 b6 98 .`..Z.ym,....r.. 0300 93 77 b3 43 8e f4 5e 2f c5 26 60 65 58 e5 14 ca .w.C..^/.&`eX... 0310 cb ea d3 e4 05 54 10 2b e1 3f ad 3f 76 6b 8b e5 .....T.+.?.?vk.. 0320 19 32 49 a4 fb 3e 5c 60 17 3d 79 30 71 d6 eb 08 .2I..>\`.=y0q... 0330 d3 5a 8c cf 5a a4 2f b2 ad 5c 7f 2d 42 52 79 d3 .Z..Z./..\.-BRy. 0340 40 28 0e 23 5f 17 03 01 03 40 02 91 94 11 ad 90 @(.#_....@...... 0350 28 26 06 92 33 29 30 f2 63 8a bb a6 1e 7f 71 a6 (&..3)0.c.....q. 0360 7e f3 ee 39 39 79 fc 1f d5 3e 6a a0 83 73 c3 40 ~..99y...>j..s.@ 0370 82 1e b4 f9 3b 41 a1 bb d8 22 3b 17 08 2a 88 ef ....;A...";..*.. 0380 51 ec 5d 9c 4b 52 1e 2f 32 f0 12 75 92 0e d5 37 Q.].KR./2..u...7 0390 0a f1 53 24 9a e3 44 91 f3 50 da 8a 7f 73 f7 41 ..S$..D..P...s.A 03a0 10 9c 3c 8d 63 87 2a c3 c0 42 59 fa 76 1c a9 85 ..<.c.*..BY.v... 03b0 a9 d8 e7 ad be d0 99 62 b1 6a 0c a4 86 26 6b 41 .......b.j...&kA 03c0 23 af 04 b5 32 cb 72 f4 46 21 56 fc b8 52 ee 39 #...2.r.F!V..R.9 03d0 89 90 97 f8 00 c5 ab e6 61 24 75 52 69 9f b8 ac ........a$uRi... 03e0 4f b7 7f eb 1c 5d 1a fc 7a 3d e2 9f 0a 69 52 1a O....]..z=...iR. 03f0 8f 9c 30 bb 0a c7 b5 53 a2 41 7c 4f 89 30 e5 71 ..0....S.A|O.0.q 0400 aa 67 3d 36 1f 86 2d 8e 18 c5 10 b1 76 f9 53 4f .g=6..-.....v.SO 0410 92 0f 04 65 93 d5 09 89 13 6b 8b a6 ff 26 8f 65 ...e.....k...&.e 0420 4e c7 c9 5e db 13 ae db cd 5b e4 56 26 60 a0 f2 N..^.....[.V&`.. 0430 41 af 66 c8 32 c9 e5 f2 2e 89 cd d2 f7 c7 cc f0 A.f.2........... 0440 4a d4 be 7a d8 ef 6d 9c 6e 0a ba 00 f6 1a e5 05 J..z..m.n....... 0450 bf 5b ac dd a4 c7 62 6e 5f 10 89 8c 3b 86 f2 ee .[....bn_...;... 0460 76 fb 8b 12 74 1d 6c 86 dd 79 70 ac b2 7c 7c d1 v...t.l..yp..||. 0470 b4 d1 bd 4a d3 4f 7f a6 34 aa a3 cd c5 b5 94 6b ...J.O..4......k 0480 5e e4 69 6b 91 a6 a7 45 bb 85 29 82 0a a9 31 53 ^.ik...E..)...1S 0490 b9 22 7b 00 e5 8b b8 df 49 67 85 31 74 a4 e1 f1 ."{.....Ig.1t... 04a0 e8 2b 26 f1 b3 6c 83 77 df 9f cb 3b 85 92 0b 22 .+&..l.w...;..." 04b0 66 41 fc b1 4a 6a 55 e6 1a 73 d7 6e 9e 5e f8 7d fA..JjU..s.n.^.} 04c0 80 4e 79 13 18 ac d4 d2 17 5e 0b 97 a6 d3 c8 ea .Ny......^...... 04d0 1e 14 df f0 d2 4a c1 b3 2a ff 63 7c 41 29 a5 d3 .....J..*.c|A).. 04e0 6b de 4b 91 ff e5 74 ab 72 0f 23 48 33 93 59 42 k.K...t.r.#H3.YB 04f0 c5 1e 57 3d be ab 47 99 95 ea bc 35 dd 35 9a 7b ..W=..G....5.5.{ 0500 1a c6 a2 4d 1d dc 3a 70 59 15 1f d6 e1 c9 cc d4 ...M..:pY....... 0510 1f d3 31 90 f2 cb 58 ce ea a9 3a f9 46 53 89 ce ..1...X...:.FS.. 0520 54 0e 69 43 c6 e2 e6 6a 3c 73 07 0b 0c 5d b9 c8 T.iC...j<s...].. 0530 f2 a2 dd 65 e2 3f 59 aa 7c 11 d6 bc 8b 85 f9 50 ...e.?Y.|......P 0540 5b 8f 2c e8 7e fd 62 1e de ee 66 f0 c6 01 2a 18 [.,.~.b...f...*. 0550 74 5a 4c 1f 84 68 af 75 61 c4 9c 62 80 ab 73 54 tZL..h.ua..b..sT 0560 e8 3d a2 94 08 d6 01 c2 b4 80 b2 24 49 63 24 ce .=.........$Ic$. 0570 91 46 dd 42 c6 42 bf 1e 77 59 ac f4 6e 58 67 4e .F.B.B..wY..nXgN 0580 cd c9 d4 a2 bd 8f 77 1b c6 a9 f3 1a ae 2c 05 bb ......w......,.. 0590 8a ca c8 6b e4 34 d6 c4 30 9c 4b 89 e1 b3 ad 38 ...k.4..0.K....8 05a0 70 56 c3 b0 e3 d0 36 03 pV....6. No. Time Source Destination Protocol Length Info 129 0.843511 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=1 Ack=11608 Win=65535 Len=0 TSval=727491 TSecr=535459 Frame 129: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1, Ack: 11608, Len: 0 No. Time Source Destination Protocol Length Info 130 0.843569 192.168.10.1 192.168.10.203 TCP 292 34433 > cds [PSH, ACK] Seq=11608 Ack=1 Win=1002 Len=226 TSval=535459 TSecr=727491 Frame 130: 292 bytes on wire (2336 bits), 292 bytes captured (2336 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 11608, Ack: 1, Len: 226 Data (226 bytes) 0000 09 c8 46 3c d4 ac a3 c1 ad f0 46 7f 28 21 7b 5f ..F<......F.(!{_ 0010 e6 0e ba 96 83 27 33 cf be 14 7f 97 b0 ff 21 0b .....'3.......!. 0020 59 78 7f fc 4e 71 ef d6 d6 4d 55 19 47 6e 48 e5 Yx..Nq...MU.GnH. 0030 51 78 36 86 49 98 09 33 1d d6 bf 4f 99 f9 2b 03 Qx6.I..3...O..+. 0040 d7 91 8b 77 5d 4c 55 90 c4 74 de 32 9b 20 b2 cc ...w]LU..t.2. .. 0050 ed 9d 74 74 7b b7 8a a8 76 af 69 37 19 da af 9a ..tt{...v.i7.... 0060 86 76 20 aa ef 2f 40 ab 06 ac 4a 2f 1a a3 b8 a1 .v ../@...J/.... 0070 7a 7e 93 d8 c1 45 91 fd 8e 81 3d f0 ce 6d 62 e0 z~...E....=..mb. 0080 59 2c 5f 17 f0 a1 17 34 ae cc cf 69 cd a0 de fe Y,_....4...i.... 0090 d7 75 cb e4 fb 4d 65 3d e3 3e b2 eb 49 94 f4 54 .u...Me=.>..I..T 00a0 07 cc 46 fe 55 58 c1 6c e3 78 4b 0d ff 1d c7 5c ..F.UX.l.xK....\ 00b0 3e 1c 15 bd c0 ce eb e9 e0 b9 fd cb 8a 32 76 70 >............2vp 00c0 e4 98 7c 21 2e a7 c9 35 24 39 dd f4 c6 c3 0f d6 ..|!...5$9...... 00d0 7d 74 6f cc 5a 1e ee 99 25 10 44 60 b6 6f 90 2f }to.Z...%.D`.o./ 00e0 93 bd .. No. Time Source Destination Protocol Length Info 131 0.909104 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=1 Ack=11834 Win=65309 Len=74 TSval=727492 TSecr=535459 Frame 131: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1, Ack: 11834, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 29 90 ee 3a 98 c5 78 eb 31 21 d3 .... )..:..x.1!. 0010 5d 8d 84 ed dd 8c 4f c8 7e d7 74 1a a9 51 4b 5a ].....O.~.t..QKZ 0020 1a c9 92 36 54 17 03 01 00 20 0f 50 e7 4f 0e d9 ...6T.... .P.O.. 0030 eb 4b b7 a0 39 b9 5e ab ad c4 55 99 87 e9 44 89 .K..9.^...U...D. 0040 c8 da e6 e2 ca 50 f1 7f cb 02 .....P.... No. Time Source Destination Protocol Length Info 132 0.909164 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=11834 Ack=75 Win=1002 Len=0 TSval=535476 TSecr=727492 Frame 132: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 11834, Ack: 75, Len: 0 No. Time Source Destination Protocol Length Info 133 0.913062 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=75 Ack=11834 Win=65309 Len=74 TSval=727492 TSecr=535476 Frame 133: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 75, Ack: 11834, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 4d 89 f9 ab 44 4b ac 62 c5 7a 84 .... M...DK.b.z. 0010 a4 58 5e d7 8b e7 a1 05 d5 04 a8 49 c7 31 88 7c .X^........I.1.| 0020 58 a0 5d be 5e 17 03 01 00 20 ed 04 c8 65 e6 a3 X.].^.... ...e.. 0030 fe e1 a9 19 e8 7e 57 dd b4 74 8a c7 03 04 40 42 .....~W..t....@B 0040 1d 2c 66 39 66 9d 29 22 e6 c3 .,f9f.)".. No. Time Source Destination Protocol Length Info 134 0.913122 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=11834 Ack=149 Win=1002 Len=0 TSval=535477 TSecr=727492 Frame 134: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 11834, Ack: 149, Len: 0 No. Time Source Destination Protocol Length Info 135 0.916715 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=149 Ack=11834 Win=65309 Len=74 TSval=727492 TSecr=535477 Frame 135: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 149, Ack: 11834, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 5d 49 5a 9c a5 d8 b8 bd b4 af 0f .... ]IZ........ 0010 4f c8 66 64 68 ec 14 ec 00 50 46 f9 b1 33 82 88 O.fdh....PF..3.. 0020 1b b4 ad be 98 17 03 01 00 20 5a b3 dc 34 c5 16 ......... Z..4.. 0030 9e 00 64 53 d8 72 ab a0 6d f0 b8 30 b9 a4 b3 c2 ..dS.r..m..0.... 0040 f5 46 44 0b de 46 b2 47 3c 9e .FD..F.G<. No. Time Source Destination Protocol Length Info 136 0.916767 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=11834 Ack=223 Win=1002 Len=0 TSval=535478 TSecr=727492 Frame 136: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 11834, Ack: 223, Len: 0 No. Time Source Destination Protocol Length Info 137 0.920507 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=223 Ack=11834 Win=65309 Len=74 TSval=727492 TSecr=535478 Frame 137: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 223, Ack: 11834, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 f2 fa da 19 b6 fd 96 e6 75 e4 25 .... ........u.% 0010 88 b3 f7 78 60 d1 c3 b5 30 54 a0 43 96 4f ab f9 ...x`...0T.C.O.. 0020 f4 0e 2f d6 43 17 03 01 00 20 8d 2d c3 fc 7d 20 ../.C.... .-..} 0030 d4 65 ec 42 21 3d 32 ee a8 b9 92 8e cd ed 46 18 .e.B!=2.......F. 0040 73 a8 31 15 14 26 e6 96 85 46 s.1..&...F No. Time Source Destination Protocol Length Info 138 0.920559 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=11834 Ack=297 Win=1002 Len=0 TSval=535479 TSecr=727492 Frame 138: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 11834, Ack: 297, Len: 0 No. Time Source Destination Protocol Length Info 139 0.924140 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=297 Ack=11834 Win=65309 Len=74 TSval=727492 TSecr=535479 Frame 139: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 297, Ack: 11834, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 02 a7 41 fc 14 4e 23 d3 0e f1 ed .... ..A..N#.... 0010 0b b2 ea 99 ec ea 99 d2 6a 6b c9 53 f4 d4 ba 24 ........jk.S...$ 0020 36 1d 14 a2 e3 17 03 01 00 20 40 1f dd 28 70 3e 6........ @..(p> 0030 5c 3f 8f df aa 4c 71 c7 eb 05 1a 68 4a a0 cf f0 \?...Lq....hJ... 0040 6e af b4 7b 51 74 14 ba 4b 43 n..{Qt..KC No. Time Source Destination Protocol Length Info 140 0.924208 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=11834 Ack=371 Win=1002 Len=0 TSval=535480 TSecr=727492 Frame 140: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 11834, Ack: 371, Len: 0 No. Time Source Destination Protocol Length Info 141 1.193705 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 141: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 142 1.236699 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1622087936, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 142: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 143 1.236716 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1622087936, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 143: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 144 1.236724 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1622087936, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 144: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 145 1.236732 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1622087936, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 145: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 146 1.257673 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3491168512, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 146: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 147 1.257686 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3491168512, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 147: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 148 1.257693 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3491168512, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 148: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 149 1.257701 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3491168512, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 149: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 150 1.302974 192.168.10.1 192.168.10.245 Syslog 306 LOCAL1.INFO: Oct 3 19:44:19 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22050 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eykhatch@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 150: 306 bytes on wire (2448 bits), 306 bytes captured (2448 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:19 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22050 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" No. Time Source Destination Protocol Length Info 151 1.315108 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 151: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 152 1.443352 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 152: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 153 1.565814 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 153: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 154 1.578214 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 154: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 155 1.578243 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 155: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 156 1.592813 124.6.181.33 192.168.10.207 SMTP 60 C: QUIT Frame 156: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22050 (22050), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 157 1.592916 192.168.10.207 124.6.181.33 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 157: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 124.6.181.33 (124.6.181.33) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22050 (22050), Seq: 1, Ack: 7, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 158 1.592970 124.6.181.33 192.168.10.207 TCP 60 22050 > smtp [ACK] Seq=7 Ack=70 Win=46502 Len=0 Frame 158: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22050 (22050), Dst Port: smtp (25), Seq: 7, Ack: 70, Len: 0 No. Time Source Destination Protocol Length Info 159 1.593000 192.168.10.207 124.6.181.33 TCP 60 smtp > 22050 [FIN, ACK] Seq=70 Ack=7 Win=65466 Len=0 Frame 159: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 124.6.181.33 (124.6.181.33) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22050 (22050), Seq: 70, Ack: 7, Len: 0 No. Time Source Destination Protocol Length Info 160 1.593030 124.6.181.33 192.168.10.207 TCP 60 22050 > smtp [ACK] Seq=7 Ack=71 Win=46502 Len=0 Frame 160: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22050 (22050), Dst Port: smtp (25), Seq: 7, Ack: 71, Len: 0 No. Time Source Destination Protocol Length Info 161 1.883157 124.6.181.33 192.168.10.207 TCP 60 22050 > smtp [RST, ACK] Seq=7 Ack=71 Win=46502 Len=0 Frame 161: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22050 (22050), Dst Port: smtp (25), Seq: 7, Ack: 71, Len: 0 No. Time Source Destination Protocol Length Info 162 1.883221 192.168.10.1 192.168.10.245 Syslog 201 LOCAL1.INFO: Oct 3 19:44:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22050 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 162: 201 bytes on wire (1608 bits), 201 bytes captured (1608 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22050 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 163 2.091939 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 163: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 164 2.091961 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 164: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 165 2.104084 192.168.10.118 67.195.146.181 TCP 62 cimtrak > http [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM=1 Frame 165: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.118 (192.168.10.118), Dst: 67.195.146.181 (67.195.146.181) Transmission Control Protocol, Src Port: cimtrak (3749), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 166 2.130000 192.168.10.203 117.198.83.191 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 166: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 117.198.83.191 (117.198.83.191) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 167 2.181964 67.195.146.181 192.168.10.118 TCP 60 http > cimtrak [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1400 Frame 167: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c) Internet Protocol Version 4, Src: 67.195.146.181 (67.195.146.181), Dst: 192.168.10.118 (192.168.10.118) Transmission Control Protocol, Src Port: http (80), Dst Port: cimtrak (3749), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 168 2.182010 192.168.10.118 67.195.146.181 TCP 60 cimtrak > http [ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 168: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.118 (192.168.10.118), Dst: 67.195.146.181 (67.195.146.181) Transmission Control Protocol, Src Port: cimtrak (3749), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 169 2.182376 192.168.10.1 192.168.10.245 Syslog 206 LOCAL1.INFO: Oct 3 19:44:20 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.118 67.195.146.181 3749 80 msg="Conn Begin" (HTTP-proxy.endusers-00) Frame 169: 206 bytes on wire (1648 bits), 206 bytes captured (1648 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:20 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.118 67.195.146.181 3749 80 msg="Conn Begin" (HTTP-proxy.endusers-00) No. Time Source Destination Protocol Length Info 170 2.182593 192.168.10.118 67.195.146.181 HTTP 214 GET /h?s=BRO HTTP/1.1 Frame 170: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.118 (192.168.10.118), Dst: 67.195.146.181 (67.195.146.181) Transmission Control Protocol, Src Port: cimtrak (3749), Dst Port: http (80), Seq: 1, Ack: 1, Len: 160 Hypertext Transfer Protocol No. Time Source Destination Protocol Length Info 171 2.182610 67.195.146.181 192.168.10.118 TCP 60 http > cimtrak [ACK] Seq=1 Ack=161 Win=65535 Len=0 Frame 171: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c) Internet Protocol Version 4, Src: 67.195.146.181 (67.195.146.181), Dst: 192.168.10.118 (192.168.10.118) Transmission Control Protocol, Src Port: http (80), Dst Port: cimtrak (3749), Seq: 1, Ack: 161, Len: 0 No. Time Source Destination Protocol Length Info 172 2.252536 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1638865152, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 172: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 173 2.252560 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1638865152, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 173: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 174 2.252573 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1638865152, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 174: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 175 2.252585 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1638865152, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 175: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 176 2.260072 67.195.146.181 192.168.10.118 HTTP 139 HTTP/1.1 304 Not Modified Frame 176: 139 bytes on wire (1112 bits), 139 bytes captured (1112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c) Internet Protocol Version 4, Src: 67.195.146.181 (67.195.146.181), Dst: 192.168.10.118 (192.168.10.118) Transmission Control Protocol, Src Port: http (80), Dst Port: cimtrak (3749), Seq: 1, Ack: 161, Len: 85 Hypertext Transfer Protocol No. Time Source Destination Protocol Length Info 177 2.260105 67.195.146.181 192.168.10.118 TCP 60 http > cimtrak [FIN, ACK] Seq=86 Ack=161 Win=65535 Len=0 Frame 177: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c) Internet Protocol Version 4, Src: 67.195.146.181 (67.195.146.181), Dst: 192.168.10.118 (192.168.10.118) Transmission Control Protocol, Src Port: http (80), Dst Port: cimtrak (3749), Seq: 86, Ack: 161, Len: 0 No. Time Source Destination Protocol Length Info 178 2.260152 192.168.10.118 67.195.146.181 TCP 60 cimtrak > http [ACK] Seq=161 Ack=87 Win=65450 Len=0 Frame 178: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.118 (192.168.10.118), Dst: 67.195.146.181 (67.195.146.181) Transmission Control Protocol, Src Port: cimtrak (3749), Dst Port: http (80), Seq: 161, Ack: 87, Len: 0 No. Time Source Destination Protocol Length Info 179 2.260189 192.168.10.118 67.195.146.181 TCP 60 cimtrak > http [FIN, ACK] Seq=161 Ack=87 Win=65450 Len=0 Frame 179: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.118 (192.168.10.118), Dst: 67.195.146.181 (67.195.146.181) Transmission Control Protocol, Src Port: cimtrak (3749), Dst Port: http (80), Seq: 161, Ack: 87, Len: 0 No. Time Source Destination Protocol Length Info 180 2.260321 192.168.10.1 192.168.10.245 Syslog 324 LOCAL1.INFO: Oct 3 19:44:20 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.118 67.195.146.181 3749 80 msg="HTTP Request" proxy_act="HTTP-Client.EndUser" op="GET" dstname="ichart.yahoo.com" arg="/h?s=BRO" sent_bytes="160" rcvd_bytes="85" (HTTP-proxy.endusers-00) Frame 180: 324 bytes on wire (2592 bits), 324 bytes captured (2592 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:20 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.118 67.195.146.181 3749 80 msg="HTTP Request" proxy_act="HTTP-Client.EndUser" op="GET" dstname="ichart.yahoo No. Time Source Destination Protocol Length Info 181 2.260358 67.195.146.181 192.168.10.118 TCP 60 http > cimtrak [ACK] Seq=87 Ack=162 Win=65535 Len=0 Frame 181: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c) Internet Protocol Version 4, Src: 67.195.146.181 (67.195.146.181), Dst: 192.168.10.118 (192.168.10.118) Transmission Control Protocol, Src Port: http (80), Dst Port: cimtrak (3749), Seq: 87, Ack: 162, Len: 0 No. Time Source Destination Protocol Length Info 182 2.260423 192.168.10.1 192.168.10.245 Syslog 204 LOCAL1.INFO: Oct 3 19:44:20 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.118 67.195.146.181 3749 80 msg="Conn End" (HTTP-proxy.endusers-00) Frame 182: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:20 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.118 67.195.146.181 3749 80 msg="Conn End" (HTTP-proxy.endusers-00) No. Time Source Destination Protocol Length Info 183 2.273292 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3507945728, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 183: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 184 2.273315 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3507945728, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 184: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 185 2.273328 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3507945728, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 185: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 186 2.273340 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3507945728, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 186: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 187 2.340660 Dell_39:6b:43 Broadcast ARP 60 Who has 192.168.10.52? Tell 192.168.10.204 Frame 187: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:6b:43 (00:18:8b:39:6b:43), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 188 2.340693 Dell_39:6b:43 Broadcast ARP 60 Who has 192.168.10.52? Tell 192.168.10.204 Frame 188: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:6b:43 (00:18:8b:39:6b:43), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 189 2.373467 124.6.181.33 192.168.10.207 TCP 62 22129 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 189: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22129 (22129), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 190 2.373541 192.168.10.207 124.6.181.33 TCP 62 smtp > 22129 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 190: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 124.6.181.33 (124.6.181.33) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22129 (22129), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 191 2.616858 Dell_42:b9:dc Broadcast ARP 60 Who has 192.168.10.12? Tell 192.168.10.224 Frame 191: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 192 2.616894 Dell_42:b9:dc Broadcast ARP 60 Who has 192.168.10.12? Tell 192.168.10.224 Frame 192: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 193 2.628208 Dell_80:27:ad Broadcast ARP 60 Who has 192.168.10.1? Tell 192.168.10.221 Frame 193: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 194 2.628237 Dell_80:27:ad Broadcast ARP 60 Who has 192.168.10.1? Tell 192.168.10.221 Frame 194: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 195 2.628255 Watchgua_3c:4c:d8 Dell_80:27:ad ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 195: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ad (00:22:19:80:27:ad) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 196 2.628266 Dell_80:27:ad Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.221 (duplicate use of 192.168.10.221 detected!) Frame 196: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) [Duplicate IP address detected for 192.168.10.221 (00:22:19:80:27:ab) - also in use by 00:22:19:80:27:ad (frame 195)] Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 197 2.628391 192.168.10.221 192.168.10.1 ICMP 74 Echo (ping) request id=0x0200, seq=41236/5281, ttl=128 Frame 197: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 192.168.10.1 (192.168.10.1) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 198 2.628404 Watchgua_3c:4c:d8 Dell_80:27:ab ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 (duplicate use of 192.168.10.221 detected!) Frame 198: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) [Duplicate IP address detected for 192.168.10.221 (00:22:19:80:27:ab) - also in use by 00:22:19:80:27:ad (frame 195)] Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 199 2.628492 192.168.10.1 192.168.10.221 ICMP 74 Echo (ping) reply id=0x0200, seq=41236/5281, ttl=64 Frame 199: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.221 (192.168.10.221) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 200 2.631627 Watchgua_3c:4c:d8 Dell_80:27:ab ARP 60 Who has 192.168.10.221? Tell 192.168.10.1 Frame 200: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 201 2.631856 Dell_80:27:ab Watchgua_3c:4c:d8 ARP 60 192.168.10.221 is at 00:22:19:80:27:ab Frame 201: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) [Duplicate IP address detected for 192.168.10.221 (00:22:19:80:27:ab) - also in use by 00:22:19:80:27:ad (frame 195)] Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 202 2.643756 41.252.217.113 192.168.10.207 TCP 60 38715 > smtp [RST, ACK] Seq=1 Ack=1 Win=46506 Len=0 Frame 202: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 38715 (38715), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 203 2.643839 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:44:20 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38715 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 203: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:20 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38715 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 204 2.651548 41.252.217.113 192.168.10.207 TCP 62 38756 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 204: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 38756 (38756), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 205 2.651606 192.168.10.207 41.252.217.113 TCP 62 smtp > 38756 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 205: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 41.252.217.113 (41.252.217.113) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 38756 (38756), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 206 2.712855 124.6.181.33 192.168.10.207 TCP 60 22129 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 206: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22129 (22129), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 207 2.713115 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:44:20 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 207: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:20 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 208 2.713148 192.168.10.207 124.6.181.33 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:43:55 -0400 Frame 208: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 124.6.181.33 (124.6.181.33) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22129 (22129), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 209 2.713188 124.6.181.33 192.168.10.207 TCP 60 22129 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 209: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22129 (22129), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 210 2.845866 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.32 Frame 210: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 211 2.845899 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.32 Frame 211: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 212 2.931927 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 212: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 213 2.931958 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 213: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 214 2.991786 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=1 Ack=1 Win=46505 Len=0 Frame 214: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 215 2.991823 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=1 Ack=4294966027 Win=0 Len=0 Frame 215: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1, Ack: 4294966027, Len: 0 No. Time Source Destination Protocol Length Info 216 3.033247 124.6.181.33 192.168.10.207 SMTP 70 C: EHLO rcrbc.com Frame 216: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22129 (22129), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 16 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 217 3.033509 192.168.10.207 124.6.181.33 SMTP 243 S: 250-mail.mydomain.com Hello [124.6.181.33] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 217: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 124.6.181.33 (124.6.181.33) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22129 (22129), Seq: 122, Ack: 17, Len: 189 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 218 3.033556 124.6.181.33 192.168.10.207 TCP 60 22129 > smtp [ACK] Seq=17 Ack=311 Win=93130 Len=0 Frame 218: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22129 (22129), Dst Port: smtp (25), Seq: 17, Ack: 311, Len: 0 No. Time Source Destination Protocol Length Info 219 3.034082 192.168.10.1 192.168.10.245 Syslog 270 LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 219: 270 bytes on wire (2160 bits), 270 bytes captured (2160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" No. Time Source Destination Protocol Length Info 220 3.034157 192.168.10.1 192.168.10.245 Syslog 276 LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 220: 276 bytes on wire (2208 bits), 276 bytes captured (2208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELI No. Time Source Destination Protocol Length Info 221 3.034242 192.168.10.1 192.168.10.245 Syslog 269 LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 221: 269 bytes on wire (2152 bits), 269 bytes captured (2152 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 222 3.034316 192.168.10.1 192.168.10.245 Syslog 285 LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 222: 285 bytes on wire (2280 bits), 285 bytes captured (2280 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANC No. Time Source Destination Protocol Length Info 223 3.034390 192.168.10.1 192.168.10.245 Syslog 276 LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 223: 276 bytes on wire (2208 bits), 276 bytes captured (2208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARY No. Time Source Destination Protocol Length Info 224 3.034498 192.168.10.1 192.168.10.245 Syslog 270 LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 224: 270 bytes on wire (2160 bits), 270 bytes captured (2160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" No. Time Source Destination Protocol Length Info 225 3.193734 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 225: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 226 3.267952 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1655642368, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 226: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 227 3.267976 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1655642368, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 227: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 228 3.267989 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1655642368, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 228: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 229 3.268001 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1655642368, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 229: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 230 3.288872 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3524722944, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 230: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 231 3.288895 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3524722944, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 231: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 232 3.288907 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3524722944, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 232: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 233 3.288919 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3524722944, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 233: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 234 3.289579 41.252.217.113 192.168.10.207 TCP 60 38756 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 234: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 38756 (38756), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 235 3.289787 192.168.10.207 41.252.217.113 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:43:56 -0400 Frame 235: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 41.252.217.113 (41.252.217.113) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 38756 (38756), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 236 3.290239 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=11834 Ack=371 Win=1002 Len=1448 TSval=536071 TSecr=727492 Frame 236: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 11834, Ack: 371, Len: 1448 Data (1448 bytes) 0000 17 03 01 22 40 7a 7f d2 53 a7 00 bd 19 72 8f 81 ..."@z..S....r.. 0010 84 37 41 d4 19 ac bd 63 9a 29 a8 1e 43 e6 f4 95 .7A....c.)..C... 0020 5b 02 fa 7a 8a ba 32 23 73 b7 43 ea 05 b8 ba 5f [..z..2#s.C...._ 0030 b2 13 cd 95 19 dc 0b ec 57 42 3a a7 bb 45 c3 d7 ........WB:..E.. 0040 b1 41 db 67 85 a7 d0 44 76 88 9a 6d 45 f4 ba 90 .A.g...Dv..mE... 0050 79 62 31 51 9d fb 8e bd b0 97 cd 1b b6 53 5e da yb1Q.........S^. 0060 8c e7 00 1d f9 e1 51 65 75 27 86 39 da 1e 42 e6 ......Qeu'.9..B. 0070 4d 5a ee da b3 76 e8 9f ac f6 58 b2 39 79 b9 1b MZ...v....X.9y.. 0080 9a 96 50 b9 89 1e 35 07 f3 0b 74 22 97 d4 10 8c ..P...5...t".... 0090 ca e7 34 75 27 c7 5c ad 8c ba 48 46 33 81 ca b2 ..4u'.\...HF3... 00a0 7d 8b 99 0e 8d 75 be f5 c4 10 74 f1 1b db 54 bd }....u....t...T. 00b0 d8 97 86 ac 5e 39 09 31 bb ed 68 2f da d5 fa f0 ....^9.1..h/.... 00c0 be ea 84 77 45 d1 e8 1a 0e 74 f1 06 1f e7 fa 4a ...wE....t.....J 00d0 5c bd 66 b6 5b 32 0c 29 2a f8 c7 91 b1 f8 af 0e \.f.[2.)*....... 00e0 29 98 b6 9f a7 d4 88 81 bb 2b b5 bf 28 8f 44 e3 )........+..(.D. 00f0 10 dc 03 2c b0 b5 c0 c5 39 ad 27 61 95 f4 17 97 ...,....9.'a.... 0100 b1 fc 63 88 37 5f c3 92 9d bf 3f c8 51 33 f9 05 ..c.7_....?.Q3.. 0110 71 37 5f 1d 20 70 a0 ce 87 11 91 03 ef 51 d0 3b q7_. p.......Q.; 0120 fc 7e da de 77 3b c9 3c 98 3f 85 4c 92 e5 1d 8f .~..w;.<.?.L.... 0130 c1 f5 b8 0a 93 b1 de 91 1f 14 18 e6 5f 0b cf db ............_... 0140 37 da 86 12 c2 a7 4b 12 39 5c 66 d1 1b 4d c2 2a 7.....K.9\f..M.* 0150 32 17 b7 0e dc e3 6b bf cc bc 61 da f6 f2 70 0f 2.....k...a...p. 0160 fd 67 23 4a fc 72 33 1c 21 4c 9e 80 14 71 63 17 .g#J.r3.!L...qc. 0170 49 21 25 30 f4 05 ca b9 69 25 b6 7e f4 07 b7 5d I!%0....i%.~...] 0180 2a 3b 21 6b 04 30 a4 96 ae 62 a7 cd f4 b2 33 b7 *;!k.0...b....3. 0190 0c 8c 27 b0 2c 62 42 fa c4 37 8f 87 b4 b5 39 6e ..'.,bB..7....9n 01a0 99 26 56 63 13 5a ac 61 18 6b 94 3d 53 6a 1b 33 .&Vc.Z.a.k.=Sj.3 01b0 97 1a ab 5a 47 1e 3c ba 7a 75 f5 c8 eb 93 13 1b ...ZG.<.zu...... 01c0 3b 9c 12 f5 83 4a 63 a3 4d b8 82 d0 85 2a 6f e2 ;....Jc.M....*o. 01d0 bc ed 27 1d 33 67 5b 8a ad 8c 01 10 73 9f fe 85 ..'.3g[.....s... 01e0 e3 80 a7 a8 cb 92 2d f4 60 16 e4 be 25 18 6a f9 ......-.`...%.j. 01f0 fb fd d5 e3 9d 85 f7 58 93 d7 82 ae c3 3a 45 ed .......X.....:E. 0200 86 e2 0b 2d 85 87 f5 95 b2 36 f9 e2 6b 53 9a 29 ...-.....6..kS.) 0210 57 15 9c d3 97 57 52 36 02 04 bc 66 0b 5b 1d 1e W....WR6...f.[.. 0220 33 ed 36 50 c7 99 1c c3 ca 1b 94 fc 4e 9c 48 ec 3.6P........N.H. 0230 6c 5a 82 76 5a b2 5d 6f cd 1b e6 5a 9a 57 33 89 lZ.vZ.]o...Z.W3. 0240 5e 2c bb 4c 2c 5f 16 58 83 83 b6 8d 51 fa 2d f7 ^,.L,_.X....Q.-. 0250 30 7e f1 73 fa 18 51 6b a3 c7 a1 13 19 e9 02 28 0~.s..Qk.......( 0260 9a 97 85 af 60 d7 12 8e 5c ac 9e 31 76 56 9d 5c ....`...\..1vV.\ 0270 98 0c ae 99 15 20 ce 8e f0 2c 62 dd a7 9e 5d 8a ..... ...,b...]. 0280 7c 9d ea 68 7f 88 92 20 aa 6e 1a 3d 01 12 21 75 |..h... .n.=..!u 0290 ab fe af d1 5d f4 8d 06 66 45 a0 76 c6 91 8b d1 ....]...fE.v.... 02a0 30 65 8e 8e 69 9c af 9c 18 32 cd 80 8f 02 55 ce 0e..i....2....U. 02b0 b9 e3 7c 30 ea bd 6e 71 70 81 27 73 e6 67 7c f2 ..|0..nqp.'s.g|. 02c0 34 29 bf 70 9f 88 8c e1 2e 26 03 65 f0 6a f6 15 4).p.....&.e.j.. 02d0 bd 8c 11 7b 60 09 cc 47 c7 52 8d 42 e7 dc 08 92 ...{`..G.R.B.... 02e0 32 d5 ae b5 99 2c 6f 72 2b 05 32 65 b7 dd 49 cf 2....,or+.2e..I. 02f0 4f de 78 c4 9d 94 3f e8 f3 72 b6 ec 85 77 52 6b O.x...?..r...wRk 0300 85 13 2a 5a 7a e5 95 e2 32 4e 7c 0e 4e 5d ff ac ..*Zz...2N|.N].. 0310 ac 78 73 06 2e e9 f0 29 d8 0b 61 c6 eb f6 b1 96 .xs....)..a..... 0320 a1 ec ef 17 10 c1 92 3c 6d 16 bb ea c4 df 9d ff .......<m....... 0330 54 ae 5d 5a 06 2c 9f 27 1d 96 6c 88 d2 04 97 98 T.]Z.,.'..l..... 0340 bf f2 7a c9 9f 20 e1 a7 ed 69 86 c6 7d 02 66 b3 ..z.. ...i..}.f. 0350 ce eb 73 c0 90 37 b7 1c 59 c4 a8 a2 a4 53 6a 39 ..s..7..Y....Sj9 0360 31 35 17 62 54 7f 93 07 39 2d 0c 81 70 8a 7f 9b 15.bT...9-..p... 0370 f6 a6 29 e8 e5 51 bc ee dc 47 fa 66 b1 c6 f2 63 ..)..Q...G.f...c 0380 11 96 b5 d3 40 78 ef 56 4f 9d ad aa 43 f4 7a 98 [email protected]. 0390 e6 f5 60 98 76 46 49 11 58 4e c3 36 8b dc 33 5d ..`.vFI.XN.6..3] 03a0 a3 9e ed 1c f9 89 6f 33 2f 23 62 ef 68 cf 4a 01 ......o3/#b.h.J. 03b0 e5 e1 22 81 a8 6b ad 7f 39 b7 f3 60 44 ae cd 3e .."..k..9..`D..> 03c0 a3 f7 5b 95 90 f9 9a e5 9e 3f be c5 89 8e bd 3a ..[......?.....: 03d0 fb 47 e5 71 69 80 b2 6f 9d 92 7b 84 10 a3 a5 c8 .G.qi..o..{..... 03e0 30 cd a9 81 03 26 31 8f 92 2a c5 9a 08 31 3e c4 0....&1..*...1>. 03f0 c4 d4 81 ee cd 9b ad 7c b0 34 e5 a1 89 3c 2b 37 .......|.4...<+7 0400 de 33 a9 10 9a 46 4f 97 2d 18 cc 2e a9 a6 4d 4b .3...FO.-.....MK 0410 0c 0a ff b3 28 dd 6b 8b 3a c3 f7 16 8a 5d 35 c0 ....(.k.:....]5. 0420 3e ab 24 15 a5 e8 3f 99 50 4d 62 00 f6 3c d8 62 >.$...?.PMb..<.b 0430 57 2d 38 83 f4 fe cb b7 ac f8 7d 59 e3 07 c3 ff W-8.......}Y.... 0440 85 bb d2 61 38 f2 9a 8f be c4 f6 03 9d 7c 21 5b ...a8........|![ 0450 7f f2 26 8f 08 68 74 20 8a b1 1a 66 90 18 e9 b0 ..&..ht ...f.... 0460 c6 07 f7 70 fc a3 18 87 c8 67 9d 8c 5e 6c 24 c2 ...p.....g..^l$. 0470 e6 24 26 40 25 8c 33 1a ac 8c a1 b8 67 5d 0c af .$&@%.3.....g].. 0480 b9 0e 07 b7 8b 67 b4 c7 a8 64 9b a5 eb 86 ba df .....g...d...... 0490 6b ee 6b 54 6d ce 99 1c d9 f8 47 c2 51 89 c2 ce k.kTm.....G.Q... 04a0 1d 2d 1b 93 7d fe 22 89 6f cf ee 16 f7 ca 15 09 .-..}.".o....... 04b0 8a 2b b9 5e 2f 69 02 db 64 df 06 0b 2e 2b 53 89 .+.^/i..d....+S. 04c0 29 be 16 1f 17 23 f2 40 3c 14 fa d2 2b 14 5a 77 )....#.@<...+.Zw 04d0 08 92 b5 20 cb 39 86 94 00 22 5a e7 89 be ab 14 ... .9..."Z..... 04e0 13 01 2f 9b 7a 8e 91 62 e0 fc 2b 1c 20 d8 e6 c4 ../.z..b..+. ... 04f0 f3 b9 2b 7c ab 9f b9 d7 75 7d 1a 09 de f2 2c b3 ..+|....u}....,. 0500 ca c1 66 69 02 89 9a 2c 9f e4 43 f2 83 cf 8b 49 ..fi...,..C....I 0510 58 5d 12 46 40 34 ed 24 f0 5a eb 70 52 aa 95 88 X].F@4.$.Z.pR... 0520 6a e1 d2 40 c9 92 72 49 2a 76 79 a0 de 9d 61 be j..@xxxx*vy...a. 0530 19 58 63 77 45 32 b8 a3 a1 29 68 fe 9c 7b 4b de .XcwE2...)h..{K. 0540 b3 10 23 b0 f1 fd 9c 56 51 64 50 f7 1c e0 99 da ..#....VQdP..... 0550 70 b8 65 bd 01 45 a6 b8 59 c1 e0 c5 8f e6 e3 8c p.e..E..Y....... 0560 bf f8 3f f2 bf 37 24 e8 70 a2 c2 b9 15 83 53 0c ..?..7$.p.....S. 0570 ac 69 5c 71 da 4d e2 a3 76 90 1a d2 f2 da f7 6b .i\q.M..v......k 0580 82 ea 5d 77 50 85 20 f6 20 11 1a 9e b0 55 dc 51 ..]wP. . ....U.Q 0590 2b 32 6a 8a f6 a3 38 13 c0 1a 83 ed b9 65 1b ca +2j...8......e.. 05a0 7a 31 aa d5 d3 0b 44 d9 z1....D. No. Time Source Destination Protocol Length Info 237 3.290325 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=13282 Ack=371 Win=1002 Len=1448 TSval=536071 TSecr=727492 Frame 237: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 13282, Ack: 371, Len: 1448 Data (1448 bytes) 0000 cd bc d5 17 a5 78 d3 95 3d 05 6f 0b 1c 82 50 61 .....x..=.o...Pa 0010 ce 21 2b 23 93 85 1a 4a 52 9f ee 87 4f 1b 6b 27 .!+#...JR...O.k' 0020 f1 4a db a7 31 39 55 73 b4 ae 57 af fa ab 5d 4e .J..19Us..W...]N 0030 bc 14 b0 0d 44 62 2f f5 5a 32 d9 14 8b bd 7b e4 ....Db/.Z2....{. 0040 ed e7 3b 70 7d 1e 2d d7 c8 73 30 76 08 6c b4 d8 ..;p}.-..s0v.l.. 0050 47 f8 f2 5b a8 22 33 9f d1 8f 1b 67 e1 3e da c2 G..[."3....g.>.. 0060 75 f9 a0 b9 c4 12 5c 84 db 77 78 6a 3e 5e 49 7f u.....\..wxj>^I. 0070 ad bd fa 4a cc 16 63 8e fa ff 7a f2 fe 97 42 80 ...J..c...z...B. 0080 02 59 c2 60 2a ad 69 dc 22 72 c8 05 8c d1 42 ac .Y.`*.i."r....B. 0090 35 67 b7 8f 43 15 1a 58 82 87 0a cb e1 10 41 34 5g..C..X......A4 00a0 10 dd 74 d0 dc 81 79 d7 01 26 79 2b a3 a4 7e 9f ..t...y..&y+..~. 00b0 ff 8f 4f fb ee 17 76 93 3c 10 cb 6d 50 da 6f 8a ..O...v.<..mP.o. 00c0 cd fc 93 36 6f 19 9b 9a 90 b6 83 0a a5 af ad b6 ...6o........... 00d0 59 b7 90 f7 05 38 66 5f ec b0 54 25 64 5c 6f 4d Y....8f_..T%d\oM 00e0 46 e3 ee bb 6d 65 82 a8 78 58 f3 e6 b1 8c 3b b4 F...me..xX....;. 00f0 74 83 60 18 76 b2 84 20 89 00 f4 6e 83 51 21 9b t.`.v.. ...n.Q!. 0100 82 5d 49 f7 bc 90 66 8c 03 b1 00 82 83 ee ca 26 .]I...f........& 0110 e4 fb 9d 39 ae 10 cd 82 96 3e e8 62 ff 26 8a d3 ...9.....>.b.&.. 0120 c8 82 6e 7a e6 71 3b f1 76 0e cf c9 9e 3d 92 ff ..nz.q;.v....=.. 0130 ae 09 03 f5 dd d2 86 9f dc ed e6 e7 2c 2a 0d 66 ............,*.f 0140 40 c3 f1 0c 3e e9 56 c8 d0 8d bd 1d 46 d6 a6 c2 @...>.V.....F... 0150 59 5c d6 99 5b 31 45 08 9e 38 91 d0 0c 5c 49 98 Y\..[1E..8...\I. 0160 a6 fe 54 35 1a af 7a 5b 1a 76 9e 3b fc 1b 5e 60 ..T5..z[.v.;..^` 0170 2d 07 83 a5 0a a9 d4 d3 fa 80 72 02 99 09 2c 4a -.........r...,J 0180 7a de 78 4d 8b 13 76 e5 30 d7 0b 88 7f af ef b1 z.xM..v.0....... 0190 5f 89 14 b3 cd a6 5b dd 63 de 47 0d fc f8 26 91 _.....[.c.G...&. 01a0 52 62 67 be 78 f7 a4 fa cb 0b 94 6d b2 bc cd 1c Rbg.x......m.... 01b0 7a 92 58 11 00 29 83 03 b4 78 ae 02 39 d5 e9 bb z.X..)...x..9... 01c0 b4 02 21 7c dc f6 55 a6 c7 c1 10 02 9c 07 d4 6c ..!|..U........l 01d0 5b f3 56 a8 d2 4e 34 b0 fb 53 95 cc 29 d8 67 0f [.V..N4..S..).g. 01e0 62 a2 99 d8 f7 df c1 f5 f0 8f 61 9b 4b a0 46 d2 b.........a.K.F. 01f0 4a ee 14 f1 a9 50 d4 ab 2f 21 fc 1b 84 d4 f0 43 J....P../!.....C 0200 a4 27 63 20 49 e8 0b 48 e4 ab 4e f7 69 b4 08 b5 .'c I..H..N.i... 0210 c4 0b 07 ff d6 15 4c d4 33 b0 fb 55 4c 19 19 33 ......L.3..UL..3 0220 67 97 78 2b 44 c0 cb 42 5d 5b 55 8f 8f bd 6b cc g.x+D..B][U...k. 0230 21 c3 7c 47 d7 d8 df 9f d1 94 2a 91 60 47 3b d8 !.|G......*.`G;. 0240 f7 6f 95 2e 35 4e e0 46 9b 0c ea 03 e1 8a 4f a2 .o..5N.F......O. 0250 ab 45 1d e7 da a0 7d 68 97 33 ae 80 af c9 ec dd .E....}h.3...... 0260 94 d2 43 12 73 37 64 63 ac 75 b6 cf 9c 02 13 68 ..C.s7dc.u.....h 0270 b0 b9 92 63 0e 82 3f 9f 59 21 5f b5 7f c4 39 6b ...c..?.Y!_...9k 0280 cb 46 d1 49 36 cf 68 06 0f bc 66 46 87 48 b3 2f .F.I6.h...fF.H./ 0290 d3 3c 39 b6 81 20 f0 1c 85 f9 df af 5a 17 ec 23 .<9.. ......Z..# 02a0 da c6 ec 3f d9 da 00 d1 ca 38 77 88 46 74 ac 32 ...?.....8w.Ft.2 02b0 ae 3e 78 89 9c 0a f4 b8 c2 20 2a 12 f0 ec 0b 2c .>x...... *...., 02c0 11 c9 6a 50 46 43 a7 0d 91 14 5d c1 13 cb d0 bb ..jPFC....]..... 02d0 db 18 cb 0c ea 13 f1 86 ab 6c 73 b0 e2 37 56 dc .........ls..7V. 02e0 e1 85 c0 c7 cc b6 82 94 22 99 bc 75 74 ad 7d 68 ........"..ut.}h 02f0 f0 5a bb 10 33 6b 62 bb ed bd 62 0f a8 aa cc 84 .Z..3kb...b..... 0300 e2 ea 36 23 97 c6 7d 57 e6 7d 70 e0 24 52 f0 36 ..6#..}W.}p.$R.6 0310 f4 2e 59 ba b1 d8 6d b8 8a 4e 0e 43 45 ab 10 8c ..Y...m..N.CE... 0320 93 0e 04 f0 1a 20 99 50 f5 22 93 9b 56 9e 94 09 ..... .P."..V... 0330 70 1b c4 c6 55 88 6c 65 15 65 cb 8b 24 2f 06 80 p...U.le.e..$/.. 0340 8f 78 63 f4 f6 f3 f6 26 4f f2 75 98 ef 1f 26 6a .xc....&O.u...&j 0350 9d 4d 82 01 c5 39 4d b2 15 a6 54 04 33 06 fb f1 .M...9M...T.3... 0360 0d 90 6c a6 0a 80 0d 2a 6f b1 be 85 90 ed e1 56 ..l....*o......V 0370 eb a8 ee ef 77 7a 5f 20 f6 ef 8c 52 65 b9 1c 32 ....wz_ ...Re..2 0380 d5 d5 f2 d7 59 7b 27 74 20 ed 30 dc e7 d0 e3 2e ....Y{'t .0..... 0390 77 27 19 fc 21 a4 fd 18 e3 b0 b7 4f 31 5d 9c b5 w'..!......O1].. 03a0 a4 e8 bc 6d c4 4b 66 52 3d fd f3 08 bd 40 ef de ...m.KfR=....@.. 03b0 9a 05 3f 03 54 86 b6 06 71 83 5f 37 d6 66 80 bd ..?.T...q._7.f.. 03c0 3e 35 f2 a9 a5 ca 75 8f cf c7 a1 74 cd 4e cb 1f >5....u....t.N.. 03d0 61 17 b8 a9 bf bc d3 93 d2 b0 aa 14 6a b0 6f 04 a...........j.o. 03e0 cd 73 95 b9 47 64 3a 19 72 fd 71 7d fa ad 3c e8 .s..Gd:.r.q}..<. 03f0 79 fd 0b 67 20 52 cd 66 be 4b a6 6d 62 b2 e6 ee y..g R.f.K.mb... 0400 35 9d f6 3b d5 fb 79 f5 5e 9a 42 f5 f4 ae 67 53 5..;..y.^.B...gS 0410 0f d2 8c 5b 15 9f a4 d4 e8 c5 bc 63 12 e1 bc d8 ...[.......c.... 0420 da fe d5 74 35 33 1f c1 58 9d 7c 04 67 6d 1e 43 ...t53..X.|.gm.C 0430 79 11 11 2a f7 72 b2 18 86 2c 6c 04 46 45 7e b4 y..*.r...,l.FE~. 0440 6f 1f 03 8a ef 12 2c b5 c5 3b 39 c4 53 b1 4d 2d o.....,..;9.S.M- 0450 ae 40 28 00 49 65 98 db 63 6e c8 10 0f 22 ef 54 .@(.Ie..cn...".T 0460 4f 9a 37 2b 87 48 3d 3d 54 72 cd 97 35 2d 49 b5 O.7+.H==Tr..5-I. 0470 91 a4 53 95 e0 2d 56 50 f0 ea 2e 04 ac 09 a2 ca ..S..-VP........ 0480 8d 42 61 48 58 c1 93 37 da db ab 8f 13 bb 38 4c .BaHX..7......8L 0490 9c 87 2d 28 5d 26 5e af 09 3d 56 ee 1f 6e 51 26 ..-(]&^..=V..nQ& 04a0 a4 9f 9b 34 d9 24 4b 02 b1 59 90 91 94 1d 37 a2 ...4.$K..Y....7. 04b0 e2 14 c1 54 a6 f7 70 95 bb c2 91 f1 2d 76 43 38 ...T..p.....-vC8 04c0 09 d6 33 d9 95 6b 92 c9 89 6c 58 93 e8 e2 0f 56 ..3..k...lX....V 04d0 b9 9a 31 2e 8c 84 b3 d3 58 75 97 c8 53 54 b9 05 ..1.....Xu..ST.. 04e0 de 10 df eb 4b 80 ac 28 aa ec b8 9e fe d9 0e 41 ....K..(.......A 04f0 c2 31 52 79 15 5d 39 3f 6c f3 13 db ef 9d 31 ad .1Ry.]9?l.....1. 0500 0c e8 77 47 62 73 62 fd a3 d4 5a 4b 2f 16 ef 8f ..wGbsb...ZK/... 0510 93 84 f5 16 c5 66 1e ab f6 07 58 20 d3 5b bb 51 .....f....X .[.Q 0520 13 52 e7 dd 37 51 89 d0 29 dc 6e 73 6d f3 c1 98 .R..7Q..).nsm... 0530 c8 28 ad 6b 41 c7 58 58 e1 21 c9 26 9a 33 29 a3 .(.kA.XX.!.&.3). 0540 e0 40 f5 a3 bc 71 51 2e c0 48 a6 64 68 dd 5f e1 [email protected]._. 0550 04 82 e6 b0 90 16 31 7c 8d 0b 6b 2f a4 da 9d 82 ......1|..k/.... 0560 c2 e0 2c 2a 56 60 05 b4 1f 7d 14 e0 14 ec 91 d1 ..,*V`...}...... 0570 21 91 42 27 9b fe 31 42 33 05 9a 86 a4 9d 4b 50 !.B'..1B3.....KP 0580 3d 09 64 a7 6a 9a a7 c8 51 27 19 7c 9f 99 ef 1c =.d.j...Q'.|.... 0590 be b6 ed a5 05 93 2a 8c e0 05 4a 15 b2 c4 ab 52 ......*...J....R 05a0 25 c0 cc 9c 73 b4 22 ca %...s.". No. Time Source Destination Protocol Length Info 238 3.290409 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=14730 Ack=371 Win=1002 Len=1448 TSval=536071 TSecr=727492 Frame 238: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 14730, Ack: 371, Len: 1448 Data (1448 bytes) 0000 62 83 e6 f4 5c 3b 62 b8 b1 ab 80 3c d7 ec c2 e3 b...\;b....<.... 0010 62 a0 ac b2 cc a9 fb 77 d8 16 9a 52 aa ef 4b e2 b......w...R..K. 0020 bf 38 e2 9f a7 2f 67 5b 59 7a 15 39 e0 b7 22 98 .8.../g[Yz.9..". 0030 24 ba a0 53 aa 65 7f 42 ca f8 70 f4 66 82 f3 98 $..S.e.B..p.f... 0040 4a 6d 17 4f 23 fa 32 9c 10 53 87 d2 5e 43 85 de Jm.O#.2..S..^C.. 0050 1d 6e d9 ba 95 c8 6f d0 d4 7c a1 b9 4b ed 0b a1 .n....o..|..K... 0060 d2 29 98 40 2d 31 c6 53 f0 15 7a 65 66 80 ba aa .)[email protected]... 0070 1f f8 03 81 5e 81 5d 89 3a 9e 31 4f d2 56 91 62 ....^.].:.1O.V.b 0080 42 ef a9 91 b0 d1 9b 96 2c 00 e6 26 eb ba 66 94 B.......,..&..f. 0090 b2 4b 1b fb 93 f5 3c f5 08 30 68 37 70 ce 7c c7 .K....<..0h7p.|. 00a0 73 d6 4b 0f 27 ed c8 2e 7d e5 40 b2 58 15 15 99 s.K.'...}[email protected]... 00b0 cf 21 4d ee f4 4f ca c9 7a 3f 51 17 f7 a9 81 da .!M..O..z?Q..... 00c0 3f 7c 10 2f 0f 1a 1d 50 91 9f ab 3f a8 44 57 88 ?|./...P...?.DW. 00d0 b9 45 90 67 64 73 b4 8d 92 ba 5a 08 fb 37 54 67 .E.gds....Z..7Tg 00e0 4d e5 36 4c 47 fd 58 9c 0f cd da 33 dd 92 f6 7b M.6LG.X....3...{ 00f0 c5 4f 2d d6 a8 16 12 21 d0 42 1a 57 63 c7 75 63 .O-....!.B.Wc.uc 0100 6e c3 11 92 37 29 da eb a3 67 69 23 4e 51 95 b3 n...7)...gi#NQ.. 0110 35 31 c3 c0 cc 1b bf 15 9c 3f e0 1a 6a 9c 15 22 51.......?..j.." 0120 c0 ac 5e b5 2f 70 8b ff 73 81 ec 3a be df 92 e3 ..^./p..s..:.... 0130 78 d2 cb 13 8f 30 19 b4 bc 7f ac bd 8e 37 15 bd x....0.......7.. 0140 bb a3 2e 4d 45 dd d0 bc f1 53 33 81 ce 9c cf 6b ...ME....S3....k 0150 e0 2c 44 6e 9b 18 ce 8a 70 2a 16 50 0e b2 42 2e .,Dn....p*.P..B. 0160 e2 fd 89 68 1c 8e 7b 67 1a db 33 1c e7 ea 5d 2e ...h..{g..3...]. 0170 9c 3d 08 8c 99 0b 9f c0 b5 03 6d 77 98 88 29 7f .=........mw..). 0180 c5 9b a9 64 11 89 d3 65 23 35 f2 50 6c 99 57 73 ...d...e#5.Pl.Ws 0190 65 fc 09 d7 08 72 4e a3 1d cc fe 83 31 f1 87 37 e....rN.....1..7 01a0 56 b7 70 c0 d8 6c 24 8a e4 56 c9 80 91 cc 32 95 V.p..l$..V....2. 01b0 38 db 31 df 5a 50 c6 38 74 24 b2 82 f9 c5 2a ef 8.1.ZP.8t$....*. 01c0 c6 a8 23 d8 96 de 49 0b 3e b4 91 65 5a 39 a7 31 ..#...I.>..eZ9.1 01d0 84 25 66 d1 16 9b 79 73 5b f1 81 fe 54 16 82 6a .%f...ys[...T..j 01e0 a0 69 c9 5b 65 81 94 66 c4 a8 76 11 ba 94 bd 13 .i.[e..f..v..... 01f0 44 e5 2e 3b 69 7b 26 16 f9 93 53 85 35 d0 53 21 D..;i{&...S.5.S! 0200 8f 4a 21 a7 64 6e 42 db 35 b1 8b a5 b7 05 fb b6 .J!.dnB.5....... 0210 9f 09 a9 83 da cb f9 cd 28 4e e7 7e 63 22 31 87 ........(N.~c"1. 0220 56 67 15 f5 2d e4 ff 02 f9 54 a5 70 c5 4f a2 6f Vg..-....T.p.O.o 0230 76 39 38 ad a3 60 55 0e 2e 53 64 61 ce ae 20 ad v98..`U..Sda.. . 0240 84 7d 43 00 f8 7f 30 0c a2 6e d6 cc 74 48 be 38 .}C...0..n..tH.8 0250 6d 76 04 16 7b 3e 72 33 5d 18 25 55 0f 53 9d 80 mv..{>r3].%U.S.. 0260 ec f3 e1 76 57 48 70 43 fe b9 cd 1d 67 a9 f4 12 ...vWHpC....g... 0270 01 62 6e b0 04 8d 93 57 0e 56 f4 dd 5a a4 32 9d .bn....W.V..Z.2. 0280 9d 18 0d 0d e2 8c 15 94 15 78 18 98 dc 0e f6 14 .........x...... 0290 a2 cf fd af 06 ac 22 f8 aa 77 2e 90 73 2d b4 ca ......"..w..s-.. 02a0 00 60 8e 3c 00 5f 06 51 0b 4f 80 7d 7f 57 0f fd .`.<._.Q.O.}.W.. 02b0 63 6b 4d a6 42 ce 6b db 7f 37 6a 98 8f fe b5 67 ckM.B.k..7j....g 02c0 16 cc f2 d3 2c 2a 1f 11 d1 20 15 bf c0 a6 fb 0a ....,*... ...... 02d0 fa 38 e1 ec 86 7d 71 ed 6e 9c f9 59 f4 36 3b b6 .8...}q.n..Y.6;. 02e0 d0 57 bd 4f bc 36 69 3a 8f 3c a2 a4 67 73 ee 36 .W.O.6i:.<..gs.6 02f0 fc cb 46 b0 33 d2 ef 03 7a ee c9 1f 82 ef be b7 ..F.3...z....... 0300 aa a3 8a 07 34 fa 9f b2 d4 de fd fa 0f 1e b0 a2 ....4........... 0310 4a a9 47 d8 47 29 f6 46 fc 02 33 3b d5 0d 7e 78 J.G.G).F..3;..~x 0320 b4 db 3c e2 e8 7f fe 97 fa 3c e5 44 8b c7 a0 73 ..<......<.D...s 0330 de 52 3e 58 49 8e e4 39 b4 65 21 3b 28 b3 dd c9 .R>XI..9.e!;(... 0340 43 ca fc 24 30 5f 30 27 bf 78 28 ac 37 c7 4b d5 C..$0_0'.x(.7.K. 0350 4b 8d d7 72 d2 2e 0f 28 cc b5 df 18 ae 62 ca 77 K..r...(.....b.w 0360 a2 c3 ec 18 12 64 1c 88 01 d9 a7 ca 41 e9 2c 9d .....d......A.,. 0370 e1 e3 47 ec 74 73 3b 0b e4 8c 5c 57 e7 e2 49 42 ..G.ts;...\W..IB 0380 54 2f 95 be c0 9b d3 f2 12 71 b8 2d eb 80 89 c5 T/.......q.-.... 0390 39 65 ef 78 61 6b 81 7a 39 7a 3d 46 77 49 dc 89 9e.xak.z9z=FwI.. 03a0 2b a3 a8 5c 8a 97 14 c9 f8 c1 13 e9 98 39 9f cd +..\.........9.. 03b0 1e 0e 61 bd 83 a8 de 52 95 3e 59 c4 2c d8 9e 15 ..a....R.>Y.,... 03c0 9e d4 95 be 17 39 88 9b 3d 8b 9d 1f 60 84 ef 49 .....9..=...`..I 03d0 e7 6c ef ad 6b 0f 12 55 89 e6 c9 f6 5a 2d 77 0b .l..k..U....Z-w. 03e0 ea eb 8f 8d a5 f9 73 93 16 7f bb b9 87 2d d6 2b ......s......-.+ 03f0 81 4a 59 e8 f4 97 79 bf dd 4b a9 1a 4a 4b 1b fc .JY...y..K..JK.. 0400 0a 88 a5 46 77 b3 34 b3 5a e9 b3 34 94 94 9f 64 ...Fw.4.Z..4...d 0410 88 99 58 9e 76 68 86 16 05 7a 65 c6 b6 0f 68 84 ..X.vh...ze...h. 0420 6e 01 51 6b 6a 88 4d 9d 25 03 2d 06 b9 61 aa cb n.Qkj.M.%.-..a.. 0430 bd 5d 0d f0 fa e9 95 cb 83 5d 49 bd 32 68 33 2f .].......]I.2h3/ 0440 c3 4e 59 5d bc 96 ba 3a 9c b3 d3 a1 c0 87 3b de .NY]...:......;. 0450 c3 53 c4 56 45 bb 3d 01 6e ca 0e e4 2e 6a 7f da .S.VE.=.n....j.. 0460 23 5b a0 c9 8b 63 d5 44 8e e8 e4 43 e6 9a a0 3d #[...c.D...C...= 0470 2d c0 a0 c4 af 90 17 29 19 26 c6 24 ca 2c 8c b8 -......).&.$.,.. 0480 5d 06 f5 69 0e f7 01 04 01 75 c1 f7 d6 ed 3b 89 ]..i.....u....;. 0490 96 de c3 c8 2e 8b aa dc fe b3 6b a4 d6 53 b9 d2 ..........k..S.. 04a0 96 37 6e 92 62 e3 3f 79 34 ef 9e ed 86 df f1 48 .7n.b.?y4......H 04b0 6f d0 4e 14 3f a3 b0 b8 3a 01 f8 68 f3 79 b0 f3 o.N.?...:..h.y.. 04c0 78 c6 55 3b 7b 59 5e 7b c9 2f cc ee 7a 91 57 22 x.U;{Y^{./..z.W" 04d0 49 87 0a 07 a5 1f 98 e2 cd 13 51 e6 a0 15 28 6b I.........Q...(k 04e0 be a9 17 44 ed e8 81 23 16 11 9e f5 ff db 2c 47 ...D...#......,G 04f0 a2 69 3b 61 1c 66 5b ad 5e 1a 60 da 61 5c b9 06 .i;a.f[.^.`.a\.. 0500 30 33 93 b7 31 98 ad 04 d8 10 28 dd 69 94 2f 22 03..1.....(.i./" 0510 fd 4a e8 a1 ff b7 25 80 5f 98 bc 16 20 5d 96 cd .J....%._... ].. 0520 8c 44 68 9c e4 86 11 e1 cc d3 d9 ad e9 12 a7 b1 .Dh............. 0530 98 14 b2 ea 6f 15 b9 8e 33 bb db 48 99 79 be 50 ....o...3..H.y.P 0540 d7 5a 28 90 10 43 51 a6 e8 d9 e4 1a 3e 11 e3 25 .Z(..CQ.....>..% 0550 1a 39 45 d4 75 80 0d c3 28 47 32 19 d1 18 6d aa .9E.u...(G2...m. 0560 01 b4 d5 ef dc a4 e6 7a ba b1 fb 0c fb 92 6b bb .......z......k. 0570 14 5c 75 fd 76 09 ae 8f a5 26 05 93 0a 66 16 43 .\u.v....&...f.C 0580 ef 73 15 59 5a 27 77 8e 61 d8 92 fb 16 1f ad 13 .s.YZ'w.a....... 0590 cd 61 e8 75 56 a7 f0 42 fb 07 cc f9 2a 81 dc 1d .a.uV..B....*... 05a0 6c d5 02 b5 01 04 5f 45 l....._E No. Time Source Destination Protocol Length Info 239 3.290494 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 239: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 240 3.290547 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=371 Ack=14730 Win=65535 Len=0 TSval=727515 TSecr=536071 Frame 240: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 371, Ack: 14730, Len: 0 No. Time Source Destination Protocol Length Info 241 3.290628 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=16178 Ack=371 Win=1002 Len=1448 TSval=536071 TSecr=727515 Frame 241: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 16178, Ack: 371, Len: 1448 Data (1448 bytes) 0000 fe 73 8a 60 ec d1 25 f7 71 8a df fe 93 22 29 77 .s.`..%.q....")w 0010 03 f1 3e 9d f8 39 4b eb 69 71 5b d3 b7 cd 77 26 ..>..9K.iq[...w& 0020 96 5c cd 04 18 f8 cc 03 84 eb 75 24 44 a1 d0 aa .\........u$D... 0030 75 8b c0 30 ae 88 51 ce 5f ae 40 35 53 0e 7f 8c u..0..Q._.@5S... 0040 47 63 ae 15 21 3e d0 b8 59 57 0e 1d e2 35 9f d9 Gc..!>..YW...5.. 0050 a1 5b d8 eb 07 18 5d 56 73 40 5e 63 4d 0d 27 62 .[....]Vs@^cM.'b 0060 ee 3b 80 5b b2 76 5c cc a6 1a 62 71 95 06 eb 32 .;.[.v\...bq...2 0070 8b 20 b2 bf 76 11 fb d7 e6 96 80 84 6c d8 da a9 . ..v.......l... 0080 89 0f b4 a9 1a d2 fa 9f 6b 52 0c 9d 66 97 d4 57 ........kR..f..W 0090 c0 43 68 c2 24 ba 77 75 84 8d bb d3 9e 51 1a 24 .Ch.$.wu.....Q.$ 00a0 a3 68 93 c2 bd df 22 5d d5 6f 2d b9 e1 8b ec 7a .h...."].o-....z 00b0 74 c7 c2 15 78 8f 7b e9 fb 8f b6 44 d5 58 87 cb t...x.{....D.X.. 00c0 90 90 fa a6 ab 80 fe 61 ca a4 8d 16 af 8c 84 43 .......a.......C 00d0 cd eb fc f7 07 4f a1 44 bf 41 62 af de ff 88 83 .....O.D.Ab..... 00e0 75 00 f2 38 4a 20 20 1c d7 93 f3 4a 87 5e aa fe u..8J ....J.^.. 00f0 46 55 56 d3 a9 67 51 a5 9f b6 8e 37 83 96 6f c8 FUV..gQ....7..o. 0100 ff b5 75 09 82 c6 6d 3a 78 b6 71 22 c7 e5 14 7e ..u...m:x.q"...~ 0110 bc cc 97 71 ac cd 8d 2c 82 54 fe ed 71 c8 e0 be ...q...,.T..q... 0120 c8 16 e5 69 b2 4a 24 2e 62 cc b4 c7 5e ba 2b 85 ...i.J$.b...^.+. 0130 36 43 13 6e 18 56 56 92 c0 88 7d ee 21 c0 45 43 6C.n.VV...}.!.EC 0140 63 9b dd ff 89 68 a5 eb d6 de 90 5a c2 90 7c bf c....h.....Z..|. 0150 25 78 13 4c ba 26 26 ad 7a 08 a4 db d1 43 59 5b %x.L.&&.z....CY[ 0160 c1 01 82 f0 b8 5d 67 7b 6a 88 a5 74 a3 66 76 33 .....]g{j..t.fv3 0170 64 f0 4f 38 5e 56 35 4d ac f5 2c 06 aa dd b1 f9 d.O8^V5M..,..... 0180 c3 ee 48 35 a8 a8 48 fa 30 05 c7 f1 e7 18 74 41 ..H5..H.0.....tA 0190 64 f8 f0 e8 11 00 48 ef ef f4 68 de 4e 94 59 2a d.....H...h.N.Y* 01a0 9b 68 13 3c 2e bb b7 0c a3 ae 21 22 b3 78 ab 86 .h.<......!".x.. 01b0 b2 0a a4 05 be 6d bf 27 5d d5 a0 69 9d 17 6e 75 .....m.']..i..nu 01c0 4a 13 60 1f d1 99 0a 3c 5d b0 ff 76 7d 8d 97 d7 J.`....<]..v}... 01d0 39 c6 1b 9d 6f 08 f2 2a a7 f6 a7 b3 d4 c8 be bc 9...o..*........ 01e0 0d 19 ee b1 c1 30 a7 2f 19 f7 3f f2 fc 04 6b 5d .....0./..?...k] 01f0 a3 04 27 43 61 e8 52 c7 2d 99 89 39 f2 a6 9a 06 ..'Ca.R.-..9.... 0200 21 82 26 16 97 8c 8f 03 ff 67 4e 70 d1 03 c9 52 !.&......gNp...R 0210 9b 9a 83 e9 d2 18 95 7d d0 db 45 88 7c 47 94 f6 .......}..E.|G.. 0220 04 f2 7b f8 b7 76 c2 40 c1 13 30 02 01 f8 fa 3b ..{[email protected]....; 0230 62 24 f3 9a 65 0f 86 bd ef cf 78 93 61 b2 2b 1b b$..e.....x.a.+. 0240 85 38 0b cf 96 8f 09 4f cf 82 30 a5 b0 37 f8 15 .8.....O..0..7.. 0250 67 90 ad 73 6c 6e 33 8d ac 5f 90 88 b7 c5 df 29 g..sln3.._.....) 0260 61 cf 7c 16 a1 81 75 f1 0f 17 a0 4d 3a 20 bd 3d a.|...u....M: .= 0270 e1 b3 fb 75 4e 0b ed cb 42 cf 01 ff d2 18 2d 52 ...uN...B.....-R 0280 53 a6 49 6b f3 68 f2 46 8d c7 68 43 13 10 50 ca S.Ik.h.F..hC..P. 0290 b8 1b 9f be 08 b5 05 b1 2a a4 a5 cf 26 34 19 eb ........*...&4.. 02a0 b1 c1 2d f2 3e 88 86 ac 8b 8f 70 b1 e7 7f ec f0 ..-.>.....p..... 02b0 bb ad cf 06 b5 90 3b 94 bf 14 da 41 6c 74 c4 ea ......;....Alt.. 02c0 eb bc fc 79 00 05 89 1d 0f 02 20 db 54 53 f5 12 ...y...... .TS.. 02d0 ac 8d 55 1d ef e2 1a 97 be 0d a8 16 2c 49 2b 5f ..U.........,I+_ 02e0 34 91 3a a3 3f 83 cb 9b dc 47 da a3 23 52 b8 d2 4.:.?....G..#R.. 02f0 dd f9 f5 a1 30 c8 71 44 38 c1 20 6b b8 ef 10 76 ....0.qD8. k...v 0300 a0 6d d5 3d e2 3f e2 79 ef b8 55 72 84 f1 be c8 .m.=.?.y..Ur.... 0310 d0 1c 47 cf 3d 0c e7 4d 6f 09 89 ee 8b e2 57 84 ..G.=..Mo.....W. 0320 16 e0 ac 61 e0 d1 43 35 ea 6a ec da 9b 88 f4 f5 ...a..C5.j...... 0330 78 72 00 63 26 0c 08 35 97 c5 f8 af db 40 80 a6 xr.c&..5.....@.. 0340 6d e7 c6 cf 99 56 88 b6 0b bf 22 41 f8 70 c5 be m....V...."A.p.. 0350 ec 65 16 f3 a2 31 bd 67 f3 de 9c 58 4a f0 df eb .e...1.g...XJ... 0360 18 6c f2 b5 f9 20 65 6d 15 7b ca 8f fb c1 de 45 .l... em.{.....E 0370 44 fc 73 88 02 48 f5 55 97 b5 51 28 14 23 43 66 D.s..H.U..Q(.#Cf 0380 02 c8 33 4b dc 3b 7f 70 dd e9 01 19 8d b2 ee 48 ..3K.;.p.......H 0390 81 83 99 84 c5 ef d9 ed e9 6d 06 d1 a0 0c 94 b3 .........m...... 03a0 da db d2 a3 77 89 60 4e e1 ed f3 4e 8d 3f 35 40 ....w.`N...N.?5@ 03b0 20 ab f9 97 1f 6a 39 c2 0c bb d7 f6 cf f8 23 0a ....j9.......#. 03c0 0b 7d e5 ed 07 de ec 29 4c 6d b6 ae d8 2d 71 fe .}.....)Lm...-q. 03d0 1d 71 7f 27 4b 8e f9 f2 05 ce 71 8a ca 32 4d a6 .q.'K.....q..2M. 03e0 16 67 96 56 9a 99 66 73 ac 89 26 71 e7 25 51 68 .g.V..fs..&q.%Qh 03f0 08 83 c0 24 28 05 ae ff 68 64 77 9d 8b 0e 9f 3f ...$(...hdw....? 0400 9a 31 77 95 f2 36 b2 c9 42 80 ac 03 b4 5b 22 c5 .1w..6..B....[". 0410 6d f7 bb 98 6e 9e a2 96 49 c4 e5 f9 39 a3 c7 fd m...n...I...9... 0420 9e 5f da b3 40 fb e2 4d 7c 30 0a 71 c2 2d 0a 25 [email protected]|0.q.-.% 0430 5e 50 a7 c9 9b 67 d1 5b fe 87 a2 b3 89 60 50 fa ^P...g.[.....`P. 0440 02 5f 53 2d e7 8b c1 1c 9f ca 2c c5 d5 75 4c d4 ._S-......,..uL. 0450 f2 75 01 8c 80 1f 74 d1 c9 b8 83 f8 66 ff 67 a4 .u....t.....f.g. 0460 26 b5 c5 77 9c 70 7d 90 07 45 a2 8a 65 3c 6f e3 &..w.p}..E..e<o. 0470 24 dd bb 1a 12 b6 96 d2 31 bf d9 12 d1 71 ef a1 $.......1....q.. 0480 35 62 54 e7 bf 8e 1a 84 ae 74 03 07 6f 28 17 66 5bT......t..o(.f 0490 5e 0e e7 4f a6 92 e9 c0 67 63 9b 97 91 e0 ac af ^..O....gc...... 04a0 ba a7 0e d0 96 58 50 ab 43 02 3e 34 7d 99 a5 27 .....XP.C.>4}..' 04b0 f6 39 25 d7 a9 7b a0 b3 fd 37 fb 0d 38 90 a7 d1 .9%..{...7..8... 04c0 10 97 13 41 cb 70 c2 d3 d3 9f 9e 27 71 9c 4a dd ...A.p.....'q.J. 04d0 cb 1a 2d 4e 3c a8 cd ce 47 55 06 bf e8 fc 47 9e ..-N<...GU....G. 04e0 f0 79 74 66 57 af e1 ba 89 2b 8d 7a 28 08 47 c1 .ytfW....+.z(.G. 04f0 da 6b da 7c b7 45 c8 20 7c 84 b9 9e 6f c4 f9 b9 .k.|.E. |...o... 0500 5a 0b 3e 3e 6f 34 9d 09 3d 68 f2 f6 dc 87 7b 37 Z.>>o4..=h....{7 0510 9d 28 67 4b de 34 a3 80 11 11 f0 ef 91 e8 b4 b2 .(gK.4.......... 0520 26 d6 ed 31 a0 90 80 88 1c 16 93 78 5a 77 bf 2d &..1.......xZw.- 0530 64 25 c3 d9 b2 0e 38 2d f0 9e 6b 15 5f db a8 ae d%....8-..k._... 0540 6a 0d b7 b3 4b 88 17 5e d8 74 2d 58 3d d8 e0 49 j...K..^.t-X=..I 0550 40 c0 56 36 03 29 8f 23 48 04 9c c0 4c 6e b6 ad @.V6.).#H...Ln.. 0560 26 37 8c 7e 2f e2 53 09 23 17 ff 20 b9 fd f5 7d &7.~/.S.#.. ...} 0570 88 b2 1d 5e 53 6d 0f 5f 98 73 bf 9b 2a a9 9b c2 ...^Sm._.s..*... 0580 a5 e2 4f 81 8b a5 0f fa 9b f3 53 6a b3 26 41 01 ..O.......Sj.&A. 0590 75 79 00 3b 13 07 21 31 cf 79 a7 3b c0 5e d1 04 uy.;..!1.y.;.^.. 05a0 f6 34 96 27 65 43 c0 09 .4.'eC.. No. Time Source Destination Protocol Length Info 242 3.290706 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=17626 Ack=371 Win=1002 Len=1448 TSval=536071 TSecr=727515 Frame 242: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 17626, Ack: 371, Len: 1448 Data (1448 bytes) 0000 40 2c db dd 1c df b7 ac 99 e7 ec 9d 62 38 1a 42 @,..........b8.B 0010 00 cd dd ea 38 fa 3c bf a6 50 8b 64 de bb d9 7b ....8.<..P.d...{ 0020 04 0d 0a 95 1f e4 df f0 49 0f 8a 1f 9e e0 77 1f ........I.....w. 0030 59 7e a5 1c 08 4f 7a 8b 00 e5 d5 53 cd 69 33 1f Y~...Oz....S.i3. 0040 a3 d4 c8 fc 85 d8 ec 26 d7 55 18 dd 04 c8 d2 d3 .......&.U...... 0050 32 d2 0c e2 50 c2 2f e1 ff ab cc dc 9e 25 94 db 2...P./......%.. 0060 1b 48 71 60 7b 7c 79 8a d7 62 66 80 63 fa 80 25 .Hq`{|y..bf.c..% 0070 a3 52 b8 83 0f a9 f1 fd 0d a4 01 86 0f bd a0 25 .R.............% 0080 e8 c4 1a fa bf 7e da 19 97 2f 7b 11 10 cf 28 fe .....~.../{...(. 0090 d2 ae 5c 06 16 6d aa 81 54 4c 92 f9 c4 2c de 12 ..\..m..TL...,.. 00a0 52 aa d5 e8 6e 5a 3d 00 b6 aa 95 c2 39 9d c4 72 R...nZ=.....9..r 00b0 34 2f 8e 77 24 b6 b3 f6 96 06 b7 6c 2f f0 54 07 4/.w$......l/.T. 00c0 10 99 81 d1 08 ec 7f c9 93 26 f1 a1 42 7c 22 91 .........&..B|". 00d0 4b 71 8e e2 f3 95 73 b9 c0 01 6c d2 ab bc de 66 Kq....s...l....f 00e0 73 ae 8c 96 ae 76 5d 24 08 7d b8 2e 6d 4d d5 33 s....v]$.}..mM.3 00f0 78 f5 e6 89 84 04 25 d8 fe ce 91 b1 f4 f1 57 e4 x.....%.......W. 0100 e2 8c 63 f8 c0 6b e4 52 57 c4 42 93 8c 13 8e dd ..c..k.RW.B..... 0110 77 71 e3 4b 3c 26 e7 93 70 df 62 38 c4 aa 94 55 wq.K<&..p.b8...U 0120 35 44 93 c7 25 f6 7e ca 7c fa e3 f5 b7 28 89 be 5D..%.~.|....(.. 0130 ca 5a 6a eb ff 0e 8c 8a c7 20 9c 70 c6 65 be a0 .Zj...... .p.e.. 0140 f3 9f 89 12 0f 05 f7 a4 89 00 4a 43 6e e9 fe 66 ..........JCn..f 0150 0f b7 d6 c5 bd 03 a3 b9 7b 0a f3 1d 96 8b 57 e7 ........{.....W. 0160 7e e7 82 c8 42 9c 12 78 5c 7c 33 b7 6b d9 d6 8c ~...B..x\|3.k... 0170 98 0c 27 84 96 a2 85 e3 3f dd 1b c0 e1 ac ab ce ..'.....?....... 0180 b3 ec 43 02 6d 74 11 09 35 55 b5 9d cb d4 2d 8d ..C.mt..5U....-. 0190 98 0f 19 2e 12 2f 95 7d ad fd cc 79 6c 68 b3 28 ...../.}...ylh.( 01a0 71 36 da eb 46 0a f6 47 3d b6 26 03 85 72 bc b7 q6..F..G=.&..r.. 01b0 8c b9 1c 3f 6b e0 93 d0 d8 f2 46 67 65 09 be 88 ...?k.....Fge... 01c0 3a 84 cf 49 64 a7 bd 46 2d bb e1 1b b6 1a 2d 5e :..Id..F-.....-^ 01d0 de e9 8d 5e 71 86 1c ad d6 e9 e8 61 b9 57 75 8e ...^q......a.Wu. 01e0 a6 19 3c 14 4b 0f fe b2 6f 4f 70 08 4f 7a 5f 84 ..<.K...oOp.Oz_. 01f0 4c 47 54 82 7c 30 49 37 06 0a 45 a0 8d 30 6a 81 LGT.|0I7..E..0j. 0200 1e e7 d1 f8 ab a7 0c 6c 6e 7f cc e8 8c cc 9c 1a .......ln....... 0210 9b 3a 77 9e 4b c1 2c 26 2e 26 6e 77 84 b5 bb 3c .:w.K.,&.&nw...< 0220 48 8b d7 6f 13 ae 4c b9 9e 2b e7 74 7e 9f f3 37 H..o..L..+.t~..7 0230 63 76 cb f0 56 d1 27 4b 2a c5 4f 07 68 e6 c2 44 cv..V.'K*.O.h..D 0240 74 34 41 f5 ab f2 81 fa ed c0 f1 e1 f6 94 de ae t4A............. 0250 d3 be 9f bb 43 6f f8 51 f0 5a 68 17 67 25 63 18 ....Co.Q.Zh.g%c. 0260 22 82 f2 d0 9a ca 9c 24 be 6f d0 81 c0 27 b9 ec "......$.o...'.. 0270 63 73 54 e1 d0 ad c7 ba 77 33 f0 83 35 cb 46 31 csT.....w3..5.F1 0280 3b be 82 ff 4a 39 91 35 12 70 3f a5 44 d5 d9 90 ;...J9.5.p?.D... 0290 37 2b 49 06 8b 12 91 bf 8b 1f ba 1d a8 0a ec 80 7+I............. 02a0 7a 3f 13 b1 a5 71 39 f9 bb 2e 7e 97 16 fd 1a c2 z?...q9...~..... 02b0 e2 4b 8e 59 53 81 fb d0 06 dd 8c 1f b6 46 af e2 .K.YS........F.. 02c0 52 91 4d 23 a4 7e c6 2d 5c 4e e5 d1 9a 53 c3 65 R.M#.~.-\N...S.e 02d0 dd 90 59 6b d1 77 3c 89 76 39 cc 69 c5 3f ab 12 ..Yk.w<.v9.i.?.. 02e0 42 9a 93 a0 94 18 48 42 cd f3 70 c7 52 79 da fa B.....HB..p.Ry.. 02f0 0c 35 0c 41 d9 03 e2 81 26 ac 51 be 50 22 75 b6 .5.A....&.Q.P"u. 0300 08 16 ca cc e6 cf 32 b3 a3 29 ac 1a b3 81 15 7e ......2..).....~ 0310 aa ba 5d ae 7a 26 e8 08 f2 8c 59 38 97 00 6d 2f ..].z&....Y8..m/ 0320 84 ec 71 85 ac 7c c7 78 97 8e 7e 5c 85 5b 99 e5 ..q..|.x..~\.[.. 0330 d7 b8 d6 33 5e 5e cf ce 6a 19 db 5d ba 59 94 cd ...3^^..j..].Y.. 0340 31 08 10 dd c1 fe 2e a5 41 27 19 36 7c ef a9 69 1.......A'.6|..i 0350 4d fd 40 57 2c ff 80 44 33 3c 7b 85 ec 6d 7b e8 M.@W,..D3<{..m{. 0360 fd ba cc 89 61 8e 12 51 3c 94 e7 4e 6e 6a 9d ee ....a..Q<..Nnj.. 0370 02 23 a0 ed 8b ce d7 73 2c bc 7c 45 4f b8 68 7d .#.....s,.|EO.h} 0380 d1 0e e0 00 80 7d a1 ca 54 69 76 ee cd 5e d4 82 .....}..Tiv..^.. 0390 0b 80 09 48 94 33 51 86 87 7b 51 53 3e cb f3 19 ...H.3Q..{QS>... 03a0 05 38 a6 30 db 82 cd 18 f3 4e e0 a1 02 da 3d d6 .8.0.....N....=. 03b0 89 77 46 ba 92 48 19 25 70 59 1c 69 a8 f0 10 00 .wF..H.%pY.i.... 03c0 62 7e 69 15 83 e2 9c c0 d4 38 af 78 ba 8c b5 d8 b~i......8.x.... 03d0 e8 5c d1 09 ed cf 5f 16 c5 43 92 a0 45 4b ea e1 .\...._..C..EK.. 03e0 13 78 d7 90 aa 5e 9c e9 df e6 32 71 03 a2 7a 3a .x...^....2q..z: 03f0 7a be 5f 59 2f 59 82 88 a0 99 40 07 3f 64 b4 27 z._Y/Y....@.?d.' 0400 3c c9 25 13 cd 3f 70 8f e8 d3 0d 3d 48 42 2c ca <.%..?p....=HB,. 0410 1f 65 6b 47 c6 8f 37 df 1e 40 8b 88 ad db aa a0 .ekG..7..@...... 0420 69 f1 04 31 e9 2e 30 3b 9c c5 83 76 4a fb ee 19 i..1..0;...vJ... 0430 66 bc 9b 2a 51 90 d9 ac 21 ec 28 04 a2 70 32 b9 f..*Q...!.(..p2. 0440 02 66 b8 32 03 6a 9c 69 65 3d be 24 e4 5a b8 29 .f.2.j.ie=.$.Z.) 0450 1f 47 31 28 01 65 76 69 8e 6c 06 ec 8c 92 82 ed .G1(.evi.l...... 0460 06 c0 ee 7f f9 28 b3 36 37 43 c9 98 5d e5 ec 8c .....(.67C..]... 0470 b7 ba ce fd e3 67 45 25 de c0 5d be 1d 9e b9 f9 .....gE%..]..... 0480 02 8b 89 34 8c 7b 77 df 08 c5 cf b2 59 fc 71 a6 ...4.{w.....Y.q. 0490 27 b9 48 dd 88 1e 70 8c 72 1f b3 bd 8b 2a 46 20 '.H...p.r....*F 04a0 8d d9 db 3c 75 35 b0 94 47 10 00 c1 03 96 e5 db ...<u5..G....... 04b0 7d 2e f6 de 8f 72 32 4e fd 7d dd ed 99 49 71 16 }....r2N.}...Iq. 04c0 ab db 2e 1a 1d 46 80 9d 84 34 2c 8f ff 31 98 a7 .....F...4,..1.. 04d0 52 bf d9 2d 71 ac 7e e9 13 0b 99 fc 65 20 5a 57 R..-q.~.....e ZW 04e0 a8 95 37 79 50 c3 76 cb 32 27 a8 15 3b 8c af 39 ..7yP.v.2'..;..9 04f0 fc a3 f0 9b 83 18 26 95 f8 c1 9c 6b 72 9b 92 92 ......&....kr... 0500 5c 96 91 9f d3 43 91 12 cb f2 9f e3 b0 c4 55 3b \....C........U; 0510 6a f7 5e 3c eb 2b c3 1b 7b 6a ea 7b 3f 51 ac c6 j.^<.+..{j.{?Q.. 0520 9c 68 01 de d4 08 a2 03 b0 18 ab 88 57 33 f0 0e .h..........W3.. 0530 12 d7 f4 32 1a 51 5c 6a fe 27 9e 56 89 8d 2e cf ...2.Q\j.'.V.... 0540 fe 34 ed ab 23 93 70 62 c9 95 6f 81 fb c2 4e 43 .4..#.pb..o...NC 0550 25 f9 0a da c9 c4 39 d1 54 c7 15 2f 4c 42 82 ad %.....9.T../LB.. 0560 2c eb 92 ea 31 72 04 9b 6f ec 12 34 33 a7 1e 67 ,...1r..o..43..g 0570 a9 1e b3 09 68 9d 24 b4 26 c3 91 d4 55 4e d4 0c ....h.$.&...UN.. 0580 94 b1 36 d0 22 99 42 6e 07 4a a6 1e da 71 21 db ..6.".Bn.J...q!. 0590 11 c9 c7 ee a8 2c e5 80 9d a8 2a e5 43 32 e1 2f .....,....*.C2./ 05a0 64 b0 c1 56 4e f1 ab d7 d..VN... No. Time Source Destination Protocol Length Info 243 3.290798 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=19074 Ack=371 Win=1002 Len=1448 TSval=536071 TSecr=727515 Frame 243: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 19074, Ack: 371, Len: 1448 Data (1448 bytes) 0000 39 83 20 b7 74 f4 3e 0e b5 f5 9e 16 35 ea d6 f7 9. .t.>.....5... 0010 ce 01 8e 3b 8a ac f2 31 15 0f e1 fb 63 a0 bb 20 ...;...1....c.. 0020 72 e2 a4 99 7e 13 6f 23 7f 82 e3 a3 e4 3f d5 1a r...~.o#.....?.. 0030 65 cf 52 f5 30 2d c4 7b 7a 25 19 c7 00 fc 42 05 e.R.0-.{z%....B. 0040 6a 11 a4 28 7d 0c 58 fc 7c 22 41 b7 3c e7 29 40 j..(}.X.|"A.<.)@ 0050 9e d3 a7 c1 b0 94 06 77 35 c3 0a 3f ae 11 e6 a5 .......w5..?.... 0060 4d 4d 82 c7 ef c8 45 f6 90 5a 61 99 7a 40 21 f5 MM....E..Za.z@!. 0070 cc f5 f9 89 03 fe a7 da 48 7a 24 aa 7b 86 96 1f ........Hz$.{... 0080 0c 91 d3 f9 c8 fd 51 d8 31 b7 0a ef 83 73 97 05 ......Q.1....s.. 0090 6b 8d 88 d9 f2 44 10 96 64 68 a3 1d a4 3f c7 3c k....D..dh...?.< 00a0 ea b0 8e 0a a5 02 11 93 ae b5 53 c6 a1 61 ca f3 ..........S..a.. 00b0 91 a6 70 a5 04 42 b3 27 fd ef 5b 6d 99 3a 42 45 ..p..B.'..[m.:BE 00c0 99 d1 70 c7 c5 0c 1c 3e 1b 92 5b 57 a1 30 ec bf ..p....>..[W.0.. 00d0 66 f8 da d1 1e b3 91 5a 1a 39 38 fb 7e 54 61 c0 f......Z.98.~Ta. 00e0 90 72 6d 3c 62 cf ac ff f5 d4 c8 ec de 59 f2 0b .rm<b........Y.. 00f0 4b 40 0a 13 72 e4 e6 88 24 93 5f e2 c0 55 42 62 [email protected]...$._..UBb 0100 08 dd 89 06 3c 71 a7 68 b9 5f 49 5d b1 6f b1 03 ....<q.h._I].o.. 0110 ed 2b af 9d a8 0c 61 7c 51 00 0d 46 ab 96 dd 8d .+....a|Q..F.... 0120 a9 92 d0 96 ba 76 ca 5b d8 ca 1c 33 70 4b e3 b4 .....v.[...3pK.. 0130 33 5c a0 5c cc 5d 75 71 98 63 4e 75 b4 b7 fd 1e 3\.\.]uq.cNu.... 0140 73 fc 42 52 0f 73 af f1 18 ef f4 53 d3 86 8e 1a s.BR.s.....S.... 0150 1c bc 6a d4 94 97 06 92 f7 2d 0a 41 ec e7 8b 10 ..j......-.A.... 0160 cb 45 39 0d f8 01 76 26 a9 28 34 ad 92 da a4 1e .E9...v&.(4..... 0170 33 b4 cf 7b 48 1f 75 81 8f 5a 94 f2 5e b6 83 27 3..{H.u..Z..^..' 0180 6b b5 a8 68 30 1c 84 fd 6b ce d5 70 33 d2 47 05 k..h0...k..p3.G. 0190 87 ef 3d c6 97 b6 fc 25 fd d3 af 9a e7 6a f3 e0 ..=....%.....j.. 01a0 37 0b 80 46 1e b4 b4 6f 5c 23 4d 53 63 62 9a 40 7..F...o\#MScb.@ 01b0 a7 b7 fa 84 70 74 f5 6f e1 51 25 79 c5 e4 51 6c ....pt.o.Q%y..Ql 01c0 f9 ae f7 05 a7 42 bc 3a 01 a1 30 a6 32 23 df 6e .....B.:..0.2#.n 01d0 41 31 e4 b7 6e 7d 05 07 e6 7b 55 4c 4f 3f 1c 61 A1..n}...{ULO?.a 01e0 a2 64 54 8d 47 a9 79 d5 19 2d 29 51 05 8a e2 25 .dT.G.y..-)Q...% 01f0 78 02 00 07 91 8c bf 4b bd f2 ad 71 e7 27 58 09 x......K...q.'X. 0200 f1 6a 70 86 ca 4e fc 4c 17 d0 ac c1 d1 4b be aa .jp..N.L.....K.. 0210 2f 04 c0 38 f1 5a 23 8d 98 07 e4 21 57 a1 85 0e /..8.Z#....!W... 0220 d9 ab 15 d1 c7 95 02 2d fd a8 ee bb 25 33 a9 7f .......-....%3.. 0230 88 fc 2d 54 cf c0 8f a9 b7 a9 69 96 23 a2 01 02 ..-T......i.#... 0240 3d 0a f7 98 6c a6 61 fc a4 b5 e5 1f e4 ec aa 2a =...l.a........* 0250 b4 55 01 38 3d de a9 e6 da 96 68 26 78 3c 51 09 .U.8=.....h&x<Q. 0260 d9 65 c2 26 c7 26 09 3a a8 bf d0 e0 0a b7 8f 88 .e.&.&.:........ 0270 44 6d ea b6 a1 41 53 4f be c6 1d ea e2 3f 12 d3 Dm...ASO.....?.. 0280 1f dd 15 55 c2 cd da cd b6 69 36 3e d1 64 52 2a ...U.....i6>.dR* 0290 7d d2 ca 63 58 47 94 15 db b9 42 f3 24 a9 da fa }..cXG....B.$... 02a0 27 67 29 c2 ec 32 2e 82 41 42 72 40 c2 69 8a 87 'g)[email protected].. 02b0 26 54 e8 c4 83 c7 ff c2 c9 69 df 43 12 57 72 64 &T.......i.C.Wrd 02c0 8a ba 90 9a ae 3e 04 6b 56 62 40 63 a0 09 a0 70 .....>[email protected] 02d0 1b 7c 9e b1 a6 8a 2b 33 32 b4 fa 42 e2 e9 34 1a .|....+32..B..4. 02e0 67 58 60 38 e9 31 60 96 4c 0b d6 22 ba 6d 2d 2c gX`8.1`.L..".m-, 02f0 52 3e cd 36 9d 38 47 d1 39 41 f3 42 75 e4 49 ce R>.6.8G.9A.Bu.I. 0300 eb 97 c2 76 41 ec 88 94 ec 2b 89 ac 16 dc ea 52 ...vA....+.....R 0310 ba d8 b4 2a 9d 3d 3e 2d 7d e8 d3 b0 45 e3 79 6b ...*.=>-}...E.yk 0320 d5 85 0b dc 2a 1f 6c 6a 0c 14 3a 85 a6 62 aa e1 ....*.lj..:..b.. 0330 2c 7f 95 2a 54 58 5f be 25 53 21 bb 71 57 9b 5d ,..*TX_.%S!.qW.] 0340 20 c3 72 2b dc dd 98 39 c3 d0 14 05 70 0a 0b e2 .r+...9....p... 0350 78 f9 db 45 b5 b9 0d d1 6b 23 38 53 d4 2d 98 50 x..E....k#8S.-.P 0360 4f b8 33 5a 1f 5a cd 04 50 0e 7e eb 90 f4 71 76 O.3Z.Z..P.~...qv 0370 6e 15 20 4a 53 c7 3d 61 75 ca 6c 39 bb d5 94 ef n. JS.=au.l9.... 0380 9b 43 e5 c7 4c 86 29 c0 17 01 cc 26 0c 42 9e 97 .C..L.)....&.B.. 0390 19 fc 19 66 45 0d 84 92 8c ef a3 7b 51 41 2a 40 ...fE......{QA*@ 03a0 27 57 b6 b7 8a 43 f6 c7 05 7f 46 d8 dc b2 16 e0 'W...C....F..... 03b0 8c 84 e9 0b f8 be 08 a7 58 c1 33 cb c9 99 64 be ........X.3...d. 03c0 4d a6 1b 14 7c 9c d6 2f 43 6e 17 ee 18 23 bc 2f M...|../Cn...#./ 03d0 16 ec 9f 6a 94 ab 3b b3 1b 4f 03 b9 0c bb 82 d4 ...j..;..O...... 03e0 62 58 18 b4 57 c5 5d bc 04 cd 04 0e 78 95 99 51 bX..W.].....x..Q 03f0 21 e7 d2 95 ff 1f 04 76 bf 9d f6 ee 63 79 6b 24 !......v....cyk$ 0400 53 87 f7 e2 5f 7e 68 df cf fe f1 64 94 1d b4 de S..._~h....d.... 0410 68 13 d5 0f 80 12 d2 5f 11 68 1d b8 d1 cb 3e be h......_.h....>. 0420 9e 9b fb 55 0b d7 2d b3 be c0 c1 02 1b 76 e3 62 ...U..-......v.b 0430 19 52 dc 08 34 ba 8a 5f 93 c4 5f ee 45 0e 86 b1 .R..4.._.._.E... 0440 9c dd 59 8a c8 fe b7 c9 e1 2e 38 b0 fc 31 b1 88 ..Y.......8..1.. 0450 bc 21 2c 66 15 1b b9 18 d1 46 bf d1 1b cd 1d 1a .!,f.....F...... 0460 c7 d0 fe ea 92 78 84 6b 47 92 c1 9b 5d c5 f8 c2 .....x.kG...]... 0470 5f c6 ce 26 40 b7 b2 d7 2d 33 06 aa ab 7d 79 1a _..&@...-3...}y. 0480 14 2e 12 3d 44 ba 36 ed 1a 3a a9 2f 1b 40 ce 59 ...=D.6..:./[email protected] 0490 aa fa 6e 71 bb 73 22 88 9a 0c b3 37 e1 43 06 31 ..nq.s"....7.C.1 04a0 bb 76 b3 7e 8a f1 c5 a0 e4 65 15 ad d1 51 ef 3d .v.~.....e...Q.= 04b0 33 09 25 ae b0 65 ca 49 f2 86 69 af 2d 73 56 68 3.%..e.I..i.-sVh 04c0 c1 1d fd cf fb c7 c0 16 6d 69 fa 68 23 91 ca 9d ........mi.h#... 04d0 cd 15 82 d5 11 5c 17 f5 57 8c 07 17 dc e2 7c 40 .....\..W.....|@ 04e0 52 ff 1e 3c f5 cc 51 78 c0 91 78 86 14 60 be 58 R..<..Qx..x..`.X 04f0 39 58 a8 59 36 ca f7 c1 2c 30 af bf 81 2f e0 89 9X.Y6...,0.../.. 0500 22 2a c6 85 61 cf 22 cd c9 e1 53 6e e3 f1 91 9b "*..a."...Sn.... 0510 4b 2b 9c 10 d8 e4 0b e0 b7 cd 55 04 0e 8e ab 1d K+........U..... 0520 14 8a 2e bd 00 07 46 a7 d7 08 07 0d 3d 37 f4 9a ......F.....=7.. 0530 de d0 42 73 58 7a d6 6e 75 d6 53 63 50 7a 78 36 ..BsXz.nu.ScPzx6 0540 1d 0d b4 39 bc f9 22 3b d7 51 4c 74 ec 68 64 50 ...9..";.QLt.hdP 0550 26 54 85 a8 24 dc 0d 01 47 a3 d1 20 d4 41 54 36 &T..$...G.. .AT6 0560 81 56 d9 22 12 21 10 6e 27 24 22 d1 d5 5a 97 27 .V.".!.n'$"..Z.' 0570 e7 f2 40 fe 5c a8 8f f9 b6 8a f0 8a 43 95 0d b4 ..@.\.......C... 0580 9e ee d6 8c 7b 6f 05 94 f2 22 bd aa b1 cc 86 ac ....{o..."...... 0590 5a 6e bc 74 79 9f a1 5a 0b 1b b6 e4 0d 17 fd 97 Zn.ty..Z........ 05a0 3e f1 55 d5 b4 ff 63 e8 >.U...c. No. Time Source Destination Protocol Length Info 244 3.290849 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=371 Ack=17626 Win=65535 Len=0 TSval=727515 TSecr=536071 Frame 244: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 371, Ack: 17626, Len: 0 No. Time Source Destination Protocol Length Info 245 3.290899 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=371 Ack=20522 Win=65535 Len=0 TSval=727515 TSecr=536071 Frame 245: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 371, Ack: 20522, Len: 0 No. Time Source Destination Protocol Length Info 246 3.290953 192.168.10.1 192.168.10.203 TCP 151 34433 > cds [PSH, ACK] Seq=20522 Ack=371 Win=1002 Len=85 TSval=536071 TSecr=727515 Frame 246: 151 bytes on wire (1208 bits), 151 bytes captured (1208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 20522, Ack: 371, Len: 85 Data (85 bytes) 0000 28 e0 d6 ae 0f 95 c0 88 66 17 a0 3b eb 1b fc 3f (.......f..;...? 0010 85 6f 95 0b 2d cc 01 0d 40 aa 28 cc b8 e5 83 f5 .o..-...@.(..... 0020 5a 31 6e 20 67 5d 1c cd c4 93 48 14 d6 65 b5 13 Z1n g]....H..e.. 0030 3b 2e 2c c1 23 dc 5f c4 da 38 40 98 aa 4c 7d c5 ;.,.#[email protected]}. 0040 fb f5 86 eb ce e9 e8 c0 5b 5e a9 74 36 b6 c4 27 ........[^.t6..' 0050 ab b4 a3 1a 75 ....u No. Time Source Destination Protocol Length Info 247 3.290994 41.252.217.113 192.168.10.207 TCP 60 38756 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 247: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 38756 (38756), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 248 3.315141 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 248: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 249 3.323758 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=371 Ack=20607 Win=65450 Len=74 TSval=727516 TSecr=536071 Frame 249: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 371, Ack: 20607, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 33 d1 98 dc 7a 0f 8b d4 cc 90 84 .... 3...z...... 0010 b9 1b 07 51 02 f5 01 00 77 9a d7 78 91 6a 92 f4 ...Q....w..x.j.. 0020 21 2c 44 de 12 17 03 01 00 20 e8 57 c2 ff 78 40 !,D...... .W..x@ 0030 38 26 b6 10 e0 cf 78 03 a4 68 07 b0 fd 52 4e 50 8&....x..h...RNP 0040 58 98 5a ca 90 a3 b6 bd a5 09 X.Z....... No. Time Source Destination Protocol Length Info 250 3.323820 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=20607 Ack=445 Win=1002 Len=0 TSval=536080 TSecr=727516 Frame 250: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 20607, Ack: 445, Len: 0 No. Time Source Destination Protocol Length Info 251 3.352844 124.6.181.33 192.168.10.207 SMTP 104 C: MAIL FROM: <lillian.paterson@xxxxxxxxxxxxxxxxxx> Frame 251: 104 bytes on wire (832 bits), 104 bytes captured (832 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22129 (22129), Dst Port: smtp (25), Seq: 17, Ack: 311, Len: 50 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 252 3.352964 192.168.10.207 124.6.181.33 SMTP 114 S: 250 2.1.0 [email protected] OK Frame 252: 114 bytes on wire (912 bits), 114 bytes captured (912 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 124.6.181.33 (124.6.181.33) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22129 (22129), Seq: 311, Ack: 67, Len: 60 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 253 3.353029 124.6.181.33 192.168.10.207 TCP 60 22129 > smtp [ACK] Seq=67 Ack=371 Win=93070 Len=0 Frame 253: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22129 (22129), Dst Port: smtp (25), Seq: 67, Ack: 371, Len: 0 No. Time Source Destination Protocol Length Info 254 3.406681 192.168.10.207 206.225.164.188 SMTP 558 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 254: 558 bytes on wire (4464 bits), 558 bytes captured (4464 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4294967255, Ack: 4294966027, Len: 504 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 255 3.406720 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=1 Ack=463 Win=46274 Len=0 Frame 255: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 1, Ack: 463, Len: 0 No. Time Source Destination Protocol Length Info 256 3.406748 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=463 Ack=4294966027 Win=0 Len=0 Frame 256: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 463, Ack: 4294966027, Len: 0 No. Time Source Destination Protocol Length Info 257 3.443643 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 257: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 258 3.526525 Dell_98:1d:d9 Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.5 Frame 258: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:d9 (00:19:b9:98:1d:d9), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 259 3.526846 Dell_98:1d:d9 Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.5 Frame 259: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:d9 (00:19:b9:98:1d:d9), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 260 3.565901 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 260: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 261 3.569110 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 261: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 262 3.569159 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 262: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 263 3.632580 192.168.10.221 192.168.10.1 ICMP 74 Echo (ping) request id=0x0200, seq=41492/5282, ttl=128 Frame 263: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 192.168.10.1 (192.168.10.1) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 264 3.632645 192.168.10.1 192.168.10.221 ICMP 74 Echo (ping) reply id=0x0200, seq=41492/5282, ttl=64 Frame 264: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.221 (192.168.10.221) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 265 3.673029 192.168.10.1 192.168.10.245 Syslog 305 LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eylwolf@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 265: 305 bytes on wire (2440 bits), 305 bytes captured (2440 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" No. Time Source Destination Protocol Length Info 266 3.678984 192.168.10.31 192.168.10.255 UDP 778 Source port: 50764 Destination port: apc-3052 Frame 266: 778 bytes on wire (6224 bits), 778 bytes captured (6224 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (736 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 34 38 3a 32 35 0a 53 52 3d 31 30 37 =19:48:25.SR=107 0060 43 0a 53 55 3d 32 44 38 32 42 37 35 39 0a 52 44 C.SU=2D82B759.RD 0070 3d 38 33 38 39 0a 54 41 3d 31 39 32 2e 31 36 38 =8389.TA=192.168 0080 2e 31 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d .10.255.UC=1.SD= 0090 30 0a 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 0.SM=2.4F=208.2. 00a0 35 31 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 51=08.7E=00.3E=0 00b0 30 32 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 02.4C=207.3.50=0 00c0 33 34 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 34.0.43=028.5.78 00d0 3d 31 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 =11/19/07.6A=005 00e0 37 3a 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 7:.47=S.63=UPS_I 00f0 44 45 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d DEN.66=100.0.58= 0100 4e 4f 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a NO.56=5YW.39=FF. 0110 32 37 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 27=00.38=00.6E=I 0120 53 30 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 S0746005443 .6D 0130 3d 31 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 =11/19/07.01=Sma 0140 72 74 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 rt-UPS RT 10000 0150 58 4c 20 20 20 0a 34 36 3d 36 30 2e 30 31 0a 34 XL .46=60.01.4 0160 44 3d 32 30 37 2e 33 0a 34 45 3d 32 30 37 2e 33 D=207.3.4E=207.3 0170 0a 34 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 .45=336.75=229.6 0180 43 3d 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 C=146.65=00.6F=2 0190 30 38 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 08.71=02.70=020. 01a0 37 32 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 72=000.42=217.0. 01b0 36 37 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 67=192.62=476.17 01c0 2e 57 0a 35 43 3d 30 32 39 2e 30 0a 32 46 3d 31 .W.5C=029.0.2F=1 01d0 34 2e 30 34 0a 31 36 3d 41 0a 30 35 3d 30 30 30 4.04.16=A.05=000 01e0 30 30 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 00000.09=60.00;2 01f0 30 37 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 07.3.6B=0.81E2=A 0200 55 54 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 UTO .MC=1.E0=0.E 0210 31 3d 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 1=0.E2=0.E3=0.E8 0220 3d 30 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d =0.E9=0.I0=2.I1= 0230 30 30 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 00.I2=01.I3=0.I4 0240 3d 30 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d =0.I5=0.I6=0.I7= 0250 30 0a 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 0.I8=Int Contact 0260 20 31 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 1.I9=0.IA=Int C 0270 6f 6e 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 ontact 2.IB=0.IC 0280 3d 49 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a =Int Relay.ID=0. 0290 53 48 3d 35 42 39 37 39 42 39 43 43 42 33 37 39 SH=5B979B9CCB379 02a0 30 37 43 44 38 41 36 41 32 38 33 33 45 39 43 46 07CD8A6A2833E9CF 02b0 46 35 33 0a 4d 44 3d 34 62 38 31 31 35 30 37 34 F53.MD=4b8115074 02c0 35 62 32 65 30 31 61 35 38 30 61 61 63 33 38 36 5b2e01a580aac386 02d0 39 66 31 61 37 65 37 0a 3c 2f 42 4f 44 59 3e 0a 9f1a7e7.</BODY>. No. Time Source Destination Protocol Length Info 267 3.679102 192.168.10.31 192.168.10.255 UDP 778 Source port: 50764 Destination port: apc-3052 Frame 267: 778 bytes on wire (6224 bits), 778 bytes captured (6224 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (736 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 34 38 3a 32 35 0a 53 52 3d 31 30 37 =19:48:25.SR=107 0060 43 0a 53 55 3d 32 44 38 32 42 37 35 39 0a 52 44 C.SU=2D82B759.RD 0070 3d 38 33 38 39 0a 54 41 3d 31 39 32 2e 31 36 38 =8389.TA=192.168 0080 2e 31 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d .10.255.UC=1.SD= 0090 30 0a 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 0.SM=2.4F=208.2. 00a0 35 31 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 51=08.7E=00.3E=0 00b0 30 32 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 02.4C=207.3.50=0 00c0 33 34 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 34.0.43=028.5.78 00d0 3d 31 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 =11/19/07.6A=005 00e0 37 3a 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 7:.47=S.63=UPS_I 00f0 44 45 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d DEN.66=100.0.58= 0100 4e 4f 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a NO.56=5YW.39=FF. 0110 32 37 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 27=00.38=00.6E=I 0120 53 30 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 S0746005443 .6D 0130 3d 31 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 =11/19/07.01=Sma 0140 72 74 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 rt-UPS RT 10000 0150 58 4c 20 20 20 0a 34 36 3d 36 30 2e 30 31 0a 34 XL .46=60.01.4 0160 44 3d 32 30 37 2e 33 0a 34 45 3d 32 30 37 2e 33 D=207.3.4E=207.3 0170 0a 34 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 .45=336.75=229.6 0180 43 3d 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 C=146.65=00.6F=2 0190 30 38 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 08.71=02.70=020. 01a0 37 32 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 72=000.42=217.0. 01b0 36 37 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 67=192.62=476.17 01c0 2e 57 0a 35 43 3d 30 32 39 2e 30 0a 32 46 3d 31 .W.5C=029.0.2F=1 01d0 34 2e 30 34 0a 31 36 3d 41 0a 30 35 3d 30 30 30 4.04.16=A.05=000 01e0 30 30 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 00000.09=60.00;2 01f0 30 37 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 07.3.6B=0.81E2=A 0200 55 54 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 UTO .MC=1.E0=0.E 0210 31 3d 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 1=0.E2=0.E3=0.E8 0220 3d 30 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d =0.E9=0.I0=2.I1= 0230 30 30 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 00.I2=01.I3=0.I4 0240 3d 30 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d =0.I5=0.I6=0.I7= 0250 30 0a 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 0.I8=Int Contact 0260 20 31 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 1.I9=0.IA=Int C 0270 6f 6e 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 ontact 2.IB=0.IC 0280 3d 49 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a =Int Relay.ID=0. 0290 53 48 3d 35 42 39 37 39 42 39 43 43 42 33 37 39 SH=5B979B9CCB379 02a0 30 37 43 44 38 41 36 41 32 38 33 33 45 39 43 46 07CD8A6A2833E9CF 02b0 46 35 33 0a 4d 44 3d 34 62 38 31 31 35 30 37 34 F53.MD=4b8115074 02c0 35 62 32 65 30 31 61 35 38 30 61 61 63 33 38 36 5b2e01a580aac386 02d0 39 66 31 61 37 65 37 0a 3c 2f 42 4f 44 59 3e 0a 9f1a7e7.</BODY>. No. Time Source Destination Protocol Length Info 268 3.785120 192.168.10.246 65.32.1.65 DNS 84 Standard query PTR 62.90.62.84.in-addr.arpa Frame 268: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 49336 (49336), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 269 3.865971 190.42.139.241 192.168.10.207 TCP 62 23483 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 269: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23483 (23483), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 270 3.866039 192.168.10.207 190.42.139.241 TCP 62 smtp > 23483 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 270: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23483 (23483), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 271 3.915262 65.32.1.65 192.168.10.246 DNS 137 Standard query response PTR dslb-084-062-090-062.pools.arcor-ip.net Frame 271: 137 bytes on wire (1096 bits), 137 bytes captured (1096 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 49336 (49336) Domain Name System (response) No. Time Source Destination Protocol Length Info 272 3.925697 192.168.10.246 65.32.1.65 DNS 87 Standard query PTR 129.128.131.41.in-addr.arpa Frame 272: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 55507 (55507), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 273 3.957640 124.6.181.33 192.168.10.207 SMTP 60 C: QUIT Frame 273: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22129 (22129), Dst Port: smtp (25), Seq: 67, Ack: 371, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 274 3.957679 192.168.10.207 124.6.181.33 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 274: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 124.6.181.33 (124.6.181.33) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22129 (22129), Seq: 371, Ack: 73, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 275 3.957720 124.6.181.33 192.168.10.207 TCP 60 22129 > smtp [ACK] Seq=73 Ack=440 Win=93000 Len=0 Frame 275: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22129 (22129), Dst Port: smtp (25), Seq: 73, Ack: 440, Len: 0 No. Time Source Destination Protocol Length Info 276 3.957749 192.168.10.207 124.6.181.33 TCP 60 smtp > 22129 [FIN, ACK] Seq=440 Ack=73 Win=65463 Len=0 Frame 276: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 124.6.181.33 (124.6.181.33) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22129 (22129), Seq: 440, Ack: 73, Len: 0 No. Time Source Destination Protocol Length Info 277 3.957784 124.6.181.33 192.168.10.207 TCP 60 22129 > smtp [ACK] Seq=73 Ack=441 Win=93000 Len=0 Frame 277: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22129 (22129), Dst Port: smtp (25), Seq: 73, Ack: 441, Len: 0 No. Time Source Destination Protocol Length Info 278 3.963958 190.233.185.172 192.168.10.207 SMTP 76 C: HELO cliente-0ff6ec1 Frame 278: 76 bytes on wire (608 bits), 76 bytes captured (608 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.233.185.172 (190.233.185.172), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22958 (22958), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 22 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 279 3.964070 192.168.10.207 190.233.185.172 SMTP 104 S: 250 mail.mydomain.com Hello [190.233.185.172] Frame 279: 104 bytes on wire (832 bits), 104 bytes captured (832 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.233.185.172 (190.233.185.172) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22958 (22958), Seq: 122, Ack: 23, Len: 50 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 280 3.964115 190.233.185.172 192.168.10.207 TCP 60 22958 > smtp [ACK] Seq=23 Ack=172 Win=93268 Len=0 Frame 280: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.233.185.172 (190.233.185.172), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22958 (22958), Dst Port: smtp (25), Seq: 23, Ack: 172, Len: 0 No. Time Source Destination Protocol Length Info 281 3.975412 65.32.1.65 192.168.10.246 DNS 149 Standard query response, No such name Frame 281: 149 bytes on wire (1192 bits), 149 bytes captured (1192 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 55507 (55507) Domain Name System (response) No. Time Source Destination Protocol Length Info 282 3.976047 192.168.10.203 41.131.128.129 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 282: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 41.131.128.129 (41.131.128.129) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 283 4.025092 190.42.139.241 192.168.10.207 TCP 60 23483 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 283: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23483 (23483), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 284 4.025233 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 284: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 285 4.025273 192.168.10.207 190.42.139.241 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:43:56 -0400 Frame 285: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23483 (23483), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 286 4.025313 190.42.139.241 192.168.10.207 TCP 60 23483 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 286: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23483 (23483), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 287 4.091063 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 287: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 288 4.091099 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 288: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 289 4.103785 41.252.217.113 192.168.10.207 SMTP 72 C: EHLO mwgnqvl.com Frame 289: 72 bytes on wire (576 bits), 72 bytes captured (576 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 38756 (38756), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 18 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 290 4.103977 192.168.10.207 41.252.217.113 SMTP 245 S: 250-mail.mydomain.com Hello [41.252.217.113] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 290: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 41.252.217.113 (41.252.217.113) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 38756 (38756), Seq: 122, Ack: 19, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 291 4.104019 41.252.217.113 192.168.10.207 TCP 60 38756 > smtp [ACK] Seq=19 Ack=313 Win=93128 Len=0 Frame 291: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 38756 (38756), Dst Port: smtp (25), Seq: 19, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 292 4.104347 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 292: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 293 4.104456 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 293: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 294 4.104570 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 294: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 295 4.104691 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 295: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 296 4.104806 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 296: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 297 4.104936 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 297: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 298 4.188188 190.233.185.172 192.168.10.207 SMTP 93 C: MAIL FROM: <nnstudio@xxxxxxxxxxxx> Frame 298: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.233.185.172 (190.233.185.172), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22958 (22958), Dst Port: smtp (25), Seq: 23, Ack: 172, Len: 39 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 299 4.188434 192.168.10.207 190.233.185.172 SMTP 103 S: 250 2.1.0 [email protected] OK Frame 299: 103 bytes on wire (824 bits), 103 bytes captured (824 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.233.185.172 (190.233.185.172) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22958 (22958), Seq: 172, Ack: 62, Len: 49 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 300 4.188491 190.233.185.172 192.168.10.207 TCP 60 22958 > smtp [ACK] Seq=62 Ack=221 Win=93220 Len=0 Frame 300: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.233.185.172 (190.233.185.172), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22958 (22958), Dst Port: smtp (25), Seq: 62, Ack: 221, Len: 0 No. Time Source Destination Protocol Length Info 301 4.220449 216.115.98.240 192.168.10.118 TCP 60 http > webdata [FIN, ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 301: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c) Internet Protocol Version 4, Src: 216.115.98.240 (216.115.98.240), Dst: 192.168.10.118 (192.168.10.118) Transmission Control Protocol, Src Port: http (80), Dst Port: webdata (3748), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 302 4.220517 192.168.10.118 216.115.98.240 TCP 60 webdata > http [ACK] Seq=1 Ack=2 Win=64264 Len=0 Frame 302: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.118 (192.168.10.118), Dst: 216.115.98.240 (216.115.98.240) Transmission Control Protocol, Src Port: webdata (3748), Dst Port: http (80), Seq: 1, Ack: 2, Len: 0 No. Time Source Destination Protocol Length Info 303 4.224584 190.42.139.241 192.168.10.207 SMTP 69 C: EHLO ybyc.com Frame 303: 69 bytes on wire (552 bits), 69 bytes captured (552 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23483 (23483), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 15 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 304 4.224632 192.168.10.207 190.42.139.241 SMTP 245 S: 250-mail.mydomain.com Hello [190.42.139.241] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 304: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23483 (23483), Seq: 122, Ack: 16, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 305 4.224673 190.42.139.241 192.168.10.207 TCP 60 23483 > smtp [ACK] Seq=16 Ack=313 Win=93128 Len=0 Frame 305: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23483 (23483), Dst Port: smtp (25), Seq: 16, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 306 4.225066 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 306: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 307 4.225145 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 307: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 308 4.225218 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 308: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 309 4.225394 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 309: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 310 4.226134 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=20607 Ack=445 Win=1002 Len=1448 TSval=536305 TSecr=727516 Frame 310: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 20607, Ack: 445, Len: 1448 Data (1448 bytes) 0000 17 03 01 21 40 d1 7f 3e 03 3f a2 d1 46 50 a4 19 ...!@..>.?..FP.. 0010 d2 43 ff 4d df 0f 2f 49 c9 30 c2 3c 61 87 59 f6 .C.M../I.0.<a.Y. 0020 69 0e 12 4b 82 85 56 b1 b2 f7 2c 95 bf 83 b9 aa i..K..V...,..... 0030 b7 7b 44 22 35 9f 6a 11 1d 0d e9 a5 b2 ed 89 1b .{D"5.j......... 0040 23 eb 0e d3 80 0a a1 5e cb 0f 86 eb 94 1d 3b f1 #......^......;. 0050 33 0d ca e0 17 c4 eb d0 9b 1a 3a 21 b3 a0 12 b9 3.........:!.... 0060 b8 80 5c 4f ce 4c 9d 3f 5a 2d 33 9c 62 b1 d2 e6 ..\O.L.?Z-3.b... 0070 49 4b cc b7 42 7a 9e f5 80 8c 06 d5 71 c4 94 6c IK..Bz......q..l 0080 e9 f3 ef d2 e4 4c 2d 15 69 a8 9a fa 0b 60 ea 35 .....L-.i....`.5 0090 e9 f9 d6 a2 1a 8b 27 0f e6 a8 ca 8f ca 78 a5 9b ......'......x.. 00a0 45 5e a7 93 6d 55 8b 0d 3e 53 2d e2 ea 0f 0d b7 E^..mU..>S-..... 00b0 01 d9 c1 ae fd 3f b3 6d cc e8 75 1a 4e 70 34 c4 .....?.m..u.Np4. 00c0 b6 ae 82 c0 de df 09 46 77 41 01 d3 0d 11 5f 8a .......FwA...._. 00d0 4c 8a f0 36 f4 b7 af 80 ce 82 25 68 af 49 e3 c0 L..6......%h.I.. 00e0 2b 39 62 25 3f 6f 8c 63 de 6d 24 1c 09 16 84 a2 +9b%?o.c.m$..... 00f0 5c 1d 75 77 52 dd 86 95 a1 4f f8 1e 33 ca a5 4c \.uwR....O..3..L 0100 be 8a 92 50 98 5b 02 d7 8c 8a 24 f1 2c 50 b9 97 ...P.[....$.,P.. 0110 cf fe e2 45 2f 07 50 df 65 0c d8 2c 0c a3 6d a4 ...E/.P.e..,..m. 0120 c5 0d 51 c8 00 79 a5 ab d6 05 99 86 5d 79 a9 9d ..Q..y......]y.. 0130 71 d0 88 06 f1 e4 8c 31 9b 9f 4a fe 97 6f d0 c1 q......1..J..o.. 0140 08 88 01 3d e7 81 bd 5a 7c 9d 11 e0 7a 5d d4 86 ...=...Z|...z].. 0150 1e f3 6d 1d c5 02 99 68 ae 3e 25 29 91 80 14 f2 ..m....h.>%).... 0160 ea 78 ad 4b fa c6 40 75 9a 87 72 85 6e d5 28 3c [email protected].(< 0170 8f 2d 50 5f 75 f0 34 22 bb 8b be 86 73 8e 72 3a .-P_u.4"....s.r: 0180 0e 88 f7 98 7a 14 d9 81 b2 c6 be 57 2c 1b 3e 9c ....z......W,.>. 0190 9a 24 ce 3a a8 af 43 a1 48 75 8c 39 94 b9 a9 a4 .$.:..C.Hu.9.... 01a0 1b 79 cb 11 ff 38 75 7d c4 c8 ff f7 49 73 16 31 .y...8u}....Is.1 01b0 c7 0b d3 be a8 eb 0d 86 0a ca 4b ae 33 ba 8d de ..........K.3... 01c0 e0 b3 84 9f 22 6d e9 bb 5c 7f 2f df cd b1 8e 4c ...."m..\./....L 01d0 a1 bd ad 90 40 90 fa 47 a0 ea 4f 1f d9 d3 ea 14 [email protected]..... 01e0 03 00 3e 1b 0f 9a 20 05 c8 ca 2c d4 78 28 ec d4 ..>... ...,.x(.. 01f0 c2 f8 1d e5 02 04 08 e5 39 62 a0 56 63 cc 16 92 ........9b.Vc... 0200 84 0a 0f cf 8a 91 0f 05 fa 74 00 67 3a e3 08 b8 .........t.g:... 0210 d0 70 91 55 db 30 32 f6 0a 65 24 90 e8 e3 2e d0 .p.U.02..e$..... 0220 d1 bc 77 36 0e ac dc 16 4f 4a ec 4e c2 eb 8b 06 ..w6....OJ.N.... 0230 7d f0 ea 57 9e dd 6a df 91 f1 e5 7c 9c 9f dd 37 }..W..j....|...7 0240 4e 1f c2 49 03 8a b9 dd 0a d6 96 eb 32 26 42 3e N..I........2&B> 0250 30 e9 49 4d c9 02 40 f0 1e e4 df 1b 64 d6 2a a8 [email protected].*. 0260 f0 d1 6c 3e 27 20 1e 32 2d b2 a1 e7 a4 80 72 6f ..l>' .2-.....ro 0270 b9 6a 7c ce df 6e b7 1d de d3 ab 49 a9 26 ae 49 .j|..n.....I.&.I 0280 96 4c 88 2f 28 60 2b 7b d8 3d e8 80 a9 4a 64 cc .L./(`+{.=...Jd. 0290 86 fa 5e 54 c8 61 7f 19 d6 8d 39 6d 61 92 39 0f ..^T.a....9ma.9. 02a0 ec a1 24 8c 4b ed 48 84 25 4e d6 e1 cc 37 6a 12 ..$.K.H.%N...7j. 02b0 b6 c1 a3 72 52 96 94 a4 fe a0 d1 91 71 ab a5 34 ...rR.......q..4 02c0 0f b5 7d 9a b1 f8 2f 1e 96 e7 75 3a d0 11 78 b5 ..}.../...u:..x. 02d0 2c 72 2b 90 89 da ba d7 0e 45 89 3b 65 a1 dd f2 ,r+......E.;e... 02e0 39 9c c6 40 1a 2e d5 bc cd 80 40 54 47 d0 e3 01 9..@......@TG... 02f0 77 ee b3 30 66 05 3f de 93 b7 68 f4 67 13 5b f7 w..0f.?...h.g.[. 0300 ea 12 38 ba 25 c3 f7 a5 02 74 96 7e fc 31 07 04 ..8.%....t.~.1.. 0310 e9 28 9f 1a 3a c3 eb f0 48 3f 64 b6 c0 2f 91 a1 .(..:...H?d../.. 0320 80 6f 1f ff 7a 0c e0 13 95 3d 1f cd af 7a 13 0b .o..z....=...z.. 0330 35 e9 cd 3c a5 72 96 a9 fb fc e8 b3 18 94 0b c9 5..<.r.......... 0340 9b c4 36 5d 87 8f 1c ba 06 43 e1 43 d3 4d 90 bb ..6].....C.C.M.. 0350 a6 0d 08 43 f6 ea 45 ee 1f 01 e3 0c d3 53 7a 41 ...C..E......SzA 0360 e8 6f 63 c2 aa d1 7a 2e 70 27 a8 40 3c f0 1a 81 .oc...z.p'.@<... 0370 9c 98 a5 0e ff a1 76 96 e3 64 8a e9 55 06 90 ef ......v..d..U... 0380 55 0e 76 8d 72 44 8f 02 11 9e 4c 52 b6 e0 fd ea U.v.rD....LR.... 0390 ea df 54 77 e3 72 33 0f 56 70 99 77 d4 07 45 03 ..Tw.r3.Vp.w..E. 03a0 a7 26 96 af 03 8e a4 92 54 5b 58 cf f8 3c 62 b6 .&......T[X..<b. 03b0 7a 52 9f 15 71 8a 0f 93 73 60 01 8f de 37 41 b7 zR..q...s`...7A. 03c0 d3 af 54 09 dc 11 26 e0 af 1c dd a2 74 b0 45 85 ..T...&.....t.E. 03d0 5c f6 47 99 d1 4f 22 8d 95 2a c5 f8 90 7f cd f1 \.G..O"..*...... 03e0 8f 52 cc a2 ae 8f 85 ed 50 5e 63 cd 67 b1 a3 d2 .R......P^c.g... 03f0 40 99 2a e4 35 e6 dc 8d 38 1c 8a 5a 65 92 05 6a @.*.5...8..Ze..j 0400 4a 10 63 9a 32 d5 88 b5 73 53 4f 38 7b 30 a3 9b J.c.2...sSO8{0.. 0410 44 7e 87 ce 38 45 81 a0 3f 75 5a 6f fb 96 15 94 D~..8E..?uZo.... 0420 cf 79 50 49 8d 17 9f 86 11 43 92 31 13 19 69 e9 .yPI.....C.1..i. 0430 0d 8a ce 9a 0a 25 bc 2f 39 12 f4 54 35 85 57 16 .....%./9..T5.W. 0440 d0 fe 7f 6f d6 dc ee 90 d6 8e 8a af 6b 72 2c ea ...o........kr,. 0450 19 18 05 0c ad 76 d0 1e 80 86 6b c3 a2 3b d3 5f .....v....k..;._ 0460 27 18 fe d1 bf ce b1 cb 9b ac 65 f9 e7 61 2b 94 '.........e..a+. 0470 7b 81 3a 58 3d d9 4c 2c d4 36 6e 28 a1 50 7a 4b {.:X=.L,.6n(.PzK 0480 a5 a5 bf c8 46 a0 8e 3a ae f1 3e f0 e7 d1 3e 40 ....F..:..>...>@ 0490 39 1c 64 a8 30 91 ad ed 83 0c 9d 3c 46 1d a2 53 9.d.0......<F..S 04a0 25 ab bd 56 2d 0c 0f 0c 73 e4 e2 35 d2 74 c6 4a %..V-...s..5.t.J 04b0 9c 97 93 44 6f 70 f4 9a 92 43 b9 c6 c8 95 d8 f6 ...Dop...C...... 04c0 36 af d7 f9 d4 1d 52 fb ce ec 92 01 a8 a0 1a 67 6.....R........g 04d0 46 0d 08 03 23 13 b9 f3 3c 52 a7 ff 55 a2 ba 3d F...#...<R..U..= 04e0 2d 50 b0 51 d5 26 4d 19 b8 c1 66 29 e3 67 6a 19 -P.Q.&M...f).gj. 04f0 e9 32 50 4e 13 de 5a 20 dc 26 e3 ff 4d 03 dc e2 .2PN..Z .&..M... 0500 68 0e f9 0e 6b 0a 9c d3 9b fd 00 d3 9e 41 07 16 h...k........A.. 0510 ba 17 68 fb 27 10 c1 bc ba 80 b8 0b 38 50 00 c1 ..h.'.......8P.. 0520 4a 3c 5e c9 50 56 68 d4 85 1d cd 11 b1 90 83 2f J<^.PVh......../ 0530 d3 84 4e de fc 28 62 55 73 72 49 47 a9 7c 06 b7 ..N..(bUsrIG.|.. 0540 d7 3b 1e b2 16 1a 7f bc 08 af 65 11 f2 f5 2d b0 .;........e...-. 0550 27 90 49 aa 72 c9 3e 4f 84 3d 72 a7 c6 84 1a c0 '.I.r.>O.=r..... 0560 27 95 fa 4c a9 3f 7f 26 12 18 c4 04 d4 c3 9d cc '..L.?.&........ 0570 b4 d1 63 92 eb 92 45 f0 44 81 0e c8 17 5f 2d 2c ..c...E.D...._-, 0580 fc e0 d1 bb 3a d5 79 c9 c3 9d 2e 44 39 cf 17 1e ....:.y....D9... 0590 99 2e 73 6b c3 ba 85 25 9a 20 ed 32 40 5f a7 7c ..sk...%. .2@_.| 05a0 2a 82 7a 05 89 ed 57 25 *.z...W% No. Time Source Destination Protocol Length Info 311 4.226222 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=22055 Ack=445 Win=1002 Len=1448 TSval=536305 TSecr=727516 Frame 311: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 22055, Ack: 445, Len: 1448 Data (1448 bytes) 0000 05 c3 2d 69 da 32 9d 3d 11 82 88 e7 fa 40 22 a8 ..-i.2.=.....@". 0010 b7 16 f4 78 6c 74 8f d3 ab 8f 57 96 61 8d d9 dc ...xlt....W.a... 0020 f2 50 ca 8e fb 8a d1 0e 6b 33 4f 63 35 57 1f 07 .P......k3Oc5W.. 0030 97 6d 1c f0 78 3e 7e 29 20 75 d0 af 79 28 12 06 .m..x>~) u..y(.. 0040 9e 20 a2 5a c6 4c 88 65 5b 4d 41 a6 ae b2 3a 0d . .Z.L.e[MA...:. 0050 10 6f bc e2 93 e6 b8 9e 57 bb 8d 48 1e b8 0a bc .o......W..H.... 0060 ec d6 9f 2c 83 66 e8 50 91 fa 6d 89 04 ee e3 31 ...,.f.P..m....1 0070 78 a5 06 b8 80 dc 50 cd 02 7e ac 73 cd ed ed d7 x.....P..~.s.... 0080 d9 a9 57 71 cd 09 ad 5b fd fa 7d ee 71 eb 75 d6 ..Wq...[..}.q.u. 0090 84 56 91 97 28 45 41 b2 7d c4 06 8a 3b 01 de 76 .V..(EA.}...;..v 00a0 b9 78 47 68 9a 9d 7f 39 f3 f4 04 6d 31 9b 63 b6 .xGh...9...m1.c. 00b0 d4 7a e3 3f 8a 38 8f f8 e3 d0 51 67 d5 b9 f4 05 .z.?.8....Qg.... 00c0 67 fc 33 ce 1b ff c5 9b ed d7 8c 29 c8 9d c4 8f g.3........).... 00d0 21 f3 b1 9d ff 69 ef c7 c6 39 83 02 fe c2 ab 78 !....i...9.....x 00e0 77 d4 22 17 40 7a eb 87 98 6c 33 1b ed ef 36 2c w."[email protected], 00f0 17 5a b7 a6 58 9b f8 02 55 cd 10 29 7c 04 c6 45 .Z..X...U..)|..E 0100 96 a0 15 b6 84 dd 6f 40 c5 58 53 26 1c 3a a1 0b [email protected]&.:.. 0110 46 0a 7a a7 fe 7c dd b9 45 d9 f5 ea 3d 2c 54 b6 F.z..|..E...=,T. 0120 84 9e cc 78 83 7a 4b 3c b0 a9 51 99 f2 a5 3b eb ...x.zK<..Q...;. 0130 01 b2 8f 2c 1c 6f 19 cd 57 34 32 48 4a c2 75 17 ...,.o..W42HJ.u. 0140 30 62 88 38 2f 40 22 eb 27 a1 e3 33 cf cd 77 7d 0b.8/@".'..3..w} 0150 a6 b7 ae eb 9f f5 b2 6c a0 7a 96 44 7f f3 c9 4c .......l.z.D...L 0160 ce 78 0c 75 7b f8 82 a5 fc 4e ad 67 00 97 18 5c .x.u{....N.g...\ 0170 de 0a c7 3b c8 a0 e0 48 fd 2a 46 88 2f 5d 52 c0 ...;...H.*F./]R. 0180 bb 5e 48 8f 17 3f c1 44 b9 8f 94 5d 73 de 66 4a .^H..?.D...]s.fJ 0190 ff 23 58 20 01 9c 3e ae d4 0e f2 c0 6a e2 1e f0 .#X ..>.....j... 01a0 2e a7 fd ca 00 52 c9 1c 39 d3 aa d7 52 bb 7f 5e .....R..9...R..^ 01b0 83 c6 d7 d4 cd 8e 7a 7a 7f 0f d1 9c c4 ea 4d 7d ......zz......M} 01c0 8d fa 7c b9 65 41 07 e1 a8 ab 73 00 41 24 ea eb ..|.eA....s.A$.. 01d0 a2 d7 f2 52 51 21 8c b4 f5 2a 2a 77 0a 3f d8 c1 ...RQ!...**w.?.. 01e0 39 fe a1 ed 3e 0b b6 bc 8b 32 89 ce 18 c2 5e 41 9...>....2....^A 01f0 85 ba a9 19 81 28 e3 31 a0 bb 59 f3 d2 71 3f 4d .....(.1..Y..q?M 0200 3d 61 f2 01 8b 84 d9 8e 69 7c cd 5f 36 7f b8 37 =a......i|._6..7 0210 d6 e0 f2 8e c2 05 c8 72 f6 be 27 4d 64 53 62 8d .......r..'MdSb. 0220 de 04 a4 de b6 ea 39 3d 23 04 a0 9c 8c dd a5 c2 ......9=#....... 0230 e2 b6 22 9e fa 6b 2d ff 11 26 ab 76 ec 23 68 b7 .."..k-..&.v.#h. 0240 b8 c3 65 d1 79 38 4d bd 23 96 35 a9 2a cc 3b f6 ..e.y8M.#.5.*.;. 0250 f8 03 2b 54 45 66 41 9d 63 e7 c6 8a b0 e9 4a ff ..+TEfA.c.....J. 0260 e7 bc 1c 68 ee 8a ab 9b 07 32 82 d9 f8 b9 49 1a ...h.....2....I. 0270 df 79 0a fd d0 5b 21 df 15 f6 46 a1 f5 c3 ac b7 .y...[!...F..... 0280 b3 28 19 84 9e 95 95 83 2c e0 3b a0 2b 00 f5 3c .(......,.;.+..< 0290 16 2d 4b 46 b3 88 fc db 17 e1 eb 91 69 67 ea 30 .-KF........ig.0 02a0 93 df 0a ac 00 a6 4f 5b 4d 79 66 52 38 92 6c ee ......O[MyfR8.l. 02b0 1b 4d c5 77 4b b3 14 1b a9 19 11 41 91 ae 31 1e .M.wK......A..1. 02c0 93 7a 7c af b5 19 e2 9a e8 20 1b be 45 51 c8 d7 .z|...... ..EQ.. 02d0 7a 0f 84 f1 2f 9b 59 b2 86 7e 59 ce 7d 6f e2 b7 z.../.Y..~Y.}o.. 02e0 63 43 ac 73 0d 37 93 08 a6 97 37 fd 3a fd e9 ad cC.s.7....7.:... 02f0 76 e3 39 72 cc d9 20 f7 22 c7 ef 37 ac e0 ce 7e v.9r.. ."..7...~ 0300 90 b8 fb 2e c4 c0 12 d8 47 0a fa 47 a7 b2 dd c5 ........G..G.... 0310 e2 d3 b4 ca 0c ad 90 7e 5a a3 81 90 12 1f 6c 5b .......~Z.....l[ 0320 23 c7 7a 7f 41 70 e6 51 e7 f6 ef 8e 8c f3 db 77 #.z.Ap.Q.......w 0330 1e 13 84 a0 fe 98 04 ce 8d 50 d0 2a 8c 07 7d 38 .........P.*..}8 0340 7d 80 c7 7a 7c 00 66 e4 4b ae a7 cb 6e 2f 8a db }..z|.f.K...n/.. 0350 71 e1 c4 96 e4 ce 14 4a 57 dd 3b bb 4c 7d 03 36 q......JW.;.L}.6 0360 0b b3 31 e2 37 1a a3 3d 7f 3c ad 6d 6b a9 50 7e ..1.7..=.<.mk.P~ 0370 d4 b3 86 39 f9 e9 16 69 cc 10 0d 6b ef 25 f5 67 ...9...i...k.%.g 0380 67 39 84 9e 46 92 90 19 0a 2a b5 2d e8 97 b5 c5 g9..F....*.-.... 0390 9d c3 97 77 4a 3e d7 71 ed 4f e1 72 9a 0f 79 4d ...wJ>.q.O.r..yM 03a0 12 df 74 ea d3 42 7f 1d af 3a 95 02 7f ab ba 2e ..t..B...:...... 03b0 57 94 b8 ba 15 d8 48 6a ba 07 c8 d8 ed b7 b0 de W.....Hj........ 03c0 d1 1e 3d eb c2 ae e6 d5 ac 81 e5 3b 2f af 59 9c ..=........;/.Y. 03d0 4d c6 a0 ca 70 4f d8 40 5f 01 39 5d 16 3c ce 1d M...pO.@_.9].<.. 03e0 33 42 98 8a 73 5f 19 f6 44 c8 42 10 3d dc 5a 79 3B..s_..D.B.=.Zy 03f0 b0 94 6f f8 43 7c 75 63 09 ab 76 73 50 de 25 97 ..o.C|uc..vsP.%. 0400 17 0c 9c 00 29 60 6d 05 e7 4f 95 9c 17 1a fb 4d ....)`m..O.....M 0410 5c 12 84 fc 10 6b 88 40 4b b5 14 95 ac 4d c5 a7 \[email protected].. 0420 87 39 a2 7b 30 10 ea 12 be 70 04 9b 8a 09 01 e8 .9.{0....p...... 0430 b4 97 52 bc 3a 78 f1 5f 48 ef 40 74 51 84 a5 57 ..R.:[email protected] 0440 67 c4 b5 e2 3a 69 42 17 f0 a8 e7 10 ab 04 cf 10 g...:iB......... 0450 80 29 ec 98 ee 04 f3 cf 91 f6 56 69 fb 6b 40 4d .)........Vi.k@M 0460 d9 bd 69 5f cf 55 b8 80 93 cc 19 32 f5 3c aa e3 ..i_.U.....2.<.. 0470 33 4e 4e 80 c0 1a 41 de b5 d0 c0 9b 33 b5 d7 e0 3NN...A.....3... 0480 f3 96 4b bd 2f 71 55 fc 7b b6 6a b1 9c a5 98 51 ..K./qU.{.j....Q 0490 34 f0 c1 01 78 8e 32 d5 d9 68 dd 0b f7 5a d9 aa 4...x.2..h...Z.. 04a0 c4 18 93 d5 40 db d0 fa 39 d3 bc b9 72 59 28 5e [email protected](^ 04b0 85 04 3a 0e 52 69 7e 3d cc e8 71 4c 5f 77 41 7b ..:.Ri~=..qL_wA{ 04c0 f3 a1 a4 7e 8f 2d 66 06 06 73 d3 30 c9 45 34 33 ...~.-f..s.0.E43 04d0 1f 27 19 0b 9e 56 60 64 ba 2a bd 81 e2 f5 df d3 .'...V`d.*...... 04e0 74 f2 eb d2 59 ff e1 ea 38 de 23 d0 06 c7 19 4b t...Y...8.#....K 04f0 5e b0 ba f7 01 04 09 c9 da 87 4c b5 1c 85 7e 7a ^.........L...~z 0500 61 02 5c aa 71 89 6c 17 b1 b4 e4 83 4e 36 cf 57 a.\.q.l.....N6.W 0510 8c 0f 1b 72 6f 2d c8 12 79 5d 32 02 a2 46 c2 3d ...ro-..y]2..F.= 0520 5d 0d e4 b7 2d cd 2d 12 b7 cf ff 28 f6 43 80 be ]...-.-....(.C.. 0530 e4 0b 79 e5 95 26 19 6f 65 7b fa e8 99 79 a9 c1 ..y..&.oe{...y.. 0540 4b 48 c9 ef 2a 38 d7 b6 6f c1 e7 5a 2a 5d 9e 06 KH..*8..o..Z*].. 0550 be b6 12 d8 77 6a 79 b7 b9 05 3c 01 b0 84 7a 40 ....wjy...<...z@ 0560 60 e0 e6 ac f0 d8 02 13 ff 2d 9a 1a 8c c3 e6 7b `........-.....{ 0570 77 34 17 b9 3d 75 ed 47 7f 0f 0e 9d dc be 7d 28 w4..=u.G......}( 0580 40 05 07 0f a0 c5 35 22 cc 14 c6 7f aa ca c4 dd @.....5"........ 0590 d2 ab f9 f1 b8 8e 68 8b 1a 8c 31 b3 9e af 76 ef ......h...1...v. 05a0 bc c8 0f 8a 5e 56 c0 cc ....^V.. No. Time Source Destination Protocol Length Info 312 4.226318 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=23503 Ack=445 Win=1002 Len=1448 TSval=536305 TSecr=727516 Frame 312: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 23503, Ack: 445, Len: 1448 Data (1448 bytes) 0000 1f 0a f6 50 79 c3 ef 27 4a 1b 49 c5 2a 1a 70 9d ...Py..'J.I.*.p. 0010 2e 3c 6e 7c 0d e2 7b 55 f3 14 dd f2 ad b5 d1 1f .<n|..{U........ 0020 c6 d7 46 1b ce 5c 3e ac 35 63 16 3c 08 f7 29 d7 ..F..\>.5c.<..). 0030 b0 55 e4 db 0f b8 97 bb ba d3 70 76 97 2c 00 ef .U........pv.,.. 0040 9a 0c 0e 1f f9 af 0f eb 34 c8 46 8e ec 70 24 fa ........4.F..p$. 0050 fe ff b8 dd e2 20 47 d7 71 36 9a 8f 7b 69 8d ea ..... G.q6..{i.. 0060 a4 47 ec ec f4 78 da bc 49 c6 0d 7a a6 cc c7 2e .G...x..I..z.... 0070 ed 5d 1d 8e be 99 20 72 55 4e 7c 0a 8c 48 cb 3f .].... rUN|..H.? 0080 87 9f 97 29 d0 75 3d d1 03 13 c6 36 b0 73 99 3e ...).u=....6.s.> 0090 81 71 fa a4 ee 7a 30 94 0d 15 6e 9e f5 9b b5 4c .q...z0...n....L 00a0 88 76 71 bd 37 13 c6 33 d7 14 30 6c 67 49 b0 08 .vq.7..3..0lgI.. 00b0 3f 8c b1 25 49 60 30 d8 5d 67 99 a6 48 2d da 4d ?..%I`0.]g..H-.M 00c0 ea bc 2e 33 22 db ef a6 86 c2 7f cf 83 4d 69 1d ...3"........Mi. 00d0 cb 86 6f d6 b6 46 cb 90 57 0e 5c c9 16 a6 13 2f ..o..F..W.\..../ 00e0 bd 03 d0 3e 5a da 1d 10 d8 89 49 64 d8 fc 33 c4 ...>Z.....Id..3. 00f0 cd 39 7f 42 21 aa 28 0b 49 22 bd da 3c 41 dc d0 .9.B!.(.I"..<A.. 0100 76 3a 36 02 63 6a 4d c6 95 03 97 68 84 aa 33 b9 v:6.cjM....h..3. 0110 02 3a b2 a9 a4 c2 f2 ba 15 4a 60 4a 7f 76 46 9e .:.......J`J.vF. 0120 2b 82 5b c8 94 bd 5e 81 bf ac 60 7f 51 de 71 37 +.[...^...`.Q.q7 0130 d5 7e b6 2d 9c 11 80 01 5f 06 ff 2f 92 bd 45 63 .~.-...._../..Ec 0140 18 d2 41 dc f9 a1 27 31 95 64 71 b0 69 6c 5a 7c ..A...'1.dq.ilZ| 0150 2e d2 44 40 f3 86 5f 21 18 e6 f9 c2 b7 7f 91 de ..D@.._!........ 0160 f9 87 e1 89 10 24 4e 9e 93 81 d6 6e 7e 29 f4 e1 .....$N....n~).. 0170 b9 2a 7e e8 cc 74 a8 2f f9 68 de c3 fc dd b0 a8 .*~..t./.h...... 0180 72 81 37 e2 f1 7f 47 00 02 a6 05 f3 fc bf 1e 5b r.7...G........[ 0190 7d 29 32 ba a1 6d 3e d2 a0 e8 6c 59 de fd 28 07 })2..m>...lY..(. 01a0 53 1a 4f 33 c9 25 fc 33 7c 41 78 85 d6 4c ee 22 S.O3.%.3|Ax..L." 01b0 cf b2 03 6f e6 68 08 ac 0b db 01 bf a3 f0 86 8e ...o.h.......... 01c0 54 42 89 d0 81 69 7e 6f 81 27 05 a1 ae c5 fd 81 TB...i~o.'...... 01d0 e6 ff 54 58 c2 c8 fd 11 18 41 4d 98 f1 7f c3 77 ..TX.....AM....w 01e0 8e da 7d f8 c6 c4 17 ad fa 0d da f1 03 54 2f 14 ..}..........T/. 01f0 e1 3b c6 46 6d 65 79 3e b7 aa e3 f7 c0 3c 32 f0 .;.Fmey>.....<2. 0200 17 a0 99 5b 0f a0 29 87 f7 91 c3 0e 8b b8 f2 ac ...[..)......... 0210 ec e3 7d 6c 74 94 fb 66 a2 ed f4 19 cb c8 59 7c ..}lt..f......Y| 0220 63 6f 97 0b 3f 03 8c 1c 43 45 e6 3c 1b e0 2d 6a co..?...CE.<..-j 0230 87 8b 08 03 bc d8 9d 2a db c0 4f 63 0e 3a fb c9 .......*..Oc.:.. 0240 de 81 79 40 92 a0 73 26 fc 26 27 3c 27 9c c7 fd [email protected]&.&'<'... 0250 89 56 94 5e 5e 96 30 94 40 e8 fc 91 ad 7f 01 49 .V.^^[email protected] 0260 a2 b7 f1 3c ae d3 f3 4f 1b c4 ff 8f be 75 a7 08 ...<...O.....u.. 0270 cf de 32 ec f3 93 e5 e0 4d b0 5e bd 9d a3 c8 32 ..2.....M.^....2 0280 7e 4d 2e 90 3b 42 ab 9c 1f 71 03 9c 05 57 6d a4 ~M..;B...q...Wm. 0290 78 17 bf e4 b8 95 a8 5d 2d e4 a0 30 58 66 8a a5 x......]-..0Xf.. 02a0 8b 16 1f 56 87 c7 6b 55 7c eb 55 94 08 1c 7d 81 ...V..kU|.U...}. 02b0 a1 1d 51 c3 c0 97 a5 0f 1f ed 0c 75 23 29 df 42 ..Q........u#).B 02c0 c7 51 3c 86 e5 4a 73 79 47 f1 10 cf bd f1 70 e2 .Q<..JsyG.....p. 02d0 1d dd 3e 3f c9 cc c9 54 f1 64 b5 d5 5d 3b 01 61 ..>?...T.d..];.a 02e0 3b e5 73 05 e4 6c f9 39 d5 db df 86 67 67 7d a2 ;.s..l.9....gg}. 02f0 ca c3 60 15 f4 5f b0 60 cf fa c6 ab 67 b8 6a bc ..`.._.`....g.j. 0300 59 d0 a6 62 98 9e 6a a9 15 7e de 6b 6f e1 d5 00 Y..b..j..~.ko... 0310 10 98 7a 56 13 59 8b ad 08 bc 50 ba a3 50 05 34 ..zV.Y....P..P.4 0320 05 4a 6b 1c 56 c7 43 a3 dd e5 0e 95 ff b0 e2 67 .Jk.V.C........g 0330 3a c9 56 fa e2 b5 d6 75 06 c3 38 e0 19 28 97 eb :.V....u..8..(.. 0340 fe 50 81 22 ff ae 50 13 c8 42 85 ff 95 23 a7 68 .P."..P..B...#.h 0350 c9 bb d9 2b 11 a8 4f 7d 0d 38 14 ed 27 4b 76 1a ...+..O}.8..'Kv. 0360 69 91 6c bf 78 66 41 60 0e 9c 99 0d f5 ef aa 2b i.l.xfA`.......+ 0370 66 d3 3d 38 3b 34 a4 a3 0d f7 b7 15 72 c4 a9 95 f.=8;4......r... 0380 1b 52 ef fd a0 f2 1e 99 d6 50 f1 ae ca 04 9e e9 .R.......P...... 0390 ae a9 f7 d6 79 68 42 e7 c1 ea 81 6f 04 5e aa 58 ....yhB....o.^.X 03a0 30 c2 df 2c 14 28 62 85 74 91 09 d8 1e a1 f0 f8 0..,.(b.t....... 03b0 d0 4a 46 65 91 53 0c ac 8e 4f a5 c6 8e 56 6f 15 .JFe.S...O...Vo. 03c0 27 b8 17 ca d5 a8 bf 68 75 dc 8d 07 29 5d 8a 31 '......hu...)].1 03d0 a5 a8 6d ae e3 f3 7f b4 a4 ac 79 ac 15 89 4a 32 ..m.......y...J2 03e0 76 f4 c4 9f 62 c5 de f0 dd b2 2c 22 38 e8 86 e6 v...b.....,"8... 03f0 4a 91 1a e8 70 14 37 13 71 a8 95 7a a1 fa 73 3f J...p.7.q..z..s? 0400 73 95 08 fa 78 82 e3 78 a1 34 c3 9c 0d c9 e2 cd s...x..x.4...... 0410 a5 3e 76 35 69 d7 d3 ea 31 37 55 cb fb 93 24 e2 .>v5i...17U...$. 0420 03 29 02 aa 7f 1e 4e ce f7 97 00 8a be 18 73 98 .)....N.......s. 0430 f6 1b 48 89 3d 05 1a e5 08 f1 7e c7 2d 3b 5b 5d ..H.=.....~.-;[] 0440 18 32 5b 92 d9 33 30 83 37 de 07 b0 4a f4 b2 5d .2[..30.7...J..] 0450 0c 2e b2 48 08 d9 a5 59 99 08 8c 27 b5 e4 55 e2 ...H...Y...'..U. 0460 8b e4 22 ce 84 30 7c f3 f7 d9 8f 4a c3 dc 68 ee .."..0|....J..h. 0470 e9 7a 74 2c 53 5e 8a 17 77 6c 1a 4c ca ce 2a 8e .zt,S^..wl.L..*. 0480 4b af 6f 62 04 a1 1f f4 ff f4 95 75 94 af 48 e4 K.ob.......u..H. 0490 16 4d 40 5a e4 d7 2a 17 94 4b 0a 66 16 42 4c fb .M@Z..*..K.f.BL. 04a0 42 00 0a bd aa d4 0b 90 fd 2f 3c 75 a5 c7 fc 40 B......../<u...@ 04b0 7d 3a 40 da d0 25 44 ae 88 dc 7d d7 46 e3 7d 5a }:@..%D...}.F.}Z 04c0 61 d1 fa ab 45 f7 8a ac cf 7f 47 ab 72 85 2f 04 a...E.....G.r./. 04d0 b0 6e 60 ea f7 73 23 0a 27 24 7d 51 64 04 92 c0 .n`..s#.'$}Qd... 04e0 3f f4 ce d1 da 14 56 73 04 07 10 11 23 00 38 79 ?.....Vs....#.8y 04f0 4d a8 09 5a c5 7e 20 dc a2 fe f8 4d 45 8d e3 36 M..Z.~ ....ME..6 0500 a9 51 3c 0f 02 45 e5 cc 11 05 26 9f 5f 78 2b de .Q<..E....&._x+. 0510 c1 9f eb 5b ee 4a 05 dc 10 27 bb d3 e6 2a 97 00 ...[.J...'...*.. 0520 0f b8 68 44 10 d2 25 01 15 ac b4 fc 3a 7e 46 6a ..hD..%.....:~Fj 0530 95 0d 9d cb 49 11 41 28 2f ad db a3 69 4d e5 d3 ....I.A(/...iM.. 0540 5f e3 12 88 c6 9a 20 6e f2 c9 31 95 96 5e 2f ae _..... n..1..^/. 0550 96 2b 80 15 f1 41 29 b2 36 aa 29 3d 92 63 54 e9 .+...A).6.)=.cT. 0560 b7 91 a0 2b f7 a9 06 96 f9 f2 75 52 96 32 64 af ...+......uR.2d. 0570 f5 df d1 eb 89 34 05 b1 4c 10 cd 6a 74 7f 68 36 .....4..L..jt.h6 0580 4f 9c 2d 66 11 58 13 e6 3f d2 27 55 20 dc c1 87 O.-f.X..?.'U ... 0590 f1 02 d4 63 99 65 68 ef a1 98 b5 38 32 0e 8a ad ...c.eh....82... 05a0 d7 04 87 19 a9 f3 81 7f ........ No. Time Source Destination Protocol Length Info 313 4.226391 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 313: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 314 4.226443 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=445 Ack=24951 Win=65535 Len=0 TSval=727525 TSecr=536305 Frame 314: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 445, Ack: 24951, Len: 0 No. Time Source Destination Protocol Length Info 315 4.226535 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=24951 Ack=445 Win=1002 Len=1448 TSval=536305 TSecr=727525 Frame 315: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 24951, Ack: 445, Len: 1448 Data (1448 bytes) 0000 9a 92 cc bc d9 6d fb b3 5d 00 01 f4 05 07 8d d3 .....m..]....... 0010 ed 16 c2 69 27 d6 31 14 78 2b aa 0f 7b 57 86 0b ...i'.1.x+..{W.. 0020 34 9e d2 56 a9 7e fb cc b6 52 21 ff 3c 3b 26 44 4..V.~...R!.<;&D 0030 22 90 2c d7 6c c6 38 9e c0 42 37 85 9b 96 28 93 ".,.l.8..B7...(. 0040 8f 57 0d 80 0d d5 28 f9 96 4a 2f 8d ea 93 1b 6e .W....(..J/....n 0050 b9 97 5c 32 dd 3a cd 24 1f bc a4 3d 9f 92 90 3e ..\2.:.$...=...> 0060 13 84 94 d2 50 16 47 ff a4 7b fe 27 56 01 ef 6f ....P.G..{.'V..o 0070 c6 79 7e 6a bb 37 69 4f c6 75 2c 6e 75 fc da 2c .y~j.7iO.u,nu.., 0080 d7 3d 91 b5 7e b1 6e 95 29 2c 46 75 8b 51 12 39 .=..~.n.),Fu.Q.9 0090 f5 4a f9 52 6a fb 9b 5f b4 3a 21 c1 5d 59 f3 92 .J.Rj.._.:!.]Y.. 00a0 ef 6d e9 c2 e9 12 63 a0 92 c5 40 cd b2 e0 58 f2 [email protected]. 00b0 bd 19 67 db 63 51 9e 40 47 cd ec 06 00 97 6f e4 [email protected]. 00c0 1a 15 9f 75 b1 39 04 04 ef a6 58 5e 10 a3 d6 d6 ...u.9....X^.... 00d0 54 31 63 77 ca 38 e8 7a 06 35 08 cd be 00 8f 1e T1cw.8.z.5...... 00e0 a4 e8 d9 e6 bb 3b b4 49 ac 2b df 6c 6e 06 64 3c .....;.I.+.ln.d< 00f0 31 6c 72 5f f0 7b fb 7b b8 ff b5 d1 4b 08 a1 b1 1lr_.{.{....K... 0100 7d 2b 27 80 f0 6d 85 52 5d a2 bb 2e b3 a3 c9 9b }+'..m.R]....... 0110 a2 ac b9 e1 0c 30 ae ad ec 88 75 ad 89 9e a0 c0 .....0....u..... 0120 45 21 e3 94 9f 00 c6 9d 53 0d 19 3b 09 9b c6 b5 E!......S..;.... 0130 52 7f 37 05 7c a1 3d 74 89 be e6 0e 4c 3e cb b6 R.7.|.=t....L>.. 0140 34 85 e3 f1 d1 2d 38 83 92 d6 42 b8 85 94 68 f0 4....-8...B...h. 0150 56 c4 d4 02 d3 e5 68 f7 40 16 81 43 96 88 c6 68 [email protected] 0160 c7 0e 44 ac bf d9 30 e4 11 39 6f e5 50 48 d6 5e ..D...0..9o.PH.^ 0170 c4 54 a8 ea 9e 4d f0 f7 35 d9 c9 bf da 1a 74 b4 .T...M..5.....t. 0180 b6 7d a2 dc 5d b8 e8 b9 30 52 68 1b 3e 3a ee f0 .}..]...0Rh.>:.. 0190 ab 09 86 45 1b 06 b5 21 84 48 b1 65 04 34 89 b8 ...E...!.H.e.4.. 01a0 78 66 cb 1e d2 62 21 7d 85 71 67 97 56 a6 a3 9b xf...b!}.qg.V... 01b0 26 7d e6 0d 0a d3 c0 47 7f 86 af fe 31 2f 24 ce &}.....G....1/$. 01c0 9b c4 67 a0 c9 36 34 a8 e8 8c cb 3c 00 9b 88 58 ..g..64....<...X 01d0 2f 85 d1 8e 18 c4 bc ae 1d 4a 59 da 6f 43 cd e0 /........JY.oC.. 01e0 a7 4a 59 33 6c e6 2c e6 61 20 c8 fe 03 c4 41 83 .JY3l.,.a ....A. 01f0 67 0a 98 85 bf b8 00 2b b6 32 a8 87 b3 f5 3e 81 g......+.2....>. 0200 01 42 be 9f 08 ea 97 6c de 92 a2 44 33 74 11 f3 .B.....l...D3t.. 0210 3c 0b b6 3b 73 60 f6 4f 48 9c 5b c9 c0 17 3b f3 <..;s`.OH.[...;. 0220 02 51 b6 65 bd 39 35 cb 55 be da 8b 57 37 f3 58 .Q.e.95.U...W7.X 0230 2a c9 d9 7a 4d 78 94 75 c4 81 3d 4a 15 5a 03 85 *..zMx.u..=J.Z.. 0240 22 7e 9c 9b a8 25 13 60 99 c2 e9 2d c9 ce cc b7 "~...%.`...-.... 0250 99 73 d3 a8 6a c0 d2 c5 87 1f e3 be 57 e4 5f 37 .s..j.......W._7 0260 5a 0a 3d aa 75 f0 50 50 e7 95 4c 38 f9 32 96 b4 Z.=.u.PP..L8.2.. 0270 59 f0 72 96 05 af 56 9e f4 75 e1 9e 62 09 c9 de Y.r...V..u..b... 0280 fa 78 13 2b 4a ae f4 9b f4 2b b2 2f db ad 55 7e .x.+J....+./..U~ 0290 73 de c3 43 cb 65 da 9c b4 77 1d 66 be 8f 72 d2 s..C.e...w.f..r. 02a0 3d bb cd e9 81 b1 6f 6d 06 26 4f 10 4c 8f 57 62 =.....om.&O.L.Wb 02b0 59 a0 b4 e5 fc bd 79 2a 94 ef ee 13 e1 d1 a5 40 Y.....y*.......@ 02c0 61 0f 4c bd 90 b6 5e 79 65 20 66 fc 1a de 23 b3 a.L...^ye f...#. 02d0 bb 0c b0 9e 92 27 90 c7 e2 8d c5 66 4d cd 6f 75 .....'.....fM.ou 02e0 8e fc fb dc 6c f1 0f ec 00 a9 c1 57 b4 32 e3 85 ....l......W.2.. 02f0 f5 56 ce 50 ab c0 d5 ad f5 b8 47 fb 82 8f 41 ee .V.P......G...A. 0300 bf 82 db 67 6b 56 b3 59 e6 53 a8 c7 b1 7a 94 39 ...gkV.Y.S...z.9 0310 3c 39 88 8e 4d 63 9f ed 4f f2 90 c3 24 0c e7 5f <9..Mc..O...$.._ 0320 69 31 21 fe 77 c4 c1 b4 8e 42 a5 b3 fe c5 30 18 i1!.w....B....0. 0330 b0 96 fa 8b 3d 8b a7 bb 48 02 e6 50 e6 58 0f 19 ....=...H..P.X.. 0340 56 03 0e 49 2c 35 bf c0 99 a5 8e a3 9d 44 eb 38 V..I,5.......D.8 0350 61 38 58 43 e3 0f 83 66 af dc 95 60 3e 5b f0 89 a8XC...f...`>[.. 0360 51 e7 c0 49 5b c5 8c f5 0a 92 61 15 cd 4b 4c f2 Q..I[.....a..KL. 0370 95 0a 8b 1e 97 eb 92 89 2e 1a 9c e0 da da 96 c2 ................ 0380 45 18 5a a1 d3 9b 6a 20 f8 0b c0 a7 06 89 69 ed E.Z...j ......i. 0390 bb 2d 46 b8 49 77 fe 51 54 17 64 f4 cf 4d f9 b9 .-F.Iw.QT.d..M.. 03a0 94 6f ee 3f ea a1 a6 89 bb e6 b6 ae c7 78 43 c1 .o.?.........xC. 03b0 b2 1b db be 9f de 68 40 6d b5 19 ea 81 94 c4 0d ......h@m....... 03c0 27 c1 fc 39 0f 7a b1 84 85 4d 15 cd 79 c7 77 75 '..9.z...M..y.wu 03d0 bb ea 5e 32 06 28 1a a5 ab ff f3 03 ce a2 18 0a ..^2.(.......... 03e0 0f 2b bf 02 62 2c 18 73 f9 a7 0d eb ef 93 ea 4c .+..b,.s.......L 03f0 f3 ce ed 7c fa 66 53 b2 6e c7 1a b7 11 0b 9a 65 ...|.fS.n......e 0400 0f 3d bb 7c aa 95 7e cd 5c b9 ea 70 9e d4 95 88 .=.|..~.\..p.... 0410 67 15 03 1c 4b 1a 65 c1 d7 d7 25 b0 1b fc bb 68 g...K.e...%....h 0420 bc 10 8e 20 da 45 9f 97 3d 92 0a 73 dc c0 f9 56 ... .E..=..s...V 0430 7f 16 4b ba 72 9a ea 3a 5f 4d ae 47 c1 a8 c5 4b ..K.r..:_M.G...K 0440 33 65 d7 4c bd dd 2a cd 17 02 21 f7 6e f3 d6 5c 3e.L..*...!.n..\ 0450 83 bf fa 13 97 a6 ff 40 b5 8c d8 1e c3 4f ec 48 [email protected] 0460 96 10 5f e5 33 a4 c7 2d 42 a9 88 f6 d3 87 d9 63 .._.3..-B......c 0470 ba b2 39 52 59 c3 b6 57 3a 6b 1e fc b1 00 53 e7 ..9RY..W:k....S. 0480 b8 26 36 64 8a 44 c1 1c 3c 77 c1 ac 0b a1 4e 43 .&6d.D..<w....NC 0490 89 ce fd 54 2e cf 5b e2 e7 a5 32 9b 26 c7 d1 84 ...T..[...2.&... 04a0 7d b7 f4 05 ea 47 89 90 70 dc 83 6f d6 18 03 34 }....G..p..o...4 04b0 41 de 10 93 57 2d 87 3e f7 91 c3 f1 e0 ca 05 4d A...W-.>.......M 04c0 92 d8 05 c2 ab 9f 70 e5 9e ec 81 9d f2 4c f2 96 ......p......L.. 04d0 f1 43 bf dc 71 f0 b0 12 b6 b2 d7 47 49 cc 2a ed .C..q......GI.*. 04e0 ca 99 69 db 86 94 5a 47 de d7 da 5f 45 a1 1d c4 ..i...ZG..._E... 04f0 e6 5c 66 db af 7b a9 44 39 18 1f 4a a0 f3 e6 f7 .\f..{.D9..J.... 0500 86 db 4c 85 72 9c 80 0b ee 8d a9 d7 6e 2d b5 b7 ..L.r.......n-.. 0510 f2 d5 44 21 2d 58 8a e0 04 6d 40 e3 88 a8 eb f3 ..D!-X...m@..... 0520 7d bd 17 0a 03 25 ea 8a 32 44 fb 54 b0 30 4b 91 }....%..2D.T.0K. 0530 26 d6 67 ee f6 85 8e d0 d8 44 54 e2 74 a2 47 a4 &.g......DT.t.G. 0540 02 1c 1d c9 8a e0 dd ef d2 9e de a7 0f 0e 12 c8 ................ 0550 0d 0a 17 ec 92 72 a8 72 77 9c 23 17 dd 65 c9 7d .....r.rw.#..e.} 0560 a5 3a 90 e3 b3 bb 0c 01 c3 9c f2 f6 4c e3 2c 80 .:..........L.,. 0570 d9 e4 7c 8d a2 b9 06 e9 4f 91 e9 c0 ab 98 ea 1f ..|.....O....... 0580 6f 9e 9d 9c 2b 20 5b fc 2e 5c 21 5a e0 86 e9 43 o...+ [..\!Z...C 0590 a6 02 d7 fb ce a8 88 75 6b f3 c1 25 92 9b 7e 02 .......uk..%..~. 05a0 96 c4 32 33 a5 1d 91 56 ..23...V No. Time Source Destination Protocol Length Info 316 4.226624 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=26399 Ack=445 Win=1002 Len=1448 TSval=536305 TSecr=727525 Frame 316: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 26399, Ack: 445, Len: 1448 Data (1448 bytes) 0000 35 c4 a1 ec fb d3 fd f8 05 28 eb 8e 45 0b 83 82 5........(..E... 0010 ab 1d 74 09 ac 76 35 2e 14 e3 7a 23 4c ab f4 0d ..t..v5...z#L... 0020 d2 e1 4c 2d 4b fd f6 5b 64 ba ef 6d db ce a2 08 ..L-K..[d..m.... 0030 9e af 06 78 e3 4d cf b4 49 6a 31 92 4d 06 82 11 ...x.M..Ij1.M... 0040 18 60 10 6c 8c c5 70 68 4c da 8f dd aa 96 16 9e .`.l..phL....... 0050 7c 22 c4 f8 a9 10 5b b3 0c c3 7e f2 10 c4 6c ed |"....[...~...l. 0060 48 80 0c 49 a9 1f 8e 70 08 a2 6b 4c c3 40 c1 6e [email protected] 0070 29 4a ce 0e 9e 64 27 71 4f 2f 9d 1b 82 d6 15 3f )J...d'qO/.....? 0080 98 fd 55 84 73 53 17 04 44 53 76 73 98 49 bf cb ..U.sS..DSvs.I.. 0090 c7 61 09 d4 6d 63 0e c8 f6 3f 6c 6f 24 30 ab fd .a..mc...?lo$0.. 00a0 25 be 6f 21 88 b9 7a a2 2b 46 f9 d1 6d 98 e0 58 %.o!..z.+F..m..X 00b0 d0 41 05 e7 d6 fd 8c ef ae 77 ca 10 6d a9 31 a8 .A.......w..m.1. 00c0 4b 95 2f e6 e6 33 b3 cc 82 94 0e 2e 30 47 10 bd K./..3......0G.. 00d0 22 7a 65 8f e8 f6 0a 66 83 22 a4 f4 5f 2e 70 1a "ze....f.".._.p. 00e0 47 82 f4 4e 79 10 b8 56 3f 53 c8 42 58 80 ca 8d G..Ny..V?S.BX... 00f0 78 c1 d8 35 98 7b 07 aa 0f ab 82 cc 6e 75 cf 22 x..5.{......nu." 0100 d2 cb 67 7a 11 59 a6 3a 91 ed 39 7f 2c 6e aa a0 ..gz.Y.:..9.,n.. 0110 0b 92 81 63 16 50 f5 f6 47 a3 0f cd d2 dd 5e 1c ...c.P..G.....^. 0120 06 53 e6 58 43 d4 d3 dc c6 27 cf f9 31 72 aa a1 .S.XC....'..1r.. 0130 d2 02 92 50 9d 10 c8 c2 82 83 bb f1 df 1b 2e 0c ...P............ 0140 d7 48 c7 e5 aa dc f1 e1 e6 53 34 f3 fb 62 9d ce .H.......S4..b.. 0150 ac ad ca 71 03 92 3d 01 53 bc 1d 1c 0c c5 04 91 ...q..=.S....... 0160 31 b2 51 0d b8 11 37 dd 65 70 46 b5 8f 31 c1 d2 1.Q...7.epF..1.. 0170 83 42 34 fd 75 81 5d f5 2e 06 52 8e 7c c7 0d f6 .B4.u.]...R.|... 0180 33 67 0b 39 d8 ab 31 be 8d a1 5c 8a 69 d0 1d 23 3g.9..1...\.i..# 0190 a6 06 96 d2 d6 cb f0 95 e5 af 93 e9 a7 5b c8 d9 .............[.. 01a0 82 b1 a6 c4 65 11 7e e7 7d 55 03 76 c0 92 95 67 ....e.~.}U.v...g 01b0 cd b3 c5 64 85 12 b0 dd 26 40 9b 24 36 35 01 0f ...d....&@.$65.. 01c0 bc 3b c7 77 ef 1c 87 05 b9 84 58 08 a5 4b e7 ff .;.w......X..K.. 01d0 94 bc 4a 68 49 ed 75 7a d6 89 4d 18 6e af 50 18 ..JhI.uz..M.n.P. 01e0 b2 95 ce 07 34 fe 71 32 39 b4 75 a2 25 c3 ef d1 ....4.q29.u.%... 01f0 c8 c4 62 1b ce 50 f4 95 53 0f 4b 58 51 07 49 d9 ..b..P..S.KXQ.I. 0200 f1 fb c9 6c a1 41 59 5d ed d4 4c 16 52 e2 97 d1 ...l.AY]..L.R... 0210 de 3b 69 87 73 69 b4 be a7 e6 2c d0 ea 56 d7 37 .;i.si....,..V.7 0220 81 a2 ea e1 5e 16 7a af 59 f8 1a 1b 48 cc 8a 1c ....^.z.Y...H... 0230 02 70 41 91 d4 93 1e 87 d6 f2 20 9b ac 71 26 ff .pA....... ..q&. 0240 c1 4e 1b 68 d9 46 7b 5d 85 9d 9d d8 bd 9c dc 45 .N.h.F{].......E 0250 a1 ed a6 07 cd 22 6c 1b 80 0a a2 25 03 d4 c1 d1 ....."l....%.... 0260 72 59 fa 06 9a f0 7d 91 fb 9e b8 7f 80 09 8b cd rY....}......... 0270 17 2e e5 47 66 5c 6a 01 0f 5e 20 dd ea dd 35 7c ...Gf\j..^ ...5| 0280 57 31 59 4a da 8c 1a c5 70 b0 7f 69 46 32 39 5e W1YJ....p..iF29^ 0290 60 f9 a9 7d 84 06 74 d7 ff 5e c3 52 73 4f e5 e3 `..}..t..^.RsO.. 02a0 10 3b c1 e3 9e 78 31 a4 09 cd f8 b3 71 ff 4d 6a .;...x1.....q.Mj 02b0 87 ba c0 b1 ee be 5c c6 90 af d8 5c b7 b2 3f 41 ......\....\..?A 02c0 00 5e 3e 9e 72 4f 1b 4e be 73 5e 5c 18 c7 c4 07 .^>.rO.N.s^\.... 02d0 d9 c4 bb 6a 33 3a 4f 9f c5 ae f9 a0 a7 c0 29 0f ...j3:O.......). 02e0 38 6d b6 3a 0c 17 24 5c 53 9d 25 2d c3 c3 e4 88 8m.:..$\S.%-.... 02f0 e2 46 20 5f cd 79 1a 86 37 b3 b6 79 d5 5c 47 0c .F _.y..7..y.\G. 0300 ca 13 11 7c 06 1b d1 f8 81 b5 91 79 28 1f 07 31 ...|.......y(..1 0310 72 6b 25 4d 2c 38 25 37 b3 2d 34 68 15 76 d1 44 rk%M,8%7.-4h.v.D 0320 82 b1 f8 07 3f f2 4c 00 dd eb a4 d8 42 7f c1 55 ....?.L.....B..U 0330 ef 01 03 e7 7c a3 cf dc 20 01 d1 91 ff 54 b5 dc ....|... ....T.. 0340 f0 c6 49 bc 74 92 27 e6 aa 0d 1c 22 af ec 8a 60 ..I.t.'...."...` 0350 9a d5 83 c8 6b 84 33 86 4f 11 c9 1a 93 86 e4 a4 ....k.3.O....... 0360 e3 ca 86 3b bb 45 e2 30 2e 41 25 21 34 a7 7a b1 ...;.E.0.A%!4.z. 0370 c8 e8 76 f3 8b 70 ab 5e a7 3a 87 42 44 03 4e 43 ..v..p.^.:.BD.NC 0380 cc 18 0f 24 ae 3e c2 17 26 ed 6b aa 5f c3 92 cd ...$.>..&.k._... 0390 e2 a6 5f 33 ce 8e 53 92 94 59 b0 55 f4 90 c2 78 .._3..S..Y.U...x 03a0 f8 d0 94 d0 9b ac cb 0c 67 c0 c5 8a ba 01 78 c1 ........g.....x. 03b0 90 13 ae 0e a6 3f 42 30 1f a9 f5 b6 cc 45 18 9a .....?B0.....E.. 03c0 90 c9 06 92 b0 15 23 e8 34 ab 42 d6 93 3c b9 10 ......#.4.B..<.. 03d0 53 a4 49 88 8c 46 00 48 39 ab df 14 fc 2c 93 e7 S.I..F.H9....,.. 03e0 f0 c5 26 2a 57 bc bc 04 b0 dd c6 2c d3 f2 f3 a7 ..&*W......,.... 03f0 d6 06 b4 16 6d e7 4b af b6 c2 5e 13 d2 b1 44 9b ....m.K...^...D. 0400 0f 9e 78 c2 ed b6 aa c3 02 71 f2 30 8d e0 e7 94 ..x......q.0.... 0410 9a 38 81 66 d9 4f 3d d1 a0 73 8c 59 45 3c 05 ff .8.f.O=..s.YE<.. 0420 5b 07 69 2b fd cb 4e 70 8a e1 03 56 af f1 ac 0c [.i+..Np...V.... 0430 ec 10 c9 e0 36 ce b2 51 1c 83 a6 7d d5 34 e7 47 ....6..Q...}.4.G 0440 48 e2 26 c3 67 4c b8 0b d9 d6 54 81 1e bf 29 e1 H.&.gL....T...). 0450 5a 25 3d fa b4 e2 cc f3 09 0b 6f 26 2d f0 a0 66 Z%=.......o&-..f 0460 ad 2d 4a 39 9e f4 cc b0 ae f5 7a 95 d8 72 1e a9 .-J9......z..r.. 0470 95 14 52 ac 7e fc 35 62 37 0c a7 dc cc 12 44 8c ..R.~.5b7.....D. 0480 96 a7 f4 f5 aa 6c 2a 07 20 cb 6c 45 46 07 0f 93 .....l*. .lEF... 0490 2f a7 98 66 38 ca c5 7b 6a c6 81 71 cf 3f f6 c3 /..f8..{j..q.?.. 04a0 20 4a ae 89 36 89 1a d4 28 b6 d9 2e e7 bc a7 dd J..6...(....... 04b0 e7 e6 f6 19 b8 1f 4e 9a 1d d3 10 9a 8a 96 51 cf ......N.......Q. 04c0 55 f8 67 90 80 ac 6e 11 49 27 f4 72 47 73 f5 3a U.g...n.I'.rGs.: 04d0 64 64 ed c5 b4 ff 6b 17 9d 38 fb f3 7c 03 2b c3 dd....k..8..|.+. 04e0 70 5e 11 84 a2 26 b1 c4 41 42 a3 d4 00 97 bd f5 p^...&..AB...... 04f0 3d 34 74 00 18 4c 6d c5 b6 92 05 26 fe 20 d2 08 =4t..Lm....&. .. 0500 8b 17 6d db 3f b6 54 94 99 6e d1 2b 2f 76 88 50 ..m.?.T..n.+/v.P 0510 ed 54 61 17 55 18 44 af 1c 00 fb 23 7b 44 5c aa .Ta.U.D....#{D\. 0520 46 96 69 61 41 b1 9c 87 b8 67 ee b1 87 cc 87 8e F.iaA....g...... 0530 3b b8 a1 83 50 8e 64 03 b6 5c 14 96 f9 20 8e 8f ;...P.d..\... .. 0540 1b db 36 50 b2 96 fb 67 14 d2 5b 49 96 9b a0 fd ..6P...g..[I.... 0550 ab 0f af c8 b2 45 a5 29 b9 c5 7a 90 6f f7 a2 2d .....E.)..z.o..- 0560 fc 8c 0a 44 2a 55 9c 39 03 1b 14 c2 56 f7 46 7b ...D*U.9....V.F{ 0570 6e f1 e9 d3 fb 85 7d 82 97 96 ae e9 da e8 be af n.....}......... 0580 3b 29 ba f2 e0 35 da 08 d2 0e 6a 49 f1 c1 f2 0f ;)...5....jI.... 0590 cb 0f 95 1a 99 f2 3f 7b 8c ed 0e 07 74 e1 24 ec ......?{....t.$. 05a0 cc 5e ef 9a e5 00 56 78 .^....Vx No. Time Source Destination Protocol Length Info 317 4.226708 192.168.10.1 192.168.10.203 TCP 1343 34433 > cds [PSH, ACK] Seq=27847 Ack=445 Win=1002 Len=1277 TSval=536305 TSecr=727525 Frame 317: 1343 bytes on wire (10744 bits), 1343 bytes captured (10744 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 27847, Ack: 445, Len: 1277 Data (1277 bytes) 0000 f1 a9 93 1f af df 13 d7 12 a9 94 2c 7b 8d 4a 29 ...........,{.J) 0010 61 12 41 f5 54 f2 75 48 3c 94 d7 95 c0 a1 14 79 a.A.T.uH<......y 0020 c2 27 94 3a 10 b5 1f 2f 52 41 e4 e9 58 55 11 bb .'.:.../RA..XU.. 0030 ae 76 7e e8 b9 9d f4 ad fe 14 77 ae b9 0c 94 11 .v~.......w..... 0040 67 ec 8a 8d 6a d7 ac 09 6d 2b 72 32 21 9d 6b 73 g...j...m+r2!.ks 0050 cc a3 ad 4c aa c5 21 06 1b 2e 4b 43 0a a7 d9 a7 ...L..!...KC.... 0060 6e 64 13 8f eb 09 96 b4 32 b7 93 d4 da e3 db e5 nd......2....... 0070 0a 22 18 01 0e fa 00 1a 06 4f 1c 93 c7 06 28 2b .".......O....(+ 0080 06 c1 23 45 44 20 75 20 29 3c 87 46 43 ec 76 e0 ..#ED u )<.FC.v. 0090 8b 88 cd 05 fb 28 f8 dc f6 5a 4f bf 97 87 aa 12 .....(...ZO..... 00a0 a0 59 36 31 ef c4 68 5e 8a 70 f6 14 5a 9a 3c 5c .Y61..h^.p..Z.<\ 00b0 de 40 d6 30 61 c6 3f 7d cb 67 6c fb 92 a0 a8 a7 [email protected].?}.gl..... 00c0 48 24 5c 9e ab 6e bf 1f 04 08 0b 0b 70 cf b9 d8 H$\..n......p... 00d0 8f 98 48 2b 7a 01 4a 12 a4 64 3b 74 33 80 9e 35 ..H+z.J..d;t3..5 00e0 c0 e3 de 79 9b 96 5f dd f8 8c 47 a2 a4 80 ee 38 ...y.._...G....8 00f0 6c 48 ab fe 63 2d e7 16 9d 46 2c fa f7 c7 9a 00 lH..c-...F,..... 0100 e4 9c 6c 07 ad 69 ec a6 e2 86 3f 6d 25 76 a8 27 ..l..i....?m%v.' 0110 5c a8 23 1b 7b cc 1a 20 e1 7c df d0 b8 fd 77 ce \.#.{.. .|....w. 0120 8a 97 68 b2 81 80 2a 40 79 1b 89 7a fc 59 ab 51 ..h...*@y..z.Y.Q 0130 9e 25 d6 11 92 b5 a0 38 3d 95 fa a9 da 36 f7 fb .%.....8=....6.. 0140 7f ae 7e cb 4f 3a 7c e3 e0 05 c9 0b 07 e2 1a 91 ..~.O:|......... 0150 3b 0c 46 fd 3a 10 a1 ac 5d 1f 77 72 ab b2 8b 3b ;.F.:...].wr...; 0160 54 a3 2d c1 67 fe ff 18 27 e1 c1 69 8f b8 fe c0 T.-.g...'..i.... 0170 89 58 f6 c6 52 d0 02 53 09 6c 24 e4 ad fc e2 a8 .X..R..S.l$..... 0180 a0 6f 86 6a 5d c6 cb d4 62 01 e6 81 e6 2a 54 d9 .o.j]...b....*T. 0190 b4 62 73 5f 35 99 b0 8c ae c6 0f 40 e3 f2 6a 99 [email protected]. 01a0 1c 1b a3 48 e7 94 48 20 37 4e 83 b5 2f ea a5 b5 ...H..H 7N../... 01b0 1a 91 1f 7c 4b 03 6e 59 80 ae eb 6e e2 a5 52 ad ...|K.nY...n..R. 01c0 8d 02 49 4d e2 33 3d be 57 b7 b5 ae f5 ac 39 61 ..IM.3=.W.....9a 01d0 e6 7b 90 7e 8e 5e d1 f0 5d 3b e0 9f b4 2a 08 b6 .{.~.^..];...*.. 01e0 4d 09 60 ec f2 c9 68 85 e4 62 45 08 f7 48 0a 61 M.`...h..bE..H.a 01f0 0e 71 43 1a 92 ea 75 62 59 74 b1 69 48 57 68 4b .qC...ubYt.iHWhK 0200 4c 80 66 dc 32 ca 5f 19 54 0a 08 21 44 6f 64 89 L.f.2._.T..!Dod. 0210 63 99 02 03 b2 50 81 e0 79 3c 6f f8 fb 44 6f 87 c....P..y<o..Do. 0220 ce 3f 71 ba d9 3d 99 f5 6f e9 09 f7 47 f4 92 e4 .?q..=..o...G... 0230 59 8b 27 8e b0 d3 d3 9a 32 3e 57 e6 da c6 91 98 Y.'.....2>W..... 0240 db 27 06 31 bf 28 d7 34 e1 41 54 44 de 0e b8 8d .'.1.(.4.ATD.... 0250 ca 50 1d 8f 8a 7e e6 4a f1 91 95 17 5c 5c 6b f1 .P...~.J....\\k. 0260 8f c3 4e e7 0a 5f 52 5f 46 85 03 51 d9 f4 d9 22 ..N.._R_F..Q..." 0270 37 6f 87 ab 46 d3 ee 90 6b 6a 6c 77 e1 9e 07 cf 7o..F...kjlw.... 0280 04 93 ba 79 82 05 32 76 0b f2 0a 4b e5 59 86 9e ...y..2v...K.Y.. 0290 4e b1 50 93 fc f8 bb 98 12 cc 8a 6f f0 68 f6 8f N.P........o.h.. 02a0 7f 0c b8 2f 4d e5 5c 39 58 92 ae 60 c9 84 31 de .../M.\9X..`..1. 02b0 f7 d3 0f 47 75 d6 e4 de cc e2 16 20 08 66 ce dc ...Gu...... .f.. 02c0 82 91 fc 75 7c 86 3b c5 13 1c 2f e7 ad c0 2a 27 ...u|.;.../...*' 02d0 aa 0b b9 b6 c3 b9 8f 0b f7 9e 93 82 8a 75 12 d8 .............u.. 02e0 e7 15 d8 40 48 ee 90 a4 f2 ce 38 14 fc 1d 0c 95 [email protected]..... 02f0 9e b6 fb f8 02 a5 e0 ab 73 91 eb 75 58 02 45 6e ........s..uX.En 0300 87 60 d6 da ee 1e e9 df 2d 34 d9 bf 28 a5 af 94 .`......-4..(... 0310 40 b1 f5 87 c7 c6 98 0f cb eb 99 33 cd 68 71 24 @..........3.hq$ 0320 80 61 ec 61 02 90 36 4d 15 bd d4 94 3d 85 51 d3 .a.a..6M....=.Q. 0330 e1 f1 b8 79 eb fc ba 1f 68 9c 67 86 cb ea ad c5 ...y....h.g..... 0340 1a 31 22 e9 98 dc 45 1b 90 6e eb dd 6b e5 e4 da .1"...E..n..k... 0350 eb 33 96 f5 c2 8b 10 e6 85 1b 30 13 da 4a 04 9e .3........0..J.. 0360 e7 06 48 43 13 53 7c b3 37 ad bc 8e e6 14 0b 20 ..HC.S|.7...... 0370 15 37 af 72 64 73 e7 1c b6 68 83 6a 25 2a 85 b4 .7.rds...h.j%*.. 0380 f5 82 79 29 07 46 20 98 e0 df af 17 99 9a 87 08 ..y).F ......... 0390 64 c8 36 19 ef c4 00 fc 9a 3d 78 03 dd 96 39 a8 d.6......=x...9. 03a0 65 0c 32 09 cb bf f7 9b 28 3c 0a 2f 95 09 09 b4 e.2.....(<./.... 03b0 92 b2 7a 36 26 8c dc 74 aa e3 f7 d7 cc f2 8a 29 ..z6&..t.......) 03c0 2e 80 33 e1 d0 4b 03 be 3a cd 33 89 21 2d bd 77 ..3..K..:.3.!-.w 03d0 85 13 8f 64 c9 42 99 c7 06 4d 6b ed 64 e6 d4 07 ...d.B...Mk.d... 03e0 9e da 93 3b 6c ca 30 fc 70 25 a1 a8 d3 13 fb 99 ...;l.0.p%...... 03f0 52 b4 af b9 c0 94 76 2c 7f 6c b7 53 8e 80 7e 4b R.....v,.l.S..~K 0400 9d 0c 38 5f 8b fe c9 bb f6 34 03 cf 8b 58 32 29 ..8_.....4...X2) 0410 8a 60 88 7b 84 ab cc 56 63 33 bd 03 d7 60 c0 13 .`.{...Vc3...`.. 0420 1c c5 59 bf 62 86 60 6b 31 c5 64 bd 94 98 29 e8 ..Y.b.`k1.d...). 0430 0d 35 cd 84 04 4b b9 11 d0 70 5d ed 12 65 b7 d6 .5...K...p]..e.. 0440 c2 94 8b 5b ed 65 eb 31 28 30 ef eb 08 9a 1a 5c ...[.e.1(0.....\ 0450 90 d5 83 7e d2 7e 6a 26 68 16 5d 37 82 64 ed a6 ...~.~j&h.]7.d.. 0460 94 34 12 09 07 30 cf 0d fc 10 b5 91 7b 1d cd 87 .4...0......{... 0470 ba 5c 95 37 5c 9a 4e 9c 8e a4 52 4a a1 68 7d ae .\.7\.N...RJ.h}. 0480 fc 83 c0 93 5a 96 e4 e1 0f 2d 1d df 7b e6 8d 5f ....Z....-..{.._ 0490 17 fb a4 7e 1a ca 16 06 81 76 96 69 34 9d fd 8f ...~.....v.i4... 04a0 b3 b4 6f 8c 3e 68 20 58 13 7c c4 67 f7 17 f2 f9 ..o.>h X.|.g.... 04b0 2e e6 e9 e2 f6 25 a9 db d7 c5 c4 29 ce de 3c 62 .....%.....)..<b 04c0 5b 7d 33 21 39 dc 92 0c 14 66 89 a6 2e a3 a6 05 [}3!9....f...... 04d0 84 10 12 f2 4b ee 8f 92 2d db 7a c1 eb 62 20 56 ....K...-.z..b V 04e0 73 47 f4 ad ad 7e 64 16 c3 06 0f ea 74 f5 24 8c sG...~d.....t.$. 04f0 fb 99 ef a1 7d a7 36 72 39 9a ab 0d d7 ....}.6r9.... No. Time Source Destination Protocol Length Info 318 4.226758 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=445 Ack=27847 Win=65535 Len=0 TSval=727525 TSecr=536305 Frame 318: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 445, Ack: 27847, Len: 0 No. Time Source Destination Protocol Length Info 319 4.226825 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 319: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 320 4.247576 124.6.181.33 192.168.10.207 TCP 60 22129 > smtp [RST, ACK] Seq=73 Ack=441 Win=93000 Len=0 Frame 320: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22129 (22129), Dst Port: smtp (25), Seq: 73, Ack: 441, Len: 0 No. Time Source Destination Protocol Length Info 321 4.247703 192.168.10.1 192.168.10.245 Syslog 201 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 321: 201 bytes on wire (1608 bits), 201 bytes captured (1608 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 322 4.258011 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=445 Ack=29124 Win=64258 Len=74 TSval=727525 TSecr=536305 Frame 322: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 445, Ack: 29124, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 03 92 d4 59 c5 ed 99 57 04 af 12 .... ...Y...W... 0010 fe 08 af 68 4e 5d 0b 0a cc fd db 32 00 f3 66 84 ...hN].....2..f. 0020 90 16 c1 b2 ae 17 03 01 00 20 26 fa 3e 94 09 54 ......... &.>..T 0030 a5 9a a9 7d 4b b8 fc 1d 6f c7 bf 30 b2 22 f8 ae ...}K...o..0.".. 0040 24 b4 ad f6 8d cd 19 83 90 31 $........1 No. Time Source Destination Protocol Length Info 323 4.258117 192.168.10.1 192.168.10.203 TCP 903 34433 > cds [PSH, ACK] Seq=29124 Ack=519 Win=1002 Len=837 TSval=536313 TSecr=727525 Frame 323: 903 bytes on wire (7224 bits), 903 bytes captured (7224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 29124, Ack: 519, Len: 837 Data (837 bytes) 0000 17 03 01 03 40 66 5c 87 86 05 48 ab 84 83 b4 d9 ....@f\...H..... 0010 40 eb 21 6e e8 da 5d 30 27 a1 52 da 9b c9 ac 07 @.!n..]0'.R..... 0020 c1 05 1c 8d e6 0e 85 13 7b 38 9f b3 7c 2e f1 b3 ........{8..|... 0030 e6 6d 7d 01 ec 26 87 17 3f e7 46 e2 22 c8 aa 0f .m}..&..?.F."... 0040 3a 7c b3 cb 1d ed 3c b2 30 89 5c d5 8e 4c 5b f0 :|....<.0.\..L[. 0050 72 7a bf 2e 4c eb 55 ec 9b c5 ae 40 2d cc 75 60 [email protected]` 0060 62 9e 0c 1a 70 cf 67 bb 41 9a e8 dc 67 4c cf b0 b...p.g.A...gL.. 0070 e7 f7 92 8a 8c b0 69 b2 e8 ad 0c 91 f1 f3 28 94 ......i.......(. 0080 39 38 12 f4 c2 21 a1 91 6d 4c fd 81 6b 96 d2 08 98...!..mL..k... 0090 db 53 fd 36 c9 23 6f d7 99 aa 5d cc c6 e8 2d 95 .S.6.#o...]...-. 00a0 e2 f6 83 52 02 14 e7 1c 7f da 18 6f 2b f8 09 1d ...R.......o+... 00b0 dd b3 3e bd b0 e4 46 a9 58 0c ce 18 36 a9 2e e6 ..>...F.X...6... 00c0 40 6d fa 25 af 8c 84 eb 79 48 e4 4d 4e 61 c9 0a @m.%....yH.MNa.. 00d0 c2 aa 9f 97 95 5b 4b b8 fc 56 0e 61 c2 a6 f6 f1 .....[K..V.a.... 00e0 a3 0b c9 02 08 02 82 76 b6 35 64 b0 8a 7a 62 31 .......v.5d..zb1 00f0 5f 9d 9d 20 9e 9c e5 dc 7c c1 39 d3 8d 9f 6e 0e _.. ....|.9...n. 0100 a2 77 89 7d 2b 0e 4b 6a e7 31 50 09 5c 64 24 a3 .w.}+.Kj.1P.\d$. 0110 87 8d c4 b0 cc e1 64 fd 09 2a 40 4d 4a 95 ed c6 ......d..*@MJ... 0120 f3 8e 23 99 11 7e 79 a6 a2 88 74 f0 81 42 b8 90 ..#..~y...t..B.. 0130 c7 92 47 24 f2 39 c5 5f ed 70 d2 87 47 29 31 d3 ..G$.9._.p..G)1. 0140 9c c7 b3 f6 0d db 16 e3 7a 8a 08 cc 5f 9e bd db ........z..._... 0150 3e 9f 3b 01 72 d2 c1 56 5b 1d 83 ee 79 6c af b9 >.;.r..V[...yl.. 0160 6f 05 93 23 8c d7 87 11 08 b3 72 48 4c 92 35 5d o..#......rHL.5] 0170 77 9f 6d bf 3b 81 40 38 7e 4a cf bc 27 a4 00 1e w.m.;.@8~J..'... 0180 2a a1 c2 d6 41 9a cc ec 30 b3 a7 91 ba 1b c0 bb *...A...0....... 0190 3e ef 53 38 19 0d 73 15 a2 e4 35 44 8c 21 db 5c >.S8..s...5D.!.\ 01a0 38 f4 74 27 e0 4d 8c 93 05 50 a1 a0 dd c2 0a a7 8.t'.M...P...... 01b0 df d1 0e 0c d1 e3 3b 61 e2 1b 4e 71 4c 77 17 69 ......;a..NqLw.i 01c0 ef 44 82 3f 03 41 e5 2e 52 c4 97 3a 88 65 17 6f .D.?.A..R..:.e.o 01d0 21 88 5a 73 34 4b ce 5a 3d 5e 3f 63 87 2e 84 9b !.Zs4K.Z=^?c.... 01e0 ef e5 43 ff 03 a7 3f ad 20 16 31 a8 be 84 f7 be ..C...?. .1..... 01f0 f7 c5 7c a4 f6 3c 3c 78 5c d0 87 e3 2a c0 ac 83 ..|..<<x\...*... 0200 6a ea 76 e2 59 a4 c2 01 8c 43 d8 53 a0 ac 96 86 j.v.Y....C.S.... 0210 55 57 2e b6 03 2e d0 ce de 76 dd 05 38 59 f4 bd UW.......v..8Y.. 0220 31 29 87 60 27 d4 a9 b4 0c 64 d8 19 43 38 91 83 1).`'....d..C8.. 0230 75 65 f6 b2 25 6a 78 e0 9e 1b 3b 10 5f 73 cb f9 ue..%jx...;._s.. 0240 b4 90 20 c6 59 ae d4 ca 87 8b db 0f 77 7d 98 15 .. .Y.......w}.. 0250 02 33 26 91 45 7f 93 ed d4 6c ed e9 84 71 5c c0 .3&.E....l...q\. 0260 a5 97 7b 8a f9 ae b6 a2 ad 6b dc 66 00 d9 b8 58 ..{......k.f...X 0270 e5 2e 9d 4f 09 a4 b8 2b 70 d3 d3 76 72 a3 16 fe ...O...+p..vr... 0280 a1 cf bf 91 cb ec a9 ae b6 76 8f 41 67 c0 8d ea .........v.Ag... 0290 9c a0 cf 5d 6f 07 25 87 25 08 bb 45 ee 95 a5 5c ...]o.%.%..E...\ 02a0 04 b6 34 28 8a 96 9c 40 17 9b d5 7c 79 bf 72 55 ..4(...@...|y.rU 02b0 19 78 e8 4c a7 6f f6 b5 91 6f eb d6 8b 6c 18 77 .x.L.o...o...l.w 02c0 7a cd 36 aa da 6f 3b 1e 65 32 5a 3e 75 92 90 2e z.6..o;.e2Z>u... 02d0 f1 4d 6f 79 13 31 eb c6 1e a5 39 7c e4 1b 61 2c .Moy.1....9|..a, 02e0 dc 74 68 48 ff 0d 8a b8 0a f2 8e ce fb 51 9a 10 .thH.........Q.. 02f0 44 9c ea a6 2d 79 12 de 97 74 35 b1 08 d6 58 89 D...-y...t5...X. 0300 2d ea b1 48 ea fc 86 df 07 7b ae 0e 64 6d 6b 15 -..H.....{..dmk. 0310 d8 57 ac aa 0a aa c6 fe 14 ab ab c7 02 ba 87 97 .W.............. 0320 39 15 8d 87 bb bb ed a3 c0 00 f2 25 b1 3a 9a bc 9..........%.:.. 0330 97 6c f9 bf f1 57 21 c1 63 de 81 fe aa f3 60 d7 .l...W!.c.....`. 0340 cc f6 93 88 a2 ..... No. Time Source Destination Protocol Length Info 324 4.261235 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=519 Ack=29961 Win=65535 Len=74 TSval=727525 TSecr=536313 Frame 324: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 519, Ack: 29961, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 59 29 de a6 71 eb d5 25 6b 49 45 .... Y)..q..%kIE 0010 4a 18 a2 a5 e2 ff d7 17 38 b9 c6 1e 9e ba 79 98 J.......8.....y. 0020 d5 f8 8a cf ec 17 03 01 00 20 7f 39 4b bd 94 6b ......... .9K..k 0030 75 4e 61 ee c5 e5 13 3c f2 a5 9c a3 86 cb 44 ef uNa....<......D. 0040 18 42 52 60 c5 4f 47 a7 f9 d1 .BR`.OG... No. Time Source Destination Protocol Length Info 325 4.283771 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1672419584, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 325: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 326 4.283794 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1672419584, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 326: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 327 4.283807 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1672419584, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 327: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 328 4.283819 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1672419584, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 328: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 329 4.299782 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=29961 Ack=593 Win=1002 Len=0 TSval=536324 TSecr=727525 Frame 329: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 29961, Ack: 593, Len: 0 No. Time Source Destination Protocol Length Info 330 4.304497 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3541500160, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 330: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 331 4.304515 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3541500160, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 331: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 332 4.304527 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3541500160, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 332: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 333 4.304541 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3541500160, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 333: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 334 4.374968 192.168.10.1 192.168.10.245 Syslog 309 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.233.185.172 7x.x.x.3 22958 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="nnstudio@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 334: 309 bytes on wire (2472 bits), 309 bytes captured (2472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.233.185.172 7x.x.x.3 22958 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defau No. Time Source Destination Protocol Length Info 335 4.419945 192.168.10.15 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 335: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: DellComp_f0:68:fd (00:b0:d0:f0:68:fd), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.15 (192.168.10.15), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 336 4.420154 192.168.10.15 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 336: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: DellComp_f0:68:fd (00:b0:d0:f0:68:fd), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.15 (192.168.10.15), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 337 4.556459 190.233.185.172 192.168.10.207 TCP 60 22958 > smtp [FIN, ACK] Seq=62 Ack=221 Win=93220 Len=0 Frame 337: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.233.185.172 (190.233.185.172), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22958 (22958), Dst Port: smtp (25), Seq: 62, Ack: 221, Len: 0 No. Time Source Destination Protocol Length Info 338 4.556505 192.168.10.207 190.233.185.172 TCP 60 smtp > 22958 [ACK] Seq=221 Ack=63 Win=65474 Len=0 Frame 338: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.233.185.172 (190.233.185.172) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22958 (22958), Seq: 221, Ack: 63, Len: 0 No. Time Source Destination Protocol Length Info 339 4.556606 192.168.10.207 190.233.185.172 TCP 60 smtp > 22958 [FIN, ACK] Seq=221 Ack=63 Win=65474 Len=0 Frame 339: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.233.185.172 (190.233.185.172) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22958 (22958), Seq: 221, Ack: 63, Len: 0 No. Time Source Destination Protocol Length Info 340 4.556657 190.233.185.172 192.168.10.207 TCP 60 22958 > smtp [ACK] Seq=63 Ack=222 Win=93220 Len=0 Frame 340: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.233.185.172 (190.233.185.172), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 22958 (22958), Dst Port: smtp (25), Seq: 63, Ack: 222, Len: 0 No. Time Source Destination Protocol Length Info 341 4.556890 192.168.10.1 192.168.10.245 Syslog 204 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.233.185.172 7x.x.x.3 22958 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 341: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.233.185.172 7x.x.x.3 22958 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 342 4.632533 192.168.10.221 192.168.10.1 ICMP 74 Echo (ping) request id=0x0200, seq=41748/5283, ttl=128 Frame 342: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 192.168.10.1 (192.168.10.1) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 343 4.632596 192.168.10.1 192.168.10.221 ICMP 74 Echo (ping) reply id=0x0200, seq=41748/5283, ttl=64 Frame 343: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.221 (192.168.10.221) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 344 4.713824 190.42.139.241 192.168.10.207 SMTP 97 C: MAIL FROM: <olivia.gilmore@xxxxxxxxxxxxx> Frame 344: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23483 (23483), Dst Port: smtp (25), Seq: 16, Ack: 313, Len: 43 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 345 4.714061 192.168.10.207 190.42.139.241 SMTP 107 S: 250 2.1.0 [email protected] OK Frame 345: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23483 (23483), Seq: 313, Ack: 59, Len: 53 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 346 4.714101 190.42.139.241 192.168.10.207 TCP 60 23483 > smtp [ACK] Seq=59 Ack=366 Win=93074 Len=0 Frame 346: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23483 (23483), Dst Port: smtp (25), Seq: 59, Ack: 366, Len: 0 No. Time Source Destination Protocol Length Info 347 4.812858 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-06.geo.kaspersky.com Frame 347: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 51246 (51246), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 348 4.937747 41.252.217.113 192.168.10.207 SMTP 105 C: MAIL FROM: <annabelle.sherlock@xxxxxxxxxxxxxxxxx> Frame 348: 105 bytes on wire (840 bits), 105 bytes captured (840 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 38756 (38756), Dst Port: smtp (25), Seq: 19, Ack: 313, Len: 51 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 349 4.938026 192.168.10.207 41.252.217.113 SMTP 115 S: 250 2.1.0 [email protected] OK Frame 349: 115 bytes on wire (920 bits), 115 bytes captured (920 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 41.252.217.113 (41.252.217.113) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 38756 (38756), Seq: 313, Ack: 70, Len: 61 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 350 4.938074 41.252.217.113 192.168.10.207 TCP 60 38756 > smtp [ACK] Seq=70 Ack=374 Win=93066 Len=0 Frame 350: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 38756 (38756), Dst Port: smtp (25), Seq: 70, Ack: 374, Len: 0 No. Time Source Destination Protocol Length Info 351 5.193815 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 351: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 352 5.249069 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 352: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 353 5.249102 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 353: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 354 5.249116 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 354: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 355 5.249127 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 355: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 356 5.249143 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 356: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 357 5.249153 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 357: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 358 5.249164 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 358: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 359 5.249174 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 359: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 360 5.249183 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 360: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 361 5.249194 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 361: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 362 5.249204 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 362: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 363 5.249219 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 363: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 364 5.249252 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 364: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 365 5.249261 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 365: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 366 5.249287 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 366: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 367 5.249306 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 367: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 368 5.249317 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 368: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 369 5.249327 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 369: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 370 5.249337 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 370: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 371 5.249347 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 371: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 372 5.249357 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 372: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 373 5.249373 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 373: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 374 5.249383 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 374: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 375 5.249397 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 375: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 376 5.249410 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 376: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 377 5.249424 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 377: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 378 5.249434 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 378: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 379 5.249447 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 379: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 380 5.249461 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 380: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 381 5.249474 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 381: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 382 5.249484 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 382: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 383 5.249497 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 383: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 384 5.249508 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 384: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 385 5.249524 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 385: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 386 5.249534 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 386: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 387 5.249544 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 387: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 388 5.249555 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 388: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 389 5.249565 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 389: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 390 5.249575 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 390: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 391 5.249585 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 391: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 392 5.249594 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 392: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 393 5.249605 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 393: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 394 5.249615 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 394: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 395 5.249628 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 395: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 396 5.249638 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 396: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 397 5.249651 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 397: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 398 5.249662 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 398: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 399 5.249672 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 399: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 400 5.249682 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 400: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 401 5.249692 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 401: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 402 5.249703 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 402: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 403 5.249713 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 403: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 404 5.249723 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 404: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 405 5.249733 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 405: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 406 5.249747 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 406: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 407 5.249914 192.168.10.233 192.168.10.245 Syslog 178 LOCAL4.WARNING: :Oct 03 19:36:10 EDT: %PIX-session-4-405001: Received ARP request collision from 192.168.10.226/0026.b952.f0f3 on interface Inside\n Frame 407: 178 bytes on wire (1424 bits), 178 bytes captured (1424 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.233 (192.168.10.233), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: :Oct 03 19:36:10 EDT: %PIX-session-4-405001: Received ARP request collision from 192.168.10.226/0026.b952.f0f3 on interface Inside\n No. Time Source Destination Protocol Length Info 408 5.249957 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 408: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 409 5.299217 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1689196800, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 409: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 410 5.299242 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1689196800, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 410: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 411 5.299255 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1689196800, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 411: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 412 5.299267 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1689196800, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 412: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 413 5.315151 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 413: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 414 5.320123 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3558277376, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 414: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 415 5.320146 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3558277376, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 415: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 416 5.320159 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3558277376, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 416: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 417 5.320171 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3558277376, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 417: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 418 5.404640 192.168.10.1 192.168.10.245 Syslog 313 LOCAL1.INFO: Oct 3 19:44:23 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="exxexpiration@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 418: 313 bytes on wire (2504 bits), 313 bytes captured (2504 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:23 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 419 5.443320 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 419: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 420 5.475588 192.168.10.203 41.131.128.129 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 420: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 41.131.128.129 (41.131.128.129) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 421 5.547310 192.168.10.1 192.168.10.245 Syslog 310 LOCAL1.INFO: Oct 3 19:44:23 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eymobilize@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 421: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:23 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 422 5.565894 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 422: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 423 5.567347 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 423: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 424 5.567387 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 424: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 425 5.573827 190.42.139.241 192.168.10.207 SMTP 60 C: QUIT Frame 425: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23483 (23483), Dst Port: smtp (25), Seq: 59, Ack: 366, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 426 5.573865 192.168.10.207 190.42.139.241 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 426: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23483 (23483), Seq: 366, Ack: 65, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 427 5.573907 190.42.139.241 192.168.10.207 TCP 60 23483 > smtp [ACK] Seq=65 Ack=435 Win=93006 Len=0 Frame 427: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23483 (23483), Dst Port: smtp (25), Seq: 65, Ack: 435, Len: 0 No. Time Source Destination Protocol Length Info 428 5.573936 192.168.10.207 190.42.139.241 TCP 60 smtp > 23483 [FIN, ACK] Seq=435 Ack=65 Win=65471 Len=0 Frame 428: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23483 (23483), Seq: 435, Ack: 65, Len: 0 No. Time Source Destination Protocol Length Info 429 5.573973 190.42.139.241 192.168.10.207 TCP 60 23483 > smtp [ACK] Seq=65 Ack=436 Win=93006 Len=0 Frame 429: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23483 (23483), Dst Port: smtp (25), Seq: 65, Ack: 436, Len: 0 No. Time Source Destination Protocol Length Info 430 5.606479 192.168.10.1 192.168.10.245 Syslog 207 LOCAL1.INFO: Oct 3 19:44:23 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3339 80 msg="Conn Begin" (HTTP-proxy-Visitor-00) Frame 430: 207 bytes on wire (1656 bits), 207 bytes captured (1656 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:23 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3339 80 msg="Conn Begin" (HTTP-proxy-Visitor-00) No. Time Source Destination Protocol Length Info 431 5.619679 192.168.10.207 206.225.164.186 SMTP 474 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 431: 474 bytes on wire (3792 bits), 474 bytes captured (3792 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 52892, Len: 420 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 432 5.619713 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=53580 Ack=547 Win=46531 Len=0 Frame 432: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 53580, Ack: 547, Len: 0 No. Time Source Destination Protocol Length Info 433 5.619746 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=547 Ack=52892 Win=0 Len=0 Frame 433: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 547, Ack: 52892, Len: 0 No. Time Source Destination Protocol Length Info 434 5.632644 192.168.10.221 192.168.10.1 ICMP 74 Echo (ping) request id=0x0200, seq=42004/5284, ttl=128 Frame 434: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 192.168.10.1 (192.168.10.1) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 435 5.632705 192.168.10.1 192.168.10.221 ICMP 74 Echo (ping) reply id=0x0200, seq=42004/5284, ttl=64 Frame 435: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.221 (192.168.10.221) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 436 5.669644 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:44:23 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3339 80 msg="Conn End" (HTTP-proxy-Visitor-00) Frame 436: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:23 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3339 80 msg="Conn End" (HTTP-proxy-Visitor-00) No. Time Source Destination Protocol Length Info 437 5.737914 190.42.139.241 192.168.10.207 TCP 60 23483 > smtp [RST, ACK] Seq=65 Ack=436 Win=93006 Len=0 Frame 437: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23483 (23483), Dst Port: smtp (25), Seq: 65, Ack: 436, Len: 0 No. Time Source Destination Protocol Length Info 438 5.737995 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:44:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 438: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 439 5.812914 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-06.geo.kaspersky.com Frame 439: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 51246 (51246), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 440 5.991875 206.225.164.186 192.168.10.207 TCP 60 [TCP Dup ACK 432#1] 23308 > smtp [ACK] Seq=53580 Ack=547 Win=46531 Len=0 Frame 440: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 53580, Ack: 547, Len: 0 No. Time Source Destination Protocol Length Info 441 5.991911 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=547 Ack=52892 Win=0 Len=0 Frame 441: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 547, Ack: 52892, Len: 0 No. Time Source Destination Protocol Length Info 442 6.074405 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 442: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 443 6.074437 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 443: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 444 6.157087 41.252.217.113 192.168.10.207 SMTP 60 C: QUIT Frame 444: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 38756 (38756), Dst Port: smtp (25), Seq: 70, Ack: 374, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 445 6.157161 192.168.10.207 41.252.217.113 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 445: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 41.252.217.113 (41.252.217.113) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 38756 (38756), Seq: 374, Ack: 76, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 446 6.157237 41.252.217.113 192.168.10.207 TCP 60 38756 > smtp [ACK] Seq=76 Ack=443 Win=92998 Len=0 Frame 446: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 38756 (38756), Dst Port: smtp (25), Seq: 76, Ack: 443, Len: 0 No. Time Source Destination Protocol Length Info 447 6.157268 192.168.10.207 41.252.217.113 TCP 60 smtp > 38756 [FIN, ACK] Seq=443 Ack=76 Win=65460 Len=0 Frame 447: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 41.252.217.113 (41.252.217.113) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 38756 (38756), Seq: 443, Ack: 76, Len: 0 No. Time Source Destination Protocol Length Info 448 6.157322 41.252.217.113 192.168.10.207 TCP 60 38756 > smtp [ACK] Seq=76 Ack=444 Win=92998 Len=0 Frame 448: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 38756 (38756), Dst Port: smtp (25), Seq: 76, Ack: 444, Len: 0 No. Time Source Destination Protocol Length Info 449 6.315015 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1705974016, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 449: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 450 6.315039 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1705974016, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 450: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 451 6.315052 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1705974016, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 451: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 452 6.315064 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1705974016, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 452: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 453 6.335937 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3575054592, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 453: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 454 6.335960 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3575054592, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 454: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 455 6.335973 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3575054592, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 455: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 456 6.335985 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3575054592, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 456: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 457 6.340174 192.168.10.1 192.168.10.245 Syslog 224 LOCAL1.WARNING: Oct 3 19:44:24 MyFirewall firewall: Allow 3-Optional-2 0-External 48 tcp 20 127 192.168.15.10 38.124.168.116 3339 80 offset 7 S 3513953628 win 65535 (HTTP-proxy-Visitor-00) Frame 457: 224 bytes on wire (1792 bits), 224 bytes captured (1792 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.WARNING: Oct 3 19:44:24 MyFirewall firewall: Allow 3-Optional-2 0-External 48 tcp 20 127 192.168.15.10 38.124.168.116 3339 80 offset 7 S 3513953628 win 65535 (HTTP-proxy-Visitor-00) No. Time Source Destination Protocol Length Info 458 6.763917 41.252.217.113 192.168.10.207 TCP 60 38756 > smtp [RST, ACK] Seq=76 Ack=444 Win=92998 Len=0 Frame 458: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 38756 (38756), Dst Port: smtp (25), Seq: 76, Ack: 444, Len: 0 No. Time Source Destination Protocol Length Info 459 6.764001 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:44:24 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 459: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:24 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 460 6.770023 41.252.217.113 192.168.10.207 TCP 62 38766 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 460: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 38766 (38766), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 461 6.770088 192.168.10.207 41.252.217.113 TCP 62 smtp > 38766 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 461: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 41.252.217.113 (41.252.217.113) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 38766 (38766), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 462 6.812836 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-06.geo.kaspersky.com Frame 462: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 51246 (51246), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 463 6.917101 192.168.10.216 64.74.103.131 TLSv1 91 Application Data Frame 463: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.216 (192.168.10.216), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: ovrimosdbman (2956), Dst Port: https (443), Seq: 1, Ack: 1, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 464 6.917176 64.74.103.131 192.168.10.216 TCP 60 https > ovrimosdbman [ACK] Seq=1 Ack=38 Win=65535 Len=0 Frame 464: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.216 (192.168.10.216) Transmission Control Protocol, Src Port: https (443), Dst Port: ovrimosdbman (2956), Seq: 1, Ack: 38, Len: 0 No. Time Source Destination Protocol Length Info 465 6.919737 Watchgua_3c:4c:d8 IntelCor_36:19:60 ARP 60 Who has 192.168.10.216? Tell 192.168.10.1 Frame 465: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 466 6.919779 IntelCor_36:19:60 Watchgua_3c:4c:d8 ARP 60 192.168.10.216 is at 00:13:20:36:19:60 Frame 466: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 467 6.965211 64.74.103.131 192.168.10.216 TLSv1 91 Application Data Frame 467: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.216 (192.168.10.216) Transmission Control Protocol, Src Port: https (443), Dst Port: ovrimosdbman (2956), Seq: 1, Ack: 38, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 468 6.975502 192.168.10.203 41.131.128.129 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 468: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 41.131.128.129 (41.131.128.129) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 469 7.021072 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=463 Ack=4294966027 Win=17777 Len=0 Frame 469: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 463, Ack: 4294966027, Len: 0 No. Time Source Destination Protocol Length Info 470 7.021105 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 469#1] smtp > 9428 [ACK] Seq=463 Ack=4294966027 Win=17777 Len=0 Frame 470: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 463, Ack: 4294966027, Len: 0 No. Time Source Destination Protocol Length Info 471 7.021135 206.225.164.188 192.168.10.207 SMTP 1434 C: EDOVbOSAMnAwD2t+J/DVr4e0MRGSV5nlHzK | zrG7nJ+eIuyDCAgMBuyB0BNcr4Zi1a2ikuLG0FzHKAu54w4BU5yobrwSDjjn1Fd18N9aNzPcWssS | pMxabciKgA3AGMgAEAMcqCTjJHGBXrlfOGrGTxF4ha1uZQiCZoUYjhUViAoA7seB6scmveb/AEeC | /sm099yQsqofLwpAUgjGQQOR6GvJdVOg+FVlsI4ft12CGBuY0dVLY+UuBG2NvzAKCMnr1AxfBGny | CabVjGTHZxSSRjlQ0hB2gcfMMbgcdDisvwdBHfa1Cs6LIjs7MjgMp+Vjgggg8+orS8S6PBo2tRQ6 | a4RmZHw7ArE7OcKTjKqBg4bJweSRXR/FO7uVFvblv3DruZQODIvfd3wDwO2c96xda0qwh8OWt5An | 792CtIchjneXGOAQGHykgnGMHFdR8P7BNX0h7e9Hm26TfJGQoCkYctkAMSSxBySMcAdam8XWvh/Q | oQslorTTBgix/KRx94nPABIxwfYHFVvh94QRAmrXOd5yYI+RtHI3MeNxI6Dpg5OSeML4iO2p6xHZ | 26s8saLGVA6lju456YIyTjHPbmsHxFY+Zq0emwgxKgigQOMYJC5JxyQSc5OSRXYeLvBsGkaQslqG | 82IoJ2DkLIOm5kZiCQxG3byMnj00rTxGP+EYdrVWDWsSQs0iqUZjgMANxJGD3A615X4fGnfaS+rb | ltirY2Bvv9gNoPTOfbjNeq+BYdBEzXFg8i3BzGsdzJHvIxkmNEwSCOpIOMdBzWT42jPh7WYNYhVW | 8zLbCcDeowTwAcEEHOSSc16poGqjWLGK8A2mQfMOcBgcEDPUZ6Gtiiiiiiiiiiiiiiiiiiiiiiii | iiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiivJ9a+I5s9QFtaeVJbLhZXaOT | crhmVwBvjDBQBjAwT0Y16pFKsyLIh3I6hlPqCMg/iK8Yvfifd2lzcwCGNwjtHCSWG3YSuWA+/kgN | gFMdM96zl+K2pD70Nsfosg/9qmrKfFi7H3raE/RnH+NWJfixKvCW0bfdO7zGxjgsuCgOeqg5wD82 | GHBpD4r34UAwQF8ncR5gBHG3A3kgj5skkg5GAMHPr3h3U5NW0+G8lVUeYMSq5wMOyjGeegBo1PxF | p2k5F5OkTAA7OWfBOAQiguRnuAcYJPAqzpmq2urQ/aLN/Ni3Fd21l+YAEjDhT3Harc88dtG0srBI | 0BZmbgADqSfQV57r3xItNMkRLNUvtwJcpLtCcjaMhHBJ5yOCMDPUVv6F4tstYjjG9IbmVSxgL7iv | zlAN2FBY4B2gbsEHG Frame 471: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 1, Ack: 463, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 472 7.021170 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 472: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 1381, Ack: 463, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 473 7.021199 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 473: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 2761, Ack: 463, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 474 7.021228 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 474: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 4141, Ack: 463, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 475 7.021258 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 475: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 5521, Ack: 463, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 476 7.021286 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 476: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 6901, Ack: 463, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 477 7.021321 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 469#2] smtp > 9428 [ACK] Seq=463 Ack=4294966027 Win=17777 Len=0 Frame 477: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 463, Ack: 4294966027, Len: 0 No. Time Source Destination Protocol Length Info 478 7.021363 192.168.10.207 206.225.164.188 SMTP 222 S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 478: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 463, Ack: 4294966027, Len: 168 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 479 7.021429 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=8281 Ack=631 Win=46190 Len=0 Frame 479: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 8281, Ack: 631, Len: 0 No. Time Source Destination Protocol Length Info 480 7.021469 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 478#1] smtp > 9428 [ACK] Seq=631 Ack=4294966027 Win=17777 Len=0 Frame 480: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 631, Ack: 4294966027, Len: 0 No. Time Source Destination Protocol Length Info 481 7.021500 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 478#2] smtp > 9428 [ACK] Seq=631 Ack=4294966027 Win=17777 Len=0 Frame 481: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 631, Ack: 4294966027, Len: 0 No. Time Source Destination Protocol Length Info 482 7.021529 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 478#3] smtp > 9428 [ACK] Seq=631 Ack=4294966027 Win=17777 Len=0 Frame 482: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 631, Ack: 4294966027, Len: 0 No. Time Source Destination Protocol Length Info 483 7.021556 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 478#4] smtp > 9428 [ACK] Seq=631 Ack=4294966027 Win=17777 Len=0 Frame 483: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 631, Ack: 4294966027, Len: 0 No. Time Source Destination Protocol Length Info 484 7.021584 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 478#5] smtp > 9428 [ACK] Seq=631 Ack=4294966027 Win=17777 Len=0 Frame 484: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 631, Ack: 4294966027, Len: 0 No. Time Source Destination Protocol Length Info 485 7.021617 206.225.164.188 192.168.10.207 SMTP 1324 [TCP Fast Retransmission] C: DATA fragment, 1270 bytes Frame 485: 1324 bytes on wire (10592 bits), 1324 bytes captured (10592 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 4294966027, Ack: 631, Len: 1270 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 486 7.021646 206.225.164.188 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 486: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 1, Ack: 631, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 487 7.021675 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 487: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 8281, Ack: 631, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 488 7.021705 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 488: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 9661, Ack: 631, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 489 7.021736 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=631 Ack=8281 Win=8227 Len=0 Frame 489: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 631, Ack: 8281, Len: 0 No. Time Source Destination Protocol Length Info 490 7.021764 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 489#1] smtp > 9428 [ACK] Seq=631 Ack=8281 Win=8227 Len=0 Frame 490: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 631, Ack: 8281, Len: 0 No. Time Source Destination Protocol Length Info 491 7.021791 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=631 Ack=11041 Win=5467 Len=0 Frame 491: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 631, Ack: 11041, Len: 0 No. Time Source Destination Protocol Length Info 492 7.021822 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 492: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 11041, Ack: 631, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 493 7.021855 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 493: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 12421, Ack: 631, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 494 7.021885 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 494: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 13801, Ack: 631, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 495 7.021915 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 495: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 15181, Ack: 631, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 496 7.021943 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=631 Ack=13801 Win=2707 Len=0 Frame 496: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 631, Ack: 13801, Len: 0 No. Time Source Destination Protocol Length Info 497 7.021995 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=631 Ack=16508 Win=0 Len=0 Frame 497: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 631, Ack: 16508, Len: 0 No. Time Source Destination Protocol Length Info 498 7.039156 190.42.139.241 192.168.10.207 TCP 62 23519 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 498: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23519 (23519), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 499 7.039229 192.168.10.207 190.42.139.241 TCP 62 smtp > 23519 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 499: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23519 (23519), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 500 7.167111 192.168.10.216 64.74.103.131 TCP 60 ovrimosdbman > https [ACK] Seq=38 Ack=38 Win=64277 Len=0 Frame 500: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.216 (192.168.10.216), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: ovrimosdbman (2956), Dst Port: https (443), Seq: 38, Ack: 38, Len: 0 No. Time Source Destination Protocol Length Info 501 7.196283 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 501: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 502 7.203245 190.42.139.241 192.168.10.207 TCP 60 23519 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 502: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23519 (23519), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 503 7.203334 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 503: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 504 7.203370 192.168.10.207 190.42.139.241 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:43:59 -0400 Frame 504: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23519 (23519), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 505 7.203409 190.42.139.241 192.168.10.207 TCP 60 23519 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 505: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23519 (23519), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 506 7.315159 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 506: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 507 7.330418 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1722751232, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 507: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 508 7.330442 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1722751232, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 508: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 509 7.330455 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1722751232, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 509: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 510 7.330467 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1722751232, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 510: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 511 7.351336 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3591831808, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 511: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 512 7.351360 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3591831808, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 512: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 513 7.351372 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3591831808, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 513: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 514 7.351384 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3591831808, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 514: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 515 7.401144 192.168.10.142 192.168.10.255 NBNS 110 Registration NB ANDYMOBILEPC<00> Frame 515: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 516 7.401337 192.168.10.142 192.168.10.255 NBNS 110 Registration NB ANDYMOBILEPC<00> Frame 516: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 517 7.443390 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 517: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 518 7.469695 192.168.10.221 66.150.117.33 TCP 62 4790 > https [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM=1 Frame 518: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 66.150.117.33 (66.150.117.33) Transmission Control Protocol, Src Port: 4790 (4790), Dst Port: https (443), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 519 7.501163 66.150.117.33 192.168.10.221 TCP 60 https > 4790 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1400 Frame 519: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 66.150.117.33 (66.150.117.33), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4790 (4790), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 520 7.501212 192.168.10.221 66.150.117.33 TCP 60 4790 > https [ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 520: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 66.150.117.33 (66.150.117.33) Transmission Control Protocol, Src Port: 4790 (4790), Dst Port: https (443), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 521 7.501404 192.168.10.221 66.150.117.33 TLSv1 163 Client Hello Frame 521: 163 bytes on wire (1304 bits), 163 bytes captured (1304 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 66.150.117.33 (66.150.117.33) Transmission Control Protocol, Src Port: 4790 (4790), Dst Port: https (443), Seq: 1, Ack: 1, Len: 109 Secure Sockets Layer No. Time Source Destination Protocol Length Info 522 7.501436 66.150.117.33 192.168.10.221 TCP 60 https > 4790 [ACK] Seq=1 Ack=110 Win=65535 Len=0 Frame 522: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 66.150.117.33 (66.150.117.33), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4790 (4790), Seq: 1, Ack: 110, Len: 0 No. Time Source Destination Protocol Length Info 523 7.529990 190.42.139.241 192.168.10.207 SMTP 72 C: EHLO qooapdo.com Frame 523: 72 bytes on wire (576 bits), 72 bytes captured (576 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23519 (23519), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 18 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 524 7.530164 192.168.10.207 190.42.139.241 SMTP 245 S: 250-mail.mydomain.com Hello [190.42.139.241] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 524: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23519 (23519), Seq: 122, Ack: 19, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 525 7.530205 190.42.139.241 192.168.10.207 TCP 60 23519 > smtp [ACK] Seq=19 Ack=313 Win=93128 Len=0 Frame 525: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23519 (23519), Dst Port: smtp (25), Seq: 19, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 526 7.530725 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 526: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 527 7.530795 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 527: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 528 7.531313 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=29961 Ack=593 Win=1002 Len=1448 TSval=537131 TSecr=727525 Frame 528: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 29961, Ack: 593, Len: 1448 Data (1448 bytes) 0000 17 03 01 21 f0 fc b5 a0 43 0e 92 4b f6 21 cb 34 ...!....C..K.!.4 0010 fc d7 4e 0a be 80 76 ee c9 76 b2 ac 98 69 c9 6c ..N...v..v...i.l 0020 7f f1 63 7a 4d 0a d0 49 8d 23 32 00 02 96 53 19 ..czM..I.#2...S. 0030 85 4d c4 17 2a f5 dd d2 d6 ed 87 1c 26 fa 14 b5 .M..*.......&... 0040 44 d3 1b 16 03 aa 76 2a 0a 3f 6f fa 38 32 9b 31 D.....v*.?o.82.1 0050 c3 f7 74 9d a6 ae 4f 34 19 e1 e3 32 b0 42 fd 8a ..t...O4...2.B.. 0060 12 98 89 ec 9d b3 11 c3 da 67 48 25 71 56 e2 17 .........gH%qV.. 0070 54 d0 20 30 c5 b2 bf c5 e3 df ef e3 cd 53 f9 82 T. 0.........S.. 0080 88 f8 c6 8f 8c 15 91 8a eb 6d 23 1e f0 ad 90 4e .........m#....N 0090 5a 02 57 bc bb 9f ef 3c f7 ae 82 1e 29 64 7c 4a Z.W....<....)d|J 00a0 d3 f7 5e 5c 68 c5 da c4 6a 77 16 ec 36 05 b0 86 ..^\h...jw..6... 00b0 26 be e9 7b df 52 32 dc 99 fc 00 c0 ec e5 eb 9c &..{.R2......... 00c0 bf 0d be 0f bd 5e f9 06 5f 1f 5a 0e 23 8f 5d 1a .....^.._.Z.#.]. 00d0 56 79 28 ae 21 a0 73 e4 93 da 28 73 10 3f 21 b8 Vy(.!.s...(s.?!. 00e0 ae e8 4f 71 08 49 2b b9 22 ea 0d c7 af 95 66 5e ..Oq.I+.".....f^ 00f0 0e b5 41 96 1a 66 df 88 04 ee f3 a6 7a b9 b8 9d ..A..f......z... 0100 8c 57 b6 c0 97 4f f1 87 6c e0 5e 51 ac 2d 51 36 .W...O..l.^Q.-Q6 0110 a8 48 4a 27 a0 44 0f fe 50 5f e3 45 15 bb fc 8d .HJ'.D..P_.E.... 0120 27 d9 e7 ae 22 1b 8c a7 e8 41 c8 1a 62 26 48 e2 '..."....A..b&H. 0130 53 6a f3 5b 17 29 b8 2c 4c bb e1 b6 87 c7 2d 97 Sj.[.).,L.....-. 0140 b3 31 80 a3 95 5e ee db d0 5d 33 d1 66 27 32 0c .1...^...]3.f'2. 0150 ec cb 95 59 3b 13 22 01 b7 41 1a 75 2e b2 f2 1f ...Y;."..A.u.... 0160 1d e4 4f 9e a9 ce 7c 5c 4b fd e2 d8 88 a3 3d 6e ..O...|\K.....=n 0170 13 52 db 0e aa 71 9f 57 ee 53 dc f3 d8 be 77 11 .R...q.W.S....w. 0180 b9 75 ae 19 72 7c 29 81 3e 50 4b fc 17 b0 9c d6 .u..r|).>PK..... 0190 ff 66 95 06 80 c2 1b 79 f7 2e ad 50 d7 0b 05 48 .f.....y...P...H 01a0 ee df b7 9a f3 08 61 f2 87 c3 fe 61 47 ea cc a9 ......a....aG... 01b0 48 a7 3b b3 95 48 d8 f2 37 82 c9 59 d4 73 3b ee H.;..H..7..Y.s;. 01c0 f5 e2 6e 28 5e a5 5f e4 27 5b 9f ff 4d a4 2b f1 ..n(^._.'[..M.+. 01d0 45 9a a6 b9 80 21 59 88 14 31 1d 02 b0 6f 6b cc E....!Y..1...ok. 01e0 48 81 67 43 50 50 ba 7a 56 43 b6 6f e9 ce 97 11 H.gCPP.zVC.o.... 01f0 19 40 d4 e0 25 28 25 74 25 0d bd 50 26 01 b9 1e .@..%(%t%..P&... 0200 65 6f 2e ce 4f b7 d7 59 3f b4 ac ff 84 87 5b de eo..O..Y?.....[. 0210 fa 3d 3f 52 26 56 e6 79 3b 91 0d 8d 4d b2 b0 c0 .=?R&V.y;...M... 0220 b5 ab 94 cf 63 38 30 87 41 09 c5 23 af a8 a7 16 ....c80.A..#.... 0230 8c a7 b7 a2 06 e7 2d 7a 7f d1 b0 f2 c6 92 76 1f ......-z......v. 0240 2a 06 bf 8f 3c 2b 86 22 26 6e df 45 e5 a5 65 19 *...<+."&n.E..e. 0250 3f 9b 85 4a b7 92 99 e2 ff c5 20 2a ed f2 93 98 ?..J...... *.... 0260 80 88 a7 9f 48 e3 73 e4 ae ce e5 99 10 d2 79 0f ....H.s.......y. 0270 9b 25 18 91 88 fc d1 9f 7b c0 3e be bc e2 fb 01 .%......{.>..... 0280 c5 38 2d 07 0d ac 16 3b 1f a5 36 64 28 85 48 b8 .8-....;..6d(.H. 0290 ff c7 00 16 cd 76 85 d4 47 70 cc fb da 02 13 d6 .....v..Gp...... 02a0 66 4d 61 a1 e4 e0 bc 4d 48 99 ef 09 e6 71 55 d5 fMa....MH....qU. 02b0 dd 05 d7 2f 41 0d 18 cf f6 61 e0 2d a6 cb 25 75 .../A....a.-..%u 02c0 6d 0f 70 07 ab 9c 4a ac 7d 30 8b f1 cd f4 cb 22 m.p...J.}0....." 02d0 64 6d 79 7b b7 6d f0 17 10 a0 31 c6 c1 26 f5 e0 dmy{.m....1..&.. 02e0 43 41 f1 5d 3e 9f 16 3e 2c cd 1c 99 29 7a 3f 10 CA.]>..>,...)z?. 02f0 a4 a7 64 36 2d 35 b1 52 fb 52 68 f1 65 c0 de 3d ..d6-5.R.Rh.e..= 0300 40 1c 8e bf ed 54 e4 e6 ef fb f3 dd 71 f8 d7 f7 @....T......q... 0310 40 bd 25 45 6e 0c 79 e5 10 b7 63 14 c9 d2 77 f2 @.%En.y...c...w. 0320 d5 bc b4 91 d4 e7 97 db 4b f4 ef 75 aa ba 9f 44 ........K..u...D 0330 84 98 7b 45 1b 38 c4 fc 27 93 57 8c 48 7c 34 ce ..{E.8..'.W.H|4. 0340 a7 5e f6 f4 45 62 02 9c c2 f5 c2 b1 bf cc b5 f6 .^..Eb.......... 0350 58 3a 81 22 fb f3 eb 94 b8 54 86 0a 36 a8 5c 27 X:.".....T..6.\' 0360 b7 f1 58 34 c1 3a 07 86 ca 99 1f c7 58 e7 c7 61 ..X4.:......X..a 0370 7a d5 67 c9 d4 59 52 54 fe 6f 45 89 2b c0 71 4b z.g..YRT.oE.+.qK 0380 70 35 3d 5f 4f 09 0a 62 5c 86 a4 aa b7 d2 50 a7 p5=_O..b\.....P. 0390 00 52 48 a2 2b 9a b6 89 2f 2d 81 54 da 48 10 69 .RH.+.../-.T.H.i 03a0 0d 80 e6 6c 80 d7 8e 1c 22 d0 ef b0 b9 5e f9 1b ...l...."....^.. 03b0 f3 ca fb 1d 73 7c d5 90 dd 53 5b 9b c7 8a 47 36 ....s|...S[...G6 03c0 69 99 f7 92 1d d5 a3 51 72 e2 e2 52 92 ef f0 ca i......Qr..R.... 03d0 a6 d3 d4 cf cb 92 84 41 8a 85 f9 c9 6a 16 db 18 .......A....j... 03e0 97 b8 92 e1 5a d5 6a 17 22 1e fc 30 e8 48 56 e3 ....Z.j."..0.HV. 03f0 27 22 b0 a8 43 ba 54 c3 c9 08 e5 7d 4e 36 09 44 '"..C.T....}N6.D 0400 dc 64 fd af e3 7d 9e 15 fe 40 d4 17 fd 50 0c 0d .d...}[email protected].. 0410 06 b7 91 13 54 f8 70 39 e8 b4 82 08 b8 d7 4d 97 ....T.p9......M. 0420 19 da 38 d4 2d f1 e6 71 81 84 44 c4 bd 90 c4 9f ..8.-..q..D..... 0430 ca 92 92 f3 12 91 31 8b a1 8d 26 f0 17 b3 68 7e ......1...&...h~ 0440 40 5f ea 47 86 d3 ed 08 07 99 cb bf 90 99 e3 61 @_.G...........a 0450 ff 1d ec ec f6 12 c5 be 15 f4 77 fa 5f 14 e4 04 ..........w._... 0460 06 67 45 75 e7 3d 14 53 20 cb 65 59 e1 25 13 00 .gEu.=.S .eY.%.. 0470 e5 e6 3b 1b ce d3 89 3f 67 b4 b6 2d db 59 5b 7c ..;....?g..-.Y[| 0480 78 c9 60 46 e7 ab ac 39 00 ce 7c 28 96 05 64 03 x.`F...9..|(..d. 0490 7a 90 b3 33 a5 29 b8 cb 3a e0 d3 a8 b4 9e 25 28 z..3.)..:.....%( 04a0 2b dc e9 96 28 4a 02 6a 3d 8b 11 fa 9f 73 b3 d7 +...(J.j=....s.. 04b0 fd 3e 6f 1b d6 d6 38 c1 3d f6 e2 14 a0 d5 cb 88 .>o...8.=....... 04c0 2a 62 6f 07 d4 98 16 7a e1 ee fa 03 ec c1 67 2e *bo....z......g. 04d0 28 dc e2 50 b4 8f 72 d5 b6 32 37 58 08 9e dd e2 (..P..r..27X.... 04e0 d8 fd db 8c 34 d2 29 cb 66 eb 6a 6c 67 6a e0 6f ....4.).f.jlgj.o 04f0 28 54 f2 db d5 12 0c 44 ef 42 5a 6c 9f 0c f5 7a (T.....D.BZl...z 0500 fd 59 d3 00 c1 43 fc e4 ed 21 f9 14 5f 5c 8b 32 .Y...C...!.._\.2 0510 bf 4b d9 3b a2 8d bf a1 3f 00 d6 0b d8 f1 25 65 .K.;....?.....%e 0520 95 43 87 99 75 74 b0 b6 71 56 5b 34 e6 f5 e2 4c .C..ut..qV[4...L 0530 02 06 65 8e f8 f9 33 a8 00 d3 48 bf 28 d3 ee a1 ..e...3...H.(... 0540 8f 8b 2e da d3 ba 65 a7 de 1a 25 16 41 bd d3 54 ......e...%.A..T 0550 70 5e 91 55 a7 4c 2e d1 11 40 70 ba fc ff 77 31 p^[email protected] 0560 e5 74 35 34 2b ea f1 45 87 f8 80 5b cb 3c b2 5c .t54+..E...[.<.\ 0570 30 df 80 b4 2b 15 a1 17 59 08 d0 e4 4f 84 8b 3f 0...+...Y...O..? 0580 90 b7 81 27 4e d7 22 76 d4 e3 bc 09 33 da af 4f ...'N."v....3..O 0590 96 47 ab cf 36 d2 92 9b ea 8c 5b d8 3f 68 a0 c0 .G..6.....[.?h.. 05a0 11 a8 af eb 2c 26 82 a5 ....,&.. No. Time Source Destination Protocol Length Info 529 7.531401 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=31409 Ack=593 Win=1002 Len=1448 TSval=537131 TSecr=727525 Frame 529: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 31409, Ack: 593, Len: 1448 Data (1448 bytes) 0000 db fa 8a 19 24 53 b0 a9 e8 0f e4 5c 8d d1 84 f1 ....$S.....\.... 0010 0f ca 74 83 85 3c 05 f5 c3 ff 92 86 00 9b 24 97 ..t..<........$. 0020 27 49 90 5a d9 e8 4f f8 ac a8 87 3a d9 7c c3 70 'I.Z..O....:.|.p 0030 42 97 96 52 2e 84 b1 e7 c4 2c e8 5a 26 34 0d 5e B..R.....,.Z&4.^ 0040 ea 32 8f 75 66 9e ae f8 aa cc 68 4e 9c 26 d1 76 .2.uf.....hN.&.v 0050 00 18 4b 01 db 74 9e 36 98 f8 99 8c b3 57 a5 f9 ..K..t.6.....W.. 0060 ce 48 41 ca b3 b9 2d cd 0e 43 ad 10 18 4d 51 82 .HA...-..C...MQ. 0070 8d d6 cc 5b 2e 49 b6 54 5b cc 5b a9 d0 e3 0f e0 ...[.I.T[.[..... 0080 d3 c3 20 ab 04 0a 67 f1 99 c5 4a 28 c0 f1 fc c2 .. ...g...J(.... 0090 2c 14 21 b9 33 bc d2 86 de a2 4b 1a af a1 f5 76 ,.!.3.....K....v 00a0 51 a1 8f ed 12 26 86 4b 72 16 a5 47 84 d7 72 ce Q....&.Kr..G..r. 00b0 fe 34 f7 58 8a f3 a2 c9 d3 20 06 01 31 0f 63 02 .4.X..... ..1.c. 00c0 12 20 65 19 23 dd 60 c0 09 fb e2 6d 1a 81 a9 68 . e.#.`....m...h 00d0 70 da 6b e6 71 2a 05 e4 6f 3e 6b e0 fb 6c 6e 7b p.k.q*..o>k..ln{ 00e0 7e 63 12 ef 08 1b a9 4a 01 05 14 6e e6 ae ac 47 ~c.....J...n...G 00f0 a5 90 b3 9b ef 81 46 19 2e ea c2 69 e9 25 26 ac ......F....i.%&. 0100 d1 a1 7d 62 3b cf 0c af dd dc 75 20 5b 25 91 6a ..}b;.....u [%.j 0110 a8 12 7c e3 69 91 f5 23 ec a6 a9 a1 7c bd 5a be ..|.i..#....|.Z. 0120 13 b7 37 53 fc d3 f6 a5 f3 60 01 00 20 8f 9c c8 ..7S.....`.. ... 0130 f8 95 cd 55 f8 b4 83 6e 28 ba e7 44 f1 ed dc a2 ...U...n(..D.... 0140 6e ac 0f 75 d4 14 c9 17 c9 5c 5b e5 f2 ee cc 8f n..u.....\[..... 0150 94 03 58 13 cd 07 97 c9 a7 1b bf 53 c4 b6 9e d8 ..X........S.... 0160 10 a5 c7 ba 48 0f 7a dd ef 6c ab a0 00 2f e8 6e ....H.z..l.../.n 0170 13 fe be 55 f7 41 58 7a 2a 83 96 f4 de 61 0b 0f ...U.AXz*....a.. 0180 8f 97 82 d2 28 50 0c 74 4c 31 f5 c3 43 80 7b ab ....(P.tL1..C.{. 0190 77 63 60 fb 39 65 a7 05 64 ea 56 40 ba 5b ff 70 wc`.9e..d.V@.[.p 01a0 70 4e bc 5a 26 35 ce 89 d3 4c 1e 88 b6 76 a1 46 pN.Z&5...L...v.F 01b0 6c 7f 44 e6 c9 bd ab fc e0 7e d3 ac 9b f1 b7 3e l.D......~.....> 01c0 c6 d8 46 a5 79 f3 ca 7f 46 94 e1 c6 04 01 94 cd ..F.y...F....... 01d0 9a 6c 04 0a a2 f3 45 0e 30 cc a7 47 29 72 92 89 .l....E.0..G)r.. 01e0 db d8 04 a1 b1 eb 81 e4 f8 a8 cf 1f b7 fd 31 c3 ..............1. 01f0 6e 9c 01 33 44 b8 b9 a7 6f a0 86 a5 cd fe db 52 n..3D...o......R 0200 cd bc 7e 02 30 9c 2f 72 0d e9 6c 30 82 28 17 f9 ..~.0./r..l0.(.. 0210 dd 36 86 ba b9 13 42 ee 85 8c 03 63 64 cd d3 0a .6....B....cd... 0220 f2 2b ac 82 71 f5 3f 0f a3 f1 8e f2 f0 2b a7 cf .+..q.?......+.. 0230 1e 4e 7d f8 be 28 32 0f 34 ff 01 1c 2a e3 9e 46 .N}..(2.4...*..F 0240 6f d5 2d 47 04 e4 0d 1d 80 a1 ba 9e 42 58 ce 08 o.-G........BX.. 0250 b1 e2 43 d9 a5 1b 93 00 e1 48 e0 23 f1 ee 4c 5d ..C......H.#..L] 0260 1c 3a a9 54 c1 e9 ca a6 9e 79 44 8b 76 bb 86 9f .:.T.....yD.v... 0270 52 4f 70 6f 1f 86 f5 b8 fa 16 cf 39 cb 12 b1 e0 ROpo.......9.... 0280 aa 9b 45 95 bd 67 6a 40 2f 78 bc fd 0f f8 18 fa ..E..gj@/x...... 0290 de bf 97 d7 62 ca 37 f2 7b c5 a9 6c e4 c4 3c 58 ....b.7.{..l..<X 02a0 eb ca 08 2d 67 ec d9 40 4f 77 20 a3 66 f2 31 11 ...-g..@Ow .f.1. 02b0 e0 1a 9f 2c d3 3f 69 20 c5 78 7a 5e 34 9a 33 a9 ...,.?i .xz^4.3. 02c0 2a 47 7f ce b6 ee 85 a6 ef e9 25 64 71 23 a3 31 *G........%dq#.1 02d0 52 34 8d ac 65 2e b2 78 ce fd 56 5b c5 d3 a9 77 R4..e..x..V[...w 02e0 8f 0a 14 91 67 f2 ed e1 8d ac b8 ba 44 99 9f 07 ....g.......D... 02f0 8f d5 da d6 2d e0 c0 ec 34 f1 a6 81 0a e1 56 fc ....-...4.....V. 0300 ab 6c 07 07 4d 1c e5 f0 f8 9e 50 cf d1 d9 ce b4 .l..M.....P..... 0310 eb 4a c5 fa 5f 5d 42 d8 61 66 6b 8f 03 86 2d 33 .J.._]B.afk...-3 0320 5d 1d 5e 1c 25 2e a6 09 53 53 d5 46 b4 18 70 8d ].^.%...SS.F..p. 0330 bc fa 1e e9 50 d9 01 d0 f4 fe 31 fb 1d 4f fc 5d ....P.....1..O.] 0340 5a 8d 05 b8 8e e1 e6 43 87 67 c3 f9 45 9f 16 43 Z......C.g..E..C 0350 1d bb 32 f1 d5 5c cb d0 f8 cd 36 34 e1 4a d4 81 ..2..\....64.J.. 0360 63 66 6a 15 48 20 23 90 8a da c2 e5 fe 6c 62 46 cfj.H #......lbF 0370 53 87 ff 8c 26 68 e3 7d 88 70 49 57 f5 7a 24 28 S...&h.}.pIW.z$( 0380 48 4c 8d 35 85 8e 8d 5f 35 b1 79 b9 7d 47 7a 58 HL.5..._5.y.}GzX 0390 60 59 6e 4a 7c 42 89 5f 7b 36 eb 82 24 48 c7 31 `YnJ|B._{6..$H.1 03a0 f9 48 48 d8 cb b6 7e 34 a0 ef 56 ed c6 85 8c 4f .HH...~4..V....O 03b0 2c 30 ef 61 70 88 e9 ba 0e ca f0 8c 53 e4 5e de ,0.ap.......S.^. 03c0 73 7c 04 e6 dd 1b e0 d1 1a 74 49 83 f5 99 6a 26 s|.......tI...j& 03d0 dd 27 1a 30 8f 53 d7 26 99 73 a6 22 0d 10 2a 09 .'.0.S.&.s."..*. 03e0 52 f0 18 25 8d 53 3a 1a 9a 95 3e e9 e1 9a b4 20 R..%.S:...>.... 03f0 61 3e 0a ba bd ec 36 3d 34 6e 64 98 ad 9e 16 e8 a>....6=4nd..... 0400 79 a3 61 9f d0 a7 9e f3 4f 46 45 58 34 dd e1 55 y.a.....OFEX4..U 0410 7a 56 50 30 6a f6 eb 25 a9 af 7c 44 9f 8e 5e 92 zVP0j..%..|D..^. 0420 3d a3 b4 ae 2f 58 00 ec 03 a7 f2 19 b4 ed 90 54 =.../X.........T 0430 de 8c 45 3d d9 40 4c f5 37 5a f3 c6 c8 10 da f0 [email protected]...... 0440 39 1b 6b 0a 69 b7 73 56 98 97 08 04 0b 0a e6 99 9.k.i.sV........ 0450 1a 15 3f 09 0b eb 38 11 86 4b ef 2b bf 4e 6c f7 ..?...8..K.+.Nl. 0460 d0 38 4f 43 a7 48 4f 82 cd f2 fc 04 f6 a7 58 f5 .8OC.HO.......X. 0470 25 5f 44 e4 64 9e a3 8d e3 1e 17 45 a3 90 d7 fc %_D.d......E.... 0480 4f 78 92 55 36 31 94 cc 05 08 50 c8 46 e2 fc 25 Ox.U61....P.F..% 0490 24 c3 fe cd 6e 20 e4 69 f5 2b 5a 88 27 91 d7 dc $...n .i.+Z.'... 04a0 b0 b3 6e 52 b7 12 af 88 cb bb 61 27 b5 13 17 f6 ..nR......a'.... 04b0 42 8d 93 ae f5 e6 46 6b 06 45 1f e6 86 2e 54 b9 B.....Fk.E....T. 04c0 52 9d ad 02 6b 61 b7 30 1f d4 88 b4 84 e2 e3 68 R...ka.0.......h 04d0 fc 42 e8 15 19 95 b2 75 ff ed b0 bf c9 3c 94 c6 .B.....u.....<.. 04e0 3e 63 b7 69 75 b3 96 c2 aa 67 2d c7 9d 4c 39 b7 >c.iu....g-..L9. 04f0 33 76 0a 0d 1a 4d f3 f1 b7 84 92 61 d6 ef db 9f 3v...M.....a.... 0500 b4 80 a4 7b ac 5f 54 86 34 d9 1c ab ae bc 14 23 ...{._T.4......# 0510 16 52 f3 07 44 2c a2 bc 47 8e 32 89 6b e3 57 04 .R..D,..G.2.k.W. 0520 a9 21 35 e4 e8 20 c7 da 8d de 3d 75 b8 ea 9a 97 .!5.. ....=u.... 0530 bf e6 e6 b1 d3 e8 eb 47 e1 47 ab 4f ee 87 76 46 .......G.G.O..vF 0540 06 9a 3a 9c ba 17 bc 31 91 39 a0 50 5d 2e 7b a8 ..:....1.9.P].{. 0550 34 77 9c 94 08 3a 14 12 fc a0 5f bb c4 38 84 b1 4w...:...._..8.. 0560 2c d2 cb 9f e4 b8 b7 e2 55 a7 14 f8 b9 eb 78 bf ,.......U.....x. 0570 ef 1d da e3 39 ee c1 2f 19 2b 1a b3 61 94 55 89 ....9../.+..a.U. 0580 b0 29 36 2f 9e d6 45 a9 77 da fc 37 4f f7 4a 62 .)6/..E.w..7O.Jb 0590 ad cd 9d 0a 02 ab 4d 21 91 7c 3e 38 54 6b 0d aa ......M!.|>8Tk.. 05a0 d2 fe 4b c7 13 4e 1d 44 ..K..N.D No. Time Source Destination Protocol Length Info 530 7.531488 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=32857 Ack=593 Win=1002 Len=1448 TSval=537131 TSecr=727525 Frame 530: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 32857, Ack: 593, Len: 1448 Data (1448 bytes) 0000 e3 8a 13 7f 36 a6 8e ee 4d 7f 56 bd e1 5b 18 63 ....6...M.V..[.c 0010 f2 a2 6f b8 e1 fc c0 a8 0f dd 55 ba d8 e7 7f cd ..o.......U..... 0020 7c 5f 82 ae d5 72 d0 b7 b2 bf aa 30 33 b9 63 76 |_...r.....03.cv 0030 69 f2 fc 37 5a 2d 54 42 da 19 c5 fc b4 95 8e dc i..7Z-TB........ 0040 fe 28 a8 90 87 4d 3b b1 2e 32 55 f3 3e 68 82 dd .(...M;..2U.>h.. 0050 46 ba 0e ee 1a b7 7e 76 08 52 7b 35 65 be 96 e0 F.....~v.R{5e... 0060 04 f4 3e 02 a2 28 f5 66 c8 2d 3e 30 a6 aa bb cf ..>..(.f.->0.... 0070 89 3e 59 d1 1c d8 52 5d 3c f5 db 79 2b 03 d4 84 .>Y...R]<..y+... 0080 4e 24 56 3b 90 a0 cd be ea b3 de d5 c9 32 29 a1 N$V;.........2). 0090 29 99 c8 1a 18 af 16 36 0f b0 65 19 af 9a 30 6b )......6..e...0k 00a0 a3 ca 05 c9 c3 96 b6 82 cf 4c 01 70 bf e2 40 b1 .........L.p..@. 00b0 da ba 6d 07 7f 2c 47 3e 7a 0f 8a b1 15 34 ba 2b ..m..,G>z....4.+ 00c0 d0 39 53 c3 19 74 10 b8 7b 44 8d 09 6e 3e 59 2e .9S..t..{D..n>Y. 00d0 39 73 2c f1 c1 eb 10 1d 54 c8 8a 59 b5 f3 80 f6 9s,.....T..Y.... 00e0 1b 2e b2 84 95 50 9f 9a 27 81 04 36 d6 6e f9 45 .....P..'..6.n.E 00f0 94 92 25 4e 81 37 f4 56 7c a5 ab 66 e4 24 15 18 ..%N.7.V|..f.$.. 0100 14 3d 66 ed 7b 99 f7 a3 9e 50 f2 e2 95 87 b4 86 .=f.{....P...... 0110 ab bc cf d6 5c dc 8a 6b 68 cd ca 54 d3 8d 6d d9 ....\..kh..T..m. 0120 60 f4 02 eb b8 35 ea 0e 68 97 a4 3d db d9 8b 47 `....5..h..=...G 0130 6f 93 bf cb 21 b7 9d aa f6 cc 37 76 38 3c 37 0e o...!.....7v8<7. 0140 14 72 a3 fe e1 ea c0 e1 07 66 f8 f7 d6 2c 91 88 .r.......f...,.. 0150 f3 7a 4b 04 1c e2 9d 43 b1 fe 17 9a 68 48 37 56 .zK....C....hH7V 0160 e9 50 e9 ea 2e 2c 65 33 47 1c cd 60 9f 14 ac 6a .P...,e3G..`...j 0170 af 27 b6 aa 46 59 35 99 72 66 68 6f bd 12 59 ce .'..FY5.rfho..Y. 0180 d8 05 79 44 39 5b c9 e2 35 07 58 9e d1 a0 47 d7 ..yD9[..5.X...G. 0190 81 d7 7a 25 52 3a 90 8e 23 47 f2 c6 5e 61 2a 40 ..z%R:..#G..^a*@ 01a0 4e f1 d6 91 32 85 10 7b 12 5f ff ef 50 23 37 4e N...2..{._..P#7N 01b0 72 da e8 2d a4 27 ed 78 b3 a2 f1 3c 1e 6a 62 2a r..-.'.x...<.jb* 01c0 f8 a2 c4 37 06 23 18 de 21 60 e1 39 ef a5 3d 66 ...7.#..!`.9..=f 01d0 8d 59 75 ab 3a 31 77 cf 5e b2 ff e3 87 bb 16 35 .Yu.:1w.^......5 01e0 ea 95 84 ba 9a 9d 8c 13 a2 71 47 95 c4 d8 ef 88 .........qG..... 01f0 dd 8a 96 5a 66 f1 de 4a e2 92 92 8e df f9 14 9b ...Zf..J........ 0200 2b 14 97 9c f3 30 27 40 88 7c fe 10 e1 bd 0f 95 +....0'@.|...... 0210 e9 ef a9 a1 08 75 28 01 5f 16 2b a2 b2 38 34 cf .....u(._.+..84. 0220 c8 d0 1f ba 29 2d bf 79 8c 09 d3 f9 4e 4f 8e 38 ....)-.y....NO.8 0230 8e 00 16 39 0b 3b b7 b5 48 6d b3 bf 73 fe 51 77 ...9.;..Hm..s.Qw 0240 12 7a 7a e5 a1 71 ac 9b 3f ed e9 f5 74 2a ed 0c .zz..q..?...t*.. 0250 cd dd d9 6b 3a 31 7f d2 ed 88 a8 b6 08 14 2b 24 ...k:1........+$ 0260 5c ff c9 f5 24 8c 79 05 cf 2d c7 11 3d 5d f7 e3 \...$.y..-..=].. 0270 3c 00 e6 a2 09 c4 7a 07 55 bc 32 73 9f d3 64 41 <.....z.U.2s..dA 0280 a3 c7 84 e9 53 14 ad 3a 1b f8 2d 5b 9b cd 53 c6 ....S..:..-[..S. 0290 45 18 23 61 8f 35 3f 76 2a 92 cd f2 8f 22 00 10 E.#a.5?v*....".. 02a0 9d c8 b9 c8 e8 ca 0c ae f5 9e ae 88 27 cf 18 37 ............'..7 02b0 45 c2 b1 b6 68 d8 40 98 0e fa 6c 2e b4 bf ed 88 [email protected]..... 02c0 30 87 29 03 39 b1 4a 11 e4 10 26 93 06 cc ab cd 0.).9.J...&..... 02d0 44 07 b1 da 4b 50 14 c3 53 a8 9e c3 54 f5 a8 d1 D...KP..S...T... 02e0 1f 77 62 27 33 13 7a ff a0 6c f8 c9 d4 22 44 f5 .wb'3.z..l..."D. 02f0 e9 13 ac 5d f1 21 cb ba 54 70 35 9c 1a 6b 0f b0 ...].!..Tp5..k.. 0300 6c da e4 b7 33 75 9a 06 2d 6b c3 dd 59 ad a2 86 l...3u..-k..Y... 0310 c2 c3 fb d9 37 4f 18 2c 43 40 b9 fc 94 68 6a 86 ....7O.,C@xxxxx. 0320 12 1a a5 b7 6d 5b 93 f4 72 e5 7d 21 e4 a3 6b bc ....m[..r.}!..k. 0330 d7 ae 87 4a 42 22 a8 a1 2a c6 d2 41 e6 d7 73 2a ...JB"..*..A..s* 0340 70 75 45 89 65 db 7b c4 29 d6 ae 1d e2 8e a5 a7 puE.e.{.)....... 0350 c8 33 ed 24 29 81 75 b0 47 65 97 c7 9d be a0 fb .3.$).u.Ge...... 0360 e6 8f c5 6d a8 8a bb f2 c8 6d 5e 93 1a 66 35 5b ...m.....m^..f5[ 0370 2a 89 18 2d 33 1f 20 56 77 66 e1 57 41 e9 d9 65 *..-3. Vwf.WA..e 0380 7d e9 db c7 05 f4 88 fa 79 4f ab cb fd 09 78 63 }.......yO....xc 0390 ee f9 15 59 b1 2e ed 79 0e 2a b7 81 8e 6d fb 12 ...Y...y.*...m.. 03a0 21 77 01 17 64 65 7b b3 40 cc 17 35 6c 9b bc cd !w..de{[email protected]... 03b0 00 c5 f5 b7 6f eb 14 b2 6f 41 5b f9 ba f1 ff f0 ....o...oA[..... 03c0 aa 35 fe e4 14 d6 0d d9 7d cd 3b 87 0a d7 92 ce .5......}.;..... 03d0 8d 76 80 b8 b5 b7 54 23 d0 09 98 a1 61 18 3e 7e .v....T#....a.>~ 03e0 e2 3f f1 02 3b 88 5e f7 6d 29 f1 96 c3 d0 10 ea .?..;.^.m)...... 03f0 2b 4e dc 73 fc 0c 16 35 0e 26 50 cf 20 e7 a0 7d +N.s...5.&P. ..} 0400 f4 fa 28 88 7f a1 12 6c 8d e7 52 09 f6 26 7f 0a ..(....l..R..&.. 0410 a4 2f 18 8c 69 65 b2 1b 37 65 43 4c 8c b6 64 3e ./..ie..7eCL..d> 0420 22 9a c5 42 97 92 0b 29 f7 d4 34 6e 62 05 8e 2f "..B...)..4nb../ 0430 32 70 91 73 44 06 d3 8e d6 69 f9 82 d5 ca e3 3f 2p.sD....i.....? 0440 df 54 ad e3 91 6f 5f ad 95 18 57 d6 10 bc 64 ba .T...o_...W...d. 0450 53 52 e9 50 eb 51 09 29 79 fe 39 55 3e 43 b0 2b SR.P.Q.)y.9U>C.+ 0460 f1 e2 19 f6 a8 31 87 ad d4 ef 3d 38 87 d2 02 38 .....1....=8...8 0470 26 81 b9 e5 68 e0 36 5a 79 45 e1 dc 88 75 47 b5 &...h.6ZyE...uG. 0480 c1 86 e9 65 a8 47 6f 6a 43 36 2e 28 2d 13 0b 96 ...e.GojC6.(-... 0490 40 82 67 6d 47 76 d2 8a 9b fa f6 fd 5c 20 58 62 @.gmGv......\ Xb 04a0 d0 04 27 81 f3 3e a8 13 5d a7 bc b3 cf 4b 57 0d ..'..>..]....KW. 04b0 8b 41 cb 08 bc 09 5e 71 5c fd a1 7b 7a e5 06 53 .A....^q\..{z..S 04c0 c9 ce a8 8c e3 1a 96 76 4f 83 2d 05 89 9f c5 a5 .......vO.-..... 04d0 c0 ff 41 31 3a 4b 12 3c e4 bf ec a5 71 c9 34 d0 ..A1:K.<....q.4. 04e0 6a 22 85 c6 9d 1f 31 7e 2b 2e 60 f9 41 c4 00 84 j"....1~+.`.A... 04f0 4e d9 62 fe af 09 f3 25 51 f3 0c 5d 8b c9 16 0a N.b....%Q..].... 0500 95 18 ef e2 58 4b 9f 83 67 ef cb 82 f7 b7 bc 2c ....XK..g......, 0510 3b 16 02 06 73 cd e2 5d 1a 2b 21 38 48 72 39 e1 ;...s..].+!8Hr9. 0520 5b 1d 17 fa e8 c9 6f 99 a0 a9 38 66 88 f9 36 22 [.....o...8f..6" 0530 c7 15 17 a2 63 6c c2 51 aa 9a 4b a5 e8 3f 02 b6 ....cl.Q..K..?.. 0540 1d 28 e5 a4 7f a4 0e f4 a0 7c c1 ae 73 9f 8e cc .(.......|..s... 0550 3e 23 e6 00 77 eb ff cd 85 ac 16 12 8a d0 04 dd >#..w........... 0560 87 5b d9 72 e0 92 91 7a 5c 2c 8e 7c 3a 3f f8 be .[.r...z\,.|:?.. 0570 7e 83 d1 9d 26 23 bc 6f d4 dc 5f fd 73 b5 19 97 ~...&#.o.._.s... 0580 c7 98 d9 f4 b1 00 e3 ce b9 e9 61 18 25 05 a1 63 ..........a.%..c 0590 cf e4 eb 32 38 6a 2b e7 67 05 e0 c1 01 08 28 28 ...28j+.g.....(( 05a0 f5 6d b4 20 57 70 b6 e6 .m. Wp.. No. Time Source Destination Protocol Length Info 531 7.531560 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 531: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 532 7.531615 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=593 Ack=32857 Win=65535 Len=0 TSval=727557 TSecr=537131 Frame 532: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 593, Ack: 32857, Len: 0 No. Time Source Destination Protocol Length Info 533 7.531700 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=34305 Ack=593 Win=1002 Len=1448 TSval=537131 TSecr=727557 Frame 533: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 34305, Ack: 593, Len: 1448 Data (1448 bytes) 0000 16 c1 54 15 e3 08 d8 62 07 cd bf 5b ab c7 c1 51 ..T....b...[...Q 0010 d8 51 33 46 39 4e a7 7e 90 6d c2 ce 4c 19 d5 22 .Q3F9N.~.m..L.." 0020 06 4e ba b0 2e 6b b9 4a cf 92 c4 bc 2a 23 0d d5 .N...k.J....*#.. 0030 85 b6 1c da 2b 87 1c 52 ae 9b 46 c9 91 30 8d 09 ....+..R..F..0.. 0040 37 1d ce 70 50 5e 8a 22 58 f8 be 00 84 8d 18 84 7..pP^."X....... 0050 48 67 ca f7 bb f8 31 58 3b 96 d5 dc b2 c8 b1 3e Hg....1X;......> 0060 98 2c b0 a9 db 84 43 37 6a 6c 0e 07 af 47 96 f6 .,....C7jl...G.. 0070 25 dd 44 65 f7 13 61 29 78 2b 8b ad e5 2f 30 f4 %.De..a)x+.../0. 0080 13 09 1a e9 79 6e 2b ef 87 6a 3c 11 df cb 01 30 ....yn+..j<....0 0090 d9 41 72 f2 4d de 3d ac 40 44 20 c4 b8 1d 41 36 .Ar.M.=.@D ...A6 00a0 91 b4 4c 7c 0e 61 ca 29 af bc ba 08 d5 a4 b3 b3 ..L|.a.)........ 00b0 4b bb aa 90 9a 14 7c b8 19 49 3b a0 6b 06 50 56 K.....|..I;.k.PV 00c0 d5 cd 28 b5 95 1b 54 56 4f f0 6f f2 bc 2d 26 0e ..(...TVO.o..-&. 00d0 b4 3f 63 27 ec 50 58 59 58 e6 af 3c a8 53 18 30 .?c'.PXYX..<.S.0 00e0 f9 d7 c6 5e 2a 72 f8 33 99 98 ad 0e c5 d5 22 a1 ...^*r.3......". 00f0 44 9c b3 cd c1 ac f8 7c 42 9a 16 db c0 81 8d c6 D......|B....... 0100 d6 aa 18 0c 0c 4b fb e1 af b3 27 7d 70 7e d4 64 .....K....'}p~.d 0110 eb 53 18 f5 f1 84 02 92 a5 c2 aa 4e ec 6f 69 9e .S.........N.oi. 0120 b7 bf d9 ed 40 8f de 5d 59 16 e6 dc a3 00 d3 4f ....@..]Y......O 0130 c7 d7 53 3c 4c 0d f4 59 9c db cc ef 85 7e eb 96 ..S<L..Y.....~.. 0140 cb ad d3 34 c4 8a ce f8 10 b7 86 a8 75 86 e7 f5 ...4........u... 0150 02 76 70 ea e8 2d 06 99 1a 5a 99 76 d3 3c 27 6b .vp..-...Z.v.<'k 0160 a5 f8 c3 42 ac 80 88 02 dd fb 68 97 08 46 e5 63 ...B......h..F.c 0170 6b 9c 06 fe 41 e7 f9 05 56 f0 5c fe 78 58 48 04 k...A...V.\.xXH. 0180 10 78 88 cb fd 53 6a 22 3c 8b 8c 5a d2 b1 3b 4b .x...Sj"<..Z..;K 0190 58 5d 40 85 e4 c5 f3 1e 92 9b ae d1 6e 78 32 0b X]@.........nx2. 01a0 e3 2b 53 f6 17 f1 48 82 2c 04 de 23 3e 3c d2 59 .+S...H.,..#><.Y 01b0 70 47 ac 76 21 b2 7e 77 41 87 2a 70 7e be eb da pG.v!.~wA.*p~... 01c0 34 5c ce e1 23 70 83 37 e3 a6 d9 64 56 d6 8b a4 4\..#p.7...dV... 01d0 40 2a f7 8f b1 6b e5 4f 50 31 a7 53 f4 60 00 c6 @*...k.OP1.S.`.. 01e0 4e 0b 37 ae 34 54 26 1f 03 e2 69 a6 e3 d2 ec 43 N.7.4T&...i....C 01f0 3a e6 35 1b a9 83 1f 9d ec 9b 72 1c 67 aa be 20 :.5.......r.g.. 0200 4a 7f c2 b9 88 36 8c 28 c4 92 c2 db a1 b9 20 33 J....6.(...... 3 0210 52 f9 f5 ec 13 c8 cf 4a 3d 1e 1d 24 cb ae 4a 36 R......J=..$..J6 0220 4a 3d 38 aa e5 ca 8b 06 4c 95 30 e4 8f 13 e4 df J=8.....L.0..... 0230 6f 02 ae 3a 57 db de c1 f6 72 e9 1b 6a 00 0a 39 o..:W....r..j..9 0240 b6 3b e3 06 9d 32 37 55 9e b1 cf a5 c1 26 26 a3 .;...27U.....&&. 0250 94 cb 30 54 00 97 6b 31 f4 56 d7 fd 71 78 06 9e ..0T..k1.V..qx.. 0260 cb e3 83 0b a8 fd d6 3a b5 8e f3 f7 e7 e2 6e 8d .......:......n. 0270 8b 4a 20 69 38 12 75 ba 28 79 2c 22 3a 66 4c 7c .J i8.u.(y,":fL| 0280 2e f4 47 0e c2 82 b4 e3 60 58 d1 7d dc 0b 71 e2 ..G.....`X.}..q. 0290 ae 78 e2 fb a2 8f 7e 85 2a 60 a8 f3 d3 f2 80 ea .x....~.*`...... 02a0 15 a5 62 b9 41 23 d3 44 6d 16 02 6a 13 9f 1a 19 ..b.A#.Dm..j.... 02b0 58 7c b5 e2 e2 ea 33 07 2c 0a 2f bf 7e ff 9e 99 X|....3.,./.~... 02c0 00 5e 51 d7 15 57 eb a3 f8 92 c5 87 42 4c 0f 1f .^Q..W......BL.. 02d0 aa 41 67 77 28 22 33 ca 25 6d 3b de 6d 16 53 3c .Agw("3.%m;.m.S< 02e0 62 08 c7 f7 6a 8e e2 83 70 a9 65 f4 5b 80 e4 67 b...j...p.e.[..g 02f0 72 b7 1a 71 c6 05 86 78 a5 1b 56 84 e9 22 9e 27 r..q...x..V..".' 0300 02 70 0d b9 74 bf e1 10 b0 0e c1 29 b5 f5 24 39 .p..t......)..$9 0310 86 22 57 eb da 37 46 31 7e 15 a2 6b 80 5b b3 ad ."W..7F1~..k.[.. 0320 fb 35 e2 02 c0 6c f2 30 a7 bc 4f 69 83 e4 0b a6 .5...l.0..Oi.... 0330 82 6a d8 c6 47 9b 21 8b 91 11 d3 bd 1a 91 74 7b .j..G.!.......t{ 0340 94 0c e5 21 33 68 d1 ef dd 0e 60 87 1e 3d c4 58 ...!3h....`..=.X 0350 46 47 f8 40 e2 8c 32 40 53 d1 28 84 0c 72 26 80 [email protected]@S.(..r&. 0360 6d 04 ab b2 c2 8c de a6 bf 69 c0 e4 d2 8b 50 52 m........i....PR 0370 72 60 82 ef 7b 49 5b 48 8e 37 76 bd 8f 08 2b eb r`..{I[H.7v...+. 0380 b5 7e f1 80 d8 54 4b f4 6c 06 05 db a5 6e 5b ee .~...TK.l....n[. 0390 37 5d 34 51 72 89 4b 16 29 ce a9 a4 56 3f d1 48 7]4Qr.K.)...V?.H 03a0 e8 22 3e 0b 88 59 d8 59 d2 08 a8 c7 d9 6a 44 b7 .">..Y.Y.....jD. 03b0 01 47 97 45 35 2c d0 d7 a1 80 f3 0a 4f 72 37 7f .G.E5,......Or7. 03c0 1d 7a cc 8e ca 72 79 50 c7 c8 bc c9 4b 62 58 f7 .z...ryP....KbX. 03d0 1e a4 7a 8f 96 ef 5f b2 a7 fe 71 a2 a2 8d 18 b9 ..z..._...q..... 03e0 e8 40 0e 7a c4 f7 8b 58 80 e0 a5 0e bc da b9 57 [email protected] 03f0 ef 2e 4d 40 24 de 6e f2 77 72 3a 89 42 5f 03 c5 ..M@$.n.wr:.B_.. 0400 0c 89 97 85 75 04 df 78 55 c6 45 4a 3b 57 af 6a ....u..xU.EJ;W.j 0410 aa 38 fc ec ec 98 25 83 ab dc e5 66 e0 1c 82 26 .8....%....f...& 0420 ea 4c 28 d7 fd 04 a8 4b f0 73 ab b9 d1 0d 29 8c .L(....K.s....). 0430 36 3f 24 b6 dd 0d e3 89 58 69 84 c1 34 01 64 06 6?$.....Xi..4.d. 0440 19 42 84 9b 06 6d 1c 90 ee 7c db d8 b9 cd 99 9c .B...m...|...... 0450 d0 fa fb 3e db 0e 07 41 ce 42 88 f4 87 44 89 a4 ...>...A.B...D.. 0460 26 11 21 dc e4 79 df 9a 0e 80 0a 34 a1 5a 17 9b &.!..y.....4.Z.. 0470 b3 b1 18 46 57 95 e4 b8 7c bd da ce da e7 69 2b ...FW...|.....i+ 0480 d7 15 2e 7a f2 78 a3 61 1b b6 1a d9 d0 c2 8f 12 ...z.x.a........ 0490 f9 b7 3e d8 a9 af e5 50 75 0e e3 37 f0 d5 d3 91 ..>....Pu..7.... 04a0 76 c6 76 0f 72 d1 73 9b b0 e1 b4 8a c1 96 eb 61 v.v.r.s........a 04b0 70 76 85 49 97 9a b7 77 e9 48 cd aa 52 01 10 f5 pv.I...w.H..R... 04c0 46 be 44 ac a0 bf 97 f9 ae a5 e0 60 3d 78 42 56 F.D........`=xBV 04d0 b6 d5 be da d4 cd 91 b8 d3 8d 4e 39 f5 2f ec 3e ..........N9./.> 04e0 41 4f 03 53 07 ee 3b b8 df ed cb fc 8b 60 13 12 AO.S..;......`.. 04f0 37 f2 d6 8e 54 97 70 2c bb 8b 6e 37 4e 4f b6 cd 7...T.p,..n7NO.. 0500 68 e1 79 58 5a 6c bf 11 88 6e 1d 56 a4 38 5f 50 h.yXZl...n.V.8_P 0510 74 9a 61 78 a7 32 df 51 44 75 25 e0 89 f3 0e 29 t.ax.2.QDu%....) 0520 81 f8 9a 41 5f fc 86 43 23 66 fa 82 41 7d 94 6e ...A_..C#f..A}.n 0530 f8 d6 5f 00 de a5 44 af 84 3a 01 4b bd 07 46 1a .._...D..:.K..F. 0540 4d 07 90 67 e7 d2 0a e4 da 6d 89 60 b6 1b 98 05 M..g.....m.`.... 0550 c0 5a fd ed 6a e3 5c de c7 e1 77 00 ad 1e bc c0 .Z..j.\...w..... 0560 56 bc 93 de 84 95 01 e6 7a 38 c7 84 ed d3 43 a3 V.......z8....C. 0570 e7 92 cc d8 49 64 24 ba bb d0 41 ff 05 cf 6d 39 ....Id$...A...m9 0580 f9 cc 5d cc c9 9f 2d 67 23 da d0 b6 0f d4 ce 08 ..]...-g#....... 0590 bc be 0f 45 72 9d 43 58 1a 4f 81 c0 33 09 e1 08 ...Er.CX.O..3... 05a0 fe ee 64 c5 f8 d1 7d 13 ..d...}. No. Time Source Destination Protocol Length Info 534 7.531781 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=35753 Ack=593 Win=1002 Len=1448 TSval=537131 TSecr=727557 Frame 534: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 35753, Ack: 593, Len: 1448 Data (1448 bytes) 0000 75 2c b3 a8 c7 9e a5 aa 32 e0 a3 0f 0a 49 ef c2 u,......2....I.. 0010 f4 16 79 15 e5 99 b9 69 2d b2 d8 fd 65 92 e7 28 ..y....i-...e..( 0020 e3 87 ca c1 8a 03 75 b2 d8 f0 c7 0e 5c 48 35 1b ......u.....\H5. 0030 36 0a fd 1f ed 2e 4f 34 94 fd 78 c0 c9 ce b6 2a 6.....O4..x....* 0040 82 cc 30 bc 9d 18 33 42 c0 23 bb 4e 01 35 5c c9 ..0...3B.#.N.5\. 0050 22 48 8c 35 49 f7 b2 f7 28 e2 78 15 24 8e 21 8f "H.5I...(.x.$.!. 0060 27 0f 3b 13 f9 ce fc 9e bd 2f 86 bd b8 33 04 90 '.;....../...3.. 0070 b2 73 82 77 4e ba 05 e2 ad 46 f2 55 44 ce 09 f7 .s.wN....F.UD... 0080 63 ed 3a 10 af 42 04 5e 55 59 61 fc 91 81 d6 8f c.:..B.^UYa..... 0090 57 88 dc be 68 89 d4 c2 58 c3 24 ca a2 a4 92 d8 W...h...X.$..... 00a0 df 0a fc a4 c6 00 7c 22 ba fe 85 8d 80 ff da 35 ......|".......5 00b0 0a 49 4c 17 ba b9 bf c9 2f b1 9a 3d 37 f5 88 7a .IL...../..=7..z 00c0 bc 79 13 b8 1a 30 4b 54 5f 3b 57 8e c2 0f 47 70 .y...0KT_;W...Gp 00d0 08 ab d1 28 f1 f1 3f 6c 20 7c db ce fd 52 3a 1e ...(..?l |...R:. 00e0 ab 4a 8e a7 f6 87 43 c0 8e 07 8b 26 1b 36 ea 68 .J....C....&.6.h 00f0 82 20 29 3b 40 3b 02 11 8c 8b 6d d5 ed c0 e3 4c . );@;....m....L 0100 81 9c 96 b7 da e9 4b 57 63 5e ee ee 8a 02 6a 61 ......KWc^....ja 0110 b4 1c 3e 88 53 0b 1a 51 dd 4e fb ab af 97 c2 57 ..>.S..Q.N.....W 0120 3c fc 82 18 2a 7d 2e 1b 70 30 21 fb 6c 35 78 3d <...*}..p0!.l5x= 0130 ac ab b8 e3 e7 f1 7a 49 86 0b 4a 47 99 26 86 62 ......zI..JG.&.b 0140 08 34 83 50 a7 9e a1 83 d0 c5 45 6d 3e 30 71 eb .4.P......Em>0q. 0150 2c 10 84 2f b6 0c 3d 8c 3f 76 96 3b 08 a2 90 32 ,../..=.?v.;...2 0160 58 4c 68 11 c8 ec 4d 9a 1c 02 a6 af 08 04 95 f9 XLh...M......... 0170 52 a8 7a 50 20 b2 b8 d5 b1 af 39 c0 31 b5 de 01 R.zP .....9.1... 0180 6d 46 4e 63 04 6f ba 4e 10 75 95 b0 22 83 13 16 mFNc.o.N.u.."... 0190 02 ba cf 09 e3 48 e9 91 36 10 21 b3 5c 39 bd df .....H..6.!.\9.. 01a0 18 54 c8 4e 26 3a 45 c0 2d fc f6 dd e4 78 bf 86 .T.N&:E.-....x.. 01b0 c9 de a2 cd ba cf c8 e7 b9 b7 7e d9 b2 c5 be fa ..........~..... 01c0 04 71 fe 2f ce bc 42 4b 2b 72 cb 1a fe ca ac 99 .q./..BK+r...... 01d0 5e 54 1f 82 6d 4d 29 d9 cc 88 aa fa b4 d1 38 9d ^T..mM).......8. 01e0 0e 1b e7 95 13 5f 24 70 71 47 c5 eb 63 39 51 a1 ....._$pqG..c9Q. 01f0 e9 ca f1 a0 b1 e6 0c e2 c7 d6 d8 6d 48 13 3e a8 ...........mH.>. 0200 b0 2d f1 0e 84 9f 64 8c 61 41 0b fb b3 58 1a fe .-....d.aA...X.. 0210 96 30 66 67 38 2b 0b e7 64 a0 55 f3 d2 f2 f5 7e .0fg8+..d.U....~ 0220 45 9d cf b7 41 ec de 16 d6 5c 52 16 5e 1e 0a 84 E...A....\R.^... 0230 66 22 66 90 22 76 19 bb 7b 92 24 83 43 75 2a e3 f"f."v..{.$.Cu*. 0240 2f b1 bf 97 29 d2 b0 f4 61 34 1c ff b6 2b f5 fe /...)...a4...+.. 0250 92 b4 67 98 6a 8d f4 5a 47 17 96 fb 23 aa 67 32 ..g.j..ZG...#.g2 0260 de f9 bf 9a 89 28 88 6a b2 ee 4f 6e b7 bb 38 3b .....(.j..On..8; 0270 65 52 b7 88 c3 17 f6 d5 0e 9a 2f 24 5d 9b b7 8c eR......../$]... 0280 36 22 52 e9 81 b8 ee 24 b8 21 86 80 41 ea 5b 66 6"R....$.!..A.[f 0290 b7 a7 58 7e 59 a7 9d d0 35 7e b0 33 e0 56 a6 5c ..X~Y...5~.3.V.\ 02a0 d6 e4 a2 5b 60 a9 4f 8b fe 54 10 7f 8c 9f 86 86 ...[`.O..T...... 02b0 73 b8 af 3f fb b2 50 38 66 b4 4e 04 d3 a2 15 39 s..?..P8f.N....9 02c0 d2 c4 bd 97 bf 74 3a 6e a1 09 bc 47 08 7b cf 20 .....t:n...G.{. 02d0 2a e8 de 8b eb 03 4c 66 8d 5b 14 a2 3f fd 53 b5 *.....Lf.[..?.S. 02e0 9a e8 09 6c fa db 9d 57 10 d4 79 1f 93 ef 08 bb ...l...W..y..... 02f0 25 17 67 8f 1b 2f ca 93 cf b1 4a 2e 9b da a0 9b %.g../....J..... 0300 d9 a6 ae cf d7 6e fa 77 d5 d9 e7 4f 90 3f 65 05 .....n.w...O.?e. 0310 58 5b e2 ca 9b c6 8e 6c b6 76 41 b4 92 19 02 53 X[.....l.vA....S 0320 b6 bb 17 69 04 e4 54 0e 71 45 38 b4 54 ff ae 14 ...i..T.qE8.T... 0330 9c 59 4d 81 4c 4b 8d 16 b4 1b 1a 03 14 9b 2c de .YM.LK........,. 0340 e7 0d d0 5f 36 87 d3 f6 40 5f d2 0f a2 2f 16 63 ..._6...@_.../.c 0350 82 ca 15 2c 5f af 8e c5 9a 48 c7 69 c2 9b a2 29 ...,_....H.i...) 0360 28 5d a9 73 1b d9 72 00 92 ef 56 62 24 53 cc dc (].s..r...Vb$S.. 0370 5a 82 7f d2 3f 4d bc 33 42 60 2b 14 94 e4 e8 8f Z...?M.3B`+..... 0380 16 22 88 b2 b9 4a 0e 64 ae 5b 93 97 ce 11 21 2b ."...J.d.[....!+ 0390 da fe 12 7c 34 a6 01 ab 23 71 ec 66 53 91 2d 0c ...|4...#q.fS.-. 03a0 14 b7 4f 69 2b 01 c2 93 75 41 3d 3e 12 4b 1b a7 ..Oi+...uA=>.K.. 03b0 d0 07 de 99 fd d8 5a ae f6 6c d6 45 c1 13 5e a4 ......Z..l.E..^. 03c0 a6 3f 10 c5 a7 62 12 a3 fc e2 4f 1d 7c fc 0f ab .?...b....O.|... 03d0 11 a7 73 1c 18 7d 65 dd 97 27 a2 eb 2f 88 15 aa ..s..}e..'../... 03e0 ae 1a e3 a1 bb 0f e4 de 08 7d f2 58 7b de c1 4b .........}.X{..K 03f0 36 3a 21 10 0f a0 52 bd cf 77 e2 b4 07 c4 12 ec 6:!...R..w...... 0400 91 4b 69 a3 6e fa 27 77 59 5b f4 f3 52 9f ca a8 .Ki.n.'wY[..R... 0410 05 ac 3a fb 4b b1 f7 ae 45 db f9 b8 3e 2a 8c 43 ..:.K...E...>*.C 0420 8a 2c e4 87 98 1e e1 99 14 20 e1 53 9c 51 9b 5b .,....... .S.Q.[ 0430 0e 1d bc 6f 50 fe 18 6f 5d 56 e3 8c 5d bb e8 9c ...oP..o]V..]... 0440 1f 9c 49 c0 3b 29 97 6f f5 67 dc 0f c6 de d5 65 ..I.;).o.g.....e 0450 43 54 83 ad 7e f1 01 b8 80 e0 da 7b be b8 57 f5 CT..~......{..W. 0460 95 23 bc f9 c8 f5 28 c6 68 7c 09 8f 33 3a 8f 6c .#....(.h|..3:.l 0470 d7 bc 53 ca 0e bf d1 6e a4 db 4d ad 13 f1 95 79 ..S....n..M....y 0480 cb 80 68 0c c3 d3 27 b0 35 1b 02 76 e8 83 dd a9 ..h...'.5..v.... 0490 e6 93 fe b2 0b 80 d9 be 13 37 cc 04 23 cb 27 78 .........7..#.'x 04a0 61 ac 90 86 74 50 27 3f e7 96 e3 b7 d6 29 4c 85 a...tP'?.....)L. 04b0 98 74 16 9d c0 e5 84 1a e3 03 38 ad f8 cc bd 2d .t........8....- 04c0 e2 5f 5c 36 18 f6 0c d8 9d bf af 56 a3 9d fe 81 ._\6.......V.... 04d0 3b 7d 5e c4 0a 18 ce 85 9e da 52 7f 52 be 43 60 ;}^.......R.R.C` 04e0 4b 97 31 29 e9 97 51 7c 1c 04 d0 ec b0 fb d5 2c K.1)..Q|......., 04f0 1e 78 5c 21 0b a6 4c 08 10 7d e5 31 26 3e cc 7c .x\!..L..}.1&>.| 0500 55 32 c1 eb 66 c9 65 2a c5 21 1c 06 ca ea 41 46 U2..f.e*.!....AF 0510 a5 ad d8 ae 70 9b bf a9 0b dc 35 6c 6f 9f 98 00 ....p.....5lo... 0520 a8 16 15 51 66 02 03 77 7c 60 64 b6 86 ef 22 e8 ...Qf..w|`d...". 0530 9d 18 23 28 9a e0 4c ef 34 25 6a 47 23 6a 8f a9 ..#(..L.4%jG#j.. 0540 6b af 15 b5 45 e9 28 c8 3f 78 09 06 7e fe 86 09 k...E.(.?x..~... 0550 a4 73 ce d7 ba de e3 57 e3 5e bf 9a 5a 7d 00 a8 .s.....W.^..Z}.. 0560 88 d8 73 c0 c9 7b b3 e6 7f da fd 77 08 e5 ac 2f ..s..{.....w.../ 0570 ea 49 ef 34 fc f9 fe 1e da 42 72 89 ff c5 3c de .I.4.....Br...<. 0580 89 af 2a 5a 40 2e f1 b2 31 f6 b2 08 d7 71 a6 c6 ..*[email protected].. 0590 70 44 c7 64 c8 39 e2 c6 79 7f 24 3b 3a 45 83 42 pD.d.9..y.$;:E.B 05a0 c1 16 e7 b0 63 4b f0 f6 ....cK.. No. Time Source Destination Protocol Length Info 535 7.531864 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=37201 Ack=593 Win=1002 Len=1448 TSval=537131 TSecr=727557 Frame 535: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 37201, Ack: 593, Len: 1448 Data (1448 bytes) 0000 e7 c6 6c 77 bb b7 53 55 b2 72 ce f3 49 5a 15 da ..lw..SU.r..IZ.. 0010 7f 23 4d 58 08 2d 0c cc a3 7d 2c 28 bc cd c5 da .#MX.-...},(.... 0020 f5 28 1c 58 10 a3 6c 2c ac 67 02 fc 0c 69 e7 28 .(.X..l,.g...i.( 0030 eb e8 4c 2a 9a 06 8f 1f c8 3f 3f f4 9e e7 1c 11 ..L*.....??..... 0040 fc 86 32 ee 73 fe fc 9d 4b 4b 04 43 10 3c 0c 7f ..2.s...KK.C.<.. 0050 48 38 6f 17 d5 ee 29 6d 60 74 cd 65 62 3a 21 7f H8o...)m`t.eb:!. 0060 5a c1 9e 57 d9 09 97 ff b4 3e a7 fd 18 17 9a da Z..W.....>...... 0070 a8 16 c4 8b 93 1b f5 12 f5 df 69 d1 f4 92 30 56 ..........i...0V 0080 ad 63 b5 3e 37 fa a6 e4 19 a0 90 18 5e 95 9e ac .c.>7.......^... 0090 26 32 17 4d 87 7b b3 89 11 f6 2f c3 0b 5b d5 80 &2.M.{..../..[.. 00a0 93 2b 82 7a a5 bc ad 89 68 98 8a 09 45 0c ea c9 .+.z....h...E... 00b0 24 31 2e c4 f7 99 eb 1f 97 29 28 9a 18 7e 3d 8e $1.......)(..~=. 00c0 72 d9 fb 76 34 02 22 10 16 7c 63 ee 24 0a ff 01 r..v4."..|c.$... 00d0 d8 ff 8b 9d 78 3c f1 18 c0 73 cd c3 b9 72 5c 7f ....x<...s...r\. 00e0 38 02 f9 fa aa 63 cb cd 30 15 91 96 fe 27 fc 78 8....c..0....'.x 00f0 ff 2d a8 3a c0 36 80 f2 2b b8 44 40 b8 83 dd 38 .-.:[email protected] 0100 f3 b8 f6 84 a0 10 98 22 49 a4 2d ab 3c d1 41 cc ......."I.-.<.A. 0110 19 d3 82 2f b0 2a a3 96 49 eb e7 7f 72 d9 da c5 .../.*..I...r... 0120 42 a1 06 96 a8 e1 d1 fc 6a c1 eb d7 2f ee 7a 3f B.......j.../.z? 0130 e1 82 a0 81 89 79 84 4b 8e 8f d0 80 f2 48 a5 71 .....y.K.....H.q 0140 31 55 55 49 d2 3f c4 c3 fd fd 82 ef 86 51 38 8f 1UUI.?.......Q8. 0150 c6 14 a5 cb 39 c0 1c 64 df 81 67 26 9a 59 c6 bf ....9..d..g&.Y.. 0160 c2 da 2a fa be 94 37 68 51 cb 45 65 ce ba 20 08 ..*...7hQ.Ee.. . 0170 a5 61 3a 35 80 45 0d 1a 9a 6e c1 d7 d6 ce 01 e9 .a:5.E...n...... 0180 d5 7e 3f 87 91 0d 4f 6c 85 5a d4 b6 41 b3 18 a0 .~?...Ol.Z..A... 0190 16 95 fc e9 c2 5c 13 b8 37 dc 58 c6 33 e4 e6 3b .....\..7.X.3..; 01a0 56 d3 b0 0f 60 b9 d1 e9 c8 d2 1f de ca c3 9d 5f V...`.........._ 01b0 91 d4 6b ae 38 ff 12 43 50 f4 a6 96 cc b2 41 49 ..k.8..CP.....AI 01c0 1c 85 81 b5 dd e1 94 26 e8 b2 fd 8b 31 8d 63 1e .......&....1.c. 01d0 e1 87 00 16 ae 25 47 56 c0 48 1e d3 bb 50 2c dc .....%GV.H...P,. 01e0 ab e6 18 fb 67 ae ac b9 15 5a c7 17 63 be 19 50 ....g....Z..c..P 01f0 0d c9 af f3 a0 23 d2 5e e5 ab 2e a3 53 96 69 07 .....#.^....S.i. 0200 65 65 80 d2 99 29 0a 09 52 67 1b 25 11 67 a2 72 ee...)..Rg.%.g.r 0210 fc 91 52 97 a0 7f 07 98 d7 d9 f9 5d 7e 83 d7 8b ..R........]~... 0220 6b cb a6 a9 83 a8 1c a5 e3 e4 13 01 3a 17 bc 78 k...........:..x 0230 b9 b4 4f b8 aa f9 2a 3f ef 4d 62 48 b2 25 55 33 ..O...*?.MbH.%U3 0240 3a 99 69 b1 de 7a 88 60 15 ad 77 de e3 e9 73 4f :.i..z.`..w...sO 0250 fe ae 40 15 5b f6 1e 7a af b3 fb b9 fe 28 d8 56 ..@.[..z.....(.V 0260 54 04 8e 26 8f 57 c2 8e 4a bd c6 c6 92 8f 7b 86 T..&.W..J.....{. 0270 0a 26 61 47 17 08 d8 a0 bd 1b 0b 95 0e 52 23 b3 .&aG.........R#. 0280 4f f7 b1 b3 60 be fc 83 8d 56 26 30 20 ce 78 10 O...`....V&0 .x. 0290 95 9a 1c 01 52 b3 33 80 27 29 a3 07 be 6b 89 fc ....R.3.')...k.. 02a0 6d ec c9 b0 0b a6 c8 9a 44 20 2a 71 9a c5 a6 a0 m.......D *q.... 02b0 bf ae 96 00 5b 17 a4 e5 7a 21 ae 1f 2d b0 27 49 ....[...z!..-.'I 02c0 eb 0c 7b 58 3d 5c 70 ea ac f8 85 36 02 5f 0f 84 ..{X=\p....6._.. 02d0 37 6b 8f d4 c1 27 3e dd 83 e0 40 e5 0d 65 f4 af 7k...'>[email protected].. 02e0 cc 55 21 c7 3a 81 16 04 28 f1 82 84 d1 99 44 f8 .U!.:...(.....D. 02f0 cf 49 02 59 72 19 1e 6f 60 3c 6f 13 f9 49 4b 9b .I.Yr..o`<o..IK. 0300 a1 98 9e 3d b8 3c 93 25 88 ca 10 e1 c8 79 2e 16 ...=.<.%.....y.. 0310 5e 97 e9 09 78 aa b0 98 1f 9b 55 14 9e e2 1a 21 ^...x.....U....! 0320 22 b8 14 c0 e5 98 45 e8 50 c2 05 96 ab 37 39 2f ".....E.P....79/ 0330 b9 06 bd 25 3d 4e 40 4c ce d4 3f b8 bd 32 17 23 ...%=N@L..?..2.# 0340 b0 4b a1 4c 56 fd 67 a2 65 0f 70 33 9f 4e b4 87 .K.LV.g.e.p3.N.. 0350 95 3b 73 1e 14 69 19 c7 7a 48 f5 1e a6 fd fe 1f .;s..i..zH...... 0360 be 65 2a e1 0d b0 ca e9 74 f1 29 4a 7d 32 56 15 .e*.....t.)J}2V. 0370 da 69 53 0a cb 97 d7 b4 15 0a 17 e5 e2 c4 1d 3e .iS............> 0380 2d 8c 61 04 af 72 88 30 35 c2 f6 6a ca 65 05 2e -.a..r.05..j.e.. 0390 61 10 3f db 43 6b 20 df d1 8e 98 89 49 ff 06 42 a.?.Ck .....I..B 03a0 43 a0 ca 69 1c 16 f3 b1 bd 1d 71 1a 78 56 6e 96 C..i......q.xVn. 03b0 a3 00 65 e6 6f cd cb a9 3d ee d3 f1 5b 08 c1 d4 ..e.o...=...[... 03c0 bd fd b9 ac c9 90 63 a8 ca 18 13 00 70 94 a1 d0 ......c.....p... 03d0 0a 41 50 95 8f ac 7f d8 af a4 ca f9 a1 08 0b 20 .AP............ 03e0 29 77 fc b3 fa c2 3f fb df 5e 07 02 46 97 f9 25 )w....?..^..F..% 03f0 ef 0a 25 87 62 8a 5d f1 56 59 48 6b 13 87 c4 55 ..%.b.].VYHk...U 0400 a7 32 0f 47 d0 ba 93 09 d5 82 de 84 f2 44 49 ce .2.G.........DI. 0410 7b 19 4c d1 fc f2 06 85 f3 f5 73 47 99 4a 33 68 {.L.......sG.J3h 0420 29 63 ac 35 2d 43 e6 84 49 a3 19 b7 07 32 b3 98 )c.5-C..I....2.. 0430 57 f8 b2 7e 1f 48 1d f9 23 af fc 73 68 0e 42 e4 W..~.H..#..sh.B. 0440 dc 7e 0e 79 20 1d 42 96 4d ec a9 67 1f 4c d0 2c .~.y .B.M..g.L., 0450 e3 a8 04 e3 b9 5e fb b0 aa 72 00 a2 c6 8d 0e a2 .....^...r...... 0460 e8 81 e2 d3 9c ad 0b 7c 8c 35 d7 ac 19 ea fd 7c .......|.5.....| 0470 55 6e be 00 b6 cf 1d c0 11 fc fa f5 88 9f ec 48 Un.............H 0480 5a 0c 78 03 47 6e 69 b4 cc 07 1b 05 c3 a5 56 95 Z.x.Gni.......V. 0490 53 31 7b ee 36 2f af a0 7a 73 4d ea dc c0 94 14 S1{.6/..zsM..... 04a0 90 bd 90 df 08 8c 34 57 d8 7e d2 cc 07 12 92 6d ......4W.~.....m 04b0 96 bb 32 2c b1 cd 39 2b 97 db 1b 26 97 80 c5 76 ..2,..9+...&...v 04c0 3e e6 65 2e 8c 15 9f 0e 97 d4 9e 53 a5 40 be 94 >.e........S.@.. 04d0 c8 d5 03 68 91 79 ae 9d 9b 7d a0 65 70 8e 9e f7 ...h.y...}.ep... 04e0 2d 76 54 67 c1 2f 93 f7 c9 c0 39 2a 2a 5c 1b 43 -vTg./....9**\.C 04f0 e1 cc 41 39 ae b6 90 8b b6 a9 83 d4 06 6d 1e 31 ..A9.........m.1 0500 3c 42 aa 6c e9 a2 f0 19 be 3b e2 c6 c9 56 af 79 <B.l.....;...V.y 0510 fd 43 3e 21 52 d4 4f 76 98 a8 5e 03 a7 66 d8 be .C>!R.Ov..^..f.. 0520 00 38 61 a4 4c ae 19 66 ea a0 c8 16 35 df 85 a6 .8a.L..f....5... 0530 18 5e ea ae 44 b0 dc ec 92 00 2a 73 77 1b 52 c8 .^..D.....*sw.R. 0540 ba 6c f8 b7 78 1f ee d0 0a a3 48 91 d3 9e 34 63 .l..x.....H...4c 0550 a2 08 32 e0 4d 65 fa 01 94 8b 59 e8 d5 5b e6 1d ..2.Me....Y..[.. 0560 03 82 25 6c 72 c2 06 fa f7 fb db 32 d0 8f a3 77 ..%lr......2...w 0570 30 ea 4b b1 2a 8d fb 07 c4 79 63 79 3e 3f 3c 68 0.K.*....ycy>?<h 0580 47 59 12 b4 09 86 fb f8 c6 4f 1a 72 b0 c2 46 33 GY.......O.r..F3 0590 2f 25 6e 4a ba 8f e8 f5 82 01 c6 dd 0e d7 71 96 /%nJ..........q. 05a0 de de 10 28 0c 7f 7e d5 ...(..~. No. Time Source Destination Protocol Length Info 536 7.531914 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=593 Ack=35753 Win=65535 Len=0 TSval=727557 TSecr=537131 Frame 536: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 593, Ack: 35753, Len: 0 No. Time Source Destination Protocol Length Info 537 7.531963 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=593 Ack=38649 Win=65535 Len=0 TSval=727557 TSecr=537131 Frame 537: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 593, Ack: 38649, Len: 0 No. Time Source Destination Protocol Length Info 538 7.532014 192.168.10.1 192.168.10.203 TCP 71 34433 > cds [PSH, ACK] Seq=38649 Ack=593 Win=1002 Len=5 TSval=537131 TSecr=727557 Frame 538: 71 bytes on wire (568 bits), 71 bytes captured (568 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 38649, Ack: 593, Len: 5 Data (5 bytes) 0000 14 a6 75 93 dc ..u.. No. Time Source Destination Protocol Length Info 539 7.532088 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 539: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 540 7.532160 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 540: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 541 7.532248 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=38654 Ack=593 Win=1002 Len=1448 TSval=537132 TSecr=727557 Frame 541: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 38654, Ack: 593, Len: 1448 Data (1448 bytes) 0000 17 03 01 03 50 f5 25 2e 7b a5 f0 c1 68 3f 06 c5 ....P.%.{...h?.. 0010 22 49 07 3a 67 4f 37 23 b3 5d 33 b6 60 1c 26 87 "I.:gO7#.]3.`.&. 0020 e8 13 76 51 fd 4e da 73 8f ce f2 e7 92 11 f0 bc ..vQ.N.s........ 0030 7f 7e a8 6a b5 c0 81 3e 08 58 0d 6d 1d 16 c2 14 .~.j...>.X.m.... 0040 b4 5a cc 28 fd a8 02 39 de 5f 97 9f 6e 8e 6f 74 .Z.(...9._..n.ot 0050 3d c4 e0 37 4f b9 01 4b 56 c8 ee 3d 2a 39 10 35 =..7O..KV..=*9.5 0060 61 ae d0 67 75 ad 5c 3e da 80 16 bd 5a f4 6b 3f a..gu.\>....Z.k? 0070 b8 5c aa cc 26 4e 74 1a a8 29 c5 fb ba ca 84 6b .\..&Nt..).....k 0080 dc 30 20 d5 60 79 93 58 86 e6 12 16 c8 ef 27 a3 .0 .`y.X......'. 0090 3a f6 9a f8 d6 7d 7e f0 89 9e ad f0 6a e0 bb 56 :....}~.....j..V 00a0 b7 99 f8 f3 f1 eb 4a 5f 58 46 9c 7d 92 99 c1 4d ......J_XF.}...M 00b0 d0 e8 4b 9c 11 01 1b c9 9c 36 24 26 27 e2 3d 58 ..K......6$&'.=X 00c0 b6 8a b5 51 28 4e 82 7c 79 82 5f 92 02 c3 17 5d ...Q(N.|y._....] 00d0 5c 9f 6d 8a 8e 73 04 96 79 8a 3a be e3 4a b3 6d \.m..s..y.:..J.m 00e0 36 82 00 9f 5c d0 62 33 05 c6 f9 7c 57 d6 6f 94 6...\.b3...|W.o. 00f0 db 44 55 2f 39 f7 8b 14 6f c4 2a 00 ba 8c 01 a7 .DU/9...o.*..... 0100 7b fe 08 62 4c 69 7b d5 eb 36 5c 16 a6 c1 f3 45 {..bLi{..6\....E 0110 b0 dd 31 4e ae 0e 4c 7b 98 5a 86 38 c4 ae bf f8 ..1N..L{.Z.8.... 0120 9e 09 bf 9f d3 e0 3a 94 8e cf 35 a7 46 df b3 69 ......:...5.F..i 0130 49 41 40 d3 f6 41 20 0e c9 7a 75 0d ce 94 42 49 [email protected] ..zu...BI 0140 9c 15 be 99 2c 21 ff 44 32 24 81 e8 dc 0c d4 65 ....,!.D2$.....e 0150 d2 5d e3 a2 6d 98 6b 0c b4 d3 87 c3 ff 35 f2 b8 .]..m.k......5.. 0160 5d 99 95 69 24 44 cc b0 69 30 2a c6 c1 b1 fa ae ]..i$D..i0*..... 0170 7b fe c1 eb 20 5b 53 38 85 98 a8 4a 34 a8 5e ef {... [S8...J4.^. 0180 34 e7 97 71 89 97 3d 78 e1 83 de c3 69 92 e8 b2 4..q..=x....i... 0190 d8 03 c5 8a ad ea fd 7a df 8e d7 fa 08 0b de 38 .......z.......8 01a0 25 20 a3 28 d2 55 93 79 7f 0c c8 76 47 95 51 a9 % .(.U.y...vG.Q. 01b0 3b af ce 48 18 08 b2 5e d2 06 e6 05 dd 80 09 3c ;..H...^.......< 01c0 27 4c c3 12 ef 73 ad cf 6b 1c 95 6f d4 36 7d 82 'L...s..k..o.6}. 01d0 0a a1 a1 55 76 95 3b 3f 64 f7 75 68 e4 cf b1 ce ...Uv.;?d.uh.... 01e0 8f a3 79 3d 30 a2 c7 e9 c7 2d b2 8f c6 aa 46 9e ..y=0....-....F. 01f0 a4 df 43 0b 28 db 8e 39 fe aa 18 77 10 1a 2e af ..C.(..9...w.... 0200 be 66 3a d9 9c ec c1 f1 68 ac bc c3 ba 03 2d be .f:.....h.....-. 0210 70 df 5b a0 f6 aa 0e 5b b6 c8 22 8f 54 f4 c9 43 p.[....[..".T..C 0220 2f 44 fa d1 07 f7 bf 4b e9 c6 ea a4 78 d0 92 86 /D.....K....x... 0230 d5 f3 82 2c 63 5f 9d 73 93 33 00 9e 56 a9 b8 9b ...,c_.s.3..V... 0240 b4 e5 fa 6f 6e 9e ee dd b1 4f 45 8b 13 64 e9 d1 ...on....OE..d.. 0250 b3 e2 53 a7 85 a7 96 7e cd 7b 8f e2 fb 2e 91 70 ..S....~.{.....p 0260 2f a3 8e 80 d8 87 f1 7a 2d 5c 37 97 cb 91 25 0b /......z-\7...%. 0270 20 d2 fd cc 8c b8 a1 f6 a8 1e 1b 13 c8 e5 06 49 ..............I 0280 a3 7e a1 3b c7 8f fc ff 28 f0 1c e7 43 ac 75 03 .~.;....(...C.u. 0290 dd 29 1f 80 13 2f d8 80 ed d9 5a a1 ef 67 bd 5d .).../....Z..g.] 02a0 cc fa c7 5e a4 c3 fd 76 ec c5 77 35 a2 3e 69 59 ...^...v..w5.>iY 02b0 15 5f a9 31 09 49 4e a9 5c dc e6 0c 8c 23 ce e0 ._.1.IN.\....#.. 02c0 93 46 ea ef 25 22 b5 cd e0 db a6 2d 0f de ca 34 .F..%".....-...4 02d0 d4 86 58 c7 39 59 b8 86 2e e8 3c dd 85 57 b4 a3 ..X.9Y....<..W.. 02e0 25 17 22 bb a7 56 df fe 4f fb 64 03 b5 f0 f6 5b %."..V..O.d....[ 02f0 79 62 e0 81 c5 96 27 c3 bd d1 e8 23 74 5e 88 28 yb....'....#t^.( 0300 9a 92 eb 8d 44 ad 73 a5 6b 75 99 de 44 78 61 33 ....D.s.ku..Dxa3 0310 71 24 2a 5a 78 48 24 2a f1 e7 09 67 df e8 4f 93 q$*ZxH$*...g..O. 0320 fa 90 1f d0 f7 1a ad 6c bb b7 53 97 f6 1c a4 fe .......l..S..... 0330 9b 29 ff 9b 8a dc 4d c2 9d fa a7 01 a7 04 59 fe .)....M.......Y. 0340 a8 ee 99 51 36 e8 9b 3d 85 15 ea a7 c0 c5 c2 d6 ...Q6..=........ 0350 65 a6 b6 0b 3a 17 03 01 03 40 2b b0 00 5d b9 34 e...:....@+..].4 0360 b9 8e 32 b3 a4 79 60 a4 8f da 09 6b a3 af bf e5 ..2..y`....k.... 0370 82 92 ea 6e 9c 02 e7 e8 65 8e 9e 5d c7 6f 5c f3 ...n....e..].o\. 0380 ef 59 4d 17 88 4b 74 50 b4 b1 19 e4 b3 19 b0 0a .YM..KtP........ 0390 40 42 c8 91 13 ef 2e cc 02 07 86 1b cd 2a bc 88 @B...........*.. 03a0 f5 c0 68 66 fb c8 37 37 47 1e d7 9e c5 80 fc db ..hf..77G....... 03b0 db 35 cc 40 e4 e8 84 60 76 b4 74 bd 4c 76 98 a1 .5.@...`v.t.Lv.. 03c0 bc ae 7d f5 09 d9 e6 8d d5 58 a4 fa a9 eb 0a 20 ..}......X..... 03d0 9a 66 d6 ee 2a 1b 8b 8b 14 f7 4d 8a f3 60 37 52 .f..*.....M..`7R 03e0 f9 57 da 3f c6 a2 73 3b 5c 94 4a 19 f0 f6 1a 8c .W.?..s;\.J..... 03f0 0e 90 33 dc a4 71 1f 5c 17 c1 09 f1 38 8b ed 52 ..3..q.\....8..R 0400 ef cd 0a 1f db 10 26 92 c6 98 23 52 3c 34 81 f8 ......&...#R<4.. 0410 2a 99 99 f0 64 e3 73 75 ed e9 ee ff 96 b6 83 8c *...d.su........ 0420 d7 92 d2 10 29 3d 6a d9 dc 8d 00 27 d2 86 8d f6 ....)=j....'.... 0430 ba b1 fd 71 d3 57 20 d3 0e e6 68 ff 01 f8 42 2a ...q.W ...h...B* 0440 e8 bb cb 8d 66 43 f7 0d 25 4c 7f e0 28 90 17 9c ....fC..%L..(... 0450 0a 00 e9 64 c3 3d 89 b3 16 8f df 82 d5 c9 63 ee ...d.=........c. 0460 72 f6 97 4a a8 89 ba a8 31 f1 e8 b0 ac ed dc 33 r..J....1......3 0470 e8 63 71 88 2d 0b 54 ad 9c ec 8f e8 ee 13 a6 76 .cq.-.T........v 0480 d2 e9 28 d2 ef 92 3e 3e 13 33 38 c2 ba 2b de 9b ..(...>>.38..+.. 0490 37 d6 82 90 5b ea 22 f0 ac 35 21 1d 72 3b 2d d3 7...[."..5!.r;-. 04a0 a1 67 06 40 83 d0 69 6a b2 4d 9f c8 86 47 06 b2 [email protected].. 04b0 98 ca 85 80 3f f3 c4 e6 10 c5 d9 0c 27 c5 ef 3b ....?.......'..; 04c0 3b b8 03 ac 52 e6 8b 83 f4 e2 26 7f 16 4a 65 12 ;...R.....&..Je. 04d0 cd 5f bd 25 8e 28 3b a0 de 44 e1 fb 06 5f e0 b7 ._.%.(;..D..._.. 04e0 45 cd ca 23 a5 62 71 70 0b 84 28 93 e2 71 86 67 E..#.bqp..(..q.g 04f0 cf 48 85 08 33 cd c2 9a 91 71 42 83 3a 1b 3f e8 .H..3....qB.:.?. 0500 63 4e 20 74 52 32 12 07 09 90 0b b9 51 94 b6 e7 cN tR2......Q... 0510 2f dd 8e ca 1d b3 d9 cd ff 77 31 44 bc c6 fd ce /........w1D.... 0520 b8 b1 60 90 28 9d 3e 45 b6 37 d8 dd 01 2c 99 11 ..`.(.>E.7...,.. 0530 01 f7 c5 03 c7 76 5f 1a 1c 33 19 bf ed 01 a7 9e .....v_..3...... 0540 94 01 64 0f 84 de 37 52 72 2b e8 1b c3 ee 1b 01 ..d...7Rr+...... 0550 22 04 18 0f 75 a0 ce b5 30 4d bf ff c5 3d fe ae "...u...0M...=.. 0560 2d d4 7c 58 f7 99 03 d6 c9 eb 5c 6c d0 2c 3f 4c -.|X......\l.,?L 0570 1b fc 62 13 2e ac c5 7c 4b 36 e5 5f 6d 71 31 03 ..b....|K6._mq1. 0580 66 33 6a 6d 4b 0e fb 38 3a 19 f2 16 17 bb 39 40 f3jmK..8:.....9@ 0590 8a 6f 2f f6 50 ee 15 76 b4 2c 37 9a b4 31 1b 14 .o/.P..v.,7..1.. 05a0 74 7d 80 7d 54 dc a8 4e t}.}T..N No. Time Source Destination Protocol Length Info 542 7.532298 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=593 Ack=40102 Win=65535 Len=0 TSval=727557 TSecr=537131 Frame 542: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 593, Ack: 40102, Len: 0 No. Time Source Destination Protocol Length Info 543 7.532352 192.168.10.1 192.168.10.203 TCP 308 34433 > cds [PSH, ACK] Seq=40102 Ack=593 Win=1002 Len=242 TSval=537132 TSecr=727557 Frame 543: 308 bytes on wire (2464 bits), 308 bytes captured (2464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 40102, Ack: 593, Len: 242 Data (242 bytes) 0000 56 04 2d 46 90 18 98 73 47 ed ed b2 12 b8 d5 f9 V.-F...sG....... 0010 dd b6 74 8a 03 83 62 58 60 21 83 ba f6 01 f7 5c ..t...bX`!.....\ 0020 e7 20 46 44 e7 e6 5a 9f a5 66 cc 6a 49 47 9a f7 . FD..Z..f.jIG.. 0030 35 dd dd b5 29 04 12 2e 4f 02 4e 7c a4 be a3 05 5...)...O.N|.... 0040 c0 91 67 24 f8 7b 8f 3a bc 18 4e 82 f7 e8 4e b5 ..g$.{.:..N...N. 0050 82 26 4a 18 99 a5 d5 8b 70 a6 64 77 4e 45 93 c5 .&J.....p.dwNE.. 0060 0a 31 80 f1 53 a3 1c 2f 38 06 a6 d2 ab e6 01 a6 .1..S../8....... 0070 3f 18 b1 38 41 ce 97 ab ac 06 1b 75 2b 18 90 03 ?..8A......u+... 0080 85 06 59 80 9c e5 b3 a3 32 60 bf ac eb 6b 68 7c ..Y.....2`...kh| 0090 63 5d bc b9 bb 15 05 6d 2c 0e ff 93 19 06 a1 c0 c].....m,....... 00a0 ad c8 91 08 fb 9a ca 54 18 9e e1 e7 c8 99 24 2d .......T......$- 00b0 7d ef 78 45 15 55 46 c6 c6 bc 9e d0 9d b2 a5 76 }.xE.UF........v 00c0 50 06 bc 11 02 11 dc db c6 80 f7 dd 39 22 28 40 P...........9"(@ 00d0 f5 a9 ed 3f 04 ec 60 ab 07 95 db 51 eb 93 aa cb ...?..`....Q.... 00e0 58 45 94 06 4f 7c 29 bb 53 d6 4c ae 3d da 5c ff XE..O|).S.L.=.\. 00f0 2d a8 -. No. Time Source Destination Protocol Length Info 544 7.532419 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 544: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 545 7.534134 66.150.117.33 192.168.10.221 TLSv1 1454 Server Hello Frame 545: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 66.150.117.33 (66.150.117.33), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4790 (4790), Seq: 1, Ack: 110, Len: 1400 Secure Sockets Layer No. Time Source Destination Protocol Length Info 546 7.537687 66.150.117.33 192.168.10.221 TLSv1 1271 Certificate, Server Hello Done Frame 546: 1271 bytes on wire (10168 bits), 1271 bytes captured (10168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 66.150.117.33 (66.150.117.33), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4790 (4790), Seq: 1401, Ack: 110, Len: 1217 [2 Reassembled TCP Segments (2538 bytes): #545(1321), #546(1217)] Secure Sockets Layer No. Time Source Destination Protocol Length Info 547 7.537738 192.168.10.221 66.150.117.33 TCP 60 4790 > https [ACK] Seq=110 Ack=2618 Win=65535 Len=0 Frame 547: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 66.150.117.33 (66.150.117.33) Transmission Control Protocol, Src Port: 4790 (4790), Dst Port: https (443), Seq: 110, Ack: 2618, Len: 0 No. Time Source Destination Protocol Length Info 548 7.538772 192.168.10.221 66.150.117.33 TLSv1 364 Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message Frame 548: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 66.150.117.33 (66.150.117.33) Transmission Control Protocol, Src Port: 4790 (4790), Dst Port: https (443), Seq: 110, Ack: 2618, Len: 310 Secure Sockets Layer No. Time Source Destination Protocol Length Info 549 7.538805 66.150.117.33 192.168.10.221 TCP 60 https > 4790 [ACK] Seq=2618 Ack=420 Win=65535 Len=0 Frame 549: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 66.150.117.33 (66.150.117.33), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4790 (4790), Seq: 2618, Ack: 420, Len: 0 No. Time Source Destination Protocol Length Info 550 7.541240 192.168.10.221 207.46.19.254 TCP 62 4791 > https [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM=1 Frame 550: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 551 7.565892 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 551: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 552 7.573169 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 552: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 553 7.573199 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 553: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 554 7.573260 66.150.117.33 192.168.10.221 TLSv1 97 Change Cipher Spec, Encrypted Handshake Message Frame 554: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 66.150.117.33 (66.150.117.33), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4790 (4790), Seq: 2618, Ack: 420, Len: 43 Secure Sockets Layer No. Time Source Destination Protocol Length Info 555 7.575197 41.252.217.113 192.168.10.207 TCP 60 38766 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 555: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 38766 (38766), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 556 7.575324 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 556: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 557 7.575400 192.168.10.207 41.252.217.113 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:44:00 -0400 Frame 557: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 41.252.217.113 (41.252.217.113) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 38766 (38766), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 558 7.575439 41.252.217.113 192.168.10.207 TCP 60 38766 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 558: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 38766 (38766), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 559 7.577428 192.168.10.221 66.150.117.33 TCP 1454 [TCP segment of a reassembled PDU] Frame 559: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 66.150.117.33 (66.150.117.33) Transmission Control Protocol, Src Port: 4790 (4790), Dst Port: https (443), Seq: 420, Ack: 2661, Len: 1400 No. Time Source Destination Protocol Length Info 560 7.577475 192.168.10.221 66.150.117.33 TLSv1 210 Application Data Frame 560: 210 bytes on wire (1680 bits), 210 bytes captured (1680 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 66.150.117.33 (66.150.117.33) Transmission Control Protocol, Src Port: 4790 (4790), Dst Port: https (443), Seq: 1820, Ack: 2661, Len: 156 [2 Reassembled TCP Segments (1556 bytes): #559(1400), #560(156)] Secure Sockets Layer No. Time Source Destination Protocol Length Info 561 7.577505 66.150.117.33 192.168.10.221 TCP 60 https > 4790 [ACK] Seq=2661 Ack=1976 Win=65535 Len=0 Frame 561: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 66.150.117.33 (66.150.117.33), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4790 (4790), Seq: 2661, Ack: 1976, Len: 0 No. Time Source Destination Protocol Length Info 562 7.577532 66.150.117.33 192.168.10.221 TCP 60 [TCP Dup ACK 561#1] https > 4790 [ACK] Seq=2661 Ack=1976 Win=65535 Len=0 Frame 562: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 66.150.117.33 (66.150.117.33), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4790 (4790), Seq: 2661, Ack: 1976, Len: 0 No. Time Source Destination Protocol Length Info 563 7.611478 66.150.117.33 192.168.10.221 TLSv1 648 Application Data Frame 563: 648 bytes on wire (5184 bits), 648 bytes captured (5184 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 66.150.117.33 (66.150.117.33), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4790 (4790), Seq: 2661, Ack: 1976, Len: 594 Secure Sockets Layer No. Time Source Destination Protocol Length Info 564 7.611512 66.150.117.33 192.168.10.221 TCP 60 https > 4790 [FIN, ACK] Seq=3255 Ack=1976 Win=65535 Len=0 Frame 564: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 66.150.117.33 (66.150.117.33), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4790 (4790), Seq: 3255, Ack: 1976, Len: 0 No. Time Source Destination Protocol Length Info 565 7.611557 192.168.10.221 66.150.117.33 TCP 60 4790 > https [ACK] Seq=1976 Ack=3256 Win=64898 Len=0 Frame 565: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 66.150.117.33 (66.150.117.33) Transmission Control Protocol, Src Port: 4790 (4790), Dst Port: https (443), Seq: 1976, Ack: 3256, Len: 0 No. Time Source Destination Protocol Length Info 566 7.613985 192.168.10.221 66.150.117.33 TCP 60 4790 > https [FIN, ACK] Seq=1976 Ack=3256 Win=64898 Len=0 Frame 566: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 66.150.117.33 (66.150.117.33) Transmission Control Protocol, Src Port: 4790 (4790), Dst Port: https (443), Seq: 1976, Ack: 3256, Len: 0 No. Time Source Destination Protocol Length Info 567 7.614016 66.150.117.33 192.168.10.221 TCP 60 https > 4790 [ACK] Seq=3256 Ack=1977 Win=65535 Len=0 Frame 567: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 66.150.117.33 (66.150.117.33), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4790 (4790), Seq: 3256, Ack: 1977, Len: 0 No. Time Source Destination Protocol Length Info 568 7.621557 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1400 Frame 568: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 569 7.621599 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 569: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 570 7.621644 192.168.10.221 207.46.19.254 TLSv1 163 Client Hello Frame 570: 163 bytes on wire (1304 bits), 163 bytes captured (1304 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 1, Ack: 1, Len: 109 Secure Sockets Layer No. Time Source Destination Protocol Length Info 571 7.621674 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=1 Ack=110 Win=65535 Len=0 Frame 571: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 1, Ack: 110, Len: 0 No. Time Source Destination Protocol Length Info 572 7.702344 207.46.19.254 192.168.10.221 TLSv1 1434 Server Hello Frame 572: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 1, Ack: 110, Len: 1380 Secure Sockets Layer No. Time Source Destination Protocol Length Info 573 7.702387 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU] Frame 573: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 1381, Ack: 110, Len: 1380 No. Time Source Destination Protocol Length Info 574 7.702458 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=110 Ack=2761 Win=65535 Len=0 Frame 574: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 110, Ack: 2761, Len: 0 No. Time Source Destination Protocol Length Info 575 7.702504 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU] Frame 575: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 2761, Ack: 110, Len: 1380 No. Time Source Destination Protocol Length Info 576 7.710483 207.46.19.254 192.168.10.221 TLSv1 451 Certificate, Server Hello Done Frame 576: 451 bytes on wire (3608 bits), 451 bytes captured (3608 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4141, Ack: 110, Len: 397 [4 Reassembled TCP Segments (4458 bytes): #572(1301), #573(1380), #575(1380), #576(397)] Secure Sockets Layer No. Time Source Destination Protocol Length Info 577 7.710531 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=110 Ack=4538 Win=65535 Len=0 Frame 577: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 110, Ack: 4538, Len: 0 No. Time Source Destination Protocol Length Info 578 7.711126 192.168.10.221 207.46.19.254 TLSv1 236 Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message Frame 578: 236 bytes on wire (1888 bits), 236 bytes captured (1888 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 110, Ack: 4538, Len: 182 Secure Sockets Layer No. Time Source Destination Protocol Length Info 579 7.711161 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4538 Ack=292 Win=65535 Len=0 Frame 579: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4538, Ack: 292, Len: 0 No. Time Source Destination Protocol Length Info 580 7.747120 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=593 Ack=40344 Win=65293 Len=0 TSval=727560 TSecr=537132 Frame 580: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 593, Ack: 40344, Len: 0 No. Time Source Destination Protocol Length Info 581 7.747237 192.168.10.1 192.168.10.203 TCP 903 34433 > cds [PSH, ACK] Seq=40344 Ack=593 Win=1002 Len=837 TSval=537185 TSecr=727560 Frame 581: 903 bytes on wire (7224 bits), 903 bytes captured (7224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 40344, Ack: 593, Len: 837 Data (837 bytes) 0000 17 03 01 03 40 d8 2c dd 44 51 36 14 76 70 b8 47 ....@.,.DQ6.vp.G 0010 ed 69 0e a8 53 cb 88 36 f6 1d eb c5 26 84 26 93 .i..S..6....&.&. 0020 d3 8c 66 64 d3 d0 73 82 37 97 46 72 ac 4f 6b 62 ..fd..s.7.Fr.Okb 0030 61 05 00 6d 2e e3 b9 8a b3 43 ee 1b 0d a5 25 f7 a..m.....C....%. 0040 5b 92 d8 16 b5 01 d9 50 70 86 f4 4d e7 1a db aa [......Pp..M.... 0050 22 ec e1 aa 02 24 de af 60 02 41 9e 5f 16 c4 26 "....$..`.A._..& 0060 b8 a3 0e e8 f4 3c 22 71 65 cf 75 47 c2 a7 82 73 .....<"qe.uG...s 0070 6d e7 3c 85 08 f9 33 a7 33 e2 56 37 b8 9b ab f2 m.<...3.3.V7.... 0080 b0 7d 7f f6 ae ca 4c 8d 22 5b fd 0f 89 0c 07 8b .}....L."[...... 0090 a8 ec 64 df e9 e7 24 75 93 5d 5a 31 60 dd 7b bf ..d...$u.]Z1`.{. 00a0 7c bb 97 39 75 18 3c 25 3c 1a 21 01 4d af ef 26 |..9u.<%<.!.M..& 00b0 b1 24 39 20 cc c3 e0 d7 96 f5 42 9d 7c 39 6c f6 .$9 ......B.|9l. 00c0 62 fa ea c0 05 ae 32 8c cb 0f e0 14 74 4b 08 a6 b.....2.....tK.. 00d0 57 d0 14 e5 18 60 80 1f 8c 11 92 e6 a7 2e 8d 6a W....`.........j 00e0 da 8f 0f 34 6a ad 72 fc 6c 13 fa 92 4f 87 7c 2d ...4j.r.l...O.|- 00f0 29 71 26 82 7b 0e b7 f3 f5 04 ba fe 75 6e 8b 88 )q&.{.......un.. 0100 9a 22 9c b6 a7 97 0c d1 4b c3 33 fd 47 2a d4 6e ."......K.3.G*.n 0110 a6 a5 a1 a0 01 35 bb 9f bd f8 a9 58 51 d8 11 c9 .....5.....XQ... 0120 82 3e 48 82 cc 3c 1c ae 72 2a b3 67 2d 90 40 98 .>H..<..r*.g-.@. 0130 42 00 a4 1b 40 3a 63 62 b1 a3 83 d5 e0 be 3b 49 B...@:cb......;I 0140 0a b1 e4 91 a5 3d b4 96 67 d2 5a 26 69 5e 46 ee .....=..g.Z&i^F. 0150 30 5a 33 1e ad 85 2a a5 64 73 e9 a1 59 56 63 5f 0Z3...*.ds..YVc_ 0160 b6 6a b8 23 fb dd d4 22 b8 e1 e7 77 58 bd 30 ad .j.#..."...wX.0. 0170 44 fa c4 bb 3d 59 ce db 85 2c ac 4a b9 c8 03 b9 D...=Y...,.J.... 0180 9d 97 16 fd 96 ab c2 7b 00 69 77 15 2a f7 d9 90 .......{.iw.*... 0190 3b 6e 0f a6 a8 2e 92 7f 93 d6 d3 26 4b 42 24 c5 ;n.........&KB$. 01a0 75 78 3e 99 a5 b1 99 e5 2e 1a 4e 7c 6e b3 8c 84 ux>.......N|n... 01b0 58 21 e2 ed 9b 14 cc 14 91 70 bb 45 a9 46 15 2f X!.......p.E.F./ 01c0 b8 be 18 91 bf 48 cf b3 db d3 36 75 36 06 48 a6 .....H....6u6.H. 01d0 e7 a2 24 35 92 b4 eb db 23 ad 37 38 04 e6 81 8a ..$5....#.78.... 01e0 5e f5 51 1c 41 a7 d3 68 77 ec e6 30 39 66 ed 46 ^.Q.A..hw..09f.F 01f0 07 60 3d 39 eb 85 82 b5 dd 9d ae c8 df 64 52 5c .`=9.........dR\ 0200 4c 95 ab 22 9b 2d b8 4a c2 c5 2b 94 34 60 4a 64 L..".-.J..+.4`Jd 0210 66 95 06 70 5a f8 c7 8f b6 76 c8 cb 6a 38 bd 20 f..pZ....v..j8. 0220 2a dd d7 35 a9 9d ea 5a e1 fa 1e 9e d9 04 58 8e *..5...Z......X. 0230 15 bc 69 26 7b 9f 2c b6 55 d9 06 eb 95 f9 64 80 ..i&{.,.U.....d. 0240 e7 01 18 0c 42 49 b8 a2 c6 d0 c3 c9 28 20 92 b7 ....BI......( .. 0250 31 7f bc 70 4a 9e 54 ce 7e e5 69 f1 c0 91 93 98 1..pJ.T.~.i..... 0260 b1 12 e3 98 16 bb 33 34 89 cd b5 d4 a5 ab b9 d5 ......34........ 0270 fe 36 d3 e6 64 1e 78 b6 1a 5e 52 32 7d 1b 8b 35 .6..d.x..^R2}..5 0280 6c 56 5f aa 08 ed ae d0 a4 db 8d 13 de d2 2e 71 lV_............q 0290 82 af 3a 6e 8d 84 08 af 96 d1 d1 4f 42 a1 63 fa ..:n.......OB.c. 02a0 f4 f9 00 da c2 1b bc 66 db 2a 76 11 27 84 e7 2e .......f.*v.'... 02b0 c7 a1 a0 5b 8e e0 50 ee 5a df b6 4f 34 db 16 83 ...[..P.Z..O4... 02c0 a3 88 24 20 00 9e 8a f1 29 4c c9 cf b9 c6 fe 78 ..$ ....)L.....x 02d0 54 17 ac d6 f5 ba 72 e1 d9 8a 1a d1 21 96 32 dc T.....r.....!.2. 02e0 8b bb 11 98 dc ad fe 22 4f 0f 3c 33 7d 5f 99 b2 ......."O.<3}_.. 02f0 0f 26 e6 27 31 38 40 8c ab 06 c0 6e 80 48 be 44 .&.'[email protected] 0300 78 78 29 00 85 87 e5 72 f3 98 af 4b 9d ee 28 f2 xx)....r...K..(. 0310 61 47 e8 55 68 ec 32 4b 06 59 ac 5f 6f f8 83 ee aG.Uh.2K.Y._o... 0320 09 c3 60 26 4d 6d da 18 f4 40 01 b6 7b ce 02 eb ..`&Mm...@..{... 0330 ca 13 bd 9d 40 36 a8 ad af ad e0 1e ca ac 2e cf ....@6.......... 0340 71 98 d1 b4 e0 q.... No. Time Source Destination Protocol Length Info 582 7.750806 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=593 Ack=41181 Win=64456 Len=74 TSval=727560 TSecr=537185 Frame 582: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 593, Ack: 41181, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 af 36 82 d1 ca e5 18 2a be ea a2 .... .6.....*... 0010 78 fc 2f 9e ec 58 58 9f 0f 6e fe b4 43 fd e9 99 x./..XX..n..C... 0020 e8 1a 13 3b 85 17 03 01 00 20 46 92 ec 1a 9c af ...;..... F..... 0030 3f dd 61 0c 6f 4e 4b f6 6b 02 b7 6f 86 fb 44 18 ?.a.oNK.k..o..D. 0040 df d3 19 d7 be 4a fe b0 61 3e .....J..a> No. Time Source Destination Protocol Length Info 583 7.750868 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=41181 Ack=667 Win=1002 Len=0 TSval=537186 TSecr=727560 Frame 583: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 41181, Ack: 667, Len: 0 No. Time Source Destination Protocol Length Info 584 7.753913 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=667 Ack=41181 Win=64456 Len=74 TSval=727560 TSecr=537186 Frame 584: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 667, Ack: 41181, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 9f 83 7e a0 04 94 8e 3a 28 87 35 .... ..~....:(.5 0010 d4 dd b1 7e dd d5 27 fc 70 4e 32 63 73 b5 00 f3 ...~..'.pN2cs... 0020 bb 99 23 f9 15 17 03 01 00 20 59 d0 b8 d9 f7 cf ..#...... Y..... 0030 30 cd 09 11 39 07 9f d8 b5 35 4e a5 26 38 77 50 0...9....5N.&8wP 0040 74 ae 6a 0d e8 7b 85 a4 ab 8b t.j..{.... No. Time Source Destination Protocol Length Info 585 7.753972 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=41181 Ack=741 Win=1002 Len=0 TSval=537187 TSecr=727560 Frame 585: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 41181, Ack: 741, Len: 0 No. Time Source Destination Protocol Length Info 586 7.756785 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=741 Ack=41181 Win=64456 Len=74 TSval=727560 TSecr=537187 Frame 586: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 741, Ack: 41181, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 81 36 a2 c4 ef 4e 6c c9 58 a2 ce .... .6...Nl.X.. 0010 36 32 ee 62 31 c3 87 8c aa ad 2a a9 fe d9 b7 79 62.b1.....*....y 0020 0f c3 75 24 fd 17 03 01 00 20 5b 1d 79 7b 30 a7 ..u$..... [.y{0. 0030 7b cf 11 05 25 eb 23 2b e5 17 75 8b 0f 6b 6b d3 {...%.#+..u..kk. 0040 2d 97 d2 2e 36 44 ce 42 66 a8 -...6D.Bf. No. Time Source Destination Protocol Length Info 587 7.756848 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=41181 Ack=815 Win=1002 Len=0 TSval=537188 TSecr=727560 Frame 587: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 41181, Ack: 815, Len: 0 No. Time Source Destination Protocol Length Info 588 7.759747 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=815 Ack=41181 Win=64456 Len=74 TSval=727560 TSecr=537188 Frame 588: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 815, Ack: 41181, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 81 24 82 c8 92 4d 6c 49 82 28 36 .... .$...MlI.(6 0010 ca 91 65 36 5f f8 35 69 e1 6a 27 41 fe 81 9f 11 ..e6_.5i.j'A.... 0020 62 22 fc f6 b7 17 03 01 00 20 0d e3 ff 7b 03 8b b"....... ...{.. 0030 7a 2c 21 db bc 2d ee a2 2b ba 0d 50 d5 a8 36 ca z,!..-..+..P..6. 0040 91 e5 97 ab 4e 56 72 d9 44 1b ....NVr.D. No. Time Source Destination Protocol Length Info 589 7.759810 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=41181 Ack=889 Win=1002 Len=0 TSval=537188 TSecr=727560 Frame 589: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 41181, Ack: 889, Len: 0 No. Time Source Destination Protocol Length Info 590 7.793580 207.46.19.254 192.168.10.221 TLSv1 97 Change Cipher Spec, Encrypted Handshake Message Frame 590: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4538, Ack: 292, Len: 43 Secure Sockets Layer No. Time Source Destination Protocol Length Info 591 7.800162 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 591: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 292, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 592 7.800252 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 592: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 1692, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 593 7.800318 192.168.10.221 207.46.19.254 TLSv1 846 Application Data Frame 593: 846 bytes on wire (6768 bits), 846 bytes captured (6768 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 3092, Ack: 4581, Len: 792 [3 Reassembled TCP Segments (3592 bytes): #591(1400), #592(1400), #593(792)] Secure Sockets Layer No. Time Source Destination Protocol Length Info 594 7.800352 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=3092 Win=65535 Len=0 Frame 594: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 3092, Len: 0 No. Time Source Destination Protocol Length Info 595 7.800381 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=3884 Win=65535 Len=0 Frame 595: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 3884, Len: 0 No. Time Source Destination Protocol Length Info 596 7.800459 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 596: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 3884, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 597 7.800537 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 597: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 5284, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 598 7.800614 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 598: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 6684, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 599 7.800689 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 599: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 8084, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 600 7.800774 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 600: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 9484, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 601 7.800844 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 601: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 10884, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 602 7.800873 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=6684 Win=65535 Len=0 Frame 602: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 6684, Len: 0 No. Time Source Destination Protocol Length Info 603 7.800901 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=9484 Win=65535 Len=0 Frame 603: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 9484, Len: 0 No. Time Source Destination Protocol Length Info 604 7.800929 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=10884 Win=65535 Len=0 Frame 604: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 10884, Len: 0 No. Time Source Destination Protocol Length Info 605 7.801032 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 605: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 12284, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 606 7.801104 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 606: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 13684, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 607 7.801172 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 607: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 15084, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 608 7.801242 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 608: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 16484, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 609 7.801311 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 609: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 17884, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 610 7.801368 192.168.10.221 207.46.19.254 TLSv1 1038 Application Data Frame 610: 1038 bytes on wire (8304 bits), 1038 bytes captured (8304 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 19284, Ack: 4581, Len: 984 [12 Reassembled TCP Segments (16384 bytes): #596(1400), #597(1400), #598(1400), #599(1400), #600(1400), #601(1400), #605(1400), #606(1400), #607(1400), #608(1400), #609(1400), #610(984)] Secure Sockets Layer No. Time Source Destination Protocol Length Info 611 7.801408 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=13684 Win=65535 Len=0 Frame 611: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 13684, Len: 0 No. Time Source Destination Protocol Length Info 612 7.801435 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=16484 Win=65535 Len=0 Frame 612: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 16484, Len: 0 No. Time Source Destination Protocol Length Info 613 7.801463 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=19284 Win=65535 Len=0 Frame 613: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 19284, Len: 0 No. Time Source Destination Protocol Length Info 614 7.801491 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=20268 Win=65535 Len=0 Frame 614: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 20268, Len: 0 No. Time Source Destination Protocol Length Info 615 7.801559 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 615: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 20268, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 616 7.801626 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 616: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 21668, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 617 7.801691 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 617: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 23068, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 618 7.801782 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 618: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 24468, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 619 7.801849 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 619: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 25868, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 620 7.801914 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 620: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 27268, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 621 7.801982 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 621: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 28668, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 622 7.802047 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 622: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 30068, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 623 7.802076 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=23068 Win=65535 Len=0 Frame 623: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 23068, Len: 0 No. Time Source Destination Protocol Length Info 624 7.802139 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 624: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 31468, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 625 7.802205 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 625: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 32868, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 626 7.802271 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 626: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 34268, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 627 7.802300 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=25868 Win=65535 Len=0 Frame 627: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 25868, Len: 0 No. Time Source Destination Protocol Length Info 628 7.802358 192.168.10.221 207.46.19.254 TLSv1 1038 Application Data Frame 628: 1038 bytes on wire (8304 bits), 1038 bytes captured (8304 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 35668, Ack: 4581, Len: 984 [12 Reassembled TCP Segments (16384 bytes): #615(1400), #616(1400), #617(1400), #618(1400), #619(1400), #620(1400), #621(1400), #622(1400), #624(1400), #625(1400), #626(1400), #628(984)] Secure Sockets Layer No. Time Source Destination Protocol Length Info 629 7.802387 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=28668 Win=65535 Len=0 Frame 629: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 28668, Len: 0 No. Time Source Destination Protocol Length Info 630 7.802414 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=31468 Win=65535 Len=0 Frame 630: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 31468, Len: 0 No. Time Source Destination Protocol Length Info 631 7.802442 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=34268 Win=65535 Len=0 Frame 631: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 34268, Len: 0 No. Time Source Destination Protocol Length Info 632 7.802469 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=36652 Win=65535 Len=0 Frame 632: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 36652, Len: 0 No. Time Source Destination Protocol Length Info 633 7.802496 207.46.19.254 192.168.10.221 TCP 60 [TCP Dup ACK 632#1] https > 4791 [ACK] Seq=4581 Ack=36652 Win=65535 Len=0 Frame 633: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 36652, Len: 0 No. Time Source Destination Protocol Length Info 634 7.802559 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 634: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 36652, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 635 7.802628 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 635: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 38052, Ack: 4581, Len: 1400 No. Time Source Destination Protocol Length Info 636 7.802668 192.168.10.221 207.46.19.254 TLSv1 194 Application Data Frame 636: 194 bytes on wire (1552 bits), 194 bytes captured (1552 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 39452, Ack: 4581, Len: 140 [3 Reassembled TCP Segments (2940 bytes): #634(1400), #635(1400), #636(140)] Secure Sockets Layer No. Time Source Destination Protocol Length Info 637 7.802697 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=39452 Win=65535 Len=0 Frame 637: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 39452, Len: 0 No. Time Source Destination Protocol Length Info 638 7.802732 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=39592 Win=65535 Len=0 Frame 638: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 39592, Len: 0 No. Time Source Destination Protocol Length Info 639 7.845128 190.42.139.241 192.168.10.207 SMTP 92 C: MAIL FROM: <ava.coleman@xxxxxxxxxxx> Frame 639: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23519 (23519), Dst Port: smtp (25), Seq: 19, Ack: 313, Len: 38 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 640 7.845374 192.168.10.207 190.42.139.241 SMTP 102 S: 250 2.1.0 [email protected] OK Frame 640: 102 bytes on wire (816 bits), 102 bytes captured (816 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23519 (23519), Seq: 313, Ack: 57, Len: 48 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 641 7.845418 190.42.139.241 192.168.10.207 TCP 60 23519 > smtp [ACK] Seq=57 Ack=361 Win=93080 Len=0 Frame 641: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23519 (23519), Dst Port: smtp (25), Seq: 57, Ack: 361, Len: 0 No. Time Source Destination Protocol Length Info 642 8.047382 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU] Frame 642: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 39592, Len: 1380 No. Time Source Destination Protocol Length Info 643 8.047421 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU] Frame 643: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 5961, Ack: 39592, Len: 1380 No. Time Source Destination Protocol Length Info 644 8.047515 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=39592 Ack=7341 Win=65535 Len=0 Frame 644: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 39592, Ack: 7341, Len: 0 No. Time Source Destination Protocol Length Info 645 8.047585 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU] Frame 645: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 7341, Ack: 39592, Len: 1380 No. Time Source Destination Protocol Length Info 646 8.047674 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU] Frame 646: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 8721, Ack: 39592, Len: 1380 No. Time Source Destination Protocol Length Info 647 8.047716 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=39592 Ack=10101 Win=65535 Len=0 Frame 647: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 39592, Ack: 10101, Len: 0 No. Time Source Destination Protocol Length Info 648 8.047796 207.46.19.254 192.168.10.221 TLSv1 1434 Application Data Frame 648: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 10101, Ack: 39592, Len: 1380 [5 Reassembled TCP Segments (6900 bytes): #642(1380), #643(1380), #645(1380), #646(1380), #648(1380)] Secure Sockets Layer No. Time Source Destination Protocol Length Info 649 8.047889 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU] Frame 649: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 11481, Ack: 39592, Len: 1380 No. Time Source Destination Protocol Length Info 650 8.047958 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=39592 Ack=12861 Win=65535 Len=0 Frame 650: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 39592, Ack: 12861, Len: 0 No. Time Source Destination Protocol Length Info 651 8.047992 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU] Frame 651: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 12861, Ack: 39592, Len: 1380 No. Time Source Destination Protocol Length Info 652 8.048115 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU] Frame 652: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 14241, Ack: 39592, Len: 1380 No. Time Source Destination Protocol Length Info 653 8.048168 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=39592 Ack=15621 Win=65535 Len=0 Frame 653: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 39592, Ack: 15621, Len: 0 No. Time Source Destination Protocol Length Info 654 8.048249 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU] Frame 654: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 15621, Ack: 39592, Len: 1380 No. Time Source Destination Protocol Length Info 655 8.048374 207.46.19.254 192.168.10.221 TLSv1 1434 Application Data Frame 655: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 17001, Ack: 39592, Len: 1380 [5 Reassembled TCP Segments (6900 bytes): #649(1380), #651(1380), #652(1380), #654(1380), #655(1380)] Secure Sockets Layer No. Time Source Destination Protocol Length Info 656 8.048416 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=39592 Ack=18381 Win=65535 Len=0 Frame 656: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 39592, Ack: 18381, Len: 0 No. Time Source Destination Protocol Length Info 657 8.049011 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU] Frame 657: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 18381, Ack: 39592, Len: 1380 No. Time Source Destination Protocol Length Info 658 8.049040 207.46.19.254 192.168.10.221 TLSv1 790 Application Data Frame 658: 790 bytes on wire (6320 bits), 790 bytes captured (6320 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 19761, Ack: 39592, Len: 736 [2 Reassembled TCP Segments (2116 bytes): #657(1380), #658(736)] Secure Sockets Layer No. Time Source Destination Protocol Length Info 659 8.049078 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=39592 Ack=20497 Win=63419 Len=0 Frame 659: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 39592, Ack: 20497, Len: 0 No. Time Source Destination Protocol Length Info 660 8.050853 192.168.10.221 207.46.19.254 TCP 60 [TCP Window Update] 4791 > https [ACK] Seq=39592 Ack=20497 Win=65535 Len=0 Frame 660: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 39592, Ack: 20497, Len: 0 No. Time Source Destination Protocol Length Info 661 8.063350 192.168.10.1 192.168.10.245 Syslog 310 LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="exxdevelop@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 661: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 662 8.070450 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 662: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 631, Ack: 16508, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 663 8.070484 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=16561 Ack=673 Win=46169 Len=0 Frame 663: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 16561, Ack: 673, Len: 0 No. Time Source Destination Protocol Length Info 664 8.070698 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=673 Ack=16508 Win=0 Len=0 Frame 664: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 673, Ack: 16508, Len: 0 No. Time Source Destination Protocol Length Info 665 8.072575 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 665: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 666 8.072605 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 666: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 667 8.099314 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 667: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 39592, Ack: 20497, Len: 1400 No. Time Source Destination Protocol Length Info 668 8.099399 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 668: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 40992, Ack: 20497, Len: 1400 No. Time Source Destination Protocol Length Info 669 8.099457 192.168.10.221 207.46.19.254 TLSv1 671 Application Data Frame 669: 671 bytes on wire (5368 bits), 671 bytes captured (5368 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 42392, Ack: 20497, Len: 617 [3 Reassembled TCP Segments (3417 bytes): #667(1400), #668(1400), #669(617)] Secure Sockets Layer No. Time Source Destination Protocol Length Info 670 8.099488 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=20497 Ack=42392 Win=65535 Len=0 Frame 670: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 20497, Ack: 42392, Len: 0 No. Time Source Destination Protocol Length Info 671 8.099516 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=20497 Ack=43009 Win=65535 Len=0 Frame 671: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 20497, Ack: 43009, Len: 0 No. Time Source Destination Protocol Length Info 672 8.099647 192.168.10.221 207.46.19.254 TCP 62 4792 > https [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM=1 Frame 672: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4792 (4792), Dst Port: https (443), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 673 8.150278 192.168.10.142 192.168.10.255 NBNS 110 Registration NB ANDYMOBILEPC<00> Frame 673: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 674 8.150456 192.168.10.142 192.168.10.255 NBNS 110 Registration NB ANDYMOBILEPC<00> Frame 674: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 675 8.164849 192.168.10.221 207.46.19.254 TCP 62 4793 > https [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM=1 Frame 675: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4793 (4793), Dst Port: https (443), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 676 8.178922 207.46.19.254 192.168.10.221 TCP 60 https > 4792 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1400 Frame 676: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4792 (4792), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 677 8.178976 192.168.10.221 207.46.19.254 TCP 60 4792 > https [ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 677: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4792 (4792), Dst Port: https (443), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 678 8.179260 192.168.10.221 207.46.19.254 TLSv1 163 Client Hello Frame 678: 163 bytes on wire (1304 bits), 163 bytes captured (1304 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4792 (4792), Dst Port: https (443), Seq: 1, Ack: 1, Len: 109 Secure Sockets Layer No. Time Source Destination Protocol Length Info 679 8.179292 207.46.19.254 192.168.10.221 TCP 60 https > 4792 [ACK] Seq=1 Ack=110 Win=65535 Len=0 Frame 679: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4792 (4792), Seq: 1, Ack: 110, Len: 0 No. Time Source Destination Protocol Length Info 680 8.187285 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU] Frame 680: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 20497, Ack: 43009, Len: 1380 No. Time Source Destination Protocol Length Info 681 8.187429 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU] Frame 681: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 21877, Ack: 43009, Len: 1380 No. Time Source Destination Protocol Length Info 682 8.187488 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=43009 Ack=23257 Win=65535 Len=0 Frame 682: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 43009, Ack: 23257, Len: 0 No. Time Source Destination Protocol Length Info 683 8.187521 207.46.19.254 192.168.10.221 TLSv1 858 Application Data Frame 683: 858 bytes on wire (6864 bits), 858 bytes captured (6864 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 23257, Ack: 43009, Len: 804 [3 Reassembled TCP Segments (3564 bytes): #680(1380), #681(1380), #683(804)] Secure Sockets Layer No. Time Source Destination Protocol Length Info 684 8.187954 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 684: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 43009, Ack: 24061, Len: 1400 No. Time Source Destination Protocol Length Info 685 8.188039 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 685: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 44409, Ack: 24061, Len: 1400 No. Time Source Destination Protocol Length Info 686 8.188102 192.168.10.221 207.46.19.254 TLSv1 671 Application Data Frame 686: 671 bytes on wire (5368 bits), 671 bytes captured (5368 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 45809, Ack: 24061, Len: 617 [3 Reassembled TCP Segments (3417 bytes): #684(1400), #685(1400), #686(617)] Secure Sockets Layer No. Time Source Destination Protocol Length Info 687 8.188137 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=24061 Ack=45809 Win=65535 Len=0 Frame 687: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 24061, Ack: 45809, Len: 0 No. Time Source Destination Protocol Length Info 688 8.188165 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=24061 Ack=46426 Win=65535 Len=0 Frame 688: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 24061, Ack: 46426, Len: 0 No. Time Source Destination Protocol Length Info 689 8.243941 207.46.19.254 192.168.10.221 TCP 60 https > 4793 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1400 Frame 689: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4793 (4793), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 690 8.243989 192.168.10.221 207.46.19.254 TCP 60 4793 > https [ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 690: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4793 (4793), Dst Port: https (443), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 691 8.244447 192.168.10.221 207.46.19.254 TLSv1 163 Client Hello Frame 691: 163 bytes on wire (1304 bits), 163 bytes captured (1304 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4793 (4793), Dst Port: https (443), Seq: 1, Ack: 1, Len: 109 Secure Sockets Layer No. Time Source Destination Protocol Length Info 692 8.244482 207.46.19.254 192.168.10.221 TCP 60 https > 4793 [ACK] Seq=1 Ack=110 Win=65535 Len=0 Frame 692: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4793 (4793), Seq: 1, Ack: 110, Len: 0 No. Time Source Destination Protocol Length Info 693 8.258600 207.46.19.254 192.168.10.221 TLSv1 176 Server Hello, Change Cipher Spec, Encrypted Handshake Message Frame 693: 176 bytes on wire (1408 bits), 176 bytes captured (1408 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4792 (4792), Seq: 1, Ack: 110, Len: 122 Secure Sockets Layer No. Time Source Destination Protocol Length Info 694 8.258973 192.168.10.221 207.46.19.254 TLSv1 97 Change Cipher Spec, Encrypted Handshake Message Frame 694: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4792 (4792), Dst Port: https (443), Seq: 110, Ack: 123, Len: 43 Secure Sockets Layer No. Time Source Destination Protocol Length Info 695 8.259005 207.46.19.254 192.168.10.221 TCP 60 https > 4792 [ACK] Seq=123 Ack=153 Win=65535 Len=0 Frame 695: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4792 (4792), Seq: 123, Ack: 153, Len: 0 No. Time Source Destination Protocol Length Info 696 8.265148 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 696: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4792 (4792), Dst Port: https (443), Seq: 153, Ack: 123, Len: 1400 No. Time Source Destination Protocol Length Info 697 8.265228 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 697: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4792 (4792), Dst Port: https (443), Seq: 1553, Ack: 123, Len: 1400 No. Time Source Destination Protocol Length Info 698 8.265282 192.168.10.221 207.46.19.254 TLSv1 671 Application Data Frame 698: 671 bytes on wire (5368 bits), 671 bytes captured (5368 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4792 (4792), Dst Port: https (443), Seq: 2953, Ack: 123, Len: 617 [3 Reassembled TCP Segments (3417 bytes): #696(1400), #697(1400), #698(617)] Secure Sockets Layer No. Time Source Destination Protocol Length Info 699 8.265315 207.46.19.254 192.168.10.221 TCP 60 https > 4792 [ACK] Seq=123 Ack=1553 Win=65535 Len=0 Frame 699: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4792 (4792), Seq: 123, Ack: 1553, Len: 0 No. Time Source Destination Protocol Length Info 700 8.265349 207.46.19.254 192.168.10.221 TCP 60 https > 4792 [ACK] Seq=123 Ack=3570 Win=65535 Len=0 Frame 700: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4792 (4792), Seq: 123, Ack: 3570, Len: 0 No. Time Source Destination Protocol Length Info 701 8.265382 207.46.19.254 192.168.10.221 TCP 60 [TCP Dup ACK 700#1] https > 4792 [ACK] Seq=123 Ack=3570 Win=65535 Len=0 Frame 701: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4792 (4792), Seq: 123, Ack: 3570, Len: 0 No. Time Source Destination Protocol Length Info 702 8.269227 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 702: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 703 8.269258 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 703: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 704 8.277268 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU] Frame 704: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 24061, Ack: 46426, Len: 1380 No. Time Source Destination Protocol Length Info 705 8.277302 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU] Frame 705: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 25441, Ack: 46426, Len: 1380 No. Time Source Destination Protocol Length Info 706 8.277357 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=46426 Ack=26821 Win=65535 Len=0 Frame 706: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 46426, Ack: 26821, Len: 0 No. Time Source Destination Protocol Length Info 707 8.277386 207.46.19.254 192.168.10.221 TLSv1 908 Application Data Frame 707: 908 bytes on wire (7264 bits), 908 bytes captured (7264 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 26821, Ack: 46426, Len: 854 [3 Reassembled TCP Segments (3614 bytes): #704(1380), #705(1380), #707(854)] Secure Sockets Layer No. Time Source Destination Protocol Length Info 708 8.279279 190.42.139.241 192.168.10.207 SMTP 60 C: QUIT Frame 708: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23519 (23519), Dst Port: smtp (25), Seq: 57, Ack: 361, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 709 8.279353 192.168.10.207 190.42.139.241 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 709: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23519 (23519), Seq: 361, Ack: 63, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 710 8.279394 190.42.139.241 192.168.10.207 TCP 60 23519 > smtp [ACK] Seq=63 Ack=430 Win=93010 Len=0 Frame 710: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23519 (23519), Dst Port: smtp (25), Seq: 63, Ack: 430, Len: 0 No. Time Source Destination Protocol Length Info 711 8.279425 192.168.10.207 190.42.139.241 TCP 60 smtp > 23519 [FIN, ACK] Seq=430 Ack=63 Win=65473 Len=0 Frame 711: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23519 (23519), Seq: 430, Ack: 63, Len: 0 No. Time Source Destination Protocol Length Info 712 8.279509 190.42.139.241 192.168.10.207 TCP 60 23519 > smtp [ACK] Seq=63 Ack=431 Win=93010 Len=0 Frame 712: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23519 (23519), Dst Port: smtp (25), Seq: 63, Ack: 431, Len: 0 No. Time Source Destination Protocol Length Info 713 8.318258 41.252.217.113 192.168.10.207 SMTP 69 C: EHLO qhxh.com Frame 713: 69 bytes on wire (552 bits), 69 bytes captured (552 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 38766 (38766), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 15 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 714 8.318485 192.168.10.207 41.252.217.113 SMTP 245 S: 250-mail.mydomain.com Hello [41.252.217.113] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 714: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 41.252.217.113 (41.252.217.113) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 38766 (38766), Seq: 122, Ack: 16, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 715 8.318533 41.252.217.113 192.168.10.207 TCP 60 38766 > smtp [ACK] Seq=16 Ack=313 Win=93128 Len=0 Frame 715: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 38766 (38766), Dst Port: smtp (25), Seq: 16, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 716 8.318901 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 716: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 717 8.318980 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 717: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 718 8.319083 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 718: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 719 8.319192 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 719: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 720 8.319370 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 720: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 721 8.319440 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 721: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 722 8.323722 207.46.19.254 192.168.10.221 TLSv1 176 Server Hello, Change Cipher Spec, Encrypted Handshake Message Frame 722: 176 bytes on wire (1408 bits), 176 bytes captured (1408 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4793 (4793), Seq: 1, Ack: 110, Len: 122 Secure Sockets Layer No. Time Source Destination Protocol Length Info 723 8.324017 192.168.10.221 207.46.19.254 TLSv1 97 Change Cipher Spec, Encrypted Handshake Message Frame 723: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4793 (4793), Dst Port: https (443), Seq: 110, Ack: 123, Len: 43 Secure Sockets Layer No. Time Source Destination Protocol Length Info 724 8.324050 207.46.19.254 192.168.10.221 TCP 60 https > 4793 [ACK] Seq=123 Ack=153 Win=65535 Len=0 Frame 724: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4793 (4793), Seq: 123, Ack: 153, Len: 0 No. Time Source Destination Protocol Length Info 725 8.330237 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 725: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4793 (4793), Dst Port: https (443), Seq: 153, Ack: 123, Len: 1400 No. Time Source Destination Protocol Length Info 726 8.330335 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU] Frame 726: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4793 (4793), Dst Port: https (443), Seq: 1553, Ack: 123, Len: 1400 No. Time Source Destination Protocol Length Info 727 8.330395 192.168.10.221 207.46.19.254 TLSv1 680 Application Data Frame 727: 680 bytes on wire (5440 bits), 680 bytes captured (5440 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4793 (4793), Dst Port: https (443), Seq: 2953, Ack: 123, Len: 626 [3 Reassembled TCP Segments (3426 bytes): #725(1400), #726(1400), #727(626)] Secure Sockets Layer No. Time Source Destination Protocol Length Info 728 8.330426 207.46.19.254 192.168.10.221 TCP 60 https > 4793 [ACK] Seq=123 Ack=2953 Win=65535 Len=0 Frame 728: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4793 (4793), Seq: 123, Ack: 2953, Len: 0 No. Time Source Destination Protocol Length Info 729 8.330455 207.46.19.254 192.168.10.221 TCP 60 https > 4793 [ACK] Seq=123 Ack=3579 Win=65535 Len=0 Frame 729: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4793 (4793), Seq: 123, Ack: 3579, Len: 0 No. Time Source Destination Protocol Length Info 730 8.346072 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1739528448, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 730: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 731 8.346095 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1739528448, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 731: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 732 8.346107 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1739528448, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 732: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 733 8.346120 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1739528448, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 733: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 734 8.352140 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 734: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 735 8.352169 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 735: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 736 8.352230 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 736: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 737 8.352242 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 737: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 738 8.352255 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 738: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 739 8.352266 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 739: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 740 8.352277 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 740: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 741 8.352290 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 741: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 742 8.352300 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 742: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 743 8.352311 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 743: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 744 8.352324 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 744: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 745 8.352341 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 745: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 746 8.352374 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 746: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 747 8.352386 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 747: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 748 8.352395 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 748: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 749 8.352423 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 749: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 750 8.352438 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 750: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 751 8.352449 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 751: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 752 8.352460 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 752: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 753 8.352470 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 753: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 754 8.352481 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 754: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 755 8.352492 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 755: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 756 8.352502 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 756: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 757 8.352521 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 757: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 758 8.352532 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 758: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 759 8.352549 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 759: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 760 8.352560 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 760: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 761 8.352570 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 761: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 762 8.352581 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 762: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 763 8.352591 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 763: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 764 8.352602 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 764: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 765 8.352613 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 765: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 766 8.352623 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 766: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 767 8.352634 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 767: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 768 8.352644 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 768: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 769 8.352655 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 769: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 770 8.352666 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 770: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 771 8.352679 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 771: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 772 8.352690 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 772: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 773 8.352700 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 773: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 774 8.352711 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 774: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 775 8.352721 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 775: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 776 8.352732 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 776: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 777 8.352896 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 777: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 778 8.366944 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3608609024, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 778: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 779 8.366970 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3608609024, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 779: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 780 8.366983 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3608609024, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 780: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 781 8.366997 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3608609024, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 781: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 782 8.417679 207.46.19.254 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 782: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4793 (4793), Seq: 123, Ack: 3579, Len: 1400 No. Time Source Destination Protocol Length Info 783 8.417717 207.46.19.254 192.168.10.221 TLSv1 136 Application Data Frame 783: 136 bytes on wire (1088 bits), 136 bytes captured (1088 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4793 (4793), Seq: 1523, Ack: 3579, Len: 82 [2 Reassembled TCP Segments (1482 bytes): #782(1400), #783(82)] Secure Sockets Layer No. Time Source Destination Protocol Length Info 784 8.417777 192.168.10.221 207.46.19.254 TCP 60 4793 > https [ACK] Seq=3579 Ack=1605 Win=65535 Len=0 Frame 784: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4793 (4793), Dst Port: https (443), Seq: 3579, Ack: 1605, Len: 0 No. Time Source Destination Protocol Length Info 785 8.476281 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=46426 Ack=27675 Win=64681 Len=0 Frame 785: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 46426, Ack: 27675, Len: 0 No. Time Source Destination Protocol Length Info 786 8.576060 190.42.139.241 192.168.10.207 TCP 60 23519 > smtp [RST, ACK] Seq=63 Ack=431 Win=93010 Len=0 Frame 786: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23519 (23519), Dst Port: smtp (25), Seq: 63, Ack: 431, Len: 0 No. Time Source Destination Protocol Length Info 787 8.576194 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 787: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 788 8.588519 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=547 Ack=52892 Win=12644 Len=0 Frame 788: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 547, Ack: 52892, Len: 0 No. Time Source Destination Protocol Length Info 789 8.588551 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 788#1] smtp > 23308 [ACK] Seq=547 Ack=52892 Win=12644 Len=0 Frame 789: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 547, Ack: 52892, Len: 0 No. Time Source Destination Protocol Length Info 790 8.588584 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 790: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 53580, Ack: 547, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 791 8.588614 206.225.164.186 192.168.10.207 SMTP 905 C: DATA fragment, 851 bytes Frame 791: 905 bytes on wire (7240 bits), 905 bytes captured (7240 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 54960, Ack: 547, Len: 851 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 792 8.588644 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 792: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 55811, Ack: 547, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 793 8.588676 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 793: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 57191, Ack: 547, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 794 8.588706 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 794: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 58571, Ack: 547, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 795 8.588735 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 795: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 59951, Ack: 547, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 796 8.588767 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 796: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 61331, Ack: 547, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 797 8.588803 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 788#2] smtp > 23308 [ACK] Seq=547 Ack=52892 Win=12644 Len=0 Frame 797: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 547, Ack: 52892, Len: 0 No. Time Source Destination Protocol Length Info 798 8.588841 192.168.10.207 206.225.164.186 SMTP 348 S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 798: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 547, Ack: 52892, Len: 294 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 799 8.588879 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=62711 Ack=841 Win=46384 Len=0 Frame 799: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 62711, Ack: 841, Len: 0 No. Time Source Destination Protocol Length Info 800 8.588907 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 798#1] smtp > 23308 [ACK] Seq=841 Ack=52892 Win=12644 Len=0 Frame 800: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 841, Ack: 52892, Len: 0 No. Time Source Destination Protocol Length Info 801 8.588936 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 798#2] smtp > 23308 [ACK] Seq=841 Ack=52892 Win=12644 Len=0 Frame 801: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 841, Ack: 52892, Len: 0 No. Time Source Destination Protocol Length Info 802 8.588965 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 798#3] smtp > 23308 [ACK] Seq=841 Ack=52892 Win=12644 Len=0 Frame 802: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 841, Ack: 52892, Len: 0 No. Time Source Destination Protocol Length Info 803 8.588993 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 798#4] smtp > 23308 [ACK] Seq=841 Ack=52892 Win=12644 Len=0 Frame 803: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 841, Ack: 52892, Len: 0 No. Time Source Destination Protocol Length Info 804 8.589020 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 798#5] smtp > 23308 [ACK] Seq=841 Ack=52892 Win=12644 Len=0 Frame 804: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 841, Ack: 52892, Len: 0 No. Time Source Destination Protocol Length Info 805 8.589048 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 798#6] smtp > 23308 [ACK] Seq=841 Ack=52892 Win=12644 Len=0 Frame 805: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 841, Ack: 52892, Len: 0 No. Time Source Destination Protocol Length Info 806 8.589076 206.225.164.186 192.168.10.207 SMTP 742 [TCP Fast Retransmission] C: DATA fragment, 688 bytes Frame 806: 742 bytes on wire (5936 bits), 742 bytes captured (5936 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 52892, Ack: 841, Len: 688 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 807 8.589104 206.225.164.186 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 807: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 53580, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 808 8.589137 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 808: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 62711, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 809 8.589165 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 809: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 64091, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 810 8.589194 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=841 Ack=62711 Win=2825 Len=0 Frame 810: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 841, Ack: 62711, Len: 0 No. Time Source Destination Protocol Length Info 811 8.589221 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=841 Ack=65471 Win=65 Len=0 Frame 811: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 841, Ack: 65471, Len: 0 No. Time Source Destination Protocol Length Info 812 8.657634 192.168.10.246 65.32.1.65 DNS 87 Standard query PTR 49.107.163.122.in-addr.arpa Frame 812: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 65347 (65347), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 813 8.812861 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-06.geo.kaspersky.com Frame 813: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 51246 (51246), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 814 8.813029 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-06.geo.kaspersky.com Frame 814: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 51246 (51246), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 815 8.901650 192.168.10.142 192.168.10.255 NBNS 110 Registration NB ANDYMOBILEPC<00> Frame 815: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 816 8.901818 192.168.10.142 192.168.10.255 NBNS 110 Registration NB ANDYMOBILEPC<00> Frame 816: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 817 9.002638 41.252.217.113 192.168.10.207 SMTP 103 C: MAIL FROM: <sienna.gerald@xxxxxxxxxxxxxxxxxxxx> Frame 817: 103 bytes on wire (824 bits), 103 bytes captured (824 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 38766 (38766), Dst Port: smtp (25), Seq: 16, Ack: 313, Len: 49 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 818 9.002843 192.168.10.207 41.252.217.113 SMTP 113 S: 250 2.1.0 [email protected] OK Frame 818: 113 bytes on wire (904 bits), 113 bytes captured (904 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 41.252.217.113 (41.252.217.113) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 38766 (38766), Seq: 313, Ack: 65, Len: 59 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 819 9.002887 41.252.217.113 192.168.10.207 TCP 60 38766 > smtp [ACK] Seq=65 Ack=372 Win=93068 Len=0 Frame 819: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 38766 (38766), Dst Port: smtp (25), Seq: 65, Ack: 372, Len: 0 No. Time Source Destination Protocol Length Info 820 9.005346 65.32.1.65 192.168.10.246 DNS 154 Standard query response PTR ABTS-North-Dynamic-049.107.163.122.airtelbroadband.in Frame 820: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 65347 (65347) Domain Name System (response) No. Time Source Destination Protocol Length Info 821 9.069710 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 821: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 841, Ack: 65471, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 822 9.069748 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=65471 Ack=883 Win=46363 Len=0 Frame 822: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 65471, Ack: 883, Len: 0 No. Time Source Destination Protocol Length Info 823 9.135504 192.168.10.246 65.32.1.65 DNS 85 Standard query PTR 33.35.19.113.in-addr.arpa Frame 823: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 59378 (59378), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 824 9.193763 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 824: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 825 9.238754 182.178.75.135 192.168.10.207 SMTP 92 C: MAIL FROM: <emily.kirk@xxxxxxxxxxxx> Frame 825: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 2018 (2018), Dst Port: smtp (25), Seq: 18, Ack: 313, Len: 38 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 826 9.239036 192.168.10.207 182.178.75.135 SMTP 102 S: 250 2.1.0 [email protected] OK Frame 826: 102 bytes on wire (816 bits), 102 bytes captured (816 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 2018 (2018), Seq: 313, Ack: 56, Len: 48 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 827 9.239099 182.178.75.135 192.168.10.207 TCP 60 2018 > smtp [ACK] Seq=56 Ack=361 Win=46540 Len=0 Frame 827: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 2018 (2018), Dst Port: smtp (25), Seq: 56, Ack: 361, Len: 0 No. Time Source Destination Protocol Length Info 828 9.315255 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 828: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 829 9.359118 207.46.19.254 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 829: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4792 (4792), Seq: 123, Ack: 3570, Len: 1400 No. Time Source Destination Protocol Length Info 830 9.359154 207.46.19.254 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 830: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4792 (4792), Seq: 1523, Ack: 3570, Len: 1400 No. Time Source Destination Protocol Length Info 831 9.359185 207.46.19.254 192.168.10.221 TLSv1 668 Application Data Frame 831: 668 bytes on wire (5344 bits), 668 bytes captured (5344 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: https (443), Dst Port: 4792 (4792), Seq: 2923, Ack: 3570, Len: 614 [3 Reassembled TCP Segments (3414 bytes): #829(1400), #830(1400), #831(614)] Secure Sockets Layer No. Time Source Destination Protocol Length Info 832 9.359237 192.168.10.221 207.46.19.254 TCP 60 4792 > https [ACK] Seq=3570 Ack=3537 Win=65535 Len=0 Frame 832: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4792 (4792), Dst Port: https (443), Seq: 3570, Ack: 3537, Len: 0 No. Time Source Destination Protocol Length Info 833 9.361855 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1756305664, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 833: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 834 9.361879 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1756305664, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 834: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 835 9.361891 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1756305664, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 835: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 836 9.361903 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1756305664, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 836: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 837 9.382761 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3625386240, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 837: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 838 9.382790 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3625386240, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 838: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 839 9.382802 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3625386240, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 839: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 840 9.382814 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3625386240, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 840: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 841 9.396903 192.168.10.32 192.168.10.255 UDP 776 Source port: 43836 Destination port: apc-3052 Frame 841: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 43836 (43836), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 36 3a 31 31 0a 53 52 3d 30 31 31 =20:56:11.SR=011 0060 35 45 36 0a 53 55 3d 36 32 39 45 0a 52 44 3d 43 5E6.SU=629E.RD=C 0070 30 44 33 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 0D3.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 38 .4C=207.3.50=038 00c0 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 .0.43=028.5.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 30 3a 1/19/07.6A=0050: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 746005481 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d .46=60.00.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 207.3.4E=205.9.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 32 2e 30 0a 32 46 3d 31 35 2e .5C=032.0.2F=15. 01d0 33 39 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 39.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 000.09=60.00;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 37 34 31 41 46 46 31 32 46 39 43 37 35 43 46 =741AFF12F9C75CF 02a0 43 42 31 43 44 33 34 39 42 43 39 36 31 41 36 33 CB1CD349BC961A63 02b0 42 0a 4d 44 3d 63 61 32 66 39 63 33 37 62 38 35 B.MD=ca2f9c37b85 02c0 35 30 39 62 64 37 31 33 33 31 63 62 32 63 65 64 509bd71331cb2ced 02d0 64 36 32 63 35 0a 3c 2f 42 4f 44 59 3e 0a d62c5.</BODY>. No. Time Source Destination Protocol Length Info 842 9.397051 192.168.10.32 192.168.10.255 UDP 776 Source port: 43836 Destination port: apc-3052 Frame 842: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 43836 (43836), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 36 3a 31 31 0a 53 52 3d 30 31 31 =20:56:11.SR=011 0060 35 45 36 0a 53 55 3d 36 32 39 45 0a 52 44 3d 43 5E6.SU=629E.RD=C 0070 30 44 33 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 0D3.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 38 .4C=207.3.50=038 00c0 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 .0.43=028.5.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 30 3a 1/19/07.6A=0050: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 746005481 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d .46=60.00.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 207.3.4E=205.9.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 32 2e 30 0a 32 46 3d 31 35 2e .5C=032.0.2F=15. 01d0 33 39 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 39.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 000.09=60.00;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 37 34 31 41 46 46 31 32 46 39 43 37 35 43 46 =741AFF12F9C75CF 02a0 43 42 31 43 44 33 34 39 42 43 39 36 31 41 36 33 CB1CD349BC961A63 02b0 42 0a 4d 44 3d 63 61 32 66 39 63 33 37 62 38 35 B.MD=ca2f9c37b85 02c0 35 30 39 62 64 37 31 33 33 31 63 62 32 63 65 64 509bd71331cb2ced 02d0 64 36 32 63 35 0a 3c 2f 42 4f 44 59 3e 0a d62c5.</BODY>. No. Time Source Destination Protocol Length Info 843 9.443434 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 843: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 844 9.503624 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 3 Port 42 TTL = 120 Frame 844: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 845 9.563934 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 845: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 846 9.563966 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 846: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 847 9.566551 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 847: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 848 9.578525 192.168.10.1 192.168.10.245 Syslog 311 LOCAL1.INFO: Oct 3 19:44:27 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eyeetymology@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 848: 311 bytes on wire (2488 bits), 311 bytes captured (2488 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:27 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default No. Time Source Destination Protocol Length Info 849 9.619346 192.168.10.115 64.74.103.129 TLSv1 91 Application Data Frame 849: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.115 (192.168.10.115), Dst: 64.74.103.129 (64.74.103.129) Transmission Control Protocol, Src Port: cogsys-lm (3377), Dst Port: https (443), Seq: 1, Ack: 1, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 850 9.619415 64.74.103.129 192.168.10.115 TCP 60 https > cogsys-lm [ACK] Seq=1 Ack=38 Win=65535 Len=0 Frame 850: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Internet Protocol Version 4, Src: 64.74.103.129 (64.74.103.129), Dst: 192.168.10.115 (192.168.10.115) Transmission Control Protocol, Src Port: https (443), Dst Port: cogsys-lm (3377), Seq: 1, Ack: 38, Len: 0 No. Time Source Destination Protocol Length Info 851 9.619899 Watchgua_3c:4c:d8 IntelCor_ed:1a:c9 ARP 60 Who has 192.168.10.115? Tell 192.168.10.1 Frame 851: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 852 9.619913 IntelCor_ed:1a:c9 Watchgua_3c:4c:d8 ARP 60 192.168.10.115 is at 00:13:20:ed:1a:c9 Frame 852: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 853 9.644108 192.168.10.1 192.168.10.245 Syslog 207 LOCAL1.INFO: Oct 3 19:44:27 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="Conn Begin" (HTTP-proxy-Visitor-00) Frame 853: 207 bytes on wire (1656 bits), 207 bytes captured (1656 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:27 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="Conn Begin" (HTTP-proxy-Visitor-00) No. Time Source Destination Protocol Length Info 854 9.648680 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 854: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 883, Ack: 65471, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 855 9.648714 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=65471 Ack=925 Win=46342 Len=0 Frame 855: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 65471, Ack: 925, Len: 0 No. Time Source Destination Protocol Length Info 856 9.649231 192.168.10.142 192.168.10.255 NBNS 110 Registration NB WORKGROUP<00> Frame 856: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 857 9.649416 192.168.10.142 192.168.10.255 NBNS 110 Registration NB WORKGROUP<00> Frame 857: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 858 9.667071 64.74.103.129 192.168.10.115 TLSv1 91 Application Data Frame 858: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Internet Protocol Version 4, Src: 64.74.103.129 (64.74.103.129), Dst: 192.168.10.115 (192.168.10.115) Transmission Control Protocol, Src Port: https (443), Dst Port: cogsys-lm (3377), Seq: 1, Ack: 38, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 859 9.718388 192.168.10.1 192.168.10.245 Syslog 347 LOCAL1.INFO: Oct 3 19:44:27 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo.kaspersky.com" arg="/index/u0607g.xml.dif" sent_bytes="211" rcvd_bytes="434" (HTTP-proxy-Visitor-00) Frame 859: 347 bytes on wire (2776 bits), 347 bytes captured (2776 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:27 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo No. Time Source Destination Protocol Length Info 860 9.792983 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=41181 Ack=889 Win=1002 Len=1448 TSval=537697 TSecr=727560 Frame 860: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 41181, Ack: 889, Len: 1448 Data (1448 bytes) 0000 17 03 01 21 a0 f2 59 5b ae 49 22 f6 5f b4 1d c0 ...!..Y[.I"._... 0010 6d 37 ff 12 17 5a a4 86 24 56 7d 64 65 4c 6b eb m7...Z..$V}deLk. 0020 1b 2e a6 d1 d8 b1 27 24 96 c9 3a 8c 9f 30 3d 9c ......'$..:..0=. 0030 82 7c 47 64 67 37 d3 74 54 c8 95 33 97 51 ba 3a .|Gdg7.tT..3.Q.: 0040 e8 ee 47 18 7a 10 fa be 8e 2a 3b 5d af 4f 6c 1c ..G.z....*;].Ol. 0050 c6 07 74 0b d3 0c 37 b4 ab 99 f2 d2 c0 ea 64 52 ..t...7.......dR 0060 ca d7 51 20 6c 85 33 27 a4 6a 64 82 78 ce 39 98 ..Q l.3'.jd.x.9. 0070 10 9f 19 7b 4f c0 76 9d d0 b4 46 a0 db a7 62 3c ...{O.v...F...b< 0080 67 5e f5 01 03 05 bd 1d be e6 0a 89 bc 8f f8 2d g^.............- 0090 d2 09 54 22 f1 7a ef b8 07 c5 d6 fd 8a 53 c9 d1 ..T".z.......S.. 00a0 41 1f 56 f8 c4 30 da c0 28 81 8a 48 47 ac 6d 48 A.V..0..(..HG.mH 00b0 1d ca a1 00 78 e7 28 5d 28 da f7 10 87 8b 3e 19 ....x.(](.....>. 00c0 42 f7 7b 62 fa c9 30 85 af 0f 8c e6 4e 2f e6 c3 B.{b..0.....N/.. 00d0 c1 77 1e 78 6f 94 d5 26 8e fe 6a d5 67 9c 9c c5 .w.xo..&..j.g... 00e0 c4 e4 15 0b e9 73 b3 cd fd 64 77 00 ed 74 d4 4b .....s...dw..t.K 00f0 a5 b2 3d 66 cb 9b 9a 87 21 2d 97 05 d3 74 c7 9e ..=f....!-...t.. 0100 d1 56 9f 63 24 e4 e3 ec b6 c3 3c 7f 67 de 47 ef .V.c$.....<.g.G. 0110 b6 65 c2 59 fb 85 9e 24 4f 37 be f6 31 6f e8 03 .e.Y...$O7..1o.. 0120 bb 44 17 62 14 30 63 bb 90 9a 2a 0d 59 fc 61 ec .D.b.0c...*.Y.a. 0130 9d 90 36 ee 5d 4b da 36 44 30 93 89 d5 48 a4 ea ..6.]K.6D0...H.. 0140 51 ea 0a 94 96 39 d4 b1 cb 8a 1c db a9 b5 ef 19 Q....9.......... 0150 6b 47 07 13 40 af 7d ef 60 b1 91 82 87 b2 41 6e kG..@.}.`.....An 0160 a5 a1 5f 54 a7 6d ec 86 37 ca 1a 4d 6b a5 e2 88 .._T.m..7..Mk... 0170 fc f8 43 30 d3 e7 d3 e3 78 2d 8b 9a dd 4d e5 ce ..C0....x-...M.. 0180 9e 12 fb bd cc bb 24 c7 7f e6 09 5d bb 2b fe b2 ......$....].+.. 0190 69 d2 e8 97 98 3c 95 8b 3d 86 01 d7 31 7c 4c dd i....<..=...1|L. 01a0 d7 b2 36 28 cc fa f6 0e 07 05 dd 1a fa 6f 96 15 ..6(.........o.. 01b0 10 73 47 29 38 cc 76 07 2f 5e b1 07 26 08 07 cb .sG)8.v./^..&... 01c0 6d ea 74 16 a5 19 d5 75 34 db f2 73 b2 c8 bd d0 m.t....u4..s.... 01d0 62 c2 9b 91 cd 01 52 54 0a c5 38 37 2f af 42 95 b.....RT..87/.B. 01e0 b3 b3 3c ee 8a bd 98 ac 6f 83 20 df fa 20 f9 c0 ..<.....o. .. .. 01f0 e4 05 37 86 7b d9 ea a2 b3 15 02 ca 77 6f af 08 ..7.{.......wo.. 0200 bf 85 2a ee 5a d5 ba 54 b6 06 35 dd 7b eb ba c9 ..*.Z..T..5.{... 0210 a3 52 0c 91 75 9b 82 78 2d b1 1e a7 bb b4 21 bb .R..u..x-.....!. 0220 fa f0 40 fa f1 0d ee a0 0b ce 0b 64 21 c0 31 bd [email protected]!.1. 0230 fe 68 27 86 6c 14 c8 35 b0 4f 5f 35 32 4d f8 24 .h'.l..5.O_52M.$ 0240 f0 34 c6 71 1d c0 d6 a9 83 35 a9 35 6b 9d a6 05 .4.q.....5.5k... 0250 3b 2f ad 71 ae 9f 69 95 ad 3c cb 1f d3 34 29 7d ;/.q..i..<...4)} 0260 94 3d 2c 13 85 48 98 08 48 87 4c 1f 01 e3 44 df .=,..H..H.L...D. 0270 6c 87 3f e6 c5 e9 aa 98 73 9f ea 13 b7 49 76 5e l.?.....s....Iv^ 0280 5e 5a ec 1e 4e f5 7b 2b 33 a1 dd 01 b8 c5 49 a6 ^Z..N.{+3.....I. 0290 9f 41 8d 70 a0 1d 7c 8c 20 22 a8 81 90 c1 1c 58 .A.p..|. ".....X 02a0 a9 7e 34 ef e7 8c 8b 2f c1 a5 f7 0a a0 c7 e7 cf .~4..../........ 02b0 8c b6 ee 7d 74 ca 61 da 94 51 d7 90 2d 19 7e dd ...}t.a..Q..-.~. 02c0 e8 0e ad 22 97 1b 88 1a 1f c1 11 4d 5b 16 4f f0 ...".......M[.O. 02d0 6a e7 80 f8 55 d4 e7 57 a5 1f c9 9e eb 0c ef 88 j...U..W........ 02e0 ee f4 53 f5 61 36 14 07 3f c6 a9 37 d2 27 f9 f6 ..S.a6..?..7.'.. 02f0 af 80 dc a7 bf b4 74 99 41 ca 2c 02 49 78 07 d6 ......t.A.,.Ix.. 0300 c7 92 aa 61 db b8 44 56 31 2c de 3f 2e 5f 11 ca ...a..DV1,.?._.. 0310 d4 ac 23 d3 73 8c f0 c8 16 2e b7 71 6b d7 2e 82 ..#.s......qk... 0320 14 0d 32 83 fd 01 99 0a ff 23 0c d9 ab 15 56 4c ..2......#....VL 0330 30 b2 47 73 1a 6b 86 b8 1d 29 10 6b 8e 90 2c db 0.Gs.k...).k..,. 0340 7f 3a 6a 83 f6 2a 14 37 7d 62 19 5d e4 0d 8d 6a .:j..*.7}b.]...j 0350 df 4c 1c 7a 17 e0 f1 a2 88 a0 a3 93 99 09 6b a0 .L.z..........k. 0360 d2 fe e1 d7 3a f4 20 7e 5c 5d c1 6d 47 2e 23 5d ....:. ~\].mG.#] 0370 4f b7 0e 95 28 8f ab 02 77 c4 8a 76 48 56 c5 f8 O...(...w..vHV.. 0380 0d f7 86 c3 c7 27 8f 26 7d 60 98 90 3b 1a 72 1e .....'.&}`..;.r. 0390 53 9b f9 d1 c4 ae 11 eb 65 a8 ad 3c da 85 8b b9 S.......e..<.... 03a0 5f 6b 62 ac 44 50 a4 29 26 f0 f2 eb a1 80 6c 8e _kb.DP.)&.....l. 03b0 2c 5f 62 f1 7e a9 42 36 20 d3 4c 50 5d 9e 65 3d ,_b.~.B6 .LP].e= 03c0 3a 9a bd 4a 07 bf fd 69 05 ab cd 20 bd 01 50 ec :..J...i... ..P. 03d0 5c 07 1d 7a 71 0f 16 e0 06 44 d2 f9 62 03 9a 64 \..zq....D..b..d 03e0 95 a9 ae ab 6e c2 a5 ee 74 d8 29 12 8a 26 ce 0e ....n...t.)..&.. 03f0 8d e4 87 d5 61 9a 0b fe 98 6f f7 b0 41 ad 06 b2 ....a....o..A... 0400 1c 25 2f 3d 3f 43 47 f1 48 7c b4 27 4f e9 d3 e8 .%/=?CG.H|.'O... 0410 c5 3e 98 cc 93 c8 f3 55 f2 67 54 28 7b fb a8 14 .>.....U.gT({... 0420 d9 d5 70 76 82 1b 13 f7 2f cf 06 9c 23 57 69 16 ..pv..../...#Wi. 0430 95 1e 5a bc b9 be 80 38 94 4a 25 74 dd 0b 32 cd ..Z....8.J%t..2. 0440 84 bb a8 26 d9 ae ae 5c 6b 71 32 ed 95 13 09 d9 ...&...\kq2..... 0450 e1 9f 48 6e 26 ea f6 b6 12 36 37 65 4e 85 18 23 ..Hn&....67eN..# 0460 67 2f 52 a1 2a 0e 19 cc 02 0c a2 d9 77 bc d3 24 g/R.*.......w..$ 0470 a3 1d 57 31 1e a0 65 a9 8d a4 00 5c 30 80 8e 85 ..W1..e....\0... 0480 5c 77 0f d0 85 07 54 77 5e 00 06 1d 80 43 b0 67 \w....Tw^....C.g 0490 e5 43 0d ae b5 23 91 7c 66 a1 77 35 e1 0c 6e d7 .C...#.|f.w5..n. 04a0 9c 92 54 42 73 a7 9c c8 7d c9 18 7c e0 74 34 a0 ..TBs...}..|.t4. 04b0 d4 7d 34 98 e2 ca 82 21 0d 55 2d 8f fd a1 01 64 .}4....!.U-....d 04c0 f0 ff 45 44 c4 fc 91 c9 ab 7f 05 d5 59 4d 16 c7 ..ED........YM.. 04d0 5d 53 36 c7 72 83 08 dd 2d 8c 09 f6 28 6f 03 27 ]S6.r...-...(o.' 04e0 11 fc b9 9a 43 be 1f d3 02 1e ba 80 5b 50 88 d3 ....C.......[P.. 04f0 5f 81 3e 41 66 fc 18 67 ce 3d 1d 9f 3e 9b 8c b1 _.>Af..g.=..>... 0500 5c d4 24 0c ba 63 8f de 6c be a0 3d 32 af 68 d0 \.$..c..l..=2.h. 0510 47 f8 9f 49 65 71 31 cb 23 f3 96 22 4d c1 ad b7 G..Ieq1.#.."M... 0520 9c 62 d1 3b af 15 bc 55 be c9 77 7a 4e 6d 98 8c .b.;...U..wzNm.. 0530 54 48 dc dc b3 cf b0 0c e2 f9 25 60 b5 1e 3b aa TH........%`..;. 0540 31 7a af 3b ee b2 dc f9 0d 8c 04 e3 45 d9 f7 47 1z.;........E..G 0550 4c 52 48 96 64 75 62 4e 9b dc a7 07 5d fa c5 64 LRH.dubN....]..d 0560 3b 00 ef 54 c5 02 af e6 f1 86 17 ef 3e e1 26 5c ;..T........>.&\ 0570 31 fc cc 55 a8 a6 d6 ca 98 e4 9d cf cc aa ba 0f 1..U............ 0580 68 66 3f 66 13 d0 f1 6e 4e 9c 67 cc 63 c7 ae 15 hf?f...nN.g.c... 0590 bd f5 b8 96 e2 59 f5 b1 1c c3 88 4c b8 b2 9f b7 .....Y.....L.... 05a0 6c f7 73 38 82 6a 88 8e l.s8.j.. No. Time Source Destination Protocol Length Info 861 9.793082 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=42629 Ack=889 Win=1002 Len=1448 TSval=537697 TSecr=727560 Frame 861: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 42629, Ack: 889, Len: 1448 Data (1448 bytes) 0000 13 dd f1 5a a9 3d 08 2d ef 0b 35 4b 45 ce b7 f9 ...Z.=.-..5KE... 0010 96 35 82 aa ad d2 cd 00 79 43 82 9c 53 d1 6e d0 .5......yC..S.n. 0020 2f d8 e2 35 80 61 20 71 48 fa df 54 d1 a0 8e 69 /..5.a qH..T...i 0030 9b 05 e2 16 1c f7 da fb c9 e5 db b3 f3 9a 48 64 ..............Hd 0040 45 21 88 61 51 d5 83 e9 b4 e3 46 e1 11 59 71 88 E!.aQ.....F..Yq. 0050 3a 26 14 1e 85 f9 24 5e 2d 01 42 9e 82 f6 b8 bb :&....$^-.B..... 0060 f6 69 af 8b a7 75 be d2 51 18 51 53 b9 94 19 46 .i...u..Q.QS...F 0070 ef 72 44 ea b7 c3 68 d8 88 1c 2e f3 c6 7e de da .rD...h......~.. 0080 f7 dd 76 07 7b 19 60 a3 0d 60 be 1d f0 6c ef 8b ..v.{.`..`...l.. 0090 4e bf c5 9a b9 19 ca b4 75 1c d7 bb 5c ed f4 5b N.......u...\..[ 00a0 55 d2 44 43 31 b5 45 2a 24 04 50 ba 6b d2 49 bb U.DC1.E*$.P.k.I. 00b0 57 69 5d 68 43 f3 ae 23 6b a7 92 76 fe 49 9a 71 Wi]hC..#k..v.I.q 00c0 ff e5 98 f3 de 22 8c 74 0a ea 72 e3 6e df 6e 15 .....".t..r.n.n. 00d0 07 5e 7a b4 bd e3 21 d6 de eb cf 6b a6 97 fc 2e .^z...!....k.... 00e0 ff 0f c0 9c 21 3a ea da d6 a5 ab 44 21 d6 61 f7 ....!:.....D!.a. 00f0 02 23 f3 64 57 ee 87 0a ab 4e 54 0d 31 58 cb 06 .#.dW....NT.1X.. 0100 d7 a3 4b 82 c9 08 69 74 f8 87 b6 df e5 a6 66 c6 ..K...it......f. 0110 0b 11 13 cf 9a 88 21 08 00 f9 13 ac c4 d8 f4 0e ......!......... 0120 5a 04 87 3a 77 d1 27 09 48 9c c0 da ce 17 6e 0d Z..:w.'.H.....n. 0130 d9 88 d1 28 c7 80 65 7f 77 e0 8d 1f f6 f2 cc 94 ...(..e.w....... 0140 0a 3f 8f de fa 41 22 8e 68 9d 68 92 41 4d 47 e8 .?...A".h.h.AMG. 0150 b8 43 c8 79 1c 5b 52 da be 5f 17 55 cd a1 90 6b .C.y.[R.._.U...k 0160 37 69 9c 02 81 00 44 b3 2b 01 da 29 60 03 7e 09 7i....D.+..)`.~. 0170 62 ba 84 8e ef b3 bf 7e 64 8d b2 70 a0 9e f7 b7 b......~d..p.... 0180 1a 7c 20 d1 51 e3 be a6 69 9c 7e 8c 41 3e 58 45 .| .Q...i.~.A>XE 0190 3f 9b cc a1 1a 58 a9 05 92 49 57 5c 6b 3b f4 a3 ?....X...IW\k;.. 01a0 13 74 ad 3f 94 2d 47 09 02 7d 6b 9c 75 83 8a cb .t.?.-G..}k.u... 01b0 04 6f ae f5 69 74 a0 52 30 01 77 40 40 ac 57 17 .o..it.R0.w@@.W. 01c0 27 bd 1e a4 12 83 95 e8 7b 01 50 f3 14 bd 95 ad '.......{.P..... 01d0 a6 00 30 57 21 99 2e e8 36 95 e8 9e 72 01 6f 36 ..0W!...6...r.o6 01e0 0b bd 53 75 c0 88 6a 56 8e fd d6 24 d0 cb c7 c6 ..Su..jV...$.... 01f0 78 df c4 7d bf 71 77 2f 6d 21 a4 aa 32 df ac ac x..}.qw/m!..2... 0200 e5 f0 c0 ba 7e 8d dd 0f 10 64 4f ad d7 75 e9 26 ....~....dO..u.& 0210 07 ab be d6 4a 38 2b 96 c3 bb b1 61 22 c6 17 97 ....J8+....a"... 0220 62 ae bd 79 9c 5d c4 aa 20 36 af e0 b6 75 ac 40 b..y.].. 6...u.@ 0230 d0 80 49 b1 fc c0 f8 16 62 6e 3b 03 fb df 22 b1 ..I.....bn;...". 0240 ff 06 86 34 d0 f7 b1 d1 87 20 25 2d 22 c5 e0 cc ...4..... %-"... 0250 ed 47 a0 69 98 e2 f1 c3 a7 e7 aa b5 39 0e 1a be .G.i........9... 0260 5b 19 7a 06 45 86 df 84 4b 58 84 a8 a8 db 73 76 [.z.E...KX....sv 0270 55 ef 48 ec 9c 84 c9 6f 02 35 bb 7a ed bd b0 8d U.H....o.5.z.... 0280 ed ed 16 ce 4a 8f 6b 3d 7e 23 f3 26 4a c3 f5 9e ....J.k=~#.&J... 0290 94 a6 50 8b c2 4c 98 9b bf f2 0d 1d 74 17 5f e5 ..P..L......t._. 02a0 0e e3 4a d8 e3 16 44 87 3e ef ae 35 ff 9f e2 e7 ..J...D.>..5.... 02b0 e0 5e 85 02 97 04 38 3b e1 b2 3d cf af e3 9c bd .^....8;..=..... 02c0 3e 48 8d ce 8e 04 ff a0 af 5c 66 91 0f c9 69 d7 >H.......\f...i. 02d0 ec 42 ba 61 ed 73 2d ed 39 08 e3 0b a1 9c d2 40 .B.a.s-.9......@ 02e0 4c 5c 0a 5f 0d 81 d2 f1 7d 71 2a 4e 2d b3 4c f6 L\._....}q*N-.L. 02f0 87 b6 79 7f a0 26 3c 85 32 64 8d a2 ad 1d 15 31 ..y..&<.2d.....1 0300 83 15 a3 f2 b9 19 32 31 b7 0c 18 09 b1 ca 0c af ......21........ 0310 57 dc 07 9e 00 62 99 11 c6 0b c4 13 65 50 1e 34 W....b......eP.4 0320 96 6c 7f 22 4b 29 92 4c 29 7a de c7 5e 57 fb 3f .l."K).L)z..^W.? 0330 39 d1 26 c3 e0 a5 b6 f0 5b 67 c4 37 72 41 da 95 9.&.....[g.7rA.. 0340 01 5c e2 b7 af e1 82 81 3c ca fa 88 54 f3 2f 0f .\......<...T./. 0350 fc 7a 93 67 a9 dd 9c f6 a4 76 11 c6 aa 08 60 a7 .z.g.....v....`. 0360 24 39 1e 52 01 88 1d 17 37 70 88 ef a9 f4 1f 38 $9.R....7p.....8 0370 c7 3d d7 d9 47 ef 8f 0d a9 b6 84 d8 21 04 d3 5c .=..G.......!..\ 0380 bd 39 f0 02 17 44 ac d4 b9 33 62 61 a0 61 92 0d .9...D...3ba.a.. 0390 b2 c7 5d 49 58 2c bc a7 e9 53 6f d0 7b 66 df 65 ..]IX,...So.{f.e 03a0 5f ea ad 02 ab 8b 25 8f 84 17 b2 77 9d fa cc c8 _.....%....w.... 03b0 65 17 24 b6 46 01 ee 0d b5 bf 5f 47 32 3f e8 38 e.$.F....._G2?.8 03c0 d4 bd 53 e1 00 5e d2 0b f1 c6 31 40 58 aa 7e 06 ..S..^....1@X.~. 03d0 43 0c de 9c 38 78 05 e7 14 3b b9 4a be fd 8a b8 C...8x...;.J.... 03e0 ee 6c 90 d8 d3 b8 22 5d 76 07 91 88 0b 00 4b 1c .l...."]v.....K. 03f0 27 13 7b 55 17 ef 06 de 2a 8d 96 a3 2f 9c 4c 35 '.{U....*.../.L5 0400 6c 56 00 c7 76 1a 8c c3 70 66 66 c7 43 58 ef 3b lV..v...pff.CX.; 0410 f1 84 a8 a7 12 28 80 41 0e 9c 6d 59 84 86 e5 1e .....(.A..mY.... 0420 f5 d2 47 87 41 2c 7d e5 3d 9c 19 75 7d 98 bf 4e ..G.A,}.=..u}..N 0430 8f d5 69 39 3b 5a 9c 66 5c c7 be d8 1f ce a6 7f ..i9;Z.f\....... 0440 ff ca f7 1e e4 ad 65 2b 60 ad b3 ac 3a 3a 44 8a ......e+`...::D. 0450 cb ca 1b 67 ad a4 e3 58 14 13 5d 3c 97 78 ab f9 ...g...X..]<.x.. 0460 4c fb 97 24 6b d3 ca db d9 2a 29 65 b5 37 74 80 L..$k....*)e.7t. 0470 2e 11 17 9b ee 9c 04 64 8d 71 4c 64 54 ae ea d6 .......d.qLdT... 0480 c7 56 a4 5c 39 23 95 7a f5 44 90 bd 48 61 5b a8 .V.\9#.z.D..Ha[. 0490 5c b5 9b 08 14 ca ea 62 98 3d 5b 0e a9 42 5a 1f \......b.=[..BZ. 04a0 b3 fd e1 d8 88 6d 65 11 a8 f7 94 70 d0 33 60 d9 .....me....p.3`. 04b0 0f e3 1f 01 35 66 3d d8 71 94 b1 a4 e0 8c 8d c1 ....5f=.q....... 04c0 b2 4e d3 6a 5c e1 17 bb a8 7c 31 08 de 7d 39 9d .N.j\....|1..}9. 04d0 87 ba 81 92 8a b0 34 7f fd 67 4b da 04 ac f6 33 ......4..gK....3 04e0 4d d0 44 3a 19 af a2 b8 f8 0c 8f 85 71 08 59 5d M.D:........q.Y] 04f0 d9 cd 74 76 7d 91 1b 74 ff a5 a8 61 48 47 2d 15 ..tv}..t...aHG-. 0500 24 7a d3 87 fe 56 6d 2f b0 d7 0b ca 6c c3 5e 01 $z...Vm/....l.^. 0510 08 69 f4 25 55 fa 92 62 aa d4 c4 81 c6 c0 1c 16 .i.%U..b........ 0520 12 27 cc 2d 40 15 2b e9 36 8a 54 01 4a 57 51 df .'.-@.+.6.T.JWQ. 0530 35 c2 50 c5 0d 62 44 cc 70 f5 af c7 70 e3 33 86 5.P..bD.p...p.3. 0540 31 fa 23 cc cd 07 54 84 b0 a2 55 2a 26 ff ef e5 1.#...T...U*&... 0550 43 42 b3 40 ea 0e 12 69 59 ab 93 86 15 85 de 70 [email protected] 0560 e6 d3 d5 52 f9 e7 61 2e 16 c4 d1 dd 12 0b d8 f7 ...R..a......... 0570 05 d1 d6 24 ef 6f 74 fc 00 c5 a6 75 21 0d e2 5f ...$.ot....u!.._ 0580 80 91 17 18 0a 42 45 cb 17 8f 5e f1 99 56 00 a3 .....BE...^..V.. 0590 ce cd 72 35 89 15 fb 1c 5f d6 48 2c c0 89 2b 0b ..r5...._.H,..+. 05a0 e4 c1 f9 32 50 80 0f 53 ...2P..S No. Time Source Destination Protocol Length Info 862 9.793163 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=44077 Ack=889 Win=1002 Len=1448 TSval=537697 TSecr=727560 Frame 862: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 44077, Ack: 889, Len: 1448 Data (1448 bytes) 0000 3e e0 c2 05 4b c3 89 50 81 ad 71 02 e7 0c c9 d4 >...K..P..q..... 0010 cb fe 50 a7 d0 f3 00 95 fa 96 62 77 9b a2 c3 0b ..P.......bw.... 0020 1a 0c fa 8a d0 43 66 4a 81 02 e5 71 6a be d5 67 .....CfJ...qj..g 0030 0d 90 bc 82 9c b8 9d 3f 7b 4e 9f d2 14 52 ee 69 .......?{N...R.i 0040 69 8f 86 f3 8f c3 25 0c 64 e9 b2 4e 1e a4 b0 fe i.....%.d..N.... 0050 81 71 38 3d a8 25 4d f6 00 a6 80 f4 a1 00 b9 16 .q8=.%M......... 0060 da 54 3f fe 24 95 ee 65 ed 12 35 c7 39 59 8d c3 .T?.$..e..5.9Y.. 0070 29 ff 74 2a 8e 48 e6 1c 77 72 dc 18 e8 a9 01 78 ).t*.H..wr.....x 0080 0c 77 99 a7 96 b4 ff 46 fe 5b 38 11 67 86 b8 6b .w.....F.[8.g..k 0090 bc f9 fb 4e bb fc d8 36 f7 39 d0 b9 ff ea 51 0f ...N...6.9....Q. 00a0 87 6b 3c 59 f5 1a c4 61 8c 19 6d cd 59 15 c6 2b .k<Y...a..m.Y..+ 00b0 06 ae 66 35 b6 e5 3f 98 51 0a 35 6b c4 1c d4 07 ..f5..?.Q.5k.... 00c0 59 f8 9c d0 d0 7e 98 da 77 36 68 90 e1 78 47 f5 Y....~..w6h..xG. 00d0 33 c5 5a cb 82 84 70 63 65 68 96 8b fd e3 63 2d 3.Z...pceh....c- 00e0 14 dd 6b aa 5c 28 c8 3d bc 2c 69 07 89 08 a2 a5 ..k.\(.=.,i..... 00f0 7d 10 f5 72 b5 c6 70 de b8 05 22 de ed c5 21 8c }..r..p..."...!. 0100 b0 8b be 14 6f 71 1c c8 8c 47 54 ab 9e 05 63 3d ....oq...GT...c= 0110 e8 0c 09 b4 f7 d5 ae bf ef 0d c7 5d 77 e0 28 72 ...........]w.(r 0120 d1 4b 73 5f 15 f2 43 21 ee ad b6 7b 69 d9 fa 7d .Ks_..C!...{i..} 0130 41 69 a9 be a7 0b aa 74 1d 57 91 d4 eb 58 21 c6 Ai.....t.W...X!. 0140 e8 3d 8d f6 c6 b2 6d 65 d1 d3 19 ed 16 43 f1 f4 .=....me.....C.. 0150 e5 db 6e 56 81 6d b3 c2 48 a4 f3 00 04 c4 8f 3f ..nV.m..H......? 0160 df fb c5 23 97 83 e1 07 cc 73 69 9f 68 d6 d7 2f ...#.....si.h../ 0170 71 d5 b4 f8 59 bc 2c 7f 2b a0 d9 ac 9f 6e 97 e9 q...Y.,.+....n.. 0180 c9 9f 81 e1 e1 ea ca c0 1a ba 1b 9d fe f0 8f f1 ................ 0190 c1 19 4b 60 6a bc 1d ae 44 7f bf cc e8 2a f9 3d ..K`j...D....*.= 01a0 ec b8 ed 04 1d 93 fd f9 1f 6f f6 50 fa 7b 14 12 .........o.P.{.. 01b0 e3 71 76 06 47 97 87 07 2c 2e b4 a4 0a 88 29 dd .qv.G...,.....). 01c0 b9 4e b4 d1 de 5d 79 1e 90 f9 e6 0d 8f 42 c1 22 .N...]y......B." 01d0 d3 83 79 3c 0a d2 ff 71 8f 2a b9 46 ff 5d 9c 22 ..y<...q.*.F.]." 01e0 e3 e7 ad e4 ea d8 4e f9 15 fb ed 5d a2 9b 7e 8e ......N....]..~. 01f0 1d d9 0c 3b e5 08 29 18 dd 96 8c 91 c1 cf 7d 8f ...;..).......}. 0200 ae 2b d0 77 31 50 d4 32 8a 06 de 63 3e 6d 4c a6 .+.w1P.2...c>mL. 0210 88 82 e7 72 87 c7 5b eb dc 57 bc fb 88 3c a5 39 ...r..[..W...<.9 0220 85 62 ec 8e 83 8c b6 d8 81 ee f2 de 35 b2 22 6f .b..........5."o 0230 17 58 7b 13 43 aa fe 77 00 17 08 b0 a9 ac 75 53 .X{.C..w......uS 0240 ad 9a 99 b5 94 e6 20 92 93 95 ca d5 7e 94 d7 7c ...... .....~..| 0250 c7 df 76 2a 24 02 09 5b 92 07 ff 14 e1 8c 72 04 ..v*$..[......r. 0260 7c da 97 3b f0 b9 dc 1a e4 2c 77 b7 7b 6f 70 43 |..;.....,w.{opC 0270 e8 3d 00 1e bb 32 8d d9 5a 7f 37 d2 2c 14 22 ab .=...2..Z.7.,.". 0280 dd da a5 ad 79 06 fe 21 d4 3a e6 61 4b 4c c7 21 ....y..!.:.aKL.! 0290 3d 30 c0 6e 06 db 82 22 fa 3c 92 25 21 8b c5 0c =0.n...".<.%!... 02a0 b3 be ee 8d 04 49 7c 4f 56 b8 07 bd 4f 92 d7 e2 .....I|OV...O... 02b0 ae ad bd 3b 0d 5f f6 dc 22 3d 15 b1 09 b0 b9 4a ...;._.."=.....J 02c0 89 0e a1 96 09 4a b3 6d a2 dd ff 97 a5 4b 35 74 .....J.m.....K5t 02d0 50 09 49 80 38 a1 2a 63 7f 98 79 b0 96 b5 0a a4 P.I.8.*c..y..... 02e0 e7 f2 7c d6 ba 4c 12 24 04 4a 8b fc 2f 76 bf 26 ..|..L.$.J../v.& 02f0 a5 e2 ba e0 cf 17 54 24 ac 9c c4 f4 93 fa 1e d9 ......T$........ 0300 d0 a1 e1 c8 34 d0 23 08 ab 11 10 5b e9 4b f9 87 ....4.#....[.K.. 0310 8a da bc 2b fe f5 50 1f 74 75 cc 9e 98 92 5a c3 ...+..P.tu....Z. 0320 25 9d d4 fa ca f3 5c ee 67 cf 02 c2 ab bf a7 38 %.....\.g......8 0330 67 3a c2 40 19 0b b7 be ff 51 f2 d8 22 88 42 f4 g:[email protected]..".B. 0340 23 5e fe 2f 28 ef 98 c5 65 79 c0 e4 49 6d cc ea #^./(...ey..Im.. 0350 ed 94 2d ad 43 de 37 a9 e6 50 0f 15 93 19 63 a8 ..-.C.7..P....c. 0360 2f 57 b1 d1 1d 64 57 93 68 b6 d4 d6 3a 69 85 52 /W...dW.h...:i.R 0370 02 e4 7e 36 b1 a7 85 48 ab d8 ab e7 c6 55 c4 6f ..~6...H.....U.o 0380 ec 72 23 7a df 85 a3 8e 5e ed 5c 08 32 d6 fb e8 .r#z....^.\.2... 0390 8b 55 14 7a 73 ff c1 c8 95 23 18 a8 7c 3e 3f 60 .U.zs....#..|>?` 03a0 6b 21 7b 82 c6 c9 3e c4 7c 24 d0 de 94 ea 45 c3 k!{...>.|$....E. 03b0 cd 85 d2 2c cb 32 d0 6e bc 56 ab 1a 22 45 f9 8a ...,.2.n.V.."E.. 03c0 6c 83 c7 1b 96 d8 c6 46 a5 a1 3c d6 34 f9 95 0c l......F..<.4... 03d0 46 5f d1 82 75 52 74 fd bf bd 65 12 9c a8 2a c1 F_..uRt...e...*. 03e0 df 6c 35 04 27 5e 81 fc 7d 2c d4 2b a4 03 a5 3e .l5.'^..},.+...> 03f0 a7 eb 41 bf 23 da 9e 1c 47 12 03 cb de c3 b1 4d ..A.#...G......M 0400 40 f6 4f 30 40 f1 36 d1 89 0f d6 fa 48 03 18 f9 @[email protected]... 0410 d9 d5 45 09 4f 30 42 ae e9 20 e9 9e 1d ba 24 94 ..E.O0B.. ....$. 0420 33 b8 3c 6c 17 ea 96 8c b7 66 0b b4 ac 2a 2d 20 3.<l.....f...*- 0430 11 60 9a c3 eb cf 9c 38 17 61 e0 a6 d8 a9 49 75 .`.....8.a....Iu 0440 90 01 0b 63 ff 53 20 91 ff 21 14 17 3f 04 c3 e2 ...c.S ..!..?... 0450 f8 b0 da e1 48 b8 35 c5 9a 2d 00 d3 6b bf 28 a0 ....H.5..-..k.(. 0460 82 a3 41 6a 59 1d af bd 8f 95 8f 5c f0 d7 0a ce ..AjY......\.... 0470 3b ee ee 07 61 41 3d a2 05 56 20 59 a6 e1 97 6b ;...aA=..V Y...k 0480 72 7a bd cf 44 de 96 15 25 f2 1f 31 26 2d 2c 65 rz..D...%..1&-,e 0490 80 3e d8 f4 e9 0f c6 48 13 e1 41 61 83 59 45 bc .>.....H..Aa.YE. 04a0 89 cf ca ea b7 e1 a7 d2 d5 79 12 b6 2b 29 e8 92 .........y..+).. 04b0 c9 1c 68 54 01 17 49 4e 28 db 65 01 f9 2c 14 fb ..hT..IN(.e..,.. 04c0 42 d8 23 c6 c4 f0 e4 05 15 8e 16 15 1b 63 16 e3 B.#..........c.. 04d0 40 e5 6d c4 d3 bc be 22 ea 81 91 69 60 84 92 d3 @.m...."...i`... 04e0 91 87 ad 5e 30 5c f7 61 18 7c 0b d3 44 1d dc b8 ...^0\.a.|..D... 04f0 5c 83 1a 48 b5 79 90 f0 d6 ad a0 31 35 57 22 c2 \..H.y.....15W". 0500 2b e7 e6 7a 79 a2 89 ea 50 4a 3c ed fa d0 ba 82 +..zy...PJ<..... 0510 6c 89 6c ab 5a 14 47 71 50 7c e4 2a 8a 0f f2 94 l.l.Z.GqP|.*.... 0520 59 8a e4 d3 56 c5 3a 91 81 26 c8 6d 13 33 d3 96 Y...V.:..&.m.3.. 0530 a4 64 70 8b 23 80 9c 0d af d5 92 a8 26 80 85 0d .dp.#.......&... 0540 12 8f c4 1f 31 12 a0 95 69 4c 92 ba 53 ae c7 a7 ....1...iL..S... 0550 e1 61 c0 ad 3b c5 ec f2 41 0a c7 64 c3 1c 40 26 .a..;...A..d..@& 0560 6d 93 8d a3 de 2a 41 df e8 ba e9 ce 84 de ea 25 m....*A........% 0570 7c da 2a ce 26 7b ea 19 76 77 2b 98 de 79 3a 14 |.*.&{..vw+..y:. 0580 ff 2c a2 1d d7 7d e2 f0 3c a5 a9 01 d0 a6 84 47 .,...}..<......G 0590 4c 2e 41 9f f5 39 f9 55 82 9d 79 62 31 5e 15 b2 L.A..9.U..yb1^.. 05a0 90 fb f6 17 d2 09 13 e5 ........ No. Time Source Destination Protocol Length Info 863 9.793272 192.168.10.1 192.168.10.245 Syslog 348 LOCAL1.INFO: Oct 3 19:44:27 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo.kaspersky.com" arg="/index/u0607g.xml.klz" sent_bytes="211" rcvd_bytes="1400" (HTTP-proxy-Visitor-00) Frame 863: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:27 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo No. Time Source Destination Protocol Length Info 864 9.793324 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=889 Ack=45525 Win=65535 Len=0 TSval=727580 TSecr=537697 Frame 864: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 889, Ack: 45525, Len: 0 No. Time Source Destination Protocol Length Info 865 9.793411 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=45525 Ack=889 Win=1002 Len=1448 TSval=537697 TSecr=727580 Frame 865: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 45525, Ack: 889, Len: 1448 Data (1448 bytes) 0000 f8 d2 b3 cf 8e 94 54 5d 8e 62 26 c7 dd 66 15 a7 ......T].b&..f.. 0010 54 8d d9 72 f3 c4 32 5f 8d 53 61 6d ae 17 1f 70 T..r..2_.Sam...p 0020 17 e9 09 4b 8c 57 36 b5 43 3a 1a 02 2c 24 24 29 ...K.W6.C:..,$$) 0030 02 15 3a 26 e4 39 58 a5 8b d9 55 2f bc e2 fe 67 ..:&.9X...U/...g 0040 c8 df 85 49 b7 ee c2 04 d2 b8 94 46 41 6e 31 6e ...I.......FAn1n 0050 59 4a 33 be 78 ff bd 46 5a fc cc 6e 3a 24 4e 0c YJ3.x..FZ..n:$N. 0060 e4 e2 bd 69 18 d7 82 27 af 5d 4f 2a d1 5a a8 d6 ...i...'.]O*.Z.. 0070 50 33 a9 66 86 7f 39 b6 3c e4 a1 6d 18 eb 01 a8 P3.f..9.<..m.... 0080 8d 4e 90 ae cd 54 50 98 4b f6 9c 4b 2c a5 bd f1 .N...TP.K..K,... 0090 af 39 7e a1 24 c0 5d 6f d4 15 f5 64 44 5e 55 6a .9~.$.]o...dD^Uj 00a0 51 41 58 58 79 d8 31 2f 6e 3a 5b 58 4c 98 d1 1e QAXXy.1/n:[XL... 00b0 4d 26 e3 af 27 df 5c 39 09 a6 09 81 46 15 24 2a M&..'.\9....F.$* 00c0 f6 79 41 f1 31 5f f5 73 7d 75 72 57 70 b4 fe 32 .yA.1_.s}urWp..2 00d0 73 51 45 6c e1 90 f8 ce 80 3d a8 d7 83 b5 3e 94 sQEl.....=....>. 00e0 9e 72 6b 72 5f 38 79 77 90 1c 91 21 16 76 36 64 .rkr_8yw...!.v6d 00f0 f7 c5 25 96 59 1d 21 81 3f 15 d9 62 4d e5 02 96 ..%.Y.!.?..bM... 0100 5d 43 6e e7 67 7a 37 3e 87 e4 73 7a 73 12 f2 08 ]Cn.gz7>..szs... 0110 f6 3a 45 da 6e 66 93 f5 3c a6 a0 8b 77 93 51 a2 .:E.nf..<...w.Q. 0120 74 66 e2 1e 60 02 02 4f e3 bc 2c 08 b3 a9 b7 aa tf..`..O..,..... 0130 7c e7 cd d5 93 d0 71 a0 56 71 8c e5 dd f1 eb 6a |.....q.Vq.....j 0140 9b 94 cc 1a 18 84 36 53 15 e6 55 30 e2 77 d3 d3 ......6S..U0.w.. 0150 7a ec d7 35 20 2a e8 5b 3f a4 f5 f7 8f 8c d9 18 z..5 *.[?....... 0160 f5 03 b8 db f5 68 23 6d 04 3f af 6a 33 77 9d 80 .....h#m.?.j3w.. 0170 18 55 1a f0 9f a4 c9 a9 78 f6 41 a5 94 e7 58 66 .U......x.A...Xf 0180 30 35 be ac 67 90 88 13 98 38 22 02 04 15 43 6a 05..g....8"...Cj 0190 32 5f d4 77 28 dd 8b 73 ea ab 1b 2f 18 97 9d 5f 2_.w(..s.../..._ 01a0 71 bd 88 1c 89 82 e2 7a 12 fd af 5b fc ff 3e 3e q......z...[..>> 01b0 e6 e3 c8 45 e9 7b df 10 a4 5d ed 99 48 f7 76 30 ...E.{...]..H.v0 01c0 e8 fb f1 5a 02 3c 04 0b 2f c6 b9 44 87 21 20 e7 ...Z.<../..D.! . 01d0 b0 05 c9 46 98 aa 87 bf d6 dd 11 41 ea 24 c0 d9 ...F.......A.$.. 01e0 4a 1f 0a 5b 0e 86 f8 60 e6 68 fb 02 c7 3a cf 3b J..[...`.h...:.; 01f0 95 20 68 43 2e e7 fd 8f 44 e5 c7 bb 66 68 7d e0 . hC....D...fh}. 0200 04 76 c7 eb f3 84 bf 18 dd f2 e7 85 76 ed 23 ad .v..........v.#. 0210 b2 f3 e2 d1 65 68 81 dd 07 3c b6 3d 44 15 29 b2 ....eh...<.=D.). 0220 bb aa 3f ae ee 3c 8a 9e 71 2e f8 91 9b 11 3a c0 ..?..<..q.....:. 0230 6e 75 a0 c4 4f 53 ac 07 30 f9 de 67 37 2a ed c6 nu..OS..0..g7*.. 0240 4e 3b a8 e8 e8 b8 19 e4 35 54 f4 20 a5 f9 38 b2 N;......5T. ..8. 0250 5f e9 8f b7 76 66 1c e3 e5 fa 3d ec 97 19 4b 05 _...vf....=...K. 0260 44 67 68 61 c8 1f d3 d6 e8 17 f5 5c 4f fc a2 1c Dgha.......\O... 0270 bd 4d b5 c0 61 fe 00 50 1e 00 4e 5a 98 98 c9 31 .M..a..P..NZ...1 0280 45 a7 e0 9a 1d 5a 1a df 5c 4b 50 3a 3d fe 99 2b E....Z..\KP:=..+ 0290 26 75 2b 49 eb c3 64 64 f6 5d 27 ba 6d 45 b5 6e &u+I..dd.]'.mE.n 02a0 e9 e7 ba 5f 0d ed 17 65 2b f3 3e 1b c0 47 9a 83 ..._...e+.>..G.. 02b0 e6 89 ca b1 53 9b 7c 86 bd 2b e3 01 69 0b 0a d1 ....S.|..+..i... 02c0 64 76 0b 29 35 ae 9f 8f d3 9f 82 cd d9 c8 aa b7 dv.)5........... 02d0 4c a7 04 5e 6a fc fd fb 40 d3 c6 c2 72 04 e3 49 L..^[email protected] 02e0 1c 47 47 e9 13 a9 3e a2 b4 56 b9 cd 4c d6 19 76 .GG...>..V..L..v 02f0 8b 0c 7e b7 d8 7a 53 06 35 d0 40 df 39 37 bd 40 [email protected].@ 0300 b1 a6 b7 1d 45 76 3b 6d 58 d1 ce dc f1 79 8d 5c ....Ev;mX....y.\ 0310 f2 c0 ad de aa b8 83 cb b3 7a cd 61 7c 9f f1 04 .........z.a|... 0320 dd c3 74 f9 12 ec 1f c4 38 2e 89 5c 57 23 b6 c0 ..t.....8..\W#.. 0330 83 6e 24 dd 1b 61 e6 60 f1 46 4e f9 61 2f 92 31 .n$..a.`.FN.a/.1 0340 42 e7 40 3a bd 87 e0 1c 70 61 73 0d 3c 81 dd e3 B.@:....pas.<... 0350 06 01 86 73 e3 61 41 02 f5 a0 48 27 02 80 6b bf ...s.aA...H'..k. 0360 f5 87 b4 93 00 d9 b7 11 77 09 b2 2f 18 c0 b8 c6 ........w../.... 0370 98 57 93 11 f5 d6 08 fc ec 34 b2 3c 31 8c 78 d0 .W.......4.<1.x. 0380 76 05 a3 8c 3c 12 75 32 0a 31 90 ed 96 38 f1 e5 v...<.u2.1...8.. 0390 9b 43 1c d6 2e ef 0e 13 ca 61 8e c8 8d e8 12 ed .C.......a...... 03a0 d4 ba fb 62 c3 f6 f4 38 71 b6 55 6a e2 f8 8b 82 ...b...8q.Uj.... 03b0 8e 0b 8e 6a b3 61 49 0f bd 14 62 ae fa 47 a7 88 ...j.aI...b..G.. 03c0 ea 07 c2 fb d3 80 1c 94 02 ff 82 6e 46 a5 9d fe ...........nF... 03d0 9f 5d de 5a 25 b5 bb b1 21 22 9e fa dc 3d 66 23 .].Z%...!"...=f# 03e0 89 b1 6e 45 7f ac cd ba ee 16 07 09 c5 d3 7c 49 ..nE..........|I 03f0 e0 2c ac 19 40 a2 10 4a 01 86 4d 4c d1 17 18 27 .,[email protected]...' 0400 44 81 40 7d cc 3e f8 8f 30 6c 13 fa 46 1d fb 4e D.@}.>..0l..F..N 0410 4a 43 9e 30 0f 7b 26 f0 b7 a6 8d 24 88 df 2e cc JC.0.{&....$.... 0420 5d 91 61 fb 80 4f a8 b9 ce 5a 08 e3 83 91 e1 09 ].a..O...Z...... 0430 95 98 75 8a d0 e7 52 30 c4 f0 7c 35 52 ca ca 51 ..u...R0..|5R..Q 0440 7d 5c 63 79 08 2f dc 2f 34 5e 08 eb 99 97 90 d9 }\cy././4^...... 0450 92 38 48 21 8f 95 0e ad 63 f6 d5 16 24 03 90 b4 .8H!....c...$... 0460 ce 0f bc 9d df 19 1f e9 81 4d 91 1a 21 ef 39 3e .........M..!.9> 0470 67 7d c0 a1 38 6e e1 93 ee 5a db ee 5a 52 e0 c0 g}..8n...Z..ZR.. 0480 1f fd a8 67 21 c5 74 43 14 8a b6 04 53 63 f7 f4 ...g!.tC....Sc.. 0490 f1 47 3c 8a 3f d7 3f c4 51 63 bb d3 e1 ab c2 d0 .G<.?.?.Qc...... 04a0 ec ff 25 11 eb 90 d9 7a 99 7e f1 68 3f ae 34 83 ..%....z.~.h?.4. 04b0 f5 74 24 0a 1d 76 50 9f 43 99 05 73 99 9c f3 5b .t$..vP.C..s...[ 04c0 12 f4 1b d1 0c 03 1b 34 92 e5 b2 7f 7d 19 e7 8e .......4....}... 04d0 5b 9a e0 14 f0 6e 46 8a 22 c9 42 99 82 52 6d 71 [....nF.".B..Rmq 04e0 fd 9b 3a de 9d 8f e5 18 9f d8 31 b9 10 cc ff cc ..:.......1..... 04f0 1d 12 46 19 52 1c 01 33 e8 e0 b6 28 f1 31 92 49 ..F.R..3...(.1.I 0500 e1 bf 92 d2 de 6b 32 8f 8b 8c eb 1e 9b 5e c3 1e .....k2......^.. 0510 93 86 a9 3b 85 ae cf b1 fa 67 a1 58 98 cf 1d cb ...;.....g.X.... 0520 60 4e 74 03 d7 ce 48 f8 86 22 75 5a 4a 64 75 ff `Nt...H.."uZJdu. 0530 a2 85 a2 3e 9d eb 51 80 10 c5 63 7c 3a 66 87 e3 ...>..Q...c|:f.. 0540 18 e0 db bd a3 9b 66 50 0b 65 54 8a 65 64 89 fa ......fP.eT.ed.. 0550 83 8c 8c 12 ce ee c8 33 71 97 bc 17 c6 45 02 90 .......3q....E.. 0560 f3 40 a5 a3 d2 2f b9 9d 01 af f5 8b c8 a6 53 02 .@.../........S. 0570 85 e2 f0 9e f0 41 33 47 7b d4 3c 2f c3 8d 7c 41 .....A3G{.</..|A 0580 eb eb f0 34 59 c8 f0 4a 4c 56 19 a1 cf 9c 2f 2b ...4Y..JLV..../+ 0590 d5 a4 ab f1 83 95 38 9b 9b 3c 09 de 8f 0f 11 60 ......8..<.....` 05a0 69 4d e1 f3 87 a2 43 10 iM....C. No. Time Source Destination Protocol Length Info 866 9.793493 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=46973 Ack=889 Win=1002 Len=1448 TSval=537697 TSecr=727580 Frame 866: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 46973, Ack: 889, Len: 1448 Data (1448 bytes) 0000 74 b4 7a da e6 d9 44 02 42 32 b9 bf e0 ed 59 d8 t.z...D.B2....Y. 0010 76 89 98 03 b2 ed 7d e3 7b 0e e0 32 30 36 45 e6 v.....}.{..206E. 0020 76 5f 26 c7 f1 f9 2d 49 c5 96 88 b7 90 07 06 9d v_&...-I........ 0030 1b e1 49 d4 2b 60 f5 66 cc 9f 79 48 89 a0 eb e1 ..I.+`.f..yH.... 0040 f6 28 31 a3 ed a1 d7 b6 88 c6 c2 8a 24 fd 65 dc .(1.........$.e. 0050 e0 44 e5 02 38 49 32 bf 11 fd fc 96 7a b6 1e 6c .D..8I2.....z..l 0060 18 d7 b2 7a 0a b4 ba ff 69 7a 73 2e 07 ce af 5e ...z....izs....^ 0070 b9 e1 27 15 8b c3 4e fd 3a 21 b3 b9 43 cc 2b 02 ..'...N.:!..C.+. 0080 c7 4c 22 1a 86 5f 51 29 e3 23 5f f9 fe 6d d8 73 .L".._Q).#_..m.s 0090 1f ba d6 8d 32 56 ca b1 b2 e9 d9 91 16 40 2e c9 ....2V.......@.. 00a0 17 27 28 f1 68 c9 30 0a 0f 94 3d 0c 97 38 26 4a .'(.h.0...=..8&J 00b0 5c b7 8d a1 8f cb 70 b5 59 f1 4b 51 77 f1 c2 51 \.....p.Y.KQw..Q 00c0 67 5d 9e dc 35 94 84 38 52 8d 9a d2 f5 2e 24 2b g]..5..8R.....$+ 00d0 28 9c 74 23 32 a1 51 91 cc be 18 54 9b 57 0e ed (.t#2.Q....T.W.. 00e0 de fb 53 53 28 1b 1d 1e 8d 62 34 18 a8 5e ca ea ..SS(....b4..^.. 00f0 d1 90 c1 3a e7 29 54 e7 3d 64 81 6e 37 a0 1c 83 ...:.)T.=d.n7... 0100 ab 36 6f 5c e9 01 19 8b b1 a2 32 20 9b fd 41 44 .6o\......2 ..AD 0110 11 9b ae 62 93 c4 6f d1 c2 67 65 6d ff db 2a 8d ...b..o..gem..*. 0120 4f 9f 95 d8 93 a5 1d 83 ae 56 5a be dc e6 7c e2 O........VZ...|. 0130 29 dc 39 18 0e 9d 66 cf cc 1b 30 5c 2c 25 87 65 ).9...f...0\,%.e 0140 21 09 d9 8a b8 6f 0b fd da 1c 9a 1b be 97 50 2f !....o........P/ 0150 29 23 84 f8 c0 31 5b d2 e9 da 74 b1 87 e2 12 99 )#...1[...t..... 0160 0d e9 51 68 d9 7b 63 34 94 2b c1 ca fa 67 02 2e ..Qh.{c4.+...g.. 0170 1f 8c 9e 0c e4 4b 1f f0 3e 98 5f 22 0c db 96 c2 .....K..>._".... 0180 6b cc e9 75 48 c6 c1 2f a3 fe 06 6c 9f 2e 6f 51 k..uH../...l..oQ 0190 df 8e d8 cb 40 03 20 a5 6a 58 8d b5 7c c6 39 ec ....@. .jX..|.9. 01a0 3a 70 9b 9a dc ec ea 6d ef 30 94 6f 9a 43 d1 95 :p.....m.0.o.C.. 01b0 3a 4e ef bb 98 49 0c 88 06 ed 4f f3 40 67 e1 57 :[email protected] 01c0 a2 22 26 78 8f aa d4 73 00 98 12 cf 0b c3 56 25 ."&x...s......V% 01d0 c0 1e 08 7d 6d 8e 7d b0 ef fe 31 87 30 64 fc 3f ...}m.}...1.0d.? 01e0 7c 86 39 72 28 fd 6e b3 8b 30 82 3d 66 6a ab c2 |.9r(.n..0.=fj.. 01f0 f0 54 a7 65 21 1f 10 08 e6 35 dc ef d7 8a 41 cc .T.e!....5....A. 0200 c7 c5 be 51 6f 1f a5 fd a2 ba 2e 73 26 e0 7d 50 ...Qo......s&.}P 0210 d0 9e 7f 93 e4 cc b8 f2 fe 67 22 20 e0 48 dd 0b .........g" .H.. 0220 22 52 6b 58 cd ae f9 6e 4a d4 2b 8c df b7 01 3c "RkX...nJ.+....< 0230 b9 8f 04 29 e6 28 e5 41 2d 91 5d 35 6f 66 9f 31 ...).(.A-.]5of.1 0240 a6 dd 76 38 64 c2 12 ab 89 c7 c5 3e 0e 8a b7 44 ..v8d......>...D 0250 a1 e1 fa fc 12 21 bf 00 df a1 22 eb d8 30 f9 d0 .....!...."..0.. 0260 bd a5 b8 3b ea da b4 33 00 e2 ea e0 f1 44 39 ed ...;...3.....D9. 0270 1c ed e5 10 b7 e6 7c 1d 37 3f ea 73 0f 01 d6 44 ......|.7?.s...D 0280 89 4c aa 94 3c d4 20 02 92 5e 37 79 37 c0 ae 6e .L..<. ..^7y7..n 0290 a1 87 67 84 14 92 c5 4b d9 2a 8f 22 22 1d 68 ce ..g....K.*."".h. 02a0 a0 11 77 0c 28 a8 37 c4 c5 55 a0 f1 95 62 f0 96 ..w.(.7..U...b.. 02b0 8c 01 50 97 8a e4 03 de 3e 55 ac fb fb 4c 76 38 ..P.....>U...Lv8 02c0 24 38 05 c6 9b 29 16 72 9b 1a 43 fe 6f 07 68 ef $8...).r..C.o.h. 02d0 f5 09 53 ce d4 68 d5 7b 9c 15 62 7b 20 b2 0b 90 ..S..h.{..b{ ... 02e0 4e fe dd 9e 09 1e 6f 70 20 04 94 48 67 d9 ad 88 N.....op ..Hg... 02f0 f7 5b ce 5c 16 86 cc 0d 0e bc d8 b8 12 a6 ca 9e .[.\............ 0300 72 fa e6 e5 35 22 97 40 2e ad ae 4e 80 b8 ac 4c r...5"[email protected] 0310 19 83 9c 30 28 82 a7 51 91 73 8d 43 74 75 a9 23 ...0(..Q.s.Ctu.# 0320 43 e8 b2 93 fd e2 d9 d3 d7 c5 b4 01 6e 21 4b 39 C...........n!K9 0330 81 57 7d 85 40 50 7e 71 10 48 13 13 92 c1 01 72 .W}.@P~q.H.....r 0340 0b bd e4 c1 f8 1f 40 9f 00 76 0a f0 af f4 8c db [email protected]...... 0350 75 e6 48 12 65 0f b1 a9 6f c4 91 8f 6e 77 cf d5 u.H.e...o...nw.. 0360 85 c2 4d 54 9a a7 dc 81 92 c2 3f 83 de 7a ed 62 ..MT......?..z.b 0370 87 ae 0d 9e dd 76 de 8a 45 a9 d8 c7 18 e3 61 04 .....v..E.....a. 0380 f7 81 65 c4 b6 6a e8 b5 8c a4 4d dc ca 83 a4 91 ..e..j....M..... 0390 70 dc 36 2c 6e 87 ae c9 a0 6f f3 1a 79 73 b4 1d p.6,n....o..ys.. 03a0 8f f9 ca 08 4e f1 6f 31 85 57 4b 2d 48 b1 a1 c2 ....N.o1.WK-H... 03b0 52 90 d9 22 fd c6 3b b4 00 ac 79 3d 2b 3e fc 54 R.."..;...y=+>.T 03c0 88 cc 60 9c 24 ad d3 e0 f4 44 af 8e 8b 92 64 da ..`.$....D....d. 03d0 4d cd 09 fa 66 73 fc bd 6f 7b 07 64 7e 9a 92 20 M...fs..o{.d~.. 03e0 86 62 9f 15 83 5c dc b8 ff ff b1 cf b8 95 5c 42 .b...\........\B 03f0 b7 13 99 57 d4 82 52 48 83 94 a3 a6 3e 07 dd 7c ...W..RH....>..| 0400 52 41 86 55 07 46 d0 58 7b 77 50 52 f4 e2 56 e3 RA.U.F.X{wPR..V. 0410 ca 9b 07 d9 46 f4 c3 7f 22 76 f1 51 f8 4a c3 1f ....F..."v.Q.J.. 0420 74 40 25 f4 5b 16 74 fc af d2 ed 50 d2 4c f8 a8 t@%.[.t....P.L.. 0430 be b3 c2 66 81 16 3a 1f d2 00 ab 82 9f db 49 8c ...f..:.......I. 0440 2a e3 2f ea 38 c2 4c c4 20 96 2c 9d 5d b7 9f 2a *./.8.L. .,.]..* 0450 8b 23 16 56 f9 6e 4f 9e ba 9a d5 87 92 cd f5 e8 .#.V.nO......... 0460 de 44 9c fe bb 5b 55 8e c8 72 7d ba da 12 4c e4 .D...[U..r}...L. 0470 ac a5 c7 7b 8e 9c a1 76 66 8a 51 e5 85 10 5c ac ...{...vf.Q...\. 0480 e5 05 6a cc 41 7c 27 63 63 1c 1b 9d 9f 3a 16 33 ..j.A|'cc....:.3 0490 81 69 51 2f a1 67 d2 66 a2 f1 68 db c1 15 5a ec .iQ/.g.f..h...Z. 04a0 a1 c8 6f ae b1 48 5f 94 56 05 9c 60 52 94 ba 55 ..o..H_.V..`R..U 04b0 5b 79 0d 79 3e 1f 43 62 7f f5 77 c3 b6 f3 f4 17 [y.y>.Cb..w..... 04c0 b5 ea 65 01 7c b5 0f f9 c2 7a ea 2a cd de bd 56 ..e.|....z.*...V 04d0 26 cc 56 5e 94 9f 2c 46 66 c5 0a 81 9b aa 58 90 &.V^..,Ff.....X. 04e0 37 bb 1a 7c be 68 f6 61 48 24 d9 9d dd 4b f6 74 7..|.h.aH$...K.t 04f0 b2 c5 bd 2b 13 31 82 01 42 94 22 2c de 9b 5d 66 ...+.1..B.",..]f 0500 ad 63 5e 2f 48 bd 09 c0 1a a6 c2 cb eb 1f 9c 1f .c^/H........... 0510 a4 f3 6f b1 53 d2 7d ba d4 bb b0 5a 88 21 43 6e ..o.S.}....Z.!Cn 0520 60 9c 31 ec 64 e0 e8 78 5b e6 f6 de 7d 25 92 9c `.1.d..x[...}%.. 0530 59 7c c5 46 13 b2 11 7f bc d9 bc 7b 02 0e d7 24 Y|.F.......{...$ 0540 b3 05 b8 0d 44 14 6f 64 b3 44 07 c2 7c 6e 63 45 ....D.od.D..|ncE 0550 15 60 03 ba a3 16 33 e1 49 a8 32 8b 10 09 6b 8a .`....3.I.2...k. 0560 10 6b 51 ef 79 e2 18 ac 70 13 c2 00 43 26 c7 48 .kQ.y...p...C&.H 0570 86 09 5e 4e bb 85 13 ed 2f ae 17 10 40 fa f8 4e ..^N..../[email protected] 0580 ca 3d 0c 41 2e e4 fc 77 45 d2 a3 23 b2 5e 6b 28 .=.A...wE..#.^k( 0590 53 5e 6a 63 a6 37 47 f4 1e d0 0b be 09 75 f3 6e S^jc.7G......u.n 05a0 8a c2 9a c2 04 7f b3 f9 ........ No. Time Source Destination Protocol Length Info 867 9.793570 192.168.10.1 192.168.10.203 TCP 1439 34433 > cds [PSH, ACK] Seq=48421 Ack=889 Win=1002 Len=1373 TSval=537697 TSecr=727580 Frame 867: 1439 bytes on wire (11512 bits), 1439 bytes captured (11512 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 48421, Ack: 889, Len: 1373 Data (1373 bytes) 0000 32 ae a7 5d 02 e4 3e 8a e5 d3 d0 0b 72 c8 70 95 2..]..>.....r.p. 0010 0d 1b 60 5d 73 2b 36 5b af d8 32 9d 06 31 46 9a ..`]s+6[..2..1F. 0020 98 58 c6 cb ff ea 27 2c 7f 35 d4 7c 44 51 4d c8 .X....',.5.|DQM. 0030 29 09 4a d5 a5 41 cb 75 93 44 07 c7 78 b1 30 32 ).J..A.u.D..x.02 0040 2a e8 90 1f 77 0e fa 14 80 b6 27 50 f0 e4 dd aa *...w.....'P.... 0050 f5 15 97 88 98 a3 cf 11 a0 0f b1 ee be 31 26 b9 .............1&. 0060 04 73 d9 ea a8 60 7f 6b 6a 7b c2 cd 54 34 2f c3 .s...`.kj{..T4/. 0070 76 c0 93 ea a4 41 f1 24 eb 13 b1 b6 9c 1c 3e 5c v....A.$......>\ 0080 f6 91 97 6e b2 87 35 aa 24 c7 c4 c5 8c c4 95 19 ...n..5.$....... 0090 5b af 27 a7 13 7b fb 09 28 f6 70 ff c4 b9 92 f1 [.'..{..(.p..... 00a0 f2 55 06 d7 50 02 b5 3c 52 7c ad 43 e5 68 d4 40 .U..P..<R|.C.h.@ 00b0 0e 46 ce 96 58 b7 af 57 eb b7 51 7f 57 a2 b2 7e .F..X..W..Q.W..~ 00c0 ec 22 04 5c eb 5d 9e 52 a7 82 06 b5 23 38 c2 a6 .".\.].R....#8.. 00d0 78 26 63 43 d3 4d e9 14 56 cc 97 40 9b 3e 07 18 x&cC.M..V..@.>.. 00e0 4f 6d 3b c2 c9 0a 51 4c 51 b5 8f ec c1 d8 20 09 Om;...QLQ..... . 00f0 b5 79 d0 65 71 69 75 1f 31 1b fe da 51 9a 26 c8 .y.eqiu.1...Q.&. 0100 a7 88 6f 51 5c 16 4f ab 06 06 6f 3f e2 70 b0 4a ..oQ\.O...o?.p.J 0110 a7 5e b6 08 b6 00 51 ca 1e 08 56 1e a7 08 a3 e7 .^....Q...V..... 0120 b2 bb c9 c9 57 41 79 68 31 82 2c ef 65 fc af b6 ....WAyh1.,.e... 0130 10 c7 c2 6b d6 01 65 01 d6 36 ae cd 51 5c 2f b4 ...k..e..6..Q\/. 0140 74 29 72 da 04 49 ed 13 11 9b b7 32 f7 7c 86 75 t)r..I.....2.|.u 0150 90 9f eb 6b 80 89 ff eb 04 e8 99 f8 be 00 c4 50 ...k...........P 0160 93 d9 ee 2a 54 17 43 99 a7 97 39 f7 66 40 02 8a ...*T.C...9.f@.. 0170 98 0f 3c 07 97 81 4c c9 52 b9 f5 ef 19 bb 33 0e ..<...L.R.....3. 0180 c7 f2 f3 c1 8d 11 96 eb a2 bd 26 23 91 ec 7b 3a ..........&#..{: 0190 86 57 1c 2e aa e8 91 a0 5a 5e 30 8a e8 fa 4d c6 .W......Z^0...M. 01a0 98 60 ce 1a 34 cb e1 a3 89 60 3e 01 d0 9e 78 8b .`..4....`>...x. 01b0 f0 d4 7b 86 1c 51 cd 31 dc 5e e4 09 9b f9 3f 1d ..{..Q.1.^....?. 01c0 15 19 f7 cf 4b a6 90 22 84 a6 92 dd 9a 3a 01 c1 ....K..".....:.. 01d0 af 47 de 96 72 86 7c 0d 2f 31 71 b9 5f a4 a4 69 .G..r.|./1q._..i 01e0 f3 40 1a 06 bb 62 33 fa 01 f1 4d 27 63 ec 44 a2 [email protected]'c.D. 01f0 91 d7 07 72 26 d1 b0 a6 65 a3 01 24 e3 f2 a0 c8 ...r&...e..$.... 0200 34 db 1b df 9e 1d 52 13 bb f3 fe b0 7e 10 11 b4 4.....R.....~... 0210 32 ae f5 3f d6 98 c9 64 cb 36 c3 76 2c a9 a0 3d 2..?...d.6.v,..= 0220 f6 4b de 30 d3 f5 c2 4f 6e 10 49 78 58 17 13 f1 .K.0...On.IxX... 0230 8b 20 5f 25 e4 e5 5a d6 c6 68 ed 0e a8 37 36 24 . _%..Z..h...76$ 0240 55 49 4d 86 4a 32 ba 5f 55 b0 8e 4c a1 cb ed 60 UIM.J2._U..L...` 0250 95 4a c0 e3 b4 9a ee 78 06 ee ba 62 60 3e af 01 .J.....x...b`>.. 0260 94 a8 f7 ae ed 22 3a 58 e3 dc 03 e3 6a e8 14 91 .....":X....j... 0270 14 84 71 21 5e f7 ca 1e 08 09 70 2e 0b 9d 77 59 ..q!^.....p...wY 0280 28 29 fd 64 0d 6c 7c c2 7e a9 35 64 cc 15 a2 bf ().d.l|.~.5d.... 0290 01 55 a3 fe 2c de 9f 0a b3 35 29 ea 2c 1b cf b9 .U..,....5).,... 02a0 75 b3 ad e7 31 92 69 c1 58 ea e9 2c 16 07 dc c1 u...1.i.X..,.... 02b0 2f 01 9f 54 6a ae d0 21 60 e2 23 48 7b fe f9 f5 /..Tj..!`.#H{... 02c0 5a 31 f0 d0 b2 f3 e0 43 cc 8c 12 71 c1 ef 37 1c Z1.....C...q..7. 02d0 0e 3a 38 39 1b 3a 87 0d 64 3b d4 64 7c e6 01 ac .:89.:..d;.d|... 02e0 7b a1 3c e2 d2 b8 e4 05 23 2c 17 1b ea a2 5a 68 {.<.....#,....Zh 02f0 e5 78 3d 3e 13 e2 d7 2a fe b1 7e 82 60 59 8c 6a .x=>...*..~.`Y.j 0300 36 05 64 64 af 02 40 85 16 66 53 c5 b5 d7 8c e7 6.dd..@xxxx..... 0310 bb 8f fc ff f0 b4 38 9f d1 4a e8 c6 a4 0e bb 68 ......8..J.....h 0320 e1 6b 3f ee fb 8d 87 15 4f 2f 47 5d 21 c2 0c 10 .k?.....O/G]!... 0330 83 1e 05 34 35 b1 02 98 c4 e4 c1 63 a4 48 f4 07 ...45......c.H.. 0340 66 8e 88 db 8e f7 63 40 6e f1 98 e9 dc f3 c8 b8 f.....c@n....... 0350 90 26 ce 37 73 18 59 84 02 ac f8 9b ba a5 19 4e .&.7s.Y........N 0360 54 5a 7c 4c b3 9e b8 d4 01 28 6a 33 72 ad 21 0d TZ|L.....(j3r.!. 0370 f0 8b 30 72 3b fd 27 b0 57 f4 db 80 e6 31 82 04 ..0r;.'.W....1.. 0380 b6 43 cb 33 7a 1e f6 54 00 ea f1 c9 0b 05 a7 13 .C.3z..T........ 0390 1b 3f 0e 36 52 90 64 61 25 ec 9d 81 17 70 66 39 .?.6R.da%....pf9 03a0 39 6f be 9a 72 20 32 f8 ef 9e 22 7e 3f dd ab 91 9o..r 2..."~?... 03b0 6d 04 fb 43 3d bf 06 a0 10 49 47 a9 75 a3 f4 5e m..C=....IG.u..^ 03c0 8e 86 7e 18 81 f1 f6 57 86 34 fc b6 57 23 77 a4 ..~....W.4..W#w. 03d0 40 7a 8c c6 c8 2e 9d ad b2 26 25 c1 24 92 19 8e @z.......&%.$... 03e0 fe 6f 2d c5 f4 ff 35 94 c9 74 3d 10 f8 94 b4 ad .o-...5..t=..... 03f0 34 aa 1b a5 87 e2 5c e7 d0 6d 84 7b ce 6f 9b fd 4.....\..m.{.o.. 0400 8c dc 5f 1b 24 7b 0b ab ae f5 ce c5 8c 11 f2 56 .._.${.........V 0410 ed 5a b0 55 70 ec 24 ad 2b ac b4 34 58 06 29 04 .Z.Up.$.+..4X.). 0420 fc 01 97 58 87 7e d4 a5 36 ab bb d2 06 8b c9 ba ...X.~..6....... 0430 4c 9a 10 a4 43 b7 91 79 32 22 58 b2 d1 1c ec 53 L...C..y2"X....S 0440 cb f9 fa 06 22 3d 0e 54 31 bb f0 b0 19 bc be 81 ...."=.T1....... 0450 ae f2 1e f4 f4 04 d3 b5 e9 e6 14 bb 56 47 c8 cd ............VG.. 0460 c9 c4 2f 52 e4 72 82 64 c4 47 1b e6 6f 2d 81 3f ../R.r.d.G..o-.? 0470 76 ad e2 20 11 e7 d9 1d ce 1a 47 df eb 7b 88 a3 v.. ......G..{.. 0480 3b cb 00 7a 85 81 9e d2 af 83 49 47 fc 9c 63 92 ;..z......IG..c. 0490 2d 04 33 59 97 ac 07 92 eb 08 c8 b7 2c 93 59 ae -.3Y........,.Y. 04a0 c8 df 99 b0 eb b8 96 96 0e bd 51 4b 26 1a 9b ee ..........QK&... 04b0 9a 64 0a 08 5b 6b 63 5a 5a 3c 22 d6 aa 9d 0b 26 .d..[kcZZ<"....& 04c0 51 d5 0e 65 21 51 d8 e9 f5 16 ed d4 b5 23 29 dd Q..e!Q.......#). 04d0 d1 9e 28 91 87 31 23 a1 07 53 72 97 e4 e7 1f ae ..(..1#..Sr..... 04e0 df 8f 59 0c 65 03 3f fb 83 92 28 aa 36 c7 6e cf ..Y.e.?...(.6.n. 04f0 6f 39 1f 6d 75 63 f5 bc 05 87 69 02 f4 6c f3 77 o9.muc....i..l.w 0500 94 eb 9a 25 bf ed 21 7c 24 ef 24 75 c8 76 5a db ...%..!|$.$u.vZ. 0510 90 2b 24 3d 00 99 dd ba 2d 0b 4e c9 42 6c 6d e8 .+$=....-.N.Blm. 0520 10 2e 6a b6 65 5f 64 1f f9 ef ee 41 f7 5f 6b 81 ..j.e_d....A._k. 0530 f1 09 bb 10 c9 16 84 5e 7b 81 64 2a cc 99 f9 a7 .......^{.d*.... 0540 e7 f2 c0 d0 d7 cc 07 fb 4b ab 85 6a a2 b3 5c 9f ........K..j..\. 0550 d6 46 ec 36 2f 01 d8 cd 24 dc 18 3a f7 .F.6/...$..:. No. Time Source Destination Protocol Length Info 868 9.793621 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=889 Ack=48421 Win=65535 Len=0 TSval=727580 TSecr=537697 Frame 868: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 889, Ack: 48421, Len: 0 No. Time Source Destination Protocol Length Info 869 9.831533 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=889 Ack=49794 Win=64162 Len=74 TSval=727580 TSecr=537697 Frame 869: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 889, Ack: 49794, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 13 33 86 b6 b1 ec 7b 47 68 88 31 .... .3....{Gh.1 0010 fd 2d e2 60 0a 2c c7 0c 87 86 93 64 35 d6 2b b6 .-.`.,.....d5.+. 0020 d7 86 77 f9 89 17 03 01 00 20 fe a4 1c f5 ca 8b ..w...... ...... 0030 c7 63 06 b1 1d 60 3b 14 3c ac 8b 8d 31 c5 35 0c .c...`;.<...1.5. 0040 46 18 f4 c7 43 e5 3f 47 f6 b1 F...C.?G.. No. Time Source Destination Protocol Length Info 870 9.831589 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=49794 Ack=963 Win=1002 Len=0 TSval=537706 TSecr=727580 Frame 870: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 49794, Ack: 963, Len: 0 No. Time Source Destination Protocol Length Info 871 9.837846 192.168.10.115 64.74.103.129 TCP 60 cogsys-lm > https [ACK] Seq=38 Ack=38 Win=64166 Len=0 Frame 871: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.115 (192.168.10.115), Dst: 64.74.103.129 (64.74.103.129) Transmission Control Protocol, Src Port: cogsys-lm (3377), Dst Port: https (443), Seq: 38, Ack: 38, Len: 0 No. Time Source Destination Protocol Length Info 872 9.939334 182.178.75.135 192.168.10.207 SMTP 60 C: QUIT Frame 872: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 2018 (2018), Dst Port: smtp (25), Seq: 56, Ack: 361, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 873 9.939437 192.168.10.207 182.178.75.135 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 873: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 2018 (2018), Seq: 361, Ack: 62, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 874 9.939499 182.178.75.135 192.168.10.207 TCP 60 2018 > smtp [ACK] Seq=62 Ack=430 Win=46505 Len=0 Frame 874: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 2018 (2018), Dst Port: smtp (25), Seq: 62, Ack: 430, Len: 0 No. Time Source Destination Protocol Length Info 875 9.939558 192.168.10.207 182.178.75.135 TCP 60 smtp > 2018 [FIN, ACK] Seq=430 Ack=62 Win=65473 Len=0 Frame 875: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 2018 (2018), Seq: 430, Ack: 62, Len: 0 No. Time Source Destination Protocol Length Info 876 9.939620 182.178.75.135 192.168.10.207 TCP 60 2018 > smtp [ACK] Seq=62 Ack=431 Win=46505 Len=0 Frame 876: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 2018 (2018), Dst Port: smtp (25), Seq: 62, Ack: 431, Len: 0 No. Time Source Destination Protocol Length Info 877 9.947431 192.168.10.221 24.143.205.27 TCP 62 4794 > http [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM=1 Frame 877: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.27 (24.143.205.27) Transmission Control Protocol, Src Port: 4794 (4794), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 878 9.965472 24.143.205.27 192.168.10.221 TCP 60 http > 4794 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1400 Frame 878: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.27 (24.143.205.27), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4794 (4794), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 879 9.965522 192.168.10.221 24.143.205.27 TCP 60 4794 > http [ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 879: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.27 (24.143.205.27) Transmission Control Protocol, Src Port: 4794 (4794), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 880 9.966663 192.168.10.221 24.143.205.27 TCP 1454 [TCP segment of a reassembled PDU] Frame 880: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.27 (24.143.205.27) Transmission Control Protocol, Src Port: 4794 (4794), Dst Port: http (80), Seq: 1, Ack: 1, Len: 1400 No. Time Source Destination Protocol Length Info 881 9.966803 192.168.10.221 24.143.205.27 TCP 1454 [TCP segment of a reassembled PDU] Frame 881: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.27 (24.143.205.27) Transmission Control Protocol, Src Port: 4794 (4794), Dst Port: http (80), Seq: 1401, Ack: 1, Len: 1400 No. Time Source Destination Protocol Length Info 882 9.966834 24.143.205.27 192.168.10.221 TCP 60 http > 4794 [ACK] Seq=1 Ack=2801 Win=65535 Len=0 Frame 882: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.27 (24.143.205.27), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4794 (4794), Seq: 1, Ack: 2801, Len: 0 No. Time Source Destination Protocol Length Info 883 9.966905 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:44:28 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.27 4794 80 msg="Conn Begin" (HTTP-proxy.endusers-00) Frame 883: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:28 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.27 4794 80 msg="Conn Begin" (HTTP-proxy.endusers-00) No. Time Source Destination Protocol Length Info 884 9.966963 192.168.10.221 24.143.205.27 HTTP 288 GET /dl/download/release/5/8/0/SW_CD_Windows_XP_Professional_English_-2_1_w_SP2_ISO_MLF_X12-58046.ISO?LCID=1033&PGM=VLSC&TID=43206728&__gda__=1317771840_930cd5d71c60b9adfd653e6c18ca13e6 HTTP/1.1 Frame 884: 288 bytes on wire (2304 bits), 288 bytes captured (2304 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.27 (24.143.205.27) Transmission Control Protocol, Src Port: 4794 (4794), Dst Port: http (80), Seq: 2801, Ack: 1, Len: 234 [3 Reassembled TCP Segments (3034 bytes): #880(1400), #881(1400), #884(234)] Hypertext Transfer Protocol No. Time Source Destination Protocol Length Info 885 9.966992 24.143.205.27 192.168.10.221 TCP 60 http > 4794 [ACK] Seq=1 Ack=3035 Win=65535 Len=0 Frame 885: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.27 (24.143.205.27), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4794 (4794), Seq: 1, Ack: 3035, Len: 0 No. Time Source Destination Protocol Length Info 886 9.967076 192.168.10.1 192.168.10.245 Syslog 284 LOCAL1.INFO: Oct 3 19:44:28 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.27 4794 80 msg="ProxyAllow: HTTP Trusted host" proxy_act="HTTP-Client.EndUser" rule_name="*microsoft.com*" (HTTP-proxy.endusers-00) Frame 886: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:28 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.27 4794 80 msg="ProxyAllow: HTTP Trusted host" proxy_act="HTTP-Client.EndUser" rule_name="*mi No. Time Source Destination Protocol Length Info 887 9.984648 24.143.205.27 192.168.10.221 HTTP 484 HTTP/1.0 302 Moved Temporarily Frame 887: 484 bytes on wire (3872 bits), 484 bytes captured (3872 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.27 (24.143.205.27), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4794 (4794), Seq: 1, Ack: 3035, Len: 430 Hypertext Transfer Protocol No. Time Source Destination Protocol Length Info 888 9.984783 192.168.10.1 192.168.10.245 Syslog 525 LOCAL1.INFO: Oct 3 19:44:28 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.27 4794 80 msg="HTTP Request" proxy_act="HTTP-Client.EndUser" op="GET" dstname="fullproduct.download.microsoft.com" arg="/dl/download/release/5/8/0/SW_CD_Windows_XP_Professional_English_-2_1_w_SP2_ISO_MLF_X12-58046.ISO?LCID=1033\x26PGM=VLSC\x26TID=43206728\x26__gda__=1317771840_930cd5d71c60b9adfd653e6c18ca13e6" sent_bytes="3034" rcvd_bytes="430" (HTTP-proxy.endusers-00) Frame 888: 525 bytes on wire (4200 bits), 525 bytes captured (4200 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:28 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.27 4794 80 msg="HTTP Request" proxy_act="HTTP-Client.EndUser" op="GET" dstname="fullproduct.d No. Time Source Destination Protocol Length Info 889 9.985542 192.168.10.221 24.143.205.163 TCP 62 4795 > http [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM=1 Frame 889: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 890 10.003124 24.143.205.163 192.168.10.221 TCP 60 http > 4795 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1400 Frame 890: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 891 10.003174 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 891: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 892 10.003325 192.168.10.1 192.168.10.245 Syslog 206 LOCAL1.INFO: Oct 3 19:44:28 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.163 4795 80 msg="Conn Begin" (HTTP-proxy.endusers-00) Frame 892: 206 bytes on wire (1648 bits), 206 bytes captured (1648 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:28 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.163 4795 80 msg="Conn Begin" (HTTP-proxy.endusers-00) No. Time Source Destination Protocol Length Info 893 10.030895 192.168.10.221 24.143.205.163 TCP 1454 [TCP segment of a reassembled PDU] Frame 893: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 1, Ack: 1, Len: 1400 No. Time Source Destination Protocol Length Info 894 10.031022 192.168.10.221 24.143.205.163 TCP 1454 [TCP segment of a reassembled PDU] Frame 894: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 1401, Ack: 1, Len: 1400 No. Time Source Destination Protocol Length Info 895 10.031057 24.143.205.163 192.168.10.221 TCP 60 http > 4795 [ACK] Seq=1 Ack=2801 Win=65535 Len=0 Frame 895: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1, Ack: 2801, Len: 0 No. Time Source Destination Protocol Length Info 896 10.031085 24.143.205.163 192.168.10.221 TCP 60 [TCP Dup ACK 895#1] http > 4795 [ACK] Seq=1 Ack=2801 Win=65535 Len=0 Frame 896: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1, Ack: 2801, Len: 0 No. Time Source Destination Protocol Length Info 897 10.031158 192.168.10.221 24.143.205.163 HTTP 295 GET /dl/download/release/5/8/0/SW_CD_Windows_XP_Professional_English_-2_1_w_SP2_ISO_MLF_X12-58046.ISO?LCID=1033&PGM=VLSC&TID=43206728&__gda__=1317771840_930cd5d71c60b9adfd653e6c18ca13e6 HTTP/1.1 Frame 897: 295 bytes on wire (2360 bits), 295 bytes captured (2360 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 2801, Ack: 1, Len: 241 [3 Reassembled TCP Segments (3041 bytes): #893(1400), #894(1400), #897(241)] Hypertext Transfer Protocol No. Time Source Destination Protocol Length Info 898 10.031187 24.143.205.163 192.168.10.221 TCP 60 http > 4795 [ACK] Seq=1 Ack=3042 Win=65535 Len=0 Frame 898: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1, Ack: 3042, Len: 0 No. Time Source Destination Protocol Length Info 899 10.031289 192.168.10.1 192.168.10.245 Syslog 285 LOCAL1.INFO: Oct 3 19:44:28 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.163 4795 80 msg="ProxyAllow: HTTP Trusted host" proxy_act="HTTP-Client.EndUser" rule_name="*microsoft.com*" (HTTP-proxy.endusers-00) Frame 899: 285 bytes on wire (2280 bits), 285 bytes captured (2280 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:28 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.163 4795 80 msg="ProxyAllow: HTTP Trusted host" proxy_act="HTTP-Client.EndUser" rule_name="*m No. Time Source Destination Protocol Length Info 900 10.066441 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 900: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 901 10.066515 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 901: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 902 10.066547 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 902: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 903 10.066595 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2801 Win=65535 Len=0 Frame 903: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2801, Len: 0 No. Time Source Destination Protocol Length Info 904 10.066675 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 904: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 4201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 905 10.066714 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=5601 Win=65535 Len=0 Frame 905: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 5601, Len: 0 No. Time Source Destination Protocol Length Info 906 10.078219 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 906: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 907 10.078251 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 907: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 908 10.085074 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 908: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 5601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 909 10.085112 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 909: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 7001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 910 10.085166 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=8401 Win=65535 Len=0 Frame 910: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 8401, Len: 0 No. Time Source Destination Protocol Length Info 911 10.085207 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 911: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 8401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 912 10.085241 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 912: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 9801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 913 10.085285 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=11201 Win=64135 Len=0 Frame 913: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 11201, Len: 0 No. Time Source Destination Protocol Length Info 914 10.085323 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 914: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 11201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 915 10.085356 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 915: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 12601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 916 10.085396 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=14001 Win=61335 Len=0 Frame 916: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 14001, Len: 0 No. Time Source Destination Protocol Length Info 917 10.085429 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 917: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 14001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 918 10.085483 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 918: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 15401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 919 10.085526 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=16801 Win=58535 Len=0 Frame 919: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 16801, Len: 0 No. Time Source Destination Protocol Length Info 920 10.090036 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=16801 Win=62295 Len=0 Frame 920: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 16801, Len: 0 No. Time Source Destination Protocol Length Info 921 10.090076 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=16801 Win=65535 Len=0 Frame 921: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 16801, Len: 0 No. Time Source Destination Protocol Length Info 922 10.102878 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 922: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 16801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 923 10.102914 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 923: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 18201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 924 10.102959 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=19601 Win=64135 Len=0 Frame 924: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 19601, Len: 0 No. Time Source Destination Protocol Length Info 925 10.103129 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 925: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 19601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 926 10.103163 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 926: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 21001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 927 10.103237 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=22401 Win=61335 Len=0 Frame 927: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 22401, Len: 0 No. Time Source Destination Protocol Length Info 928 10.103269 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 928: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 22401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 929 10.103404 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 929: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 23801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 930 10.103455 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=25201 Win=58535 Len=0 Frame 930: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 25201, Len: 0 No. Time Source Destination Protocol Length Info 931 10.103498 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 931: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 25201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 932 10.103617 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 932: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 26601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 933 10.103705 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=28001 Win=55735 Len=0 Frame 933: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 28001, Len: 0 No. Time Source Destination Protocol Length Info 934 10.103737 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 934: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 28001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 935 10.103853 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 935: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 29401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 936 10.103897 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=30801 Win=52935 Len=0 Frame 936: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 30801, Len: 0 No. Time Source Destination Protocol Length Info 937 10.103987 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 937: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 30801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 938 10.104066 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 938: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 32201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 939 10.104152 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=33601 Win=50135 Len=0 Frame 939: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 33601, Len: 0 No. Time Source Destination Protocol Length Info 940 10.104252 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 940: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 33601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 941 10.104311 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 941: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 35001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 942 10.104351 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=36401 Win=47335 Len=0 Frame 942: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 36401, Len: 0 No. Time Source Destination Protocol Length Info 943 10.119645 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 943: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 925, Ack: 65471, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 944 10.119682 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=65471 Ack=967 Win=46321 Len=0 Frame 944: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 65471, Ack: 967, Len: 0 No. Time Source Destination Protocol Length Info 945 10.119793 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 945: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 967, Ack: 65471, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 946 10.119825 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=65471 Ack=1009 Win=46300 Len=0 Frame 946: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 65471, Ack: 1009, Len: 0 No. Time Source Destination Protocol Length Info 947 10.121090 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 947: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 36401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 948 10.121295 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 948: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 37801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 949 10.121340 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=39201 Win=44535 Len=0 Frame 949: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 39201, Len: 0 No. Time Source Destination Protocol Length Info 950 10.121371 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 950: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 39201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 951 10.121428 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 951: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 40601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 952 10.121487 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=42001 Win=41735 Len=0 Frame 952: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 42001, Len: 0 No. Time Source Destination Protocol Length Info 953 10.121581 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 953: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 42001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 954 10.121671 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 954: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 43401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 955 10.121715 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=44801 Win=38935 Len=0 Frame 955: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 44801, Len: 0 No. Time Source Destination Protocol Length Info 956 10.121802 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 956: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 44801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 957 10.121906 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 957: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 46201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 958 10.121949 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=47601 Win=36135 Len=0 Frame 958: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 47601, Len: 0 No. Time Source Destination Protocol Length Info 959 10.122050 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 959: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 47601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 960 10.122167 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 960: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 49001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 961 10.122209 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=50401 Win=33335 Len=0 Frame 961: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 50401, Len: 0 No. Time Source Destination Protocol Length Info 962 10.122279 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 962: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 50401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 963 10.122375 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 963: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 51801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 964 10.122449 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=53201 Win=30535 Len=0 Frame 964: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 53201, Len: 0 No. Time Source Destination Protocol Length Info 965 10.122542 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 965: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 53201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 966 10.122622 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 966: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 54601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 967 10.122661 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=56001 Win=27735 Len=0 Frame 967: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 56001, Len: 0 No. Time Source Destination Protocol Length Info 968 10.122746 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 968: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 56001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 969 10.122854 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 969: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 57401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 970 10.122893 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=58801 Win=24935 Len=0 Frame 970: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 58801, Len: 0 No. Time Source Destination Protocol Length Info 971 10.122981 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 971: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 58801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 972 10.123086 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 972: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 60201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 973 10.123175 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=61601 Win=22135 Len=0 Frame 973: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 61601, Len: 0 No. Time Source Destination Protocol Length Info 974 10.123255 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 974: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 61601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 975 10.123316 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 975: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 63001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 976 10.123376 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=64401 Win=19335 Len=0 Frame 976: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 64401, Len: 0 No. Time Source Destination Protocol Length Info 977 10.123468 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 977: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 64401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 978 10.123590 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 978: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 65801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 979 10.123629 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=67201 Win=16535 Len=0 Frame 979: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 67201, Len: 0 No. Time Source Destination Protocol Length Info 980 10.123686 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 980: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 67201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 981 10.123805 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 981: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 68601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 982 10.123851 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=70001 Win=13735 Len=0 Frame 982: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 70001, Len: 0 No. Time Source Destination Protocol Length Info 983 10.123939 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 983: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 70001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 984 10.124034 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 984: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 71401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 985 10.124091 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=72801 Win=10935 Len=0 Frame 985: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 72801, Len: 0 No. Time Source Destination Protocol Length Info 986 10.134926 192.168.10.220 208.67.222.222 DNS 85 Standard query PTR 33.35.19.113.in-addr.arpa Frame 986: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 52425 (52425), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 987 10.139263 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 987: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 72801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 988 10.139353 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 988: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 74201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 989 10.139402 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=75601 Win=8135 Len=0 Frame 989: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 75601, Len: 0 No. Time Source Destination Protocol Length Info 990 10.139488 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 990: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 75601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 991 10.139620 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 991: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 77001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 992 10.139663 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=78401 Win=5335 Len=0 Frame 992: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 78401, Len: 0 No. Time Source Destination Protocol Length Info 993 10.139702 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 993: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 78401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 994 10.139846 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 994: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 79801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 995 10.139885 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=81201 Win=2535 Len=0 Frame 995: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 81201, Len: 0 No. Time Source Destination Protocol Length Info 996 10.139966 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 996: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 81201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 997 10.226271 192.168.10.221 24.143.205.27 TCP 60 4794 > http [ACK] Seq=3035 Ack=431 Win=65105 Len=0 Frame 997: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.27 (24.143.205.27) Transmission Control Protocol, Src Port: 4794 (4794), Dst Port: http (80), Seq: 3035, Ack: 431, Len: 0 No. Time Source Destination Protocol Length Info 998 10.335653 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=82601 Win=1135 Len=0 Frame 998: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 82601, Len: 0 No. Time Source Destination Protocol Length Info 999 10.377268 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1773082880, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 999: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1000 10.377289 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1773082880, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1000: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1001 10.377302 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1773082880, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1001: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1002 10.377313 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1773082880, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1002: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1003 10.380033 192.168.10.1 192.168.10.245 Syslog 224 LOCAL1.WARNING: Oct 3 19:44:28 MyFirewall firewall: Allow 3-Optional-2 0-External 48 tcp 20 127 192.168.15.10 38.124.168.116 3342 80 offset 7 S 3344262813 win 65535 (HTTP-proxy-Visitor-00) Frame 1003: 224 bytes on wire (1792 bits), 224 bytes captured (1792 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.WARNING: Oct 3 19:44:28 MyFirewall firewall: Allow 3-Optional-2 0-External 48 tcp 20 127 192.168.15.10 38.124.168.116 3342 80 offset 7 S 3344262813 win 65535 (HTTP-proxy-Visitor-00) No. Time Source Destination Protocol Length Info 1004 10.380092 192.168.10.1 192.168.10.245 Syslog 222 LOCAL1.WARNING: Oct 3 19:44:28 MyFirewall firewall: Allow 1-Trusted 0-External 48 tcp 20 127 192.168.10.221 24.143.205.27 4794 80 offset 7 S 3381582539 win 65535 (HTTP-proxy.endusers-00) Frame 1004: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.WARNING: Oct 3 19:44:28 MyFirewall firewall: Allow 1-Trusted 0-External 48 tcp 20 127 192.168.10.221 24.143.205.27 4794 80 offset 7 S 3381582539 win 65535 (HTTP-proxy.endusers-00) No. Time Source Destination Protocol Length Info 1005 10.380148 192.168.10.1 192.168.10.245 Syslog 222 LOCAL1.WARNING: Oct 3 19:44:28 MyFirewall firewall: Allow 1-Trusted 0-External 48 tcp 20 127 192.168.10.221 24.143.205.163 4795 80 offset 7 S 297430144 win 65535 (HTTP-proxy.endusers-00) Frame 1005: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.WARNING: Oct 3 19:44:28 MyFirewall firewall: Allow 1-Trusted 0-External 48 tcp 20 127 192.168.10.221 24.143.205.163 4795 80 offset 7 S 297430144 win 65535 (HTTP-proxy.endusers-00) No. Time Source Destination Protocol Length Info 1006 10.398190 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3642163456, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1006: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1007 10.398207 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3642163456, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1007: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1008 10.398219 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3642163456, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1008: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1009 10.398231 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3642163456, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1009: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1010 10.769539 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=82601 Win=4895 Len=0 Frame 1010: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 82601, Len: 0 No. Time Source Destination Protocol Length Info 1011 10.769582 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1011: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 82601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1012 10.769614 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1012: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 84001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1013 10.769653 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=82601 Win=65535 Len=0 Frame 1013: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 82601, Len: 0 No. Time Source Destination Protocol Length Info 1014 10.769683 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1014: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 85401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1015 10.769715 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1015: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 86801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1016 10.769750 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1016: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 88201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1017 10.769781 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1017: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 89601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1018 10.769813 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1018: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 91001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1019 10.769853 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=86801 Win=61335 Len=0 Frame 1019: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 86801, Len: 0 No. Time Source Destination Protocol Length Info 1020 10.769882 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1020: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 92401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1021 10.769912 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1021: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 93801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1022 10.769942 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1022: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 95201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1023 10.769973 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1023: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 96601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1024 10.770010 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=91001 Win=57135 Len=0 Frame 1024: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 91001, Len: 0 No. Time Source Destination Protocol Length Info 1025 10.770040 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1025: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 98001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1026 10.770071 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1026: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 99401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1027 10.770102 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1027: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 100801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1028 10.770140 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=95201 Win=52935 Len=0 Frame 1028: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 95201, Len: 0 No. Time Source Destination Protocol Length Info 1029 10.770180 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1029: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 102201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1030 10.770211 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1030: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 103601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1031 10.770250 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=99401 Win=48735 Len=0 Frame 1031: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 99401, Len: 0 No. Time Source Destination Protocol Length Info 1032 10.770280 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1032: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 105001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1033 10.770311 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1033: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 106401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1034 10.770342 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1034: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 107801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1035 10.770383 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=102201 Win=45935 Len=0 Frame 1035: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 102201, Len: 0 No. Time Source Destination Protocol Length Info 1036 10.770413 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1036: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 109201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1037 10.770444 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1037: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 110601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1038 10.770482 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1038: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 112001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1039 10.770521 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=106401 Win=41735 Len=0 Frame 1039: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 106401, Len: 0 No. Time Source Destination Protocol Length Info 1040 10.770551 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1040: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 113401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1041 10.770582 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1041: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 114801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1042 10.770621 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=110601 Win=37535 Len=0 Frame 1042: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 110601, Len: 0 No. Time Source Destination Protocol Length Info 1043 10.770652 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1043: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 116201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1044 10.770683 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1044: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 117601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1045 10.770714 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1045: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 119001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1046 10.770752 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=114801 Win=33335 Len=0 Frame 1046: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 114801, Len: 0 No. Time Source Destination Protocol Length Info 1047 10.770782 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1047: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 120401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1048 10.770812 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1048: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 121801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1049 10.770849 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=117601 Win=30535 Len=0 Frame 1049: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 117601, Len: 0 No. Time Source Destination Protocol Length Info 1050 10.770879 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1050: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 123201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1051 10.770910 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1051: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 124601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1052 10.770947 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=120401 Win=27735 Len=0 Frame 1052: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 120401, Len: 0 No. Time Source Destination Protocol Length Info 1053 10.770977 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1053: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 126001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1054 10.771008 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1054: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 127401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1055 10.771038 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1055: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 128801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1056 10.771078 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=124601 Win=23535 Len=0 Frame 1056: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 124601, Len: 0 No. Time Source Destination Protocol Length Info 1057 10.771108 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1057: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 130201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1058 10.771138 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1058: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 131601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1059 10.771175 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=126001 Win=25895 Len=0 Frame 1059: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 126001, Len: 0 No. Time Source Destination Protocol Length Info 1060 10.771212 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=127401 Win=24495 Len=0 Frame 1060: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 127401, Len: 0 No. Time Source Destination Protocol Length Info 1061 10.771242 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1061: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 133001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1062 10.771273 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1062: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 134401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1063 10.771310 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=130201 Win=21695 Len=0 Frame 1063: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 130201, Len: 0 No. Time Source Destination Protocol Length Info 1064 10.771340 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1064: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 135801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1065 10.771377 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=133001 Win=18895 Len=0 Frame 1065: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 133001, Len: 0 No. Time Source Destination Protocol Length Info 1066 10.771424 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1066: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 137201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1067 10.771464 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1067: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 138601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1068 10.771495 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1068: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 140001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1069 10.771534 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=133001 Win=59935 Len=0 Frame 1069: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 133001, Len: 0 No. Time Source Destination Protocol Length Info 1070 10.771564 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1070: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 141401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1071 10.771595 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1071: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 142801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1072 10.771625 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1072: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 144201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1073 10.771664 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=138601 Win=54335 Len=0 Frame 1073: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 138601, Len: 0 No. Time Source Destination Protocol Length Info 1074 10.771693 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1074: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 145601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1075 10.771724 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1075: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 147001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1076 10.771762 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=141401 Win=51535 Len=0 Frame 1076: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 141401, Len: 0 No. Time Source Destination Protocol Length Info 1077 10.771792 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1077: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 148401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1078 10.771822 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1078: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 149801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1079 10.771860 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=145601 Win=47335 Len=0 Frame 1079: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 145601, Len: 0 No. Time Source Destination Protocol Length Info 1080 10.771890 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1080: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 151201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1081 10.771921 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1081: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 152601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1082 10.771959 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=148401 Win=44535 Len=0 Frame 1082: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 148401, Len: 0 No. Time Source Destination Protocol Length Info 1083 10.771988 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1083: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 154001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1084 10.772020 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1084: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 155401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1085 10.772059 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=152601 Win=40335 Len=0 Frame 1085: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 152601, Len: 0 No. Time Source Destination Protocol Length Info 1086 10.772088 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1086: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 156801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1087 10.772118 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1087: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 158201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1088 10.772148 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1088: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 159601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1089 10.772185 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=155401 Win=37535 Len=0 Frame 1089: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 155401, Len: 0 No. Time Source Destination Protocol Length Info 1090 10.772216 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1090: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 161001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1091 10.772246 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1091: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 162401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1092 10.772284 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=158201 Win=34735 Len=0 Frame 1092: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 158201, Len: 0 No. Time Source Destination Protocol Length Info 1093 10.772314 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1093: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 163801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1094 10.772344 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1094: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 165201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1095 10.772374 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1095: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 166601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1096 10.772422 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=161001 Win=31935 Len=0 Frame 1096: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 161001, Len: 0 No. Time Source Destination Protocol Length Info 1097 10.772452 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1097: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 168001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1098 10.772483 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1098: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 169401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1099 10.772521 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=165201 Win=27735 Len=0 Frame 1099: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 165201, Len: 0 No. Time Source Destination Protocol Length Info 1100 10.772551 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1100: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 170801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1101 10.772581 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1101: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 172201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1102 10.772611 24.143.205.163 192.168.10.221 TCP 1094 [TCP segment of a reassembled PDU] Frame 1102: 1094 bytes on wire (8752 bits), 1094 bytes captured (8752 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 173601, Ack: 3042, Len: 1040 No. Time Source Destination Protocol Length Info 1103 10.772640 24.143.205.163 192.168.10.221 TCP 414 [TCP segment of a reassembled PDU] Frame 1103: 414 bytes on wire (3312 bits), 414 bytes captured (3312 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 174641, Ack: 3042, Len: 360 No. Time Source Destination Protocol Length Info 1104 10.772677 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=169401 Win=23535 Len=0 Frame 1104: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 169401, Len: 0 No. Time Source Destination Protocol Length Info 1105 10.772705 24.143.205.163 192.168.10.221 TCP 1094 [TCP segment of a reassembled PDU] Frame 1105: 1094 bytes on wire (8752 bits), 1094 bytes captured (8752 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 175001, Ack: 3042, Len: 1040 No. Time Source Destination Protocol Length Info 1106 10.772734 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1106: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 176041, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1107 10.772764 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1107: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 177441, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1108 10.772800 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=172201 Win=26335 Len=0 Frame 1108: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 172201, Len: 0 No. Time Source Destination Protocol Length Info 1109 10.772837 192.168.10.221 24.143.205.163 TCP 60 [TCP Dup ACK 1108#1] 4795 > http [ACK] Seq=3042 Ack=172201 Win=26335 Len=0 Frame 1109: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 172201, Len: 0 No. Time Source Destination Protocol Length Info 1110 10.772867 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1110: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 178841, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1111 10.772907 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=175001 Win=23535 Len=0 Frame 1111: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 175001, Len: 0 No. Time Source Destination Protocol Length Info 1112 10.772937 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1112: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 180241, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1113 10.772968 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1113: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 181641, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1114 10.773005 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=178841 Win=19695 Len=0 Frame 1114: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 178841, Len: 0 No. Time Source Destination Protocol Length Info 1115 10.773035 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1115: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 183041, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1116 10.773066 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1116: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 184441, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1117 10.773096 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1117: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 185841, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1118 10.773126 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1118: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 187241, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1119 10.773157 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1119: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 188641, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1120 10.773196 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=181641 Win=56095 Len=0 Frame 1120: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 181641, Len: 0 No. Time Source Destination Protocol Length Info 1121 10.773232 192.168.10.221 24.143.205.163 TCP 60 [TCP Dup ACK 1120#1] 4795 > http [ACK] Seq=3042 Ack=181641 Win=56095 Len=0 Frame 1121: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 181641, Len: 0 No. Time Source Destination Protocol Length Info 1122 10.773262 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1122: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 190041, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1123 10.773299 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=188641 Win=49095 Len=0 Frame 1123: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 188641, Len: 0 No. Time Source Destination Protocol Length Info 1124 10.773336 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=191441 Win=46295 Len=0 Frame 1124: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 191441, Len: 0 No. Time Source Destination Protocol Length Info 1125 10.773372 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=191441 Win=55735 Len=0 Frame 1125: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 191441, Len: 0 No. Time Source Destination Protocol Length Info 1126 10.773416 192.168.10.221 24.143.205.163 TCP 60 [TCP Dup ACK 1125#1] 4795 > http [ACK] Seq=3042 Ack=191441 Win=55735 Len=0 Frame 1126: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 191441, Len: 0 No. Time Source Destination Protocol Length Info 1127 10.773452 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=191441 Win=65535 Len=0 Frame 1127: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 191441, Len: 0 No. Time Source Destination Protocol Length Info 1128 10.775936 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1128: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 191441, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1129 10.775970 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1129: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 192841, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1130 10.776006 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1130: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 194241, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1131 10.776036 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1131: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 195641, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1132 10.776065 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1132: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 197041, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1133 10.776095 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1133: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 198441, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1134 10.776127 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1134: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 199841, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1135 10.776165 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1135: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 201241, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1136 10.776196 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1136: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 202641, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1137 10.776226 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1137: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 204041, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1138 10.776271 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=197041 Win=65535 Len=0 Frame 1138: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 197041, Len: 0 No. Time Source Destination Protocol Length Info 1139 10.776300 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1139: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 205441, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1140 10.776342 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1140: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 206841, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1141 10.776371 24.143.205.163 192.168.10.221 TCP 414 [TCP segment of a reassembled PDU] Frame 1141: 414 bytes on wire (3312 bits), 414 bytes captured (3312 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 208241, Ack: 3042, Len: 360 No. Time Source Destination Protocol Length Info 1142 10.776406 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=202641 Win=64135 Len=0 Frame 1142: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 202641, Len: 0 No. Time Source Destination Protocol Length Info 1143 10.776442 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=208601 Win=58175 Len=0 Frame 1143: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 208601, Len: 0 No. Time Source Destination Protocol Length Info 1144 10.780674 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 1144: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1145 10.780705 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 1145: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1146 10.799303 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=208601 Win=61935 Len=0 Frame 1146: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 208601, Len: 0 No. Time Source Destination Protocol Length Info 1147 10.799343 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=208601 Win=65535 Len=0 Frame 1147: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 208601, Len: 0 No. Time Source Destination Protocol Length Info 1148 11.022341 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1148: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 208601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1149 11.048602 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 1149: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1009, Ack: 65471, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1150 11.048636 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=65471 Ack=1051 Win=46279 Len=0 Frame 1150: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 65471, Ack: 1051, Len: 0 No. Time Source Destination Protocol Length Info 1151 11.049012 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=1051 Ack=65471 Win=52956 Len=0 Frame 1151: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 65471, Len: 0 No. Time Source Destination Protocol Length Info 1152 11.049043 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 1151#1] smtp > 23308 [ACK] Seq=1051 Ack=65471 Win=52956 Len=0 Frame 1152: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 65471, Len: 0 No. Time Source Destination Protocol Length Info 1153 11.049072 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1153: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 65471, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1154 11.049102 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1154: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 66851, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1155 11.049131 206.225.164.186 192.168.10.207 SMTP 1112 C: DATA fragment, 1058 bytes Frame 1155: 1112 bytes on wire (8896 bits), 1112 bytes captured (8896 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 68231, Ack: 1051, Len: 1058 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1156 11.049160 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1156: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 69289, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1157 11.049189 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1157: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 70669, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1158 11.049223 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=72049 Win=46378 Len=0 Frame 1158: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 72049, Len: 0 No. Time Source Destination Protocol Length Info 1159 11.049251 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1159: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 72049, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1160 11.049284 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1160: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 73429, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1161 11.049314 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1161: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 74809, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1162 11.049344 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1162: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 76189, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1163 11.049374 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1163: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 77569, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1164 11.049403 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=74809 Win=43618 Len=0 Frame 1164: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 74809, Len: 0 No. Time Source Destination Protocol Length Info 1165 11.049430 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=78949 Win=39478 Len=0 Frame 1165: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 78949, Len: 0 No. Time Source Destination Protocol Length Info 1166 11.049463 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1166: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 78949, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1167 11.049492 206.225.164.186 192.168.10.207 SMTP 376 C: DATA fragment, 322 bytes Frame 1167: 376 bytes on wire (3008 bits), 376 bytes captured (3008 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 80329, Ack: 1051, Len: 322 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1168 11.049520 206.225.164.186 192.168.10.207 SMTP 200 C: DATA fragment, 146 bytes Frame 1168: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 80651, Ack: 1051, Len: 146 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1169 11.049548 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1169: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 80797, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1170 11.049578 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1170: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 82177, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1171 11.049608 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1171: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 83557, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1172 11.049638 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1172: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 84937, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1173 11.049667 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=80797 Win=37630 Len=0 Frame 1173: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 80797, Len: 0 No. Time Source Destination Protocol Length Info 1174 11.049694 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=84937 Win=33490 Len=0 Frame 1174: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 84937, Len: 0 No. Time Source Destination Protocol Length Info 1175 11.049728 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1175: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 86317, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1176 11.049766 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1176: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 87697, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1177 11.049796 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1177: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 89077, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1178 11.049825 206.225.164.186 192.168.10.207 SMTP 555 C: DATA fragment, 501 bytes Frame 1178: 555 bytes on wire (4440 bits), 555 bytes captured (4440 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 90457, Ack: 1051, Len: 501 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1179 11.049854 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1179: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 90958, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1180 11.049882 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=87697 Win=30730 Len=0 Frame 1180: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 87697, Len: 0 No. Time Source Destination Protocol Length Info 1181 11.049909 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=90958 Win=27469 Len=0 Frame 1181: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 90958, Len: 0 No. Time Source Destination Protocol Length Info 1182 11.049938 206.225.164.186 192.168.10.207 SMTP 1157 C: DATA fragment, 1103 bytes Frame 1182: 1157 bytes on wire (9256 bits), 1157 bytes captured (9256 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 92338, Ack: 1051, Len: 1103 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1183 11.049967 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1183: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 93441, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1184 11.049996 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1184: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 94821, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1185 11.050025 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1185: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 96201, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1186 11.050054 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=93441 Win=24986 Len=0 Frame 1186: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 93441, Len: 0 No. Time Source Destination Protocol Length Info 1187 11.050082 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1187: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 97581, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1188 11.050110 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=96201 Win=22226 Len=0 Frame 1188: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 96201, Len: 0 No. Time Source Destination Protocol Length Info 1189 11.050145 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1189: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 98961, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1190 11.050175 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1190: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 100341, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1191 11.050204 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=98961 Win=19466 Len=0 Frame 1191: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 98961, Len: 0 No. Time Source Destination Protocol Length Info 1192 11.050232 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1192: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 101721, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1193 11.050261 206.225.164.186 192.168.10.207 SMTP 860 C: DATA fragment, 806 bytes Frame 1193: 860 bytes on wire (6880 bits), 860 bytes captured (6880 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 103101, Ack: 1051, Len: 806 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1194 11.050290 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1194: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 103907, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1195 11.050318 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=101721 Win=16706 Len=0 Frame 1195: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 101721, Len: 0 No. Time Source Destination Protocol Length Info 1196 11.050346 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1196: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 105287, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1197 11.050375 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1197: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 106667, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1198 11.050404 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=103907 Win=14520 Len=0 Frame 1198: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 103907, Len: 0 No. Time Source Destination Protocol Length Info 1199 11.050432 206.225.164.186 192.168.10.207 SMTP 709 C: DATA fragment, 655 bytes Frame 1199: 709 bytes on wire (5672 bits), 709 bytes captured (5672 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 108047, Ack: 1051, Len: 655 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1200 11.050461 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1200: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 108702, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1201 11.050489 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=106667 Win=11760 Len=0 Frame 1201: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 106667, Len: 0 No. Time Source Destination Protocol Length Info 1202 11.050517 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1202: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 110082, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1203 11.050546 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=108702 Win=9725 Len=0 Frame 1203: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 108702, Len: 0 No. Time Source Destination Protocol Length Info 1204 11.050574 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1204: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 111462, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1205 11.050603 206.225.164.186 192.168.10.207 SMTP 1217 C: DATA fragment, 1163 bytes Frame 1205: 1217 bytes on wire (9736 bits), 1217 bytes captured (9736 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 112842, Ack: 1051, Len: 1163 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1206 11.050631 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=111462 Win=6965 Len=0 Frame 1206: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 111462, Len: 0 No. Time Source Destination Protocol Length Info 1207 11.050659 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1207: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 114005, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1208 11.050688 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1208: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 115385, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1209 11.050717 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1209: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 116765, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1210 11.050756 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1210: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 118145, Ack: 1051, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1211 11.050784 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=115385 Win=3042 Len=0 Frame 1211: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 115385, Len: 0 No. Time Source Destination Protocol Length Info 1212 11.050814 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=118145 Win=282 Len=0 Frame 1212: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 118145, Len: 0 No. Time Source Destination Protocol Length Info 1213 11.151698 192.168.10.142 192.168.10.255 NBNS 110 Registration NB WORKGROUP<00> Frame 1213: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 1214 11.151869 192.168.10.142 192.168.10.255 NBNS 110 Registration NB WORKGROUP<00> Frame 1214: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 1215 11.151970 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=1051 Ack=118427 Win=0 Len=0 Frame 1215: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 118427, Len: 0 No. Time Source Destination Protocol Length Info 1216 11.165442 192.168.10.30 192.168.10.255 UDP 764 Source port: 34427 Destination port: apc-3052 Frame 1216: 764 bytes on wire (6112 bits), 764 bytes captured (6112 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (722 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 34 3a 30 36 0a 53 52 3d 31 42 0a =18:44:06.SR=1B. 0060 53 55 3d 37 42 31 32 45 46 45 44 0a 52 44 3d 39 SU=7B12EFED.RD=9 0070 41 45 42 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 AEB.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 =08.7E=00.3E=001 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 .4C=207.3.50=040 00c0 2e 30 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 .0.43=025.2.78=0 00d0 37 2f 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 7/25/06.6A=0023: 00e0 0a 34 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 .47=S.63=BAI_UPS 00f0 20 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f .66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 =00.38=00.6E=NS0 0120 36 33 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 631005398 .6D=0 0130 37 2f 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 7/25/06.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 52 4d -UPS RT 10000 RM 0150 20 58 4c 0a 34 36 3d 35 39 2e 39 38 0a 34 44 3d XL.46=59.98.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 207.3.4E=204.4.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 =000.42=218.1.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e .5C=034.0.2F=16. 01d0 34 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 47.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 36 30 2e 30 31 3b 32 30 37 000.09=60.01;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 .E9=0.I0=2.I1=26 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a .I5=0.I6=0.I7=1. 0250 49 38 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 I8=Device 1.I9=0 0260 0a 49 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d .IA=Device 2.IB= 0270 30 0a 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 0.IC=Relay 1.ID= 0280 30 0a 53 48 3d 43 45 39 33 44 42 41 32 31 39 42 0.SH=CE93DBA219B 0290 39 32 33 44 35 44 45 36 34 31 32 44 30 41 37 41 923D5DE6412D0A7A 02a0 39 36 43 44 42 0a 4d 44 3d 39 61 64 32 33 38 37 96CDB.MD=9ad2387 02b0 66 61 36 62 33 39 34 65 38 39 65 30 64 38 63 61 fa6b394e89e0d8ca 02c0 33 34 38 66 39 33 39 33 35 0a 3c 2f 42 4f 44 59 348f93935.</BODY 02d0 3e 0a >. No. Time Source Destination Protocol Length Info 1217 11.165575 192.168.10.30 192.168.10.255 UDP 764 Source port: 34427 Destination port: apc-3052 Frame 1217: 764 bytes on wire (6112 bits), 764 bytes captured (6112 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (722 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 34 3a 30 36 0a 53 52 3d 31 42 0a =18:44:06.SR=1B. 0060 53 55 3d 37 42 31 32 45 46 45 44 0a 52 44 3d 39 SU=7B12EFED.RD=9 0070 41 45 42 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 AEB.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 =08.7E=00.3E=001 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 .4C=207.3.50=040 00c0 2e 30 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 .0.43=025.2.78=0 00d0 37 2f 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 7/25/06.6A=0023: 00e0 0a 34 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 .47=S.63=BAI_UPS 00f0 20 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f .66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 =00.38=00.6E=NS0 0120 36 33 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 631005398 .6D=0 0130 37 2f 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 7/25/06.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 52 4d -UPS RT 10000 RM 0150 20 58 4c 0a 34 36 3d 35 39 2e 39 38 0a 34 44 3d XL.46=59.98.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 207.3.4E=204.4.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 =000.42=218.1.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e .5C=034.0.2F=16. 01d0 34 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 47.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 36 30 2e 30 31 3b 32 30 37 000.09=60.01;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 .E9=0.I0=2.I1=26 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a .I5=0.I6=0.I7=1. 0250 49 38 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 I8=Device 1.I9=0 0260 0a 49 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d .IA=Device 2.IB= 0270 30 0a 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 0.IC=Relay 1.ID= 0280 30 0a 53 48 3d 43 45 39 33 44 42 41 32 31 39 42 0.SH=CE93DBA219B 0290 39 32 33 44 35 44 45 36 34 31 32 44 30 41 37 41 923D5DE6412D0A7A 02a0 39 36 43 44 42 0a 4d 44 3d 39 61 64 32 33 38 37 96CDB.MD=9ad2387 02b0 66 61 36 62 33 39 34 65 38 39 65 30 64 38 63 61 fa6b394e89e0d8ca 02c0 33 34 38 66 39 33 39 33 35 0a 3c 2f 42 4f 44 59 348f93935.</BODY 02d0 3e 0a >. No. Time Source Destination Protocol Length Info 1218 11.176114 192.168.10.31 192.168.10.1 ICMP 98 Echo (ping) request id=0xcda2, seq=0/0, ttl=64 Frame 1218: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.1 (192.168.10.1) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 1219 11.176178 192.168.10.1 192.168.10.31 ICMP 98 Echo (ping) reply id=0xcda2, seq=0/0, ttl=64 Frame 1219: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: American_cb:ce:7a (00:c0:b7:cb:ce:7a) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.31 (192.168.10.31) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 1220 11.179929 Watchgua_3c:4c:d8 American_cb:ce:7a ARP 60 Who has 192.168.10.31? Tell 192.168.10.1 Frame 1220: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: American_cb:ce:7a (00:c0:b7:cb:ce:7a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1221 11.186549 American_cb:ce:7a Watchgua_3c:4c:d8 ARP 60 192.168.10.31 is at 00:c0:b7:cb:ce:7a Frame 1221: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1222 11.193804 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 1222: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1223 11.195005 182.178.75.135 192.168.10.207 TCP 62 hsl-storm > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 1223: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: hsl-storm (2113), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 1224 11.195070 192.168.10.207 182.178.75.135 TCP 62 smtp > hsl-storm [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 1224: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: hsl-storm (2113), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 1225 11.210775 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=210001 Win=65535 Len=0 Frame 1225: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 210001, Len: 0 No. Time Source Destination Protocol Length Info 1226 11.308959 192.168.10.217 4.2.2.2 DNS 77 Standard query TXT _nfsv4idmapdomain Frame 1226: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.217 (192.168.10.217), Dst: 4.2.2.2 (4.2.2.2) User Datagram Protocol, Src Port: 51147 (51147), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 1227 11.315261 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 1227: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1228 11.327393 4.2.2.2 192.168.10.217 DNS 152 Standard query response, No such name Frame 1228: 152 bytes on wire (1216 bits), 152 bytes captured (1216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Oracle_86:77:66 (00:14:4f:86:77:66) Internet Protocol Version 4, Src: 4.2.2.2 (4.2.2.2), Dst: 192.168.10.217 (192.168.10.217) User Datagram Protocol, Src Port: domain (53), Dst Port: 51147 (51147) Domain Name System (response) No. Time Source Destination Protocol Length Info 1229 11.327938 Watchgua_3c:4c:d8 Oracle_86:77:66 ARP 60 Who has 192.168.10.217? Tell 192.168.10.1 Frame 1229: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Oracle_86:77:66 (00:14:4f:86:77:66) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1230 11.327953 Oracle_86:77:66 Watchgua_3c:4c:d8 ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 1230: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1231 11.393106 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1789860096, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1231: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1232 11.393129 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1789860096, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1232: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1233 11.393142 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1789860096, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1233: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1234 11.393155 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1789860096, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1234: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1235 11.413992 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3658940672, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1235: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1236 11.414011 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3658940672, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1236: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1237 11.414033 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3658940672, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1237: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1238 11.414045 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3658940672, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1238: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1239 11.443377 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 1239: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1240 11.528955 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 1240: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 118427, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1241 11.528994 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=119525 Ack=1093 Win=46258 Len=0 Frame 1241: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 119525, Ack: 1093, Len: 0 No. Time Source Destination Protocol Length Info 1242 11.529055 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=1093 Ack=118427 Win=0 Len=0 Frame 1242: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1093, Ack: 118427, Len: 0 No. Time Source Destination Protocol Length Info 1243 11.562053 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 1243: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1244 11.562084 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 1244: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1245 11.566521 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 1245: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1246 11.604593 182.178.75.135 192.168.10.207 TCP 60 hsl-storm > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 1246: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: hsl-storm (2113), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 1247 11.604777 192.168.10.1 192.168.10.245 Syslog 204 LOCAL1.INFO: Oct 3 19:44:29 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2113 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 1247: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:29 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2113 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 1248 11.604810 192.168.10.207 182.178.75.135 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:44:04 -0400 Frame 1248: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: hsl-storm (2113), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1249 11.604849 182.178.75.135 192.168.10.207 TCP 60 hsl-storm > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 1249: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: hsl-storm (2113), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 1250 11.764938 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.100? Tell 192.168.10.226 Frame 1250: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1251 11.764972 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.100? Tell 192.168.10.226 Frame 1251: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1252 11.764986 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 1252: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1253 11.764997 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 1253: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1254 11.765007 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 1254: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1255 11.765017 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 1255: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1256 11.765027 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 1256: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1257 11.765038 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 1257: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1258 11.765240 192.168.10.46 192.168.10.245 Syslog 214 LOCAL4.WARNING: Oct 03 2011 19:15:12 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n Frame 1258: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:15:12 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n No. Time Source Destination Protocol Length Info 1259 11.765252 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 1259: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1260 11.765263 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 1260: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1261 11.765273 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 1261: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1262 11.765284 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 1262: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1263 11.765300 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 1263: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1264 11.765334 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 1264: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1265 11.765345 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 1265: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1266 11.765354 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 1266: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1267 11.765378 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 1267: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1268 11.765397 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 1268: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1269 11.765407 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 1269: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1270 11.765418 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 1270: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1271 11.765428 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 1271: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1272 11.765438 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 1272: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1273 11.765448 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 1273: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1274 11.765458 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 1274: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1275 11.765468 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 1275: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1276 11.765478 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 1276: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1277 11.765488 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 1277: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1278 11.765499 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 1278: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1279 11.765509 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 1279: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1280 11.765518 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 1280: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1281 11.765529 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 1281: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1282 11.765539 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 1282: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1283 11.765549 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 1283: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1284 11.765559 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 1284: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1285 11.765569 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 1285: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1286 11.765588 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 1286: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1287 11.765599 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 1287: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1288 11.765609 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 1288: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1289 11.765619 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 1289: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1290 11.765629 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 1290: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1291 11.765639 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 1291: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1292 11.765650 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 1292: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1293 11.765660 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 1293: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1294 11.765676 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 1294: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1295 11.878899 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=673 Ack=16508 Win=47758 Len=0 Frame 1295: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 673, Ack: 16508, Len: 0 No. Time Source Destination Protocol Length Info 1296 11.878932 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 1295#1] smtp > 9428 [ACK] Seq=673 Ack=16508 Win=47758 Len=0 Frame 1296: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 673, Ack: 16508, Len: 0 No. Time Source Destination Protocol Length Info 1297 11.878967 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1297: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 16561, Ack: 673, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1298 11.878997 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1298: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 17941, Ack: 673, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1299 11.879026 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1299: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 19321, Ack: 673, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1300 11.879056 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1300: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 20701, Ack: 673, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1301 11.879085 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1301: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 22081, Ack: 673, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1302 11.879114 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 1295#2] smtp > 9428 [ACK] Seq=673 Ack=16508 Win=47758 Len=0 Frame 1302: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 673, Ack: 16508, Len: 0 No. Time Source Destination Protocol Length Info 1303 11.879145 192.168.10.207 206.225.164.188 SMTP 222 S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 1303: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 673, Ack: 16508, Len: 168 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1304 11.879172 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=23461 Ack=841 Win=46085 Len=0 Frame 1304: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 23461, Ack: 841, Len: 0 No. Time Source Destination Protocol Length Info 1305 11.879200 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 1303#1] smtp > 9428 [ACK] Seq=841 Ack=16508 Win=47758 Len=0 Frame 1305: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 16508, Len: 0 No. Time Source Destination Protocol Length Info 1306 11.879227 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 1303#2] smtp > 9428 [ACK] Seq=841 Ack=16508 Win=47758 Len=0 Frame 1306: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 16508, Len: 0 No. Time Source Destination Protocol Length Info 1307 11.879255 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 1303#3] smtp > 9428 [ACK] Seq=841 Ack=16508 Win=47758 Len=0 Frame 1307: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 16508, Len: 0 No. Time Source Destination Protocol Length Info 1308 11.879283 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 1303#4] smtp > 9428 [ACK] Seq=841 Ack=16508 Win=47758 Len=0 Frame 1308: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 16508, Len: 0 No. Time Source Destination Protocol Length Info 1309 11.879311 206.225.164.188 192.168.10.207 SMTP 107 [TCP Fast Retransmission] C: DATA fragment, 53 bytes Frame 1309: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 16508, Ack: 841, Len: 53 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1310 11.879341 206.225.164.188 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 1310: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 16561, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1311 11.879398 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=841 Ack=23461 Win=40805 Len=0 Frame 1311: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 23461, Len: 0 No. Time Source Destination Protocol Length Info 1312 11.879485 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1312: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 23461, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1313 11.879517 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1313: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 24841, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1314 11.879607 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=841 Ack=26221 Win=38045 Len=0 Frame 1314: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 26221, Len: 0 No. Time Source Destination Protocol Length Info 1315 11.879685 206.225.164.188 192.168.10.207 SMTP 469 C: DATA fragment, 415 bytes Frame 1315: 469 bytes on wire (3752 bits), 469 bytes captured (3752 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 26221, Ack: 841, Len: 415 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1316 11.879717 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1316: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 26636, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1317 11.879746 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1317: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 28016, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1318 11.879849 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=841 Ack=28016 Win=36250 Len=0 Frame 1318: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 28016, Len: 0 No. Time Source Destination Protocol Length Info 1319 11.880042 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1319: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 29396, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1320 11.880072 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1320: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 30776, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1321 11.880102 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=841 Ack=30776 Win=33490 Len=0 Frame 1321: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 30776, Len: 0 No. Time Source Destination Protocol Length Info 1322 11.880133 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1322: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 32156, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1323 11.880163 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1323: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 33536, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1324 11.880192 206.225.164.188 192.168.10.207 SMTP 1137 C: DATA fragment, 1083 bytes Frame 1324: 1137 bytes on wire (9096 bits), 1137 bytes captured (9096 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 34916, Ack: 841, Len: 1083 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1325 11.880223 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=841 Ack=33536 Win=30730 Len=0 Frame 1325: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 33536, Len: 0 No. Time Source Destination Protocol Length Info 1326 11.880251 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=841 Ack=35999 Win=28267 Len=0 Frame 1326: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 35999, Len: 0 No. Time Source Destination Protocol Length Info 1327 11.880279 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1327: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 35999, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1328 11.880310 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1328: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 37379, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1329 11.880340 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1329: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 38759, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1330 11.880369 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1330: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 40139, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1331 11.880407 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=841 Ack=41519 Win=22747 Len=0 Frame 1331: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 41519, Len: 0 No. Time Source Destination Protocol Length Info 1332 11.880499 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1332: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 41519, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1333 11.880532 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1333: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 42899, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1334 11.880561 206.225.164.188 192.168.10.207 SMTP 188 C: DATA fragment, 134 bytes Frame 1334: 188 bytes on wire (1504 bits), 188 bytes captured (1504 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 44279, Ack: 841, Len: 134 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1335 11.880589 206.225.164.188 192.168.10.207 SMTP 449 C: DATA fragment, 395 bytes Frame 1335: 449 bytes on wire (3592 bits), 449 bytes captured (3592 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 44413, Ack: 841, Len: 395 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1336 11.880618 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1336: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 44808, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1337 11.880648 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1337: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 46188, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1338 11.880680 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=841 Ack=44808 Win=19458 Len=0 Frame 1338: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 44808, Len: 0 No. Time Source Destination Protocol Length Info 1339 11.880708 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=841 Ack=47568 Win=16698 Len=0 Frame 1339: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 47568, Len: 0 No. Time Source Destination Protocol Length Info 1340 11.880737 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1340: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 47568, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1341 11.880766 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1341: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 48948, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1342 11.880796 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1342: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 50328, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1343 11.880835 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1343: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 51708, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1344 11.880865 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1344: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 53088, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1345 11.880895 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=841 Ack=51708 Win=12558 Len=0 Frame 1345: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 51708, Len: 0 No. Time Source Destination Protocol Length Info 1346 11.880923 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=841 Ack=54468 Win=9798 Len=0 Frame 1346: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 54468, Len: 0 No. Time Source Destination Protocol Length Info 1347 11.880953 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1347: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 54468, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1348 11.880982 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1348: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 55848, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1349 11.881014 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1349: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 57228, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1350 11.881044 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1350: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 58608, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1351 11.881073 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1351: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 59988, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1352 11.881105 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1352: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 61368, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1353 11.881133 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=841 Ack=58608 Win=5658 Len=0 Frame 1353: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 58608, Len: 0 No. Time Source Destination Protocol Length Info 1354 11.881164 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1354: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 62748, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1355 11.881193 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=841 Ack=62748 Win=1518 Len=0 Frame 1355: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 62748, Len: 0 No. Time Source Destination Protocol Length Info 1356 11.881222 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1356: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 64128, Ack: 841, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1357 11.881252 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=841 Ack=64266 Win=0 Len=0 Frame 1357: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 64266, Len: 0 No. Time Source Destination Protocol Length Info 1358 11.997320 192.168.10.190 64.74.103.148 TLSv1 91 Application Data Frame 1358: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.190 (192.168.10.190), Dst: 64.74.103.148 (64.74.103.148) Transmission Control Protocol, Src Port: wsmlb (3806), Dst Port: https (443), Seq: 1, Ack: 1, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 1359 11.997381 64.74.103.148 192.168.10.190 TCP 60 https > wsmlb [ACK] Seq=1 Ack=38 Win=65535 Len=0 Frame 1359: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Internet Protocol Version 4, Src: 64.74.103.148 (64.74.103.148), Dst: 192.168.10.190 (192.168.10.190) Transmission Control Protocol, Src Port: https (443), Dst Port: wsmlb (3806), Seq: 1, Ack: 38, Len: 0 No. Time Source Destination Protocol Length Info 1360 11.999865 Watchgua_3c:4c:d8 IntelCor_ed:1a:23 ARP 60 Who has 192.168.10.190? Tell 192.168.10.1 Frame 1360: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1361 11.999881 IntelCor_ed:1a:23 Watchgua_3c:4c:d8 ARP 60 192.168.10.190 is at 00:13:20:ed:1a:23 Frame 1361: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1362 12.019988 182.178.75.135 192.168.10.207 SMTP 71 C: EHLO aabcmm.com Frame 1362: 71 bytes on wire (568 bits), 71 bytes captured (568 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: hsl-storm (2113), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 17 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1363 12.020176 192.168.10.207 182.178.75.135 SMTP 245 S: 250-mail.mydomain.com Hello [182.178.75.135] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 1363: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: hsl-storm (2113), Seq: 122, Ack: 18, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1364 12.020219 182.178.75.135 192.168.10.207 TCP 60 hsl-storm > smtp [ACK] Seq=18 Ack=313 Win=93128 Len=0 Frame 1364: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: hsl-storm (2113), Dst Port: smtp (25), Seq: 18, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 1365 12.020717 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:44:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2113 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 1365: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2113 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" No. Time Source Destination Protocol Length Info 1366 12.020785 192.168.10.1 192.168.10.245 Syslog 277 LOCAL1.INFO: Oct 3 19:44:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2113 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 1366: 277 bytes on wire (2216 bits), 277 bytes captured (2216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2113 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPEL No. Time Source Destination Protocol Length Info 1367 12.020853 192.168.10.1 192.168.10.245 Syslog 270 LOCAL1.INFO: Oct 3 19:44:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2113 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 1367: 270 bytes on wire (2160 bits), 270 bytes captured (2160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2113 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 1368 12.021399 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=49794 Ack=963 Win=1002 Len=1448 TSval=538254 TSecr=727580 Frame 1368: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 49794, Ack: 963, Len: 1448 Data (1448 bytes) 0000 17 03 01 21 b0 48 f9 22 17 f6 80 19 d7 8c ce 50 ...!.H.".......P 0010 03 85 7b 12 e2 a3 6f 41 bb 58 9d d5 63 8a 03 6b ..{...oA.X..c..k 0020 7f 4a 4b dd aa d1 43 65 3f 99 60 bc 66 18 ee de .JK...Ce?.`.f... 0030 4b 74 cf 1a 29 ff 10 17 63 9b 01 5d 5e b1 96 64 Kt..)...c..]^..d 0040 75 a4 c4 a7 b1 f5 d5 7e fd c8 37 ec a7 6f 29 77 u......~..7..o)w 0050 5e 7c 90 9e 10 a5 47 d8 93 3a 22 ce 9f 7a 15 15 ^|....G..:"..z.. 0060 c6 f0 44 9d c5 1f 6c bd 59 50 4c 47 ef f9 b7 1f ..D...l.YPLG.... 0070 e2 91 c8 1c 90 54 88 f3 79 0b cd b6 be 86 10 8d .....T..y....... 0080 cc 91 26 0c 48 fd 4e 81 22 e7 0d 24 b2 38 c2 be ..&.H.N."..$.8.. 0090 b5 39 f0 fe 0a e8 ec b5 c2 01 e5 c5 d0 f6 77 ec .9............w. 00a0 a0 93 72 a8 14 28 8c ca 04 02 7d f3 af 2e db b2 ..r..(....}..... 00b0 3a 2f 0d e9 af 57 d8 8a cb fe 2d b1 d4 eb c2 bc :/...W....-..... 00c0 d2 72 5a 3a 3b 47 83 ec a7 e2 36 35 f5 84 f8 88 .rZ:;G....65.... 00d0 57 a9 7a cf e2 95 17 7f cd 96 1e 23 51 dc 35 51 W.z........#Q.5Q 00e0 e0 93 8f cc 75 51 ca 80 21 d8 58 b0 50 03 68 cd ....uQ..!.X.P.h. 00f0 f1 4d d5 4a 03 47 ed f7 0e 87 6b e7 06 69 43 bf .M.J.G....k..iC. 0100 2f 5f 43 6b d0 13 24 a8 22 db c4 b3 a3 59 83 37 /_Ck..$."....Y.7 0110 8e a2 ca 95 a8 77 4f 55 20 42 0b 9a 5e d4 99 e9 .....wOU B..^... 0120 5e f6 ed 95 b9 30 18 a9 5c 20 b1 89 72 8e 11 6a ^....0..\ ..r..j 0130 5a 20 fd b6 33 7b 6f bc 11 d4 19 e4 1a 8a bc 48 Z ..3{o........H 0140 64 34 c6 61 71 91 94 8f 8a 36 b8 d5 97 0c 22 9a d4.aq....6....". 0150 d1 b7 23 51 78 69 3e d6 39 2f 10 4c 3d df a2 7d ..#Qxi>.9/.L=..} 0160 64 78 49 96 1c 4c f7 e2 9a 8d a2 14 bb 21 fe 81 dxI..L.......!.. 0170 4b cb 98 f6 73 29 55 ea 01 9b d0 3b 39 7f e7 e9 K...s)U....;9... 0180 36 3b 96 d8 51 5c ef f5 66 95 b3 7c de ae 65 fa 6;..Q\..f..|..e. 0190 0c 76 ca e8 a2 67 1f bd 82 69 80 a0 7d 7b f4 fb .v...g...i..}{.. 01a0 da c8 8f 61 0c 09 9f 2d 83 97 63 15 e9 ac 6f 96 ...a...-..c...o. 01b0 69 3f 2c 64 20 03 d9 af cb 57 0c a3 2f 6d af 03 i?,d ....W../m.. 01c0 37 40 84 4c 69 1c aa b8 67 79 41 8d 71 4a fb 0f 7@xxxxxxxxxxxx.. 01d0 78 b3 5e 70 2f 64 f9 96 e9 ea 8a f1 8e 45 4d 7e x.^p/d.......EM~ 01e0 09 cb af 09 17 b1 1a 59 7b 90 a2 48 aa 26 ff c1 .......Y{..H.&.. 01f0 c0 1b 5d 5f fe 49 22 42 e6 28 f6 a4 2c 9b 9f f7 ..]_.I"B.(..,... 0200 31 72 72 76 b1 af 84 6c 67 0a e8 1b 65 de fd bd 1rrv...lg...e... 0210 bb 22 82 1e ba 7f 4f 02 91 d8 fb c0 ea ae 50 f5 ."....O.......P. 0220 c8 09 8d 76 57 d6 39 10 05 36 f1 f8 9a c6 19 44 ...vW.9..6.....D 0230 b6 29 75 8a 27 6e b4 5e 59 69 6e 3c 04 e7 42 20 .)u.'n.^Yin<..B 0240 32 c0 75 9d f5 f1 da df 53 9c 87 1a 35 d0 ae 45 2.u.....S...5..E 0250 9a 4c a3 e7 35 04 2f af c1 61 f5 80 e5 4d c4 44 .L..5./..a...M.D 0260 98 2c 3e da 4f 4c 11 fb 24 d1 e9 3d 55 39 4e fc .,>.OL..$..=U9N. 0270 8d 04 71 f6 61 8c 26 4c e0 b5 ec 1b 02 90 78 09 ..q.a.&L......x. 0280 17 5a d3 c5 72 c5 ce cc 8e 65 dd 8e d0 3c dc a0 .Z..r....e...<.. 0290 37 60 59 3e a7 33 c2 30 62 2b b8 d5 01 27 b8 6e 7`Y>.3.0b+...'.n 02a0 ec 48 b9 2a 35 1f 7f 82 be 9a 62 96 46 37 69 3b .H.*5.....b.F7i; 02b0 da cf d1 f9 ec 48 cf 22 bb 37 68 c9 f3 76 05 6a .....H.".7h..v.j 02c0 ee 4b 6f a3 9f 97 4e 65 ff 6d 53 cf 9f bd 48 66 .Ko...Ne.mS...Hf 02d0 9c 1d 82 56 f2 a7 74 6f 98 38 f9 a1 d5 44 61 dd ...V..to.8...Da. 02e0 3d 2b a9 f6 e3 49 c8 cb 95 10 26 7b a1 00 27 ee =+...I....&{..'. 02f0 f1 f3 09 47 34 47 1b b3 3d c0 08 db a1 6e b1 44 ...G4G..=....n.D 0300 83 a9 c1 95 70 91 d1 cf 7f 34 2d 20 bd 47 05 d9 ....p....4- .G.. 0310 56 8d 21 ba ea 1e 7a e6 f7 c0 3e 38 e4 b7 33 55 V.!...z...>8..3U 0320 dc 6c 1e 27 fe 5a 77 bb 28 39 25 ab 21 ca 3f 96 .l.'.Zw.(9%.!.?. 0330 e2 0e 86 b7 ae bb 78 c2 ee a2 ab 0d 82 83 68 ea ......x.......h. 0340 4d 8c ce 73 47 55 32 78 fc 09 f2 94 e5 ca 02 a7 M..sGU2x........ 0350 ca 9d 15 5b 10 03 eb 42 29 9b 7b 21 61 eb 04 fa ...[...B).{!a... 0360 e3 ec a7 d0 7f 2a 58 3c 4d d4 89 dc 0e 3f 1a 51 .....*X<M....?.Q 0370 0c 09 cc 95 37 26 61 40 f1 3a 4b c5 b7 34 6f f3 ....7&a@.:K..4o. 0380 fe 1b a3 5e 56 37 6c a1 1d 8b e0 fd f3 46 0b db ...^V7l......F.. 0390 37 da f9 50 56 2b eb a0 b5 2c 79 40 86 12 30 7b 7..PV+...,[email protected]{ 03a0 bc b6 d9 e6 80 fd 9b 9a 76 ad fe 7b ec 7a 01 8a ........v..{.z.. 03b0 2c e7 64 ee 78 55 da ee 38 90 71 48 69 91 f7 97 ,.d.xU..8.qHi... 03c0 ba 9d 8d 87 07 7d 95 8f 88 b5 8a fa 87 d0 15 7b .....}.........{ 03d0 71 22 70 af e9 aa 13 06 4a c5 db 64 d4 55 d8 a6 q"p.....J..d.U.. 03e0 5b 66 46 d7 e2 fe 08 c3 6f 2a 00 80 c1 4f 7e 5d [fF.....o*...O~] 03f0 03 46 d9 13 56 db c0 3f e4 3c 7a 6d dd 52 f6 78 .F..V..?.<zm.R.x 0400 f7 c0 7b dc c8 99 06 4b e1 fd b2 40 0e 45 c4 c0 ..{[email protected].. 0410 39 e1 e4 bf 59 b6 cc 7d 8e b1 a4 ef cc a6 af 17 9...Y..}........ 0420 32 67 34 c3 bf 4a 79 4c 7b b9 7d 96 13 c5 c8 bd 2g4..JyL{.}..... 0430 c5 25 a8 d5 71 d3 72 09 3f 53 4e 01 09 fa 9a 73 .%..q.r.?SN....s 0440 9e 46 b9 56 14 ad 07 6e 74 40 80 2e 35 3d 6e 2e [email protected]=n. 0450 f5 39 e8 7a 2f 4b 95 87 21 f2 7d db 57 1a 5f df .9.z/K..!.}.W._. 0460 ac 61 08 af 9e 6d 89 1a a1 83 02 77 4b 4c cc 1d .a...m.....wKL.. 0470 e5 04 21 c6 2b 8e af 8e 57 41 8f 32 b1 2c 31 4a ..!.+...WA.2.,1J 0480 22 3d 68 d9 80 8c 3d 02 24 fe cf 64 1a 82 7a 9d "=h...=.$..d..z. 0490 5f 4e 4a 26 f4 5a e2 f7 ad 37 08 a5 f7 94 6c e0 _NJ&.Z...7....l. 04a0 fc c2 19 cf ab 0c 6c ca 05 0e f7 a0 51 03 f9 c9 ......l.....Q... 04b0 02 c4 aa 1c 1c 27 f2 2c e7 c0 3d fd a0 80 c9 29 .....'.,..=....) 04c0 90 39 ea d7 74 99 21 41 31 22 b2 84 d6 57 b2 ee .9..t.!A1"...W.. 04d0 ab dc ae 9d 92 80 23 fb 15 27 5f 80 dd fb 66 40 ......#..'_...f@ 04e0 55 36 6c 24 fb d6 89 59 98 a8 d6 26 96 16 47 fd U6l$...Y...&..G. 04f0 cc 55 c3 34 1b 16 ad d6 9b 73 b9 5f 0d 0f 39 82 .U.4.....s._..9. 0500 e1 37 50 5f 37 7c a5 41 0f 74 6b 84 04 f2 f7 db .7P_7|.A.tk..... 0510 c6 81 28 15 f7 06 ea bd 86 67 dc 7f 66 02 0b 76 ..(......g..f..v 0520 f5 56 27 b0 6a a1 f3 d0 3b 10 6e 7f be 6e 17 05 .V'.j...;.n..n.. 0530 7e e2 0a 03 92 22 7e 8c 6c 16 d9 e5 5b a1 c3 b9 ~...."~.l...[... 0540 57 4b dc c8 6a fa 55 20 e9 0e b2 77 33 03 e9 65 WK..j.U ...w3..e 0550 e6 74 6c 9e 7c 04 89 2f 8a 75 dd 1b fa 43 e9 d3 .tl.|../.u...C.. 0560 f4 88 3d 58 c9 ae 10 74 04 03 54 73 48 a9 81 cc ..=X...t..TsH... 0570 dc b9 da be ee ae d1 f1 3f b0 2a 1b 05 ce 19 3c ........?.*....< 0580 52 97 92 e5 bd d8 4f 8e 9d f8 a6 5e f4 08 30 1b R.....O....^..0. 0590 8b 3c ba 1d 8d c5 e8 1f 33 62 bc da c3 b9 b6 25 .<......3b.....% 05a0 99 af 2f 0e 8c ba e1 92 ../..... No. Time Source Destination Protocol Length Info 1369 12.021496 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=51242 Ack=963 Win=1002 Len=1448 TSval=538254 TSecr=727580 Frame 1369: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 51242, Ack: 963, Len: 1448 Data (1448 bytes) 0000 e4 22 00 12 34 24 fd 61 20 92 14 2e d5 39 22 b1 ."..4$.a ....9". 0010 04 36 ea d4 b4 a6 a7 17 fa b9 3d 0f db e1 a1 d4 .6........=..... 0020 b3 ba 52 87 a1 03 e3 20 cf d2 80 29 d3 57 0b 34 ..R.... ...).W.4 0030 45 3f 27 70 d8 e0 ea 11 80 8b 8e 25 e2 ad 60 99 E?'p.......%..`. 0040 e0 8b 3e 92 c0 3f 23 c1 00 d5 f7 c6 92 e7 0c 6b ..>..?#........k 0050 df 0b 9a 2c e4 4b 93 50 71 54 0e bf 9d e5 53 f2 ...,.K.PqT....S. 0060 39 0c 4f 30 9f 44 71 63 c6 47 b7 e4 0e bb 23 c3 9.O0.Dqc.G....#. 0070 96 0a 56 ce 6f 34 fc f2 51 ef ee b3 59 f3 29 d3 ..V.o4..Q...Y.). 0080 95 81 6a 97 f7 6a 6e a5 3e c4 f5 2f 97 3b 87 c8 ..j..jn.>../.;.. 0090 7e f4 74 b0 06 37 83 0d f8 14 61 7e 53 59 70 14 ~.t..7....a~SYp. 00a0 c4 f0 3f 01 c1 8d 8d 53 d9 9c b4 a3 e5 d5 50 be ..?....S......P. 00b0 fe 8e d9 0b 58 c6 8a e0 8b 60 ba 6c de 38 6c 02 ....X....`.l.8l. 00c0 77 33 05 5a 0b c5 65 a6 d8 b4 1f 1a 2e a7 1b a6 w3.Z..e......... 00d0 43 d8 58 95 9d 7c 81 31 41 76 1c e6 ab 1c fb d7 C.X..|.1Av...... 00e0 a1 a4 76 e2 67 93 19 b6 4e 45 86 b5 0f 2a 4d 01 ..v.g...NE...*M. 00f0 b9 a6 74 3c 98 c8 a2 2d 04 b4 06 b2 cd 52 1e 18 ..t<...-.....R.. 0100 ae 78 bb 72 20 a9 23 b2 7c f8 8f 28 d9 e6 99 64 .x.r .#.|..(...d 0110 d5 03 24 e6 92 a7 37 88 67 b6 3e 46 c3 f3 a1 a0 ..$...7.g.>F.... 0120 93 27 f8 1a f2 8f af f5 70 44 21 b0 67 4e 8f e0 .'......pD!.gN.. 0130 57 72 11 f4 52 cf c9 44 2d 94 49 57 59 35 3b 12 Wr..R..D-.IWY5;. 0140 84 40 48 a0 cc dc 0d cc 62 3e d9 77 83 5b 45 5f [email protected]>.w.[E_ 0150 28 3e 86 bb 19 f4 00 e8 c0 ac 86 f7 a0 fa b7 8e (>.............. 0160 5c 66 dc 36 ce 90 6b bf 07 39 e9 16 aa 14 fd d8 \f.6..k..9...... 0170 32 89 49 cc 59 57 a0 15 56 20 e4 a6 19 f9 90 d8 2.I.YW..V ...... 0180 90 f7 a8 36 9c 45 91 43 ab a9 09 2e a9 ed 2f 96 ...6.E.C....../. 0190 47 b2 cf 81 87 d1 e9 5f c7 d1 e4 fb bc 92 5a 13 G......_......Z. 01a0 54 07 72 f9 5e a4 92 ee 2e 60 ef fb bb ef 48 45 T.r.^....`....HE 01b0 76 9e 6b 7c 7c 5f cc 06 29 92 1a a2 4b 02 c4 54 v.k||_..)...K..T 01c0 50 07 1c b9 c6 d8 54 d1 57 7f 80 19 b9 fe 49 59 P.....T.W.....IY 01d0 0b 73 be b7 a0 70 b7 cd 1a 19 8e 2e 31 77 8e 3d .s...p......1w.= 01e0 5d 2b 3c 8f c6 f9 07 24 2a 63 00 3f a5 53 86 9b ]+<....$*c.?.S.. 01f0 8f aa 43 ae d9 6d af 6d a2 3c b8 77 b3 e8 62 f5 ..C..m.m.<.w..b. 0200 8a 96 4b 82 17 90 9a 0d be 22 0b 3a af 89 32 f5 ..K......".:..2. 0210 c7 a9 86 4e d7 d7 ca 14 44 42 ff 7b ba 30 da 25 ...N....DB.{.0.% 0220 50 81 d9 d2 e1 5f 9b 31 27 2b ed e0 21 2d b4 88 P...._.1'+..!-.. 0230 e5 5d bb 0e c2 df 44 b9 dd b7 54 4f 42 d5 41 a3 .]....D...TOB.A. 0240 39 de 6f 3a d4 bd a4 2e e8 9d 35 f2 30 2b 21 97 9.o:......5.0+!. 0250 c6 49 69 9d 70 f3 32 b3 ce ce 50 00 7a 49 fa 1a .Ii.p.2...P.zI.. 0260 1c a6 28 7b cd 28 55 8d 2a 61 67 22 97 01 d2 61 ..({.(U.*ag"...a 0270 2a 21 f0 e4 15 3f a3 88 f2 bb 8c c8 0b 11 d6 6f *!...?.........o 0280 0b bd 4e c8 f5 b0 c0 b7 2c f1 ae 71 51 df 5f 3f ..N.....,..qQ._? 0290 98 20 6d 94 ac 47 eb 21 7b ed cf 38 72 28 35 24 . m..G.!{..8r(5$ 02a0 9d 6e ab e6 0b ea cc cf 3e 83 58 03 15 a2 d2 02 .n......>.X..... 02b0 a2 b7 1a 12 44 3a 74 f3 91 24 ba 05 2d 86 aa 66 ....D:t..$..-..f 02c0 3b a6 91 64 9e 7b cc af 7f 5a fc 82 68 f6 99 b1 ;..d.{...Z..h... 02d0 a4 b3 41 6a 6c a0 14 8d 77 51 9b 73 ea 44 42 a0 ..Ajl...wQ.s.DB. 02e0 47 4f d7 f7 46 00 6f ea c3 85 2b 93 f3 38 89 f1 GO..F.o...+..8.. 02f0 a5 ed 09 5a 16 5a a1 b6 16 ee 63 68 ad 68 57 df ...Z.Z....ch.hW. 0300 de 98 dc 63 52 c5 8c e3 60 d9 75 4c 0a 3e cc 8e ...cR...`.uL.>.. 0310 95 a3 1d 64 99 bd 6a 78 86 72 ab 41 ed 8f 89 96 ...d..jx.r.A.... 0320 73 d5 6a f1 50 69 cc c6 36 2d 07 59 c1 30 61 e8 s.j.Pi..6-.Y.0a. 0330 68 cc a1 29 35 ea e3 30 41 38 fa 57 ae b0 7f 0e h..)5..0A8.W.... 0340 74 d3 26 4c 7f 6a b5 b2 d5 f6 65 d1 21 ab a6 5f t.&L.j....e.!.._ 0350 4e 6c 64 57 0e 12 c8 a5 3e c5 e3 86 31 09 a9 b9 NldW....>...1... 0360 0a c1 6b 70 3d 04 80 d7 19 92 20 cc a5 48 96 6b ..kp=..... ..H.k 0370 ba a7 29 20 7c 68 e8 ee 23 f1 b9 0b d7 9a 49 39 ..) |h..#.....I9 0380 75 fc fa 9b 3b ba cc 6d 63 13 68 11 e4 18 b5 4f u...;..mc.h....O 0390 df ae c0 6a 68 21 1a 17 a9 10 9c 85 62 25 0f 8a ...jh!......b%.. 03a0 5d f9 3b b3 d9 57 b0 d3 75 ce 69 26 e0 51 23 41 ].;..W..u.i&.Q#A 03b0 09 ec bb 54 c6 47 e1 61 a1 0a c8 fe 6c 7f e6 40 ...T.G.a....l..@ 03c0 97 18 4f c1 e9 06 16 07 50 82 f1 07 84 75 a3 98 ..O.....P....u.. 03d0 85 2f e9 a7 7f 82 ca 21 01 5b 5b 7e 67 31 39 9e ./.....!.[[~g19. 03e0 b6 35 9f 25 e2 12 d2 3b 10 a1 c7 0f 1f 8d bb 96 .5.%...;........ 03f0 b9 08 5a 31 c5 5e bb 52 11 1f c6 2d 23 da e4 e0 ..Z1.^.R...-#... 0400 d2 1e 17 2c d6 38 c0 4e 8e ca 2d 60 8d f3 98 94 ...,.8.N..-`.... 0410 6f cf e1 2a b5 8b cf 00 a8 cb 6a e2 a7 53 6b 21 o..*......j..Sk! 0420 c5 59 b3 2e 14 2a f7 e3 f7 6a 56 24 59 21 c5 45 .Y...*...jV$Y!.E 0430 66 58 49 65 7f d8 c0 ab c3 0e 62 d3 30 a5 49 50 fXIe......b.0.IP 0440 f3 aa cc d2 8c 12 b2 98 b8 4b df eb d8 12 b1 0e .........K...... 0450 e0 5b 51 03 91 e3 57 56 90 98 04 96 ca 63 e9 f7 .[Q...WV.....c.. 0460 99 75 f8 f2 6c 7d 12 fd 64 8f 35 8f d6 d4 16 84 .u..l}..d.5..... 0470 d4 8d e1 62 f1 81 c8 2d 6d 85 99 26 7b 78 79 6c ...b...-m..&{xyl 0480 13 65 b2 33 39 4f 6c c4 3d 3a bc d1 6e b9 aa 83 .e.39Ol.=:..n... 0490 16 de f0 c5 f8 f7 5d b7 64 c1 9a 1c 44 c0 f5 43 ......].d...D..C 04a0 09 30 b9 cb af 74 eb 93 3f 99 7e 98 4a 02 fd 66 .0...t..?.~.J..f 04b0 ea 65 3b d6 a5 b7 a0 32 2f 19 3f 06 ad 58 a2 99 .e;....2/.?..X.. 04c0 61 32 7a ba f5 10 35 e0 9b 97 9a cd db b8 1c a7 a2z...5......... 04d0 32 1e da 07 70 c8 d4 6e 4f 0d 87 f7 ae 2d 1b b8 2...p..nO....-.. 04e0 72 71 db a8 d2 5d f0 31 2d 4e a9 f7 9a 72 c6 13 rq...].1-N...r.. 04f0 37 3d c7 6f 11 37 bb 9b 23 be c9 66 ea 68 49 d7 7=.o.7..#..f.hI. 0500 4e f0 72 6d 7e f4 a5 56 d2 05 90 5e 5b a9 18 f5 N.rm~..V...^[... 0510 c7 0d 4d f6 e2 3f ac 85 23 23 e6 c6 fe 40 34 1b ..M..?..##...@4. 0520 87 44 f0 eb 97 5e a8 43 08 44 2a 1b 37 fe b1 bd .D...^.C.D*.7... 0530 29 75 c6 87 ee 8c f5 f0 33 26 e8 e4 b4 d6 34 d5 )u......3&....4. 0540 3e f1 87 e4 8b e5 69 07 78 01 e3 29 74 fc 7c c1 >.....i.x..)t.|. 0550 b2 90 39 29 2d 5e bd f9 f3 38 27 52 d5 8b a3 d2 ..9)-^...8'R.... 0560 af fb 9c 74 c2 04 f5 2b 5e 5b a2 63 fe ac 8e b1 ...t...+^[.c.... 0570 db 38 7d a2 3c 13 40 23 89 b7 4f 9e 30 cc 99 e7 .8}.<.@#..O.0... 0580 d3 3d 8b a2 da 80 8a 7e 9f 52 69 01 84 2b 48 c0 .=.....~.Ri..+H. 0590 48 e7 71 8a 4c dc f0 7d 9f 26 2f dd e4 46 21 36 H.q.L..}.&/..F!6 05a0 e6 b3 51 89 fd c0 23 76 ..Q...#v No. Time Source Destination Protocol Length Info 1370 12.021582 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=52690 Ack=963 Win=1002 Len=1448 TSval=538254 TSecr=727580 Frame 1370: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 52690, Ack: 963, Len: 1448 Data (1448 bytes) 0000 52 64 04 ff ed 53 7c 6e e4 04 1e 40 09 66 79 bb Rd...S|[email protected]. 0010 e7 1e 8c 2e fd 93 eb d7 3c d2 3b 40 e1 cd df 9b ........<.;@.... 0020 2b 60 4b e3 5f 96 69 b7 1a 80 76 5b 75 c5 89 9c +`K._.i...v[u... 0030 c6 56 9f 15 4c 50 97 af 6d ed 3f ac 6e 2d 81 28 .V..LP..m.?.n-.( 0040 88 4d cf 16 e1 4e 59 9c 57 f2 ca 74 f7 04 ee 72 .M...NY.W..t...r 0050 a7 c3 e9 0c 86 bc cf 74 5f ff 28 61 67 29 e5 b8 .......t_.(ag).. 0060 69 cd dd e6 a3 3a dc 8d cc de 63 9f 2b 5a 77 30 i....:....c.+Zw0 0070 66 59 c0 fd 1d ad 99 6b b8 30 be c7 56 60 94 e5 fY.....k.0..V`.. 0080 23 1b 24 68 ae 5c bc c6 c6 56 79 0c 39 70 1e a8 #.$h.\...Vy.9p.. 0090 5f 31 b5 cd 7c cf be ca b4 dd 9d 09 40 f0 7c ef _1..|.......@.|. 00a0 1a 6e c4 77 1e c7 94 36 63 71 8e 78 17 b2 c4 95 .n.w...6cq.x.... 00b0 fe 6f c2 48 0b c8 30 88 e9 c3 d4 a7 4d 77 2e e9 .o.H..0.....Mw.. 00c0 ef a7 c7 8c 37 df 51 6e 7d 52 5d c8 99 f0 8d 2f ....7.Qn}R]..../ 00d0 cb 74 76 c3 cc 02 02 8f 1d 38 9e bb 5b bd b3 21 .tv......8..[..! 00e0 3a 4c 61 12 d8 65 df 7c 09 c3 f3 d3 be e6 95 d0 :La..e.|........ 00f0 ed e8 16 20 a4 b3 c5 9b 75 68 4e 14 72 c5 8f ad ... ....uhN.r... 0100 ed 2a 59 f8 2a 5d c3 6b 72 5f 43 ae 33 27 3f 35 .*Y.*].kr_C.3'?5 0110 d9 2d 79 9a 72 74 1a ec ce 80 5c 03 cc 84 a1 01 .-y.rt....\..... 0120 be d1 18 c9 72 d9 b4 9f b7 ac 48 be 7c e3 da 57 ....r.....H.|..W 0130 38 01 3b 8a 52 80 44 fd 43 66 c7 af bd f1 18 3d 8.;.R.D.Cf.....= 0140 17 4e 3f cb d3 ea 23 0f 8b 5f d0 73 33 6a 83 d2 .N?...#.._.s3j.. 0150 fa 9c 15 f1 bf a1 bd bc 54 19 e1 db d3 0f 51 9d ........T.....Q. 0160 10 3b d2 86 a6 59 48 0a be 7a b3 5b 92 6b 80 c8 .;...YH..z.[.k.. 0170 f4 af b7 a4 41 a1 8b f8 2d 6b 23 5b 71 3b ad 5e ....A...-k#[q;.^ 0180 99 86 bb 23 47 3f b3 d1 5a 29 2f cf 40 2f 7e 36 ...#G?..Z)/.@/~6 0190 b6 c2 31 6e 1e 13 a2 b0 40 43 e6 11 ea 5e a8 48 ..1n....@C...^.H 01a0 f0 2a ed a7 55 14 6e e1 af f0 b3 00 19 ed eb e9 .*..U.n......... 01b0 e4 57 cc 69 1e 72 74 50 fb 4f 09 8a 47 e0 19 78 .W.i.rtP.O..G..x 01c0 b8 5e fa 11 95 25 10 bf ea 5b 8e 6d bc 94 ae 37 .^...%...[.m...7 01d0 60 63 0b b9 bf f2 28 93 cd 59 e6 32 62 43 98 28 `c....(..Y.2bC.( 01e0 6c 40 8d 05 fa ce 0e 8b 93 44 86 c3 2c 91 4d 06 [email protected]..,.M. 01f0 97 3d f5 07 04 2e 56 e4 ff 54 1e 1d a1 b0 75 6c .=....V..T....ul 0200 f9 9d fb 43 ef 2c 29 39 cb 94 68 58 3a 9a 97 52 ...C.,)9..hX:..R 0210 f5 43 ac c2 5c 78 a5 99 ed 7a 2f a6 f1 12 8d 67 .C..\x...z/....g 0220 1e 88 e6 70 13 32 7a 76 be 8d 93 2e 88 be 01 8c ...p.2zv........ 0230 b2 cb 10 67 b6 ba 15 09 f2 5a 62 7d 32 cc 2e 09 ...g.....Zb}2... 0240 16 c3 43 b5 04 8c 2d ea e8 1b 87 b5 9c 0a 2a c6 ..C...-.......*. 0250 34 a6 aa 0b 48 b1 fb 67 dd 71 e4 16 5d 51 ec 53 4...H..g.q..]Q.S 0260 42 55 90 5f 6e 58 a3 2c dd 0c 67 5b d7 4c f7 3b BU._nX.,..g[.L.; 0270 69 f6 3f 17 74 97 a6 48 99 5c d5 76 a0 19 a1 2c i.?.t..H.\.v..., 0280 26 dc 0e 57 7f 6e 04 24 e8 17 65 8a fa 8f 50 f5 &..W.n.$..e...P. 0290 4a 92 95 3f 13 7d a9 75 2b 45 70 07 c6 7f 48 14 J..?.}.u+Ep...H. 02a0 c7 a0 a4 86 68 18 b0 d7 b7 69 ca a6 5c ad c5 b1 ....h....i..\... 02b0 f9 54 a7 56 16 d8 ca c9 c6 24 05 8f 03 bd 98 aa .T.V.....$...... 02c0 91 e2 4c 7f ac 06 9c 78 be 16 06 89 04 51 9d 30 ..L....x.....Q.0 02d0 59 ca 58 fc 2c 62 5d 2c 37 04 63 b8 82 c9 73 c9 Y.X.,b],7.c...s. 02e0 62 1c 99 d8 5e de c8 6a 74 a0 95 2f 46 2b 81 8f b...^..jt../F+.. 02f0 dd 80 a3 9c c0 49 2d 3c a3 55 66 12 70 e2 1b 2c .....I-<.Uf.p.., 0300 bc f4 e7 37 b9 61 9b 9f 9f 04 5b a5 8d ae 70 79 ...7.a....[...py 0310 a8 2b 37 2a ea 47 e3 7d e6 e1 cd c7 d8 84 fa 87 .+7*.G.}........ 0320 2e 42 5b a5 38 b3 82 9e 0a 9b 72 58 a5 b7 75 fd .B[.8.....rX..u. 0330 3a 74 90 93 44 8f 20 70 34 bd d6 6e b9 98 3f 92 :t..D. p4..n..?. 0340 f5 80 24 a8 b6 ed 49 a2 12 1d b6 79 3c 86 b3 02 ..$...I....y<... 0350 bd b6 07 27 98 a0 63 fa 6e 73 66 e2 b3 1b 41 bc ...'..c.nsf...A. 0360 27 43 01 96 30 5a 87 66 d7 d7 d9 77 16 67 43 f2 'C..0Z.f...w.gC. 0370 a7 95 82 57 bf 4d cd b0 7d 2b 24 4d 97 3f 13 f2 ...W.M..}+$M.?.. 0380 cb 76 42 c0 a2 01 21 6a 90 47 03 5a 9f 16 54 cf .vB...!j.G.Z..T. 0390 d5 c3 4b 2b 97 a2 bb d8 9e d0 49 4e cd 7a cb 5c ..K+......IN.z.\ 03a0 a4 22 2e 0b 91 68 53 90 d1 cd d6 d9 da 86 96 32 ."...hS........2 03b0 34 4e e4 67 45 a5 ea f3 58 78 ca 5a c0 ee fd dc 4N.gE...Xx.Z.... 03c0 57 44 41 9e 64 78 fb 25 8b 4a e7 dd 01 ac b2 a9 WDA.dx.%.J...... 03d0 17 6f 92 8e fc f3 bb 54 e0 8a 1a 1c ea 64 7b 8c .o.....T.....d{. 03e0 76 0a 3c 9c c1 b6 e6 67 81 aa 40 b1 b2 32 8c 09 v.<[email protected].. 03f0 52 e3 28 34 a7 ca 07 30 66 72 70 59 83 87 28 23 R.(4...0frpY..(# 0400 5f 03 2d 78 65 65 60 7c 3f 8e a0 2c 39 55 dd 55 _.-xee`|?..,9U.U 0410 d6 0d b8 d8 93 3f 3f d9 9b fd 47 2a f4 8a 03 a0 .....??...G*.... 0420 a1 7f 8c 9e 39 44 c2 21 51 7c 8f 09 e2 f6 eb be ....9D.!Q|...... 0430 67 f8 2d 4f cc 00 ab 26 51 7f 38 54 01 69 03 f3 g.-O...&Q.8T.i.. 0440 a6 f4 d8 6f b8 a8 82 d4 34 5c 7c bc 43 39 2a f4 ...o....4\|.C9*. 0450 0f 08 e5 f5 7d 77 8c db 36 54 61 88 5d f4 26 37 ....}w..6Ta.].&7 0460 4e 1f 88 2d 19 9c a4 14 57 01 59 ae b8 d4 46 8b N..-....W.Y...F. 0470 cb b7 9f 46 e2 0c 68 2b fa 8e 82 80 26 e3 fa 8d ...F..h+....&... 0480 f4 8b 8c c6 00 08 ed 04 4e 0f 06 42 9a 02 fa 6e ........N..B...n 0490 60 ba 78 dd 58 78 aa 94 9d 12 ce ce 8f 57 ca 88 `.x.Xx.......W.. 04a0 61 94 14 a0 1e 4d 57 74 40 ac 52 2c 31 da 94 7d [email protected],1..} 04b0 89 a4 d2 4f c2 03 10 b5 ba 4d 5f b2 15 18 a6 c1 ...O.....M_..... 04c0 ad f5 fc 43 e7 de a4 dc ca 90 c7 5d af 58 70 cb ...C.......].Xp. 04d0 ec 92 6b 8b 3e b8 d4 9d 1c c1 85 5d b1 b7 7a e0 ..k.>......]..z. 04e0 01 e5 21 64 26 cd bb f6 b6 5e 7e de 69 29 9e bd ..!d&....^~.i).. 04f0 67 aa e1 a6 43 3e 4e 45 21 7f d6 6e a3 12 54 66 g...C>NE!..n..Tf 0500 6c 0b 3c 04 10 f5 04 77 c8 84 30 63 11 7a 58 41 l.<....w..0c.zXA 0510 aa e9 2d 78 cb ed 4e 49 82 01 06 e8 26 5a a7 6b ..-x..NI....&Z.k 0520 f7 d7 ad cb d0 49 11 2b 89 b8 da 1e 18 3d 5f 07 .....I.+.....=_. 0530 70 86 0b 41 f7 d8 2a 4a 53 86 1a 01 eb 8d b3 55 p..A..*JS......U 0540 55 85 ab eb 8e b5 f8 eb 29 98 13 5d 80 fb dc 7c U.......)..]...| 0550 c3 5b f1 b6 59 f0 3d d5 cd ea aa 62 60 3f aa 12 .[..Y.=....b`?.. 0560 c1 b3 72 e4 51 89 34 e3 e8 21 ad f8 a1 c1 6f 94 ..r.Q.4..!....o. 0570 d4 d8 bf 4c 9f b0 b6 04 ed fc 9f d6 ac 88 a9 2d ...L...........- 0580 e2 00 f8 1c 73 72 f9 a4 0b 44 b7 34 66 d0 3b cf ....sr...D.4f.;. 0590 54 b5 14 fb 3a 79 e4 12 23 e9 d4 f5 9f 48 b5 0c T...:y..#....H.. 05a0 e8 ea 1f 1d 83 6c 46 20 .....lF No. Time Source Destination Protocol Length Info 1371 12.021660 192.168.10.1 192.168.10.245 Syslog 286 LOCAL1.INFO: Oct 3 19:44:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2113 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 1371: 286 bytes on wire (2288 bits), 286 bytes captured (2288 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2113 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHAN No. Time Source Destination Protocol Length Info 1372 12.021710 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=963 Ack=54138 Win=65535 Len=0 TSval=727603 TSecr=538254 Frame 1372: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 963, Ack: 54138, Len: 0 No. Time Source Destination Protocol Length Info 1373 12.021791 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=54138 Ack=963 Win=1002 Len=1448 TSval=538254 TSecr=727603 Frame 1373: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 54138, Ack: 963, Len: 1448 Data (1448 bytes) 0000 24 65 a6 95 f1 3b ec da 95 ce b8 d0 80 6e 5a 02 $e...;.......nZ. 0010 7e f6 e0 1e 61 f2 3c ab 17 f2 27 31 26 64 cf 63 ~...a.<...'1&d.c 0020 16 b5 08 ea 2d f2 8b a2 1d 10 f2 40 aa 59 e7 00 [email protected].. 0030 19 e2 2a bf f3 fa 99 c2 62 c4 a6 62 5a 8c 8c 3a ..*.....b..bZ..: 0040 aa c0 a0 05 ac 4f c6 f7 cf 98 7e 98 b4 8d ab 16 .....O....~..... 0050 22 0f 59 36 98 be 5b 8d b3 9d 7e 57 65 b9 b3 de ".Y6..[...~We... 0060 b0 51 f7 5b 63 fd 53 f0 01 7d 23 25 f4 d0 9a 2d .Q.[c.S..}#%...- 0070 48 04 8f 31 4b f2 0b 8b 76 d6 1e 5e 4b 0a 86 80 H..1K...v..^K... 0080 b3 5e 90 8c 57 f1 de ab dc 06 61 d7 36 61 e2 fd .^..W.....a.6a.. 0090 eb 34 65 e5 86 20 24 09 16 39 48 38 47 81 31 55 .4e.. $..9H8G.1U 00a0 1b 96 77 76 6e 13 3d e3 1b 4a 4d 41 b2 2f b1 e6 ..wvn.=..JMA./.. 00b0 af 28 45 5a e4 bc 68 3d 41 bc 83 43 47 64 24 63 .(EZ..h=A..CGd$c 00c0 fe 98 04 c0 6f 82 2d 32 d4 a3 55 3a 7a 0e f5 95 ....o.-2..U:z... 00d0 87 04 aa b7 aa f5 18 4e 5f cc 37 8b 4d cf 67 54 .......N_.7.M.gT 00e0 38 4f f5 fa 84 35 f0 a1 22 a7 3a 3f 6d 70 df ff 8O...5..".:?mp.. 00f0 9f 66 d4 55 dc ab e6 25 4e 76 02 9a 79 83 9f 7b .f.U...%Nv..y..{ 0100 8f 8f 78 91 49 c6 cd b0 ce 20 c3 d1 2f 7f 32 a7 ..x.I.... ../.2. 0110 d3 64 3b 75 e8 0e f3 33 be 69 9f b2 b7 b6 3a ac .d;u...3.i....:. 0120 2b 8e e3 d7 e9 64 11 82 22 ab 77 c5 47 25 8b c4 +....d..".w.G%.. 0130 76 4b 3f d6 b3 a3 76 65 fd 73 5e be a7 0d 85 be vK?...ve.s^..... 0140 d7 2f 78 f5 3b 8b ab cd ce 06 d0 50 dc 06 05 0e ./x.;......P.... 0150 ec 06 6b d8 a8 09 c3 7e 5f 97 87 29 6f a3 1f 19 ..k....~_..)o... 0160 ce 71 e1 e6 e0 a8 8e 76 5d 75 78 82 5d dc f8 39 .q.....v]ux.]..9 0170 a5 6c 93 fb a4 7b 30 d6 15 da 1b 85 dc b5 5f e4 .l...{0......._. 0180 e0 33 64 29 fc 37 aa fa b3 f2 1d 8a ec 77 dd 47 .3d).7.......w.G 0190 e3 b3 98 06 dd 99 c6 45 cd 1a 2b 4b 04 32 f9 7f .......E..+K.2.. 01a0 85 ef 51 ac ce 56 95 7e 22 ba 94 88 dd 3d 53 80 ..Q..V.~"....=S. 01b0 d8 46 fa 39 21 99 04 e9 e4 af 26 cf 1e 8f 82 55 .F.9!.....&....U 01c0 fd bc 57 1e 74 54 82 ce 61 8a b9 76 f5 ad d7 57 ..W.tT..a..v...W 01d0 3d 35 07 c8 bf df 72 f5 95 57 d3 6b c9 42 c8 c2 =5....r..W.k.B.. 01e0 f1 55 05 2f 6b 1c d8 f3 30 17 ac b5 41 8c 21 f3 .U./k...0...A.!. 01f0 c8 c8 7b c9 9e b7 6b c7 2a b2 26 b6 58 05 f7 6f ..{...k.*.&.X..o 0200 98 d3 27 45 2a 69 ca f6 61 8e 87 a3 88 83 12 c2 ..'E*i..a....... 0210 d0 09 2b de ce e3 37 6b a1 d5 8d 5f 8d 75 3d 42 ..+...7k..._.u=B 0220 ca e6 c2 72 39 9d 76 f7 be 11 18 bf dd c2 1d aa ...r9.v......... 0230 04 db 86 14 13 a4 60 02 9c e9 b4 81 56 42 2c ce ......`.....VB,. 0240 1c 79 ca 14 25 d2 88 65 3b 95 07 f2 2a 7c 7c 35 .y..%..e;...*||5 0250 11 62 35 a9 a2 0c 46 02 77 58 9f 56 1e 0f dc d3 .b5...F.wX.V.... 0260 e8 c3 6b 2b 7c be ba 2b b2 ad 15 a4 2e c2 6f b6 ..k+|..+......o. 0270 9e 7b c7 61 54 06 c2 44 e5 6c d8 36 db 64 56 e6 .{.aT..D.l.6.dV. 0280 a8 cc 98 63 33 d4 cc c4 c6 be 5b 54 82 62 5b 0e ...c3.....[T.b[. 0290 4b ab 9b cf 51 bf a0 f3 72 67 26 00 e9 91 91 12 K...Q...rg&..... 02a0 86 c0 dd ae df b5 54 a8 74 91 7e cf 17 b5 fd 8c ......T.t.~..... 02b0 58 b9 c7 08 2e 76 fd 1e e6 fc 3f a7 ba 14 d7 d7 X....v....?..... 02c0 cb 4b 41 67 7a c2 21 d7 56 bb 7d 55 33 75 e2 87 .KAgz.!.V.}U3u.. 02d0 e2 c4 e9 49 18 18 fe c1 ba 38 90 34 ab e5 c4 d1 ...I.....8.4.... 02e0 e5 ea 80 83 a2 3c 57 e8 8a 7f 3c 93 a2 41 62 fc .....<W...<..Ab. 02f0 b3 b9 c8 7e eb c3 d4 7a fb 4c 2d 25 5a fb 45 1a ...~...z.L-%Z.E. 0300 45 14 e3 58 22 4c 9b 96 04 eb 9b b7 3c e0 80 cd E..X"L......<... 0310 89 83 7a 07 cc b7 5a 18 d9 4b eb 7f 25 a8 34 0d ..z...Z..K..%.4. 0320 c7 31 64 a4 a8 9c 0c 4a 4e d7 cb 0c c6 5e 19 b3 .1d....JN....^.. 0330 e6 50 10 f7 1f 94 1c 56 27 af 63 3d 87 6c 1d be .P.....V'.c=.l.. 0340 e9 fb 25 47 6c 21 94 c9 eb fb 8e 4d d5 ca e9 50 ..%Gl!.....M...P 0350 aa 47 a3 ce 31 d3 21 a2 0e 08 c6 11 57 e5 a4 7d .G..1.!.....W..} 0360 d5 7e c4 8c dd 9d 5e 78 12 d4 a9 d3 18 a2 43 09 .~....^x......C. 0370 87 30 7c 8c 63 01 b4 11 1e 32 d3 57 c9 f7 00 cb .0|.c....2.W.... 0380 00 00 43 44 b4 aa 1e 56 6c db e5 62 f5 a5 ab f0 ..CD...Vl..b.... 0390 a6 b6 68 f9 53 22 38 f7 ab 43 f6 ee 6b 21 9e f3 ..h.S"8..C..k!.. 03a0 b4 a1 8f 31 93 78 b5 c1 bf c6 71 18 99 b3 88 e6 ...1.x....q..... 03b0 5e 18 bb 50 05 85 4f 21 86 cc 0d b6 35 a9 32 2f ^..P..O!....5.2/ 03c0 33 a4 62 07 11 be ac c8 49 71 f4 65 5f 07 8d 23 3.b.....Iq.e_..# 03d0 d0 85 d5 d7 75 a0 fe 2c 6b c6 99 94 cf d4 90 83 ....u..,k....... 03e0 eb db 1f 61 bc b9 78 4f d6 61 c6 45 43 3d e3 3f ...a..xO.a.EC=.? 03f0 a1 f4 f0 14 df 1a 88 7f d8 2d e0 fe 66 e3 5e 94 .........-..f.^. 0400 71 ee 14 db a7 c2 44 50 fd 7f 71 61 01 c7 39 fb q.....DP..qa..9. 0410 1c 89 2a f6 36 58 5c eb 1e 18 a0 e2 0b 04 b5 c6 ..*.6X\......... 0420 64 6c a4 48 e0 da eb 5d 9d 18 38 ee 10 7e d3 bc dl.H...]..8..~.. 0430 89 c1 6a 5f e5 c1 df c2 23 c2 01 50 f9 94 b9 12 ..j_....#..P.... 0440 14 73 9a 4e 7b 0e c2 57 f5 8c df 4f bb a3 49 06 .s.N{..W...O..I. 0450 a6 00 9b 80 45 69 e1 c9 ee df 47 07 79 2a 2c f3 ....Ei....G.y*,. 0460 08 db 5d 49 05 c8 b0 89 a3 29 aa 4e 86 52 23 36 ..]I.....).N.R#6 0470 73 20 4c ce 40 0a 99 a0 0f c5 65 a6 d8 80 ef 63 s [email protected] 0480 6c 43 cf 5b b1 92 40 74 a3 9d 9e fe 6a 3e 5e 26 lC.[[email protected]>^& 0490 57 ee 30 06 0c 48 ee dc 1b 34 d1 8d 0d 86 e2 16 W.0..H...4...... 04a0 27 e4 68 b6 51 36 97 e6 1b 95 33 b6 64 e9 88 3b '.h.Q6....3.d..; 04b0 1e d2 82 92 40 6f ca ed be 85 5b 9b 0a ad 87 bd ....@o....[..... 04c0 9f 63 dd 66 06 be ae 98 d3 2d e9 9e d4 34 9a 66 .c.f.....-...4.f 04d0 9a 4d 01 fa c5 0f 0b 68 3e 8f b5 5a 93 c0 9c bc .M.....h>..Z.... 04e0 92 77 1e 94 29 bd ee 8d 30 31 0d 38 73 a7 66 2e .w..)...01.8s.f. 04f0 ee 87 6d b0 42 33 bd 12 fc 27 4d 08 e5 bf 99 78 ..m.B3...'M....x 0500 65 c1 ab 51 87 5a 96 73 17 31 00 c7 36 47 b5 ed e..Q.Z.s.1..6G.. 0510 bc 28 3c e2 25 ae de b1 9e 67 f1 92 c5 12 4c 7c .(<.%....g....L| 0520 e1 4d c8 3f 49 39 3b 4a aa e0 5e 9c a4 e6 c2 e2 .M.?I9;J..^..... 0530 1e 1e 4f 39 39 bd b0 78 b4 9d 69 c9 c8 d9 83 1a ..O99..x..i..... 0540 a7 8e 20 3f de 0f 70 1e c1 4c 4b f6 83 69 5f 3c .. ?..p..LK..i_< 0550 91 b3 d5 c2 4f 22 e5 3f a8 5d 48 1c 54 24 14 04 ....O".?.]H.T$.. 0560 7f a5 4c 84 9d e6 ea 8b 04 84 a5 86 4d fa a6 d4 ..L.........M... 0570 ee 82 b5 61 b9 cb 5e a5 9b 30 5d 6e d9 7f 5d 43 ...a..^..0]n..]C 0580 8c ab 9c 6f bd 23 3f 52 f8 62 6c e2 33 4a 13 4c ...o.#?R.bl.3J.L 0590 c5 7c 21 14 9a 08 40 b3 36 4f f1 d5 35 51 04 58 .|[email protected] 05a0 be a8 9a 8e c9 aa c6 ed ........ No. Time Source Destination Protocol Length Info 1374 12.021887 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=55586 Ack=963 Win=1002 Len=1448 TSval=538254 TSecr=727603 Frame 1374: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 55586, Ack: 963, Len: 1448 Data (1448 bytes) 0000 d6 5e 3b dd ae 2c 51 52 32 21 b1 72 7a 65 91 71 .^;..,QR2!.rze.q 0010 de 79 b8 10 24 3f 20 c6 80 46 fa f7 f5 1d 27 4a .y..$? ..F....'J 0020 c0 a9 af cb 01 34 d4 dc a8 16 65 2c 55 4e 6c 4c .....4....e,UNlL 0030 d7 37 d2 b6 01 af 9f 58 5c 6a 52 47 18 d2 27 26 .7.....X\jRG..'& 0040 75 ca b7 8b 29 e7 46 21 34 38 c6 5a 63 94 51 72 u...).F!48.Zc.Qr 0050 fc cb 3e b0 13 fb 2f be aa b3 38 71 6a c4 c3 40 ..>.../...8qj..@ 0060 57 03 37 15 95 f3 54 9f 1a 43 fe cd 52 0c 89 be W.7...T..C..R... 0070 d8 b8 df c5 94 19 a4 ed 0f 8d 92 81 12 bb 90 06 ................ 0080 a2 d0 c7 c3 2e f9 02 fa a2 f2 48 b1 b8 58 ae ff ..........H..X.. 0090 34 5c 57 1b 2e 39 bd 8a 33 24 73 7e 1e 02 7c 55 4\W..9..3$s~..|U 00a0 ee 1d 1c 1f 12 a4 a2 e1 bd 54 e7 0e 01 f2 5a 79 .........T....Zy 00b0 2e 1a 96 a9 34 41 6f 21 e3 25 b7 8f fd ec d1 ec ....4Ao!.%...... 00c0 f2 2b 85 ac a7 d6 b4 dd cc 00 f6 cf e1 7e 3c 77 .+...........~<w 00d0 ea 5f fe e5 10 09 fc 71 36 99 e1 85 c2 bb ca 3e ._.....q6......> 00e0 7f 6d f5 bb 82 47 8d 55 9d 8c a2 07 97 9a d2 20 .m...G.U....... 00f0 aa 65 03 cd fe e2 5f cc 4c 65 34 8f 15 5b 74 e7 .e...._.Le4..[t. 0100 9a c3 5a df cb 08 ca f8 c5 eb 86 e1 04 18 31 f5 ..Z...........1. 0110 95 8d c0 54 0e 34 c6 24 f0 36 ae af c6 51 84 64 ...T.4.$.6...Q.d 0120 57 b4 8f c5 6e 7c 56 5b 4b 83 cb 46 43 9e db a9 W...n|V[K..FC... 0130 66 d8 c9 c2 6d 37 af e4 88 76 fc 60 dd 6e 90 ef f...m7...v.`.n.. 0140 6c d2 f6 55 2e 7d d8 d9 4b 3f b4 1a bb 98 db 61 l..U.}..K?.....a 0150 d2 ee 97 ad 93 98 f2 bc 2e 8d 17 20 7b fa c1 7d ........... {..} 0160 0f 6a 88 85 82 ed 53 ca 49 f7 e1 f7 1d c2 85 ba .j....S.I....... 0170 0b cc ef ed 65 b6 b2 40 47 d4 46 0d 7f f9 eb 38 [email protected] 0180 2a 1d 2d e6 57 6e eb fc ad 32 46 4d b5 bd a4 e5 *.-.Wn...2FM.... 0190 65 23 94 06 74 92 fb b0 43 20 94 1b de fb ab 7a e#..t...C .....z 01a0 82 d3 13 db 67 5f 19 f0 b6 30 e4 49 dd 73 da d0 ....g_...0.I.s.. 01b0 b9 05 d6 5f dd 8c a8 1a ec ad 6a 3f 1d 4c af 52 ..._......j?.L.R 01c0 56 be 93 21 df c2 b4 dd cc 85 6a 46 19 d9 32 2d V..!......jF..2- 01d0 cd 61 af 73 2a b9 fd b8 55 e1 e0 9c 33 da 79 e3 .a.s*...U...3.y. 01e0 8e 8f 90 a3 a6 7f 81 dd 90 94 bf ff 7e 3d 84 98 ............~=.. 01f0 ef bc a5 9c 0c 3e a3 e6 dd ab 28 28 e8 37 b1 68 .....>....((.7.h 0200 cc bc b1 2f 43 86 77 9d ce 6b 13 b4 89 cc f8 2d .../C.w..k.....- 0210 6f 83 7c d6 91 91 92 21 df 41 38 c0 ee a2 03 f9 o.|....!.A8..... 0220 6e 9c 3b e1 41 ff a7 82 7e 69 3a 2b 15 8a fa 25 n.;.A...~i:+...% 0230 a7 2d f8 a0 3a af f2 9b c3 38 96 2f 65 7a 69 b9 .-..:....8./ezi. 0240 15 eb 7d c6 5a a1 61 81 3e 11 75 a1 d6 a9 38 7c ..}.Z.a.>.u...8| 0250 9e 98 f8 a3 b3 2d 16 23 c8 ae b4 d5 82 32 bd e5 .....-.#.....2.. 0260 ab f8 3d 7c 84 36 a4 3d 83 d5 27 6b c2 24 c3 63 ..=|.6.=..'k.$.c 0270 2e 33 48 8e 30 d7 89 b9 26 f5 c3 d3 75 bd 99 00 .3H.0...&...u... 0280 7d cc fa c3 98 22 c2 33 88 0b df 54 32 e3 0e 89 }....".3...T2... 0290 72 aa 48 f6 d5 a6 b9 b1 78 26 89 fc 11 1d 8d 6d r.H.....x&.....m 02a0 90 93 bd f9 ec ec c4 9d 49 e0 dd 0a 8b 42 b8 c5 ........I....B.. 02b0 33 92 c8 c3 d2 77 4c f7 a0 be f0 8c 4f 44 54 02 3....wL.....ODT. 02c0 03 3e fa 50 e8 c8 2f 70 ad 55 70 6d 62 a8 8a d4 .>.P../p.Upmb... 02d0 8a 83 c6 7f 8a 1c 90 13 7b 37 f6 b0 97 7f 1f 53 ........{7.....S 02e0 fe 62 7e f6 5c 6c 04 db b2 fb f9 5b d5 65 a7 9f .b~.\l.....[.e.. 02f0 3d 76 58 4c 63 64 05 fe 37 6b 2f 06 28 2c 88 1a =vXLcd..7k/.(,.. 0300 91 5d 5c 02 a9 11 d7 dd 2b 10 65 18 4b a4 e0 f6 .]\.....+.e.K... 0310 67 9f 3e 1d f7 e1 93 8e b2 5b 51 a4 a1 82 c2 6b g.>......[Q....k 0320 2e cd 29 01 e9 80 07 ce 19 ca e6 b8 33 12 53 ef ..).........3.S. 0330 21 31 ad 0f f0 8d 56 77 23 27 0c 02 1e eb c9 26 !1....Vw#'.....& 0340 2f f2 4b ed e1 8c 33 9c f5 5a 85 95 40 f9 e9 ef /.K...3..Z..@... 0350 27 0d 99 26 b3 f6 8c 2c 16 5e 1a 7a 1e a1 39 e5 '..&...,.^.z..9. 0360 59 70 c9 8d 48 63 3d 9b 02 67 0b 01 3c c2 55 2b Yp..Hc=..g..<.U+ 0370 9b 35 4d 34 4a 33 c8 e6 7a 62 72 48 9c c5 e3 5b .5M4J3..zbrH...[ 0380 7c 65 ce 8c 8d ab a9 5c 25 50 ef 64 25 f3 c5 28 |e.....\%P.d%..( 0390 15 ea 9f 86 24 69 96 60 a2 a9 08 23 b9 39 d4 38 ....$i.`...#.9.8 03a0 c3 6b 71 52 be ac a7 bc 33 88 64 56 13 83 e0 2e .kqR....3.dV.... 03b0 16 ed 5f f1 b0 ea 34 4f 96 64 20 5f 00 3d 59 e8 .._...4O.d _.=Y. 03c0 64 2f 58 39 eb 8a 7b 6c c3 d4 54 ad 9c 46 82 ea d/X9..{l..T..F.. 03d0 5b 04 09 9e 46 bc 0a fd 96 fc e0 94 17 3b 93 4f [...F........;.O 03e0 26 3b 10 46 01 bf 09 a6 85 20 1a a3 cb 19 a9 69 &;.F..... .....i 03f0 dd 8e af 34 d0 9f 9b 3a 17 7a da 99 1b b3 dd fd ...4...:.z...... 0400 1d 63 46 6f 45 8f 7d 43 ab ed 8d b4 82 fb f1 b9 .cFoE.}C........ 0410 61 be 22 d3 ed 3a 81 d8 17 e1 d4 53 72 7a bf 05 a."..:.....Srz.. 0420 30 7a 08 3f d3 06 d9 08 19 9b 4c 55 bc c3 ac e0 0z.?......LU.... 0430 33 50 81 65 71 88 0f 34 73 9f 68 db 4c 1e 14 34 3P.eq..4s.h.L..4 0440 d7 a7 9c e1 7a b7 18 18 94 ec 5a 97 79 d9 68 66 ....z.....Z.y.hf 0450 82 63 f1 e6 6b 64 c9 28 0d 5a 95 6e 27 7d b8 19 .c..kd.(.Z.n'}.. 0460 80 b8 cc 25 c8 a2 09 fc 80 ff 66 4b e2 f8 fa 89 ...%......fK.... 0470 f0 c2 18 42 c3 c2 4d bf 18 0d ee da a9 e1 b0 ac ...B..M......... 0480 7d 36 c6 d0 44 ea 6a 15 df 57 bd 4c 20 44 6a d3 }6..D.j..W.L Dj. 0490 6b 23 f2 7d 80 b1 07 78 7e b8 7a fc e9 4c 76 14 k#.}...x~.z..Lv. 04a0 30 c9 be 24 ca 55 18 72 31 ef f8 19 5f c6 1f cd 0..$.U.r1..._... 04b0 bb 9d 49 d2 14 35 60 91 82 c2 ce 75 06 07 f7 d5 ..I..5`....u.... 04c0 2d 11 64 4a a0 d0 c6 f4 27 7c a4 11 c0 92 7f 4c -.dJ....'|.....L 04d0 e4 1d 48 31 3e 3f ce dd 68 40 89 ca 21 72 cb b9 ..H1>?..h@..!r.. 04e0 4e fc 9c b2 35 45 33 86 1c c4 5f 3e cb 0f a5 2c N...5E3..._>..., 04f0 21 5c f1 45 44 f5 39 e8 4e 57 c6 78 be 20 5d 02 !\.ED.9.NW.x. ]. 0500 ea d8 f0 d9 32 51 e3 77 21 c8 e1 84 02 60 59 8a ....2Q.w!....`Y. 0510 b3 5a 56 b6 8b bc 5b 72 03 47 4f 63 d1 8c a0 b7 .ZV...[r.GOc.... 0520 c3 b3 00 c6 2d 26 fd f7 27 ed f6 dc 65 c5 70 7d ....-&..'...e.p} 0530 54 30 81 71 22 9f c8 97 5d b0 d4 9f d1 05 84 4f T0.q"...]......O 0540 0f 62 1e df b6 ca ec 0e 09 61 cd fc 97 29 ec 03 .b.......a...).. 0550 be 95 52 65 10 29 15 31 ed 88 36 fa 96 ca 65 91 ..Re.).1..6...e. 0560 b4 bf cd f2 ad 1f 87 56 9b d8 fa 0a b2 78 35 a4 .......V.....x5. 0570 aa 43 10 4d 83 c4 c7 50 e3 3d 0a 5d ad 0e ff 16 .C.M...P.=.].... 0580 1d 5d f2 a6 dd 06 6d 3e 4c 02 09 17 20 1a e2 c5 .]....m>L... ... 0590 26 1d 1f 2d a1 5c 0f 9e 94 b6 ac 5a 09 44 3c 20 &..-.\.....Z.D< 05a0 f9 71 a0 e2 ef 7b 05 92 .q...{.. No. Time Source Destination Protocol Length Info 1375 12.021974 192.168.10.1 192.168.10.203 TCP 1455 34433 > cds [PSH, ACK] Seq=57034 Ack=963 Win=1002 Len=1389 TSval=538254 TSecr=727603 Frame 1375: 1455 bytes on wire (11640 bits), 1455 bytes captured (11640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 57034, Ack: 963, Len: 1389 Data (1389 bytes) 0000 d0 ba 1e a0 b5 5e 08 1c 85 99 d4 f1 a9 19 09 78 .....^.........x 0010 42 a9 d5 36 56 91 f3 fb 52 8a 9c 3f 82 37 f0 fb B..6V...R..?.7.. 0020 8e 19 fd 8d 4e d3 e9 e7 99 56 d5 d7 32 97 2b 95 ....N....V..2.+. 0030 6c fc 20 05 35 1f 8b 3f ab ce 12 08 51 ad 30 ba l. .5..?....Q.0. 0040 13 27 85 18 02 56 96 42 65 44 da 35 b4 6b 7f ba .'...V.BeD.5.k.. 0050 82 d0 a7 90 84 63 8b 44 db 26 f1 9c 13 f3 3d 5b .....c.D.&....=[ 0060 77 86 da 0c 31 df 8b 90 a3 3b 52 3b ba a3 67 20 w...1....;R;..g 0070 7e 5e 82 40 ef 35 ed e7 ec 91 e5 fb 53 d8 93 61 ~^[email protected] 0080 11 41 83 84 4a 3f 3b 8e 6d c2 86 c3 de 30 4b 05 .A..J?;.m....0K. 0090 ed 17 34 30 9b 70 97 0f 90 2d 28 17 54 20 27 21 ..40.p...-(.T '! 00a0 a2 ec 88 f0 fb 3c e8 13 9d dd 1b 5f 52 39 6b 97 .....<....._R9k. 00b0 9c 7c 88 25 eb c5 aa 43 1c a2 81 49 5b a5 93 90 .|.%...C...I[... 00c0 f4 11 b3 52 a9 13 00 08 37 31 bd c4 cf 99 11 cf ...R....71...... 00d0 72 cb fd 8c ba 57 97 59 02 9c 30 af 0a 8f 52 02 r....W.Y..0...R. 00e0 fe f1 97 42 15 8b d4 3a 17 76 45 59 c4 91 05 bc ...B...:.vEY.... 00f0 cd f5 bc a6 f6 a1 fd f0 fa 61 de 94 84 10 9b 65 .........a.....e 0100 ee db 10 9d 7b 29 89 5b c0 4d 3b b2 c1 4d 87 dd ....{).[.M;..M.. 0110 d1 26 37 e7 bd 5b e4 19 c5 2e 2b 5c 95 22 42 6e .&7..[....+\."Bn 0120 d7 93 89 a7 c1 b2 18 9a 78 f8 0d 37 62 49 ee 7a ........x..7bI.z 0130 0d 53 c4 83 8a 43 2e 85 ca 44 2b 24 a5 05 af cf .S...C...D+$.... 0140 d7 ed 60 ca eb b5 05 d9 e5 fc 12 2a 8c a2 ad 64 ..`........*...d 0150 b9 e1 87 e5 05 2f 1f 4a ea ad 03 d0 2e e5 9a 71 ...../.J.......q 0160 43 8a 55 c6 e7 14 1d a4 71 c0 91 e3 75 1d d5 a8 C.U.....q...u... 0170 42 61 b4 f4 2e 58 c9 71 83 c1 9b da d4 24 a4 56 Ba...X.q.....$.V 0180 62 6b 02 cc ed 9d 97 b1 7d b7 b6 ed d0 86 6f b6 bk......}.....o. 0190 d1 b9 1f f7 fb 9a 44 3e c0 92 33 03 0e 8f a3 b5 ......D>..3..... 01a0 8b 55 8d 90 8b 9f ff 09 40 b1 ea a5 77 64 50 29 .U......@xxxxxx) 01b0 95 03 af fd e0 a6 d3 5c 42 2d 68 d6 71 fe dd ee .......\B-h.q... 01c0 9b 0f b7 3c b7 2f 61 84 0e 0e d0 3d 84 ed 89 43 ...<./a....=...C 01d0 ea 72 dd 1a 71 3f b1 fc 2d 11 f1 4a e9 fd 0b 66 .r..q?..-..J...f 01e0 4d 71 41 93 32 9c 53 20 cd 1a 61 a5 c1 d9 7b 61 MqA.2.S ..a...{a 01f0 ff f4 13 b7 4a 6f 37 f5 cb 7a 95 76 1e a2 ff 25 ....Jo7..z.v...% 0200 54 a5 09 43 7b c8 15 fd 20 0c 50 e0 c5 cd bd bd T..C{... .P..... 0210 94 67 cd 21 61 4a ee bc b3 37 42 b1 93 f2 4e cb .g.!aJ...7B...N. 0220 5d a5 71 9b fb fd f9 12 02 74 79 68 29 2d 02 68 ].q......tyh)-.h 0230 3e 9a a1 5c c9 21 23 ed 20 84 ec fb 45 d6 cf 81 >..\.!#. ...E... 0240 4d e0 c7 82 db 22 04 e9 7f 0f 40 5e 65 cd 6c 51 M...."....@^e.lQ 0250 b7 ed 2d e8 2e db d4 83 a8 19 4d 5f 94 e6 b8 35 ..-.......M_...5 0260 24 53 ad 21 44 0c f8 da d0 1b ac 6c 47 65 85 00 $S.!D......lGe.. 0270 42 c7 78 47 31 af cb 5d eb 84 46 05 45 72 4c 45 B.xG1..]..F.ErLE 0280 c4 05 7f 3b af 6f 0e 85 22 8d da 65 54 30 74 6f ...;.o.."..eT0to 0290 d6 e3 f9 ac 46 cd e1 b0 b4 46 0b d5 c4 c3 ac 45 ....F....F.....E 02a0 29 47 30 72 49 bf c9 1b fa 07 ee f8 c9 b5 23 ef )G0rI.........#. 02b0 04 02 2a b4 86 ce 68 96 d4 01 ee 5b 63 c6 47 dc ..*...h....[c.G. 02c0 ac 91 25 06 e6 9c 17 37 2c 63 35 57 d1 ee c0 9f ..%....7,c5W.... 02d0 36 4e e3 7a 37 6b 3f 2a 20 6b 21 35 84 28 eb e8 6N.z7k?* k!5.(.. 02e0 2b 16 40 9b b2 0c fd 43 32 75 5f 03 ad ef 01 88 [email protected]_..... 02f0 ff 33 a7 86 dc 73 c8 19 63 be dc ea b5 08 48 17 .3...s..c.....H. 0300 03 4d f7 46 02 17 66 08 96 07 f4 f4 f1 bf c6 1c .M.F..f......... 0310 4e 97 02 31 28 7a d3 b2 a8 1e 79 7b 00 bb a5 5c N..1(z....y{...\ 0320 c8 37 c5 bb 92 8c 7f 2c 91 ba 4a 00 fe d6 13 86 .7.....,..J..... 0330 ed 0f dc 48 33 a8 4c 27 cf 77 1f 86 e2 4c 24 9d ...H3.L'.w...L$. 0340 94 2d 99 45 e6 89 7b 55 51 a9 97 b6 e9 a2 19 94 .-.E..{UQ....... 0350 c1 70 1d da 68 75 b8 e7 a7 ad 69 63 d3 19 97 8b .p..hu....ic.... 0360 14 d9 b0 8f 87 12 2e 25 0a fb 13 4d 9a 3e 14 a6 .......%...M.>.. 0370 92 f8 b4 f5 4f 0d 9a b0 80 b7 ce a8 79 83 70 ac ....O.......y.p. 0380 48 0a 65 d0 b9 17 97 7a 95 0f 34 95 cf 27 68 bf H.e....z..4..'h. 0390 7e 6f 72 71 be bf 40 3a d5 e2 8c 39 6f cc 25 df ~orq..@:...9o.%. 03a0 b5 cd 02 e2 42 32 76 5a 1b f6 1f 55 c6 fc 9f cf ....B2vZ...U.... 03b0 4b 85 00 d2 42 4d bd 2f f2 5b ef b7 bd d3 02 53 K...BM./.[.....S 03c0 95 6f fe ee df 5c 56 e3 88 e4 5c 80 91 15 e0 fa .o...\V...\..... 03d0 29 67 2d 83 4c 8d f9 51 bf 4b fb 57 03 d9 42 f7 )g-.L..Q.K.W..B. 03e0 63 e5 c4 4d 7a fc 31 ea 58 fb 18 f5 74 2e 6b 5d c..Mz.1.X...t.k] 03f0 dd 05 d0 ff 52 dd 19 07 2e 03 d8 05 3a 84 19 9d ....R.......:... 0400 d8 dd d7 69 13 fb c4 91 91 b7 3e 39 25 6f 38 de ...i......>9%o8. 0410 58 61 af 16 f3 e0 de 31 be e9 dc 35 7c b0 ee 5f Xa.....1...5|.._ 0420 71 c1 8f 92 af aa 5c 30 ec 30 21 d0 ec c9 59 c6 q.....\0.0!...Y. 0430 13 92 b2 c0 40 7b 57 0b 81 9c 04 b8 86 17 f5 3f ....@{W........? 0440 da ff 37 4b cf cf d0 d9 6b c6 f4 d4 93 3d ce 53 ..7K....k....=.S 0450 1c cf 4b 5f 5e 67 26 18 98 37 c4 4a d3 f3 6c 0c ..K_^g&..7.J..l. 0460 38 31 9a 50 b6 7b 5f f4 ec 88 91 b1 bd ae 79 b3 81.P.{_.......y. 0470 92 98 a5 11 5b a8 f3 ad 45 e2 80 76 5e 71 74 28 ....[...E..v^qt( 0480 00 b4 f4 a1 a3 02 51 f5 ad a4 63 e4 65 a0 d2 56 ......Q...c.e..V 0490 82 0e 8d 21 b5 71 f7 bb 76 cf d8 a4 ff 10 fb c3 ...!.q..v....... 04a0 9b 68 27 98 fb d4 1e dc 6c 2b 43 60 e6 33 a4 7d .h'.....l+C`.3.} 04b0 92 4d b9 20 8d 62 40 b9 fc 05 33 6b 44 74 ca 28 .M. [email protected].( 04c0 fa 6d ba 56 d2 6b be 98 87 3d 69 b3 cd 8a ea a2 .m.V.k...=i..... 04d0 09 2a 3f 3f 08 db a9 f0 f0 57 05 87 b9 5c 57 5a .*??.....W...\WZ 04e0 e9 f5 22 a9 ff 5b 52 a7 73 51 76 12 94 a0 44 8c .."..[R.sQv...D. 04f0 f7 a2 40 2e 5b d9 6a c7 ad 21 6e 4c 58 b7 18 ac ..@.[.j..!nLX... 0500 c1 a6 3b 6c 89 36 50 8c ed 18 22 93 12 db 6e 1d ..;l.6P..."...n. 0510 ba 5f b1 63 8a 9c 6f 16 67 bf 34 f7 00 c9 83 2e ._.c..o.g.4..... 0520 13 a2 cd 89 3a fa f8 e9 9c 94 3b 05 85 3b 87 69 ....:.....;..;.i 0530 3a fc e6 a1 6c 99 1f 93 a0 b9 c2 3d 22 b4 e1 86 :...l......="... 0540 95 ac 4c 22 1a 88 fd 82 80 0c a6 bf e4 58 2b 38 ..L".........X+8 0550 27 2e df e9 a2 53 4d ef 1f eb 82 25 96 1d 31 32 '....SM....%..12 0560 d1 dd 08 5e 9e c8 26 72 9b 58 7d ea 32 ...^..&r.X}.2 No. Time Source Destination Protocol Length Info 1376 12.022045 192.168.10.1 192.168.10.245 Syslog 277 LOCAL1.INFO: Oct 3 19:44:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2113 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 1376: 277 bytes on wire (2216 bits), 277 bytes captured (2216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2113 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINAR No. Time Source Destination Protocol Length Info 1377 12.022094 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=963 Ack=57034 Win=65535 Len=0 TSval=727603 TSecr=538254 Frame 1377: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 963, Ack: 57034, Len: 0 No. Time Source Destination Protocol Length Info 1378 12.022164 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:44:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2113 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 1378: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2113 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" No. Time Source Destination Protocol Length Info 1379 12.022238 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=58423 Ack=963 Win=1002 Len=1448 TSval=538254 TSecr=727603 Frame 1379: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 58423, Ack: 963, Len: 1448 Data (1448 bytes) 0000 17 03 01 03 40 6a 86 dd d6 19 0b c8 eb 99 95 13 ....@j.......... 0010 c3 93 0c 6c cc 0a 03 19 ad d4 6f 34 e4 52 10 06 ...l......o4.R.. 0020 9f b5 b8 6e 67 55 75 72 3e 54 64 57 7b bb bc 12 ...ngUur>TdW{... 0030 3b bd 24 68 f4 f1 e6 6e 18 fd d1 7f 40 28 75 11 ;.$h...n....@(u. 0040 8b 8f 07 75 23 fc dd 19 30 f3 d3 4a 96 10 a6 31 ...u#...0..J...1 0050 fc 7a 12 e1 20 32 e0 bc 81 a4 16 46 0c 33 5f b5 .z.. 2.....F.3_. 0060 3f 5f 69 f7 2a 7d 13 16 72 86 96 98 7e 0e d3 7f ?_i.*}..r...~... 0070 8b 39 e7 b0 ff 4e 68 db 02 73 73 b2 c6 67 13 8d .9...Nh..ss..g.. 0080 3e e4 f1 48 40 b6 a0 c3 54 19 0e 13 85 2a 54 ee >[email protected]....*T. 0090 23 f1 83 f1 9f a8 69 63 c7 26 88 8c 9d 42 17 ff #.....ic.&...B.. 00a0 a5 ee b3 00 40 52 f5 46 7e a6 58 40 7c 66 d1 eb [email protected]~.X@|f.. 00b0 fb fa 49 75 30 d1 88 d5 d2 d7 df 82 5c f3 36 17 ..Iu0.......\.6. 00c0 83 21 5e cd cf 24 61 f9 13 b6 15 d7 48 30 3c eb .!^..$a.....H0<. 00d0 f1 db c2 6f 4a 30 82 ed a1 89 ee 94 1d 91 1e 80 ...oJ0.......... 00e0 3e 62 41 ac 7f 80 33 8e 29 ab e6 56 c8 c2 1a ba >bA...3.)..V.... 00f0 97 83 92 9e 2e 6d 4f be fb 7b 6a cb 7e f2 ce b9 .....mO..{j.~... 0100 dd d2 70 df 90 93 6a d3 d2 5c a9 96 dc 51 f1 67 ..p...j..\...Q.g 0110 b8 80 36 ca ce 4d 64 8a 70 2f 81 d6 52 3e 65 51 ..6..Md.p/..R>eQ 0120 f3 03 b6 d0 75 b4 3b e8 d9 91 71 d9 d0 05 a3 91 ....u.;...q..... 0130 ca 90 c0 d8 56 2a f9 56 2f 6f 2a 61 49 8a 2d 6d ....V*.V/o*aI.-m 0140 5f d0 2d 9a 7e 5d 1b 3f f4 39 8d f7 7c ae f8 9a _.-.~].?.9..|... 0150 ec af 14 79 5b 9e ce 2b 5c 94 4e 9c 43 cb df 51 ...y[..+\.N.C..Q 0160 89 99 fe 5b 16 4e 4f 04 be be 98 42 c7 2b e8 e0 ...[.NO....B.+.. 0170 93 95 f0 da b7 42 4e bc cf 48 bc f3 7d 6d 30 21 .....BN..H..}m0! 0180 67 24 d5 a0 6e 7a 26 8b 07 16 75 1d 55 e5 95 b7 g$..nz&...u.U... 0190 38 96 53 04 a0 a4 5d 5b 4a 20 ee f1 e7 25 c9 ff 8.S...][J ...%.. 01a0 1d 6f da a6 c4 39 3b 6f 4d de 8e cb 46 8e e0 d8 .o...9;oM...F... 01b0 91 76 69 7c 7a 12 92 8d 8c 91 dc ed 4b 4f ea 07 .vi|z.......KO.. 01c0 31 31 44 80 e7 5d 0b 36 f5 2b d9 66 73 77 ea 84 11D..].6.+.fsw.. 01d0 c4 a9 2f af 2a 35 c2 27 18 5f 7b 30 31 3c 5b 24 ../.*5.'._{01<[$ 01e0 30 50 04 ec e3 2e 4f 27 79 fc be 5a 2f 74 25 94 0P....O'y..Z/t%. 01f0 11 bf a2 07 a3 f4 5b 28 e5 7e 7f bb 52 89 4d 6a ......[(.~..R.Mj 0200 c0 15 12 08 07 dc 60 09 64 9b 23 08 a5 ff 01 0e ......`.d.#..... 0210 d1 90 2a d3 57 3f 9f 1c d8 7e b5 1f 6a b7 f6 28 ..*.W?...~..j..( 0220 79 c2 bb 94 33 bd 12 ad 09 70 59 73 83 68 d1 b5 y...3....pYs.h.. 0230 46 1e 94 39 8b 8a 45 34 d9 87 9c df eb c7 6d 0d F..9..E4......m. 0240 fd a9 d7 6e cc 15 00 7d da 87 04 b4 87 fb 8b 5d ...n...}.......] 0250 0b 83 3b e9 b8 5e 69 d4 f6 91 ab 36 bc aa 5e 4f ..;..^i....6..^O 0260 64 a5 87 b5 1e 3d fe 36 2f a4 0a 30 8f e5 fc b3 d....=.6/..0.... 0270 fd 08 73 99 32 2f 62 19 c6 87 ce 1d 99 cc 41 d4 ..s.2/b.......A. 0280 8d 31 c3 7c 03 01 4f 01 3b e9 d9 0d 31 e9 3a e7 .1.|..O.;...1.:. 0290 4e 94 55 de 66 23 8c 1d c4 a7 64 5d 5a 38 e4 3b N.U.f#....d]Z8.; 02a0 0c 2d 7f 8e fd 3b 57 c7 88 c6 90 28 33 c2 2a 23 .-...;W....(3.*# 02b0 87 48 b3 18 cc 4a 17 2c aa a7 9f 39 e8 06 a6 28 .H...J.,...9...( 02c0 ad 5b c5 90 08 80 38 c1 4e e8 5f d8 58 68 bb e6 .[....8.N._.Xh.. 02d0 51 fd e6 6d 9b 9d 0e fe 4a f2 75 2a 6b b3 ec 5f Q..m....J.u*k.._ 02e0 84 7b 1c fb 60 5b 43 13 53 e0 a3 cd 25 75 1e 18 .{..`[C.S...%u.. 02f0 eb 3c c2 b0 66 da ce 80 8a 7c 9c c0 92 f5 83 b9 .<..f....|...... 0300 54 41 3b dc 93 e3 73 b1 64 0c d5 0e ae 3f 38 b5 TA;...s.d....?8. 0310 01 6f bd 33 ad 25 f6 74 7c dd e2 f6 f8 0f 32 43 .o.3.%.t|.....2C 0320 77 3d f6 4e da a3 d0 ea a1 9e d2 4b 4a 19 ea c4 w=.N.......KJ... 0330 4f 58 45 bc 13 88 8d 06 a5 d1 32 17 4c 5b f5 6f OXE.......2.L[.o 0340 f5 69 21 45 f3 17 03 01 03 40 d8 cb fd d8 c8 86 .i!E.....@...... 0350 1a 3d fa 02 70 42 16 70 67 2a e5 07 b3 c7 df 3c .=..pB.pg*.....< 0360 1c 20 71 18 d5 95 dd 8c 1a 81 9a e7 f2 ed 57 bc . q...........W. 0370 91 92 7a a7 c0 cf 53 74 9f 3c 26 f6 65 e3 22 8e ..z...St.<&.e.". 0380 f4 7e a2 ca 98 51 6f 1b d0 44 92 15 f2 54 ab 91 .~...Qo..D...T.. 0390 2a 46 ad a4 58 ec 3f 1a c9 49 87 1c 77 cb b7 8a *F..X.?..I..w... 03a0 5a 2e a3 ef 78 16 81 4d 92 ca 1f e9 67 00 af 84 Z...x..M....g... 03b0 32 51 6d 76 18 7d 98 a6 56 a4 6c 07 c6 2d 54 b3 2Qmv.}..V.l..-T. 03c0 9a 2d 23 9e 19 f7 b9 26 1b 54 e0 ec cc c5 c8 d3 .-#....&.T...... 03d0 b8 f2 a1 62 cf 4e d6 d8 34 1a 38 49 82 0e c3 b9 ...b.N..4.8I.... 03e0 a0 8a 94 8b 23 3f d7 1d 11 e0 a0 75 09 19 ec 26 ....#?.....u...& 03f0 21 3a 4a 1f 33 e6 b2 14 c6 ef 8c f9 e3 b6 27 30 !:J.3.........'0 0400 37 16 db 10 a8 54 18 30 b8 ec 21 09 f2 37 2c 49 7....T.0..!..7,I 0410 c7 d6 6f 7c c7 34 4c 31 5f ef 94 73 7b 36 ae 81 ..o|.4L1_..s{6.. 0420 78 b0 c0 8e 7c 3f c0 b0 53 e0 d6 d4 dc a3 7e a4 x...|?..S.....~. 0430 ac 83 59 ad be 22 c8 22 95 c0 95 7b ea 38 07 f8 ..Y.."."...{.8.. 0440 e1 2a 09 bf 34 4e 3c 48 4e 4b 3e 95 7e 84 b0 f3 .*..4N<HNK>.~... 0450 2a ee 30 04 3c 89 21 44 39 3d ec 31 82 0b 51 25 *.0.<.!D9=.1..Q% 0460 ac a4 d1 6a 4c 17 02 7b 35 4f d6 9d 02 5d 4a b6 ...jL..{5O...]J. 0470 2d 25 b5 fc 92 2a 58 f9 85 40 16 aa 15 d9 90 1d -%...*X..@...... 0480 cb 53 e1 f1 f9 4a 17 99 23 60 45 5d de 1a e6 ca .S...J..#`E].... 0490 a6 7d b7 30 38 c4 ad e1 a7 1b ef 6c 95 c4 0b 2a .}.08......l...* 04a0 18 8c 01 5c b6 5b fb fb f5 63 3c 9d 90 33 fe fb ...\.[...c<..3.. 04b0 84 7a 60 ce bb 23 a3 19 c9 18 37 bb 29 f2 5f f5 .z`..#....7.)._. 04c0 4b 97 c3 fe a7 27 ce 14 0e 9f 8b 38 ef 84 56 7c K....'.....8..V| 04d0 b0 61 c3 9e 5d e6 8b 86 e6 5c 10 12 30 6b d6 99 .a..]....\..0k.. 04e0 93 51 71 64 9a 20 b7 3e 74 14 44 0d 56 62 2c 4d .Qqd. .>t.D.Vb,M 04f0 aa fe b0 46 c1 08 2c e8 71 c1 0e a5 98 cd a8 df ...F..,.q....... 0500 d7 b6 5a c7 97 7a 12 ad 85 f3 50 50 91 4e 63 80 ..Z..z....PP.Nc. 0510 16 4c db 84 2a b4 8d 98 9b 18 8e 75 aa c7 a4 7a .L..*......u...z 0520 9f 14 ea aa b5 f7 e8 e6 d5 fc 14 02 04 a6 52 62 ..............Rb 0530 70 c9 85 b3 78 9e 55 0d 53 f3 22 9d 38 e0 d6 22 p...x.U.S.".8.." 0540 4f 0d 43 18 fe 26 42 2c 52 51 c0 18 e7 cb 73 7f O.C..&B,RQ....s. 0550 f8 63 3f 1e 22 eb 25 4e 1b a9 01 98 13 13 f2 7d .c?.".%N.......} 0560 d8 ed 2b 34 4e 85 4f 19 1d 09 6e c4 69 73 a3 c7 ..+4N.O...n.is.. 0570 6e 58 7d 71 a2 5e de ad 08 5c 8f c5 c7 cf 28 8e nX}q.^...\....(. 0580 d6 93 24 99 ed d3 e2 79 a8 8d ca 49 95 a5 73 1f ..$....y...I..s. 0590 cf 3a bc 96 e0 fe 2f f3 31 04 30 bb f7 50 88 c4 .:..../.1.0..P.. 05a0 04 b5 be ae 92 a0 0e a1 ........ No. Time Source Destination Protocol Length Info 1380 12.022287 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=963 Ack=59871 Win=65535 Len=0 TSval=727603 TSecr=538254 Frame 1380: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 963, Ack: 59871, Len: 0 No. Time Source Destination Protocol Length Info 1381 12.022338 192.168.10.1 192.168.10.203 TCP 292 34433 > cds [PSH, ACK] Seq=59871 Ack=963 Win=1002 Len=226 TSval=538254 TSecr=727603 Frame 1381: 292 bytes on wire (2336 bits), 292 bytes captured (2336 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 59871, Ack: 963, Len: 226 Data (226 bytes) 0000 de d7 34 6d c0 77 d2 37 e6 ca 06 fa 8b 9f 89 be ..4m.w.7........ 0010 f3 cb 08 a4 eb 45 89 90 e0 76 85 c7 b5 2b 50 11 .....E...v...+P. 0020 60 73 bc 1d 14 9b 13 39 3f f5 6d d4 9e 10 f4 ee `s.....9?.m..... 0030 e9 46 35 49 d1 fb b2 84 50 5f e9 32 3e 1e 14 44 .F5I....P_.2>..D 0040 95 64 b7 d2 04 2c 1b 04 a7 80 0a 7a e7 80 15 54 .d...,.....z...T 0050 6d 0c cb b3 a4 bd 8f 9b e5 6c ce 85 20 1b 22 e2 m........l.. .". 0060 83 ef 0a 29 1e 55 c4 38 ac 68 27 d4 3d bc 13 26 ...).U.8.h'.=..& 0070 d9 fb b3 23 07 04 cf f2 04 a8 ea f8 64 d2 ac 81 ...#........d... 0080 9b c5 b6 34 34 63 04 8f 19 a4 48 ed 1d 91 3f 17 ...44c....H...?. 0090 55 eb 7a 4d 3b 83 75 58 20 9b f9 53 c7 e8 e7 72 U.zM;.uX ..S...r 00a0 31 5a 08 1b a2 3d 63 39 78 ce 96 76 83 39 81 07 1Z...=c9x..v.9.. 00b0 f6 ce 60 f2 d8 72 b2 6b 07 32 61 7a 1c 48 e3 f5 ..`..r.k.2az.H.. 00c0 3e a8 8f 6d 65 3b af 18 b4 f1 86 07 79 83 14 16 >..me;......y... 00d0 88 dd de 6e a0 9e 81 47 3b 67 6f 1f 95 da 19 22 ...n...G;go...." 00e0 2c ca ,. No. Time Source Destination Protocol Length Info 1382 12.055856 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=963 Ack=60097 Win=65309 Len=74 TSval=727603 TSecr=538254 Frame 1382: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 963, Ack: 60097, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 1c e3 99 55 0e b3 1b 46 a9 03 90 .... ...U...F... 0010 57 80 ee f2 8b d0 4b 8a cb ff d0 ac 2f e1 5d 51 W.....K...../.]Q 0020 3b 1a a4 ea ca 17 03 01 00 20 18 d1 e6 24 0d be ;........ ...$.. 0030 eb 72 bf 9c 4e fa c0 18 a7 bb 39 72 cf 1c 1a 06 .r..N.....9r.... 0040 d1 79 9a 5c 75 cd 8e 5f 98 61 .y.\u.._.a No. Time Source Destination Protocol Length Info 1383 12.055920 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=60097 Ack=1037 Win=1002 Len=0 TSval=538262 TSecr=727603 Frame 1383: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 60097, Ack: 1037, Len: 0 No. Time Source Destination Protocol Length Info 1384 12.058474 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=1037 Ack=60097 Win=65309 Len=74 TSval=727603 TSecr=538262 Frame 1384: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1037, Ack: 60097, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 16 07 ca b0 26 2c d3 27 89 03 ee .... ....&,.'... 0010 f2 0d 10 b5 9f aa 82 f6 4d 8f b5 4a cd d8 4a 6e ........M..J..Jn 0020 7b 0d 02 c4 74 17 03 01 00 20 46 55 4e 28 a7 55 {...t.... FUN(.U 0030 fe 47 bd 88 b6 cf 55 5b c2 e0 a0 28 e9 17 cb 77 .G....U[...(...w 0040 30 60 a2 60 02 85 37 f8 75 e7 0`.`..7.u. No. Time Source Destination Protocol Length Info 1385 12.058527 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=60097 Ack=1111 Win=1002 Len=0 TSval=538263 TSecr=727603 Frame 1385: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 60097, Ack: 1111, Len: 0 No. Time Source Destination Protocol Length Info 1386 12.060888 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=1111 Ack=60097 Win=65309 Len=74 TSval=727603 TSecr=538263 Frame 1386: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1111, Ack: 60097, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 34 d2 29 21 08 2e 53 11 ae e1 26 .... 4.)!..S...& 0010 24 b4 89 b0 19 2c aa d8 03 68 ef 04 29 06 d9 1b $....,...h..)... 0020 76 52 9a 7d 33 17 03 01 00 20 32 c0 8f bc a1 fd vR.}3.... 2..... 0030 c4 a6 a2 ef af 37 7b bc e8 17 d2 04 57 11 25 ca .....7{.....W.%. 0040 7b 30 60 22 ab 5f 8b 87 ec e1 {0`"._.... No. Time Source Destination Protocol Length Info 1387 12.060939 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=60097 Ack=1185 Win=1002 Len=0 TSval=538264 TSecr=727603 Frame 1387: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 60097, Ack: 1185, Len: 0 No. Time Source Destination Protocol Length Info 1388 12.068347 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 1388: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1389 12.068376 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 1389: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1390 12.069069 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 1390: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1391 12.069084 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 1391: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1392 12.282651 192.168.10.1 192.168.10.245 Syslog 368 LOCAL1.INFO: Oct 3 19:44:30 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo.kaspersky.com" arg="/bases/av/kdb/i386/kdb-i386-0607g.xml.dif" sent_bytes="231" rcvd_bytes="1455" (HTTP-proxy-Visitor-00) Frame 1392: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:30 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo No. Time Source Destination Protocol Length Info 1393 12.329376 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 1393: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1394 12.329408 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 1394: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1395 12.348666 64.74.103.148 192.168.10.190 TLSv1 91 Application Data Frame 1395: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Internet Protocol Version 4, Src: 64.74.103.148 (64.74.103.148), Dst: 192.168.10.190 (192.168.10.190) Transmission Control Protocol, Src Port: https (443), Dst Port: wsmlb (3806), Seq: 1, Ack: 38, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 1396 12.408727 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1806637312, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1396: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1397 12.408751 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1806637312, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1397: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1398 12.408764 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1806637312, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1398: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1399 12.408776 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1806637312, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1399: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1400 12.429440 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3675717888, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1400: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1401 12.429464 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3675717888, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1401: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1402 12.429476 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3675717888, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1402: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1403 12.429488 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3675717888, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1403: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1404 12.465788 192.168.10.190 64.74.103.148 TCP 60 wsmlb > https [ACK] Seq=38 Ack=38 Win=64203 Len=0 Frame 1404: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.190 (192.168.10.190), Dst: 64.74.103.148 (64.74.103.148) Transmission Control Protocol, Src Port: wsmlb (3806), Dst Port: https (443), Seq: 38, Ack: 38, Len: 0 No. Time Source Destination Protocol Length Info 1405 12.520336 182.178.75.135 192.168.10.207 SMTP 98 C: MAIL FROM: <sophie.molligan@xxxxxxxxxxxxx> Frame 1405: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: hsl-storm (2113), Dst Port: smtp (25), Seq: 18, Ack: 313, Len: 44 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1406 12.520462 192.168.10.207 182.178.75.135 SMTP 108 S: 250 2.1.0 [email protected] OK Frame 1406: 108 bytes on wire (864 bits), 108 bytes captured (864 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: hsl-storm (2113), Seq: 313, Ack: 62, Len: 54 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1407 12.520511 182.178.75.135 192.168.10.207 TCP 60 hsl-storm > smtp [ACK] Seq=62 Ack=367 Win=93074 Len=0 Frame 1407: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: hsl-storm (2113), Dst Port: smtp (25), Seq: 62, Ack: 367, Len: 0 No. Time Source Destination Protocol Length Info 1408 12.649472 192.168.10.142 192.168.10.255 NBNS 110 Registration NB WORKGROUP<1e> Frame 1408: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 1409 12.649643 192.168.10.142 192.168.10.255 NBNS 110 Registration NB WORKGROUP<1e> Frame 1409: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 1410 12.653567 192.168.10.142 192.168.10.255 NBNS 110 Registration NB ANDYMOBILEPC<20> Frame 1410: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 1411 12.653717 192.168.10.142 192.168.10.255 NBNS 110 Registration NB ANDYMOBILEPC<20> Frame 1411: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 1412 12.812671 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-06.geo.kaspersky.com Frame 1412: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 51246 (51246), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 1413 12.812816 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-06.geo.kaspersky.com Frame 1413: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 51246 (51246), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 1414 12.875526 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 1414: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 64266, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1415 12.875563 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=65508 Ack=883 Win=46064 Len=0 Frame 1415: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 65508, Ack: 883, Len: 0 No. Time Source Destination Protocol Length Info 1416 12.875640 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=883 Ack=64266 Win=0 Len=0 Frame 1416: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 883, Ack: 64266, Len: 0 No. Time Source Destination Protocol Length Info 1417 12.875882 Watchgua_3c:4c:d8 Dell_39:5d:dd ARP 60 Who has 192.168.10.207? Tell 192.168.10.1 Frame 1417: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1418 12.875895 Dell_39:5d:dd Watchgua_3c:4c:d8 ARP 60 192.168.10.207 is at 00:18:8b:39:5d:dd Frame 1418: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1419 13.024767 192.168.10.1 192.168.10.245 Syslog 308 LOCAL1.INFO: Oct 3 19:44:31 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2113 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="exspotted@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 1419: 308 bytes on wire (2464 bits), 308 bytes captured (2464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:31 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2113 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default No. Time Source Destination Protocol Length Info 1420 13.193837 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 1420: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1421 13.315206 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 1421: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1422 13.401611 192.168.10.142 192.168.10.255 NBNS 110 Registration NB WORKGROUP<1e> Frame 1422: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 1423 13.401781 192.168.10.142 192.168.10.255 NBNS 110 Registration NB WORKGROUP<1e> Frame 1423: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 1424 13.401911 192.168.10.142 192.168.10.255 NBNS 110 Registration NB ANDYMOBILEPC<20> Frame 1424: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 1425 13.402032 192.168.10.142 192.168.10.255 NBNS 110 Registration NB ANDYMOBILEPC<20> Frame 1425: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 1426 13.424342 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1823414528, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1426: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1427 13.424366 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1823414528, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1427: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1428 13.424379 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1823414528, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1428: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1429 13.424391 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1823414528, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1429: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1430 13.443401 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 1430: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1431 13.445085 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3692495104, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1431: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1432 13.445105 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3692495104, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1432: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1433 13.445117 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3692495104, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1433: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1434 13.445129 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3692495104, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1434: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1435 13.499478 182.178.75.135 192.168.10.207 SMTP 60 C: QUIT Frame 1435: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: hsl-storm (2113), Dst Port: smtp (25), Seq: 62, Ack: 367, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1436 13.499639 192.168.10.207 182.178.75.135 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 1436: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: hsl-storm (2113), Seq: 367, Ack: 68, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1437 13.499684 182.178.75.135 192.168.10.207 TCP 60 hsl-storm > smtp [ACK] Seq=68 Ack=436 Win=93004 Len=0 Frame 1437: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: hsl-storm (2113), Dst Port: smtp (25), Seq: 68, Ack: 436, Len: 0 No. Time Source Destination Protocol Length Info 1438 13.499714 192.168.10.207 182.178.75.135 TCP 60 smtp > hsl-storm [FIN, ACK] Seq=436 Ack=68 Win=65468 Len=0 Frame 1438: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: hsl-storm (2113), Seq: 436, Ack: 68, Len: 0 No. Time Source Destination Protocol Length Info 1439 13.499760 182.178.75.135 192.168.10.207 TCP 60 hsl-storm > smtp [ACK] Seq=68 Ack=437 Win=93004 Len=0 Frame 1439: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: hsl-storm (2113), Dst Port: smtp (25), Seq: 68, Ack: 437, Len: 0 No. Time Source Destination Protocol Length Info 1440 13.565829 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 1440: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1441 13.567567 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 1441: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1442 13.567596 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 1442: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1443 13.918105 182.178.75.135 192.168.10.207 TCP 60 hsl-storm > smtp [RST, ACK] Seq=68 Ack=437 Win=93004 Len=0 Frame 1443: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: hsl-storm (2113), Dst Port: smtp (25), Seq: 68, Ack: 437, Len: 0 No. Time Source Destination Protocol Length Info 1444 13.918188 192.168.10.1 192.168.10.245 Syslog 202 LOCAL1.INFO: Oct 3 19:44:31 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2113 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 1444: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:31 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2113 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 1445 14.067393 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 1445: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1446 14.067425 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 1446: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1447 14.137709 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1447: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 210001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1448 14.137745 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1448: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 211401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1449 14.137775 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1449: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 212801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1450 14.137804 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1450: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 214201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1451 14.137833 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1451: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 215601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1452 14.137868 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1452: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 217001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1453 14.137901 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1453: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 218401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1454 14.137938 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1454: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 219801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1455 14.137969 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1455: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 221201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1456 14.137999 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1456: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 222601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1457 14.138046 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=214201 Win=65535 Len=0 Frame 1457: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 214201, Len: 0 No. Time Source Destination Protocol Length Info 1458 14.138076 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1458: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 224001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1459 14.138106 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1459: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 225401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1460 14.138135 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1460: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 226801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1461 14.138164 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1461: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 228201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1462 14.138210 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=221201 Win=65535 Len=0 Frame 1462: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 221201, Len: 0 No. Time Source Destination Protocol Length Info 1463 14.138242 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1463: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 229601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1464 14.138272 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1464: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 231001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1465 14.138302 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1465: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 232401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1466 14.138333 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1466: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 233801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1467 14.138374 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1467: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 235201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1468 14.138413 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=228201 Win=59935 Len=0 Frame 1468: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 228201, Len: 0 No. Time Source Destination Protocol Length Info 1469 14.138443 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1469: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 236601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1470 14.138474 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1470: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 238001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1471 14.138517 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=228201 Win=65535 Len=0 Frame 1471: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 228201, Len: 0 No. Time Source Destination Protocol Length Info 1472 14.138549 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1472: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 239401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1473 14.138579 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1473: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 240801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1474 14.138621 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1474: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 242201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1475 14.138658 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=236601 Win=59935 Len=0 Frame 1475: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 236601, Len: 0 No. Time Source Destination Protocol Length Info 1476 14.138687 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1476: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 243601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1477 14.138724 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=236601 Win=65535 Len=0 Frame 1477: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 236601, Len: 0 No. Time Source Destination Protocol Length Info 1478 14.138752 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1478: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 245001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1479 14.138781 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1479: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 246401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1480 14.138816 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1480: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 247801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1481 14.138858 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=243601 Win=61335 Len=0 Frame 1481: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 243601, Len: 0 No. Time Source Destination Protocol Length Info 1482 14.138887 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1482: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 249201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1483 14.138917 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1483: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 250601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1484 14.138954 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=243601 Win=65095 Len=0 Frame 1484: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 243601, Len: 0 No. Time Source Destination Protocol Length Info 1485 14.138989 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1485: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 252001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1486 14.139020 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1486: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 253401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1487 14.139057 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=247801 Win=65535 Len=0 Frame 1487: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 247801, Len: 0 No. Time Source Destination Protocol Length Info 1488 14.139093 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=249201 Win=64135 Len=0 Frame 1488: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 249201, Len: 0 No. Time Source Destination Protocol Length Info 1489 14.139121 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1489: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 254801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1490 14.139150 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1490: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 256201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1491 14.139185 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=252001 Win=61335 Len=0 Frame 1491: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 252001, Len: 0 No. Time Source Destination Protocol Length Info 1492 14.139214 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1492: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 257601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1493 14.139249 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=254801 Win=58535 Len=0 Frame 1493: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 254801, Len: 0 No. Time Source Destination Protocol Length Info 1494 14.139278 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1494: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 259001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1495 14.139312 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1495: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 260401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1496 14.139353 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=256201 Win=60895 Len=0 Frame 1496: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 256201, Len: 0 No. Time Source Destination Protocol Length Info 1497 14.139389 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=257601 Win=65535 Len=0 Frame 1497: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 257601, Len: 0 No. Time Source Destination Protocol Length Info 1498 14.139418 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1498: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 261801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1499 14.139449 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1499: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 263201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1500 14.139490 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=260401 Win=62735 Len=0 Frame 1500: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 260401, Len: 0 No. Time Source Destination Protocol Length Info 1501 14.139521 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1501: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 264601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1502 14.139550 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 1502: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 266001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 1503 14.139593 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=263201 Win=59935 Len=0 Frame 1503: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 263201, Len: 0 No. Time Source Destination Protocol Length Info 1504 14.139628 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=266001 Win=57135 Len=0 Frame 1504: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 266001, Len: 0 No. Time Source Destination Protocol Length Info 1505 14.139667 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=267401 Win=59495 Len=0 Frame 1505: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 267401, Len: 0 No. Time Source Destination Protocol Length Info 1506 14.139702 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=267401 Win=65535 Len=0 Frame 1506: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 267401, Len: 0 No. Time Source Destination Protocol Length Info 1507 14.149695 192.168.10.142 192.168.10.255 NBNS 110 Registration NB WORKGROUP<1e> Frame 1507: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 1508 14.149893 192.168.10.142 192.168.10.255 NBNS 110 Registration NB WORKGROUP<1e> Frame 1508: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 1509 14.153702 192.168.10.142 192.168.10.255 NBNS 110 Registration NB ANDYMOBILEPC<20> Frame 1509: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 1510 14.153860 192.168.10.142 192.168.10.255 NBNS 110 Registration NB ANDYMOBILEPC<20> Frame 1510: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 1511 14.439962 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1840191744, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1511: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1512 14.439986 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1840191744, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1512: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1513 14.439999 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1840191744, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1513: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1514 14.440011 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1840191744, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1514: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1515 14.460842 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3709272320, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1515: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1516 14.460865 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3709272320, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1516: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1517 14.460887 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3709272320, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1517: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1518 14.460899 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3709272320, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1518: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1519 14.901665 192.168.10.142 192.168.10.255 NBNS 110 Registration NB WORKGROUP<1e> Frame 1519: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 1520 14.901838 192.168.10.142 192.168.10.255 NBNS 110 Registration NB WORKGROUP<1e> Frame 1520: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 1521 14.910167 192.168.10.142 192.168.10.255 NBNS 110 Registration NB ANDYMOBILEPC<20> Frame 1521: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 1522 14.910297 192.168.10.142 192.168.10.255 NBNS 110 Registration NB ANDYMOBILEPC<20> Frame 1522: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 1523 14.994885 192.168.10.246 65.32.1.70 DNS 85 Standard query PTR 33.35.19.113.in-addr.arpa Frame 1523: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.70 (65.32.1.70) User Datagram Protocol, Src Port: 59378 (59378), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 1524 15.074955 192.168.10.207 206.225.164.186 SMTP 348 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 1524: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 118427, Len: 294 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1525 15.074992 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=119525 Ack=1345 Win=46132 Len=0 Frame 1525: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 119525, Ack: 1345, Len: 0 No. Time Source Destination Protocol Length Info 1526 15.075031 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=1345 Ack=118427 Win=0 Len=0 Frame 1526: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1345, Ack: 118427, Len: 0 No. Time Source Destination Protocol Length Info 1527 15.193732 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 1527: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1528 15.258842 192.168.10.142 192.168.10.255 NBNS 92 Name query NB JPULIDOXP<00> Frame 1528: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 1529 15.259035 192.168.10.142 192.168.10.255 NBNS 92 Name query NB JPULIDOXP<00> Frame 1529: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 1530 15.259128 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.142? Tell 192.168.10.185 Frame 1530: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1531 15.259146 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.142? Tell 192.168.10.185 Frame 1531: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1532 15.259160 Cisco_04:98:91 Dell_48:43:a3 ARP 60 192.168.10.142 is at 00:0f:34:04:98:91 Frame 1532: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1533 15.259267 192.168.10.185 192.168.10.142 NBNS 116 Name query response NB 192.168.80.1 Frame 1533: 116 bytes on wire (928 bits), 116 bytes captured (928 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 1534 15.315181 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 1534: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1535 15.341234 192.168.10.142 192.168.10.185 TCP 66 xrl > rfb [SYN] Seq=0 Win=64240 Len=0 MSS=1260 WS=1 SACK_PERM=1 Frame 1535: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 1536 15.341297 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=1 SACK_PERM=1 Frame 1536: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 1537 15.363894 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=1 Ack=1 Win=64240 Len=0 Frame 1537: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 1538 15.379340 192.168.10.185 192.168.10.142 VNC 66 Server protocol version: 004.001 Frame 1538: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 1, Ack: 1, Len: 12 Virtual Network Computing No. Time Source Destination Protocol Length Info 1539 15.443458 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 1539: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1540 15.455431 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1856968960, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1540: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1541 15.455455 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1856968960, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1541: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1542 15.455467 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1856968960, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1542: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1543 15.455480 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1856968960, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1543: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1544 15.476399 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3726049536, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1544: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1545 15.476421 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3726049536, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1545: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1546 15.476433 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3726049536, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1546: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1547 15.476445 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3726049536, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1547: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1548 15.532416 192.168.10.142 192.168.10.185 VNC 66 Client protocol version: 004.001 Frame 1548: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1, Ack: 13, Len: 12 Virtual Network Computing No. Time Source Destination Protocol Length Info 1549 15.532452 192.168.10.185 192.168.10.142 VNC 60 Security types supported Frame 1549: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 13, Ack: 13, Len: 2 Virtual Network Computing No. Time Source Destination Protocol Length Info 1550 15.558438 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 1550: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1551 15.558470 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 1551: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1552 15.565156 192.168.10.142 192.168.10.185 VNC 60 Authentication type selected by client Frame 1552: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13, Ack: 15, Len: 1 Virtual Network Computing No. Time Source Destination Protocol Length Info 1553 15.565193 192.168.10.185 192.168.10.142 VNC 570 Authentication type selected by client Frame 1553: 570 bytes on wire (4560 bits), 570 bytes captured (4560 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 15, Ack: 14, Len: 516 Virtual Network Computing No. Time Source Destination Protocol Length Info 1554 15.565809 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 1554: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1555 15.675695 192.168.10.142 192.168.10.255 BROWSER 225 Request Announcement ANDYMOBILEPC Frame 1555: 225 bytes on wire (1800 bits), 225 bytes captured (1800 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1556 15.675910 192.168.10.142 192.168.10.255 BROWSER 225 Request Announcement ANDYMOBILEPC Frame 1556: 225 bytes on wire (1800 bits), 225 bytes captured (1800 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1557 15.676078 192.168.10.142 192.168.10.255 BROWSER 243 Host Announcement ANDYMOBILEPC, Workstation, Server, NT Workstation, Potential Browser Frame 1557: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1558 15.676240 192.168.10.142 192.168.10.255 BROWSER 243 Host Announcement ANDYMOBILEPC, Workstation, Server, NT Workstation, Potential Browser Frame 1558: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1559 15.676481 192.168.10.104 192.168.10.255 BROWSER 243 Local Master Announcement BAIMOBILEPC2, Workstation, Server, NT Workstation, Potential Browser, Master Browser Frame 1559: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1560 15.676952 192.168.10.104 192.168.10.255 BROWSER 243 Local Master Announcement BAIMOBILEPC2, Workstation, Server, NT Workstation, Potential Browser, Master Browser Frame 1560: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1561 16.073743 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 1561: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1562 16.073775 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 1562: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1563 16.152864 208.67.222.222 192.168.10.220 DNS 85 Standard query response, Server failure Frame 1563: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 52425 (52425) Domain Name System (response) No. Time Source Destination Protocol Length Info 1564 16.152949 192.168.10.220 208.67.220.220 DNS 85 Standard query PTR 33.35.19.113.in-addr.arpa Frame 1564: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.220.220 (208.67.220.220) User Datagram Protocol, Src Port: 52425 (52425), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 1565 16.156009 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 Who has 192.168.10.220? Tell 192.168.10.1 Frame 1565: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1566 16.156021 Dell_ad:25:f6 Watchgua_3c:4c:d8 ARP 60 192.168.10.220 is at 00:22:19:ad:25:f6 Frame 1566: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1567 16.219961 192.168.10.220 192.168.10.255 BROWSER 248 Domain/Workgroup Announcement MYDOMAIN, Domain Controller, NT Workstation, Domain Enum Frame 1567: 248 bytes on wire (1984 bits), 248 bytes captured (1984 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1568 16.220209 192.168.10.220 192.168.10.255 BROWSER 248 Domain/Workgroup Announcement MYDOMAIN, Domain Controller, NT Workstation, Domain Enum Frame 1568: 248 bytes on wire (1984 bits), 248 bytes captured (1984 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1569 16.471055 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1873746176, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1569: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1570 16.471078 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1873746176, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1570: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1571 16.471092 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1873746176, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1571: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1572 16.471104 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1873746176, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1572: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1573 16.492065 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3742826752, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1573: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1574 16.492084 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3742826752, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1574: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1575 16.492096 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3742826752, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1575: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1576 16.492108 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3742826752, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1576: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1577 16.847325 192.168.10.1 192.168.10.245 Syslog 310 LOCAL1.INFO: Oct 3 19:44:34 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eymilitant@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 1577: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:34 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 1578 16.992074 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 1415#1] 9428 > smtp [ACK] Seq=65508 Ack=883 Win=46064 Len=0 Frame 1578: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 65508, Ack: 883, Len: 0 No. Time Source Destination Protocol Length Info 1579 16.992116 206.225.164.186 192.168.10.207 TCP 60 [TCP Dup ACK 1525#1] 23308 > smtp [ACK] Seq=119525 Ack=1345 Win=46132 Len=0 Frame 1579: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 119525, Ack: 1345, Len: 0 No. Time Source Destination Protocol Length Info 1580 16.992150 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=883 Ack=64266 Win=0 Len=0 Frame 1580: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 883, Ack: 64266, Len: 0 No. Time Source Destination Protocol Length Info 1581 16.992178 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=1345 Ack=118427 Win=0 Len=0 Frame 1581: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1345, Ack: 118427, Len: 0 No. Time Source Destination Protocol Length Info 1582 17.016685 192.168.10.31 192.168.20.3 UDP 776 Source port: 50764 Destination port: apc-3052 Frame 1582: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 34 38 3a 33 38 0a 53 52 3d 31 30 37 =19:48:38.SR=107 0060 43 0a 53 55 3d 32 44 38 32 42 43 38 46 0a 52 44 C.SU=2D82BC8F.RD 0070 3d 38 31 38 42 0a 54 41 3d 31 39 32 2e 31 36 38 =818B.TA=192.168 0080 2e 32 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a .20.3.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 37 2e 30 0a 35 31 SM=2.4F=207.0.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 33 .4C=207.3.50=033 00c0 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 .0.43=028.5.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 37 3a 1/19/07.6A=0057: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 3d 31 746005443 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 36 30 2e 30 31 0a 34 44 3d .46=60.01.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 37 2e 33 0a 34 207.3.4E=207.3.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 34 2e .5C=028.0.2F=14. 01d0 30 34 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 04.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 000.09=60.00;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 39 45 30 42 38 36 43 32 38 35 43 42 45 45 37 =9E0B86C285CBEE7 02a0 44 41 35 45 34 43 44 33 35 34 43 30 35 41 44 37 DA5E4CD354C05AD7 02b0 33 0a 4d 44 3d 31 30 65 31 64 36 65 34 65 33 32 3.MD=10e1d6e4e32 02c0 34 32 31 38 37 39 36 34 61 33 61 30 33 34 37 65 42187964a3a0347e 02d0 66 39 32 64 39 0a 3c 2f 42 4f 44 59 3e 0a f92d9.</BODY>. No. Time Source Destination Protocol Length Info 1583 17.016798 192.168.10.31 192.168.20.3 UDP 776 Source port: 50764 Destination port: apc-3052 Frame 1583: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 34 38 3a 33 38 0a 53 52 3d 31 30 37 =19:48:38.SR=107 0060 43 0a 53 55 3d 32 44 38 32 42 43 38 46 0a 52 44 C.SU=2D82BC8F.RD 0070 3d 38 31 38 42 0a 54 41 3d 31 39 32 2e 31 36 38 =818B.TA=192.168 0080 2e 32 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a .20.3.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 37 2e 30 0a 35 31 SM=2.4F=207.0.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 33 .4C=207.3.50=033 00c0 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 .0.43=028.5.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 37 3a 1/19/07.6A=0057: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 3d 31 746005443 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 36 30 2e 30 31 0a 34 44 3d .46=60.01.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 37 2e 33 0a 34 207.3.4E=207.3.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 34 2e .5C=028.0.2F=14. 01d0 30 34 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 04.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 000.09=60.00;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 39 45 30 42 38 36 43 32 38 35 43 42 45 45 37 =9E0B86C285CBEE7 02a0 44 41 35 45 34 43 44 33 35 34 43 30 35 41 44 37 DA5E4CD354C05AD7 02b0 33 0a 4d 44 3d 31 30 65 31 64 36 65 34 65 33 32 3.MD=10e1d6e4e32 02c0 34 32 31 38 37 39 36 34 61 33 61 30 33 34 37 65 42187964a3a0347e 02d0 66 39 32 64 39 0a 3c 2f 42 4f 44 59 3e 0a f92d9.</BODY>. No. Time Source Destination Protocol Length Info 1584 17.016886 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:15:17 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS2/50764 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 1584: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:15:17 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS2/50764 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 1585 17.020000 Watchgua_3c:4c:d8 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.1 Frame 1585: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1586 17.020015 Cisco_bb:96:6d Watchgua_3c:4c:d8 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 1586: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1587 17.166239 192.168.10.142 192.168.10.255 BROWSER 225 Request Announcement ANDYMOBILEPC Frame 1587: 225 bytes on wire (1800 bits), 225 bytes captured (1800 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1588 17.166452 192.168.10.142 192.168.10.255 BROWSER 225 Request Announcement ANDYMOBILEPC Frame 1588: 225 bytes on wire (1800 bits), 225 bytes captured (1800 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1589 17.166641 192.168.10.104 192.168.10.255 BROWSER 243 Local Master Announcement BAIMOBILEPC2, Workstation, Server, NT Workstation, Potential Browser, Master Browser Frame 1589: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1590 17.166989 192.168.10.104 192.168.10.255 BROWSER 243 Local Master Announcement BAIMOBILEPC2, Workstation, Server, NT Workstation, Potential Browser, Master Browser Frame 1590: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1591 17.193850 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 1591: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1592 17.315289 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 1592: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1593 17.415706 192.168.10.84 192.168.10.255 BROWSER 243 Host Announcement JLUMBERTXP, Workstation, Server, NT Workstation, Potential Browser Frame 1593: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Intel_89:3b:11 (00:16:76:89:3b:11), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.84 (192.168.10.84), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1594 17.415953 192.168.10.84 192.168.10.255 BROWSER 243 Host Announcement JLUMBERTXP, Workstation, Server, NT Workstation, Potential Browser Frame 1594: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Intel_89:3b:11 (00:16:76:89:3b:11), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.84 (192.168.10.84), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1595 17.443409 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 1595: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1596 17.474632 192.168.10.185 192.168.10.142 VNC 570 [TCP Retransmission] Authentication type selected by client Frame 1596: 570 bytes on wire (4560 bits), 570 bytes captured (4560 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 15, Ack: 14, Len: 516 Virtual Network Computing No. Time Source Destination Protocol Length Info 1597 17.486685 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1890523392, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1597: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1598 17.486709 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1890523392, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1598: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1599 17.486722 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1890523392, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1599: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1600 17.486734 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1890523392, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1600: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1601 17.507528 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3759603968, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1601: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1602 17.507547 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3759603968, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1602: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1603 17.507559 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3759603968, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1603: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1604 17.507571 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3759603968, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1604: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1605 17.556727 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 1605: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1606 17.556758 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 1606: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1607 17.565952 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 1607: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1608 17.586066 41.252.217.113 192.168.10.207 SMTP 60 C: QUIT Frame 1608: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 38766 (38766), Dst Port: smtp (25), Seq: 65, Ack: 372, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1609 17.586167 192.168.10.207 41.252.217.113 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 1609: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 41.252.217.113 (41.252.217.113) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 38766 (38766), Seq: 372, Ack: 71, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1610 17.586212 41.252.217.113 192.168.10.207 TCP 60 38766 > smtp [ACK] Seq=71 Ack=441 Win=93000 Len=0 Frame 1610: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 38766 (38766), Dst Port: smtp (25), Seq: 71, Ack: 441, Len: 0 No. Time Source Destination Protocol Length Info 1611 17.586243 192.168.10.207 41.252.217.113 TCP 60 smtp > 38766 [FIN, ACK] Seq=441 Ack=71 Win=65465 Len=0 Frame 1611: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 41.252.217.113 (41.252.217.113) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 38766 (38766), Seq: 441, Ack: 71, Len: 0 No. Time Source Destination Protocol Length Info 1612 17.586282 41.252.217.113 192.168.10.207 TCP 60 38766 > smtp [ACK] Seq=71 Ack=442 Win=93000 Len=0 Frame 1612: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 38766 (38766), Dst Port: smtp (25), Seq: 71, Ack: 442, Len: 0 No. Time Source Destination Protocol Length Info 1613 17.869289 192.168.10.142 192.168.10.185 VNC 828 Authentication type selected by client Frame 1613: 828 bytes on wire (6624 bits), 828 bytes captured (6624 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14, Ack: 531, Len: 774 Virtual Network Computing No. Time Source Destination Protocol Length Info 1614 17.956665 192.168.10.185 192.168.10.142 VNC 312 Authentication type selected by client Frame 1614: 312 bytes on wire (2496 bits), 312 bytes captured (2496 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 531, Ack: 788, Len: 258 Virtual Network Computing No. Time Source Destination Protocol Length Info 1615 18.063777 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 1615: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1616 18.063799 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 1616: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1617 18.206316 41.252.217.113 192.168.10.207 TCP 60 38766 > smtp [RST, ACK] Seq=71 Ack=442 Win=93000 Len=0 Frame 1617: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 38766 (38766), Dst Port: smtp (25), Seq: 71, Ack: 442, Len: 0 No. Time Source Destination Protocol Length Info 1618 18.206444 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:44:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 1618: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 1619 18.208013 Watchgua_3c:4c:d8 SunrichT_19:cf:97 ARP 60 Who has 192.168.10.245? Tell 192.168.10.1 Frame 1619: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1620 18.208021 SunrichT_19:cf:97 Watchgua_3c:4c:d8 ARP 60 192.168.10.245 is at 00:0a:cd:19:cf:97 Frame 1620: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:97 (00:0a:cd:19:cf:97), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1621 18.280368 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.100? Tell 192.168.10.226 Frame 1621: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1622 18.280390 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.100? Tell 192.168.10.226 Frame 1622: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1623 18.280446 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 1623: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1624 18.280453 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 1624: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1625 18.280461 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 1625: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1626 18.280467 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 1626: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1627 18.280475 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 1627: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1628 18.280482 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 1628: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1629 18.280504 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 1629: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1630 18.280512 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 1630: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1631 18.280520 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 1631: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1632 18.280532 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 1632: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1633 18.280556 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 1633: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1634 18.280563 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 1634: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1635 18.280569 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 1635: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1636 18.280587 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 1636: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1637 18.280594 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 1637: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1638 18.280600 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 1638: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1639 18.280610 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 1639: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1640 18.280616 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 1640: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1641 18.280623 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 1641: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1642 18.280629 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 1642: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1643 18.280635 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 1643: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1644 18.280641 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 1644: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1645 18.280648 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 1645: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1646 18.280700 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 1646: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1647 18.280707 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 1647: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1648 18.280716 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 1648: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1649 18.280723 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 1649: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1650 18.280729 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 1650: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1651 18.280736 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 1651: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1652 18.280742 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 1652: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1653 18.280748 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 1653: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1654 18.280754 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 1654: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1655 18.280760 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 1655: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1656 18.280767 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 1656: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1657 18.280773 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 1657: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1658 18.280779 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 1658: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1659 18.280791 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 1659: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1660 18.280800 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 1660: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1661 18.280806 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 1661: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1662 18.280813 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 1662: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1663 18.280819 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 1663: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1664 18.280825 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 1664: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1665 18.280831 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 1665: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1666 18.281107 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 1666: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1667 18.502230 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1907300608, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1667: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1668 18.502247 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1907300608, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1668: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1669 18.502256 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1907300608, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1669: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1670 18.502264 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1907300608, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1670: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1671 18.523119 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3776381184, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1671: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1672 18.523134 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3776381184, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1672: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1673 18.523142 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3776381184, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1673: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1674 18.523150 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3776381184, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1674: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1675 18.596225 182.178.75.135 192.168.10.207 TCP 62 gris > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 1675: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gris (2135), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 1676 18.596264 192.168.10.207 182.178.75.135 TCP 62 smtp > gris [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 1676: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: gris (2135), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 1677 18.667265 192.168.10.142 192.168.10.255 BROWSER 225 Request Announcement ANDYMOBILEPC Frame 1677: 225 bytes on wire (1800 bits), 225 bytes captured (1800 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1678 18.667394 192.168.10.142 192.168.10.255 BROWSER 225 Request Announcement ANDYMOBILEPC Frame 1678: 225 bytes on wire (1800 bits), 225 bytes captured (1800 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1679 18.667508 192.168.10.104 192.168.10.255 BROWSER 243 Local Master Announcement BAIMOBILEPC2, Workstation, Server, NT Workstation, Potential Browser, Master Browser Frame 1679: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1680 18.667695 192.168.10.104 192.168.10.255 BROWSER 243 Local Master Announcement BAIMOBILEPC2, Workstation, Server, NT Workstation, Potential Browser, Master Browser Frame 1680: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1681 18.943194 182.178.75.135 192.168.10.207 TCP 60 gris > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 1681: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gris (2135), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 1682 18.943304 192.168.10.1 192.168.10.245 Syslog 204 LOCAL1.INFO: Oct 3 19:44:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2135 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 1682: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2135 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 1683 18.943336 192.168.10.207 182.178.75.135 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:44:11 -0400 Frame 1683: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: gris (2135), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1684 18.943379 182.178.75.135 192.168.10.207 TCP 60 gris > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 1684: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gris (2135), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 1685 18.947194 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 1685: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1686 18.947222 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 1686: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1687 19.193845 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 1687: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1688 19.283936 182.178.75.135 192.168.10.207 SMTP 70 C: EHLO xijeb.com Frame 1688: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gris (2135), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 16 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1689 19.284109 192.168.10.207 182.178.75.135 SMTP 245 S: 250-mail.mydomain.com Hello [182.178.75.135] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 1689: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: gris (2135), Seq: 122, Ack: 17, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1690 19.284158 182.178.75.135 192.168.10.207 TCP 60 gris > smtp [ACK] Seq=17 Ack=313 Win=93128 Len=0 Frame 1690: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gris (2135), Dst Port: smtp (25), Seq: 17, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 1691 19.284483 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:44:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2135 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 1691: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2135 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" No. Time Source Destination Protocol Length Info 1692 19.284562 192.168.10.1 192.168.10.245 Syslog 277 LOCAL1.INFO: Oct 3 19:44:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2135 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 1692: 277 bytes on wire (2216 bits), 277 bytes captured (2216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2135 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPEL No. Time Source Destination Protocol Length Info 1693 19.284856 192.168.10.1 192.168.10.245 Syslog 270 LOCAL1.INFO: Oct 3 19:44:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2135 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 1693: 270 bytes on wire (2160 bits), 270 bytes captured (2160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2135 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 1694 19.284929 192.168.10.1 192.168.10.245 Syslog 286 LOCAL1.INFO: Oct 3 19:44:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2135 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 1694: 286 bytes on wire (2288 bits), 286 bytes captured (2288 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2135 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHAN No. Time Source Destination Protocol Length Info 1695 19.284996 192.168.10.1 192.168.10.245 Syslog 277 LOCAL1.INFO: Oct 3 19:44:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2135 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 1695: 277 bytes on wire (2216 bits), 277 bytes captured (2216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2135 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINAR No. Time Source Destination Protocol Length Info 1696 19.285062 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:44:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2135 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 1696: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2135 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" No. Time Source Destination Protocol Length Info 1697 19.315169 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 1697: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1698 19.443400 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 1698: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1699 19.517847 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1924077824, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1699: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1700 19.517871 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1924077824, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1700: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1701 19.517883 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1924077824, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1701: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1702 19.517895 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1924077824, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1702: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1703 19.538916 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3793158400, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1703: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1704 19.538940 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3793158400, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1704: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1705 19.538952 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3793158400, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1705: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1706 19.538965 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3793158400, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1706: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1707 19.563456 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 1707: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1708 19.563484 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 1708: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1709 19.569081 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 1709: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1710 19.687181 182.178.75.135 192.168.10.207 SMTP 98 C: MAIL FROM: <alexa.murphy@xxxxxxxxxxxxxxxx> Frame 1710: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gris (2135), Dst Port: smtp (25), Seq: 17, Ack: 313, Len: 44 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1711 19.687474 192.168.10.207 182.178.75.135 SMTP 108 S: 250 2.1.0 [email protected] OK Frame 1711: 108 bytes on wire (864 bits), 108 bytes captured (864 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: gris (2135), Seq: 313, Ack: 61, Len: 54 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1712 19.687520 182.178.75.135 192.168.10.207 TCP 60 gris > smtp [ACK] Seq=61 Ack=367 Win=93074 Len=0 Frame 1712: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gris (2135), Dst Port: smtp (25), Seq: 61, Ack: 367, Len: 0 No. Time Source Destination Protocol Length Info 1713 19.816719 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-07.geo.kaspersky.com Frame 1713: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 62086 (62086), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 1714 19.926826 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=1345 Ack=118427 Win=12579 Len=0 Frame 1714: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1345, Ack: 118427, Len: 0 No. Time Source Destination Protocol Length Info 1715 19.926860 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 1714#1] smtp > 23308 [ACK] Seq=1345 Ack=118427 Win=12579 Len=0 Frame 1715: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1345, Ack: 118427, Len: 0 No. Time Source Destination Protocol Length Info 1716 19.926894 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1716: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 119525, Ack: 1345, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1717 19.926923 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1717: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 120905, Ack: 1345, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1718 19.926953 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1718: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 122285, Ack: 1345, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1719 19.926982 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1719: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 123665, Ack: 1345, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1720 19.927011 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1720: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 125045, Ack: 1345, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1721 19.927038 206.225.164.186 192.168.10.207 SMTP 145 C: DATA fragment, 91 bytes Frame 1721: 145 bytes on wire (1160 bits), 145 bytes captured (1160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 126425, Ack: 1345, Len: 91 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1722 19.927066 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1722: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 126516, Ack: 1345, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1723 19.927097 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1723: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 127896, Ack: 1345, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1724 19.927129 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 1714#2] smtp > 23308 [ACK] Seq=1345 Ack=118427 Win=12579 Len=0 Frame 1724: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1345, Ack: 118427, Len: 0 No. Time Source Destination Protocol Length Info 1725 19.927182 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 1714#3] smtp > 23308 [ACK] Seq=1345 Ack=118427 Win=12579 Len=0 Frame 1725: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1345, Ack: 118427, Len: 0 No. Time Source Destination Protocol Length Info 1726 19.927274 206.225.164.186 192.168.10.207 SMTP 1152 [TCP Fast Retransmission] C: DATA fragment, 1098 bytes Frame 1726: 1152 bytes on wire (9216 bits), 1152 bytes captured (9216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 118427, Ack: 1345, Len: 1098 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1727 19.927306 206.225.164.186 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 1727: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 119525, Ack: 1345, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1728 19.927335 192.168.10.207 206.225.164.186 SMTP 474 S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 1728: 474 bytes on wire (3792 bits), 474 bytes captured (3792 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1345, Ack: 118427, Len: 420 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1729 19.927367 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=129276 Ack=1765 Win=46720 Len=0 Frame 1729: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 129276, Ack: 1765, Len: 0 No. Time Source Destination Protocol Length Info 1730 19.927394 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 1728#1] smtp > 23308 [ACK] Seq=1765 Ack=118427 Win=12579 Len=0 Frame 1730: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1765, Ack: 118427, Len: 0 No. Time Source Destination Protocol Length Info 1731 19.927421 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 1728#2] smtp > 23308 [ACK] Seq=1765 Ack=118427 Win=12579 Len=0 Frame 1731: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1765, Ack: 118427, Len: 0 No. Time Source Destination Protocol Length Info 1732 19.927449 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 1728#3] smtp > 23308 [ACK] Seq=1765 Ack=118427 Win=12579 Len=0 Frame 1732: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1765, Ack: 118427, Len: 0 No. Time Source Destination Protocol Length Info 1733 19.927476 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 1728#4] smtp > 23308 [ACK] Seq=1765 Ack=118427 Win=12579 Len=0 Frame 1733: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1765, Ack: 118427, Len: 0 No. Time Source Destination Protocol Length Info 1734 19.927506 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 1728#5] smtp > 23308 [ACK] Seq=1765 Ack=118427 Win=12579 Len=0 Frame 1734: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1765, Ack: 118427, Len: 0 No. Time Source Destination Protocol Length Info 1735 19.927534 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 1728#6] smtp > 23308 [ACK] Seq=1765 Ack=118427 Win=12579 Len=0 Frame 1735: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1765, Ack: 118427, Len: 0 No. Time Source Destination Protocol Length Info 1736 19.927562 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1765 Ack=129276 Win=1730 Len=0 Frame 1736: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1765, Ack: 129276, Len: 0 No. Time Source Destination Protocol Length Info 1737 19.927623 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1737: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 129276, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1738 19.927662 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1738: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 130656, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1739 19.927702 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=1765 Ack=131006 Win=0 Len=0 Frame 1739: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1765, Ack: 131006, Len: 0 No. Time Source Destination Protocol Length Info 1740 20.062963 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 1740: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1741 20.062996 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 1741: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1742 20.074353 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=60097 Ack=1185 Win=1002 Len=1448 TSval=540267 TSecr=727603 Frame 1742: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 60097, Ack: 1185, Len: 1448 Data (1448 bytes) 0000 17 03 01 21 50 84 c6 82 e9 1c a0 38 33 4d f6 3a ...!P......83M.: 0010 55 89 4a 8e 0b f5 ba c7 8e 96 56 c2 d8 cb cf cc U.J.......V..... 0020 67 b4 9f 53 f5 05 4c 57 d1 7a 70 8f fe c6 ec 43 g..S..LW.zp....C 0030 13 d1 e7 67 52 ee 61 2f 10 be 74 d3 1b 50 62 94 ...gR.a/..t..Pb. 0040 1b f9 6a e5 29 18 67 3f 89 e9 90 e0 7b c7 0b 55 ..j.).g?....{..U 0050 67 2b af 21 56 5a d0 46 df 3b 1a b9 7e 5d 9f 92 g+.!VZ.F.;..~].. 0060 6d 52 41 b1 b2 49 88 f6 3f 24 61 12 55 33 de f7 mRA..I..?$a.U3.. 0070 b3 f6 e7 d9 12 47 1c 9e d1 a0 ee ae ca 12 40 9d .....G........@. 0080 be 0c 84 57 ad db d1 a2 05 48 3f 74 52 49 a2 8b ...W.....H?tRI.. 0090 6a 11 3b b8 b9 bd ea ba f4 d2 91 71 1a e2 c4 f4 j.;........q.... 00a0 ba 71 ab 8e 72 3e 7b 9c 80 ce 46 54 80 2c cc f1 .q..r>{...FT.,.. 00b0 34 85 e1 23 6b 7b 31 59 79 20 3a 1a 81 34 f7 00 4..#k{1Yy :..4.. 00c0 58 ee 96 08 7b 12 ea fb a3 a2 bb 4e a7 63 eb fd X...{......N.c.. 00d0 8f b2 68 1c 2a 72 68 c3 7f 01 51 10 ac d4 a5 11 ..h.*rh...Q..... 00e0 29 2f e1 9c 46 0c 8f 3f c7 56 d4 42 4f fb 7a 20 )/..F..?.V.BO.z 00f0 9c 1a 81 d7 5b 45 a1 5f 0e da fb b8 3b e6 b8 7a ....[E._....;..z 0100 97 82 2b a8 37 f1 d4 3c c8 2a 97 c1 a3 01 c0 9c ..+.7..<.*...... 0110 8c 69 b8 4c f2 61 14 52 4f 1c 5e a7 4e f7 4e be .i.L.a.RO.^.N.N. 0120 cb fe 4c e2 dc e5 2d 87 6f e5 b0 d6 ea 25 91 51 ..L...-.o....%.Q 0130 49 56 22 4b 1c 26 3f 88 65 24 a6 14 8e a7 86 be IV"K.&?.e$...... 0140 d8 a6 29 92 63 1b d6 b9 50 f7 c0 bb ce 35 bb 85 ..).c...P....5.. 0150 08 a9 d7 12 cd f0 28 4e 71 d7 00 42 4f cb 1b 15 ......(Nq..BO... 0160 61 ab 17 a0 ea 57 17 29 64 70 32 12 c8 32 af 59 a....W.)dp2..2.Y 0170 9e 6b 0c b7 e6 f1 34 fe 92 e7 64 df e4 bb fb ec .k....4...d..... 0180 09 ac be 51 05 d8 cf eb fc d0 a2 2e 11 00 65 70 ...Q..........ep 0190 26 76 59 bc 06 a1 be ed 39 92 59 e0 7f 06 a0 38 &vY.....9.Y....8 01a0 c8 3b 8a 52 f9 9b 00 59 bd 87 3e 90 57 f5 3b 56 .;.R...Y..>.W.;V 01b0 fb 08 2c aa f4 dd 60 57 bb 53 6d bf e0 d2 c1 61 ..,...`W.Sm....a 01c0 0c 8e 9e fa cb 4c 6c da 25 5a bc cb c0 bb f5 54 .....Ll.%Z.....T 01d0 7b f6 10 3a 69 c8 dd b8 5e 27 44 db d1 e3 29 a9 {..:i...^'D...). 01e0 6b 3d 45 f8 e4 83 d0 28 55 74 14 8d de 3c 2e 0e k=E....(Ut...<.. 01f0 1a 3e 40 fb db 08 be 01 f3 08 fe 23 10 d9 21 7f .>@........#..!. 0200 e3 a8 0c 60 45 f9 ed 32 a7 7c fe ab a7 16 54 20 ...`E..2.|....T 0210 2d 35 0c 62 44 26 1b 74 ba fc 1d 8b 4d 84 97 0d -5.bD&.t....M... 0220 eb e3 b5 c5 89 05 1a 08 87 02 a4 69 5d 03 a2 6b ...........i]..k 0230 49 f4 92 77 fd d3 5c 2b 41 0e 86 b9 94 33 af e5 I..w..\+A....3.. 0240 c3 39 74 f0 46 c7 c7 4f 90 d5 1b 4c ca fa 0a 59 .9t.F..O...L...Y 0250 67 95 81 cd 60 2e e3 ec 9c 54 81 d4 39 e4 dd 25 g...`....T..9..% 0260 00 fa 7f 14 a7 7a 4e 74 e5 29 fa 51 54 4c 0f 3f .....zNt.).QTL.? 0270 77 1f 33 6c 7f 73 bc 6c f8 f4 12 d8 2b 23 ee 00 w.3l.s.l....+#.. 0280 e5 98 87 78 52 fe 0f 33 db a0 5d 5f 60 4b ab 60 ...xR..3..]_`K.` 0290 7b 70 09 19 cc f2 a8 7c 9d 50 2b 86 00 7c 9b cc {p.....|.P+..|.. 02a0 89 b1 af b0 3c 46 a4 f6 9e 2a d9 27 79 52 61 23 ....<F...*.'yRa# 02b0 f8 c6 a2 a6 09 ad 82 f5 3c ab bd 6f 7d 30 99 bf ........<..o}0.. 02c0 51 54 ea 73 21 13 b4 1d 93 36 da 0c 55 0e 33 52 QT.s!....6..U.3R 02d0 e5 3a d3 35 24 00 6b 21 a0 f0 31 e0 e9 32 eb 58 .:.5$.k!..1..2.X 02e0 fc 0e 4c de dc ee 1e 82 19 c1 19 0d d2 57 18 df ..L..........W.. 02f0 72 3b 8f a0 39 d5 f6 4f b6 75 f2 c3 63 10 ca 2f r;..9..O.u..c../ 0300 cc 55 09 4c 36 7c af 55 58 32 2b d4 eb ca ec d9 .U.L6|.UX2+..... 0310 39 0b 4f 81 cd 69 7a 82 51 4b ff 21 16 87 f0 b6 9.O..iz.QK.!.... 0320 f6 2e 4f 53 c6 eb f4 7a e0 f7 57 9f b1 ea 0b 86 ..OS...z..W..... 0330 58 a4 73 9d 15 ca 75 c9 71 ba cb fb 59 da b6 36 X.s...u.q...Y..6 0340 36 b5 27 31 2e b3 17 cd 4b 0c c5 37 ca 69 a0 76 6.'1....K..7.i.v 0350 59 e6 d5 0d 2a 2e 30 4a d2 be 5a 1a 5b f3 a7 b1 Y...*.0J..Z.[... 0360 03 1b 68 ae 8d ca 3e 90 2e e7 64 8e 35 41 86 a8 ..h...>...d.5A.. 0370 99 de 64 5c d1 d7 22 51 9f 8d ab cf 9e c2 b6 b0 ..d\.."Q........ 0380 fa 49 85 94 86 8a bd 7a 19 48 32 f7 ac 25 c2 79 .I.....z.H2..%.y 0390 1d b9 e9 4d 64 f1 c6 13 37 2f 97 2b 85 17 e0 ca ...Md...7/.+.... 03a0 47 58 ae 98 7a 2b b9 ff 21 13 6f e7 5c e8 ee 86 GX..z+..!.o.\... 03b0 5d e3 14 d7 b0 69 a6 11 ba c9 7b 59 1a bc 36 f1 ]....i....{Y..6. 03c0 ec 2f 4d 73 c2 75 ee a4 14 af 4a 2d f3 75 79 a8 ./Ms.u....J-.uy. 03d0 0a 8d 50 57 a9 e7 e6 c5 dc 75 5d 70 0c 87 35 ef ..PW.....u]p..5. 03e0 d2 9a 26 ec a5 1e 43 31 e9 43 ca 98 48 07 24 49 ..&...C1.C..H.$I 03f0 9b 48 22 57 c6 93 29 de b2 1e 26 fe ae 12 22 c0 .H"W..)...&...". 0400 ef 1e e7 db eb b5 59 1a 66 43 05 52 39 65 52 a9 ......Y.fC.R9eR. 0410 e2 86 47 96 6c 82 19 16 19 52 ab 7c e4 1c 82 32 ..G.l....R.|...2 0420 f3 12 36 6e 48 6b 2a 2a 35 ca b5 1e b9 46 05 da ..6nHk**5....F.. 0430 4e 99 96 f8 4b 5f b1 da 89 73 3f 39 da fe e0 ec N...K_...s?9.... 0440 21 d0 8e 80 70 a1 d7 c9 5f 49 03 41 db 8d 24 ee !...p..._I.A..$. 0450 f5 bb fd f5 27 20 88 a5 ef 55 4d 96 a9 2a af 73 ....' ...UM..*.s 0460 43 52 59 85 58 0f ac 81 3e b7 68 21 14 00 eb a5 CRY.X...>.h!.... 0470 a2 12 dc 2d 22 a7 98 b7 6e fb db 2f ca b1 54 2b ...-"...n../..T+ 0480 73 2d ba b6 f1 87 f5 ce 9c 13 7d 97 69 e8 8d 5b s-........}.i..[ 0490 7b db 3e 6d 24 1c ff f9 1f 0b b0 df 42 6c d8 5b {.>m$.......Bl.[ 04a0 43 bc 23 fa ac 88 25 f0 0d ef 61 26 01 38 35 0e C.#...%...a&.85. 04b0 1c b0 c5 5d 07 21 a4 ff d2 eb b2 15 ed 1b 8e 97 ...].!.......... 04c0 cb 66 f9 f4 64 a1 36 5c b3 f8 96 a1 44 10 a0 c4 .f..d.6\....D... 04d0 67 fc 83 90 71 d6 eb f5 92 22 1b 68 95 93 16 1d g...q....".h.... 04e0 cb f5 be 13 16 7b 63 55 ad 11 55 4f 6b 05 bc ce .....{cU..UOk... 04f0 70 91 55 4c ef 7e bd d6 b9 19 d9 60 fe 6e c9 75 p.UL.~.....`.n.u 0500 2c 0b 84 06 b8 b9 c3 44 54 c5 79 90 88 95 14 16 ,......DT.y..... 0510 72 1a f0 be f3 a3 03 56 42 89 39 60 28 f8 f3 9b r......VB.9`(... 0520 62 57 1d bb 5e fe 2d f6 9f 88 99 92 11 28 fc 29 bW..^.-......(.) 0530 72 ba e1 e4 a6 b0 7f 97 7a 7a 31 f8 3f ed db 3d r.......zz1.?..= 0540 c3 b9 56 22 13 7d c9 fe 0a 0d be 4a b0 2a 9b d0 ..V".}.....J.*.. 0550 bf a3 0e 55 e1 de 61 73 20 77 5c cc db 63 5f b5 ...U..as w\..c_. 0560 54 7f 63 2c 84 b2 92 51 4d c2 0a 91 f6 6c ae b1 T.c,...QM....l.. 0570 33 08 2b 6b f3 06 8d 4c 25 5f fc b7 d9 99 ec 0f 3.+k...L%_...... 0580 3c 72 a6 bb fd 9a 0c f2 84 16 9a 6c 01 b3 df e7 <r.........l.... 0590 a7 50 8b a0 cf 8b ff ce 25 ba 14 7e 8e 4b ee 04 .P......%..~.K.. 05a0 47 8e bf 92 9a f1 13 59 G......Y No. Time Source Destination Protocol Length Info 1743 20.074455 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=61545 Ack=1185 Win=1002 Len=1448 TSval=540267 TSecr=727603 Frame 1743: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 61545, Ack: 1185, Len: 1448 Data (1448 bytes) 0000 af 70 fb 8d 56 49 f2 ee 9c e6 f0 47 f3 26 65 c2 .p..VI.....G.&e. 0010 72 ac 9b 63 7d f2 57 26 68 ed f0 69 af 6e 60 12 r..c}.W&h..i.n`. 0020 7f f9 81 24 97 30 4a db 03 72 cd fb ee b1 02 ac ...$.0J..r...... 0030 cc 36 bf 8d 2b 8a 32 81 75 68 7f bb 9a 15 0c 4a .6..+.2.uh.....J 0040 10 2b 91 ac e8 9c 95 3e 49 ee c8 8e 3b 94 d0 6e .+.....>I...;..n 0050 e1 d3 b3 66 c7 38 11 e6 25 25 9b a9 7e 47 f5 28 ...f.8..%%..~G.( 0060 8e af 9f 4e 26 f0 e0 db ab a0 f8 c1 59 ab 44 a8 ...N&.......Y.D. 0070 8b cd 0a 17 f0 32 da 1e 1c e7 96 57 96 c3 da 83 .....2.....W.... 0080 61 28 3e a0 6e 81 67 34 2e 40 f9 3f 1d ff 09 cb a(>.n.g4.@.?.... 0090 4b ca 8a 95 ad 34 57 df ac a0 0f dc 2e 8a 39 a2 K....4W.......9. 00a0 d0 2c ea 6a c6 87 c7 21 2c ea af 05 66 ef d1 e7 .,.j...!,...f... 00b0 29 e5 c1 c9 49 23 79 58 2d 6a 0c c1 cb 9e 27 4d )...I#yX-j....'M 00c0 2e 08 c4 54 fd 38 b6 7b 3a 1e 6c 69 f9 63 73 69 ...T.8.{:.li.csi 00d0 07 0b 77 38 05 7f b1 2a 92 d7 22 e9 55 a0 42 29 ..w8...*..".U.B) 00e0 1f f3 5b 8b 05 88 dd fe ba 0a ca ca 5a 8a df 13 ..[.........Z... 00f0 c3 40 d7 90 7a e9 23 cc e8 7d 04 8d c7 d9 cf 0b [email protected].#..}...... 0100 72 24 d0 18 6c bc aa 2f 55 dd 2e 3e 48 fd 53 38 r$..l../U..>H.S8 0110 30 aa 4d 55 02 09 a7 2f 4b f2 1c 4e 99 87 23 94 0.MU.../K..N..#. 0120 ae 4c 32 94 30 a2 4c 7f 2c 0e 78 d3 34 f7 e1 ed .L2.0.L.,.x.4... 0130 5b 86 80 dd 82 65 19 6a d4 55 ab 71 78 0c 6f d9 [....e.j.U.qx.o. 0140 c4 af 11 63 01 33 bc 40 00 12 78 bc 24 7a c3 03 [email protected].$z.. 0150 28 bc 88 b1 4c 1e 19 32 f3 52 8b 6d 08 15 b2 73 (...L..2.R.m...s 0160 eb 67 65 d4 24 3f a7 61 b0 e4 f6 cc 82 d1 b1 a4 .ge.$?.a........ 0170 d6 94 59 1e bf d9 df 3a 19 4a 49 44 e0 8b ee 42 ..Y....:.JID...B 0180 a4 94 db b9 0c c9 b6 15 cb 1c 1c 0a b7 82 ff cc ................ 0190 cf 67 aa 24 01 fe c3 f4 17 12 83 14 e5 6e ab d2 .g.$.........n.. 01a0 f3 1d 7b 38 31 22 20 78 d0 3c 7d 62 c7 22 e1 b6 ..{81" x.<}b.".. 01b0 48 2f 8e 26 22 f4 47 6e 0d 7d df 80 71 40 45 fc H/.&".Gn.}..q@E. 01c0 6c 6f 17 01 1a df e1 ce 52 64 35 e9 58 91 43 97 lo......Rd5.X.C. 01d0 36 44 66 4a 27 e9 27 3e 03 78 1f 5e 95 3e e9 de 6DfJ'.'>.x.^.>.. 01e0 f6 13 79 3c e4 94 e9 67 c6 72 78 a7 96 0c 4e d9 ..y<...g.rx...N. 01f0 c6 71 93 a5 bf 1d b2 a8 de 45 ba f6 1a 23 85 aa .q.......E...#.. 0200 1d 8d cd d9 e2 97 f3 67 05 17 7b 8e 67 ca c6 32 .......g..{.g..2 0210 92 8d a9 64 75 de 85 a3 f7 82 3c e4 3b 45 d2 a3 ...du.....<.;E.. 0220 dd f6 ee 72 c3 10 f5 f5 a8 fb c7 b3 75 82 98 c6 ...r........u... 0230 1c 14 b7 2a f1 d1 26 76 03 ef 28 61 3c 22 61 be ...*..&v..(a<"a. 0240 2f 06 2b 39 ee fa e7 d0 f9 3b 9c d2 7f c4 fc d6 /.+9.....;...... 0250 c6 33 9d de 3f 5d 34 94 d2 48 93 e4 bb b1 8a ad .3..?]4..H...... 0260 7b dd 81 1e 35 a5 b7 20 2a 2f d9 88 80 ba 80 84 {...5.. */...... 0270 2c 14 cb d0 9d dc 4f d9 fa a5 0a a1 e2 18 24 3e ,.....O.......$> 0280 41 65 ea e8 ce e6 b6 80 44 95 c2 a6 6d 5d 31 dc Ae......D...m]1. 0290 98 9c 0a 26 50 82 06 41 4f 5f be c9 a0 3d 3d 43 ...&P..AO_...==C 02a0 3e 08 56 9f 00 51 39 3f f0 29 db 1d 62 19 8a db >.V..Q9?.)..b... 02b0 4d 8b 68 90 61 51 09 37 5d 94 a0 ab 44 ad 7e 1b M.h.aQ.7]...D.~. 02c0 97 6e 7d c5 40 a1 f4 e4 9f 7f a7 e8 4e 2a 99 c8 .n}[email protected]*.. 02d0 b1 2e 84 b7 46 a0 d2 b7 d2 4d 6a 5c 29 c8 2d d3 ....F....Mj\).-. 02e0 44 95 01 0f 18 d8 d5 39 96 5e 58 48 09 8b a4 69 D......9.^XH...i 02f0 c3 f4 b0 c0 a4 f8 eb f8 7f 52 b3 58 cf 4a ad ac .........R.X.J.. 0300 27 77 48 e7 c8 b4 64 e9 62 db 9e e9 15 b7 d5 d7 'wH...d.b....... 0310 8c 0d 36 6e d4 af 14 be 2a 64 0d 72 f4 eb 16 69 ..6n....*d.r...i 0320 22 57 ed cd 03 4b 08 46 65 3a 25 57 3f 39 37 f4 "W...K.Fe:%W?97. 0330 b5 c9 ec 03 85 16 b2 9d 28 cb d1 26 d1 9d f3 14 ........(..&.... 0340 ea 7f d1 18 a7 f8 66 24 f1 b4 64 00 6d 75 dd 41 ......f$..d.mu.A 0350 35 70 d7 fc 4f 77 20 31 e1 7d f8 a8 c3 05 8d 11 5p..Ow 1.}...... 0360 b9 62 5d 0c 79 1e a8 9c 9d a6 06 93 75 de 2e 69 .b].y.......u..i 0370 5e 74 88 be 00 1a b9 8f 42 86 d2 bf 24 c8 a9 95 ^t......B...$... 0380 04 b6 e8 fa 8e d6 7d 02 c7 ca 52 56 61 08 52 b3 ......}...RVa.R. 0390 08 01 96 c9 ea d3 0c ba df 73 8c f6 39 09 59 41 .........s..9.YA 03a0 ca 9b 38 68 66 38 bd ce 7f 58 36 16 05 92 c1 61 ..8hf8...X6....a 03b0 59 d2 59 d3 0f a5 7c f9 63 31 8a 8a b1 34 92 56 Y.Y...|.c1...4.V 03c0 87 7e 0e 34 e3 10 cf 4d 4c 88 a3 51 a4 72 c6 95 .~.4...ML..Q.r.. 03d0 86 13 73 3b 7e 14 70 ba f1 0a b3 18 27 2e 15 7c ..s;~.p.....'..| 03e0 80 1e ef 9c e9 a3 ad d9 a4 bd 79 d5 5f 63 ee 62 ..........y._c.b 03f0 7f 9a 7f f8 c0 f6 e7 ae 01 f1 d1 53 25 6b c4 73 ...........S%k.s 0400 0f ef 06 54 35 7d 99 49 72 82 5f 3e 25 5d fa a3 ...T5}.Ir._>%].. 0410 89 6c ed 3c c8 6b 54 3d a7 b0 94 5c 73 b5 d6 71 .l.<.kT=...\s..q 0420 1f b9 09 db a9 42 ec 42 aa cc e1 e3 c4 90 d7 68 .....B.B.......h 0430 73 29 26 d8 cd f7 d5 ea 15 1e 94 f3 84 7a f2 1e s)&..........z.. 0440 03 24 ab 28 08 d2 e8 74 00 63 17 7a 37 5b ec f6 .$.(...t.c.z7[.. 0450 5d 76 23 0d 5a 5f 59 75 1e 19 10 08 86 16 4d 2d ]v#.Z_Yu......M- 0460 fd a0 a8 01 dc 7c 05 d5 c8 28 ec 15 bc 65 41 a7 .....|...(...eA. 0470 4d 85 7c 21 bd 64 c0 dc 1a c9 cd be 81 00 7d ba M.|!.d........}. 0480 32 ea ab cf fd 6f 5c f4 28 7b 34 d9 59 dc 86 ce 2....o\.({4.Y... 0490 de aa 85 4c ea 21 ad 34 48 dc 26 57 89 ac c1 01 ...L.!.4H.&W.... 04a0 ab ff b1 0a 0d 81 33 96 22 6c fe e3 35 09 03 10 ......3."l..5... 04b0 83 ce 46 42 8d 83 35 4c c1 1f d9 2c 98 1a d3 ed ..FB..5L...,.... 04c0 c8 f2 63 f4 df 7c e6 6c d1 68 d4 1d d5 6b 25 35 ..c..|.l.h...k%5 04d0 1b 88 56 c1 af e0 5b e7 4a 37 ba d1 37 ac f9 56 ..V...[.J7..7..V 04e0 b3 96 9e ec 9f a2 9f a5 82 e5 30 f1 91 9a ca 2c ..........0...., 04f0 0b bd ac 28 05 e7 a0 95 da 56 3c c4 8e 35 9c 1b ...(.....V<..5.. 0500 e5 52 2f b0 d8 bc c5 20 02 3e c7 58 69 61 5e 6c .R/.... .>.Xia^l 0510 26 5a f6 97 d2 0a 3a 15 68 59 67 72 1e f7 99 61 &Z....:.hYgr...a 0520 dc b7 b8 db e8 a5 9b 49 8b 57 4c 72 70 ab 39 b1 .......I.WLrp.9. 0530 23 87 e1 4a 3b a9 5c 87 49 b8 32 31 2e 5b b1 61 #..J;.\.I.21.[.a 0540 db a5 68 0c 58 a4 34 16 21 4a 73 7b 11 79 10 e6 ..h.X.4.!Js{.y.. 0550 af b6 b3 47 a5 57 43 f4 b1 a1 99 c6 c8 0f 18 ed ...G.WC......... 0560 a7 71 87 b2 9e f9 1d 11 e7 b3 41 34 cf 26 9a 32 .q........A4.&.2 0570 ed 01 10 4f 78 2e 64 e1 29 d7 6f bc a5 b2 1a 01 ...Ox.d.).o..... 0580 18 c7 19 f8 f7 98 f4 2a be b0 fc 75 a5 84 0f de .......*...u.... 0590 03 a4 57 41 32 92 95 ff 02 35 a8 98 0d a3 b7 5a ..WA2....5.....Z 05a0 7d c5 a8 4c 58 46 1e 4e }..LXF.N No. Time Source Destination Protocol Length Info 1744 20.074547 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=62993 Ack=1185 Win=1002 Len=1448 TSval=540267 TSecr=727603 Frame 1744: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 62993, Ack: 1185, Len: 1448 Data (1448 bytes) 0000 e3 e1 68 bb 00 9b 9e 61 92 9c f7 d0 4c 90 9a 2c ..h....a....L.., 0010 65 3f 0b 65 e6 df 94 72 11 df 0c d4 51 91 1a 27 e?.e...r....Q..' 0020 0b 5b c4 9f dd 3e 15 0a 51 26 68 d2 8d 53 9d dc .[...>..Q&h..S.. 0030 51 10 a1 28 09 03 a6 4f fa 1d 75 2a d6 29 df 58 Q..(...O..u*.).X 0040 3b 09 89 18 87 38 07 50 5e 04 0b b9 24 a8 8d 2a ;....8.P^...$..* 0050 e9 b6 d1 03 da e8 fe b3 40 61 7d a4 41 c3 db ab ........@a}.A... 0060 16 b5 61 75 08 bf e2 4d 9f 34 c0 32 cd b0 b9 03 ..au...M.4.2.... 0070 0c ad 87 5d 6c aa d6 36 dc ce a2 48 a7 83 41 60 ...]l..6...H..A` 0080 b3 bb 2d 5c 24 d1 3e 38 49 11 e6 2d 3b cd ef ed ..-\$.>8I..-;... 0090 60 84 cb 12 49 7d 06 2c 02 f9 7d 34 6f b5 48 a1 `...I}.,..}4o.H. 00a0 01 3f 14 55 1f 7c 5f d1 07 84 fa b3 97 6d 48 82 .?.U.|_......mH. 00b0 ec 0f 28 c4 14 f8 6c 01 84 78 25 5d a9 1b 6b 81 ..(...l..x%]..k. 00c0 c3 23 90 4b bf a7 30 12 95 b1 6a 94 92 24 db 2e .#.K..0...j..$.. 00d0 9f 2f 46 40 d0 a4 93 40 3c c4 5e ed e9 9c 45 5a ./F@...@<.^...EZ 00e0 c3 91 8e e4 52 43 00 52 48 6a 92 b3 64 89 9e 0a ....RC.RHj..d... 00f0 56 d1 73 ce 1c 9c 7a 61 80 f8 22 d8 94 cd 45 48 V.s...za.."...EH 0100 12 e2 92 c0 ee da de 18 a8 75 d5 a9 fe 5f 5c 63 .........u..._\c 0110 9d ca 12 a7 90 35 a1 fd c4 50 8b 47 f3 ff 90 75 .....5...P.G...u 0120 e3 af f6 ac ac 9a e6 8d 83 6d c8 73 14 38 d1 d5 .........m.s.8.. 0130 a5 b8 e8 b3 d9 9f a6 34 a7 06 78 ff 78 d2 bb 84 .......4..x.x... 0140 f7 1c 07 ee aa 03 14 4a 41 a7 01 9e a6 87 c6 5e .......JA......^ 0150 a2 55 5c c1 05 f5 cd 89 8c 9d 9b d4 e7 8e 18 eb .U\............. 0160 07 69 40 17 bc ec f9 27 03 f8 05 6f cc ed ad e1 .i@....'...o.... 0170 31 6c cd 28 52 f1 ef 99 55 4b 63 38 5b 72 24 92 1l.(R...UKc8[r$. 0180 92 83 03 3a bd 7b ee 0b 15 5b 36 de 76 a6 e1 63 ...:.{...[6.v..c 0190 df df 5c 62 5f 59 54 1f 8a bf 7d 61 c5 5d b0 9e ..\b_YT...}a.].. 01a0 e4 ca 42 60 57 21 95 ee 0a 6d 21 83 4f 00 be e7 ..B`W!...m!.O... 01b0 b6 c4 47 37 29 ab 60 c2 8d b4 71 a2 ba 25 fd ae ..G7).`...q..%.. 01c0 4d a8 e4 8f 98 26 f9 4b 91 a3 60 4d 6d 8a a0 b4 M....&.K..`Mm... 01d0 50 06 ea a9 b8 90 c2 53 8b d3 ef 12 8a b4 c1 13 P......S........ 01e0 5d 74 01 17 b2 09 17 85 c1 7a 2e 39 d3 da 90 05 ]t.......z.9.... 01f0 65 62 4c d3 a4 f9 c3 cc b8 56 36 e5 2e d6 3c 98 ebL......V6...<. 0200 7d 1e 2b d0 5b f9 64 f9 dc c4 67 56 1f 86 5c 08 }.+.[.d...gV..\. 0210 59 e3 98 28 bd 0c 3b 18 ea b5 3d 4f 25 83 b0 79 Y..(..;...=O%..y 0220 0b 2c 4a aa 11 b2 53 17 79 49 29 39 80 58 1d 69 .,J...S.yI)9.X.i 0230 15 60 6d d5 e5 4b 49 d8 1e e6 2b b2 75 89 57 fb .`m..KI...+.u.W. 0240 0d 19 40 a6 21 ef e7 dc 59 9b 91 ed 3c d5 30 ba ..@.!...Y...<.0. 0250 7d 34 80 60 d1 3c 75 1a 6a c2 54 9a 66 a6 13 e4 }4.`.<u.j.T.f... 0260 d5 55 8e 7f 25 62 1a b0 b9 f1 ec 50 e2 d8 bb fa .U..%b.....P.... 0270 58 16 69 56 cd 5a 07 67 78 9e ea e1 bd 98 0e b5 X.iV.Z.gx....... 0280 20 5c 35 c1 77 ee 2a 05 62 e2 cc 29 75 41 9a 49 \5.w.*.b..)uA.I 0290 15 4f 0f 7e 0f 4a ad 63 f0 f2 9d 5e f5 2f 5f 89 .O.~.J.c...^./_. 02a0 04 b6 17 ce 83 93 0d 00 7a cb 3e ef b1 83 97 1c ........z.>..... 02b0 0a d5 06 80 e3 09 61 7f 15 68 08 87 22 43 15 9a ......a..h.."C.. 02c0 e1 ec e3 6c f2 3b 34 89 f6 3c b1 a8 12 49 1b 02 ...l.;4..<...I.. 02d0 97 a1 44 85 df f5 fe 04 9a a1 b5 94 2a e3 8b d5 ..D.........*... 02e0 c2 4d 5b 0b 58 d1 53 2e 74 12 bf a0 34 1b a3 a0 .M[.X.S.t...4... 02f0 5b c3 7c 04 f9 4e 5a f4 21 b2 7c 90 c4 a6 05 d2 [.|..NZ.!.|..... 0300 af 44 b6 51 69 77 dc f6 f2 7a 13 9d 3a f8 b3 56 .D.Qiw...z..:..V 0310 cc 18 40 0c 8d b5 5e 64 09 5f bd 79 ee 14 62 0d ..@...^d._.y..b. 0320 a7 25 21 c9 b9 c5 83 18 b2 f2 28 7b 1f 20 43 02 .%!.......({. C. 0330 62 e9 f1 d8 0b 55 0b 8b a9 f6 22 76 d2 62 63 f8 b....U...."v.bc. 0340 25 34 0b 3f 1d 47 c9 62 26 52 be c0 09 61 e9 11 %4.?.G.b&R...a.. 0350 93 23 e4 79 b1 82 0e 05 e9 71 e9 f2 8e 80 e3 b1 .#.y.....q...... 0360 98 7b 9e bd c4 9b 28 f4 c4 3a 43 95 53 c0 a9 8a .{....(..:C.S... 0370 7d a5 21 a1 46 12 7c 24 79 6e 88 89 58 85 62 56 }.!.F.|$yn..X.bV 0380 fc 8a ff fc cf 84 97 50 41 32 8f 27 23 81 bf e2 .......PA2.'#... 0390 64 9b 7e 33 92 25 a2 4a 1d 8d 77 1c 31 2c d8 f0 d.~3.%.J..w.1,.. 03a0 6f cc 0f 7f 6f 50 a9 2a 1e 7f 66 a6 ef d1 b0 4e o...oP.*..f....N 03b0 ea ec 01 1e c9 01 1a b4 c0 c0 29 15 c8 7b a1 e8 ..........)..{.. 03c0 d6 a0 1c 28 51 d9 67 13 22 42 be 67 30 4f 05 69 ...(Q.g."B.g0O.i 03d0 66 64 04 27 3f 82 8d 7b 5d 75 ac b2 47 7b 28 af fd.'?..{]u..G{(. 03e0 ea 23 48 fb 01 87 f4 96 77 44 23 d3 54 c1 70 c5 .#H.....wD#.T.p. 03f0 b1 38 cc 9e 8c 3c 82 1f 25 02 8b 71 80 93 e5 b1 .8...<..%..q.... 0400 6f c3 b9 56 af 8e e5 fe 7c 2c 17 6a 5c 7b 59 77 o..V....|,.j\{Yw 0410 73 7b 68 8e 77 de 11 61 16 4f d3 4d a9 69 dc 14 s{h.w..a.O.M.i.. 0420 8d 8d ed 61 ca 3f 3b 86 c2 f7 5b fb 38 ec e6 38 ...a.?;...[.8..8 0430 86 65 13 77 bf 06 70 e9 fb dc 54 bf 25 1f a1 77 .e.w..p...T.%..w 0440 4d 05 01 1c 05 5d 1d 74 8b 3b 2d 82 c6 bb 33 da M....].t.;-...3. 0450 d8 23 bd 5e 9d 2b a3 b0 d8 e4 7f d4 d6 a8 6b b9 .#.^.+........k. 0460 d1 fa 35 30 e0 bd 83 c9 2e 3f 34 4a 00 a7 3d a7 ..50.....?4J..=. 0470 f7 b7 dd 2b b3 b1 fa 31 34 c5 ae 06 ac c0 b2 a4 ...+...14....... 0480 5f 64 5c 68 14 15 70 81 0c 71 b4 94 65 86 09 c7 _d\h..p..q..e... 0490 62 06 5f 5e ed 3a 9e e9 39 bc c7 03 61 66 cd 6c b._^.:..9...af.l 04a0 91 6f bc 8d c4 ce 68 aa 25 dd 2b 0d d6 75 98 f3 .o....h.%.+..u.. 04b0 dc 71 9e e6 22 72 57 91 ae 93 21 86 7f 06 89 2e .q.."rW...!..... 04c0 fe 8d 1d 65 46 a6 99 cf 50 59 a1 1b 14 eb 9c 02 ...eF...PY...... 04d0 0d ac a5 93 0e 5a 54 ad 72 ab c6 08 59 42 ae d9 .....ZT.r...YB.. 04e0 b3 14 d2 95 d4 9c cd 61 c5 94 bd ed d1 8d ee 29 .......a.......) 04f0 dd 89 84 8b f0 95 94 62 d2 64 70 5f 66 47 1c 37 .......b.dp_fG.7 0500 88 b2 17 f6 03 17 f3 71 4d 8b 04 61 f6 45 3d fb .......qM..a.E=. 0510 fd 23 5e eb f3 c6 3e 37 bf c5 2d c0 79 76 e0 1f .#^...>7..-.yv.. 0520 be b2 87 09 53 4c 7f e8 07 6c f0 9c 7c 07 28 e1 ....SL...l..|.(. 0530 24 d3 80 38 0e 73 ff 6f f4 09 de 75 9b 0e f1 05 $..8.s.o...u.... 0540 df d6 7b e8 0a f6 13 96 12 74 f4 cc bb 72 bd 00 ..{......t...r.. 0550 7e 4d 95 28 8a 9f a2 d5 2d 0a 69 ce a7 fa dd d5 ~M.(....-.i..... 0560 5d 36 8e ad 6f ae 5b 2b d9 19 e4 55 8f 0d 8d 79 ]6..o.[+...U...y 0570 1c 41 ad 75 e4 79 83 e5 2e cf 9a 08 43 eb 40 7e .A.u.y......C.@~ 0580 20 34 1a a8 ad fe 58 7e 4a 1e 3a c5 24 fc 74 b9 4....X~J.:.$.t. 0590 0e af 60 8d 0f de 15 34 21 d5 db 9b 63 24 ae 40 ..`....4!...c$.@ 05a0 17 04 47 ed a2 67 f0 4e ..G..g.N No. Time Source Destination Protocol Length Info 1745 20.074639 192.168.10.1 192.168.10.245 Syslog 305 LOCAL1.INFO: Oct 3 19:44:38 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2135 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="extend@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 1745: 305 bytes on wire (2440 bits), 305 bytes captured (2440 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:38 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2135 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default No. Time Source Destination Protocol Length Info 1746 20.074693 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=1185 Ack=62993 Win=65535 Len=0 TSval=727683 TSecr=540267 Frame 1746: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1185, Ack: 62993, Len: 0 No. Time Source Destination Protocol Length Info 1747 20.074780 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=64441 Ack=1185 Win=1002 Len=1448 TSval=540267 TSecr=727683 Frame 1747: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 64441, Ack: 1185, Len: 1448 Data (1448 bytes) 0000 d8 97 24 20 c6 c7 1a 17 1c b5 7a b0 9b 7e 4d 42 ..$ ......z..~MB 0010 a5 75 9c e3 1e 9b be 83 32 a2 a6 b3 d5 66 14 29 .u......2....f.) 0020 de d7 82 9f 8b 1e e4 77 60 ff 48 00 22 d4 28 a9 .......w`.H.".(. 0030 fe dd d1 2c 5b 12 30 6b 9d 4c 07 e8 0e 57 19 2b ...,[.0k.L...W.+ 0040 9a 97 28 6e e3 5b cf 0d 10 d7 53 18 3c 91 7b 4f ..(n.[....S.<.{O 0050 a9 04 0a cd d9 35 2c 03 e5 0d d8 3b b4 3f 09 7c .....5,....;.?.| 0060 87 0e f5 ae 4e 20 06 d1 c6 8b f8 71 dc ba 84 9e ....N .....q.... 0070 71 74 5b 1c 47 c6 5d 32 bb e9 65 8d 69 31 1d 8c qt[.G.]2..e.i1.. 0080 f9 3c 11 01 d3 63 21 18 74 72 09 c5 b2 f8 3e 74 .<...c!.tr....>t 0090 8a c0 4d 3a b0 a3 85 93 1e 71 5a bf 40 43 08 45 ..M:[email protected] 00a0 fc 5d 81 7c 85 52 4c 91 be 4a 9b 53 9d f3 8d 09 .].|.RL..J.S.... 00b0 86 69 5d 73 e9 25 eb 11 b4 f5 45 92 24 08 d8 bd .i]s.%....E.$... 00c0 8c b0 9a 51 c2 31 1e 34 26 35 54 b0 ef 2b a3 dc ...Q.1.4&5T..+.. 00d0 93 00 bd e5 df ac c1 7d de f9 db cc 0b 7b ce 4a .......}.....{.J 00e0 23 25 bc 8e eb 76 6b 5f dc 5a fa 30 7b c5 a2 1e #%...vk_.Z.0{... 00f0 24 12 37 a4 f1 01 aa eb 03 57 8c fc f8 63 7f 08 $.7......W...c.. 0100 f8 aa 0d 1c 79 80 e0 61 56 ff c2 74 64 a8 94 a5 ....y..aV..td... 0110 3b b6 ba 98 d0 36 41 e8 de 2d 97 35 a5 87 2a 5e ;....6A..-.5..*^ 0120 e1 a1 ec 95 70 9e 8c 8a 3a 01 75 4d de 96 cc 47 ....p...:.uM...G 0130 aa 91 66 4a 5a b5 ba e2 b2 7a d2 18 f8 6b fc c1 ..fJZ....z...k.. 0140 29 b3 d1 ab 00 a1 eb 77 63 ec b6 7d ce 97 7b f8 )......wc..}..{. 0150 a1 d7 39 98 9d d7 79 cd 5b 7c f4 8f cd 37 ba 16 ..9...y.[|...7.. 0160 e1 65 c7 09 7e 6c f5 8a 39 ce 46 54 55 fa 21 95 .e..~l..9.FTU.!. 0170 2f f2 a3 93 14 e4 cc f9 9f ee 55 5a 89 e9 b4 a4 /.........UZ.... 0180 de fb 84 a1 b7 44 3a a1 ee 74 5b 50 2c fc b9 dd .....D:..t[P,... 0190 2b cc 8c f4 09 05 e6 03 82 a5 2e 85 25 41 63 d1 +...........%Ac. 01a0 04 bc 6c 17 c9 fe 4d 3d 9a 4d 54 bc fe d0 e4 f4 ..l...M=.MT..... 01b0 03 08 b8 40 33 b0 a1 e1 1d c1 d2 7f 53 2e 87 24 [email protected]..$ 01c0 4b 86 98 91 43 55 92 76 78 b0 51 b3 f2 21 dd 0c K...CU.vx.Q..!.. 01d0 ff 4b 38 46 fe a2 83 8c 64 5f 76 f4 37 8b 68 61 .K8F....d_v.7.ha 01e0 8a 22 a3 a2 6d 8e 58 0a f5 8f 91 68 45 e0 4e ad ."..m.X....hE.N. 01f0 b2 71 e8 16 38 c9 19 80 8b 84 df 5d d1 2b 1c f1 .q..8......].+.. 0200 06 81 58 33 bf 67 64 35 2c fb 58 e4 5b 75 a3 12 ..X3.gd5,.X.[u.. 0210 6d b0 a1 44 b4 68 89 dd ee 40 13 f9 4e a5 a0 06 [email protected]... 0220 44 c7 ac ea 01 dd 28 06 ac cb 39 1c f1 80 52 73 D.....(...9...Rs 0230 83 6b 12 4a 34 f4 7d 6d 53 69 3c c1 0d 56 48 8c .k.J4.}mSi<..VH. 0240 f3 f0 b2 04 49 66 83 5e c9 15 3c 26 f8 cb b8 59 ....If.^..<&...Y 0250 af 34 09 6a 73 42 45 ba 44 13 00 a0 86 f0 40 fc .4.jsBE.D.....@. 0260 4d 87 f4 e3 61 17 86 d5 42 22 9d 46 0f 9d 47 eb M...a...B".F..G. 0270 d2 dc 11 30 94 9f c1 e2 0e 8d 56 d8 fc 84 c0 83 ...0......V..... 0280 19 a8 77 e6 8a cd 6c 6a 35 6c c7 4d a0 8d e2 01 ..w...lj5l.M.... 0290 c8 20 38 4d da cf 0f 79 ef a1 c7 d4 df c0 d3 ca . 8M...y........ 02a0 de 77 4c 36 66 74 d8 f9 b8 d2 88 c7 f1 14 65 8b .wL6ft........e. 02b0 32 4e 65 67 eb 9e 20 36 f8 72 51 46 09 f7 7e ab 2Neg.. 6.rQF..~. 02c0 bf 8e f5 ff c3 ca 9a 3d 89 b1 9c b6 03 a7 01 10 .......=........ 02d0 df bc 41 8d 6d 8b 05 fd 55 2b f1 a4 a1 bb 4a a2 ..A.m...U+....J. 02e0 75 66 c8 28 a1 0e 01 77 b0 57 1c c8 2a 7e ec 51 uf.(...w.W..*~.Q 02f0 13 c8 64 69 70 61 d7 b2 b2 40 12 55 69 68 41 22 [email protected]" 0300 86 ce 52 91 ca d4 9a ef 40 96 23 a2 b2 38 8f 17 ..R.....@.#..8.. 0310 0b 08 c6 b3 05 79 f2 66 92 f1 96 e3 de 33 12 cf .....y.f.....3.. 0320 a5 9d 74 07 bf 45 1f f9 58 ff b9 d6 81 e9 b4 16 ..t..E..X....... 0330 2a 8b b6 c2 f3 94 12 cd 49 ba be bf 86 58 d1 4b *.......I....X.K 0340 13 d1 d7 73 03 49 a3 a4 56 c1 be 38 90 80 79 df ...s.I..V..8..y. 0350 88 b2 38 46 29 a3 9d 6a c5 a2 5a 66 49 c4 9f 34 ..8F)..j..ZfI..4 0360 0a 0a a1 d1 fc 53 57 22 5b f8 ff d4 82 48 7e c7 .....SW"[....H~. 0370 dd 59 7a 5c bc 0d 8f e6 ec 09 db b5 58 2c 4b d9 .Yz\........X,K. 0380 0e 84 ad 69 d2 ff 94 38 0a d7 48 47 48 95 4d 18 ...i...8..HGH.M. 0390 93 58 34 a7 9e 51 18 d3 aa d9 46 6f 96 b3 9d f5 .X4..Q....Fo.... 03a0 c3 c5 4b be 61 95 89 77 02 e9 34 12 dc 85 8a 7d ..K.a..w..4....} 03b0 1c 9d 39 ab 46 aa f4 8c d3 8d 66 4b 4c dd 59 1c ..9.F.....fKL.Y. 03c0 68 5a 45 a5 dd 1a 08 4d 0a 4a ae 91 df e6 4a 04 hZE....M.J....J. 03d0 2c 71 df c5 ed eb a7 01 f8 cd ca ff 0e 74 80 ae ,q...........t.. 03e0 e5 bd 1c 51 45 26 21 1c 5a c7 c1 79 5b 60 0e 7c ...QE&!.Z..y[`.| 03f0 0d e2 6f 53 88 b7 88 31 39 10 25 95 32 41 ef 0a ..oS...19.%.2A.. 0400 34 21 b4 e9 c3 75 89 62 7e 9b fc 26 79 e3 46 0b 4!...u.b~..&y.F. 0410 00 b5 f3 44 5c 31 bd 77 72 b9 e7 bf af 0d 2f 48 ...D\1.wr...../H 0420 81 1e c2 a6 0e db 23 36 23 1e e3 a8 26 f2 44 0b ......#6#...&.D. 0430 1a a7 a5 9c 9f 53 98 d2 c7 da d4 3d 7e 84 1b 25 .....S.....=~..% 0440 04 15 28 b4 f2 ae 05 57 4a 84 62 4e 3f cf 54 85 ..(....WJ.bN?.T. 0450 77 88 74 2f d6 28 86 7e ea 3b 6a d4 9a bb 7d 45 w.t/.(.~.;j...}E 0460 fe 37 90 71 a3 23 ee e3 cd 9e 7e 76 5e 6c 81 bd .7.q.#....~v^l.. 0470 86 4a 43 88 57 76 15 90 62 bc e1 6b 99 5f e5 00 .JC.Wv..b..k._.. 0480 97 ff e3 ea 14 4a 3e ad 29 cf 5f 86 aa 69 04 21 .....J>.)._..i.! 0490 a6 63 dd 8d ea 1f f3 58 80 2d 51 30 2f 40 69 37 .c.....X.-Q0/@i7 04a0 94 2b 47 7a 19 cc 4d 7f 71 ab 8a 8a 02 f6 a4 35 .+Gz..M.q......5 04b0 2f 46 b0 73 3b a5 c9 74 3b c9 d8 20 d8 c0 53 e9 /F.s;..t;.. ..S. 04c0 8a f7 89 06 63 c0 b4 ca dc 91 76 06 80 af 81 69 ....c.....v....i 04d0 61 5e df bc 41 cf 2c ed 37 48 44 01 8f 3e 8d cb a^..A.,.7HD..>.. 04e0 d4 4b a7 8a 50 9c a0 72 07 22 15 e0 b9 9f 60 77 .K..P..r."....`w 04f0 73 be ef fe 15 d2 a4 db 44 2a 22 40 d4 e2 91 7e s.......D*"@...~ 0500 ac 09 98 66 2d b2 e3 c9 fb 67 29 02 3c 1a 49 76 ...f-....g).<.Iv 0510 d8 c1 a4 a6 cf a9 17 f3 ec 0e 3a 22 f1 c8 d4 40 ..........:"...@ 0520 a0 39 1d f2 45 c5 3a d0 fe 29 e6 37 b0 0d dc c9 .9..E.:..).7.... 0530 b2 ce 07 da 85 ea 74 cb 3a a4 0d 06 93 1d 02 c4 ......t.:....... 0540 03 cb 90 e9 bb c7 68 22 d7 7e b2 cc 7d 55 0f 34 ......h".~..}U.4 0550 74 de d9 19 db a5 0b ac 42 59 d5 87 7e 72 c3 ed t.......BY..~r.. 0560 ff 90 8d a5 90 ae 79 29 8f 73 f4 69 92 ff f7 19 ......y).s.i.... 0570 8a e5 67 3e ed 5d 83 b8 0b 52 6c ad 37 53 bc 40 ..g>.]...Rl.7S.@ 0580 3e 99 61 45 77 66 d0 b8 63 28 36 94 c2 ed bc a7 >.aEwf..c(6..... 0590 0d ef 9c ce 17 3d 5c be 4b 28 92 ce 98 c7 84 b2 .....=\.K(...... 05a0 2b 0d 46 27 b3 14 cc 9e +.F'.... No. Time Source Destination Protocol Length Info 1748 20.074866 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=65889 Ack=1185 Win=1002 Len=1448 TSval=540267 TSecr=727683 Frame 1748: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 65889, Ack: 1185, Len: 1448 Data (1448 bytes) 0000 6b fa ec 31 b9 6d 71 86 59 9f 49 b1 15 64 0e eb k..1.mq.Y.I..d.. 0010 bd 34 a1 0b e9 67 5f 4f 5e 5f 81 2c 01 d1 75 45 .4...g_O^_.,..uE 0020 df f0 c6 16 e1 19 29 68 86 43 3b 70 da c7 61 14 ......)h.C;p..a. 0030 5d ab 2b f3 14 7b 0f 9b f8 98 a0 04 33 52 20 c3 ].+..{......3R . 0040 a4 fc 7f 54 a5 26 e7 0f d3 a6 f4 32 ea 15 72 90 ...T.&.....2..r. 0050 07 47 af 6f 77 2d e8 e0 ac b8 da ba 8a c8 36 72 .G.ow-........6r 0060 94 fa 39 51 0c f8 5a d3 3f 23 a4 46 50 d3 31 a1 ..9Q..Z.?#.FP.1. 0070 2e 99 ec e6 e7 60 91 1c 16 2a a7 26 f2 97 46 bd .....`...*.&..F. 0080 d1 b9 77 ab 58 87 07 c0 f1 13 07 7a e9 db 54 52 ..w.X......z..TR 0090 97 9e 22 2d 0b 7a 18 97 aa 37 11 c8 4b be ce 09 .."-.z...7..K... 00a0 1e 8a eb 5d cc 5d 5c 8a 27 17 00 c4 03 1d fb 78 ...].]\.'......x 00b0 4f bd a4 1a 37 2e d2 4d 25 27 b1 79 31 a3 58 99 O...7..M%'.y1.X. 00c0 b2 c2 45 9f f2 34 8b 50 60 e4 d0 fe 7d c2 59 85 ..E..4.P`...}.Y. 00d0 aa e3 04 7a 98 e6 fa 54 c5 f2 69 d9 c8 fe d3 c8 ...z...T..i..... 00e0 84 74 78 f1 aa 01 64 e4 79 91 70 1b 31 92 51 8a .tx...d.y.p.1.Q. 00f0 bc a8 e4 e8 68 63 25 9f 1a 0c 98 1a 45 72 a8 a8 ....hc%.....Er.. 0100 d1 cf 6e af a9 bc d9 a6 9b 14 14 b5 d5 8f f7 78 ..n............x 0110 18 9c 69 1f 24 d0 ca 62 b8 fc 14 92 8c b8 c9 48 ..i.$..b.......H 0120 2c f1 a6 51 da 12 d3 99 d0 90 e9 bc cb 33 56 d4 ,..Q.........3V. 0130 32 0f 58 10 f7 2b ba 2b 86 d4 c9 b4 b1 c9 39 e2 2.X..+.+......9. 0140 ce c5 a5 86 de 11 91 0c ef 1e 6f 13 a1 73 65 5c ..........o..se\ 0150 1c df 9a 4c 0c d2 57 bb 1a 0d 91 56 4f ee e1 89 ...L..W....VO... 0160 e9 79 0b 7a 85 ea 1f 77 61 62 25 ed 92 22 ae 67 .y.z...wab%..".g 0170 60 19 06 ee 6b 59 86 e1 ff 09 5c ff c8 82 53 27 `...kY....\...S' 0180 87 50 b6 8c 35 1f 09 ed 60 ad 8a e0 c6 1e c6 90 .P..5...`....... 0190 e6 69 68 91 19 1d 26 00 68 ef 2c 4d 32 b3 5a 39 .ih...&.h.,M2.Z9 01a0 75 65 d5 7f 74 d1 86 41 0a c0 b2 71 4c 4e 49 68 ue..t..A...qLNIh 01b0 23 10 49 a0 2a d2 96 39 ac 2e 76 79 61 8a 4f 47 #.I.*..9..vya.OG 01c0 6a ef 55 8a aa bb 5d 75 8a a8 36 06 ac a9 94 ae j.U...]u..6..... 01d0 4e 59 08 89 99 8f 17 c5 5c af 91 55 5d d8 0d 50 NY......\..U]..P 01e0 c7 6c e9 10 6c 89 32 ee 5f 7d 8b ea c5 38 88 19 .l..l.2._}...8.. 01f0 fe 70 8c 97 04 a7 16 d1 fc dc e5 de 08 08 d8 1b .p.............. 0200 20 a9 30 38 77 a4 5b c9 1c b9 19 b2 e2 2a aa 4f .08w.[......*.O 0210 74 8f 3c 19 a3 38 f9 11 e0 15 85 b0 58 5c 9a 57 t.<..8......X\.W 0220 b1 99 e4 f7 9d 6c b3 eb d9 41 27 d8 40 e4 3a 3f .....l...A'.@.:? 0230 ea b3 b7 ba 0f a7 21 ab 04 97 11 a1 c2 5f 40 a4 ......!......_@. 0240 fa 1b cf 0b 22 4b bc 0f 4f eb 0b 05 2c 39 99 e8 ...."K..O...,9.. 0250 22 4b 72 b8 4a fb 7e 2e d7 1c 2a eb 92 48 4f c7 "Kr.J.~...*..HO. 0260 0b de 79 5b e0 c1 d4 9d 62 c5 00 a5 f9 f8 07 91 ..y[....b....... 0270 cf 80 4a 4b ec 53 be cd 0e c3 fc fd 1d e1 17 e2 ..JK.S.......... 0280 08 61 85 5e c2 7f 60 77 11 64 4f f1 19 59 35 57 .a.^..`w.dO..Y5W 0290 c5 6f df ff c5 eb 6d 34 67 6f 5d 59 2b 1b 4f 58 .o....m4go]Y+.OX 02a0 a7 6c 8b 14 e5 8d b9 3b 38 b8 7f b1 0d 00 0a d2 .l.....;8....... 02b0 0a 95 54 12 22 7c 93 08 1b 67 8a c4 71 2d d6 b1 ..T."|...g..q-.. 02c0 4c 05 56 e2 19 b8 4b eb 0c f0 de 6a 53 e1 32 c8 L.V...K....jS.2. 02d0 3f 38 86 e1 1d 9f 39 ef 47 6f 4f a6 ab b3 c3 af ?8....9.GoO..... 02e0 dd 1d b9 04 11 0f 86 d1 ea 5e 35 cb e9 01 37 68 .........^5...7h 02f0 f3 8d dd a5 d3 c4 12 9f 6d 8b 20 48 3e 2c 40 98 ........m. H>,@. 0300 c2 a9 8e fa 85 8f 98 43 50 1e 76 f5 41 37 57 ef .......CP.v.A7W. 0310 1c 53 ce d9 9a 23 3f 6f 64 1d 6f 4b e2 f2 5c 54 .S...#?od.oK..\T 0320 7b a2 73 05 65 a9 64 2d 15 9b 25 ef 99 f8 8f 82 {.s.e.d-..%..... 0330 78 80 45 fe 81 57 7a f0 67 f8 ba 08 8d ea e3 7a x.E..Wz.g......z 0340 2b c2 b9 15 87 32 1b 4b 6f e4 e7 b1 4b b1 87 24 +....2.Ko...K..$ 0350 26 f2 eb 32 0e 7a 4d 7a 23 4f b7 9f e6 ac a7 a7 &..2.zMz#O...... 0360 ad 16 b1 4c d6 b5 d6 64 e7 cd 81 4b 74 e6 19 2f ...L...d...Kt../ 0370 31 67 0c 86 98 32 2e c5 73 bd f1 0c f0 81 f9 6f 1g...2..s......o 0380 34 cf 90 eb 24 f8 3f fd 85 1b 7d ad 4f a7 1f b4 4...$.?...}.O... 0390 3b 5a 8e ba bf 5d 16 da 58 76 2c 13 76 aa 05 1d ;Z...]..Xv,.v... 03a0 2a 74 b6 f4 f8 87 68 fe 88 d3 f3 52 2d d3 f3 b1 *t....h....R-... 03b0 00 a8 31 b3 69 83 a3 2b 19 29 76 92 7a 3d 73 b7 ..1.i..+.)v.z=s. 03c0 f1 4c da a3 c9 c7 53 bd 69 8a 1a 66 4b b9 93 d3 .L....S.i..fK... 03d0 cb 05 92 02 6e c3 9e fe 7a ea 11 56 81 e0 81 80 ....n...z..V.... 03e0 f8 a2 8e 64 ae 21 e6 9d 2f c2 66 27 4a 00 71 b4 ...d.!../.f'J.q. 03f0 b0 65 41 b8 43 24 07 f6 33 b5 22 0f bc 7e c0 48 .eA.C$..3."..~.H 0400 97 8d 6a ef 4f 07 d7 4b 32 34 be 43 41 31 0c e3 ..j.O..K24.CA1.. 0410 93 f3 42 b7 54 56 4f 28 ea d4 af 13 e7 21 31 66 ..B.TVO(.....!1f 0420 83 d2 a5 61 c2 a0 41 eb 06 fd 93 a8 8c 1e 7e 0e ...a..A.......~. 0430 f5 a4 2d e8 7a 1e f2 32 6b bb f8 6a 33 34 fe 62 ..-.z..2k..j34.b 0440 50 53 0f de bf 4f 79 ed b5 4b 19 aa 45 7f ed 77 PS...Oy..K..E..w 0450 eb 27 16 ab b7 4c c6 a7 28 28 c8 19 d2 fc ff df .'...L..((...... 0460 17 f5 8b 9a b9 9f 2e 38 8e f1 1a 60 7b 4b e1 39 .......8...`{K.9 0470 37 66 7a 79 4d a3 c6 7a fa c5 a9 4f 91 03 51 a8 7fzyM..z...O..Q. 0480 ac 4d 81 89 e2 78 f2 8d e5 86 94 2a 20 11 57 48 .M...x.....* .WH 0490 b8 26 1b 4b f5 b8 11 1b e3 0e b4 49 10 46 53 aa .&.K.......I.FS. 04a0 67 72 c1 09 fa bd 0f 89 85 64 80 21 c3 a5 13 24 gr.......d.!...$ 04b0 35 57 ab f8 b5 b3 b4 45 8f 8d f8 64 39 24 e0 fb 5W.....E...d9$.. 04c0 22 46 ca c6 88 b1 6b a6 64 99 b9 e0 99 d6 a5 a3 "F....k.d....... 04d0 9a 62 32 df 25 20 b4 96 3c dd a3 8d a3 47 db 2a .b2.% ..<....G.* 04e0 47 15 83 07 69 0b 58 47 40 6f 93 af 6b 9b 8a d2 [email protected]... 04f0 b8 bb 09 f9 c9 c3 d9 72 c5 75 a4 9c 95 79 b6 5e .......r.u...y.^ 0500 5e 60 db e7 c9 5a 25 1d 16 e2 b5 19 1f d9 cf 12 ^`...Z%......... 0510 df bc 46 33 3e bb 06 c2 93 45 aa 75 c6 69 f7 f9 ..F3>....E.u.i.. 0520 5e 15 b4 16 22 7c 22 4c 71 ef e3 b2 bf da d2 c1 ^..."|"Lq....... 0530 2b df 5a 01 ac a5 4d c5 e7 ce b7 05 7c 65 63 ac +.Z...M.....|ec. 0540 fb a0 4f ce 64 96 bb 00 f6 10 9b 9d 4e 32 4e 71 ..O.d.......N2Nq 0550 23 ed 11 4b 2f 9c 75 48 56 d7 5f 6d ba 39 39 56 #..K/.uHV._m.99V 0560 34 78 a9 bb ce 57 13 80 f2 8a 8b 1c ec 77 a8 6d 4x...W.......w.m 0570 de 15 55 5f 5c 6f 25 aa f5 f7 a2 79 4b c9 db 88 ..U_\o%....yK... 0580 65 ce 92 2e cb 4a 02 18 f8 c7 97 2b d9 5d f2 e8 e....J.....+.].. 0590 41 92 85 63 01 49 58 69 06 a4 eb 48 44 be 3b 4b A..c.IXi...HD.;K 05a0 d4 d1 a6 b3 06 18 18 f6 ........ No. Time Source Destination Protocol Length Info 1749 20.074948 192.168.10.1 192.168.10.203 TCP 1359 34433 > cds [PSH, ACK] Seq=67337 Ack=1185 Win=1002 Len=1293 TSval=540267 TSecr=727683 Frame 1749: 1359 bytes on wire (10872 bits), 1359 bytes captured (10872 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 67337, Ack: 1185, Len: 1293 Data (1293 bytes) 0000 0b 42 cc 1d 12 33 2f 07 94 e7 9b 35 a4 41 85 cb .B...3/....5.A.. 0010 9e c7 46 22 6a 39 42 cd ff 35 5e 76 35 5c 9e 65 ..F"j9B..5^v5\.e 0020 66 91 1c 25 76 e4 42 2c 43 cb af 38 97 78 fb 83 f..%v.B,C..8.x.. 0030 78 4b 68 fc f4 98 c2 f0 6b 64 84 06 50 d5 00 ca xKh.....kd..P... 0040 f7 0f af 60 6c 16 9d 80 bc cd e6 02 bc 24 9d a9 ...`l........$.. 0050 5e 97 de cc 95 98 86 b1 e0 9f 67 bb fb 9c 84 2e ^.........g..... 0060 13 5e 45 80 b9 6e 95 18 35 77 b0 f7 0d 28 5a fc .^E..n..5w...(Z. 0070 2f ef 91 ca dd 7b dc e3 03 6e d1 8e 40 28 8b 69 /....{...n..@(.i 0080 ff 71 c1 a6 23 1e 22 0a 1e cc d2 c4 c7 7f da a6 .q..#."......... 0090 ba 3b be f9 92 01 08 1c b8 4f 54 52 0f 98 17 c7 .;.......OTR.... 00a0 c9 9e dc de 72 e6 bb 70 d2 bd 0f a5 27 bc 3c 10 ....r..p....'.<. 00b0 73 c3 b2 ba e5 a0 86 63 90 6a 42 cd f5 6f 40 b8 s......c.jB..o@. 00c0 38 dd a5 ba 4f 1b 7d df b0 26 f5 2f d7 25 8e 48 8...O.}..&./.%.H 00d0 cc bd 45 2f ee 0e 2e 2f d7 56 fb bb 7e 28 f5 8b ..E/.../.V..~(.. 00e0 69 6b 86 10 7c a5 c7 90 bc de 93 f9 56 51 52 b2 ik..|.......VQR. 00f0 96 3b d2 d6 f3 b3 9b 4f 5e a5 f1 d5 92 26 28 88 .;.....O^....&(. 0100 53 36 65 5f f4 fa 6e a6 65 c4 56 75 db 89 0d d3 S6e_..n.e.Vu.... 0110 68 ac a4 0d 9c 63 54 d7 b8 c5 13 af 84 4b 22 e4 h....cT......K". 0120 86 20 16 ca 18 bd b2 ae 33 a1 2a f7 32 4e 35 f7 . ......3.*.2N5. 0130 5e b5 5a 33 50 f4 df 0d f8 29 67 b6 78 63 e3 b5 ^.Z3P....)g.xc.. 0140 3f 15 fa d0 64 86 4c 26 58 4c 63 02 5c 2f d8 24 ?...d.L&XLc.\/.$ 0150 2d 5c 01 3b fd 82 bb dc 67 07 c2 25 f1 60 00 ff -\.;....g..%.`.. 0160 8d 66 fc bb 41 ca 36 2c 4d 31 0b 42 a0 db 7d ec .f..A.6,M1.B..}. 0170 22 67 41 b8 39 72 e0 67 16 d7 ce 22 29 cb c6 60 "gA.9r.g...")..` 0180 98 20 29 64 bc b8 50 6e a9 6c 59 2e 6e f4 f6 c4 . )d..Pn.lY.n... 0190 ec fc 7c 5e e2 4a bb 2e 05 4e db 42 bf ca c2 5f ..|^.J...N.B..._ 01a0 f2 b8 3e dc 09 7e ba db 69 04 e4 41 cc a4 38 65 ..>..~..i..A..8e 01b0 74 90 61 ba 44 ed dd 14 e7 2e e4 09 73 6b c2 00 t.a.D.......sk.. 01c0 a0 1a ac 6c b6 31 8e 89 a6 b9 1b c0 12 12 79 03 ...l.1........y. 01d0 b7 80 7a ed a3 06 f6 d4 b4 09 1a 9c ce f3 6c 48 ..z...........lH 01e0 55 06 f7 6f bb 6b c6 3b ff 29 b7 28 8a 09 93 c9 U..o.k.;.).(.... 01f0 44 bb 80 e5 9a 73 86 66 38 c9 53 29 a6 2d d7 8c D....s.f8.S).-.. 0200 15 1a 61 a6 d7 2f 0c dc ca 99 75 61 d4 fd 54 49 ..a../....ua..TI 0210 ad 67 e9 e8 10 15 13 67 db 06 0a 69 9e eb 44 eb .g.....g...i..D. 0220 82 92 1b c7 55 7e 7e a4 d8 cb 76 97 29 22 b9 1f ....U~~...v.)".. 0230 ea 56 96 28 42 bc bc f5 7f d2 a1 ee db a7 a2 12 .V.(B........... 0240 f1 2c dc 1d d0 08 46 8c 05 97 88 5f 86 3d e8 fb .,....F...._.=.. 0250 fb 4d 68 e8 c9 8f 37 9d 95 f8 b2 15 99 8e 7f 7e .Mh...7........~ 0260 d0 0e 59 37 ec f9 27 be 1f 13 6b dd a6 fb f1 bc ..Y7..'...k..... 0270 73 00 a3 d2 b7 d1 14 d8 a9 3b 0b 6f ef 2f 3e a8 s........;.o./>. 0280 99 9d 8e b3 f6 60 76 15 e8 17 93 92 fc fd c2 1f .....`v......... 0290 5e 15 b4 f9 5f e4 fe ae f5 53 1e d1 8e 93 05 0f ^..._....S...... 02a0 33 9d b1 d7 e3 bd b9 52 54 18 b3 48 96 de 65 0e 3......RT..H..e. 02b0 7c 14 e7 cf 35 37 c7 d8 58 78 aa aa 31 c9 52 82 |...57..Xx..1.R. 02c0 f7 c4 e6 c5 e7 9f 1e b0 73 14 3d 03 16 00 1f b3 ........s.=..... 02d0 a4 35 8d 5e f7 11 2f 33 c2 d4 40 8d 0d 62 ed 8f .5.^../[email protected].. 02e0 da c2 6a 26 40 be 5e c7 43 30 61 c1 eb e7 ba 78 ..j&@.^.C0a....x 02f0 5d 25 44 00 ec c2 f3 91 57 71 dc ac 55 e5 56 0f ]%D.....Wq..U.V. 0300 20 a9 38 2c 54 9a e0 cb 35 38 3c e3 72 91 b4 a3 .8,T...58<.r... 0310 a9 57 61 33 4a b9 bd af 9c 0a e4 1b 0d 4a 24 e6 .Wa3J........J$. 0320 ce 1b da 51 29 a8 57 88 88 b7 57 5a 59 d0 e7 9c ...Q).W...WZY... 0330 c6 5a 8d 8e d8 3b 85 d2 85 5b 08 c3 37 83 1a c1 .Z...;...[..7... 0340 38 b8 cb 7f fa 4a 5a da 3e e7 ba 3a 7a f6 b8 49 8....JZ.>..:z..I 0350 3e 21 9b 42 25 a3 a3 fa 0d aa 10 77 42 7d 1c 62 >!.B%......wB}.b 0360 b5 b9 71 64 f7 5a 04 d9 13 90 d6 fa bd ff b0 1f ..qd.Z.......... 0370 62 47 ca ec fa da 9b b5 49 bd bd e3 ad 04 b6 c1 bG......I....... 0380 3d 96 f6 44 35 58 bd 71 12 c6 00 80 ef bb 3d 53 =..D5X.q......=S 0390 35 2d a0 e4 6d ba fa 51 10 d9 23 9b 15 bd dd 5b 5-..m..Q..#....[ 03a0 10 a4 ba 4e 2f 81 59 a4 0a 1a 59 3e a5 b4 ef 30 ...N/.Y...Y>...0 03b0 dd e7 15 de 26 df 52 7b 7a 4b 06 5c 26 a1 ba 4e ....&.R{zK.\&..N 03c0 7d 63 d5 19 b5 d8 22 fb 00 f2 4d f1 8c 28 34 7f }c...."...M..(4. 03d0 05 f8 63 48 4d 19 73 c9 18 0d aa 4d 5f ed 4d 8c ..cHM.s....M_.M. 03e0 4e 35 90 75 87 03 26 c4 1d 73 1d fd 3d ec a7 d0 N5.u..&..s..=... 03f0 83 22 15 16 4f 54 7c 20 da dd 30 6d 9d 32 f0 4d ."..OT| ..0m.2.M 0400 25 0e 34 98 90 a9 13 d6 b9 a7 74 7a 22 01 e3 6a %.4.......tz"..j 0410 50 17 84 ce fd 4c 19 55 51 ec 4c 01 d8 e2 b4 af P....L.UQ.L..... 0420 5c d2 c4 d6 03 c6 57 83 ad 6d 77 df 8a 83 69 aa \.....W..mw...i. 0430 27 d1 86 bb c2 fd 53 98 71 04 84 22 3a 6f 21 de '.....S.q..":o!. 0440 0d 38 4d 2e 7f 7b 21 f9 2a 33 dd 07 cc d1 a0 69 .8M..{!.*3.....i 0450 5b 75 2e 12 14 76 37 25 c7 16 c0 b7 18 69 07 1e [u...v7%.....i.. 0460 2e b7 53 fa 86 93 f9 c0 70 f8 75 e5 01 09 81 18 ..S.....p.u..... 0470 2d c3 4b 78 ea e6 f0 a5 c3 99 21 6a 1c 00 25 de -.Kx......!j..%. 0480 be 5a 6c 73 48 24 c9 f0 90 93 24 50 5b e6 90 a8 .ZlsH$....$P[... 0490 be c8 dd 6f 5e 3f 7b 82 28 c0 6b 39 ea 02 90 fc ...o^?{.(.k9.... 04a0 a2 c5 a8 a0 e3 87 e4 bd 15 7b fa f8 07 5e 55 d3 .........{...^U. 04b0 29 62 d2 03 06 13 c5 2b 69 18 20 77 30 62 c7 77 )b.....+i. w0b.w 04c0 80 4d 25 37 cc 64 b7 af a5 95 1f d8 9f 1c 1f ea .M%7.d.......... 04d0 98 d8 37 35 b9 ae 62 af 0b 9f 21 a4 66 08 b2 fc ..75..b...!.f... 04e0 3b 74 3b 7e 70 71 1d ce 33 7c 27 2d 1e 54 3e 43 ;t;~pq..3|'-.T>C 04f0 d8 3a e7 3e 81 cd 39 86 42 72 a7 86 21 2a ff 84 .:.>..9.Br..!*.. 0500 8b e5 ab 97 ca 1e 44 e9 72 66 0a 31 bd ......D.rf.1. No. Time Source Destination Protocol Length Info 1750 20.075001 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=1185 Ack=65889 Win=65535 Len=0 TSval=727683 TSecr=540267 Frame 1750: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1185, Ack: 65889, Len: 0 No. Time Source Destination Protocol Length Info 1751 20.075051 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=1185 Ack=68630 Win=65535 Len=0 TSval=727683 TSecr=540267 Frame 1751: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1185, Ack: 68630, Len: 0 No. Time Source Destination Protocol Length Info 1752 20.105904 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 4 Port 45 TTL = 120 Frame 1752: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 1753 20.107702 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=1185 Ack=68630 Win=65535 Len=74 TSval=727683 TSecr=540267 Frame 1753: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1185, Ack: 68630, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 97 83 84 5e 8d 89 6f de 70 c1 1f .... ...^..o.p.. 0010 d1 51 b2 70 a3 82 92 9b 14 aa fc 9b be b6 4b df .Q.p..........K. 0020 e3 10 2d e5 1c 17 03 01 00 20 b9 78 20 26 56 2e ..-...... .x &V. 0030 f1 33 e8 ff 44 99 6c 1c ce 20 6c 27 5b da ad fe .3..D.l.. l'[... 0040 d6 da 28 7f 62 18 07 e4 85 85 ..(.b..... No. Time Source Destination Protocol Length Info 1754 20.107766 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=68630 Ack=1259 Win=1002 Len=0 TSval=540275 TSecr=727683 Frame 1754: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 68630, Ack: 1259, Len: 0 No. Time Source Destination Protocol Length Info 1755 20.166166 192.168.10.142 192.168.10.255 BROWSER 225 Request Announcement ANDYMOBILEPC Frame 1755: 225 bytes on wire (1800 bits), 225 bytes captured (1800 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1756 20.166384 192.168.10.142 192.168.10.255 BROWSER 225 Request Announcement ANDYMOBILEPC Frame 1756: 225 bytes on wire (1800 bits), 225 bytes captured (1800 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1757 20.166584 192.168.10.104 192.168.10.255 BROWSER 243 Local Master Announcement BAIMOBILEPC2, Workstation, Server, NT Workstation, Potential Browser, Master Browser Frame 1757: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1758 20.166924 192.168.10.104 192.168.10.255 BROWSER 243 Local Master Announcement BAIMOBILEPC2, Workstation, Server, NT Workstation, Potential Browser, Master Browser Frame 1758: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1759 20.407376 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 1759: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1765, Ack: 131006, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1760 20.407411 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=132036 Ack=1807 Win=46699 Len=0 Frame 1760: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 132036, Ack: 1807, Len: 0 No. Time Source Destination Protocol Length Info 1761 20.407473 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=1807 Ack=131006 Win=0 Len=0 Frame 1761: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1807, Ack: 131006, Len: 0 No. Time Source Destination Protocol Length Info 1762 20.440624 Dell_44:d0:a0 Broadcast ARP 60 Gratuitous ARP for 192.168.0.120 (Reply) Frame 1762: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:a0 (84:2b:2b:44:d0:a0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply/gratuitous ARP) No. Time Source Destination Protocol Length Info 1763 20.440655 Dell_44:d0:a0 Broadcast ARP 60 Gratuitous ARP for 192.168.0.120 (Reply) Frame 1763: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:a0 (84:2b:2b:44:d0:a0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply/gratuitous ARP) No. Time Source Destination Protocol Length Info 1764 20.447168 182.178.75.135 192.168.10.207 SMTP 60 C: QUIT Frame 1764: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gris (2135), Dst Port: smtp (25), Seq: 61, Ack: 367, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1765 20.447215 192.168.10.207 182.178.75.135 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 1765: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: gris (2135), Seq: 367, Ack: 67, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1766 20.447257 182.178.75.135 192.168.10.207 TCP 60 gris > smtp [ACK] Seq=67 Ack=436 Win=93004 Len=0 Frame 1766: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gris (2135), Dst Port: smtp (25), Seq: 67, Ack: 436, Len: 0 No. Time Source Destination Protocol Length Info 1767 20.447287 192.168.10.207 182.178.75.135 TCP 60 smtp > gris [FIN, ACK] Seq=436 Ack=67 Win=65469 Len=0 Frame 1767: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: gris (2135), Seq: 436, Ack: 67, Len: 0 No. Time Source Destination Protocol Length Info 1768 20.447356 182.178.75.135 192.168.10.207 TCP 60 gris > smtp [ACK] Seq=67 Ack=437 Win=93004 Len=0 Frame 1768: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gris (2135), Dst Port: smtp (25), Seq: 67, Ack: 437, Len: 0 No. Time Source Destination Protocol Length Info 1769 20.533470 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1940855040, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1769: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1770 20.533492 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1940855040, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1770: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1771 20.533505 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1940855040, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1771: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1772 20.533517 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1940855040, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1772: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1773 20.554538 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3809935616, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1773: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1774 20.554563 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3809935616, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1774: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1775 20.554576 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3809935616, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1775: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1776 20.554588 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3809935616, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1776: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1777 20.816507 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-07.geo.kaspersky.com Frame 1777: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 62086 (62086), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 1778 20.868409 182.178.75.135 192.168.10.207 TCP 60 gris > smtp [RST, ACK] Seq=67 Ack=437 Win=93004 Len=0 Frame 1778: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gris (2135), Dst Port: smtp (25), Seq: 67, Ack: 437, Len: 0 No. Time Source Destination Protocol Length Info 1779 20.868492 192.168.10.1 192.168.10.245 Syslog 202 LOCAL1.INFO: Oct 3 19:44:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2135 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 1779: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2135 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 1780 20.994729 192.168.10.246 202.62.224.2 DNS 85 Standard query PTR 33.35.19.113.in-addr.arpa Frame 1780: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 202.62.224.2 (202.62.224.2) User Datagram Protocol, Src Port: 56877 (56877), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 1781 21.135120 192.168.10.203 113.19.35.33 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 1781: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 113.19.35.33 (113.19.35.33) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 1782 21.193856 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 1782: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1783 21.315280 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 1783: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1784 21.443363 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 1784: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1785 21.549297 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1957632256, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1785: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1786 21.549321 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1957632256, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1786: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1787 21.549334 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1957632256, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1787: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1788 21.549346 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1957632256, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1788: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1789 21.553323 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 1789: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1790 21.553350 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 1790: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1791 21.565939 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 1791: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1792 21.570046 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3826712832, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1792: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1793 21.570067 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3826712832, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1793: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1794 21.570080 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3826712832, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1794: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1795 21.570094 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3826712832, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1795: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1796 21.641681 192.168.10.220 202.62.224.5 DNS 85 Standard query PTR 33.35.19.113.in-addr.arpa Frame 1796: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 202.62.224.5 (202.62.224.5) User Datagram Protocol, Src Port: 52870 (52870), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 1797 21.665334 192.168.10.142 192.168.10.255 BROWSER 237 Browser Election Request Frame 1797: 237 bytes on wire (1896 bits), 237 bytes captured (1896 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1798 21.665568 192.168.10.142 192.168.10.255 BROWSER 237 Browser Election Request Frame 1798: 237 bytes on wire (1896 bits), 237 bytes captured (1896 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1799 21.744320 192.168.10.104 192.168.10.255 BROWSER 237 Browser Election Request Frame 1799: 237 bytes on wire (1896 bits), 237 bytes captured (1896 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1800 21.816513 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-07.geo.kaspersky.com Frame 1800: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 62086 (62086), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 1801 21.914923 192.168.10.142 192.168.10.185 VNC 92 Authentication result Frame 1801: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 788, Ack: 789, Len: 38 Virtual Network Computing No. Time Source Destination Protocol Length Info 1802 21.914969 192.168.10.185 192.168.10.142 VNC 92 Authentication result Frame 1802: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 789, Ack: 826, Len: 38 Virtual Network Computing No. Time Source Destination Protocol Length Info 1803 21.928561 202.62.224.5 192.168.10.220 DNS 174 Standard query response Frame 1803: 174 bytes on wire (1392 bits), 174 bytes captured (1392 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 202.62.224.5 (202.62.224.5), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 52870 (52870) Domain Name System (response) No. Time Source Destination Protocol Length Info 1804 21.928654 192.168.10.220 202.62.224.2 DNS 85 Standard query PTR 33.35.19.113.in-addr.arpa Frame 1804: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 202.62.224.2 (202.62.224.2) User Datagram Protocol, Src Port: 52870 (52870), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 1805 21.951289 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.107? Tell 192.168.10.220 Frame 1805: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1806 21.951320 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.107? Tell 192.168.10.220 Frame 1806: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1807 21.951335 Dell_ad:25:f8 Intel_38:8d:0a ARP 64 Who has 192.168.10.66? Tell 192.168.10.220 Frame 1807: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1808 21.951345 Dell_ad:25:f8 Intel_89:5e:11 ARP 64 Who has 192.168.10.65? Tell 192.168.10.220 Frame 1808: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1809 21.951360 Intel_38:8d:0a Dell_ad:25:f6 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 1809: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1810 21.951370 Intel_89:5e:11 Dell_ad:25:f8 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 1810: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1811 21.951381 Dell_ad:25:f8 Intel_a5:f5:5b ARP 64 Who has 192.168.10.131? Tell 192.168.10.220 Frame 1811: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1812 21.951391 Dell_ad:25:f8 Intel_38:8c:64 ARP 64 Who has 192.168.10.67? Tell 192.168.10.220 Frame 1812: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1813 21.951401 Dell_ad:25:f8 Intel_02:0e:6d ARP 64 Who has 192.168.10.128? Tell 192.168.10.220 Frame 1813: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1814 21.951411 Dell_ad:25:f8 IntelCor_d3:4e:80 ARP 64 Who has 192.168.10.70? Tell 192.168.10.220 Frame 1814: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1815 21.951424 Intel_a5:f5:5b Dell_ad:25:f8 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 1815: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1816 21.951435 Intel_38:8c:64 Dell_ad:25:f6 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 1816: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1817 21.951445 Dell_ad:25:f8 Intel_d0:7a:8f ARP 64 Who has 192.168.10.68? Tell 192.168.10.220 Frame 1817: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1818 21.951455 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.233? Tell 192.168.10.220 Frame 1818: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1819 21.951465 Intel_02:0e:6d Dell_ad:25:f6 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 1819: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1820 21.951475 Dell_ad:25:f8 Intel_56:83:a5 ARP 64 Who has 192.168.10.59? Tell 192.168.10.220 Frame 1820: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1821 21.951486 IntelCor_d3:4e:80 Dell_ad:25:f8 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 1821: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1822 21.951499 Dell_ad:25:f8 Intel_38:8c:b1 ARP 64 Who has 192.168.10.138? Tell 192.168.10.220 Frame 1822: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1823 21.951509 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 1823: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1824 21.951523 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 1824: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1825 21.951537 Intel_d0:7a:8f Dell_ad:25:f8 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 1825: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1826 21.951547 Dell_ad:25:f8 Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.220 Frame 1826: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1827 21.951557 Intel_56:83:a5 Dell_ad:25:f6 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 1827: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1828 21.951567 Intel_38:8c:b1 Dell_ad:25:f6 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 1828: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1829 21.951600 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 1829: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1830 21.951976 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 1830: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1831 21.951993 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 1831: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1832 21.952009 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 1832: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1833 22.022759 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 3 Port 47 TTL = 120 Frame 1833: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 1834 22.067681 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 1834: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1835 22.067712 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 1835: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1836 22.171524 208.67.220.220 192.168.10.220 DNS 85 Standard query response, Server failure Frame 1836: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.220.220 (208.67.220.220), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 52425 (52425) Domain Name System (response) No. Time Source Destination Protocol Length Info 1837 22.172119 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 Who has 192.168.10.220? Tell 192.168.10.1 Frame 1837: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1838 22.172134 Dell_ad:25:f6 Watchgua_3c:4c:d8 ARP 60 192.168.10.220 is at 00:22:19:ad:25:f6 Frame 1838: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1839 22.361266 190.42.139.241 192.168.10.207 TCP 62 23537 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 1839: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23537 (23537), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 1840 22.361338 192.168.10.207 190.42.139.241 TCP 62 smtp > 23537 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 1840: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23537 (23537), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 1841 22.528682 190.42.139.241 192.168.10.207 TCP 60 23537 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 1841: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23537 (23537), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 1842 22.528880 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:44:40 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23537 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 1842: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:40 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23537 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 1843 22.529374 192.168.10.207 190.42.139.241 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:44:15 -0400 Frame 1843: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23537 (23537), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1844 22.529469 190.42.139.241 192.168.10.207 TCP 60 23537 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 1844: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23537 (23537), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 1845 22.564746 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1974409472, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1845: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1846 22.564770 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1974409472, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1846: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1847 22.564782 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1974409472, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1847: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1848 22.564795 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1974409472, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1848: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1849 22.585627 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3843490048, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1849: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1850 22.585651 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3843490048, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1850: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1851 22.585663 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3843490048, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1851: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1852 22.585675 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3843490048, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1852: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1853 22.610023 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=1807 Ack=131006 Win=52956 Len=0 Frame 1853: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1807, Ack: 131006, Len: 0 No. Time Source Destination Protocol Length Info 1854 22.610056 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 1853#1] smtp > 23308 [ACK] Seq=1807 Ack=131006 Win=52956 Len=0 Frame 1854: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1807, Ack: 131006, Len: 0 No. Time Source Destination Protocol Length Info 1855 22.610092 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1855: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 132036, Ack: 1807, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1856 22.610122 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1856: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 133416, Ack: 1807, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1857 22.610153 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1857: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 134796, Ack: 1807, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1858 22.610182 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1858: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 136176, Ack: 1807, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1859 22.610212 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1859: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 137556, Ack: 1807, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1860 22.610241 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1860: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 138936, Ack: 1807, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1861 22.610284 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1861: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 140316, Ack: 1807, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1862 22.610315 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1862: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 141696, Ack: 1807, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1863 22.610344 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 1853#2] smtp > 23308 [ACK] Seq=1807 Ack=131006 Win=52956 Len=0 Frame 1863: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1807, Ack: 131006, Len: 0 No. Time Source Destination Protocol Length Info 1864 22.610372 192.168.10.207 206.225.164.186 SMTP 180 S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 1864: 180 bytes on wire (1440 bits), 180 bytes captured (1440 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1807, Ack: 131006, Len: 126 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1865 22.610405 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=143076 Ack=1933 Win=46636 Len=0 Frame 1865: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 143076, Ack: 1933, Len: 0 No. Time Source Destination Protocol Length Info 1866 22.610433 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 1864#1] smtp > 23308 [ACK] Seq=1933 Ack=131006 Win=52956 Len=0 Frame 1866: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 131006, Len: 0 No. Time Source Destination Protocol Length Info 1867 22.610461 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 1864#2] smtp > 23308 [ACK] Seq=1933 Ack=131006 Win=52956 Len=0 Frame 1867: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 131006, Len: 0 No. Time Source Destination Protocol Length Info 1868 22.610488 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 1864#3] smtp > 23308 [ACK] Seq=1933 Ack=131006 Win=52956 Len=0 Frame 1868: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 131006, Len: 0 No. Time Source Destination Protocol Length Info 1869 22.610516 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 1864#4] smtp > 23308 [ACK] Seq=1933 Ack=131006 Win=52956 Len=0 Frame 1869: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 131006, Len: 0 No. Time Source Destination Protocol Length Info 1870 22.610543 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 1864#5] smtp > 23308 [ACK] Seq=1933 Ack=131006 Win=52956 Len=0 Frame 1870: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 131006, Len: 0 No. Time Source Destination Protocol Length Info 1871 22.610571 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 1864#6] smtp > 23308 [ACK] Seq=1933 Ack=131006 Win=52956 Len=0 Frame 1871: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 131006, Len: 0 No. Time Source Destination Protocol Length Info 1872 22.610598 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 1864#7] smtp > 23308 [ACK] Seq=1933 Ack=131006 Win=52956 Len=0 Frame 1872: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 131006, Len: 0 No. Time Source Destination Protocol Length Info 1873 22.610626 206.225.164.186 192.168.10.207 SMTP 1084 [TCP Fast Retransmission] C: DATA fragment, 1030 bytes Frame 1873: 1084 bytes on wire (8672 bits), 1084 bytes captured (8672 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 131006, Ack: 1933, Len: 1030 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1874 22.610656 206.225.164.186 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 1874: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 132036, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1875 22.610686 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1875: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 143076, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1876 22.610715 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1876: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 144456, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1877 22.610743 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1933 Ack=143076 Win=40886 Len=0 Frame 1877: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 143076, Len: 0 No. Time Source Destination Protocol Length Info 1878 22.610777 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 1877#1] smtp > 23308 [ACK] Seq=1933 Ack=143076 Win=40886 Len=0 Frame 1878: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 143076, Len: 0 No. Time Source Destination Protocol Length Info 1879 22.610805 206.225.164.186 192.168.10.207 SMTP 550 C: DATA fragment, 496 bytes Frame 1879: 550 bytes on wire (4400 bits), 550 bytes captured (4400 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 145836, Ack: 1933, Len: 496 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1880 22.610832 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1933 Ack=145836 Win=38126 Len=0 Frame 1880: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 145836, Len: 0 No. Time Source Destination Protocol Length Info 1881 22.610861 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1881: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 146332, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1882 22.610890 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1882: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 147712, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1883 22.610920 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1883: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 149092, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1884 22.610949 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1933 Ack=147712 Win=36250 Len=0 Frame 1884: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 147712, Len: 0 No. Time Source Destination Protocol Length Info 1885 22.610977 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1885: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 150472, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1886 22.611007 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1886: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 151852, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1887 22.611036 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1933 Ack=151852 Win=32110 Len=0 Frame 1887: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 151852, Len: 0 No. Time Source Destination Protocol Length Info 1888 22.611065 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1888: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 153232, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1889 22.611095 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1889: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 154612, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1890 22.611124 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1890: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 155992, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1891 22.611154 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1891: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 157372, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1892 22.611183 206.225.164.186 192.168.10.207 SMTP 213 C: DATA fragment, 159 bytes Frame 1892: 213 bytes on wire (1704 bits), 213 bytes captured (1704 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 158752, Ack: 1933, Len: 159 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1893 22.611210 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1933 Ack=154612 Win=29350 Len=0 Frame 1893: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 154612, Len: 0 No. Time Source Destination Protocol Length Info 1894 22.611247 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1894: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 158911, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1895 22.611283 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1933 Ack=158911 Win=25051 Len=0 Frame 1895: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 158911, Len: 0 No. Time Source Destination Protocol Length Info 1896 22.611312 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1896: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 160291, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1897 22.611341 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1897: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 161671, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1898 22.611370 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1898: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 163051, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1899 22.611398 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1933 Ack=161671 Win=22291 Len=0 Frame 1899: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 161671, Len: 0 No. Time Source Destination Protocol Length Info 1900 22.611426 206.225.164.186 192.168.10.207 SMTP 1112 C: DATA fragment, 1058 bytes Frame 1900: 1112 bytes on wire (8896 bits), 1112 bytes captured (8896 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 164431, Ack: 1933, Len: 1058 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1901 22.611455 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1901: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 165489, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1902 22.611485 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1902: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 166869, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1903 22.611513 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1933 Ack=164431 Win=19531 Len=0 Frame 1903: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 164431, Len: 0 No. Time Source Destination Protocol Length Info 1904 22.611542 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1904: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 168249, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1905 22.611570 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1933 Ack=166869 Win=17093 Len=0 Frame 1905: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 166869, Len: 0 No. Time Source Destination Protocol Length Info 1906 22.611598 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1906: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 169629, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1907 22.611627 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1907: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 171009, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1908 22.611655 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1933 Ack=169629 Win=14333 Len=0 Frame 1908: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 169629, Len: 0 No. Time Source Destination Protocol Length Info 1909 22.611684 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1909: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 172389, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1910 22.611713 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1910: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 173769, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1911 22.611742 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1911: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 175149, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1912 22.611771 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1912: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 176529, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1913 22.611800 206.225.164.186 192.168.10.207 SMTP 522 C: DATA fragment, 468 bytes Frame 1913: 522 bytes on wire (4176 bits), 522 bytes captured (4176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 177909, Ack: 1933, Len: 468 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1914 22.611828 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1933 Ack=175149 Win=8813 Len=0 Frame 1914: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 175149, Len: 0 No. Time Source Destination Protocol Length Info 1915 22.611856 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1933 Ack=178377 Win=5585 Len=0 Frame 1915: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 178377, Len: 0 No. Time Source Destination Protocol Length Info 1916 22.611884 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1916: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 178377, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1917 22.611913 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1917: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 179757, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1918 22.611946 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1918: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 181137, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1919 22.611975 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 1919: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 182517, Ack: 1933, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1920 22.612004 206.225.164.186 192.168.10.207 SMTP 555 C: DATA fragment, 501 bytes Frame 1920: 555 bytes on wire (4440 bits), 555 bytes captured (4440 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 183897, Ack: 1933, Len: 501 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1921 22.612031 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1933 Ack=181137 Win=2825 Len=0 Frame 1921: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 181137, Len: 0 No. Time Source Destination Protocol Length Info 1922 22.612059 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=1933 Ack=183962 Win=0 Len=0 Frame 1922: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 183962, Len: 0 No. Time Source Destination Protocol Length Info 1923 22.634722 192.168.10.203 113.19.35.33 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 1923: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 113.19.35.33 (113.19.35.33) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 1924 22.665170 192.168.10.142 192.168.10.255 BROWSER 237 Browser Election Request Frame 1924: 237 bytes on wire (1896 bits), 237 bytes captured (1896 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1925 22.665393 192.168.10.142 192.168.10.255 BROWSER 237 Browser Election Request Frame 1925: 237 bytes on wire (1896 bits), 237 bytes captured (1896 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1926 22.704577 190.42.139.241 192.168.10.207 SMTP 69 C: EHLO erhk.com Frame 1926: 69 bytes on wire (552 bits), 69 bytes captured (552 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23537 (23537), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 15 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1927 22.704733 192.168.10.207 190.42.139.241 SMTP 245 S: 250-mail.mydomain.com Hello [190.42.139.241] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 1927: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23537 (23537), Seq: 122, Ack: 16, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1928 22.704779 190.42.139.241 192.168.10.207 TCP 60 23537 > smtp [ACK] Seq=16 Ack=313 Win=93128 Len=0 Frame 1928: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23537 (23537), Dst Port: smtp (25), Seq: 16, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 1929 22.705246 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:44:40 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23537 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 1929: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:40 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23537 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 1930 22.705318 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:44:40 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23537 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 1930: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:40 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23537 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 1931 22.705386 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:44:40 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23537 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 1931: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:40 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23537 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 1932 22.705460 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:44:40 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23537 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 1932: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:40 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23537 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 1933 22.705636 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:44:40 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23537 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 1933: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:40 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23537 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 1934 22.705731 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:44:40 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23537 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 1934: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:40 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23537 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 1935 22.708100 192.168.10.104 192.168.10.255 BROWSER 237 Browser Election Request Frame 1935: 237 bytes on wire (1896 bits), 237 bytes captured (1896 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1936 22.778857 192.168.10.32 192.168.20.3 UDP 774 Source port: 43836 Destination port: apc-3052 Frame 1936: 774 bytes on wire (6192 bits), 774 bytes captured (6192 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 43836 (43836), Dst Port: apc-3052 (3052) Data (732 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 36 3a 32 34 0a 53 52 3d 30 31 31 =20:56:24.SR=011 0060 35 45 36 0a 53 55 3d 36 37 44 39 0a 52 44 3d 30 5E6.SU=67D9.RD=0 0070 37 43 39 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 7C9.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 0a 34 8.7E=00.3E=002.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 38 2e 30 C=207.3.50=038.0 00c0 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 31 2f .43=028.5.78=11/ 00d0 31 39 2f 30 37 0a 36 41 3d 30 30 35 31 3a 0a 34 19/07.6A=0051:.4 00e0 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 4e 0a 7=S.63=UPS_IDEN. 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 37 34 0.38=00.6E=IS074 0120 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 31 2f 6005481 .6D=11/ 0130 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 2d 55 19/07.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 58 4c 20 20 PS RT 10000 XL 0150 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d 32 30 .46=60.00.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 35 3d 7.3.4E=205.9.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 3d 31 00.42=217.0.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 31 2e 30 0a 32 46 3d 31 34 2e 39 38 C=031.0.2F=14.98 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 2e 33 0.09=60.00;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 0a 49 9=0.I0=2.I1=00.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a 49 38 5=0.I6=0.I7=0.I8 0250 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 0a 49 =Int Contact 1.I 0260 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e 74 61 9=0.IA=Int Conta 0270 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 6e 74 ct 2.IB=0.IC=Int 0280 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 3d 42 Relay.ID=0.SH=B 0290 43 39 41 31 38 42 30 32 45 38 30 42 34 45 31 41 C9A18B02E80B4E1A 02a0 43 44 39 37 33 36 45 41 33 38 34 37 41 37 30 0a CD9736EA3847A70. 02b0 4d 44 3d 63 65 38 62 30 34 39 31 61 66 31 65 63 MD=ce8b0491af1ec 02c0 62 36 63 33 38 36 37 66 39 65 66 64 61 33 38 66 b6c3867f9efda38f 02d0 63 66 36 0a 3c 2f 42 4f 44 59 3e 0a cf6.</BODY>. No. Time Source Destination Protocol Length Info 1937 22.778968 192.168.10.32 192.168.20.3 UDP 774 Source port: 43836 Destination port: apc-3052 Frame 1937: 774 bytes on wire (6192 bits), 774 bytes captured (6192 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 43836 (43836), Dst Port: apc-3052 (3052) Data (732 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 36 3a 32 34 0a 53 52 3d 30 31 31 =20:56:24.SR=011 0060 35 45 36 0a 53 55 3d 36 37 44 39 0a 52 44 3d 30 5E6.SU=67D9.RD=0 0070 37 43 39 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 7C9.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 0a 34 8.7E=00.3E=002.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 38 2e 30 C=207.3.50=038.0 00c0 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 31 2f .43=028.5.78=11/ 00d0 31 39 2f 30 37 0a 36 41 3d 30 30 35 31 3a 0a 34 19/07.6A=0051:.4 00e0 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 4e 0a 7=S.63=UPS_IDEN. 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 37 34 0.38=00.6E=IS074 0120 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 31 2f 6005481 .6D=11/ 0130 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 2d 55 19/07.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 58 4c 20 20 PS RT 10000 XL 0150 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d 32 30 .46=60.00.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 35 3d 7.3.4E=205.9.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 3d 31 00.42=217.0.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 31 2e 30 0a 32 46 3d 31 34 2e 39 38 C=031.0.2F=14.98 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 2e 33 0.09=60.00;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 0a 49 9=0.I0=2.I1=00.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a 49 38 5=0.I6=0.I7=0.I8 0250 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 0a 49 =Int Contact 1.I 0260 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e 74 61 9=0.IA=Int Conta 0270 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 6e 74 ct 2.IB=0.IC=Int 0280 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 3d 42 Relay.ID=0.SH=B 0290 43 39 41 31 38 42 30 32 45 38 30 42 34 45 31 41 C9A18B02E80B4E1A 02a0 43 44 39 37 33 36 45 41 33 38 34 37 41 37 30 0a CD9736EA3847A70. 02b0 4d 44 3d 63 65 38 62 30 34 39 31 61 66 31 65 63 MD=ce8b0491af1ec 02c0 62 36 63 33 38 36 37 66 39 65 66 64 61 33 38 66 b6c3867f9efda38f 02d0 63 66 36 0a 3c 2f 42 4f 44 59 3e 0a cf6.</BODY>. No. Time Source Destination Protocol Length Info 1938 22.779057 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:15:23 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS3/43836 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 1938: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:15:23 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS3/43836 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 1939 22.987012 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.201? Tell 192.168.10.32 Frame 1939: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1940 22.987041 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.201? Tell 192.168.10.32 Frame 1940: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1941 22.992363 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 1415#2] 9428 > smtp [ACK] Seq=65508 Ack=883 Win=46064 Len=0 Frame 1941: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 65508, Ack: 883, Len: 0 No. Time Source Destination Protocol Length Info 1942 22.992394 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=883 Ack=64266 Win=0 Len=0 Frame 1942: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 883, Ack: 64266, Len: 0 No. Time Source Destination Protocol Length Info 1943 23.044688 190.42.139.241 192.168.10.207 SMTP 95 C: MAIL FROM: <aurora.taft@xxxxxxxxxxxxxx> Frame 1943: 95 bytes on wire (760 bits), 95 bytes captured (760 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23537 (23537), Dst Port: smtp (25), Seq: 16, Ack: 313, Len: 41 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1944 23.045016 192.168.10.207 190.42.139.241 SMTP 105 S: 250 2.1.0 [email protected] OK Frame 1944: 105 bytes on wire (840 bits), 105 bytes captured (840 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23537 (23537), Seq: 313, Ack: 57, Len: 51 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1945 23.045055 190.42.139.241 192.168.10.207 TCP 60 23537 > smtp [ACK] Seq=57 Ack=364 Win=93076 Len=0 Frame 1945: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23537 (23537), Dst Port: smtp (25), Seq: 57, Ack: 364, Len: 0 No. Time Source Destination Protocol Length Info 1946 23.101061 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 1946: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 183962, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1947 23.101094 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=184398 Ack=1975 Win=46615 Len=0 Frame 1947: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 184398, Ack: 1975, Len: 0 No. Time Source Destination Protocol Length Info 1948 23.101124 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=1975 Ack=183962 Win=0 Len=0 Frame 1948: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1975, Ack: 183962, Len: 0 No. Time Source Destination Protocol Length Info 1949 23.123334 186.220.53.138 192.168.10.207 TCP 62 mcs-fastmail > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 1949: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 186.220.53.138 (186.220.53.138), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mcs-fastmail (3302), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 1950 23.123398 192.168.10.207 186.220.53.138 TCP 62 smtp > mcs-fastmail [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 1950: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 186.220.53.138 (186.220.53.138) Transmission Control Protocol, Src Port: smtp (25), Dst Port: mcs-fastmail (3302), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 1951 23.193724 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 1951: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1952 23.207768 192.168.10.1 192.168.10.245 Syslog 308 LOCAL1.INFO: Oct 3 19:44:41 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23537 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="exwrural@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 1952: 308 bytes on wire (2464 bits), 308 bytes captured (2464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:41 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23537 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 1953 23.226596 192.168.10.207 206.225.164.188 SMTP 516 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 1953: 516 bytes on wire (4128 bits), 516 bytes captured (4128 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 64266, Len: 462 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1954 23.226626 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=65508 Ack=1303 Win=46720 Len=0 Frame 1954: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 65508, Ack: 1303, Len: 0 No. Time Source Destination Protocol Length Info 1955 23.226655 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=1303 Ack=64266 Win=0 Len=0 Frame 1955: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1303, Ack: 64266, Len: 0 No. Time Source Destination Protocol Length Info 1956 23.266228 182.178.75.135 192.168.10.207 TCP 62 gdbremote > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 1956: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gdbremote (2159), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 1957 23.266289 192.168.10.207 182.178.75.135 TCP 62 smtp > gdbremote [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 1957: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: gdbremote (2159), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 1958 23.315266 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 1958: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1959 23.364765 186.220.53.138 192.168.10.207 TCP 60 mcs-fastmail > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 1959: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 186.220.53.138 (186.220.53.138), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mcs-fastmail (3302), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 1960 23.365141 192.168.10.1 192.168.10.245 Syslog 204 LOCAL1.INFO: Oct 3 19:44:41 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 186.220.53.138 7x.x.x.3 3302 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 1960: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:41 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 186.220.53.138 7x.x.x.3 3302 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 1961 23.365174 192.168.10.207 186.220.53.138 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:44:16 -0400 Frame 1961: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 186.220.53.138 (186.220.53.138) Transmission Control Protocol, Src Port: smtp (25), Dst Port: mcs-fastmail (3302), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1962 23.365211 186.220.53.138 192.168.10.207 TCP 60 mcs-fastmail > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 1962: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 186.220.53.138 (186.220.53.138), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mcs-fastmail (3302), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 1963 23.443430 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 1963: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1964 23.551360 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 1964: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1965 23.551392 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 1965: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 1966 23.565838 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 1966: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 1967 23.580368 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1991186688, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1967: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1968 23.580393 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1991186688, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 1968: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1969 23.580406 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1991186688, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1969: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1970 23.580419 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1991186688, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 1970: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1971 23.592325 186.220.53.138 192.168.10.207 SMTP 83 C: HELO badc358a.virtua.com.br Frame 1971: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 186.220.53.138 (186.220.53.138), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mcs-fastmail (3302), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 29 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1972 23.592525 192.168.10.207 186.220.53.138 SMTP 103 S: 250 mail.mydomain.com Hello [186.220.53.138] Frame 1972: 103 bytes on wire (824 bits), 103 bytes captured (824 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 186.220.53.138 (186.220.53.138) Transmission Control Protocol, Src Port: smtp (25), Dst Port: mcs-fastmail (3302), Seq: 122, Ack: 30, Len: 49 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1973 23.592565 186.220.53.138 192.168.10.207 TCP 60 mcs-fastmail > smtp [ACK] Seq=30 Ack=171 Win=93270 Len=0 Frame 1973: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 186.220.53.138 (186.220.53.138), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mcs-fastmail (3302), Dst Port: smtp (25), Seq: 30, Ack: 171, Len: 0 No. Time Source Destination Protocol Length Info 1974 23.601178 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3860267264, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1974: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1975 23.601198 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3860267264, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 1975: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1976 23.601211 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3860267264, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1976: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1977 23.601223 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3860267264, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 1977: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 1978 23.622477 190.42.139.241 192.168.10.207 SMTP 60 C: QUIT Frame 1978: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23537 (23537), Dst Port: smtp (25), Seq: 57, Ack: 364, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1979 23.622662 192.168.10.207 190.42.139.241 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 1979: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23537 (23537), Seq: 364, Ack: 63, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1980 23.622702 190.42.139.241 192.168.10.207 TCP 60 23537 > smtp [ACK] Seq=63 Ack=433 Win=93008 Len=0 Frame 1980: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23537 (23537), Dst Port: smtp (25), Seq: 63, Ack: 433, Len: 0 No. Time Source Destination Protocol Length Info 1981 23.622731 192.168.10.207 190.42.139.241 TCP 60 smtp > 23537 [FIN, ACK] Seq=433 Ack=63 Win=65473 Len=0 Frame 1981: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23537 (23537), Seq: 433, Ack: 63, Len: 0 No. Time Source Destination Protocol Length Info 1982 23.622778 190.42.139.241 192.168.10.207 TCP 60 23537 > smtp [ACK] Seq=63 Ack=434 Win=93008 Len=0 Frame 1982: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23537 (23537), Dst Port: smtp (25), Seq: 63, Ack: 434, Len: 0 No. Time Source Destination Protocol Length Info 1983 23.635932 182.178.75.135 192.168.10.207 TCP 60 gdbremote > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 1983: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gdbremote (2159), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 1984 23.636097 192.168.10.1 192.168.10.245 Syslog 204 LOCAL1.INFO: Oct 3 19:44:41 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2159 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 1984: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:41 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2159 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 1985 23.636168 192.168.10.207 182.178.75.135 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:44:16 -0400 Frame 1985: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: gdbremote (2159), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 1986 23.636208 182.178.75.135 192.168.10.207 TCP 60 gdbremote > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 1986: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gdbremote (2159), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 1987 23.665371 192.168.10.142 192.168.10.255 BROWSER 237 Browser Election Request Frame 1987: 237 bytes on wire (1896 bits), 237 bytes captured (1896 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1988 23.665576 192.168.10.142 192.168.10.255 BROWSER 237 Browser Election Request Frame 1988: 237 bytes on wire (1896 bits), 237 bytes captured (1896 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1989 23.668139 64.74.103.131 192.168.10.240 TLSv1 107 Application Data Frame 1989: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.240 (192.168.10.240) Transmission Control Protocol, Src Port: https (443), Dst Port: mentaserver (2118), Seq: 1, Ack: 1, Len: 53 Secure Sockets Layer No. Time Source Destination Protocol Length Info 1990 23.668153 Watchgua_3c:4c:d8 Dell_ba:b4:3c ARP 60 Who has 192.168.10.240? Tell 192.168.10.1 Frame 1990: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 1991 23.668194 Dell_ba:b4:3c Watchgua_3c:4c:d8 ARP 60 192.168.10.240 is at 00:1e:c9:ba:b4:3c Frame 1991: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 1992 23.668281 192.168.10.240 64.74.103.131 TLSv1 107 Application Data Frame 1992: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.240 (192.168.10.240), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: mentaserver (2118), Dst Port: https (443), Seq: 1, Ack: 54, Len: 53 Secure Sockets Layer No. Time Source Destination Protocol Length Info 1993 23.668367 64.74.103.131 192.168.10.240 TCP 60 https > mentaserver [ACK] Seq=54 Ack=54 Win=65535 Len=0 Frame 1993: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.240 (192.168.10.240) Transmission Control Protocol, Src Port: https (443), Dst Port: mentaserver (2118), Seq: 54, Ack: 54, Len: 0 No. Time Source Destination Protocol Length Info 1994 23.710023 192.168.10.104 192.168.10.255 BROWSER 237 Browser Election Request Frame 1994: 237 bytes on wire (1896 bits), 237 bytes captured (1896 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 1995 23.788627 190.42.139.241 192.168.10.207 TCP 60 23537 > smtp [RST, ACK] Seq=63 Ack=434 Win=93008 Len=0 Frame 1995: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23537 (23537), Dst Port: smtp (25), Seq: 63, Ack: 434, Len: 0 No. Time Source Destination Protocol Length Info 1996 23.788727 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:44:41 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23537 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 1996: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:41 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23537 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 1997 23.816696 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-07.geo.kaspersky.com Frame 1997: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 62086 (62086), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 1998 23.816869 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-07.geo.kaspersky.com Frame 1998: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 62086 (62086), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 1999 23.828726 186.220.53.138 192.168.10.207 SMTP 99 C: MAIL FROM: <ebjimaginative@xxxxxxxxxxxx> Frame 1999: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 186.220.53.138 (186.220.53.138), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mcs-fastmail (3302), Dst Port: smtp (25), Seq: 30, Ack: 171, Len: 45 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2000 23.829015 192.168.10.207 186.220.53.138 SMTP 109 S: 250 2.1.0 [email protected] OK Frame 2000: 109 bytes on wire (872 bits), 109 bytes captured (872 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 186.220.53.138 (186.220.53.138) Transmission Control Protocol, Src Port: smtp (25), Dst Port: mcs-fastmail (3302), Seq: 171, Ack: 75, Len: 55 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2001 23.829062 186.220.53.138 192.168.10.207 TCP 60 mcs-fastmail > smtp [ACK] Seq=75 Ack=226 Win=93214 Len=0 Frame 2001: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 186.220.53.138 (186.220.53.138), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mcs-fastmail (3302), Dst Port: smtp (25), Seq: 75, Ack: 226, Len: 0 No. Time Source Destination Protocol Length Info 2002 24.046374 182.178.75.135 192.168.10.207 SMTP 71 C: EHLO gmcsva.com Frame 2002: 71 bytes on wire (568 bits), 71 bytes captured (568 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gdbremote (2159), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 17 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2003 24.046465 192.168.10.207 182.178.75.135 SMTP 245 S: 250-mail.mydomain.com Hello [182.178.75.135] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 2003: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: gdbremote (2159), Seq: 122, Ack: 18, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2004 24.046510 182.178.75.135 192.168.10.207 TCP 60 gdbremote > smtp [ACK] Seq=18 Ack=313 Win=93128 Len=0 Frame 2004: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gdbremote (2159), Dst Port: smtp (25), Seq: 18, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 2005 24.046877 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:44:42 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2159 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 2005: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:42 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2159 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" No. Time Source Destination Protocol Length Info 2006 24.047868 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=68630 Ack=1259 Win=1002 Len=1448 TSval=541260 TSecr=727683 Frame 2006: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 68630, Ack: 1259, Len: 1448 Data (1448 bytes) 0000 17 03 01 22 50 93 5b d5 50 f4 d6 a4 b4 e6 6c e3 ..."P.[.P.....l. 0010 4d 6c 0f 00 0a 43 e9 d0 6d b6 d3 d0 89 33 68 65 Ml...C..m....3he 0020 02 ca 76 39 54 5f 9b 0b 36 f5 2f 86 e3 dd cc 5d ..v9T_..6./....] 0030 7b e0 ad fe 73 63 95 88 81 90 d5 d4 85 2f 31 29 {...sc......./1) 0040 75 80 f9 cd 7e 41 27 1f c9 d7 33 04 e1 3f b2 62 u...~A'...3..?.b 0050 6e 29 42 6c dc d6 44 04 ca d4 73 bb 16 2f 84 d1 n)Bl..D...s../.. 0060 b0 e1 dc 44 e5 7d 64 21 9e ba 5e 5d a3 4d a7 61 ...D.}d!..^].M.a 0070 56 55 09 c4 d5 0c 7a cb 19 3e 76 65 2c 90 64 d8 VU....z..>ve,.d. 0080 63 23 b8 1e 16 73 fc e0 4d ad 94 39 14 af d0 a2 c#...s..M..9.... 0090 8c ca 25 61 0f 7f 8d 5c 75 93 cc 7f 92 22 09 16 ..%a...\u....".. 00a0 74 b7 e8 c8 e8 3e 6e 41 1f ef 29 54 6d d3 39 b6 t....>nA..)Tm.9. 00b0 16 ca 15 5d b2 5a 02 41 f7 48 c0 49 3e 5e a4 5b ...].Z.A.H.I>^.[ 00c0 1e 5b e1 bd cc 8a ee 8b e3 80 ab df 0e 36 4f 48 .[...........6OH 00d0 02 36 f2 15 bd d1 f6 b1 9e e3 c3 b8 6d c9 ce 59 .6..........m..Y 00e0 ce 5a 35 67 64 61 af fe a7 e3 e0 80 9b 0b dd 56 .Z5gda.........V 00f0 76 9a b8 6b df d1 8f 7a ec 7e fc 33 21 fc 28 97 v..k...z.~.3!.(. 0100 fe 78 c4 b0 78 78 8f 3f 21 97 e1 1e aa d0 d9 24 .x..xx.?!......$ 0110 21 8b 1b 2a a3 7d 99 ed ef fc 99 56 61 3d 82 f7 !..*.}.....Va=.. 0120 81 58 f4 2f 6c 53 80 1a e0 90 4f cb 8f f8 ec f2 .X./lS....O..... 0130 54 39 47 94 57 11 e5 08 8d 05 e1 b5 3b 30 42 bd T9G.W.......;0B. 0140 fa 1f 97 31 d5 e8 59 fb 1c e7 73 2f c4 20 f7 8c ...1..Y...s/. .. 0150 ea bb 1e 07 22 c7 ee 0c 45 6e 0b b0 41 97 37 b6 ...."...En..A.7. 0160 af f6 ed c0 45 c6 7a 40 8a cd 8d 42 98 71 8a dc [email protected].. 0170 37 02 5a a8 d9 91 44 7d 22 83 b2 53 14 bc c7 94 7.Z...D}"..S.... 0180 49 86 89 ab 22 cc 42 ef 2e 96 c8 62 a6 33 8c fa I...".B....b.3.. 0190 13 19 25 d9 9b f1 85 b3 a8 1b d3 9a 97 a7 38 7d ..%...........8} 01a0 9a bd be 44 e0 62 e9 5f 36 5b 12 97 41 2a ef 4e ...D.b._6[..A*.N 01b0 c3 3b 5f f3 dc a9 62 9a 7d d1 40 36 e9 5f ae 57 .;_...b.}.@6._.W 01c0 e6 7d 10 46 bf f5 6c 31 88 a4 63 6f 5d e7 46 ec .}.F..l1..co].F. 01d0 8f 0e 7a cd d3 22 39 74 7f 3d 96 b5 ab 28 1c 4e ..z.."9t.=...(.N 01e0 86 0c cc af 2f 63 8f 10 08 10 d9 fb 06 19 12 2a ..../c.........* 01f0 2c 7a c2 a5 5c 65 ab 41 c8 70 95 bd a3 71 0d e4 ,z..\e.A.p...q.. 0200 03 5b 14 36 5b 67 a1 c9 99 3e 62 8d f3 9a 1a 27 .[.6[g...>b....' 0210 9d b0 ed ca 23 c4 c8 68 0c 45 a0 05 fa fe 52 51 ....#..h.E....RQ 0220 bc ee 76 8e d9 64 68 4f ab 18 0b 6e e8 c1 4e 86 ..v..dhO...n..N. 0230 14 aa 90 51 24 f2 99 a3 be 2d 6b 7d c9 89 b9 61 ...Q$....-k}...a 0240 4f 42 7c 76 25 f0 1b b7 db ba c1 39 74 1e 82 1c OB|v%......9t... 0250 59 28 f5 1c 0a 3d 19 5f f4 cf 30 71 91 bb fc 99 Y(...=._..0q.... 0260 eb a4 ab 75 a2 7c f0 0d 97 91 b7 08 62 a0 0e 83 ...u.|......b... 0270 c4 4c 38 eb b5 8a bd 9a 3e d0 e4 71 03 5e 8a 98 .L8.....>..q.^.. 0280 92 b3 0d 25 9d 7b 70 88 a3 1a 5d 86 58 c3 d0 5a ...%.{p...].X..Z 0290 a3 8f 1d 15 39 7c 10 1d 78 a4 74 7c 65 e9 c4 90 ....9|..x.t|e... 02a0 ed 9b c1 e7 d3 b6 d0 64 b7 e8 55 a1 a5 40 54 cd .......d..U..@T. 02b0 4b 00 3d 74 e8 5e f6 7d d9 68 78 3d 79 b4 ff 98 K.=t.^.}.hx=y... 02c0 90 73 3c 11 80 2a fa 02 4e f1 ce ac a7 08 04 31 .s<..*..N......1 02d0 14 92 d1 9b a4 8a f8 f7 e6 ea 3c 61 60 7b 2f 10 ..........<a`{/. 02e0 8b 8a e1 f5 bf e5 b5 dd 5a 72 91 73 4e d8 76 47 ........Zr.sN.vG 02f0 77 f7 87 9d 51 12 43 91 b6 95 83 22 97 5c bc 62 w...Q.C....".\.b 0300 e7 78 82 a8 d5 1b 14 17 8d c3 dd 61 b4 ec 25 ea .x.........a..%. 0310 37 57 15 6e 35 0a 5f e1 17 3c 3a 4b 54 b4 06 f2 7W.n5._..<:KT... 0320 60 1a 18 59 3d bf 80 1d 81 1f 62 9e 6a 34 d4 09 `..Y=.....b.j4.. 0330 9a 1d 0a 0f 31 46 14 3b d3 e3 8c 35 25 c8 cf c3 ....1F.;...5%... 0340 cc 1c 93 35 d1 3b c7 51 7b cc ec cf ee bd e6 78 ...5.;.Q{......x 0350 fd 9c 02 c8 27 dc 24 d1 cc 3b 4e 2d 9a 80 45 67 ....'.$..;N-..Eg 0360 b8 2e 23 9b 6b 72 6a c4 36 42 80 11 31 03 d9 9e ..#.krj.6B..1... 0370 ea 08 8d 7c 04 e5 56 d4 4b 03 d0 a4 48 f8 cd d3 ...|..V.K...H... 0380 71 85 38 c9 38 40 1b ba ff 06 67 82 05 60 09 1b [email protected]..`.. 0390 c4 81 d1 8a f0 c6 a8 61 c5 8d c7 20 ba 43 b1 07 .......a... .C.. 03a0 28 c5 1d 98 bd 79 5e 56 bc 5c 9c 0c 55 a4 44 e0 (....y^V.\..U.D. 03b0 e1 d3 d1 82 eb 39 fd 92 36 ee 19 29 8d 0c eb f7 .....9..6..).... 03c0 14 5f f3 fe 9a eb 19 59 05 b9 b9 cf 57 88 65 12 ._.....Y....W.e. 03d0 ce 62 c5 21 4e 76 04 04 17 7b b9 2c 89 ee 15 36 .b.!Nv...{.,...6 03e0 a8 1a 36 99 72 e1 44 b7 08 49 a4 19 46 80 14 7e ..6.r.D..I..F..~ 03f0 cd ea 14 5b 04 b5 96 32 db 00 84 29 84 8b 0e 51 ...[...2...)...Q 0400 00 e6 33 83 ae bf 55 c8 24 b7 e5 66 30 00 88 d8 ..3...U.$..f0... 0410 35 c8 bf d1 bf 69 55 97 a3 18 02 5f 11 a8 ef 41 5....iU...._...A 0420 e3 7e 6b 7e 65 4f 4e e4 3e 6e 76 35 73 6b 0a bb .~k~eON.>nv5sk.. 0430 04 99 5f 26 bf c6 73 1d 96 a6 9e ab 43 36 a3 fd .._&..s.....C6.. 0440 81 6c 05 f9 b1 d6 54 87 2b 12 6b 96 00 6e cc 1d .l....T.+.k..n.. 0450 c2 c7 f2 05 87 bf 9d 77 7f 47 45 c0 6c d2 64 05 .......w.GE.l.d. 0460 61 8c 6a a9 f6 69 73 64 5e 44 c0 f4 55 25 92 95 a.j..isd^D..U%.. 0470 e9 c8 23 f5 3d 0b da 09 59 0c 3a 19 44 69 ff fa ..#.=...Y.:.Di.. 0480 7e f1 7f c1 ec c0 43 a5 4c 38 ed 07 8d 3f 27 bf ~.....C.L8...?'. 0490 31 be 42 9b 55 80 ba 4f bf 9b e3 a6 37 d2 53 5d 1.B.U..O....7.S] 04a0 d6 59 d0 0e ed b4 19 82 d1 6f 83 0e 4c 97 e3 c7 .Y.......o..L... 04b0 64 70 a0 91 e0 c4 f6 c2 82 96 1c 05 9e 88 15 ae dp.............. 04c0 e0 da 3f d0 4d 02 df 2a bd 5d c1 ae be a1 f0 69 ..?.M..*.].....i 04d0 a4 30 d5 58 9f 25 78 ae f5 79 a9 5c 0a 30 eb d2 .0.X.%x..y.\.0.. 04e0 eb 7e bc 2d 02 19 39 25 f5 3c 63 4f 52 a2 21 09 .~.-..9%.<cOR.!. 04f0 73 b2 00 72 3f 7a 7e 35 1e c9 58 3f c2 50 76 f6 s..r?z~5..X?.Pv. 0500 c9 1c a1 69 94 a7 57 e1 80 a5 ad b8 43 03 2c 14 ...i..W.....C.,. 0510 f2 43 d7 14 5a 0c 00 d9 35 f0 64 26 42 8e d3 0d .C..Z...5.d&B... 0520 cd fd 56 e4 4e 8c c8 c3 27 39 f3 ea e2 fa 98 b0 ..V.N...'9...... 0530 56 09 1a 6f 4f 70 cb 22 6a 8c 19 14 df e9 b3 e3 V..oOp."j....... 0540 2c 90 6b 64 d2 1b 0c 29 9d f6 e6 fd 8b 60 f7 32 ,.kd...).....`.2 0550 01 54 0b d2 14 7e b7 f7 c2 41 d9 94 4b 9c 1d 30 .T...~...A..K..0 0560 48 05 d4 48 9a 19 8c d6 f0 ae 28 a1 9c 2b 6a 11 H..H......(..+j. 0570 ec f2 83 c6 49 d3 d4 eb d4 c0 63 98 53 81 9b 76 ....I.....c.S..v 0580 4c f0 4b bc 0a d0 31 4f 38 cc 90 0d 92 58 29 6f L.K...1O8....X)o 0590 02 8a c5 95 c7 d3 2a 1e 53 54 71 3c 00 81 00 3b ......*.STq<...; 05a0 c8 aa 32 0a c5 d3 dc d0 ..2..... No. Time Source Destination Protocol Length Info 2007 24.047979 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=70078 Ack=1259 Win=1002 Len=1448 TSval=541260 TSecr=727683 Frame 2007: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 70078, Ack: 1259, Len: 1448 Data (1448 bytes) 0000 c1 e7 34 56 36 f6 d1 c3 f1 24 ab ee e0 74 ec d2 ..4V6....$...t.. 0010 48 6b c3 da c9 25 4e b5 4f e1 dd 5e fd 47 d7 0e Hk...%N.O..^.G.. 0020 79 d1 0d 68 0b 8c b3 7e 6d 96 28 07 30 21 67 3e y..h...~m.(.0!g> 0030 a6 84 b8 e5 4d a6 c8 8b 54 4a cd be 81 e6 3a 31 ....M...TJ....:1 0040 25 d5 82 6c de 44 45 06 b7 4d bc 8c d6 de cd 0c %..l.DE..M...... 0050 a0 77 61 c0 02 cf 05 7c a3 6c ab 9b 32 25 cb 09 .wa....|.l..2%.. 0060 81 84 0e 35 ea b4 70 bd 5c bb 0c ad 26 06 41 a1 ...5..p.\...&.A. 0070 f0 ca 82 b8 28 bc 92 de 46 02 ea 64 a0 6b 2f ca ....(...F..d.k/. 0080 40 93 6e 12 b4 e3 6d 5d 42 6c 95 93 33 da 2a 8e @.n...m]Bl..3.*. 0090 e1 6a 89 62 e0 44 f7 a8 6c bc 1f db eb 67 69 38 .j.b.D..l....gi8 00a0 af 7f 21 82 e9 85 9d 34 45 77 d7 f7 9b 22 c4 85 ..!....4Ew...".. 00b0 7e ef a0 08 05 3d 50 ac 6a c4 9a 11 59 3c 77 6b ~....=P.j...Y<wk 00c0 c7 6b e6 79 69 2c 8f 66 1d 30 b7 53 04 2e c8 4e .k.yi,.f.0.S...N 00d0 2d f5 4e a1 0a 3b fe 5f c3 a9 3f 84 84 52 e2 34 -.N..;._..?..R.4 00e0 52 da 25 59 af 3a 43 1d 7c cc 81 dd 59 b0 c8 41 R.%Y.:C.|...Y..A 00f0 06 4b 85 f1 8b a7 cb 6a 91 8f f4 91 ec 42 ea 70 .K.....j.....B.p 0100 72 12 c6 44 9e 45 2a 61 e8 f7 55 4c 3f b1 c0 4f r..D.E*a..UL?..O 0110 63 3c ad 06 32 d0 f7 31 c1 61 c8 76 c2 38 b5 ee c<..2..1.a.v.8.. 0120 c6 cb 27 84 fb 3a 0a 71 05 ba f3 a8 8b a0 7f 89 ..'..:.q........ 0130 0f 84 a3 e1 64 95 55 4a 0a fe 91 6b c0 4e 59 80 ....d.UJ...k.NY. 0140 21 28 60 ec 66 30 1b 11 d5 92 a1 76 33 23 a9 65 !(`.f0.....v3#.e 0150 61 11 2b 88 c9 cf 04 87 e4 71 c2 e8 e2 2d d2 04 a.+......q...-.. 0160 c8 f9 c0 dc a1 67 ef e2 66 35 3c 83 da be 77 e1 .....g..f5<...w. 0170 fc 12 3c 35 5b 82 08 d3 ed 99 c2 35 84 c0 e3 1c ..<5[......5.... 0180 75 fd 2b f5 67 8f 08 c3 1e ae 1e 42 97 8b 10 97 u.+.g......B.... 0190 cb b2 5f a2 cb cc 89 1f e4 af aa 23 8e 5c d4 2a .._........#.\.* 01a0 06 49 e8 81 a1 fb 10 45 69 9e c4 58 d6 99 5e 57 .I.....Ei..X..^W 01b0 45 27 0c f2 96 5d ba 71 69 55 c7 70 2e c4 d3 7e E'...].qiU.p...~ 01c0 f9 b6 43 57 ec f9 b3 eb 0f de ac 76 6e 44 0e a1 ..CW.......vnD.. 01d0 52 82 4f 12 51 f6 a4 71 53 54 51 e5 db 1a 34 62 R.O.Q..qSTQ...4b 01e0 10 c9 3f ed 52 d7 ad 76 29 2b a9 67 20 eb c6 10 ..?.R..v)+.g ... 01f0 9c 74 43 0b f3 8e 64 94 a7 e7 87 45 ed d0 f7 9c .tC...d....E.... 0200 65 bf 37 6a f9 6f c7 5f 46 88 ab ee 27 52 b8 4b e.7j.o._F...'R.K 0210 5b e0 f7 32 24 04 42 74 f3 ac ee d2 bc 8b 9e bb [..2$.Bt........ 0220 ab 8c 2b 36 54 7c 39 53 b6 6f c4 d3 76 d4 f5 07 ..+6T|9S.o..v... 0230 8b 7d da 68 0c d5 91 c5 70 0c 66 b8 33 5f 10 64 .}.h....p.f.3_.d 0240 8c 32 c1 ff c8 ad 33 23 b6 fd b6 1a 75 3c 35 32 .2....3#....u<52 0250 ae de d7 e7 ea c5 54 32 29 60 d2 71 b8 6c 7a b0 ......T2)`.q.lz. 0260 87 a9 a7 ad 7c cb fb 28 8b 4e 09 6c 5d 42 8c 53 ....|..(.N.l]B.S 0270 ec 5f 9c 91 20 6d 58 46 d8 45 56 82 9a 19 91 ca ._.. mXF.EV..... 0280 db 10 7d f5 31 dc d3 e8 ed 0e cc d1 59 26 6e 99 ..}.1.......Y&n. 0290 d0 a8 34 b6 c9 e9 7c 52 b5 ae df 34 68 d7 c9 46 ..4...|R...4h..F 02a0 ca 23 b5 d0 98 a1 ae d3 14 41 37 af 50 28 96 df .#.......A7.P(.. 02b0 83 44 05 99 b8 3f c6 14 2a 71 3d 01 cb ff 09 67 .D...?..*q=....g 02c0 4a 8c 16 6b 81 70 0a d0 4b 85 f2 43 4e 41 17 9a J..k.p..K..CNA.. 02d0 f4 6f b9 01 5e b3 26 d3 67 c1 59 47 d7 48 c7 ef .o..^.&.g.YG.H.. 02e0 7d 0d b0 f7 9c 5c a0 58 54 9f b9 00 5c 18 b1 18 }....\.XT...\... 02f0 bb 56 1c 88 b6 70 02 f0 a6 ce 6d 8a 73 6e bb f8 .V...p....m.sn.. 0300 3e de f4 9a bb c7 b7 fb a2 51 26 b6 da b8 93 a1 >........Q&..... 0310 b4 1f 04 e2 55 08 1b bb 83 ed 86 71 1b 45 2d a2 ....U......q.E-. 0320 0c c2 e0 c0 25 79 30 08 4d bd 4c 0e 95 24 5d aa ....%y0.M.L..$]. 0330 0d 73 f4 16 a0 b2 ad 88 1d 13 22 cc 26 bf 46 dd .s........".&.F. 0340 50 44 70 5d 10 03 bf 8d 66 58 59 4f ba 02 2c 39 PDp]....fXYO..,9 0350 e0 da 83 1d 04 f8 68 27 3f b9 c2 81 62 0c 1d b7 ......h'?...b... 0360 08 d1 17 7c 67 2a 8e c6 21 09 c5 f9 b2 12 2f 87 ...|g*..!...../. 0370 3b 1f 53 0a a9 7d dd 6a 30 ef 93 f7 c2 d4 13 fa ;.S..}.j0....... 0380 4b 91 87 31 3c a2 5c b7 d1 ad 3c a9 22 8f 23 54 K..1<.\...<.".#T 0390 8c 18 8d f0 55 7d 52 f9 f3 d8 b3 74 2f 0d a0 05 ....U}R....t/... 03a0 1a c5 63 8d 4e b3 f5 56 57 a1 0a 91 50 14 2c 44 ..c.N..VW...P.,D 03b0 52 a6 5d 1d 98 c5 75 83 b3 d8 7b 28 66 48 94 a5 R.]...u...{(fH.. 03c0 63 8b 37 0f bf a4 89 1d c8 ba 4b 81 2b 82 e1 74 c.7.......K.+..t 03d0 99 21 02 32 f9 b2 d7 60 b8 3a a9 d5 4d 4d 14 fe .!.2...`.:..MM.. 03e0 05 4d f9 4b 6e 90 d5 06 52 3e 7b 9a ee 7a e9 48 .M.Kn...R>{..z.H 03f0 e2 81 08 92 65 50 ed 0d 5d 12 b8 7f ac 7a 4b 27 ....eP..]....zK' 0400 c2 5f c4 ee f0 9e 85 56 5d ec 0e 21 78 88 d8 05 ._.....V]..!x... 0410 43 b2 7c 70 8b 0a 9f 66 a2 8c 59 8d ae 74 ff 42 C.|p...f..Y..t.B 0420 b2 ae da 4b bf 3d e1 a3 e1 64 5a ce df 8d c7 1e ...K.=...dZ..... 0430 20 70 ea 96 31 69 23 fc 43 ba 21 3c 57 d4 af b1 p..1i#.C.!<W... 0440 1c 9d df c0 bd d1 4e 2b 57 24 f7 43 f2 c1 58 74 ......N+W$.C..Xt 0450 ef 5c 61 3d 92 a7 d0 79 a5 d9 20 bf a1 66 30 bf .\a=...y.. ..f0. 0460 92 42 33 56 b4 32 7a e1 46 ad 5b 3a 46 a0 da f3 .B3V.2z.F.[:F... 0470 d9 2c 10 1c e5 18 f8 2a 42 7c 68 16 76 32 d6 8c .,.....*B|h.v2.. 0480 2a 6e c8 ea dc 02 e7 a6 59 91 c2 98 e4 fb a7 18 *n......Y....... 0490 fc c0 49 97 28 f6 51 cb 08 51 b9 c9 c0 34 e5 c0 ..I.(.Q..Q...4.. 04a0 77 ea c1 b8 9b 84 a5 03 7f cd fa ac c5 c0 16 d4 w............... 04b0 d4 b1 6d 91 57 4b b6 f3 b4 6f 35 f5 a2 25 e9 85 ..m.WK...o5..%.. 04c0 5f c6 ac 99 80 2f 0b 80 d8 e9 fd da 71 78 50 5e _..../......qxP^ 04d0 ef ae 88 5f ff 75 8e cc a8 47 1c fd aa e3 28 29 ..._.u...G....() 04e0 ac 87 19 a2 0b ee 39 04 b6 1a 65 31 02 74 cf e7 ......9...e1.t.. 04f0 d6 6f 17 c6 52 75 f3 ec 00 3a 73 66 c2 fa 1d ab .o..Ru...:sf.... 0500 99 a9 cf b9 11 e0 05 c4 d3 d2 ef 11 bc a1 a6 31 ...............1 0510 29 6c bd 69 1d 5d cd 5d 4e 5f ce 57 49 6b 71 88 )l.i.].]N_.WIkq. 0520 5e d9 8d 71 cd fa ad a6 ea e5 7f 1b 70 44 d1 7b ^..q........pD.{ 0530 db 5b c0 60 ad 15 da f1 f5 2b ea 22 96 44 1b 49 .[.`.....+.".D.I 0540 fc 3a f0 c0 32 0f 3b 90 3e 36 c4 82 7e 99 a2 ae .:..2.;.>6..~... 0550 1e 34 8e 4a 8c 2a 2f 58 ff 29 7a c9 a4 34 4a 5c .4.J.*/X.)z..4J\ 0560 a1 bb 56 ec a8 81 68 92 f1 b0 fe 87 86 63 a6 3b ..V...h......c.; 0570 00 40 33 32 61 96 e1 e9 38 dd 03 b1 a2 0c ec ef [email protected]....... 0580 5e 1a a0 b7 f3 c8 cf 45 a3 2f 94 34 aa 7c 65 61 ^......E./.4.|ea 0590 c4 a3 aa 93 b2 9e 0c 9d 0d 01 97 62 c8 d2 90 80 ...........b.... 05a0 fa 29 c5 c9 b0 b9 f8 f7 .)...... No. Time Source Destination Protocol Length Info 2008 24.048087 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=71526 Ack=1259 Win=1002 Len=1448 TSval=541260 TSecr=727683 Frame 2008: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 71526, Ack: 1259, Len: 1448 Data (1448 bytes) 0000 91 cd b0 bb b5 e5 3f 6a a6 32 36 10 2d 3e a7 46 ......?j.26.->.F 0010 66 88 7a d6 dc 12 a0 a6 03 c7 2c bd 0a b7 57 21 f.z.......,...W! 0020 9d 4b 11 30 32 37 94 a6 ab 3e b5 a9 f8 2f 44 c6 .K.027...>.../D. 0030 2f 6d bd f7 b9 1c cc 73 e8 e0 41 90 ab 95 99 e6 /m.....s..A..... 0040 58 89 7c 16 b6 e4 0a b2 3b 37 94 5e ee f1 48 dc X.|.....;7.^..H. 0050 dc 25 c7 d3 33 a1 94 90 cd 0b 88 d5 b5 a6 6a cd .%..3.........j. 0060 e6 4c 26 16 11 08 8b 72 98 b8 16 34 a4 e0 8a f8 .L&....r...4.... 0070 96 8c cf b6 58 b0 4d c3 d1 a0 d9 28 ee 7d 97 3a ....X.M....(.}.: 0080 25 78 92 55 5a e4 41 6b d9 b5 ef 75 85 03 f9 65 %x.UZ.Ak...u...e 0090 28 49 ab e2 1d 8d 54 70 5b 98 a2 53 1b 41 e0 d1 (I....Tp[..S.A.. 00a0 5a 5b 89 56 2e 5b 43 f7 f0 2a eb 42 e5 a8 af 68 Z[.V.[C..*.B...h 00b0 16 8b 15 62 6b bb 57 3d c5 6c 88 87 1a 3a ce a1 ...bk.W=.l...:.. 00c0 50 bc ab 41 8d 8b 37 99 53 58 98 ee 6f a7 76 c7 P..A..7.SX..o.v. 00d0 56 74 28 3c c5 67 71 4c a4 19 b2 8c 8c 12 8b 6f Vt(<.gqL.......o 00e0 bf be 35 34 bf f9 b9 33 d1 5d 5f 8f 35 28 f6 ec ..54...3.]_.5(.. 00f0 60 88 d1 5c cb be 67 3b c2 d8 81 13 06 82 55 bc `..\..g;......U. 0100 93 87 38 23 1a e3 1b 46 69 1a 66 80 97 e2 43 c6 ..8#...Fi.f...C. 0110 1a 1a eb bc 85 af 1b 03 88 a0 ba bf 23 2d 55 1c ............#-U. 0120 f8 f0 2d 1e c3 f9 c6 1e f6 c1 59 7b e0 76 e2 e7 ..-.......Y{.v.. 0130 14 af 6d 56 93 f9 24 40 5d af d3 62 f9 4d e8 be ..mV..$@]..b.M.. 0140 e6 1b 7e 65 c9 76 4c 05 f1 ba 77 37 1f 89 09 2e ..~e.vL...w7.... 0150 c4 ff a5 9b 09 a7 6d 6a ea 24 d0 b2 10 d7 f8 7b ......mj.$.....{ 0160 64 99 f6 77 65 fe 99 85 c5 c6 27 f8 ff fe f6 a9 d..we.....'..... 0170 99 44 0f ba 82 ae 8c a9 54 43 03 ab ef 5f 2b de .D......TC..._+. 0180 6a 00 2c d9 05 21 02 03 68 05 6e 51 b0 30 38 93 j.,..!..h.nQ.08. 0190 b0 f8 70 d9 a0 d8 cb 0e 93 ba e3 30 68 90 8d b0 ..p........0h... 01a0 77 5f 69 3d d3 5c 6c fa f3 71 5b 5e a6 c1 73 35 w_i=.\l..q[^..s5 01b0 ed 35 91 74 c0 27 74 05 9d 1c 9c eb 0e 6d 03 d3 .5.t.'t......m.. 01c0 c5 5f 3c e1 04 1b 16 ab 11 b7 f3 53 f0 c1 12 bb ._<........S.... 01d0 ce 33 1b 2f 47 1c 3e f9 3a c8 30 28 97 de a2 72 .3./G.>.:.0(...r 01e0 70 14 60 ff 4d a8 16 8e b6 86 35 1a eb f9 e2 2c p.`.M.....5...., 01f0 46 5e bc 1c c6 70 46 8c dd 2b f4 44 ad 4b 68 eb F^...pF..+.D.Kh. 0200 2d 8c 4e cc 1c 63 78 f5 56 43 48 43 5c 4c 07 b7 -.N..cx.VCHC\L.. 0210 a6 ee 5d 4d db 2d c6 95 1a 66 ce 7c d9 60 dc a7 ..]M.-...f.|.`.. 0220 d2 28 24 c9 e8 91 20 e2 33 6e 24 b7 a0 1d 00 73 .($... .3n$....s 0230 44 7f 04 2f 21 1f 19 84 f5 cc ab 69 9a e3 7e 66 D../!......i..~f 0240 fd f2 7b 32 36 b0 37 ed 40 4a 2f 31 2a de 8d f1 ..{26.7.@J/1*... 0250 c4 cc 7e 19 89 bb a6 21 68 c7 0d 5e c7 da 08 06 ..~....!h..^.... 0260 9d e1 ef 82 b4 40 69 2b 78 d3 e1 73 1a f3 b6 03 .....@i+x..s.... 0270 f3 f0 2d c5 bc 45 3e 2b 46 01 4a a6 40 0f e5 26 ..-..E>+F.J.@..& 0280 f6 02 e5 17 74 9c ca 4f 53 e0 6f cf 2d 9f 1d f3 ....t..OS.o.-... 0290 c8 d3 ea 9b 9d c6 b3 59 93 4f 9e bb 1e c8 f3 57 .......Y.O.....W 02a0 64 ff 8b fb e6 b1 f3 6c 1e 54 a9 cf 37 19 2e 2f d......l.T..7../ 02b0 ca 4c ec f2 fe 97 21 97 31 32 6a 45 5c 92 8e 05 .L....!.12jE\... 02c0 1f ae 74 98 e6 7f 52 32 41 83 ff 34 86 b1 c5 dd ..t...R2A..4.... 02d0 1b 04 f8 24 23 d4 15 f0 a0 a8 99 11 b4 18 78 ed ...$#.........x. 02e0 b2 0e 44 cb d6 8a 07 c8 59 4f 2e 26 8a e7 bb 77 ..D.....YO.&...w 02f0 b0 f7 36 a1 90 94 5f 39 17 d3 8b fb 2f cf 40 74 ..6..._9..../.@t 0300 a9 91 33 0b 35 c6 4e 49 b0 d0 0f d7 80 03 9f 6f ..3.5.NI.......o 0310 d7 37 b4 0a 53 a6 90 9a b9 a5 bd 8e 46 5b 0f b8 .7..S.......F[.. 0320 e0 1a 5e 82 0a 7b aa 44 e9 82 c3 74 b1 01 bd 9b ..^..{.D...t.... 0330 ca 92 55 7c 2d 0a 2c b4 a5 4d 1b 20 c9 98 c4 f7 ..U|-.,..M. .... 0340 d5 b2 64 46 7f 9b 4f 9c 39 bf b9 50 50 63 cd 12 ..dF..O.9..PPc.. 0350 9a c1 62 ea 33 00 1d 91 65 12 35 43 d6 64 f5 8a ..b.3...e.5C.d.. 0360 97 5e 4d 52 33 5e 4d 3f 82 04 c1 86 f5 f8 ec 77 .^MR3^M?.......w 0370 79 54 7c 1d f0 47 6e 23 48 0d c5 60 38 fa a3 bc yT|..Gn#H..`8... 0380 ad 7c 92 51 c7 ca 28 45 00 f1 46 28 16 cc df 63 .|.Q..(E..F(...c 0390 fb c7 cb 9c 07 48 a9 93 ae 67 65 04 5a 1d 42 09 .....H...ge.Z.B. 03a0 20 3c 49 8c 5a 78 80 2f 1b fc ef 6f 70 00 ee 30 <I.Zx./...op..0 03b0 bb 4f 32 08 6c 9e 48 5b 7b 85 f4 c0 74 7d 61 d0 .O2.l.H[{...t}a. 03c0 f7 12 ef f9 03 dd 81 fa 78 ac 07 10 e8 70 90 aa ........x....p.. 03d0 07 09 3f 1e 7b 56 c4 e3 69 b4 3f d6 82 b4 63 35 ..?.{V..i.?...c5 03e0 60 da bf 6a 9e af b6 96 e0 d0 f1 4c 0c 30 e7 9d `..j.......L.0.. 03f0 b9 3b 37 b3 3c d8 06 c2 6e a4 47 8a 56 3f 86 35 .;7.<...n.G.V?.5 0400 5b 42 57 e7 64 02 d0 cd c4 2e 79 1d 25 0a cd 18 [BW.d.....y.%... 0410 02 74 4a e5 6d ba ce 88 f7 f6 d9 47 52 5f 9f 61 .tJ.m......GR_.a 0420 61 aa 10 4e 23 5a 6c 7b 31 f7 68 07 98 aa c9 d3 a..N#Zl{1.h..... 0430 47 af 0d 10 11 16 63 43 7b 37 6b 06 8b d4 d8 d0 G.....cC{7k..... 0440 d2 52 c4 ce 8f 9d 7c 35 07 01 32 45 c4 10 59 02 .R....|5..2E..Y. 0450 b9 c0 33 7e fe 58 90 c8 df a2 02 5d 68 5c d0 b2 ..3~.X.....]h\.. 0460 e4 02 4f eb 1d c6 20 f2 cc c5 d0 6c a2 5c 72 d1 ..O... ....l.\r. 0470 11 c2 33 c9 6f 50 f8 44 5a 7f d1 c7 46 c2 8a 4c ..3.oP.DZ...F..L 0480 4d 1c e6 5d 99 57 08 5b 85 0e b0 78 bd 77 11 5d M..].W.[...x.w.] 0490 f8 97 6b a9 10 81 4a 5b 3a 0f 09 2a bd 95 6e 8f ..k...J[:..*..n. 04a0 05 07 9d 37 d4 73 12 a1 db 23 7e fc 35 b5 1a d7 ...7.s...#~.5... 04b0 59 53 02 02 6c ca d7 85 15 62 94 5d 1a 26 2e a6 YS..l....b.].&.. 04c0 b3 2d 75 9c c8 c2 a2 d5 7f 09 7e f1 5f 7f 9d e6 .-u.......~._... 04d0 b5 9f 86 11 20 ba df 50 cf c1 5d b7 dc 83 03 fb .... ..P..]..... 04e0 6c 23 4d 71 d6 59 5c 29 ee 5e fc e7 e2 92 65 38 l#Mq.Y\).^....e8 04f0 4e 40 7a 2d af 42 aa 18 71 47 1e 1f 9d 91 37 80 [email protected]. 0500 35 bc c9 ed db a6 cd ad 1e 2d fc b5 27 62 ca d2 5........-..'b.. 0510 56 1b 28 7d 46 0b f0 16 54 36 be 17 4c a8 78 3a V.(}F...T6..L.x: 0520 26 78 40 9e 6d a2 bf e1 e1 da 53 44 93 6a a8 4f &[email protected] 0530 30 2c a1 5a f9 97 d9 a1 8e c7 c7 ac 87 ba c5 38 0,.Z...........8 0540 83 29 9b 69 f4 c1 16 f0 b4 11 f2 4f eb 8e 80 9f .).i.......O.... 0550 8c b6 dd 32 ed 08 50 1e 5a fc 63 36 1f 09 44 6d ...2..P.Z.c6..Dm 0560 fc 0d 04 4b 01 b9 5c 43 45 da b7 ed f0 18 d0 d3 ...K..\CE....... 0570 39 f8 1b d6 65 3a ef 8c 5d f3 0a 86 11 45 26 9d 9...e:..]....E&. 0580 c2 3c 0e 2c 52 fe 87 66 df 63 76 a5 87 aa 25 ff .<.,R..f.cv...%. 0590 ca b8 55 b3 47 fc 38 08 9e 13 27 2d 40 90 fb 7e ..U.G.8...'-@..~ 05a0 97 7f a4 78 4f a0 76 0b ...xO.v. No. Time Source Destination Protocol Length Info 2009 24.048174 192.168.10.1 192.168.10.245 Syslog 277 LOCAL1.INFO: Oct 3 19:44:42 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2159 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 2009: 277 bytes on wire (2216 bits), 277 bytes captured (2216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:42 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2159 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPEL No. Time Source Destination Protocol Length Info 2010 24.048238 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=1259 Ack=72974 Win=65535 Len=0 TSval=727723 TSecr=541260 Frame 2010: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1259, Ack: 72974, Len: 0 No. Time Source Destination Protocol Length Info 2011 24.048344 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=72974 Ack=1259 Win=1002 Len=1448 TSval=541260 TSecr=727723 Frame 2011: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 72974, Ack: 1259, Len: 1448 Data (1448 bytes) 0000 78 c5 91 07 a9 e8 c4 df 65 51 0d 99 a6 94 29 f1 x.......eQ....). 0010 6d 44 67 2e ce 6a e9 f3 22 87 c8 24 e3 d2 ec cf mDg..j.."..$.... 0020 65 29 28 7f a8 12 4e b2 74 7c 97 b5 63 90 58 11 e)(...N.t|..c.X. 0030 08 16 c1 db db 5c a5 46 54 4c c2 89 2e f5 d7 f7 .....\.FTL...... 0040 1b 15 bd de 11 bd 21 68 ed 40 6c ee 92 21 48 fd ......!h.@l..!H. 0050 0c 0c e2 6b 45 20 98 ae 03 a9 e3 72 85 1b 01 b6 ...kE .....r.... 0060 cc 66 e7 de 91 90 6b ac 42 e3 de 84 97 86 e2 99 .f....k.B....... 0070 81 db 18 64 5f a5 d5 fd 9a 42 40 b7 c5 de 65 ba [email protected]. 0080 0f b8 2a 23 d4 4e ec eb 12 65 ff ac 1c e4 9c 2f ..*#.N...e...../ 0090 6b ae 22 e1 70 f5 ef f1 c0 84 ab 0f 62 6b 56 20 k.".p.......bkV 00a0 e7 94 d2 c5 0f 7c a4 29 72 8b 5a ba 57 26 a2 e9 .....|.)r.Z.W&.. 00b0 e2 7f 12 5e 63 3b 24 6b 4f 34 44 0b 3b 3a 1c 45 ...^c;$kO4D.;:.E 00c0 a4 2e 2d 64 da 62 8c cb 6a aa 61 02 fd b0 4c 7d ..-d.b..j.a...L} 00d0 36 d2 cb 8d bd 26 a0 07 91 e8 f2 d6 22 e5 11 8f 6....&......"... 00e0 50 36 60 a8 56 5e 86 c9 26 a4 52 f5 51 25 ba 90 P6`.V^..&.R.Q%.. 00f0 be f6 37 72 0c 46 db 86 78 7b 6a 8c 9a 93 88 71 ..7r.F..x{j....q 0100 df c9 a7 eb 3e 3b b9 37 32 69 b7 3c 98 b7 71 88 ....>;.72i.<..q. 0110 77 a3 8c 74 8d 89 19 0d 66 81 91 76 a6 09 ad d4 w..t....f..v.... 0120 e2 5f c3 5e 95 30 ec 44 3b d4 8a 85 1a a0 ed a7 ._.^.0.D;....... 0130 78 8c 24 f0 4c e4 2e 4e b9 f9 17 f4 5c e2 56 f0 x.$.L..N....\.V. 0140 7f 9c d6 d7 a2 e5 43 6b 8e 67 11 b0 1a 5f 1d 9d ......Ck.g..._.. 0150 4f c4 05 66 e9 79 c0 5b ef 72 7b 8a fd cb 02 eb O..f.y.[.r{..... 0160 98 a3 2d 5f 94 71 9e 3e cb d7 35 5e 61 c3 d7 3f ..-_.q.>..5^a..? 0170 f3 b5 8a ea d4 5d da 4e be b9 ca d3 46 55 5f 90 .....].N....FU_. 0180 50 04 9a 1d 58 35 50 26 0f 9e 66 d1 7a e5 de f0 P...X5P&..f.z... 0190 30 6e 4c 88 51 fd ed 93 4b aa d8 b9 38 a6 9e c0 0nL.Q...K...8... 01a0 3c ad 5f 88 de 36 49 98 6c 8f c7 f6 3f 8f 1d aa <._..6I.l...?... 01b0 69 ad 32 74 a6 81 43 1e d2 7b fc 26 66 d2 a0 fe i.2t..C..{.&f... 01c0 98 7c d6 8f 8f 8e 67 f3 50 30 ae 25 c7 12 e2 aa .|....g.P0.%.... 01d0 88 0f 34 3e 9a a6 db 7d 42 8c 8b da bf 81 79 f9 ..4>...}B.....y. 01e0 58 d9 2b 2a bd e1 3e 3f 5d 56 e5 80 8d 6e bd d2 X.+*..>?]V...n.. 01f0 be f1 c8 1e 15 c4 fd fe bd 16 5c 40 a4 16 75 11 ..........\@..u. 0200 97 d2 db e2 4a c6 4f b8 0a 48 64 2a 03 e4 87 fa ....J.O..Hd*.... 0210 6c 6c 66 44 7e a9 ce 63 4b 1e b1 ec e8 f8 5e 15 llfD~..cK.....^. 0220 56 34 dc d1 67 5c 98 25 81 56 b2 3b 5f c3 b5 60 V4..g\.%.V.;_..` 0230 5e 4a 1a f7 4d 4f 6b 57 f2 ef 33 20 65 60 c6 2f ^J..MOkW..3 e`./ 0240 38 23 2f 9d 27 6e 77 ff b0 41 1e 83 cd 73 ef f2 8#/.'nw..A...s.. 0250 a8 3b 12 bd 87 d0 96 0f 97 22 0b 80 66 f5 75 66 .;......."..f.uf 0260 35 f9 42 8f 66 c3 63 56 03 2c 55 f8 b2 38 a1 02 5.B.f.cV.,U..8.. 0270 2c 41 39 ad ee b2 83 3f 73 49 3c 4f e3 7a d8 41 ,A9....?sI<O.z.A 0280 94 69 9e 8f a9 1f 3e ca 87 5c 07 06 d0 61 3d dc .i....>..\...a=. 0290 93 b7 c3 89 c0 1e 15 58 73 b3 e1 e6 b7 e1 ec f0 .......Xs....... 02a0 d7 9c b9 1d 1d cd 7a 51 7a ea 78 96 0d 34 7b b6 ......zQz.x..4{. 02b0 d4 a4 29 12 4c 79 b8 0f a9 e3 f2 2f 7d 22 8a 15 ..).Ly...../}".. 02c0 3a ec a6 3b 90 19 1b 73 51 1a ca 5f a6 ad eb 16 :..;...sQ.._.... 02d0 ce 0a 17 63 e3 f8 12 11 96 4e 55 27 fb 83 99 98 ...c.....NU'.... 02e0 07 7a d7 26 89 45 a9 3a 02 8a 27 7f 36 10 02 20 .z.&.E.:..'.6.. 02f0 35 98 3f 10 fd b0 50 fc a3 8f a4 38 c6 61 b6 40 5.?...P....8.a.@ 0300 20 d3 ef f5 7f 7d d8 11 0f 6b cf e2 76 34 43 49 ....}...k..v4CI 0310 a3 25 43 67 9d 32 76 77 cc d2 fb c4 cd fc 4c 39 .%Cg.2vw......L9 0320 4a 4a 23 99 3a 85 74 1e c8 be e5 a9 1e a4 02 60 JJ#.:.t........` 0330 af 01 5f 77 8c 72 6f 78 44 cb cd 9c 12 ce 7e 0a .._w.roxD.....~. 0340 dc 9b e0 54 fb 4f b3 e7 b8 83 bf a2 f0 8a ba 73 ...T.O.........s 0350 99 f5 81 e3 3c a1 84 dd e3 28 31 fe 92 21 41 4d ....<....(1..!AM 0360 3f c1 7b 73 3b 41 77 c9 f1 fc 97 c5 c5 ab a5 c9 ?.{s;Aw......... 0370 d1 eb 0d a0 46 a7 72 66 f8 5b c4 94 58 4d 01 a4 ....F.rf.[..XM.. 0380 09 4c 38 2a 50 2b 79 3b e7 29 d0 1b fc 55 7e 42 .L8*P+y;.)...U~B 0390 06 7f d7 8c 5a 54 ab ee 5e f6 4c c0 79 4d a4 a0 ....ZT..^.L.yM.. 03a0 ef 28 06 a4 17 16 31 d2 f7 cf 36 e3 e1 56 ef 58 .(....1...6..V.X 03b0 3c d9 80 a0 d9 71 0e a0 f0 0d 62 34 46 1b 5b 0e <....q....b4F.[. 03c0 b6 58 1e 1c 59 a0 74 41 15 2d f7 ab b9 21 26 53 .X..Y.tA.-...!&S 03d0 d9 6f b9 7f 8c 8b b8 82 b1 98 3a ea de 1e d7 b9 .o........:..... 03e0 77 28 52 20 7b a2 a4 36 b5 38 04 6e d5 00 81 63 w(R {..6.8.n...c 03f0 9f 06 ba 9a f2 61 03 a4 b9 a5 29 c8 31 98 75 8c .....a....).1.u. 0400 ab 51 04 b1 27 fe 83 93 be b7 47 a5 4c eb b3 3a .Q..'.....G.L..: 0410 2a 70 60 d8 53 98 5d 4f 3a 0f 8b 7d 47 b8 af 2a *p`.S.]O:..}G..* 0420 37 0e f7 dd 26 9d 1f 84 f9 24 ba 3e 2f 5c fd c7 7...&....$.>/\.. 0430 6a 25 84 60 4a 8c f6 9b 95 0e 92 52 81 1a 72 47 j%.`J......R..rG 0440 64 fa e8 cf c6 49 8e 92 b4 64 e9 9d 50 8f 83 87 d....I...d..P... 0450 e1 68 38 8a ee ed 7f 76 06 aa 57 ce 79 e3 20 e3 .h8....v..W.y. . 0460 a4 6a d4 41 47 f5 95 b6 ab 67 94 de c5 4a 57 7d .j.AG....g...JW} 0470 39 1c a7 cb 5e fe b2 c3 b6 68 b8 5a 2e f0 aa c1 9...^....h.Z.... 0480 61 ff 50 51 1a 22 78 0e 1d cb 4a da d5 46 dd 55 a.PQ."x...J..F.U 0490 b1 7f e1 86 45 b2 a3 cd 9d c1 05 05 15 1f 03 77 ....E..........w 04a0 26 b2 e3 7a 9a 95 b2 a8 ab 84 9d 42 fe 4c 3e 68 &..z.......B.L>h 04b0 e5 38 d5 42 8b 8c c5 84 6b 72 9a 3a c3 41 6b 8e .8.B....kr.:.Ak. 04c0 05 27 60 c3 03 b8 a5 3b 6f 5a 9a 27 23 e1 79 ca .'`....;oZ.'#.y. 04d0 86 e6 9d 62 90 93 5f 5e 3e fb cb 5f 15 45 60 62 ...b.._^>.._.E`b 04e0 05 90 b9 63 db fd 99 ab 55 ea 05 2f af 93 75 c6 ...c....U../..u. 04f0 49 3d 22 86 c9 47 3f 71 f1 d7 aa 4a d7 3c cc c5 I="..G?q...J.<.. 0500 ed 11 3d b7 88 30 d4 74 66 1b 31 a9 df 70 82 83 ..=..0.tf.1..p.. 0510 b1 77 34 14 77 bc 1b 1a c5 7b 53 c9 00 b8 39 bd .w4.w....{S...9. 0520 67 4c 9a ce 3b 4b 15 6f 74 b9 ee 3d 91 b6 0e 73 gL..;K.ot..=...s 0530 14 3f 16 d4 42 1b 00 e4 37 63 7e 4b e6 52 04 ca .?..B...7c~K.R.. 0540 00 e6 ed 48 f7 92 80 58 43 17 01 76 52 14 9d b4 ...H...XC..vR... 0550 66 b0 af 59 75 86 12 96 31 3a ff 75 2b 8f fb e5 f..Yu...1:.u+... 0560 70 39 09 d4 32 3b 56 09 6d dc 38 90 43 ea bb 54 p9..2;V.m.8.C..T 0570 92 40 c9 e2 6d 8e d8 21 2c e9 5c 6b 13 aa f3 af [email protected]..!,.\k.... 0580 4e 56 07 63 24 19 24 1d ae 19 48 6e 71 fd d5 d8 NV.c$.$...Hnq... 0590 f7 b3 2a e7 d1 cd b0 b2 59 37 a8 c6 c7 0d 0d 18 ..*.....Y7...... 05a0 6e 0d ba 98 a5 92 8e 41 n......A No. Time Source Destination Protocol Length Info 2012 24.048455 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=74422 Ack=1259 Win=1002 Len=1448 TSval=541260 TSecr=727723 Frame 2012: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 74422, Ack: 1259, Len: 1448 Data (1448 bytes) 0000 95 f2 57 7b c7 61 4a ab fc 6e 01 5c ec 5c ab 88 ..W{.aJ..n.\.\.. 0010 a9 8f f8 28 32 b9 70 4b 2c 4b ff 1a b6 24 a7 6b ...(2.pK,K...$.k 0020 05 70 1c 12 59 0a 75 3a ab 1a d3 7d e6 76 01 fc .p..Y.u:...}.v.. 0030 a8 c8 5d d9 47 df f5 41 ef 1f 09 bc f5 c7 4f b1 ..].G..A......O. 0040 4c be 8d a1 f7 bc 06 e3 d7 2a 2d 39 d3 64 60 e5 L........*-9.d`. 0050 ed 4a 77 89 d2 04 1a 34 b6 bf 17 0a 88 80 c4 d4 .Jw....4........ 0060 25 d4 cb a2 b3 81 e0 83 2f d4 29 8d dd 38 44 18 %......./.)..8D. 0070 db b4 74 85 48 2e 1b 23 4e b0 48 93 49 a5 7d 6b ..t.H..#N.H.I.}k 0080 1d cb 69 58 4c 2f 95 0e 2f 3f d2 c1 92 f3 8a 10 ..iXL/../?...... 0090 ad 96 5c 38 68 4c 1d f7 a3 3e 00 db c6 6e 82 ff ..\8hL...>...n.. 00a0 32 1e 2d 8b fd 8e d4 7d 3e 89 0c 98 f3 2d 1d 8b 2.-....}>....-.. 00b0 64 91 06 07 7b cc 87 3d c7 22 c2 a2 d2 b9 61 fc d...{..=."....a. 00c0 27 96 8a 2e 12 c0 4f 83 c0 8a a8 de 37 a8 96 69 '.....O.....7..i 00d0 62 f4 e7 48 30 1a f6 2d ef ee 06 9b 75 c3 7b 36 b..H0..-....u.{6 00e0 71 60 07 12 33 0f 16 f5 c6 d3 40 6a da 43 25 1b q`[email protected]%. 00f0 23 d9 83 f6 ad ff 29 a6 9c 1a a7 29 49 d4 62 f9 #.....)....)I.b. 0100 1e 57 aa 66 71 e2 c9 a5 69 5c 2d 6d 39 9c 24 c7 .W.fq...i\-m9.$. 0110 cc 26 52 26 21 64 1a 87 4d 58 59 f9 2e 48 94 c9 .&R&!d..MXY..H.. 0120 39 41 01 d8 a0 40 2d 12 a5 cd 7d 36 9e 1f ce 89 9A...@-...}6.... 0130 0e c4 d2 03 b5 23 ac d1 d7 90 c3 3b c0 26 04 62 .....#.....;.&.b 0140 12 21 5d 24 ea 0a 55 9d 6e 2a 20 4b ae be 0d 83 .!]$..U.n* K.... 0150 1c 88 47 a4 78 5b 14 37 42 bb 47 40 88 bc f8 38 ..G.x[[email protected] 0160 0e 92 a0 a5 17 d1 7d 24 77 f6 27 f8 9c b7 5d 81 ......}$w.'...]. 0170 7e f9 d4 18 c1 cb 0e 79 4c 32 56 0d 30 db 8a 8e ~......yL2V.0... 0180 1e b7 18 58 be d3 78 da 84 cb d8 8c 6b c1 3a 95 ...X..x.....k.:. 0190 7b 42 9f 04 5a eb 52 22 80 e5 62 93 03 42 fb 74 {B..Z.R"..b..B.t 01a0 86 27 66 78 4c 52 87 63 75 18 e2 d7 d4 a9 29 04 .'fxLR.cu.....). 01b0 63 b5 fb b8 08 92 12 06 8d 3e bb 46 01 af 3a f3 c........>.F..:. 01c0 fa f9 cd 4e 3b 3d 1e 11 3c 47 e7 fd 79 db 67 42 ...N;=..<G..y.gB 01d0 ff 1e d3 d2 dd 40 83 81 16 81 b4 8b eb 41 9f 15 [email protected].. 01e0 7d e0 59 8b cc b6 45 35 da 3a e1 98 82 42 c1 d6 }.Y...E5.:...B.. 01f0 8d 6c 00 a2 71 6f ce ce 1c db 99 68 a5 47 56 66 .l..qo.....h.GVf 0200 91 90 60 30 d1 03 05 4e 07 7c 64 95 1a d4 8f 5b ..`0...N.|d....[ 0210 e1 98 3b 3e 4d db a4 50 1e af b3 91 09 81 19 87 ..;>M..P........ 0220 4c b3 5d 4d 9a 45 c7 1a df 85 53 07 e7 83 38 6d L.]M.E....S...8m 0230 06 4b 0c b1 a0 1b 79 fe 0d 53 2c a4 c8 f7 af c7 .K....y..S,..... 0240 48 37 7d 0f 2e bf 77 0f 51 be cf 7c a4 72 07 36 H7}...w.Q..|.r.6 0250 13 c2 53 ea db 24 06 1e 5c 39 49 4b de 3f f9 75 ..S..$..\9IK.?.u 0260 bc 97 1c ab 98 a6 35 52 37 fd 60 4c 41 36 bc 0b ......5R7.`LA6.. 0270 90 ce 2c 44 6b 68 9d fc 44 a7 a7 5c ef 30 50 86 ..,Dkh..D..\.0P. 0280 4c dc e9 47 a5 56 8e 7f b0 0c 6a 50 28 ba 87 23 L..G.V....jP(..# 0290 88 2f d5 3d 5a 3c 4c b4 2c e7 75 b1 59 f9 dc 58 ./.=Z<L.,.u.Y..X 02a0 6d 58 6f 87 1c 6a 0c c6 0d 4b 01 77 1b d6 39 ad mXo..j...K.w..9. 02b0 94 f0 a8 67 a2 21 db 98 fc f6 a2 9d 44 79 c7 9b ...g.!......Dy.. 02c0 99 f1 00 75 55 e6 32 9c f0 59 1d 37 ff dd cb 26 ...uU.2..Y.7...& 02d0 d6 32 47 c9 fb 96 3a ac 17 7f 34 15 86 78 4f 4b .2G...:...4..xOK 02e0 9e db 45 43 61 c8 84 87 1a 28 f7 65 38 b8 14 77 ..ECa....(.e8..w 02f0 38 1e a0 0e c2 eb dc 6b 87 2d cb c1 9f 4b 29 14 8......k.-...K). 0300 8e 2e 6a 2f 03 0c 3d 12 b4 44 85 56 89 d9 bf e5 ..j/..=..D.V.... 0310 ff fd cc 2d ff a2 1e a1 21 19 4b 06 4c 9f 97 70 ...-....!.K.L..p 0320 91 06 4b a1 75 e8 3c 19 25 33 95 5f 7d db b0 b0 ..K.u.<.%3._}... 0330 f0 da bf 60 4c c5 02 cb 7e 7f 89 f8 9f 15 d6 20 ...`L...~...... 0340 b3 ab 85 49 cd a7 a4 f7 68 99 2c 53 52 21 b8 1f ...I....h.,SR!.. 0350 16 d1 5c c7 9a 75 36 9a 55 26 36 52 8c d4 ad 77 ..\..u6.U&6R...w 0360 7d d6 22 34 7e dc 03 e5 db be a0 66 2e 52 46 74 }."4~......f.RFt 0370 e8 d4 6e 79 4b dd 7c 22 7b 20 9e c7 76 85 93 c9 ..nyK.|"{ ..v... 0380 a0 40 b3 50 0e ff 8b d9 b1 2f c4 24 2a d3 4d 11 [email protected]...../.$*.M. 0390 18 70 4c af 99 44 ad a3 dd 15 be 65 69 b1 e6 45 .pL..D.....ei..E 03a0 53 ef 5e 97 fb c5 0f 68 9d 88 53 3a f9 c6 6b 1c S.^....h..S:..k. 03b0 17 ae 70 8a 13 df cc a2 59 17 9a 83 3a ff 0f 76 ..p.....Y...:..v 03c0 22 72 72 e7 28 ab 0e 03 aa e7 85 07 83 bb 6d 6e "rr.(.........mn 03d0 c2 b8 70 48 dc 5e ce 06 9a 01 96 e6 36 f5 b5 13 ..pH.^......6... 03e0 7c 6f 32 ae 9d 06 9c 9d ad 34 6b 13 10 d7 f9 2c |o2......4k...., 03f0 38 62 ce fc 8e 47 78 c8 c7 0e 81 7e fe a1 a7 3c 8b...Gx....~...< 0400 1e a1 f6 82 cf 52 71 46 c1 14 76 d0 4d bf 04 15 .....RqF..v.M... 0410 5e 1a 6d 64 10 1d 07 c1 9a 3e ac 53 11 53 4e ce ^.md.....>.S.SN. 0420 c0 d1 6f e2 67 39 06 ca 88 09 4b 75 5f 42 51 45 ..o.g9....Ku_BQE 0430 f2 bc 47 10 6e b1 4e 6c 23 a6 81 ad 3e 8f d4 dd ..G.n.Nl#...>... 0440 b0 21 24 a7 ff a2 82 fd 16 a9 d7 2e fb 38 dc a3 .!$..........8.. 0450 aa 8a 26 61 3d 17 0e 81 58 76 5e b3 78 f0 ff 81 ..&a=...Xv^.x... 0460 3e 97 c5 16 56 84 53 96 cc 64 e0 a5 f7 45 0a cb >...V.S..d...E.. 0470 ad e6 cb c8 91 4a 33 df c5 50 68 4e 49 b7 30 b8 .....J3..PhNI.0. 0480 29 d8 b4 4d 36 66 2e 99 d4 e9 df 35 9b a8 03 8e )..M6f.....5.... 0490 ac 60 de d9 65 17 b8 58 f6 ea 3f c7 e2 83 2a 40 .`..e..X..?...*@ 04a0 1f 6d f3 8b c2 67 a9 a9 99 fb 2e 92 cc 5b ce 43 .m...g.......[.C 04b0 18 0d 5a df b5 d3 2f f2 cc 47 7d 19 a6 2f e2 1b ..Z.../..G}../.. 04c0 26 aa 58 fa 3c 72 17 0f e4 c3 3c 12 1e 34 e3 ce &.X.<r....<..4.. 04d0 5d c8 5f 05 38 2f ba 34 bb 7b ba d7 d4 0e 3e 40 ]._.8/.4.{....>@ 04e0 be 2c b4 20 3d f7 87 70 cd 0b 0b a6 16 9f 19 62 .,. =..p.......b 04f0 4a 7b 85 b7 c0 b2 51 d2 ba 62 87 36 f2 7f 86 dc J{....Q..b.6.... 0500 d5 14 a4 e3 25 52 c2 8a 08 32 1a 8c fc 34 a5 fb ....%R...2...4.. 0510 fa 9f b1 28 15 d3 1d a8 de 48 22 94 c3 9e 15 a2 ...(.....H"..... 0520 24 6f b6 30 aa 23 bb 8f c2 8d 49 5f 30 d2 07 dc $o.0.#....I_0... 0530 ec cd 22 60 6b 2b 84 de 1c 03 16 26 e4 0f a1 9e .."`k+.....&.... 0540 2d eb f8 b5 4e cc 9d 7a 85 16 97 0d 19 fa c4 37 -...N..z.......7 0550 ce e2 65 00 99 f0 dd 71 0a 7d 8e aa 95 da 8c dd ..e....q.}...... 0560 c0 2c b0 11 cd 33 9f c9 7a d0 16 8d 2e 74 da 38 .,...3..z....t.8 0570 63 14 4a cc 97 de 88 40 d8 a6 35 90 c1 82 9c 56 [email protected] 0580 87 5a b8 5e 45 b5 88 34 62 42 d8 cd 94 ef ce fb .Z.^E..4bB...... 0590 ea 5a 4a ce aa 03 c2 bd ab c1 01 31 00 5f 72 b3 .ZJ........1._r. 05a0 be ba 91 cb a1 d3 11 e5 ........ No. Time Source Destination Protocol Length Info 2013 24.048564 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=75870 Ack=1259 Win=1002 Len=1448 TSval=541260 TSecr=727723 Frame 2013: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 75870, Ack: 1259, Len: 1448 Data (1448 bytes) 0000 57 75 dd da 9d 05 81 18 e9 fa af 83 3b 62 4a e8 Wu..........;bJ. 0010 fc 76 ec 05 ad 82 39 ab 98 05 e8 d2 48 ab e1 a4 .v....9.....H... 0020 87 14 38 17 6c a6 a1 44 e1 b2 de 03 a0 ee 72 08 ..8.l..D......r. 0030 fd f1 f3 42 ab ba dd f5 b8 27 d2 97 ca a5 f8 09 ...B.....'...... 0040 1d d4 e3 c6 a7 b3 46 2e 71 7e c1 03 e2 6a b8 49 ......F.q~...j.I 0050 84 65 13 25 df 9e 5b 39 ed 83 fd 30 d3 a7 b5 7c .e.%..[9...0...| 0060 73 b1 8b 38 f1 de 9b 44 fd ac eb 1c 96 3c 5c a6 s..8...D.....<\. 0070 64 a7 29 cc a5 d1 ef 60 e3 57 ba a4 64 41 c2 23 d.)....`.W..dA.# 0080 3f c7 8e aa fd 8b 5e 06 ff cf 39 da 39 04 5d e1 ?.....^...9.9.]. 0090 6c 58 22 15 89 a5 d3 88 e8 fc 33 f0 7c 29 a4 82 lX".......3.|).. 00a0 51 11 e3 87 75 39 2c e1 39 dd 20 54 3f d9 4e f1 Q...u9,.9. T?.N. 00b0 83 28 19 73 69 88 94 07 eb 95 e2 02 e5 f2 cb 66 .(.si..........f 00c0 48 28 23 6e 6b 14 01 86 e3 99 86 43 b7 7a b9 ba H(#nk......C.z.. 00d0 9a 4e 2a f9 62 ab 16 ae 46 90 c0 a7 25 6a 9c aa .N*.b...F...%j.. 00e0 31 e8 17 db f7 5f 03 9f c7 c4 9d dc ab f6 c0 a8 1...._.......... 00f0 5c 06 a7 bd d6 02 4f 60 66 b8 22 ea 9e 49 77 fd \.....O`f."..Iw. 0100 ba 10 0b 0c eb 54 0f 38 ff 54 f7 e2 2c 4e 18 c2 .....T.8.T..,N.. 0110 81 41 bf 95 b8 33 93 68 0c fa 28 87 98 c3 a5 a9 .A...3.h..(..... 0120 87 e4 5d ff 32 7c a1 d4 58 f4 48 a2 55 41 67 c3 ..].2|..X.H.UAg. 0130 a3 9d 1e 98 70 89 64 f5 25 72 ef 3e 51 e2 fc cc ....p.d.%r.>Q... 0140 cf 16 7e 51 94 98 3c a1 ff 1d 93 23 b0 a1 21 1c ..~Q..<....#..!. 0150 eb 1d d7 42 95 67 48 8a 94 81 01 b5 e7 b5 27 c5 ...B.gH.......'. 0160 7c e9 b0 b7 70 d3 8a 6d f6 0a e8 54 e2 b9 75 e2 |...p..m...T..u. 0170 5e 94 f1 b7 cf 30 33 0d 26 10 ca ef 01 c0 4f 4b ^....03.&.....OK 0180 af e7 2d 24 a3 83 f1 4a ee 47 bb 23 7a cc bd 7f ..-$...J.G.#z... 0190 5f d6 2d 60 38 fe e9 16 c1 a3 0a ec 16 d8 f3 f7 _.-`8........... 01a0 44 33 b4 32 cb 1d 7e 1d bd 63 65 2b ea 93 86 c9 D3.2..~..ce+.... 01b0 5b 99 a4 af eb 43 7e 7a 65 17 1b 8e 1b 54 fc 33 [....C~ze....T.3 01c0 b0 5a f0 8f 7a 4f 8a be 0f 01 f6 de 4c 94 3d 9e .Z..zO......L.=. 01d0 22 4c 0d 9b 55 62 3d 2a 10 9d 37 89 36 81 0b c9 "L..Ub=*..7.6... 01e0 3f 3b 2d f8 c9 62 3b 61 46 76 82 99 30 0d d3 27 ?;-..b;aFv..0..' 01f0 d1 b5 b7 38 4f 4c 6b 1f eb 5f e8 64 8d 73 3b 1d ...8OLk.._.d.s;. 0200 6e 66 54 04 d6 b6 d7 82 d3 fc 0b 80 79 ec 11 2b nfT.........y..+ 0210 26 b0 4b a8 b7 9c f9 3c 16 10 92 bd 36 c4 b9 68 &.K....<....6..h 0220 3c a6 55 91 66 16 eb a4 75 05 b2 a1 cf 8a 09 60 <.U.f...u......` 0230 88 1c 12 41 a7 d1 3f d4 4e 66 7a f4 2b d6 a6 45 ...A..?.Nfz.+..E 0240 a0 30 2d 0f b2 d3 19 b3 f9 7c 04 56 30 f6 82 ce .0-......|.V0... 0250 de b9 4c 1d 9b c4 6e e0 c9 f2 f7 28 fc 03 b1 97 ..L...n....(.... 0260 a2 cc cd ec 0b 31 51 fb d3 a3 05 e8 7b 64 e5 1a .....1Q.....{d.. 0270 6c dd e5 43 53 d6 4a 72 94 0a ff 7c 89 a1 ca 28 l..CS.Jr...|...( 0280 80 d6 13 e6 bc 8a 72 4c 48 58 f1 08 f7 84 0a 59 ......rLHX.....Y 0290 14 ca 32 13 00 33 2a e0 d5 a4 b3 7f c7 54 89 67 ..2..3*......T.g 02a0 2e cf 9b e4 cc d5 2f e6 3f c5 25 08 2e 99 23 de ....../.?.%...#. 02b0 6c d5 c6 7c 38 83 f0 ef d6 66 a3 5d 15 bb 4a b2 l..|8....f.]..J. 02c0 4d f3 1e 20 b3 6f dc cb cd 3f 09 e7 1f cb 1d 28 M.. .o...?.....( 02d0 a8 db ba 13 62 ac 84 b7 36 d7 12 34 8a 52 cf 9a ....b...6..4.R.. 02e0 1e da 28 c3 ae 8a 32 52 f3 2a 98 5d b3 3e 1d 3f ..(...2R.*.].>.? 02f0 fd 27 73 a0 ea 16 bc 74 2f a3 f0 68 80 f3 0c 88 .'s....t/..h.... 0300 66 4c ae 8f af 5b af fb a2 a9 90 9c 6c aa c8 f9 fL...[......l... 0310 c5 03 f5 17 7b 16 7f b8 31 87 fd 93 63 3a d2 b8 ....{...1...c:.. 0320 15 2c 45 29 b3 47 b3 5d 1c 8e 46 78 dd d4 54 54 .,E).G.]..Fx..TT 0330 0e 3c 5f de b3 ea 9c ea ab 40 8e 20 bb 9f 23 b3 .<_......@. ..#. 0340 7e 19 91 8b a6 8e eb 0c 9f 07 9d ad 79 52 c9 84 ~...........yR.. 0350 61 d1 f3 72 7f 01 69 49 6d d4 20 b3 a9 2c fb 58 a..r..iIm. ..,.X 0360 2a 3e 74 2e 4e 1a e2 6f 79 80 cb 5d 85 1a 4c 29 *>t.N..oy..]..L) 0370 32 83 b7 91 f9 eb ea c5 67 47 3c ff 49 5e fd ae 2.......gG<.I^.. 0380 0d 1c d2 08 da 08 3a 9c e5 35 48 b3 57 1f a9 a7 ......:..5H.W... 0390 b2 76 be d6 0c 4a a4 dd f0 b7 54 42 27 68 90 0a .v...J....TB'h.. 03a0 62 33 0e fc 4c de 61 57 a4 c5 16 39 38 c6 c0 f7 b3..L.aW...98... 03b0 a5 41 e4 c5 c3 97 9e 03 97 bb 48 23 4b 03 11 a1 .A........H#K... 03c0 01 44 d0 19 00 39 6b 67 46 85 0f 41 d0 d9 d8 15 .D...9kgF..A.... 03d0 d4 ca 2b dd 72 85 e0 df bb f1 b1 2a 14 fd fa 6e ..+.r......*...n 03e0 e4 a4 2f 5e ca b8 99 9b fe d0 9c 20 9f 99 bd a1 ../^....... .... 03f0 bc fd bb 85 21 68 d6 21 93 99 98 40 4c 92 bc a6 ....!h.!...@L... 0400 7b 24 5b e0 40 67 a3 b5 03 5b 40 bf f8 39 33 5b {$[.@g...[@..93[ 0410 0a 4e 5f 93 8b f6 1f 18 ef 06 12 0e 12 31 ab 44 .N_..........1.D 0420 16 34 8c 09 cc 4c 94 c1 36 46 57 56 2d c6 be c1 .4...L..6FWV-... 0430 64 19 9a 32 be c3 c7 0b f8 48 52 7d b4 75 ce 8a d..2.....HR}.u.. 0440 0f e8 9b 7c ff 41 54 62 69 63 f1 a5 fc fb dc a5 ...|.ATbic...... 0450 5d 40 af a2 4c d0 09 6a c4 e0 11 e2 24 0f 6e c0 ]@..L..j....$.n. 0460 e3 31 be 98 01 8d a1 90 d9 bb ce bf 39 b8 0b ca .1..........9... 0470 05 dd ce 6a 9a 5b 48 76 69 1e 15 e6 84 72 86 cf ...j.[Hvi....r.. 0480 f3 a7 63 63 06 c4 66 ee c0 22 68 01 e1 5d 5f 59 ..cc..f.."h..]_Y 0490 84 f3 4f da 7c 63 6f a4 9e e7 79 0d 1d ac b5 88 ..O.|co...y..... 04a0 2e 31 8b f9 5e 6f 58 bc df c5 a0 18 af 34 f9 27 .1..^oX......4.' 04b0 3c c5 15 1d b9 73 0f 62 75 a7 50 ba fa 93 ff 72 <....s.bu.P....r 04c0 03 c3 71 72 a5 9b eb 6c 65 12 a5 39 60 8b 0b 88 ..qr...le..9`... 04d0 91 9e a8 5f c1 b1 b9 be 71 44 e1 44 7b 23 1e 4d ..._....qD.D{#.M 04e0 e0 35 55 4a ed 05 cf 74 d7 6e 16 4b bc f6 f5 6a .5UJ...t.n.K...j 04f0 18 95 d6 e1 f4 d2 50 aa eb ef e5 68 c6 d7 ad 90 ......P....h.... 0500 9b f2 20 66 18 d9 c5 25 45 f9 cd 41 cf b7 8a e2 .. f...%E..A.... 0510 6a 97 d1 ed f3 65 05 9f 7a 79 6d dc a0 38 d7 bd j....e..zym..8.. 0520 3b f4 46 89 c2 2c f3 68 fe c9 d4 fb 9a cd 02 67 ;.F..,.h.......g 0530 e9 da ca 27 18 cd 08 ce e4 6b e8 6b 33 38 05 c7 ...'.....k.k38.. 0540 30 72 49 51 4c f7 a4 55 c7 ea 73 c0 0e b7 b8 be 0rIQL..U..s..... 0550 b9 c8 a5 54 bd 67 a7 05 55 c1 a0 8c e5 90 cf 42 ...T.g..U......B 0560 9a 2c 76 0c 05 94 8c 3c 05 e5 4c 52 0d 8a 10 57 .,v....<..LR...W 0570 e2 58 f0 f3 f7 75 e7 b7 c0 92 19 89 86 da 4d 22 .X...u........M" 0580 40 d7 a2 62 88 30 79 b1 a2 f2 a7 da 3e d5 96 26 @..b.0y.....>..& 0590 90 f8 91 e9 a8 44 15 c4 bc 94 1d 11 a2 ab 48 47 .....D........HG 05a0 10 83 1a a1 73 39 d3 77 ....s9.w No. Time Source Destination Protocol Length Info 2014 24.048628 192.168.10.1 192.168.10.203 TCP 167 34433 > cds [PSH, ACK] Seq=77318 Ack=1259 Win=1002 Len=101 TSval=541260 TSecr=727723 Frame 2014: 167 bytes on wire (1336 bits), 167 bytes captured (1336 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 77318, Ack: 1259, Len: 101 Data (101 bytes) 0000 ba 37 9e 52 ff 18 94 51 e6 4f 2b f8 ed ac 03 47 .7.R...Q.O+....G 0010 06 1f 25 3c f2 7f ca fb 46 1f 4e 51 0f 62 4c 73 ..%<....F.NQ.bLs 0020 ba 3b 6b d4 d1 22 17 6d 1d 27 32 80 6a c1 7f ca .;k..".m.'2.j... 0030 bb d8 fe af 83 40 c5 d2 c4 0f 4d 63 95 81 50 d0 [email protected]. 0040 45 be 75 43 f5 6e 38 9c 87 4a 45 f0 0f df 07 85 E.uC.n8..JE..... 0050 96 31 bc 1e 57 e6 25 a0 09 52 74 51 5c 60 76 7b .1..W.%..RtQ\`v{ 0060 33 9c d6 bb c7 3.... No. Time Source Destination Protocol Length Info 2015 24.048688 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=1259 Ack=75870 Win=65535 Len=0 TSval=727723 TSecr=541260 Frame 2015: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1259, Ack: 75870, Len: 0 No. Time Source Destination Protocol Length Info 2016 24.048774 192.168.10.1 192.168.10.245 Syslog 270 LOCAL1.INFO: Oct 3 19:44:42 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2159 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 2016: 270 bytes on wire (2160 bits), 270 bytes captured (2160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:42 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2159 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 2017 24.048829 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=1259 Ack=77419 Win=65535 Len=0 TSval=727723 TSecr=541260 Frame 2017: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1259, Ack: 77419, Len: 0 No. Time Source Destination Protocol Length Info 2018 24.048909 192.168.10.1 192.168.10.203 TCP 903 34433 > cds [PSH, ACK] Seq=77419 Ack=1259 Win=1002 Len=837 TSval=541260 TSecr=727723 Frame 2018: 903 bytes on wire (7224 bits), 903 bytes captured (7224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 77419, Ack: 1259, Len: 837 Data (837 bytes) 0000 17 03 01 03 40 c2 82 c0 f3 2b 65 74 e4 d1 98 bf ....@....+et.... 0010 ba 01 96 43 66 58 5b 15 d3 06 08 2d ea f1 73 5c ...CfX[....-..s\ 0020 93 59 f8 53 82 ed 12 43 28 7a e7 77 0e c1 d2 bb .Y.S...C(z.w.... 0030 8a 33 52 cf 78 3b 43 a0 19 fa 2d 64 48 34 dd ee .3R.x;C...-dH4.. 0040 22 a5 e5 f6 de b1 9c 03 be 23 63 b8 c9 8d b1 43 "........#c....C 0050 68 2b 9d 2d 4c 39 43 fd b0 6f b1 61 3b ef af 5f h+.-L9C..o.a;.._ 0060 1f 30 c4 4c e4 14 68 00 bb c4 1d 5f e1 20 87 07 .0.L..h...._. .. 0070 32 ec ac bc f7 14 aa 19 2f 40 eb 1b 51 87 c5 ad 2......./@..Q... 0080 45 96 b7 3d c8 34 96 61 77 4c 66 a0 c2 28 1d 9d E..=.4.awLf..(.. 0090 d9 2e cb 1c 19 3c a4 67 5b b5 22 98 d1 2c cf 79 .....<.g[."..,.y 00a0 23 d8 a3 35 2d e9 27 14 28 e0 f4 e5 e2 61 a0 b0 #..5-.'.(....a.. 00b0 ae 2e 60 69 e9 3a a1 8a a7 4c 6f 14 41 81 fb 57 ..`i.:...Lo.A..W 00c0 98 05 3c 57 77 49 4a 5d 3c 27 2a 8a f3 f1 f2 f6 ..<WwIJ]<'*..... 00d0 55 56 1d 01 9c 8d 74 9a 3c 86 e8 fa 94 ae 9a 22 UV....t.<......" 00e0 27 38 3e 4f b3 54 7e 1b 76 84 32 e2 7c 41 f4 65 '8>O.T~.v.2.|A.e 00f0 1e 12 ed 9c 3e 5a 9f d2 3c 78 9a 41 84 43 f3 91 ....>Z..<x.A.C.. 0100 32 d2 ad 78 26 29 66 10 98 9b f7 25 fd b1 4f f0 2..x&)f....%..O. 0110 9a 7e c2 19 53 1a 4f 9b 61 87 20 0d 10 d7 ac ac .~..S.O.a. ..... 0120 fd 71 8c 2a 1d ca df 5e fb fa b6 2e 7f f8 29 f7 .q.*...^......). 0130 32 8b aa b9 23 5a c1 4b 8e 4c b4 83 c6 d9 7b 8d 2...#Z.K.L....{. 0140 13 87 04 2f 44 3a a5 1e 7f 3a 43 d2 c6 f7 00 c1 .../D:...:C..... 0150 c3 ec 98 64 5d d7 82 71 69 db a8 b3 cd 59 22 f3 ...d]..qi....Y". 0160 5a 04 27 2b 8b 3a b5 97 bd d8 da c4 c2 0f a2 9c Z.'+.:.......... 0170 cf 4d b6 af 40 48 ec 7d 18 59 c4 29 84 8e 61 40 .M..@H.}.Y.)..a@ 0180 e6 c4 14 14 fd 1b 20 67 3d 8e ed a7 10 0e 00 35 ...... g=......5 0190 00 5b bc 4d ab 23 55 13 11 dd 67 5b 78 c7 b2 d1 .[.M.#U...g[x... 01a0 74 61 fe cc 9e 8a c8 ef ae 21 85 17 88 51 cd ba ta.......!...Q.. 01b0 25 fb 72 a4 b6 11 aa 34 ba 10 d4 d5 2c 2e d3 37 %.r....4....,..7 01c0 9e 3b a6 17 f4 c2 e7 4d d2 05 bb 8f 07 96 26 f3 .;.....M......&. 01d0 c7 f6 41 4a 56 df ef 97 5b b4 c1 8a db 74 69 f2 ..AJV...[....ti. 01e0 66 5e 20 a4 d2 4c 8a e4 5f ca d8 98 e4 c7 5f 58 f^ ..L.._....._X 01f0 ee 44 e1 2f 33 98 a1 c4 2a dc fa 5e 50 f7 8c 01 .D./3...*..^P... 0200 51 80 fe b9 2c 11 a5 24 3e a2 0e 54 58 45 b2 00 Q...,..$>..TXE.. 0210 b7 57 3e 5e fb 23 e0 a6 0b cd 8a 7e 71 7f 4f ab .W>^.#.....~q.O. 0220 13 a1 9d 67 2b 41 f3 1f 0f 51 86 ef 13 83 95 65 ...g+A...Q.....e 0230 27 4d d9 f9 52 81 f5 54 6c 36 19 af 85 9e c2 fc 'M..R..Tl6...... 0240 b2 21 c4 6f 83 d4 dd ab 96 f4 25 5f 0e b9 67 33 .!.o......%_..g3 0250 69 ad d5 92 ce f1 22 af f8 46 73 63 61 2b 45 2c i....."..Fsca+E, 0260 9b 69 dd d2 cc 69 1b 8b b0 3b 67 a0 78 58 91 74 .i...i...;g.xX.t 0270 67 f1 bb b7 cb 8e 30 fa 4b f9 85 4d f5 97 12 f2 g.....0.K..M.... 0280 cc 3f f5 9d 63 ec 53 08 5e 7a bb 30 c8 78 cb a7 .?..c.S.^z.0.x.. 0290 da 42 9c 71 9d 3c 0f c6 a8 0b 73 65 18 1a 4f e6 .B.q.<....se..O. 02a0 10 84 a6 07 33 09 c5 0c 17 db 69 80 40 8f 81 b8 ....3.....i.@... 02b0 d1 48 ee 27 63 1e 11 b9 0d d2 f9 d0 45 55 0f 63 .H.'c.......EU.c 02c0 68 08 11 5f f7 29 46 07 5c 6f 0c c6 76 a0 04 34 h.._.)F.\o..v..4 02d0 3a c0 3b 4d db 92 7d d0 3c 1d 38 83 cb 8e 0f 60 :.;M..}.<.8....` 02e0 b0 6e 66 17 1f 3c 4a 82 5e 72 2e b0 a4 b8 d5 d2 .nf..<J.^r...... 02f0 bb 43 ba c0 64 d3 11 41 39 0e 01 b4 34 89 ad 4e .C..d..A9...4..N 0300 d5 02 61 44 e2 eb 1f cb 89 81 2f ea 29 ca 3c eb ..aD....../.).<. 0310 56 85 0e 85 9f 71 99 d9 59 aa 01 3c 61 5b f0 7b V....q..Y..<a[.{ 0320 51 c8 f1 c7 88 00 7d 53 e6 3b 71 de 85 5b cd 5a Q.....}S.;q..[.Z 0330 79 ff 5b 31 dd e5 01 c7 12 cd eb aa c8 40 e7 33 y.[[email protected] 0340 b6 47 37 6b dc .G7k. No. Time Source Destination Protocol Length Info 2019 24.048982 192.168.10.1 192.168.10.245 Syslog 286 LOCAL1.INFO: Oct 3 19:44:42 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2159 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 2019: 286 bytes on wire (2288 bits), 286 bytes captured (2288 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:42 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2159 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHAN No. Time Source Destination Protocol Length Info 2020 24.049049 192.168.10.1 192.168.10.245 Syslog 277 LOCAL1.INFO: Oct 3 19:44:42 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2159 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 2020: 277 bytes on wire (2216 bits), 277 bytes captured (2216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:42 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2159 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINAR No. Time Source Destination Protocol Length Info 2021 24.049135 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=78256 Ack=1259 Win=1002 Len=1448 TSval=541260 TSecr=727723 Frame 2021: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 78256, Ack: 1259, Len: 1448 Data (1448 bytes) 0000 17 03 01 03 50 c4 ec 6f 59 6c d4 dc 48 b9 e0 e7 ....P..oYl..H... 0010 97 7e 0f e7 43 16 2b 03 0f e9 fc 4e 60 e3 f3 51 .~..C.+....N`..Q 0020 68 89 ec ba 07 7a ef 3f 52 84 4a e6 6c 7f c2 73 h....z.?R.J.l..s 0030 c4 63 df 79 ce e2 42 5f 4a c1 5a 00 ae 3a 13 08 .c.y..B_J.Z..:.. 0040 17 bd eb 77 f4 3b 45 91 64 0e da 20 fc 0e 20 c8 ...w.;E.d.. .. . 0050 56 3a 6a 1f c4 93 66 7d 1a 61 c5 a0 62 ad da d7 V:j...f}.a..b... 0060 83 76 94 21 c6 c4 c0 b3 15 e3 56 f9 ca ea d3 1d .v.!......V..... 0070 0e 35 e5 10 2d 5b c9 4d 17 43 0d 49 12 b9 46 32 .5..-[.M.C.I..F2 0080 cc 49 c0 1e 4b 77 2f de 86 e4 7b 10 fb a2 33 c6 .I..Kw/...{...3. 0090 8b e4 52 df 3b dc 3b 0a b6 23 ed bd 5c c0 86 ae ..R.;.;..#..\... 00a0 df 35 81 82 a6 ea 57 ed 21 6c 18 de da 84 50 34 .5....W.!l....P4 00b0 b6 20 d5 5e c5 fe 48 bd c7 8d dd 2d 62 a8 3d 40 . .^..H....-b.=@ 00c0 2b 7d 1c 89 91 fa 77 8f 51 fc 6c b9 06 43 5f ec +}....w.Q.l..C_. 00d0 2d 81 7f 49 9e 6f 7c 15 94 92 72 95 1e ef a3 51 -..I.o|...r....Q 00e0 ef 2d 11 7a f9 c1 bc 43 21 2d 6c 7d 2c 63 ce 80 .-.z...C!-l},c.. 00f0 32 06 4f 72 ab 0b c1 de 94 13 b2 a8 e1 31 05 30 2.Or.........1.0 0100 1c d1 29 41 ec 29 96 e7 77 20 cb 37 91 26 e9 52 ..)A.)..w .7.&.R 0110 19 74 83 93 55 45 6b 11 22 49 d4 5a 48 1d 55 b7 .t..UEk."I.ZH.U. 0120 2c 43 87 0b dc 0e e2 8d fb 6c 0d 85 03 26 99 29 ,C.......l...&.) 0130 c1 5d 0a c7 16 22 e8 75 ed c5 33 56 e8 27 5b eb .]...".u..3V.'[. 0140 b8 25 53 3a 64 5b f5 93 14 11 2e fc 0f 24 17 70 .%S:d[.......$.p 0150 fd 7b cb 39 84 0c a5 b0 e0 c3 89 7d 44 4c da 4d .{.9.......}DL.M 0160 d0 ad ea e6 1c b2 a5 6d ee 7f bf 00 5e 42 b5 86 .......m....^B.. 0170 55 c6 f2 f6 d0 31 f4 39 f5 ec 3f 76 84 df 2b 8e U....1.9..?v..+. 0180 7b b3 59 3e 19 2b 55 43 54 1c c0 b8 2e 47 d6 af {.Y>.+UCT....G.. 0190 d1 b7 f1 44 26 ae da dc 3b 86 14 aa 7a 91 34 9e ...D&...;...z.4. 01a0 20 21 1e a9 1d 3f 1b 53 81 11 5d 15 ab 40 14 57 !...?.S..][email protected] 01b0 04 1f a0 2e be 53 4c d5 eb 97 87 3a b0 e7 6e ab .....SL....:..n. 01c0 c1 18 70 f3 ef f3 a1 6a f5 a8 8f 52 b5 a6 d8 4e ..p....j...R...N 01d0 44 43 ae ab 8f 63 e1 65 82 e1 cd a5 95 88 6f 68 DC...c.e......oh 01e0 cf 8d c7 3b 3e f6 e0 fa 32 e7 4b e6 9f 16 05 ad ...;>...2.K..... 01f0 08 54 69 c8 ca fe 16 f4 1c 32 36 54 d4 ec 3d 3d .Ti......26T..== 0200 9c 78 f6 ee 96 83 fe b8 c7 fd 78 d1 04 34 0a 6c .x........x..4.l 0210 4c 93 36 63 3c 88 73 18 ed 2e 50 a2 69 51 af 58 L.6c<.s...P.iQ.X 0220 29 a4 88 3c cd 91 4f 53 be ba 6f dc 4b 8d 00 7d )..<..OS..o.K..} 0230 20 33 ee 93 fa da b6 94 a9 ad 9a 07 d8 d4 28 a6 3............(. 0240 92 0d 1d 0f 41 7b a5 d2 f1 83 73 b8 4f b4 98 21 ....A{....s.O..! 0250 31 ee c0 ee 90 98 d8 6b f4 61 d0 0a df f4 17 76 1......k.a.....v 0260 da 88 9c 1e c6 50 32 cb aa bd 57 27 ee 5e cc 6a .....P2...W'.^.j 0270 ae 6e df ca a1 88 16 d1 65 fd ec d6 7c 39 e8 50 .n......e...|9.P 0280 92 af 37 46 23 e9 5c b8 e3 ad 0e 26 ec ee 65 da ..7F#.\....&..e. 0290 95 90 49 88 56 da 70 ef 1e 54 c5 6f 26 50 58 a8 ..I.V.p..T.o&PX. 02a0 7b d5 2c 8c eb 4c 43 c5 f4 f6 f8 f3 02 a5 89 71 {.,..LC........q 02b0 ed dc 40 35 ad a4 6a 73 22 db 56 79 ad 4f 6d 3c [email protected]".Vy.Om< 02c0 02 66 19 d6 91 30 83 e2 df ed e1 20 dd e1 ac f1 .f...0..... .... 02d0 61 ac d5 52 80 27 c9 27 0e 1f fc ca 50 9d 21 45 a..R.'.'....P.!E 02e0 48 3f dc 6b 33 7b b6 a0 08 43 7a 02 e2 2d 22 44 H?.k3{...Cz..-"D 02f0 e2 0e bd 68 c7 ea 2c 72 91 dc d0 77 f8 16 8b 0d ...h..,r...w.... 0300 3c d9 73 09 33 55 43 f4 d1 27 41 f5 81 cb 41 aa <.s.3UC..'A...A. 0310 e8 6e d3 cc df 03 3b 93 21 8e f0 1e ec fb d5 8c .n....;.!....... 0320 a9 c8 f5 94 6a 5f e7 66 1c a5 82 d7 ce 8f 15 26 ....j_.f.......& 0330 b6 ac b0 c9 ac 9a 76 cf 5f be 45 d5 9f 59 64 ba ......v._.E..Yd. 0340 04 b0 86 92 16 d5 e5 12 67 fa 7b cf 88 15 e2 80 ........g.{..... 0350 05 06 95 c5 70 17 03 01 03 40 3b 27 c8 a7 13 2d ....p....@;'...- 0360 f4 9b 4c c3 b6 ab 9e 96 06 13 9a f1 91 88 54 de ..L...........T. 0370 71 e5 5c a1 ed 12 1d ed ce b6 49 8b 01 2f 4a 47 q.\.......I../JG 0380 04 b8 ac 2e 20 c4 30 65 17 a8 64 d2 4e 1c 1d 6c .... .0e..d.N..l 0390 df d8 aa a2 52 2b 47 9f e8 3f 24 88 a3 11 73 cd ....R+G..?$...s. 03a0 04 a0 bf e8 f0 47 32 97 aa 24 84 ef f1 62 91 8f .....G2..$...b.. 03b0 73 de 1c 3b 16 8f d9 79 45 1e b2 bf f2 60 39 19 s..;...yE....`9. 03c0 43 a8 5c 02 91 83 3a be 4a 57 89 d4 a2 31 31 c9 C.\...:.JW...11. 03d0 16 49 6f 2d 91 81 a0 f5 9c cf 10 21 ea 96 63 c3 .Io-.......!..c. 03e0 30 d2 78 d2 91 0b fe 8b fb 2b 65 12 15 6a 57 0d 0.x......+e..jW. 03f0 5e 70 60 56 af 77 ab c6 0f f0 26 ce 78 d0 68 7f ^p`V.w....&.x.h. 0400 d2 e0 84 90 b8 6f 77 aa bc 42 4d 55 74 d2 c2 f5 .....ow..BMUt... 0410 aa e8 e8 df 4b 96 7d 08 58 e2 b1 85 81 58 2b aa ....K.}.X....X+. 0420 9f 99 5f 78 26 f4 cc 77 05 e0 d6 34 c0 1f 7b 7c .._x&..w...4..{| 0430 59 f7 80 9b 06 84 29 04 9b c1 22 eb b9 40 ef ba Y.....)..."..@.. 0440 28 39 ff d3 48 2c e2 9d d2 8a 63 57 25 aa 6d ee (9..H,....cW%.m. 0450 69 c6 c5 1b 0d 7b 09 5c a5 16 7f 87 23 94 bb 77 i....{.\....#..w 0460 30 9e 20 7e 03 64 70 a1 a6 bf b1 32 c8 df 42 64 0. ~.dp....2..Bd 0470 fc a7 6f 03 bb 74 f3 d4 c3 68 11 83 fd 25 46 0f ..o..t...h...%F. 0480 44 5d d5 52 93 3b 41 89 9e 99 88 50 e8 86 a3 87 D].R.;A....P.... 0490 08 19 99 6a 24 e4 8e bc 0c 8b ce 44 6d 3f 80 e4 ...j$......Dm?.. 04a0 c1 82 b3 b8 65 d0 56 b1 c6 31 89 e7 33 5c 25 b9 ....e.V..1..3\%. 04b0 0a 04 c4 d6 1f d3 10 45 99 b6 5f 58 4f d5 f6 e1 .......E.._XO... 04c0 9d 95 b5 39 0f b3 d0 ac c4 8e c0 69 c1 61 d9 74 ...9.......i.a.t 04d0 5d 93 44 7e 0a a9 65 19 33 a9 77 6a fd e5 39 88 ].D~..e.3.wj..9. 04e0 3f 61 38 42 57 21 98 32 6b 2e 2b 00 5d cd a2 bd ?a8BW!.2k.+.]... 04f0 fa 6a c8 b7 f5 9b 8a d1 08 ce 52 5d 94 87 95 14 .j........R].... 0500 b3 45 19 69 09 e8 66 15 50 87 a8 cf 7c 9d 95 a5 .E.i..f.P...|... 0510 a0 95 4c 14 2c 13 1c 40 f2 cd 5b be a7 92 3b 3e ..L.,..@..[...;> 0520 d6 7f 53 2b b9 6c 51 93 d1 32 32 b1 f6 38 23 1a ..S+.lQ..22..8#. 0530 25 8f f7 7d 2d a7 f9 13 77 ac d6 b3 db da 4a b5 %..}-...w.....J. 0540 bf b1 50 35 93 44 6f a2 3e 0b f3 1d 0d af 30 86 ..P5.Do.>.....0. 0550 d1 13 d4 3f 32 c4 48 ab 76 a6 93 d1 1f eb 50 79 ...?2.H.v.....Py 0560 20 67 6a 34 9d 21 00 59 4e 25 b6 19 63 90 2e a8 gj4.!.YN%..c... 0570 a2 0b d4 f1 6f 61 cc 1c b5 a6 c0 65 cd 10 f2 d6 ....oa.....e.... 0580 44 72 41 8e cf 5f 98 b0 3a 53 f8 dc 84 12 27 cc DrA.._..:S....'. 0590 00 9d dc 34 58 e2 be 5f a1 e1 da f2 63 d9 cc 19 ...4X.._....c... 05a0 e1 5e b1 b1 46 91 39 1a .^..F.9. No. Time Source Destination Protocol Length Info 2022 24.049216 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=1259 Ack=79704 Win=65535 Len=0 TSval=727723 TSecr=541260 Frame 2022: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1259, Ack: 79704, Len: 0 No. Time Source Destination Protocol Length Info 2023 24.049275 192.168.10.1 192.168.10.203 TCP 308 34433 > cds [PSH, ACK] Seq=79704 Ack=1259 Win=1002 Len=242 TSval=541261 TSecr=727723 Frame 2023: 308 bytes on wire (2464 bits), 308 bytes captured (2464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 79704, Ack: 1259, Len: 242 Data (242 bytes) 0000 9d 4b 1d 60 2e 3b 2e a6 26 2b 3e 74 bf c8 af 69 .K.`.;..&+>t...i 0010 30 00 ff 9b 87 09 14 8d 4c c6 49 60 55 96 1b 51 0.......L.I`U..Q 0020 55 d7 df d8 da ef 6f e8 1b d2 f6 96 52 1a bc d3 U.....o.....R... 0030 25 6f e6 67 f8 00 d2 15 e8 b4 f7 3c 0c 8b c4 99 %o.g.......<.... 0040 1b 71 a6 ab 06 d1 2d 9e 65 48 8e 5b 12 49 b9 31 .q....-.eH.[.I.1 0050 48 a2 a0 bc 52 0c c8 9b 60 88 9b be de 32 46 45 H...R...`....2FE 0060 ca 45 35 13 d7 3c d7 a5 be 4c 82 76 6a 03 4a 4c .E5..<...L.vj.JL 0070 3e 6d 8b c6 b0 ac cd d5 c8 c2 96 a7 36 4d 68 54 >m..........6MhT 0080 47 21 d2 8a 83 ca 00 44 c6 f9 55 44 6c 64 45 40 G!.....D..UDldE@ 0090 b8 7b fd 81 96 67 63 76 f6 ac 0a 7a 5d 01 ba 7a .{...gcv...z]..z 00a0 f2 d5 69 54 d1 9d 28 87 81 d5 b2 63 ff 4a 5f 47 ..iT..(....c.J_G 00b0 5f cc 4f aa 65 a1 a1 44 6b 15 0b f9 19 84 38 b9 _.O.e..Dk.....8. 00c0 f6 d7 04 3b 5b 17 4e 57 32 c3 89 a7 a2 e4 3f 42 ...;[.NW2.....?B 00d0 d4 44 3c a2 02 fe ee 74 96 1c 48 54 b0 ce 97 68 .D<....t..HT...h 00e0 23 72 10 05 52 28 82 19 1e d6 34 10 54 e4 f5 41 #r..R(....4.T..A 00f0 95 cb .. No. Time Source Destination Protocol Length Info 2024 24.049341 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:44:42 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2159 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 2024: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:42 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2159 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" No. Time Source Destination Protocol Length Info 2025 24.058615 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 2025: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2026 24.058646 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 2026: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2027 24.060837 192.168.10.1 192.168.10.245 Syslog 313 LOCAL1.INFO: Oct 3 19:44:42 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 186.220.53.138 7x.x.x.3 3302 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="ebjimaginative@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 2027: 313 bytes on wire (2504 bits), 313 bytes captured (2504 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:42 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 186.220.53.138 7x.x.x.3 3302 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default No. Time Source Destination Protocol Length Info 2028 24.134547 192.168.10.203 113.19.35.33 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 2028: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 113.19.35.33 (113.19.35.33) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2029 24.191543 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=1259 Ack=79946 Win=65293 Len=74 TSval=727724 TSecr=541261 Frame 2029: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1259, Ack: 79946, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 7d 16 f8 2f 31 fc e9 f4 29 26 65 .... }../1...)&e 0010 bf 2c cd c0 e4 0b b8 6c ad e2 ef f8 4b 60 4e 2e .,.....l....K`N. 0020 ce 01 cf 3e c8 17 03 01 00 20 2b 34 6b d4 d1 cc ...>..... +4k... 0030 9f 73 7d 36 77 33 a5 34 6a 08 05 42 a2 06 db e1 .s}6w3.4j..B.... 0040 e0 a9 a0 3a 99 75 99 c4 ee 25 ...:.u...% No. Time Source Destination Protocol Length Info 2030 24.191660 192.168.10.1 192.168.10.203 TCP 903 34433 > cds [PSH, ACK] Seq=79946 Ack=1333 Win=1002 Len=837 TSval=541296 TSecr=727724 Frame 2030: 903 bytes on wire (7224 bits), 903 bytes captured (7224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 79946, Ack: 1333, Len: 837 Data (837 bytes) 0000 17 03 01 03 40 77 15 2b 44 5f 46 38 9f 98 94 3e ....@w.+D_F8...> 0010 8d ef 53 e5 eb f2 46 b4 d4 5d 90 2d b5 a3 da a3 ..S...F..].-.... 0020 b4 be 4e 89 33 12 f6 a3 f9 13 21 3f ba b3 18 26 ..N.3.....!?...& 0030 6c 20 36 39 bc 11 61 15 a9 69 77 16 33 7a 40 a5 l 69..a..iw.3z@. 0040 fc e7 2c 1a 8b dd 94 2b 6c d0 6e 07 39 3b 76 5b ..,....+l.n.9;v[ 0050 b6 72 c7 ad ec 1e b5 19 d0 ca 43 84 56 2e f9 6c .r........C.V..l 0060 a0 78 d8 ab 13 ba 54 d1 6f a9 cd 03 35 67 3f 24 .x....T.o...5g?$ 0070 87 c6 c0 02 a0 00 43 2a 54 0d 8f 26 4a 38 bc 0b ......C*T..&J8.. 0080 d3 81 66 93 bb a2 fa 7b c3 1f 98 c6 23 84 db 35 ..f....{....#..5 0090 17 63 98 b9 e6 9a c7 b2 25 4e 72 18 08 32 f3 a0 .c......%Nr..2.. 00a0 0e d2 72 c1 58 2b 6e df 4b 92 9a 45 b9 ce f1 62 ..r.X+n.K..E...b 00b0 25 52 db 0d 32 f2 b9 ec c2 c9 9c 2f bd 45 fd 76 %R..2....../.E.v 00c0 7e b0 64 05 95 d6 9b dd a9 88 57 06 70 19 6d 54 ~.d.......W.p.mT 00d0 80 ca 69 8e fd 0d e9 fc ea a9 ae 23 91 f2 e8 56 ..i........#...V 00e0 63 72 cf 38 d8 91 24 d0 c3 1c 17 22 40 25 8c ee cr.8..$...."@%.. 00f0 9d 13 fc f5 72 84 af a3 50 10 69 99 95 42 79 bc ....r...P.i..By. 0100 b3 3f ca 65 3b 5d 5b c2 f2 f5 dc fe 94 e8 ac 44 .?.e;][........D 0110 84 3d f7 20 6a 58 e9 31 8e f1 0c fd 7b 6a 27 8e .=. jX.1....{j'. 0120 61 1f cf d1 99 63 d5 65 d5 68 1f 73 1d c5 a7 c0 a....c.e.h.s.... 0130 69 84 29 b3 40 ed ba 29 0d c0 15 91 54 32 83 42 i.).@..)....T2.B 0140 63 40 17 a9 b2 0f a9 1e c2 0b 55 af 89 3b d4 52 [email protected]..;.R 0150 46 42 8c 3a c4 55 80 77 f7 16 c7 6e db cc 79 f0 FB.:.U.w...n..y. 0160 ba 35 d8 86 12 ea 9e 12 f9 05 f4 83 ba 26 66 1f .5...........&f. 0170 e0 9f a6 1e d9 d2 75 40 2e 49 c2 52 bc ac 17 c3 [email protected].... 0180 a5 81 ed 86 d0 49 99 1a 36 5f 2f dd 60 cb 3b e2 .....I..6_/.`.;. 0190 ec 74 d9 4d 4b 2f b9 45 bb e3 9b 7b 04 9a 8f 86 .t.MK/.E...{.... 01a0 33 01 78 c7 b4 f7 da dd 12 bc 4c 56 c2 41 ec 63 3.x.......LV.A.c 01b0 1c d0 8c 82 38 f3 9f 25 d4 0d 90 c9 b1 ce 79 ab ....8..%......y. 01c0 1f 10 96 14 3e 57 ba 87 63 1e cf bb 4f a1 17 51 ....>W..c...O..Q 01d0 f2 ad 1f 9f c1 6c 98 0c 6a 2c 0e 8e 00 16 04 94 .....l..j,...... 01e0 b5 65 1f 45 da a0 e1 69 90 1c 5c 1c ce a6 e9 95 .e.E...i..\..... 01f0 98 fc 5a 66 61 d3 aa e7 3d 1a f3 28 af 76 4c 80 ..Zfa...=..(.vL. 0200 ad 39 d8 f2 77 4c 54 8c 5a f5 46 e4 c7 f5 83 e2 .9..wLT.Z.F..... 0210 8a 7b de ff f8 c0 37 9b 09 83 c4 7e 8e 43 f2 7b .{....7....~.C.{ 0220 25 30 88 34 cc 9f 09 18 a7 a0 25 62 76 cb cc 43 %0.4......%bv..C 0230 2d 96 75 48 f5 df 7b 37 44 29 55 40 a3 85 14 31 -.uH..{7D)[email protected] 0240 51 22 cb b1 d1 2c 56 ce 68 58 33 d9 72 07 9d 56 Q"...,V.hX3.r..V 0250 d4 e4 76 60 03 41 bc c6 49 87 d8 ae da a9 a8 91 ..v`.A..I....... 0260 18 f3 3d 40 98 40 b9 c2 1c f6 fa 58 d2 b0 fe cb ..=@[email protected].... 0270 63 52 a9 75 e0 5c bd f4 59 cd fe 9b fe b2 1f 8f cR.u.\..Y....... 0280 6e ed bd 31 99 9f 8b f0 c5 43 5e 58 c0 26 dc 68 n..1.....C^X.&.h 0290 fb 3c f0 06 5c 06 39 f9 47 6d 7a c2 eb 94 16 61 .<..\.9.Gmz....a 02a0 fa e8 e7 ad c2 c8 d5 1e 97 77 af 88 93 cc b0 58 .........w.....X 02b0 0e b2 97 d2 4f 60 7a 14 e4 21 43 25 5e 79 92 93 ....O`z..!C%^y.. 02c0 1c ac 58 0c d0 13 3f 59 13 c2 64 f8 a0 88 a1 53 ..X...?Y..d....S 02d0 b2 85 56 13 a6 7c cf 3d bc 5c 5e d2 6b 72 6e ae ..V..|.=.\^.krn. 02e0 50 44 b2 51 5b bc 4a c4 7d 14 49 a3 d7 1c d4 1c PD.Q[.J.}.I..... 02f0 94 f7 54 c5 13 a3 dd e0 ea d2 01 fb 4c 0b af f4 ..T.........L... 0300 97 e9 f6 98 04 bf 93 7d c2 23 73 59 c1 c3 6b 5a .......}.#sY..kZ 0310 d5 e1 d6 b9 f5 13 89 bf 5e 8f 2f 8c ac 4d 17 de ........^./..M.. 0320 e8 39 d5 d1 5d 58 ba 6f 07 8c 2e 51 f4 91 bd f2 .9..]X.o...Q.... 0330 41 c7 86 15 8d d6 9a 7c 65 e3 89 92 ab f5 ce c7 A......|e....... 0340 b1 2d f1 11 7c .-..| No. Time Source Destination Protocol Length Info 2031 24.194398 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=1333 Ack=80783 Win=64456 Len=74 TSval=727724 TSecr=541296 Frame 2031: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1333, Ack: 80783, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 f3 da 18 a8 3f 59 b8 ae 8f 0b 1e .... ....?Y..... 0010 52 a6 49 e3 93 f2 db 4a fe 80 6a f1 0d 32 24 7f R.I....J..j..2$. 0020 67 73 40 ae a6 17 03 01 00 20 73 46 8b fc de b9 gs@...... sF.... 0030 1d fe 74 ce f5 b4 9a 41 48 2b 03 bc ab 31 10 cc ..t....AH+...1.. 0040 fc d8 42 37 7b d5 67 54 44 2e ..B7{.gTD. No. Time Source Destination Protocol Length Info 2032 24.232320 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=80783 Ack=1407 Win=1002 Len=0 TSval=541307 TSecr=727724 Frame 2032: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 80783, Ack: 1407, Len: 0 No. Time Source Destination Protocol Length Info 2033 24.232399 192.168.10.203 192.168.10.1 TCP 288 cds > 34433 [PSH, ACK] Seq=1407 Ack=80783 Win=64456 Len=222 TSval=727724 TSecr=541307 Frame 2033: 288 bytes on wire (2304 bits), 288 bytes captured (2304 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1407, Ack: 80783, Len: 222 Data (222 bytes) 0000 17 03 01 00 20 3b 95 b2 84 8d 12 17 48 73 56 66 .... ;......HsVf 0010 99 a3 61 3e df ed f7 47 b8 fe 16 da bb 45 ab fc ..a>...G.....E.. 0020 e4 90 4f 14 17 17 03 01 00 20 14 da bd e5 fb c0 ..O...... ...... 0030 48 9f c5 eb 5e 41 b9 70 f6 d5 27 50 d9 10 76 5e H...^A.p..'P..v^ 0040 bc e6 d9 c7 ba 04 30 1f 3e 10 17 03 01 00 20 e1 ......0.>..... . 0050 87 a2 7b 5c 75 1c 6b 67 95 c4 b2 71 c6 a2 9b 91 ..{\u.kg...q.... 0060 df 61 20 1c ab 3e 32 78 a7 ff e7 2b f9 8e 71 17 .a ..>2x...+..q. 0070 03 01 00 20 b0 06 a5 22 7e 0e 56 a5 ea ef f0 ab ... ..."~.V..... 0080 53 a0 a1 d2 ff 3b 96 26 9a 9f 3b 05 a1 31 55 2a S....;.&..;..1U* 0090 94 08 25 0f 17 03 01 00 20 4e 1d 03 16 ff e6 ed ..%..... N...... 00a0 9d c6 5f ca 08 fe cb e5 4e 67 1e 52 67 24 7f 65 .._.....Ng.Rg$.e 00b0 42 6f 05 59 89 2c 82 d9 4b 17 03 01 00 20 db 7b Bo.Y.,..K.... .{ 00c0 ed d2 73 66 64 b7 6f 31 3e ca 49 34 8a e3 f1 fe ..sfd.o1>.I4.... 00d0 9c db c6 5d 59 34 b6 24 49 e8 f6 d9 ab 47 ...]Y4.$I....G No. Time Source Destination Protocol Length Info 2034 24.232449 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=80783 Ack=1629 Win=1002 Len=0 TSval=541307 TSecr=727724 Frame 2034: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 80783, Ack: 1629, Len: 0 No. Time Source Destination Protocol Length Info 2035 24.283099 186.220.53.138 192.168.10.207 TCP 60 mcs-fastmail > smtp [FIN, ACK] Seq=75 Ack=226 Win=93214 Len=0 Frame 2035: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 186.220.53.138 (186.220.53.138), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mcs-fastmail (3302), Dst Port: smtp (25), Seq: 75, Ack: 226, Len: 0 No. Time Source Destination Protocol Length Info 2036 24.283138 192.168.10.207 186.220.53.138 TCP 60 smtp > mcs-fastmail [ACK] Seq=226 Ack=76 Win=65461 Len=0 Frame 2036: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 186.220.53.138 (186.220.53.138) Transmission Control Protocol, Src Port: smtp (25), Dst Port: mcs-fastmail (3302), Seq: 226, Ack: 76, Len: 0 No. Time Source Destination Protocol Length Info 2037 24.283253 192.168.10.207 186.220.53.138 TCP 60 smtp > mcs-fastmail [FIN, ACK] Seq=226 Ack=76 Win=65461 Len=0 Frame 2037: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 186.220.53.138 (186.220.53.138) Transmission Control Protocol, Src Port: smtp (25), Dst Port: mcs-fastmail (3302), Seq: 226, Ack: 76, Len: 0 No. Time Source Destination Protocol Length Info 2038 24.283294 186.220.53.138 192.168.10.207 TCP 60 mcs-fastmail > smtp [ACK] Seq=76 Ack=227 Win=93214 Len=0 Frame 2038: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 186.220.53.138 (186.220.53.138), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mcs-fastmail (3302), Dst Port: smtp (25), Seq: 76, Ack: 227, Len: 0 No. Time Source Destination Protocol Length Info 2039 24.283500 192.168.10.1 192.168.10.245 Syslog 202 LOCAL1.INFO: Oct 3 19:44:42 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 186.220.53.138 7x.x.x.3 3302 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 2039: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:42 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 186.220.53.138 7x.x.x.3 3302 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 2040 24.299828 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 2040: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2041 24.299863 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 2041: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2042 24.596155 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2007963904, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2042: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2043 24.596179 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2007963904, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2043: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2044 24.596192 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2007963904, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2044: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2045 24.596204 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2007963904, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2045: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2046 24.616797 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3877044480, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2046: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2047 24.616818 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3877044480, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2047: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2048 24.616830 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3877044480, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2048: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2049 24.616842 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3877044480, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2049: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2050 24.666844 192.168.10.142 192.168.10.255 BROWSER 237 Browser Election Request Frame 2050: 237 bytes on wire (1896 bits), 237 bytes captured (1896 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 2051 24.667091 192.168.10.142 192.168.10.255 BROWSER 237 Browser Election Request Frame 2051: 237 bytes on wire (1896 bits), 237 bytes captured (1896 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 2052 24.672907 192.168.10.30 192.168.20.3 UDP 762 Source port: 34427 Destination port: apc-3052 Frame 2052: 762 bytes on wire (6096 bits), 762 bytes captured (6096 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (720 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 34 3a 32 30 0a 53 52 3d 31 42 0a =18:44:20.SR=1B. 0060 53 55 3d 37 42 31 32 46 35 33 35 0a 52 44 3d 43 SU=7B12F535.RD=C 0070 38 39 31 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 891.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 0a 34 8.7E=00.3E=001.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 2e 30 C=207.3.50=040.0 00c0 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 37 2f .43=025.2.78=07/ 00d0 32 35 2f 30 36 0a 36 41 3d 30 30 32 34 3a 0a 34 25/06.6A=0024:.4 00e0 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 20 0a 7=S.63=BAI_UPS . 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 36 33 0.38=00.6E=NS063 0120 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 37 2f 1005398 .6D=07/ 0130 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 2d 55 25/06.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 52 4d 20 58 PS RT 10000 RM X 0150 4c 0a 34 36 3d 35 39 2e 39 38 0a 34 44 3d 32 30 L.46=59.98.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 35 3d 7.3.4E=204.4.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 3d 31 00.42=218.1.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 33 2e 30 0a 32 46 3d 31 36 2e 33 33 C=033.0.2F=16.33 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 36 30 2e 30 31 3b 32 30 37 2e 33 0.09=60.01;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 0a 49 9=0.I0=2.I1=26.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a 49 38 5=0.I6=0.I7=1.I8 0250 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 0a 49 =Device 1.I9=0.I 0260 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d 30 0a A=Device 2.IB=0. 0270 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 30 0a IC=Relay 1.ID=0. 0280 53 48 3d 32 44 41 33 30 34 43 31 41 46 39 39 34 SH=2DA304C1AF994 0290 38 37 34 36 42 36 39 46 32 42 38 36 37 38 42 44 8746B69F2B8678BD 02a0 39 38 34 0a 4d 44 3d 30 63 64 61 33 62 65 31 63 984.MD=0cda3be1c 02b0 37 30 33 39 66 66 35 37 33 32 65 66 37 30 66 32 7039ff5732ef70f2 02c0 30 34 66 66 35 38 30 0a 3c 2f 42 4f 44 59 3e 0a 04ff580.</BODY>. No. Time Source Destination Protocol Length Info 2053 24.673024 192.168.10.30 192.168.20.3 UDP 762 Source port: 34427 Destination port: apc-3052 Frame 2053: 762 bytes on wire (6096 bits), 762 bytes captured (6096 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (720 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 34 3a 32 30 0a 53 52 3d 31 42 0a =18:44:20.SR=1B. 0060 53 55 3d 37 42 31 32 46 35 33 35 0a 52 44 3d 43 SU=7B12F535.RD=C 0070 38 39 31 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 891.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 0a 34 8.7E=00.3E=001.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 2e 30 C=207.3.50=040.0 00c0 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 37 2f .43=025.2.78=07/ 00d0 32 35 2f 30 36 0a 36 41 3d 30 30 32 34 3a 0a 34 25/06.6A=0024:.4 00e0 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 20 0a 7=S.63=BAI_UPS . 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 36 33 0.38=00.6E=NS063 0120 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 37 2f 1005398 .6D=07/ 0130 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 2d 55 25/06.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 52 4d 20 58 PS RT 10000 RM X 0150 4c 0a 34 36 3d 35 39 2e 39 38 0a 34 44 3d 32 30 L.46=59.98.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 35 3d 7.3.4E=204.4.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 3d 31 00.42=218.1.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 33 2e 30 0a 32 46 3d 31 36 2e 33 33 C=033.0.2F=16.33 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 36 30 2e 30 31 3b 32 30 37 2e 33 0.09=60.01;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 0a 49 9=0.I0=2.I1=26.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a 49 38 5=0.I6=0.I7=1.I8 0250 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 0a 49 =Device 1.I9=0.I 0260 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d 30 0a A=Device 2.IB=0. 0270 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 30 0a IC=Relay 1.ID=0. 0280 53 48 3d 32 44 41 33 30 34 43 31 41 46 39 39 34 SH=2DA304C1AF994 0290 38 37 34 36 42 36 39 46 32 42 38 36 37 38 42 44 8746B69F2B8678BD 02a0 39 38 34 0a 4d 44 3d 30 63 64 61 33 62 65 31 63 984.MD=0cda3be1c 02b0 37 30 33 39 66 66 35 37 33 32 65 66 37 30 66 32 7039ff5732ef70f2 02c0 30 34 66 66 35 38 30 0a 3c 2f 42 4f 44 59 3e 0a 04ff580.</BODY>. No. Time Source Destination Protocol Length Info 2054 24.673116 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:15:25 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS1/34427 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 2054: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:15:25 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS1/34427 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 2055 24.734542 192.168.10.104 192.168.10.255 BROWSER 237 Browser Election Request Frame 2055: 237 bytes on wire (1896 bits), 237 bytes captured (1896 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 2056 24.796317 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.73? Tell 192.168.10.226 Frame 2056: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2057 24.796351 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.73? Tell 192.168.10.226 Frame 2057: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2058 24.796366 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 2058: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2059 24.796377 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 2059: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2060 24.796395 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 2060: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2061 24.796406 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 2061: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2062 24.796416 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 2062: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2063 24.796426 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 2063: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2064 24.796536 192.168.10.46 192.168.10.245 Syslog 214 LOCAL4.WARNING: Oct 03 2011 19:15:25 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n Frame 2064: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:15:25 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n No. Time Source Destination Protocol Length Info 2065 24.796549 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 2065: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2066 24.796560 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 2066: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2067 24.796570 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 2067: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2068 24.796588 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 2068: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2069 24.796623 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 2069: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2070 24.796633 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 2070: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2071 24.796644 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 2071: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2072 24.796667 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 2072: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2073 24.796678 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 2073: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2074 24.796688 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 2074: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2075 24.796699 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 2075: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2076 24.796709 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 2076: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2077 24.796719 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 2077: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2078 24.796729 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 2078: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2079 24.796739 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 2079: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2080 24.796749 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 2080: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2081 24.796770 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 2081: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2082 24.796780 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 2082: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2083 24.796790 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 2083: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2084 24.796801 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 2084: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2085 24.796816 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 2085: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2086 24.796826 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 2086: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2087 24.796840 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 2087: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2088 24.796850 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 2088: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2089 24.796861 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 2089: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2090 24.796871 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 2090: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2091 24.796881 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 2091: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2092 24.796904 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 2092: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2093 24.796915 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 2093: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2094 24.796925 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 2094: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2095 24.796935 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 2095: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2096 24.796950 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 2096: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2097 24.796963 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 2097: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2098 24.796973 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 2098: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2099 24.796987 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 2099: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2100 24.797001 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 2100: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2101 24.797014 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 2101: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2102 24.797024 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 2102: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2103 24.797037 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 2103: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2104 24.797048 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 2104: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2105 24.797058 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 2105: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2106 24.797068 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 2106: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2107 24.797079 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 2107: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2108 24.797089 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 2108: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2109 25.193747 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 2109: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2110 25.315299 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 2110: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2111 25.418288 192.168.10.207 206.51.26.33 TCP 65 embrace-dp-c > hp-pxpib [PSH, ACK] Seq=1 Ack=1 Win=65034 Len=11 Frame 2111: 65 bytes on wire (520 bits), 65 bytes captured (520 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.51.26.33 (206.51.26.33) Transmission Control Protocol, Src Port: embrace-dp-c (3198), Dst Port: hp-pxpib (3101), Seq: 1, Ack: 1, Len: 11 Data (11 bytes) 0000 01 fc 00 00 00 05 49 00 00 12 37 ......I...7 No. Time Source Destination Protocol Length Info 2112 25.443410 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 2112: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2113 25.558494 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 2113: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2114 25.558527 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 2114: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2115 25.565880 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 2115: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2116 25.611641 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2024741120, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2116: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2117 25.611665 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2024741120, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2117: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2118 25.611678 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2024741120, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2118: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2119 25.611690 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2024741120, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2119: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2120 25.632591 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3893821696, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2120: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2121 25.632609 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3893821696, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2121: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2122 25.632621 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3893821696, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2122: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2123 25.632632 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3893821696, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2123: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2124 25.641762 192.168.10.220 202.12.29.25 DNS 85 Standard query PTR 33.35.19.113.in-addr.arpa Frame 2124: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 202.12.29.25 (202.12.29.25) User Datagram Protocol, Src Port: 49223 (49223), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 2125 25.683893 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 76.214.88.200.in-addr.arpa Frame 2125: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 60690 (60690), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 2126 25.734471 192.168.10.104 192.168.10.255 BROWSER 237 Browser Election Request Frame 2126: 237 bytes on wire (1896 bits), 237 bytes captured (1896 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 2127 25.769299 65.32.1.65 192.168.10.246 DNS 125 Standard query response PTR tdev214-76.codetel.net.do Frame 2127: 125 bytes on wire (1000 bits), 125 bytes captured (1000 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 60690 (60690) Domain Name System (response) No. Time Source Destination Protocol Length Info 2128 25.772213 Watchgua_3c:4c:d8 Dell_44:d0:9e ARP 60 Who has 192.168.10.246? Tell 192.168.10.1 Frame 2128: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2129 25.772325 Dell_44:d0:9e Watchgua_3c:4c:d8 ARP 60 192.168.10.246 is at 84:2b:2b:44:d0:9e Frame 2129: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2130 25.807120 192.168.10.246 65.32.1.65 DNS 85 Standard query PTR 1.64.187.188.in-addr.arpa Frame 2130: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 50819 (50819), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 2131 25.884084 202.12.29.25 192.168.10.220 DNS 142 Standard query response Frame 2131: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 202.12.29.25 (202.12.29.25), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 49223 (49223) Domain Name System (response) No. Time Source Destination Protocol Length Info 2132 25.928533 190.42.139.241 192.168.10.207 TCP 62 23580 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 2132: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23580 (23580), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 2133 25.928605 192.168.10.207 190.42.139.241 TCP 62 smtp > 23580 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 2133: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23580 (23580), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 2134 26.056782 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 2134: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2135 26.056813 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 2135: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2136 26.207936 206.51.26.33 192.168.10.207 TCP 65 hp-pxpib > embrace-dp-c [PSH, ACK] Seq=1 Ack=12 Win=64726 Len=11 Frame 2136: 65 bytes on wire (520 bits), 65 bytes captured (520 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.51.26.33 (206.51.26.33), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: hp-pxpib (3101), Dst Port: embrace-dp-c (3198), Seq: 1, Ack: 12, Len: 11 Data (11 bytes) 0000 02 fd 00 00 00 05 49 00 00 12 37 ......I...7 No. Time Source Destination Protocol Length Info 2137 26.415083 192.168.10.207 206.51.26.33 TCP 60 embrace-dp-c > hp-pxpib [ACK] Seq=12 Ack=12 Win=65023 Len=0 Frame 2137: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.51.26.33 (206.51.26.33) Transmission Control Protocol, Src Port: embrace-dp-c (3198), Dst Port: hp-pxpib (3101), Seq: 12, Ack: 12, Len: 0 No. Time Source Destination Protocol Length Info 2138 26.473405 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:15:27 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 2138: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:15:27 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 2139 26.498503 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2139: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 267401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2140 26.498544 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2140: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 268801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2141 26.498574 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2141: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 270201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2142 26.498604 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2142: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 271601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2143 26.498634 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2143: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 273001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2144 26.498663 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2144: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 274401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2145 26.498697 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2145: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 275801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2146 26.498734 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2146: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 277201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2147 26.498786 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=271601 Win=65535 Len=0 Frame 2147: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 271601, Len: 0 No. Time Source Destination Protocol Length Info 2148 26.498816 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2148: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 278601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2149 26.498858 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2149: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 280001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2150 26.498889 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2150: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 281401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2151 26.498929 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2151: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 282801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2152 26.498970 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=277201 Win=65535 Len=0 Frame 2152: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 277201, Len: 0 No. Time Source Destination Protocol Length Info 2153 26.498999 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2153: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 284201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2154 26.499029 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2154: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 285601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2155 26.499061 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2155: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 287001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2156 26.499105 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=281401 Win=64135 Len=0 Frame 2156: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 281401, Len: 0 No. Time Source Destination Protocol Length Info 2157 26.499135 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2157: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 288401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2158 26.499165 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2158: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 289801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2159 26.499196 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2159: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 291201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2160 26.499225 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2160: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 292601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2161 26.499261 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=284201 Win=64135 Len=0 Frame 2161: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 284201, Len: 0 No. Time Source Destination Protocol Length Info 2162 26.499289 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2162: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 294001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2163 26.499325 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=287001 Win=65535 Len=0 Frame 2163: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 287001, Len: 0 No. Time Source Destination Protocol Length Info 2164 26.499360 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=289801 Win=64135 Len=0 Frame 2164: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 289801, Len: 0 No. Time Source Destination Protocol Length Info 2165 26.499389 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2165: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 295401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2166 26.499421 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2166: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 296801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2167 26.499464 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=292601 Win=61335 Len=0 Frame 2167: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 292601, Len: 0 No. Time Source Destination Protocol Length Info 2168 26.499494 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2168: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 298201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2169 26.499524 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2169: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 299601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2170 26.499561 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=295401 Win=58535 Len=0 Frame 2170: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 295401, Len: 0 No. Time Source Destination Protocol Length Info 2171 26.499591 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2171: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 301001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2172 26.499621 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2172: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 302401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2173 26.499658 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=299601 Win=54335 Len=0 Frame 2173: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 299601, Len: 0 No. Time Source Destination Protocol Length Info 2174 26.499687 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2174: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 303801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2175 26.499727 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2175: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 305201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2176 26.499763 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2176: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 306601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2177 26.499796 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2177: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 308001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2178 26.499834 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=303801 Win=50135 Len=0 Frame 2178: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 303801, Len: 0 No. Time Source Destination Protocol Length Info 2179 26.499864 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2179: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 309401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2180 26.499906 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2180: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 310801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2181 26.499947 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=306601 Win=47335 Len=0 Frame 2181: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 306601, Len: 0 No. Time Source Destination Protocol Length Info 2182 26.499976 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2182: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 312201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2183 26.500005 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2183: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 313601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2184 26.500041 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=309401 Win=44535 Len=0 Frame 2184: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 309401, Len: 0 No. Time Source Destination Protocol Length Info 2185 26.500070 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2185: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 315001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2186 26.500105 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=312201 Win=41735 Len=0 Frame 2186: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 312201, Len: 0 No. Time Source Destination Protocol Length Info 2187 26.500134 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2187: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 316401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2188 26.500163 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2188: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 317801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2189 26.500206 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=315001 Win=38935 Len=0 Frame 2189: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 315001, Len: 0 No. Time Source Destination Protocol Length Info 2190 26.500237 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 2190: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 319201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 2191 26.500274 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=315001 Win=42695 Len=0 Frame 2191: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 315001, Len: 0 No. Time Source Destination Protocol Length Info 2192 26.500311 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=319201 Win=64135 Len=0 Frame 2192: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 319201, Len: 0 No. Time Source Destination Protocol Length Info 2193 26.500346 192.168.10.221 24.143.205.163 TCP 60 [TCP Dup ACK 2192#1] 4795 > http [ACK] Seq=3042 Ack=319201 Win=64135 Len=0 Frame 2193: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 319201, Len: 0 No. Time Source Destination Protocol Length Info 2194 26.500380 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=320601 Win=65535 Len=0 Frame 2194: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 320601, Len: 0 No. Time Source Destination Protocol Length Info 2195 26.500396 Watchgua_3c:4c:d8 Dell_80:27:ab ARP 60 Who has 192.168.10.221? Tell 192.168.10.1 Frame 2195: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2196 26.500406 Dell_80:27:ab Watchgua_3c:4c:d8 ARP 60 192.168.10.221 is at 00:22:19:80:27:ab Frame 2196: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) [Duplicate IP address detected for 192.168.10.221 (00:22:19:80:27:ab) - also in use by 00:22:19:80:27:ad (frame 195)] Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2197 26.627190 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2041518336, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2197: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2198 26.627214 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2041518336, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2198: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2199 26.627227 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2041518336, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2199: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2200 26.627240 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2041518336, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2200: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2201 26.648038 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3910598912, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2201: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2202 26.648060 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3910598912, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2202: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2203 26.648072 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3910598912, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2203: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2204 26.648084 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3910598912, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2204: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2205 26.734533 192.168.10.104 192.168.10.255 BROWSER 237 Browser Election Request Frame 2205: 237 bytes on wire (1896 bits), 237 bytes captured (1896 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 2206 26.795800 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 2206: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2207 26.795831 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 2207: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2208 26.806562 192.168.10.220 208.67.222.222 DNS 85 Standard query PTR 1.64.187.188.in-addr.arpa Frame 2208: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 65258 (65258), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 2209 26.824145 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 4 Port 48 TTL = 120 Frame 2209: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 2210 27.002007 192.168.10.101 192.168.10.255 BROWSER 243 Host Announcement DHILL360XP, Workstation, Server, NT Workstation, Potential Browser Frame 2210: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_8e:d0:64 (00:23:ae:8e:d0:64), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.101 (192.168.10.101), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 2211 27.002249 192.168.10.101 192.168.10.255 BROWSER 243 Host Announcement DHILL360XP, Workstation, Server, NT Workstation, Potential Browser Frame 2211: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_8e:d0:64 (00:23:ae:8e:d0:64), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.101 (192.168.10.101), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 2212 27.166991 192.168.10.142 192.168.10.255 NBNS 110 Registration NB WORKGROUP<1d> Frame 2212: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2213 27.167203 Dell_b4:34:6b Broadcast ARP 42 Who has 192.168.10.142? Tell 192.168.10.104 Frame 2213: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2214 27.167328 192.168.10.142 192.168.10.255 NBNS 110 Registration NB WORKGROUP<1d> Frame 2214: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2215 27.193780 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 2215: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2216 27.226131 208.67.222.222 192.168.10.220 DNS 140 Standard query response PTR pppoe-188-187-64-1.volgograd.ertelecom.ru Frame 2216: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 65258 (65258) Domain Name System (response) No. Time Source Destination Protocol Length Info 2217 27.233210 182.178.75.135 192.168.10.207 SMTP 93 C: MAIL FROM: <faith.arnold@xxxxxxxxxxx> Frame 2217: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gdbremote (2159), Dst Port: smtp (25), Seq: 18, Ack: 313, Len: 39 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2218 27.233486 192.168.10.207 182.178.75.135 SMTP 103 S: 250 2.1.0 [email protected] OK Frame 2218: 103 bytes on wire (824 bits), 103 bytes captured (824 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: gdbremote (2159), Seq: 313, Ack: 57, Len: 49 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2219 27.233530 182.178.75.135 192.168.10.207 TCP 60 gdbremote > smtp [ACK] Seq=57 Ack=362 Win=93078 Len=0 Frame 2219: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gdbremote (2159), Dst Port: smtp (25), Seq: 57, Ack: 362, Len: 0 No. Time Source Destination Protocol Length Info 2220 27.251339 192.168.10.220 208.67.222.222 DNS 85 Standard query PTR 63.33.132.24.in-addr.arpa Frame 2220: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 51119 (51119), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 2221 27.315181 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 2221: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2222 27.400527 208.67.222.222 192.168.10.220 DNS 121 Standard query response PTR j33063.upc-j.chello.nl Frame 2222: 121 bytes on wire (968 bits), 121 bytes captured (968 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 51119 (51119) Domain Name System (response) No. Time Source Destination Protocol Length Info 2223 27.411535 192.168.10.220 208.67.222.222 DNS 85 Standard query PTR 102.22.47.92.in-addr.arpa Frame 2223: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 58817 (58817), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 2224 27.443396 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 2224: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2225 27.456889 208.67.222.222 192.168.10.220 DNS 85 Standard query response, No such name Frame 2225: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 58817 (58817) Domain Name System (response) No. Time Source Destination Protocol Length Info 2226 27.457443 192.168.10.203 92.47.22.102 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 2226: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 92.47.22.102 (92.47.22.102) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2227 27.547903 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 2227: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2228 27.547934 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 2228: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2229 27.565815 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 2229: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2230 27.642864 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2058295552, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2230: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2231 27.642889 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2058295552, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2231: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2232 27.642902 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2058295552, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2232: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2233 27.642914 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2058295552, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2233: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2234 27.663830 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3927376128, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2234: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2235 27.663852 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3927376128, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2235: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2236 27.663865 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3927376128, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2236: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2237 27.663877 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3927376128, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2237: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2238 27.734573 192.168.10.104 192.168.10.255 BROWSER 237 Browser Election Request Frame 2238: 237 bytes on wire (1896 bits), 237 bytes captured (1896 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 2239 27.816722 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-07.geo.kaspersky.com Frame 2239: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 62086 (62086), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 2240 27.816894 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-07.geo.kaspersky.com Frame 2240: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 62086 (62086), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 2241 27.919952 192.168.10.142 192.168.10.255 NBNS 110 Registration NB WORKGROUP<1d> Frame 2241: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2242 27.920228 192.168.10.142 192.168.10.255 NBNS 110 Registration NB WORKGROUP<1d> Frame 2242: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2243 27.954484 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=1303 Ack=64266 Win=17777 Len=0 Frame 2243: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1303, Ack: 64266, Len: 0 No. Time Source Destination Protocol Length Info 2244 27.954519 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 2243#1] smtp > 9428 [ACK] Seq=1303 Ack=64266 Win=17777 Len=0 Frame 2244: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1303, Ack: 64266, Len: 0 No. Time Source Destination Protocol Length Info 2245 27.954555 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2245: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 65508, Ack: 1303, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2246 27.954585 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2246: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 66888, Ack: 1303, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2247 27.954616 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2247: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 68268, Ack: 1303, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2248 27.954646 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2248: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 69648, Ack: 1303, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2249 27.954677 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2249: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 71028, Ack: 1303, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2250 27.954709 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 2243#2] smtp > 9428 [ACK] Seq=1303 Ack=64266 Win=17777 Len=0 Frame 2250: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1303, Ack: 64266, Len: 0 No. Time Source Destination Protocol Length Info 2251 27.954740 192.168.10.207 206.225.164.188 SMTP 264 S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 2251: 264 bytes on wire (2112 bits), 264 bytes captured (2112 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1303, Ack: 64266, Len: 210 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2252 27.954770 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 2251#1] smtp > 9428 [ACK] Seq=1513 Ack=64266 Win=17777 Len=0 Frame 2252: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1513, Ack: 64266, Len: 0 No. Time Source Destination Protocol Length Info 2253 27.954799 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 2251#2] smtp > 9428 [ACK] Seq=1513 Ack=64266 Win=17777 Len=0 Frame 2253: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1513, Ack: 64266, Len: 0 No. Time Source Destination Protocol Length Info 2254 27.954828 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=72408 Ack=1513 Win=46615 Len=0 Frame 2254: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 72408, Ack: 1513, Len: 0 No. Time Source Destination Protocol Length Info 2255 27.954859 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 2251#3] smtp > 9428 [ACK] Seq=1513 Ack=64266 Win=17777 Len=0 Frame 2255: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1513, Ack: 64266, Len: 0 No. Time Source Destination Protocol Length Info 2256 27.954888 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 2251#4] smtp > 9428 [ACK] Seq=1513 Ack=64266 Win=17777 Len=0 Frame 2256: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1513, Ack: 64266, Len: 0 No. Time Source Destination Protocol Length Info 2257 27.954920 206.225.164.188 192.168.10.207 SMTP 1296 [TCP Fast Retransmission] C: DATA fragment, 1242 bytes Frame 2257: 1296 bytes on wire (10368 bits), 1296 bytes captured (10368 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 64266, Ack: 1513, Len: 1242 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2258 27.954959 206.225.164.188 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 2258: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 65508, Ack: 1513, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2259 27.954989 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=1513 Ack=72408 Win=9635 Len=0 Frame 2259: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1513, Ack: 72408, Len: 0 No. Time Source Destination Protocol Length Info 2260 27.955020 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 2259#1] smtp > 9428 [ACK] Seq=1513 Ack=72408 Win=9635 Len=0 Frame 2260: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1513, Ack: 72408, Len: 0 No. Time Source Destination Protocol Length Info 2261 27.955050 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2261: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 72408, Ack: 1513, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2262 27.955083 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2262: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 73788, Ack: 1513, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2263 27.955159 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=1513 Ack=75168 Win=6875 Len=0 Frame 2263: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1513, Ack: 75168, Len: 0 No. Time Source Destination Protocol Length Info 2264 27.955243 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2264: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 75168, Ack: 1513, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2265 27.955277 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2265: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 76548, Ack: 1513, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2266 27.955353 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=1513 Ack=77928 Win=4115 Len=0 Frame 2266: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1513, Ack: 77928, Len: 0 No. Time Source Destination Protocol Length Info 2267 27.955453 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2267: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 77928, Ack: 1513, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2268 27.955483 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2268: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 79308, Ack: 1513, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2269 27.955517 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2269: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 80688, Ack: 1513, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2270 27.955548 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=1513 Ack=82043 Win=0 Len=0 Frame 2270: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1513, Ack: 82043, Len: 0 No. Time Source Destination Protocol Length Info 2271 27.972249 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:15:28 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 2271: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:15:28 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 2272 27.974559 192.168.10.185 192.168.10.142 VNC 111 [TCP Retransmission] Authentication result Frame 2272: 111 bytes on wire (888 bits), 111 bytes captured (888 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 789, Ack: 826, Len: 57 Virtual Network Computing No. Time Source Destination Protocol Length Info 2273 27.992366 206.225.164.186 192.168.10.207 TCP 60 [TCP Dup ACK 1947#1] 23308 > smtp [ACK] Seq=184398 Ack=1975 Win=46615 Len=0 Frame 2273: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 184398, Ack: 1975, Len: 0 No. Time Source Destination Protocol Length Info 2274 27.992404 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=1975 Ack=183962 Win=0 Len=0 Frame 2274: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1975, Ack: 183962, Len: 0 No. Time Source Destination Protocol Length Info 2275 28.062400 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 2275: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2276 28.062430 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 2276: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2277 28.115213 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 2277: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2278 28.115242 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 2278: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2279 28.211645 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=826 Ack=846 Win=63395 Len=0 Frame 2279: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 826, Ack: 846, Len: 0 No. Time Source Destination Protocol Length Info 2280 28.313539 192.168.10.201 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 2280: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.201 (192.168.10.201), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2281 28.313724 192.168.10.201 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 2281: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.201 (192.168.10.201), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2282 28.345122 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 2282: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2283 28.345152 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 2283: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2284 28.658428 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2075072768, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2284: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2285 28.658453 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2075072768, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2285: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2286 28.658466 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2075072768, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2286: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2287 28.658478 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2075072768, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2287: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2288 28.665617 192.168.10.142 192.168.10.255 NBNS 110 Registration NB <01><02>__MSBROWSE__<02><01> Frame 2288: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2289 28.665790 192.168.10.142 192.168.10.255 NBNS 110 Registration NB <01><02>__MSBROWSE__<02><01> Frame 2289: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2290 28.679227 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3944153344, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2290: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2291 28.679248 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3944153344, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2291: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2292 28.679260 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3944153344, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2292: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2293 28.679272 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3944153344, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2293: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2294 28.734538 192.168.10.104 192.168.10.255 BROWSER 243 Local Master Announcement BAIMOBILEPC2, Workstation, Server, NT Workstation, Potential Browser, Master Browser Frame 2294: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 2295 28.955420 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 2295: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1513, Ack: 82043, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2296 28.955455 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=82068 Ack=1555 Win=46594 Len=0 Frame 2296: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 82068, Ack: 1555, Len: 0 No. Time Source Destination Protocol Length Info 2297 28.955531 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=1555 Ack=82043 Win=0 Len=0 Frame 2297: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1555, Ack: 82043, Len: 0 No. Time Source Destination Protocol Length Info 2298 28.956914 192.168.10.203 92.47.22.102 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 2298: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 92.47.22.102 (92.47.22.102) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2299 29.193867 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 2299: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2300 29.315230 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 2300: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2301 29.349986 187.57.117.43 192.168.10.207 TCP 62 eportcomm > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 2301: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 187.57.117.43 (187.57.117.43), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: eportcomm (4666), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 2302 29.350051 192.168.10.207 187.57.117.43 TCP 62 smtp > eportcomm [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 2302: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 187.57.117.43 (187.57.117.43) Transmission Control Protocol, Src Port: smtp (25), Dst Port: eportcomm (4666), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 2303 29.358496 192.168.10.207 190.42.139.241 TCP 62 smtp > 23580 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 2303: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23580 (23580), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 2304 29.415828 192.168.10.142 192.168.10.255 NBNS 110 Registration NB <01><02>__MSBROWSE__<02><01> Frame 2304: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2305 29.416014 192.168.10.142 192.168.10.255 NBNS 110 Registration NB <01><02>__MSBROWSE__<02><01> Frame 2305: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2306 29.446004 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 2306: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2307 29.472242 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:15:30 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 2307: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:15:30 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 2308 29.524740 190.42.139.241 192.168.10.207 TCP 60 23580 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 2308: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23580 (23580), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 2309 29.525000 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:44:47 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23580 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 2309: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:47 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23580 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 2310 29.525034 192.168.10.207 190.42.139.241 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:44:22 -0400 Frame 2310: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23580 (23580), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2311 29.525071 190.42.139.241 192.168.10.207 TCP 60 23580 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 2311: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23580 (23580), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 2312 29.546049 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 2312: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2313 29.546076 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 2313: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2314 29.547518 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.50? Tell 192.168.10.246 Frame 2314: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2315 29.547533 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.50? Tell 192.168.10.246 Frame 2315: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2316 29.559687 192.168.10.207 206.225.164.186 SMTP 590 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 304 Frame 2316: 590 bytes on wire (4720 bits), 590 bytes captured (4720 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1933, Ack: 183962, Len: 536 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2317 29.559718 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=184398 Ack=2469 Win=46368 Len=0 Frame 2317: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 184398, Ack: 2469, Len: 0 No. Time Source Destination Protocol Length Info 2318 29.559846 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=2469 Ack=183962 Win=0 Len=0 Frame 2318: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2469, Ack: 183962, Len: 0 No. Time Source Destination Protocol Length Info 2319 29.565916 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 2319: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2320 29.587656 187.57.117.43 192.168.10.207 TCP 60 eportcomm > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 2320: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 187.57.117.43 (187.57.117.43), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: eportcomm (4666), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 2321 29.587740 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:44:47 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 187.57.117.43 7x.x.x.3 4666 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 2321: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:47 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 187.57.117.43 7x.x.x.3 4666 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 2322 29.587790 192.168.10.207 187.57.117.43 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:44:22 -0400 Frame 2322: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 187.57.117.43 (187.57.117.43) Transmission Control Protocol, Src Port: smtp (25), Dst Port: eportcomm (4666), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2323 29.587828 187.57.117.43 192.168.10.207 TCP 60 eportcomm > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 2323: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 187.57.117.43 (187.57.117.43), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: eportcomm (4666), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 2324 29.674252 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2091849984, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2324: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2325 29.674275 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2091849984, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2325: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2326 29.674287 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2091849984, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2326: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2327 29.674300 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2091849984, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2327: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2328 29.694900 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3960930560, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2328: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2329 29.694919 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3960930560, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2329: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2330 29.694932 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3960930560, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2330: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2331 29.694943 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3960930560, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2331: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2332 29.825817 187.57.117.43 192.168.10.207 SMTP 92 C: HELO 187-57-117-43.dsl.telesp.net.br Frame 2332: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 187.57.117.43 (187.57.117.43), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: eportcomm (4666), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 38 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2333 29.825857 192.168.10.207 187.57.117.43 SMTP 102 S: 250 mail.mydomain.com Hello [187.57.117.43] Frame 2333: 102 bytes on wire (816 bits), 102 bytes captured (816 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 187.57.117.43 (187.57.117.43) Transmission Control Protocol, Src Port: smtp (25), Dst Port: eportcomm (4666), Seq: 122, Ack: 39, Len: 48 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2334 29.825896 187.57.117.43 192.168.10.207 TCP 60 eportcomm > smtp [ACK] Seq=39 Ack=170 Win=93270 Len=0 Frame 2334: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 187.57.117.43 (187.57.117.43), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: eportcomm (4666), Dst Port: smtp (25), Seq: 39, Ack: 170, Len: 0 No. Time Source Destination Protocol Length Info 2335 29.861640 192.168.10.31 192.168.10.255 UDP 778 Source port: 50764 Destination port: apc-3052 Frame 2335: 778 bytes on wire (6224 bits), 778 bytes captured (6224 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (736 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 34 38 3a 35 31 0a 53 52 3d 31 30 37 =19:48:51.SR=107 0060 43 0a 53 55 3d 32 44 38 32 43 31 39 34 0a 52 44 C.SU=2D82C194.RD 0070 3d 34 32 37 31 0a 54 41 3d 31 39 32 2e 31 36 38 =4271.TA=192.168 0080 2e 31 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d .10.255.UC=1.SD= 0090 30 0a 53 4d 3d 32 0a 34 46 3d 32 30 37 2e 30 0a 0.SM=2.4F=207.0. 00a0 35 31 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 51=08.7E=00.3E=0 00b0 30 32 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 02.4C=207.3.50=0 00c0 33 33 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 33.0.43=029.1.78 00d0 3d 31 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 =11/19/07.6A=005 00e0 37 3a 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 7:.47=S.63=UPS_I 00f0 44 45 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d DEN.66=100.0.58= 0100 4e 4f 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a NO.56=5YW.39=FF. 0110 32 37 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 27=00.38=00.6E=I 0120 53 30 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 S0746005443 .6D 0130 3d 31 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 =11/19/07.01=Sma 0140 72 74 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 rt-UPS RT 10000 0150 58 4c 20 20 20 0a 34 36 3d 36 30 2e 30 31 0a 34 XL .46=60.01.4 0160 44 3d 32 30 37 2e 33 0a 34 45 3d 32 30 37 2e 33 D=207.3.4E=207.3 0170 0a 34 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 .45=336.75=229.6 0180 43 3d 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 C=146.65=00.6F=2 0190 30 38 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 08.71=02.70=020. 01a0 37 32 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 72=000.42=217.0. 01b0 36 37 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 67=192.62=476.17 01c0 2e 57 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 .W.5C=028.0.2F=1 01d0 33 2e 37 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 3.77.16=A.05=000 01e0 30 30 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 00000.09=60.00;2 01f0 30 37 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 07.3.6B=0.81E2=A 0200 55 54 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 UTO .MC=1.E0=0.E 0210 31 3d 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 1=0.E2=0.E3=0.E8 0220 3d 30 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d =0.E9=0.I0=2.I1= 0230 30 30 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 00.I2=01.I3=0.I4 0240 3d 30 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d =0.I5=0.I6=0.I7= 0250 30 0a 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 0.I8=Int Contact 0260 20 31 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 1.I9=0.IA=Int C 0270 6f 6e 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 ontact 2.IB=0.IC 0280 3d 49 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a =Int Relay.ID=0. 0290 53 48 3d 41 32 42 46 45 36 42 35 44 31 35 32 45 SH=A2BFE6B5D152E 02a0 33 42 45 35 41 44 41 46 38 43 39 34 30 41 43 46 3BE5ADAF8C940ACF 02b0 46 38 33 0a 4d 44 3d 31 38 32 31 37 65 62 32 38 F83.MD=18217eb28 02c0 34 64 65 32 33 38 36 34 62 65 61 65 39 64 30 31 4de23864beae9d01 02d0 61 66 62 64 61 61 61 0a 3c 2f 42 4f 44 59 3e 0a afbdaaa.</BODY>. No. Time Source Destination Protocol Length Info 2336 29.861790 192.168.10.31 192.168.10.255 UDP 778 Source port: 50764 Destination port: apc-3052 Frame 2336: 778 bytes on wire (6224 bits), 778 bytes captured (6224 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (736 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 34 38 3a 35 31 0a 53 52 3d 31 30 37 =19:48:51.SR=107 0060 43 0a 53 55 3d 32 44 38 32 43 31 39 34 0a 52 44 C.SU=2D82C194.RD 0070 3d 34 32 37 31 0a 54 41 3d 31 39 32 2e 31 36 38 =4271.TA=192.168 0080 2e 31 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d .10.255.UC=1.SD= 0090 30 0a 53 4d 3d 32 0a 34 46 3d 32 30 37 2e 30 0a 0.SM=2.4F=207.0. 00a0 35 31 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 51=08.7E=00.3E=0 00b0 30 32 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 02.4C=207.3.50=0 00c0 33 33 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 33.0.43=029.1.78 00d0 3d 31 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 =11/19/07.6A=005 00e0 37 3a 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 7:.47=S.63=UPS_I 00f0 44 45 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d DEN.66=100.0.58= 0100 4e 4f 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a NO.56=5YW.39=FF. 0110 32 37 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 27=00.38=00.6E=I 0120 53 30 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 S0746005443 .6D 0130 3d 31 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 =11/19/07.01=Sma 0140 72 74 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 rt-UPS RT 10000 0150 58 4c 20 20 20 0a 34 36 3d 36 30 2e 30 31 0a 34 XL .46=60.01.4 0160 44 3d 32 30 37 2e 33 0a 34 45 3d 32 30 37 2e 33 D=207.3.4E=207.3 0170 0a 34 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 .45=336.75=229.6 0180 43 3d 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 C=146.65=00.6F=2 0190 30 38 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 08.71=02.70=020. 01a0 37 32 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 72=000.42=217.0. 01b0 36 37 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 67=192.62=476.17 01c0 2e 57 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 .W.5C=028.0.2F=1 01d0 33 2e 37 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 3.77.16=A.05=000 01e0 30 30 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 00000.09=60.00;2 01f0 30 37 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 07.3.6B=0.81E2=A 0200 55 54 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 UTO .MC=1.E0=0.E 0210 31 3d 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 1=0.E2=0.E3=0.E8 0220 3d 30 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d =0.E9=0.I0=2.I1= 0230 30 30 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 00.I2=01.I3=0.I4 0240 3d 30 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d =0.I5=0.I6=0.I7= 0250 30 0a 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 0.I8=Int Contact 0260 20 31 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 1.I9=0.IA=Int C 0270 6f 6e 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 ontact 2.IB=0.IC 0280 3d 49 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a =Int Relay.ID=0. 0290 53 48 3d 41 32 42 46 45 36 42 35 44 31 35 32 45 SH=A2BFE6B5D152E 02a0 33 42 45 35 41 44 41 46 38 43 39 34 30 41 43 46 3BE5ADAF8C940ACF 02b0 46 38 33 0a 4d 44 3d 31 38 32 31 37 65 62 32 38 F83.MD=18217eb28 02c0 34 64 65 32 33 38 36 34 62 65 61 65 39 64 30 31 4de23864beae9d01 02d0 61 66 62 64 61 61 61 0a 3c 2f 42 4f 44 59 3e 0a afbdaaa.</BODY>. No. Time Source Destination Protocol Length Info 2337 30.053546 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 2337: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2338 30.053588 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 2338: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2339 30.063529 187.57.117.43 192.168.10.207 SMTP 95 C: MAIL FROM: <nnycracker@xxxxxxxxxxxx> Frame 2339: 95 bytes on wire (760 bits), 95 bytes captured (760 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 187.57.117.43 (187.57.117.43), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: eportcomm (4666), Dst Port: smtp (25), Seq: 39, Ack: 170, Len: 41 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2340 30.063641 192.168.10.207 187.57.117.43 SMTP 105 S: 250 2.1.0 [email protected] OK Frame 2340: 105 bytes on wire (840 bits), 105 bytes captured (840 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 187.57.117.43 (187.57.117.43) Transmission Control Protocol, Src Port: smtp (25), Dst Port: eportcomm (4666), Seq: 170, Ack: 80, Len: 51 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2341 30.063698 187.57.117.43 192.168.10.207 TCP 60 eportcomm > smtp [ACK] Seq=80 Ack=221 Win=93220 Len=0 Frame 2341: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 187.57.117.43 (187.57.117.43), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: eportcomm (4666), Dst Port: smtp (25), Seq: 80, Ack: 221, Len: 0 No. Time Source Destination Protocol Length Info 2342 30.144991 190.42.139.241 192.168.10.207 SMTP 69 C: EHLO oqsq.com Frame 2342: 69 bytes on wire (552 bits), 69 bytes captured (552 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23580 (23580), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 15 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2343 30.145189 192.168.10.207 190.42.139.241 SMTP 245 S: 250-mail.mydomain.com Hello [190.42.139.241] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 2343: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23580 (23580), Seq: 122, Ack: 16, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2344 30.145230 190.42.139.241 192.168.10.207 TCP 60 23580 > smtp [ACK] Seq=16 Ack=313 Win=93128 Len=0 Frame 2344: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23580 (23580), Dst Port: smtp (25), Seq: 16, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 2345 30.145605 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:44:48 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23580 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 2345: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:48 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23580 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 2346 30.145675 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:44:48 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23580 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 2346: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:48 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23580 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 2347 30.145797 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:44:48 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23580 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 2347: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:48 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23580 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 2348 30.145936 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:44:48 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23580 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 2348: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:48 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23580 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 2349 30.146056 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:44:48 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23580 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 2349: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:48 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23580 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 2350 30.146190 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:44:48 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23580 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 2350: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:48 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23580 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 2351 30.165906 192.168.10.142 192.168.10.255 NBNS 110 Registration NB <01><02>__MSBROWSE__<02><01> Frame 2351: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2352 30.166102 192.168.10.142 192.168.10.255 NBNS 110 Registration NB <01><02>__MSBROWSE__<02><01> Frame 2352: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2353 30.302427 192.168.10.1 192.168.10.245 Syslog 308 LOCAL1.INFO: Oct 3 19:44:48 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 187.57.117.43 7x.x.x.3 4666 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="nnycracker@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 2353: 308 bytes on wire (2464 bits), 308 bytes captured (2464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:48 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 187.57.117.43 7x.x.x.3 4666 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" No. Time Source Destination Protocol Length Info 2354 30.456826 192.168.10.203 92.47.22.102 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 2354: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 92.47.22.102 (92.47.22.102) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2355 30.544393 187.57.117.43 192.168.10.207 TCP 60 eportcomm > smtp [FIN, ACK] Seq=80 Ack=221 Win=93220 Len=0 Frame 2355: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 187.57.117.43 (187.57.117.43), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: eportcomm (4666), Dst Port: smtp (25), Seq: 80, Ack: 221, Len: 0 No. Time Source Destination Protocol Length Info 2356 30.544429 192.168.10.207 187.57.117.43 TCP 60 smtp > eportcomm [ACK] Seq=221 Ack=81 Win=65456 Len=0 Frame 2356: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 187.57.117.43 (187.57.117.43) Transmission Control Protocol, Src Port: smtp (25), Dst Port: eportcomm (4666), Seq: 221, Ack: 81, Len: 0 No. Time Source Destination Protocol Length Info 2357 30.544498 192.168.10.207 187.57.117.43 TCP 60 smtp > eportcomm [FIN, ACK] Seq=221 Ack=81 Win=65456 Len=0 Frame 2357: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 187.57.117.43 (187.57.117.43) Transmission Control Protocol, Src Port: smtp (25), Dst Port: eportcomm (4666), Seq: 221, Ack: 81, Len: 0 No. Time Source Destination Protocol Length Info 2358 30.544537 187.57.117.43 192.168.10.207 TCP 60 eportcomm > smtp [ACK] Seq=81 Ack=222 Win=93220 Len=0 Frame 2358: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 187.57.117.43 (187.57.117.43), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: eportcomm (4666), Dst Port: smtp (25), Seq: 81, Ack: 222, Len: 0 No. Time Source Destination Protocol Length Info 2359 30.545155 192.168.10.1 192.168.10.245 Syslog 201 LOCAL1.INFO: Oct 3 19:44:48 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 187.57.117.43 7x.x.x.3 4666 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 2359: 201 bytes on wire (1608 bits), 201 bytes captured (1608 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:48 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 187.57.117.43 7x.x.x.3 4666 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 2360 30.614402 190.42.139.241 192.168.10.207 SMTP 100 C: MAIL FROM: <anna.thorndike@xxxxxxxxxxxxxxxx> Frame 2360: 100 bytes on wire (800 bits), 100 bytes captured (800 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23580 (23580), Dst Port: smtp (25), Seq: 16, Ack: 313, Len: 46 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2361 30.614748 192.168.10.207 190.42.139.241 SMTP 110 S: 250 2.1.0 [email protected] OK Frame 2361: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23580 (23580), Seq: 313, Ack: 62, Len: 56 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2362 30.614796 190.42.139.241 192.168.10.207 TCP 60 23580 > smtp [ACK] Seq=62 Ack=369 Win=93072 Len=0 Frame 2362: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23580 (23580), Dst Port: smtp (25), Seq: 62, Ack: 369, Len: 0 No. Time Source Destination Protocol Length Info 2363 30.689736 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2108627200, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2363: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2364 30.689760 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2108627200, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2364: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2365 30.689773 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2108627200, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2365: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2366 30.689786 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2108627200, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2366: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2367 30.710537 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3977707776, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2367: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2368 30.710559 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3977707776, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2368: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2369 30.710572 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3977707776, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2369: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2370 30.710584 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3977707776, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2370: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2371 30.801882 Dell_39:5d:dd Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.207 Frame 2371: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2372 30.801914 Dell_39:5d:dd Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.207 Frame 2372: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2373 30.875632 192.168.10.1 192.168.10.245 Syslog 309 LOCAL1.INFO: Oct 3 19:44:48 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23580 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="exwmadras@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 2373: 309 bytes on wire (2472 bits), 309 bytes captured (2472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:48 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23580 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 2374 30.916009 192.168.10.142 192.168.10.255 NBNS 110 Registration NB <01><02>__MSBROWSE__<02><01> Frame 2374: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2375 30.916184 192.168.10.142 192.168.10.255 NBNS 110 Registration NB <01><02>__MSBROWSE__<02><01> Frame 2375: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2376 30.972259 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:15:31 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 2376: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:15:31 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 2377 30.994502 192.168.10.246 65.32.1.70 DNS 85 Standard query PTR 1.64.187.188.in-addr.arpa Frame 2377: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.70 (65.32.1.70) User Datagram Protocol, Src Port: 50819 (50819), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 2378 31.193892 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 2378: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2379 31.312028 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 2379: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2380 31.312062 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 2380: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2381 31.312363 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 2381: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2382 31.312377 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 2382: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2383 31.312390 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 2383: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2384 31.312400 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 2384: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2385 31.312410 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 2385: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2386 31.312421 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 2386: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2387 31.312617 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 2387: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2388 31.312629 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 2388: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2389 31.312639 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 2389: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2390 31.312662 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 2390: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2391 31.312697 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 2391: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2392 31.312708 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 2392: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2393 31.312719 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 2393: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2394 31.312743 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 2394: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2395 31.312754 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 2395: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2396 31.312764 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 2396: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2397 31.312774 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 2397: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2398 31.312784 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 2398: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2399 31.312802 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 2399: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2400 31.312812 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 2400: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2401 31.312823 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 2401: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2402 31.312833 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 2402: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2403 31.312843 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 2403: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2404 31.312853 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 2404: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2405 31.312863 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 2405: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2406 31.312877 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 2406: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2407 31.312928 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 2407: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2408 31.312939 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 2408: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2409 31.312949 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 2409: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2410 31.312959 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 2410: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2411 31.312969 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 2411: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2412 31.313304 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 2412: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2413 31.313315 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 2413: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2414 31.313338 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 2414: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2415 31.313348 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 2415: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2416 31.313358 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 2416: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2417 31.313368 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 2417: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2418 31.313378 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 2418: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2419 31.313388 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 2419: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2420 31.313398 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 2420: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2421 31.313408 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 2421: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2422 31.313418 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 2422: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2423 31.313428 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 2423: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2424 31.313444 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 2424: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2425 31.313535 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 2425: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2426 31.313546 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 2426: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2427 31.313559 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 2427: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2428 31.313569 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 2428: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2429 31.313581 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 2429: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2430 31.313591 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 2430: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2431 31.313629 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 2431: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2432 31.313641 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 2432: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2433 31.313678 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 2433: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2434 31.313692 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 2434: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2435 31.313703 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 2435: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2436 31.313727 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 2436: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2437 31.313738 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 2437: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2438 31.313748 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 2438: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2439 31.313758 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 2439: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2440 31.313783 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 2440: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2441 31.313800 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 2441: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2442 31.313811 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 2442: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2443 31.313821 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 2443: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2444 31.313832 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 2444: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2445 31.313841 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 2445: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2446 31.313851 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 2446: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2447 31.313861 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 2447: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2448 31.313872 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 2448: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2449 31.314040 192.168.10.233 192.168.10.245 Syslog 178 LOCAL4.WARNING: :Oct 03 19:36:36 EDT: %PIX-session-4-405001: Received ARP request collision from 192.168.10.226/0026.b952.f0f3 on interface Inside\n Frame 2449: 178 bytes on wire (1424 bits), 178 bytes captured (1424 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.233 (192.168.10.233), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: :Oct 03 19:36:36 EDT: %PIX-session-4-405001: Received ARP request collision from 192.168.10.226/0026.b952.f0f3 on interface Inside\n No. Time Source Destination Protocol Length Info 2450 31.314054 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 2450: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2451 31.314064 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 2451: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2452 31.314074 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 2452: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2453 31.314084 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 2453: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2454 31.314094 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 2454: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2455 31.314105 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 2455: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2456 31.314121 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 2456: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2457 31.314131 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 2457: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2458 31.314142 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 2458: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2459 31.314152 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 2459: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2460 31.314162 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 2460: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2461 31.314172 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 2461: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2462 31.314182 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 2462: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2463 31.314193 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 2463: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2464 31.314203 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 2464: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2465 31.314213 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 2465: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2466 31.314223 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 2466: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2467 31.314235 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 2467: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2468 31.317561 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 2468: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2469 31.318684 65.32.1.70 192.168.10.246 DNS 140 Standard query response PTR pppoe-188-187-64-1.volgograd.ertelecom.ru Frame 2469: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.70 (65.32.1.70), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 50819 (50819) Domain Name System (response) No. Time Source Destination Protocol Length Info 2470 31.344335 202.1.166.13 192.168.10.207 TCP 62 vaprtm > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 2470: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: vaprtm (3654), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 2471 31.344396 192.168.10.207 202.1.166.13 TCP 62 smtp > vaprtm [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 2471: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 202.1.166.13 (202.1.166.13) Transmission Control Protocol, Src Port: smtp (25), Dst Port: vaprtm (3654), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 2472 31.409978 190.42.139.241 192.168.10.207 SMTP 60 C: QUIT Frame 2472: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23580 (23580), Dst Port: smtp (25), Seq: 62, Ack: 369, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2473 31.410030 192.168.10.207 190.42.139.241 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 2473: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23580 (23580), Seq: 369, Ack: 68, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2474 31.410072 190.42.139.241 192.168.10.207 TCP 60 23580 > smtp [ACK] Seq=68 Ack=438 Win=93002 Len=0 Frame 2474: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23580 (23580), Dst Port: smtp (25), Seq: 68, Ack: 438, Len: 0 No. Time Source Destination Protocol Length Info 2475 31.410101 192.168.10.207 190.42.139.241 TCP 60 smtp > 23580 [FIN, ACK] Seq=438 Ack=68 Win=65468 Len=0 Frame 2475: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23580 (23580), Seq: 438, Ack: 68, Len: 0 No. Time Source Destination Protocol Length Info 2476 31.410137 190.42.139.241 192.168.10.207 TCP 60 23580 > smtp [ACK] Seq=68 Ack=439 Win=93002 Len=0 Frame 2476: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23580 (23580), Dst Port: smtp (25), Seq: 68, Ack: 439, Len: 0 No. Time Source Destination Protocol Length Info 2477 31.443542 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 2477: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2478 31.534881 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=2469 Ack=183962 Win=12579 Len=0 Frame 2478: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2469, Ack: 183962, Len: 0 No. Time Source Destination Protocol Length Info 2479 31.534916 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 2478#1] smtp > 23308 [ACK] Seq=2469 Ack=183962 Win=12579 Len=0 Frame 2479: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2469, Ack: 183962, Len: 0 No. Time Source Destination Protocol Length Info 2480 31.534952 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2480: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 184398, Ack: 2469, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2481 31.534981 206.225.164.186 192.168.10.207 SMTP 994 C: DATA fragment, 940 bytes Frame 2481: 994 bytes on wire (7952 bits), 994 bytes captured (7952 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 185778, Ack: 2469, Len: 940 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2482 31.535021 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2482: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 186718, Ack: 2469, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2483 31.535050 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2483: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 188098, Ack: 2469, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2484 31.535079 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2484: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 189478, Ack: 2469, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2485 31.535108 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2485: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 190858, Ack: 2469, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2486 31.535141 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2486: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 192238, Ack: 2469, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2487 31.535170 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2487: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 193618, Ack: 2469, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2488 31.535199 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 2478#2] smtp > 23308 [ACK] Seq=2469 Ack=183962 Win=12579 Len=0 Frame 2488: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2469, Ack: 183962, Len: 0 No. Time Source Destination Protocol Length Info 2489 31.535232 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 2478#3] smtp > 23308 [ACK] Seq=2469 Ack=183962 Win=12579 Len=0 Frame 2489: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2469, Ack: 183962, Len: 0 No. Time Source Destination Protocol Length Info 2490 31.535260 192.168.10.207 206.225.164.186 SMTP 274 S: 2 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 2490: 274 bytes on wire (2192 bits), 274 bytes captured (2192 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2469, Ack: 183962, Len: 220 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2491 31.535288 206.225.164.186 192.168.10.207 SMTP 490 [TCP Out-Of-Order] C: DATA fragment, 436 bytes Frame 2491: 490 bytes on wire (3920 bits), 490 bytes captured (3920 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 183962, Ack: 2469, Len: 436 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2492 31.535317 206.225.164.186 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 2492: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 184398, Ack: 2469, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2493 31.535346 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=194998 Ack=2689 Win=46258 Len=0 Frame 2493: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 194998, Ack: 2689, Len: 0 No. Time Source Destination Protocol Length Info 2494 31.535374 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 2490#1] smtp > 23308 [ACK] Seq=2689 Ack=183962 Win=12579 Len=0 Frame 2494: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2689, Ack: 183962, Len: 0 No. Time Source Destination Protocol Length Info 2495 31.535402 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 2490#2] smtp > 23308 [ACK] Seq=2689 Ack=183962 Win=12579 Len=0 Frame 2495: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2689, Ack: 183962, Len: 0 No. Time Source Destination Protocol Length Info 2496 31.535429 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 2490#3] smtp > 23308 [ACK] Seq=2689 Ack=183962 Win=12579 Len=0 Frame 2496: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2689, Ack: 183962, Len: 0 No. Time Source Destination Protocol Length Info 2497 31.535456 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 2490#4] smtp > 23308 [ACK] Seq=2689 Ack=183962 Win=12579 Len=0 Frame 2497: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2689, Ack: 183962, Len: 0 No. Time Source Destination Protocol Length Info 2498 31.535484 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 2490#5] smtp > 23308 [ACK] Seq=2689 Ack=183962 Win=12579 Len=0 Frame 2498: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2689, Ack: 183962, Len: 0 No. Time Source Destination Protocol Length Info 2499 31.535511 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 2490#6] smtp > 23308 [ACK] Seq=2689 Ack=183962 Win=12579 Len=0 Frame 2499: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2689, Ack: 183962, Len: 0 No. Time Source Destination Protocol Length Info 2500 31.535543 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=2689 Ack=194998 Win=1543 Len=0 Frame 2500: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2689, Ack: 194998, Len: 0 No. Time Source Destination Protocol Length Info 2501 31.535572 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2501: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 194998, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2502 31.535602 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2502: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 196378, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2503 31.535630 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=2689 Ack=196541 Win=0 Len=0 Frame 2503: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2689, Ack: 196541, Len: 0 No. Time Source Destination Protocol Length Info 2504 31.551719 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 2504: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2505 31.551750 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 2505: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2506 31.565943 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 2506: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2507 31.572764 190.42.139.241 192.168.10.207 TCP 60 23580 > smtp [RST, ACK] Seq=68 Ack=439 Win=93002 Len=0 Frame 2507: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23580 (23580), Dst Port: smtp (25), Seq: 68, Ack: 439, Len: 0 No. Time Source Destination Protocol Length Info 2508 31.573424 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=80783 Ack=1629 Win=1002 Len=1448 TSval=543142 TSecr=727724 Frame 2508: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 80783, Ack: 1629, Len: 1448 Data (1448 bytes) 0000 17 03 01 22 a0 8b 86 90 4d 68 3d 69 1b 42 21 6a ..."....Mh=i.B!j 0010 75 33 61 eb 8c 82 24 82 01 e9 59 d2 02 88 98 7f u3a...$...Y..... 0020 84 fa cb 88 c0 f0 07 e5 84 04 4d 44 a4 dc 6f 82 ..........MD..o. 0030 a7 0f b7 78 d9 d5 3f cf f6 5e 0b df a9 da 84 0b ...x..?..^...... 0040 d3 a4 11 0d a3 31 e5 41 8c 87 f2 ce d0 3c bc 13 .....1.A.....<.. 0050 87 32 a6 e0 74 9d fe cc 26 d7 30 2e 98 11 2c f3 .2..t...&.0...,. 0060 ad 7b 69 78 80 5c 1e 18 1e 91 3f 34 c9 e9 48 b9 .{ix.\....?4..H. 0070 65 f3 b3 f0 13 5b 48 ed bf 21 c3 b7 1d 80 47 f2 e....[H..!....G. 0080 ff e2 96 c7 9c ef 5e 20 39 cc 80 cd 0d a3 b5 24 ......^ 9......$ 0090 b3 4a 95 29 dc 6e e9 c4 56 14 e3 4a 2f 26 2e 52 .J.).n..V..J/&.R 00a0 60 e8 7b 94 53 72 5e a9 ae 4c c1 2c 83 49 31 ba `.{.Sr^..L.,.I1. 00b0 74 b9 81 0d c0 76 8c 3f ff b5 d2 09 09 30 4e 64 t....v.?.....0Nd 00c0 52 1c 01 b3 14 3c 54 7f eb 40 1c 4a cb 87 c8 9d R....<[email protected].... 00d0 68 fa 01 c6 0a c0 58 df f2 23 bc b5 0e 26 3a c1 h.....X..#...&:. 00e0 e9 ce d9 eb 3a 2b 51 3e af b2 a8 21 f8 bc 4e f6 ....:+Q>...!..N. 00f0 ec ae dc 47 a6 01 3b c4 5f 82 fe 93 20 c5 b9 c0 ...G..;._... ... 0100 50 60 5b 53 02 ac a2 b6 e7 9b c2 59 57 10 18 55 P`[S.......YW..U 0110 82 a7 a1 2c 09 6f d7 d7 38 ec 38 5b d7 96 cf ad ...,.o..8.8[.... 0120 13 57 fb dc 0a 5d 03 35 80 3e a7 2b 7e d8 8f 3c .W...].5.>.+~..< 0130 81 85 8a 6a c3 71 2d 36 95 2b 6a db 90 6e 2f 8d ...j.q-6.+j..n/. 0140 bf 1e 7d ad 05 a1 85 3b 1f 6c e4 51 a5 05 5b 44 ..}....;.l.Q..[D 0150 cf 86 72 db de 6e ad 27 1b bb ff 2a bd 7a 8e c2 ..r..n.'...*.z.. 0160 13 fb a9 32 5d 01 ac 9a e6 a0 6a 85 89 21 98 9a ...2].....j..!.. 0170 91 91 cc 22 4e a8 87 a9 de 40 30 8b 60 1e 33 a5 ..."N....@0.`.3. 0180 f3 f3 7e a5 60 b7 c6 a8 14 24 30 13 89 0e 8f 69 ..~.`....$0....i 0190 b6 19 1e 23 e4 0c f3 18 97 ca 2c bb 9e 87 38 82 ...#......,...8. 01a0 ab 74 47 c9 d6 83 0f d4 4f 16 e5 33 93 05 cc 8c .tG.....O..3.... 01b0 f6 37 bc 25 36 d6 fc 8e 96 d8 5b 18 0d 51 ca 90 .7.%6.....[..Q.. 01c0 d7 df 09 20 8f b7 a5 ff 4a 7a a0 ea 9d 74 ba ab ... ....Jz...t.. 01d0 1c 89 ef 9b 78 a5 40 93 09 7c 71 c2 fc 6d cf 94 ....x.@..|q..m.. 01e0 7b 2c a2 63 fb 6e 64 7b 31 e8 ab a8 fb 77 62 c4 {,.c.nd{1....wb. 01f0 30 57 2d 29 1a a9 36 fa 3f ad ad a9 bf 7c 20 cb 0W-)..6.?....| . 0200 2d 48 f7 c0 c9 78 7f 9b 33 14 96 aa 43 e6 90 dd -H...x..3...C... 0210 85 ca 95 36 00 b0 ea 02 f5 3b 36 50 64 5e f1 38 ...6.....;6Pd^.8 0220 43 71 55 64 5d fb a7 26 86 09 63 d6 9c af 70 53 CqUd]..&..c...pS 0230 d7 4a f9 49 53 ca 2c a0 b2 1c f8 61 a9 a7 54 ed .J.IS.,....a..T. 0240 87 36 db e1 be b3 36 ff c0 57 34 18 c0 6e 3d 05 .6....6..W4..n=. 0250 7b 7d 41 08 69 4d e2 d0 16 3b a5 8e ce 37 5d 16 {}A.iM...;...7]. 0260 fd e5 64 56 d6 a4 ec c1 26 4e 29 2a 44 05 4b ca ..dV....&N)*D.K. 0270 53 f8 fa 48 d7 d1 ce c2 4a a5 4f 20 68 d8 dc fd S..H....J.O h... 0280 29 a7 d8 3e 9c 18 d4 fe 9d 88 f1 85 45 37 19 14 )..>........E7.. 0290 2b d2 0c 88 9b ae a9 8e 9e 1d ec 56 26 8c a7 d0 +..........V&... 02a0 9c 7f e2 f2 21 6a af 48 a6 82 25 2d 74 4b 05 9b ....!j.H..%-tK.. 02b0 6c 5e 86 a3 0c 68 16 e2 04 4e bc 69 c8 48 95 c4 l^...h...N.i.H.. 02c0 2e f8 97 60 61 3b 1c c2 4a d8 bc 27 b7 97 f0 60 ...`a;..J..'...` 02d0 fa 3e b3 f8 1c e7 79 47 15 58 66 77 08 68 1a db .>....yG.Xfw.h.. 02e0 30 c1 f9 05 d0 a7 4f 37 39 de 1e a6 7b a4 b9 6b 0.....O79...{..k 02f0 f4 b9 5b 79 69 c8 5e 23 bc 70 42 d4 85 39 73 8a ..[yi.^#.pB..9s. 0300 2b 26 ad cc d6 21 bf 0c 86 bb ab f9 f1 53 06 11 +&...!.......S.. 0310 7e 15 88 ad c4 04 bd c7 80 8b 4c 60 97 58 20 ed ~.........L`.X . 0320 3c d5 82 1e cc fd 38 16 9a dd 7b 35 59 8f 1c b9 <.....8...{5Y... 0330 66 fb a4 88 c3 7d b2 66 73 22 bc 6f 94 22 df b6 f....}.fs".o.".. 0340 fe 09 9a 28 60 a5 67 1d 5f 1f b0 01 3f fc 69 94 ...(`.g._...?.i. 0350 4c c9 81 85 f6 1b f0 67 36 89 e3 56 47 34 00 8c L......g6..VG4.. 0360 04 a9 f0 9c 57 30 e3 fa 51 6a 38 bc 6b da 55 4b ....W0..Qj8.k.UK 0370 7b 94 b4 85 86 9a 51 15 88 45 6e 38 82 0c e5 74 {.....Q..En8...t 0380 86 46 c2 67 2b 31 99 38 6f a0 00 88 fb 98 be e8 .F.g+1.8o....... 0390 34 31 1b 9f 9a 79 cb fa 14 64 e4 c4 6d c9 fa bd 41...y...d..m... 03a0 f8 56 72 8b 82 73 38 d1 29 48 a0 a4 4a 44 df 89 .Vr..s8.)H..JD.. 03b0 cb e8 eb 76 2a ba f5 9d 4b 71 c7 68 3d 51 fb 57 ...v*...Kq.h=Q.W 03c0 c0 79 3d 8a dc 24 a1 4f 23 f8 03 af 45 c4 5c d2 .y=..$.O#...E.\. 03d0 70 d2 b3 9b ca 94 2c 8f 0a 83 4b 86 71 ca 42 05 p.....,...K.q.B. 03e0 4e 6a 4b 78 0c f9 5f b7 54 0c 14 ee a0 36 fd 48 NjKx.._.T....6.H 03f0 dd 9d f1 2d 11 9e 15 34 52 f0 a4 08 d6 6c 8b 33 ...-...4R....l.3 0400 57 d2 50 69 6c ec 6e 5a ae 97 b4 1d fc 52 c2 01 W.Pil.nZ.....R.. 0410 14 a3 69 d9 6b c6 4f 4b 82 9a 87 3f 46 70 f3 9c ..i.k.OK...?Fp.. 0420 38 c5 05 48 6e cc 2e 8f 90 da 67 5e db 0e be 9b 8..Hn.....g^.... 0430 99 e7 07 19 77 13 7d 04 60 d2 fc bb 40 bf 8e d2 ....w.}.`...@... 0440 94 5b 47 66 44 b4 30 83 48 36 fa e1 b5 f3 5b c6 .[GfD.0.H6....[. 0450 27 01 74 53 3b ba 7c b6 5b 6a c5 e3 1d 17 cd 4c '.tS;.|.[j.....L 0460 d9 44 24 d6 eb 0d 50 85 87 0f 54 90 83 f7 7b f2 .D$...P...T...{. 0470 da 9b 3d 51 67 cc 49 aa 74 cd 6b af 57 32 e3 78 ..=Qg.I.t.k.W2.x 0480 3d 29 cc 82 24 62 cb 62 c9 99 74 1e a6 a6 81 26 =)..$b.b..t....& 0490 69 8c 4d c9 bb 9c 8c 9f d2 e8 ac 05 96 59 8d d8 i.M..........Y.. 04a0 4e 09 f6 83 c7 3c 4d 02 07 36 89 13 fc 79 94 da N....<M..6...y.. 04b0 a4 ac 60 1d aa 8c 0c 09 28 29 92 ba da f3 3e c5 ..`.....()....>. 04c0 5d ea ae 5b 8a d9 97 e0 d0 c8 29 eb d7 cf 1a 00 ]..[......)..... 04d0 cf af ab 3d f7 e8 f7 0d 7d 5d b6 d4 3d 0e 3e 25 ...=....}]..=.>% 04e0 19 37 6e 73 06 f3 23 0f 39 b0 66 0d d0 63 99 27 .7ns..#.9.f..c.' 04f0 14 26 1e b7 9b f8 d5 a6 4f 4f d1 8b 3d c7 85 f7 .&......OO..=... 0500 b5 e4 5d 49 76 61 50 6a 3b 00 41 4a 09 2c 7d f3 ..]IvaPj;.AJ.,}. 0510 1c 81 34 4b 6f 28 c2 8f 64 64 06 ba ca b5 d3 2f ..4Ko(..dd...../ 0520 ba 4b b1 10 e4 3c 26 e7 c2 8a 8f 1f a3 aa 64 b2 .K...<&.......d. 0530 f9 3d 74 f8 4a 5a 9c 91 ba 45 4d a2 e0 f1 a2 29 .=t.JZ...EM....) 0540 25 85 ac e1 29 98 99 82 a7 6e ce cb fb d8 de 4a %...)....n.....J 0550 a5 1f 4b 2c 65 25 da 68 11 cc c1 c8 67 53 37 98 ..K,e%.h....gS7. 0560 bc ff 04 be 6b 93 e7 3e d5 a2 ae 59 fe bc 45 5d ....k..>...Y..E] 0570 de c3 0a b5 0d de 76 f7 f1 88 c7 48 11 32 52 62 ......v....H.2Rb 0580 18 3a 1a 4b 57 b2 9e ca fb b6 bf 58 97 97 cb 05 .:.KW......X.... 0590 6e bd 24 20 0b d4 6b 13 83 f5 34 5d a6 6c 5c 45 n.$ ..k...4].l\E 05a0 9a 79 70 2f 34 f8 37 28 .yp/4.7( No. Time Source Destination Protocol Length Info 2509 31.573519 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=82231 Ack=1629 Win=1002 Len=1448 TSval=543142 TSecr=727724 Frame 2509: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 82231, Ack: 1629, Len: 1448 Data (1448 bytes) 0000 3b 86 14 a2 df 22 45 48 86 7f e7 4c 3c 61 87 40 ;...."EH...L<a.@ 0010 5f 05 3f e8 25 37 e4 f5 3f ae 77 b3 ef c4 1d e7 _.?.%7..?.w..... 0020 9e 33 b8 87 b4 2b 17 59 b3 b5 17 93 2e fa 41 7b .3...+.Y......A{ 0030 51 9e a9 1f d9 7a 54 ac 4b 1b df f6 53 f5 37 48 Q....zT.K...S.7H 0040 75 15 ab d3 9e ac c4 6a 17 ee 94 89 6f f1 ef 66 u......j....o..f 0050 31 77 b4 62 b9 d2 e9 a1 21 00 28 ad 63 c3 8a 76 1w.b....!.(.c..v 0060 7f 58 23 64 28 a7 a5 c1 6b bd e3 59 53 db 28 e3 .X#d(...k..YS.(. 0070 6c 46 9b 2e 11 55 02 5d bc b4 c2 e2 09 84 c7 52 lF...U.].......R 0080 d7 7b 17 d7 02 94 6c cb 5c 28 e2 6d b2 b2 20 21 .{....l.\(.m.. ! 0090 f4 50 a8 c6 12 22 ab 97 29 f6 27 e0 c5 84 e4 6a .P..."..).'....j 00a0 f6 c9 e8 ae 6b d4 8b d8 55 74 94 ce 0a 37 7d 9d ....k...Ut...7}. 00b0 4b 55 d6 61 4b 57 16 32 c6 20 ad 17 20 5c 72 d4 KU.aKW.2. .. \r. 00c0 c9 84 ef 8c 4f 4f ce 17 3d fe 64 67 f0 15 4b 5a ....OO..=.dg..KZ 00d0 2b 81 eb d1 d4 4e ca 30 49 b2 c7 5d f9 46 f6 9c +....N.0I..].F.. 00e0 7c b9 48 9e c4 7d 86 66 67 e1 db 88 3e 4a da fe |.H..}.fg...>J.. 00f0 7e b2 49 2c a3 a2 0b c5 5f 17 a6 76 a7 d5 76 dd ~.I,...._..v..v. 0100 09 72 13 92 b5 8a 56 45 c7 94 58 1d ae 11 14 83 .r....VE..X..... 0110 c9 e3 60 81 6d e9 aa 54 e6 cc 9d 20 dc b8 3f bb ..`.m..T... ..?. 0120 c4 a2 34 ea a4 1c 36 82 e9 28 d1 7d 70 f0 c3 1f ..4...6..(.}p... 0130 bb b0 2b fe 31 c5 6e 1f af d4 db be 38 3d 0b 07 ..+.1.n.....8=.. 0140 d4 01 0a 6b e9 2f 70 c4 06 f8 b2 e7 36 2b 8c 92 ...k./p.....6+.. 0150 ab 07 e9 d9 d2 1f 0f a4 19 cc ca 07 75 41 f6 bf ............uA.. 0160 81 40 cf 0f eb 7d f9 e3 e2 7a 90 bb c3 26 b8 76 .@...}...z...&.v 0170 1b 5d 6b e7 fe 6b e5 92 07 95 aa af b8 53 7f 18 .]k..k.......S.. 0180 6e 04 dc 36 50 fc 90 bf 38 28 76 5e 17 7b 75 6d n..6P...8(v^.{um 0190 dd 3a 0b 96 5d 18 c9 d2 ce 6e 6d a6 13 5b f5 8c .:..]....nm..[.. 01a0 ab 0a 5e 97 40 8c f6 25 fa 47 83 e2 02 3e 7a 46 ..^.@..%.G...>zF 01b0 50 29 24 54 7e 7d 5f 11 0d bc 79 6c 02 ac 60 8d P)$T~}_...yl..`. 01c0 65 27 f3 a0 5f 27 93 2e d5 ee 55 74 fc ea 9c 56 e'.._'....Ut...V 01d0 87 19 0e 24 c5 12 46 9f 73 98 52 86 df b0 bf 87 ...$..F.s.R..... 01e0 47 7a 46 49 0e f5 da 4a 43 29 dd 7f 45 99 24 78 GzFI...JC)..E.$x 01f0 3b b4 ab 1b 38 69 22 f8 60 51 a3 d0 a4 fd f6 84 ;...8i".`Q...... 0200 66 7c f5 9c a6 f4 1e 0d 0c a3 23 40 ce 35 6b e0 f|........#@.5k. 0210 f6 58 b9 5e e7 92 cf 6e e2 1c 89 d1 cf 71 e7 9e .X.^...n.....q.. 0220 5f be 81 3c 05 b1 0d a6 f4 23 df 1c da 1d 42 fa _..<.....#....B. 0230 d0 c4 bc 52 99 cc 2c 34 f0 d2 03 d8 2d 33 2e ac ...R..,4....-3.. 0240 d9 3e e7 22 22 fc 78 60 78 a2 4c 71 f4 46 4b d9 .>."".x`x.Lq.FK. 0250 a6 c5 c9 99 87 7b 2d 97 3e e6 48 7c ba e0 1d 11 .....{-.>.H|.... 0260 a5 70 e2 1d 80 19 d1 85 fb 01 0f f1 37 ea 81 46 .p..........7..F 0270 7f cb 79 de 12 95 b4 ab 6c ef 21 51 02 fb a5 fe ..y.....l.!Q.... 0280 62 3d 31 95 4d 8c 08 74 67 87 8a fe 73 01 5d 7d b=1.M..tg...s.]} 0290 08 f2 b7 70 2f 99 0a ab 22 46 f2 52 af 43 ee 51 ...p/..."F.R.C.Q 02a0 e7 3e 9d 95 85 16 87 90 fc 56 7c e7 a6 bf ae 17 .>.......V|..... 02b0 48 c7 ab 07 9a df 28 08 91 ca 3c 9f d8 e4 09 59 H.....(...<....Y 02c0 a7 d7 63 55 af 5c 36 c3 dd 5a 79 c4 4e 93 79 19 ..cU.\6..Zy.N.y. 02d0 e8 bd 0f 2d 20 be 07 8f 46 d4 d6 a0 d3 30 a4 20 ...- ...F....0. 02e0 83 61 f0 5e 29 ce cb e4 20 73 0a 98 d6 f1 7d 0a .a.^)... s....}. 02f0 00 4f a1 44 3a b8 4b 39 35 a8 6e 79 d9 25 dd 87 .O.D:.K95.ny.%.. 0300 fb 7b 38 06 91 b2 85 0d 47 c0 37 2b e7 36 74 f9 .{8.....G.7+.6t. 0310 45 60 02 9e 5f fe ff d0 3f 06 13 91 57 2d 78 5a E`.._...?...W-xZ 0320 20 4a 36 88 3f 7e 30 b5 31 b4 ff 5c d7 c5 d5 83 J6.?~0.1..\.... 0330 c7 6c 25 8f e8 57 1c a9 0b 20 83 b5 01 76 9e 1f .l%..W... ...v.. 0340 89 51 db 7f 24 3d 34 2b ba 36 50 e7 cd be 62 ca .Q..$=4+.6P...b. 0350 bc 27 db 99 6c 1b 10 46 b8 a6 f2 56 64 91 e7 6e .'..l..F...Vd..n 0360 3f 7f c1 f8 a2 b8 5e 49 fa 2f f0 45 e4 50 f1 84 ?.....^I./.E.P.. 0370 ef 88 81 92 5d ac 97 f0 6e 19 3d db 76 e2 56 a7 ....]...n.=.v.V. 0380 14 f0 77 6a 3c c5 6c bd 00 00 6a 62 59 55 86 3c ..wj<.l...jbYU.< 0390 5f 49 7e 69 78 cd 54 58 00 f7 75 07 60 2d 64 57 _I~ix.TX..u.`-dW 03a0 54 0f 0e a6 01 53 70 42 bf 12 c8 81 e4 25 c5 33 T....SpB.....%.3 03b0 d2 84 6e f1 3b 98 1d 10 03 59 99 b5 bf 57 a7 11 ..n.;....Y...W.. 03c0 8a 38 99 6b c1 a8 fd 9b a2 91 a4 ec d6 9b 56 e3 .8.k..........V. 03d0 3a 34 cc b3 d9 cd 15 a6 6a 2e 1c 76 cb ce fe 77 :4......j..v...w 03e0 dd cc bf 67 1b 3d 89 8a cb f1 63 b3 1b 79 b0 45 ...g.=....c..y.E 03f0 e4 29 15 dc f0 78 e8 80 80 93 6e c7 a7 06 25 20 .)...x....n...% 0400 ba 40 41 4b c0 4f 85 3b 69 47 01 83 14 d4 ac f3 [email protected].;iG...... 0410 30 9a a5 92 58 e7 a2 6b 2a c0 c8 18 af d7 b8 b3 0...X..k*....... 0420 e7 c5 30 fe cf 66 d1 1e bd a2 68 ed 57 5d 07 89 ..0..f....h.W].. 0430 2d e6 c8 34 5b 83 90 e2 35 af 41 98 ff 13 f3 11 -..4[...5.A..... 0440 c1 25 e7 75 14 06 d9 a4 cf 11 d3 ba 24 15 eb 6b .%.u........$..k 0450 6f a7 6b ad f7 07 42 27 3c ba 13 e3 a7 d4 8a 73 o.k...B'<......s 0460 ec 6d fe d2 16 21 82 c8 75 e3 1c d3 60 2a 1a 63 .m...!..u...`*.c 0470 7e b9 13 f2 7d 8a 9a 38 8e 60 7e 45 64 1c f3 8c ~...}..8.`~Ed... 0480 dc 5e 19 52 a5 c8 7f 83 ba 95 6c 61 c9 d2 a1 69 .^.R......la...i 0490 1c 15 f1 f3 9c ca fa e7 81 d2 57 1b e0 bb 07 88 ..........W..... 04a0 15 f7 ac c2 ea 84 86 2a 20 a5 c0 07 5f af 50 81 .......* ..._.P. 04b0 15 62 9a 52 e5 d7 d6 ae ec 1d d4 2e bc e5 9e 31 .b.R...........1 04c0 d2 c7 18 a6 08 9c 40 7d b1 df f8 0f 31 92 35 f3 ......@}....1.5. 04d0 19 d8 f5 fc 55 cd 3a e8 91 f9 f8 fb cf b5 72 a5 ....U.:.......r. 04e0 6a f5 0c 07 33 83 1b ef 47 a6 0b 24 03 f5 9d 16 j...3...G..$.... 04f0 76 c7 8a 42 d2 15 0f 8d f5 8d c4 24 03 95 b8 41 v..B.......$...A 0500 d3 61 23 71 00 49 3f bc 9b 6f 5d 64 5f 7c a1 75 .a#q.I?..o]d_|.u 0510 2e 2d 40 87 ab 83 e2 e7 fb 97 4e ea 77 49 d1 33 [email protected] 0520 82 ba 21 b9 3e 47 88 02 4a 8d f6 b4 c4 f2 49 f6 ..!.>G..J.....I. 0530 ca 17 d2 b2 13 ea a0 3f 9a a9 b9 d3 fd f4 15 96 .......?........ 0540 19 0f bd ee fd f3 17 1b fe 17 49 e9 9a 0c 37 66 ..........I...7f 0550 3a 4d 99 3e 70 9a 1c 88 30 23 cb 45 9d b4 dd 25 :M.>p...0#.E...% 0560 91 ba e3 f2 25 59 38 75 0f 34 c5 8c 39 bb cb 25 ....%Y8u.4..9..% 0570 54 83 a9 3c f7 00 50 92 f0 fd 69 92 50 ea ca 9a T..<..P...i.P... 0580 8b 0c b9 f5 0c 39 25 9c 68 a7 8b da f3 ae 39 51 .....9%.h.....9Q 0590 ed e4 3c bc d1 e7 2f 93 3f 73 08 a7 6f 5c 27 94 ..<.../.?s..o\'. 05a0 cd 30 c6 ec af 63 e1 ab .0...c.. No. Time Source Destination Protocol Length Info 2510 31.573604 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=83679 Ack=1629 Win=1002 Len=1448 TSval=543142 TSecr=727724 Frame 2510: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 83679, Ack: 1629, Len: 1448 Data (1448 bytes) 0000 f4 bb f3 28 64 bc f4 f8 b6 86 1d 01 5d 0d 59 7a ...(d.......].Yz 0010 67 c3 6f 48 6f 02 15 bc 21 c1 f6 63 0a 98 64 07 g.oHo...!..c..d. 0020 9c 65 e0 13 b0 70 32 c8 41 ca ab 1b af ce 48 2c .e...p2.A.....H, 0030 cb ee f0 ec 69 e3 b3 74 2d 80 c5 a3 85 69 3b f0 ....i..t-....i;. 0040 52 b2 05 22 53 b0 ce 83 10 8c 25 47 3f f2 ad d1 R.."S.....%G?... 0050 32 55 cb 95 20 5d a3 15 1e 85 ab bf d3 2b 34 62 2U.. ].......+4b 0060 d7 19 27 21 03 fc 2c 59 78 db da 74 58 56 8f e8 ..'!..,Yx..tXV.. 0070 07 d7 4b d3 ae af 01 49 d8 7a d0 9b 9f 56 7d 6c ..K....I.z...V}l 0080 da 94 83 cd 85 41 cf 90 f2 bc 35 d6 82 7e 79 5a .....A....5..~yZ 0090 3b ca 96 9d 4b 23 ab d6 f6 3a c0 3c 99 9d 3b 01 ;...K#...:.<..;. 00a0 fe 25 e8 b1 8c 64 3b db e1 97 eb ed bd 71 af 56 .%...d;......q.V 00b0 76 48 57 0a e8 1e a2 1f 34 d1 63 98 e7 d1 95 1d vHW.....4.c..... 00c0 6e f3 53 de b1 d1 35 e0 d5 be 1a 37 db 86 0d 76 n.S...5....7...v 00d0 bf d6 87 15 7f 8e 73 60 f6 8b 4f d0 a1 36 77 e4 ......s`..O..6w. 00e0 7c bf 8d 36 b4 e8 33 5b 5b 41 b5 dc 52 81 fd f2 |..6..3[[A..R... 00f0 06 25 8f 27 5f ca d1 01 40 a0 95 f2 24 be d0 62 .%.'_...@...$..b 0100 bc 95 e8 b0 fa ce 5d 5f 20 b0 56 50 73 df 1d b5 ......]_ .VPs... 0110 de 98 b5 ac 94 8d 92 e9 70 b5 ab 51 c8 c5 d5 ea ........p..Q.... 0120 6d 97 b6 58 78 ed bd 79 9a 18 1c 6e 64 b6 1b 0a m..Xx..y...nd... 0130 90 e8 c6 fe e9 83 60 48 f9 d1 4f 11 85 f9 52 4a ......`H..O...RJ 0140 a7 60 16 1f e3 6c 76 fd 6b 85 e4 eb bd 78 5a 9b .`...lv.k....xZ. 0150 67 8a 1b d2 3e f3 3b 97 bb 99 18 99 8f d9 37 e5 g...>.;.......7. 0160 dc 66 e6 2e 16 ce 25 26 4b 50 ee 23 8c d5 39 ae .f....%&KP.#..9. 0170 88 ec 34 c0 51 3d b8 cf 7b b4 bc 2c a2 80 dd 8c ..4.Q=..{..,.... 0180 2a 8c ea a6 75 3d 9e 5b f7 14 63 3e a3 f2 40 78 *...u=.[..c>..@x 0190 cb 54 f5 60 f1 05 94 f8 e3 b8 78 d9 07 e5 82 06 .T.`......x..... 01a0 ea 0a d3 bc 13 b3 f8 e1 e2 17 d2 fb 53 1a a5 23 ............S..# 01b0 03 a0 ca bb 6c 2f a7 5c fa ec 62 81 14 a5 cd 9c ....l/.\..b..... 01c0 4a ca 6e 9c 3e 8d 9e df 69 0c f3 8e f8 30 f6 0b J.n.>...i....0.. 01d0 92 dd da f7 e4 0d e3 6d fb 31 78 b5 9c 15 79 1c .......m.1x...y. 01e0 02 98 5d 98 b7 23 38 0c d2 33 94 04 93 99 53 73 ..]..#8..3....Ss 01f0 de 31 a5 52 84 5b b5 fa 8a d7 de 52 5b 5c 30 2b .1.R.[.....R[\0+ 0200 c9 ac 3d 13 d4 32 00 84 99 bc aa f8 7c 6e e3 58 ..=..2......|n.X 0210 5a 44 4c a0 82 b4 86 02 f6 e3 e0 fd b5 41 99 f8 ZDL..........A.. 0220 08 29 50 4d 4e d4 98 de be 94 3a 1d 0d 64 4a 85 .)PMN.....:..dJ. 0230 cf 43 5e 3f b4 37 fb ff cf fa e0 03 3a 86 b6 82 .C^?.7......:... 0240 69 34 f5 e0 f9 ec e4 f0 b0 f8 dd 60 91 d8 cb 3a i4.........`...: 0250 a1 8b 68 f1 cb 8d 86 c2 eb d1 b6 a6 36 e4 d9 d5 ..h.........6... 0260 67 34 b0 bc e3 ce 48 3c 55 eb 6b 2b 93 c1 27 6f g4....H<U.k+..'o 0270 7c d5 c7 54 e4 8d 22 d2 57 01 71 7c da 2f 7c 47 |..T..".W.q|./|G 0280 8d 90 f1 3c 39 05 dd 5c d8 70 37 73 13 1a 52 9d ...<9..\.p7s..R. 0290 b3 d5 51 ce db ff c0 c6 86 f8 8d 45 db 26 48 90 ..Q........E.&H. 02a0 c6 88 4e 29 91 66 6a 3c a4 f1 8b 33 ef 64 e0 43 ..N).fj<...3.d.C 02b0 5f 91 8b 60 8f 52 73 94 4c e6 46 da 0e 19 4a d5 _..`.Rs.L.F...J. 02c0 88 4c 12 34 e0 5c bc 5b c2 98 ad a7 05 f8 8f 16 .L.4.\.[........ 02d0 ab ae f4 63 72 70 b7 a3 91 a3 0b d7 a8 7a f1 bf ...crp.......z.. 02e0 a1 e9 a5 65 b5 53 61 c2 dd d4 61 6d 50 73 43 36 ...e.Sa...amPsC6 02f0 9a 56 ae 42 92 e1 8c 1d ce c0 92 16 56 1e 3f c9 .V.B........V.?. 0300 07 d7 ca 4c 2f 04 5f 6f ae 09 bf 96 68 41 1d ce ...L/._o....hA.. 0310 e1 65 14 7a 38 62 6a ec ec ab 63 c1 93 0e 4e 27 .e.z8bj...c...N' 0320 f6 19 88 fe f5 61 d6 b7 c5 1d 9b 97 a1 b5 ff a4 .....a.......... 0330 ed d6 40 6c 00 8e 05 77 47 2e 77 b4 13 7d 5f d4 [email protected]..}_. 0340 1b 62 d7 6a 39 8a c2 36 4f 7f 25 94 77 63 0b c2 .b.j9..6O.%.wc.. 0350 ef 8a ed d2 dc 0a bf 29 c2 5e 4f 87 4a 84 4c 0f .......).^O.J.L. 0360 86 ba 11 1b c3 b6 5c ff 52 5d 08 85 21 7e 30 fe ......\.R]..!~0. 0370 3d b5 32 46 b6 d2 ed 73 9f 0f ca ef 1c a4 b1 e7 =.2F...s........ 0380 5a d1 90 12 66 a8 54 e8 1b a5 54 57 14 d2 01 6b Z...f.T...TW...k 0390 17 2d 48 90 f5 31 dc e3 73 cb 30 c7 d1 c8 76 15 .-H..1..s.0...v. 03a0 3c d1 bb 75 c4 1a b0 a9 29 67 72 6a 0d 17 a0 79 <..u....)grj...y 03b0 2f 3a 4e 8f 73 33 dc 4a d1 8f 2d 19 ae 7d 5b a6 /:N.s3.J..-..}[. 03c0 42 96 9d 11 e8 5f 8b 54 13 74 ef af e0 a6 8e b7 B...._.T.t...... 03d0 02 03 43 e0 8e 95 83 12 df 77 30 3a 74 49 34 27 ..C......w0:tI4' 03e0 bd ea 6c 74 3b fb 0f 65 3f 7c ff 99 a5 c0 bd 27 ..lt;..e?|.....' 03f0 93 12 9e f4 a4 c2 00 f0 da 05 88 60 42 da 67 6c ...........`B.gl 0400 6e da d3 c9 73 0e 0b 28 11 e5 e1 08 c5 ac 1a 77 n...s..(.......w 0410 e1 35 84 bb 86 63 19 41 6a ff 3e da 35 db 02 e4 .5...c.Aj.>.5... 0420 d2 21 db 6a 4e e6 9e 2f 4d fc 0c c3 80 a0 15 47 .!.jN../M......G 0430 49 dd 1e 5a 6c f5 f2 59 4b b5 dd 9d 22 89 c0 be I..Zl..YK..."... 0440 23 78 e1 4b 5d a4 42 2b 5e ad 78 33 7e 3e ff 4e #x.K].B+^.x3~>.N 0450 27 8c a4 d3 49 cb 44 da 22 bc 67 fd 8a 3d 2f fc '...I.D.".g..=/. 0460 8f c0 6a fd 8e d6 aa ab eb cd 11 fb 33 d8 fe 43 ..j.........3..C 0470 af 76 eb b1 c9 f0 8a e0 af 83 02 31 c9 05 c5 09 .v.........1.... 0480 0b da 9f e6 1b fd 77 9f d3 4d 2e 90 2f d4 ea 6a ......w..M../..j 0490 9e bc 15 b4 fa a3 83 36 15 89 c3 dc 7a 6a 16 49 .......6....zj.I 04a0 b3 13 0d bb 56 bb 6e c8 3c f5 df 65 89 20 30 45 ....V.n.<..e. 0E 04b0 2f 86 bd 17 71 ac 3a be 1a 72 83 e1 e9 20 6f 5d /...q.:..r... o] 04c0 e8 a4 93 a4 23 86 81 df 81 62 bd 2d 58 f9 2e 3a ....#....b.-X..: 04d0 5e 00 08 cf cb 6a 6c b2 ed 5e 85 2e 4b 00 0b a4 ^....jl..^..K... 04e0 b9 40 7b d9 d5 15 03 02 fc a7 2f f0 3f aa 28 bb .@{......./.?.(. 04f0 72 f1 d8 29 cf 7e 9b 68 b9 44 5e a1 4c 3e bb 29 r..).~.h.D^.L>.) 0500 31 1a 6f a8 ed bf f3 a0 f4 23 49 00 33 ac c5 ea 1.o......#I.3... 0510 86 3e 8c a8 14 4f 23 e4 f8 07 26 ef 0b 07 2e d4 .>...O#...&..... 0520 25 13 de 94 e5 21 e5 fa 8c ba a9 2f 7d a9 28 b7 %....!...../}.(. 0530 c4 49 30 e2 53 3f 50 b5 bb 2b 0e 4a 8b df 46 b1 .I0.S?P..+.J..F. 0540 a2 b2 88 54 80 ae f4 66 22 0f 65 8e e4 58 17 01 ...T...f".e..X.. 0550 b4 93 c6 92 44 5d 53 bd 39 76 12 6c 5e bf d8 2a ....D]S.9v.l^..* 0560 2c 16 f9 65 bb b6 0a ac d9 84 2f ae 91 18 d4 04 ,..e....../..... 0570 ba e0 e2 24 fb ab 6a 32 fd 58 2c ed 4f e1 b0 1d ...$..j2.X,.O... 0580 82 6f d7 81 8a cf 20 72 96 c2 8b fc 8d 80 ea 33 .o.... r.......3 0590 85 cb 6d 01 ee a4 64 fa 47 3a 8a e6 d4 58 6f 39 ..m...d.G:...Xo9 05a0 86 4d 25 b2 a8 c4 7b 56 .M%...{V No. Time Source Destination Protocol Length Info 2511 31.573692 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:44:49 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23580 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 2511: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:49 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23580 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 2512 31.573746 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=1629 Ack=85127 Win=65535 Len=0 TSval=727798 TSecr=543142 Frame 2512: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1629, Ack: 85127, Len: 0 No. Time Source Destination Protocol Length Info 2513 31.573834 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=85127 Ack=1629 Win=1002 Len=1448 TSval=543142 TSecr=727798 Frame 2513: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 85127, Ack: 1629, Len: 1448 Data (1448 bytes) 0000 31 b5 85 ca a4 68 24 08 92 af 9e fc 83 ab 2e 9c 1....h$......... 0010 73 b4 f8 5f f1 08 34 06 b5 26 b7 0b 30 7f da af s.._..4..&..0... 0020 74 47 bd aa 83 14 39 ed 37 89 72 3e 62 c1 73 9d tG....9.7.r>b.s. 0030 45 a2 5b ce 6e cd d5 11 2b 57 67 19 28 01 86 f1 E.[.n...+Wg.(... 0040 ee ab 7a ec 81 53 10 a7 04 17 ef d8 12 7a ec 36 ..z..S.......z.6 0050 42 a8 b1 b3 15 5c 79 5e 18 9e 24 c1 4a a3 a4 13 B....\y^..$.J... 0060 57 95 84 8a 6a 09 37 9f d2 5c b1 da 8f 42 d1 42 W...j.7..\...B.B 0070 98 91 c8 fb 4d 6a 08 35 f4 a5 4a cb f0 8d f5 ed ....Mj.5..J..... 0080 03 3b ea 9d 4f 8b 65 48 83 27 bc 2e 44 a2 6c 3c .;..O.eH.'..D.l< 0090 47 31 bb 0d 7f 19 19 2a ab 0a 31 64 e9 a5 fc d7 G1.....*..1d.... 00a0 98 d2 e5 eb 62 02 97 a4 5d 38 08 83 0b 68 00 40 ....b...]8...h.@ 00b0 cb 4a c3 f7 16 0b e3 fb 6f 96 5c 83 e9 d1 4c a3 .J......o.\...L. 00c0 dc 4c c7 2f 6e 0c 42 c3 28 50 99 58 62 3d b0 c5 .L./n.B.(P.Xb=.. 00d0 36 8a da 6d b1 cc 03 b0 f0 6e 57 32 51 4c 59 6e 6..m.....nW2QLYn 00e0 fe a3 fa 4d 50 ba da b8 43 72 08 24 cb 77 f3 58 ...MP...Cr.$.w.X 00f0 b5 e5 d9 a8 97 bb cb fb b1 75 2f 44 ed be 4b b6 .........u/D..K. 0100 e0 fa 78 0e 42 af 66 93 2c d7 ec db 4d a5 b0 da ..x.B.f.,...M... 0110 70 3c 28 da a3 be 5d 2d d0 d9 b4 d0 7a 80 e0 3a p<(...]-....z..: 0120 c7 83 7c 98 de a9 b0 64 4e 9d 90 2e 7f a5 f3 9d ..|....dN....... 0130 63 a2 e0 62 e5 94 b8 a7 43 45 80 5f 17 0e 30 0c c..b....CE._..0. 0140 b1 3f 9e 83 91 e5 c6 67 70 8a b0 eb cc ee 7f c8 .?.....gp....... 0150 63 63 c2 ec 28 64 32 dc a9 e0 c0 fe 2c ad 0c 2c cc..(d2.....,.., 0160 04 7b 50 fb 47 12 4c 0a 43 71 70 e1 e1 1b fa 96 .{P.G.L.Cqp..... 0170 28 d1 e6 32 a5 ae d2 77 1d 1c a4 52 e5 0b ab 6d (..2...w...R...m 0180 3d 1e a0 86 a1 48 5b 17 d4 e9 b5 8d 2c ca af 08 =....H[.....,... 0190 4b 32 a1 49 65 5e ad 34 e0 db bb ed b6 53 db 07 K2.Ie^.4.....S.. 01a0 55 1a 8c 8e 73 7b 38 cb 7d fa ae 68 42 5b 9e d1 U...s{8.}..hB[.. 01b0 86 95 84 1e f8 d3 34 05 98 b9 b8 94 b7 54 a6 b3 ......4......T.. 01c0 ab 95 05 20 f0 cf 56 cc 05 ab fe 62 98 35 ca 46 ... ..V....b.5.F 01d0 61 08 b9 21 1d 5c f0 15 71 4f a2 98 f0 8c 8b 4a a..!.\..qO.....J 01e0 18 18 34 53 61 9e b9 ee 03 74 76 8d cc db 7d ef ..4Sa....tv...}. 01f0 d8 74 de 8a e1 52 43 ef 51 8c c7 36 10 60 85 d9 .t...RC.Q..6.`.. 0200 36 b5 65 0c 23 88 72 3f 50 d4 c4 8e f6 37 81 5e 6.e.#.r?P....7.^ 0210 cf 39 4c 49 70 ea c7 01 e0 23 2b 2a d1 e1 0d 6c .9LIp....#+*...l 0220 b1 4f 06 38 0c 38 32 a3 2d d4 58 ac cc 6e 55 c0 .O.8.82.-.X..nU. 0230 da c4 3a ce 39 85 00 eb bf f0 5b e0 a9 19 09 08 ..:.9.....[..... 0240 cb 5e 48 17 6e 5f d5 c9 33 0a 7a 0f 7c e6 72 8c .^H.n_..3.z.|.r. 0250 43 10 0d 1d e3 e0 a3 6b 56 9f cb 91 04 2d f7 c8 C......kV....-.. 0260 11 d5 04 60 67 37 c6 67 3a 59 ca 6b db e6 87 4f ...`g7.g:Y.k...O 0270 a5 9b 05 bc 77 1c 6b 0c 5e 47 48 93 b5 e3 28 e5 ....w.k.^GH...(. 0280 80 c7 21 12 65 ef e9 0c e4 3c 76 e2 d8 c2 c6 75 ..!.e....<v....u 0290 d7 a9 6f d9 9c e9 ff aa 81 3c 30 a2 2b 63 ab 3b ..o......<0.+c.; 02a0 e8 da ab ff 55 63 a8 cf 72 cb 1e f3 49 2c 7b b4 ....Uc..r...I,{. 02b0 a9 db a8 da 51 4d 2e 02 4f 17 de 75 ed ed 77 a4 ....QM..O..u..w. 02c0 2d d1 8f cd e5 1e 44 92 87 e9 fa 21 40 7f 2a a7 -.....D....!@.*. 02d0 03 77 df 25 af 0b ac ce 9e 18 bf 3e 55 9b b9 92 .w.%.......>U... 02e0 f0 9d 9c 1c 66 14 5a 33 e0 4f 09 13 3b 3c 8e 5d ....f.Z3.O..;<.] 02f0 b3 9a 9b 96 ff bd 91 c4 3b 99 83 29 1b e8 33 c3 ........;..)..3. 0300 43 38 d7 af 3f e4 ab 89 a6 f7 32 70 83 08 c9 6d C8..?.....2p...m 0310 b9 f7 ea 4d e7 d5 f2 eb 8b 30 23 94 4c 8d 5d 76 ...M.....0#.L.]v 0320 e3 21 ba ef a8 de c0 79 a2 87 aa a3 3d f2 88 20 .!.....y....=.. 0330 35 f8 ac 0a 10 9b 5c 18 af 0d d6 d0 61 bb 1e 6a 5.....\.....a..j 0340 89 bc 05 7f 57 19 00 5d fe d4 d4 4a b3 dd bd fd ....W..]...J.... 0350 e3 e4 f5 73 c1 63 0c 47 3f 77 54 c7 2b 81 24 0a ...s.c.G?wT.+.$. 0360 a2 9b ac 96 7f ff 11 64 36 d6 f7 2f a0 38 2b 3b .......d6../.8+; 0370 5f ed 88 fd 1e b4 53 ca fc 0f af 79 72 93 55 3c _.....S....yr.U< 0380 cd db 4c fb 63 d3 d7 88 17 70 92 3f 8c 3c c5 e1 ..L.c....p.?.<.. 0390 73 00 c2 38 8a 0f dd 41 49 f9 66 c1 44 b7 2e 47 s..8...AI.f.D..G 03a0 a5 bd 40 f3 3f aa 56 6f 7c b3 8a da df 74 17 14 ..@.?.Vo|....t.. 03b0 a3 55 db 34 fe fc c5 8b 5a ad 75 36 e4 90 05 cd .U.4....Z.u6.... 03c0 88 20 5f a4 3e 21 06 9a f0 62 5c 47 56 69 0c 07 . _.>!...b\GVi.. 03d0 1c 2f 70 51 dd d6 af b6 8b c6 97 5b 53 36 85 eb ./pQ.......[S6.. 03e0 6c ff 4a 2d 4b 41 08 73 da c5 d3 8a 89 5f 7a 25 l.J-KA.s....._z% 03f0 d3 83 6d 86 7b 0c 9d 85 a9 ef 98 29 a5 71 32 67 ..m.{......).q2g 0400 65 f7 0f a8 46 d7 0b 20 6f da 36 d3 2c a4 66 59 e...F.. o.6.,.fY 0410 c8 3b 8e ff 87 e0 2e ee f5 0c 58 74 2c 45 67 8f .;........Xt,Eg. 0420 77 7c d7 40 34 79 27 79 f4 74 b5 86 16 b6 c2 2b w|.@4y'y.t.....+ 0430 8d f1 6d 48 2a d1 33 78 9a dd 42 cc e3 a0 a8 e8 ..mH*.3x..B..... 0440 6c a3 31 f7 56 8c a0 7a fd 82 e5 b7 d9 89 50 4b l.1.V..z......PK 0450 7e 05 fa fc 55 f3 66 c9 05 61 d0 1d 9e 26 2b 53 ~...U.f..a...&+S 0460 0d 7a 37 c7 1e e0 72 68 e8 28 31 34 d1 fd 1c a7 .z7...rh.(14.... 0470 0b 18 dc d6 88 9c 5d 7e 05 e1 2f 19 3e 8e fe 40 ......]~../.>..@ 0480 51 6d e7 8a ac e3 df 8f 0e 8a cf 69 35 23 a0 9f Qm.........i5#.. 0490 78 74 b0 b9 2e 2e 37 73 a7 8c aa 99 ed 3b f1 79 xt....7s.....;.y 04a0 e0 73 4e 00 92 e5 5c 0f 4c 13 62 04 a3 c0 91 5f .sN...\.L.b...._ 04b0 7a 33 3c e3 47 60 bb e1 4e bb f2 44 4e 9f d2 57 z3<.G`..N..DN..W 04c0 cf 80 47 12 81 95 48 43 28 b9 94 6b 89 04 95 78 ..G...HC(..k...x 04d0 c3 a5 04 7c b9 91 4a a8 23 4d dd 80 d3 c1 91 d5 ...|..J.#M...... 04e0 ae 47 51 fb 91 47 35 b2 76 ae d0 5e 99 48 4f fe .GQ..G5.v..^.HO. 04f0 7e 8e 0d 3f 88 fc bf c6 1f 75 04 e6 c1 4e ee e2 ~..?.....u...N.. 0500 90 ee 70 38 d0 a7 33 c0 71 f4 a4 e4 d6 e1 9e 55 ..p8..3.q......U 0510 75 71 1d d9 14 18 8e 0b 83 5c 81 15 aa 47 46 9e uq.......\...GF. 0520 f8 19 93 a6 93 65 cc d6 f9 2b 15 ed 48 c9 e1 00 .....e...+..H... 0530 d5 4d 82 d6 c3 31 24 b2 34 69 1e 39 6d d3 d9 d7 .M...1$.4i.9m... 0540 eb f6 31 f9 a5 fe 8b 14 12 a8 9d 16 ff d6 09 41 ..1............A 0550 a7 3e 3a bb 65 60 6f a0 99 4b 16 63 6c a2 01 c9 .>:.e`o..K.cl... 0560 ad 36 d5 d1 3e cd e7 fa e9 07 a3 36 40 aa 5b 4f .6..>......6@.[O 0570 03 3e 4b 09 e7 23 24 c2 91 c1 99 e9 c6 70 61 d7 .>K..#$......pa. 0580 57 c2 97 f0 1d b4 67 dc 3c 67 2e 0d 91 a9 f0 3d W.....g.<g.....= 0590 25 39 5d 50 75 0b ad 2d 17 25 4e 9b be de f8 ab %9]Pu..-.%N..... 05a0 0b e6 06 d1 b0 67 a4 4e .....g.N No. Time Source Destination Protocol Length Info 2514 31.573912 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=86575 Ack=1629 Win=1002 Len=1448 TSval=543142 TSecr=727798 Frame 2514: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 86575, Ack: 1629, Len: 1448 Data (1448 bytes) 0000 10 b1 be 11 23 b3 b7 d3 ae cc 43 0a dd a3 9c 63 ....#.....C....c 0010 39 d4 a2 a7 ee 75 93 0b 77 05 e0 d1 31 5e 34 49 9....u..w...1^4I 0020 4a d2 69 14 d9 ca 1f 56 ca b5 e1 3c 48 50 1a 3c J.i....V...<HP.< 0030 0a 6c 19 a4 65 3a 10 83 8f 7f 92 d4 1b 86 59 ce .l..e:........Y. 0040 c0 fd 8a f7 5a 0d e4 8f c4 5c ee 0e d7 c1 b2 fd ....Z....\...... 0050 dd 7c 85 ca a6 d0 b9 23 bd 91 8f f1 ba 87 27 b0 .|.....#......'. 0060 a4 68 1b 60 b5 1d f8 7d 13 57 03 df 72 92 4f 1f .h.`...}.W..r.O. 0070 32 18 83 2d 08 ea fd df b8 32 c2 e6 c8 91 dd a7 2..-.....2...... 0080 9c df 16 b2 35 b6 77 27 77 07 84 86 82 6c cb 7a ....5.w'w....l.z 0090 d1 66 28 80 78 2a e2 4e ea a2 7c 79 cd c3 c4 81 .f(.x*.N..|y.... 00a0 20 15 32 25 42 3c 28 c1 e5 77 12 17 35 8c 4e 5a .2%B<(..w..5.NZ 00b0 38 3d 02 6b 04 08 e3 fd 0a 45 2d e0 94 52 a2 ad 8=.k.....E-..R.. 00c0 29 e8 04 a2 cd 6f 36 25 d0 a7 ac 9f dc 42 07 9e )....o6%.....B.. 00d0 ca 40 be 07 a6 05 ec 72 95 52 f2 a5 27 89 29 c6 [email protected]..'.). 00e0 fe 4a 0c 6c b3 0c 10 e9 1d 75 69 07 f8 ab ac 7f .J.l.....ui..... 00f0 c6 7b 7b 5d c2 d1 fb e8 59 5a 77 e3 e1 ec 3d 58 .{{]....YZw...=X 0100 0f c4 1f 49 d7 08 12 5f 4b b7 86 15 c3 f0 e5 df ...I..._K....... 0110 cf 1a 3e 8d 98 07 39 93 0b f2 26 58 7e a1 a0 4b ..>...9...&X~..K 0120 4c 57 11 35 e9 12 c1 52 a8 9c 68 d8 cd ce 6b 9f LW.5...R..h...k. 0130 27 37 2c 55 ad e6 19 d3 03 0a 6c d6 06 23 20 08 '7,U......l..# . 0140 d5 8c 9b a5 16 d8 90 5e 62 eb b9 28 e4 cd a4 e4 .......^b..(.... 0150 ba 6d 6c 8e e9 03 62 57 de c5 82 c9 e9 9d 3f 42 .ml...bW......?B 0160 37 e5 74 4f 39 74 d9 17 ba 93 85 6f d4 47 a2 42 7.tO9t.....o.G.B 0170 e6 f9 14 9f 5e a4 a4 e9 cb 85 c9 42 b0 07 d5 c1 ....^......B.... 0180 59 d6 7b 87 5d 7d db f7 ad bc 7a 0f 9f 5e dd 12 Y.{.]}....z..^.. 0190 29 00 7d 5a 56 65 df 7b 45 ce ad f8 da f1 30 12 ).}ZVe.{E.....0. 01a0 33 7e c3 d9 dd ba e4 0f 9f 1a 6b 6d 29 66 92 28 3~........km)f.( 01b0 22 55 96 59 5b 25 ca d8 7a 84 ed 24 1f d0 fc 21 "U.Y[%..z..$...! 01c0 a6 c3 de a2 a2 fb 5e 69 38 10 70 5c 2f 35 25 39 ......^i8.p\/5%9 01d0 11 92 35 b3 bd 65 38 8f 7e 22 2f 38 e4 6d c9 99 ..5..e8.~"/8.m.. 01e0 ca d3 4b 00 49 ab 25 2d f8 b1 f7 eb d5 48 75 fa ..K.I.%-.....Hu. 01f0 f7 f6 ba 83 cf a3 79 f0 5d 98 1a 79 7a c9 8c d1 ......y.]..yz... 0200 26 a1 36 e0 7b 40 6c 5a 1f 5c 4c 7d bf 19 4e b4 &.6.{@lZ.\L}..N. 0210 65 fa e6 4f 08 4c ad 85 62 f4 fa 9a b6 69 a9 fe e..O.L..b....i.. 0220 49 72 72 bf ee 84 a0 c7 06 be 62 8d dd a7 51 2d Irr.......b...Q- 0230 e9 32 ef 8d e1 fb cd e6 71 15 a0 d8 9a ab 18 6d .2......q......m 0240 13 c9 bb e6 ad 2c 2a 03 15 74 58 a2 6f 31 7b be .....,*..tX.o1{. 0250 1a a2 4c 20 ee 49 95 ea 11 ba fc 69 4c e3 f3 27 ..L .I.....iL..' 0260 4b 1a 83 ac 90 b9 42 90 47 59 24 93 25 cb 78 57 K.....B.GY$.%.xW 0270 01 9f cb 59 61 8d 5b 86 9f b5 4e 79 f7 48 da 8c ...Ya.[...Ny.H.. 0280 42 65 a3 1f 52 c5 ed 85 2d b0 c4 ff f2 2e a1 af Be..R...-....... 0290 19 84 0b a0 ac b3 a0 37 13 2a 23 9b 73 82 21 d8 .......7.*#.s.!. 02a0 cb bf c2 9d bb 8f 4a 3f 4d 10 da 32 12 de 1d 1d ......J?M..2.... 02b0 48 de 47 3e de 65 82 d3 bd 9c 1b 01 b6 01 22 3b H.G>.e........"; 02c0 6a 2c 5a 98 1f 22 a1 0d bc 08 0e cb ab 78 1a 4d j,Z..".......x.M 02d0 42 89 78 71 78 5e c3 dd f5 09 ca 80 fd 30 da 6c B.xqx^.......0.l 02e0 c4 df 56 4f fb 93 39 9c ec 32 8f a3 03 ee 90 b7 ..VO..9..2...... 02f0 26 4e b7 da c7 e3 ed a2 74 5e f7 51 5c a9 14 ee &N......t^.Q\... 0300 f5 b1 c2 f5 8c 76 cb 96 04 99 79 cb c5 26 cb e4 .....v....y..&.. 0310 bd e1 7d f1 cb 02 5b 5a d5 ed fd ef 40 34 35 ad ..}...[Z....@45. 0320 50 c8 9f d5 d9 51 46 10 3e 45 4b 39 2d fd 88 98 P....QF.>EK9-... 0330 63 a5 67 8d 72 49 86 2b 0f ff 41 3a ed e3 ea 47 c.g.rI.+..A:...G 0340 74 6a f9 cb 29 69 75 b7 65 cf 69 8b 5e c5 f1 8f tj..)iu.e.i.^... 0350 f8 fe ed d2 4a 60 79 ea e9 fd 5d 04 54 ea ef 7e ....J`y...].T..~ 0360 c1 a5 4b e3 c0 f6 8d 70 91 ed b8 59 0c f3 ed 76 ..K....p...Y...v 0370 cf a6 37 35 6f fb 21 7c 87 ee 85 3e 61 40 c5 ad ..75o.!|...>a@.. 0380 f3 79 4e 1f 98 64 0f f0 5c 7f c0 03 d4 0f 42 c1 .yN..d..\.....B. 0390 a0 79 87 71 5b 64 f4 2a 42 5e 20 74 68 c1 d7 0c .y.q[d.*B^ th... 03a0 1b e2 3d 4c 0e b8 38 fe 1d 83 9a 3f 53 b6 dc 27 ..=L..8....?S..' 03b0 2d 79 10 75 18 c0 17 3a c9 53 e7 5e 3d 89 d0 e0 -y.u...:.S.^=... 03c0 10 1f 1d 2e 9e aa 75 1f 2f 11 49 f7 3f 0c f3 38 ......u./.I.?..8 03d0 8d 9a 7d 39 7e ff ab 92 4e 0d 62 55 62 ee 45 d8 ..}9~...N.bUb.E. 03e0 40 86 52 7f 0d 32 e7 81 3e 50 d1 e1 a3 dd 9a 61 @.R..2..>P.....a 03f0 f2 bb 5f de 56 54 52 e9 d8 6b 64 ee 00 20 ef 1c .._.VTR..kd.. .. 0400 0a e2 01 00 f8 b7 cf c4 b4 68 7a 6d a4 b5 4d d8 .........hzm..M. 0410 5a c7 74 3a a0 92 69 a5 b4 9f 80 2d 91 e9 7a 85 Z.t:..i....-..z. 0420 48 c5 ea 5f 37 6c 4d 50 a6 4b 0c bd 5c e6 a7 eb H.._7lMP.K..\... 0430 39 e0 19 86 37 eb 94 13 4d 46 31 f7 14 79 05 35 9...7...MF1..y.5 0440 dc 3e b1 37 4a e1 fd 1c 3d 20 49 46 dd ab 8a ab .>.7J...= IF.... 0450 9b 8a 04 4a ee f6 2e e8 4b 76 0b a0 c2 63 dc 4a ...J....Kv...c.J 0460 41 09 77 1c e2 d9 7e d9 74 42 84 b0 c5 8e d8 87 A.w...~.tB...... 0470 f5 c2 7a 47 06 26 ca 89 80 57 32 9f 2c 52 fd a8 ..zG.&...W2.,R.. 0480 a6 2d bf 57 8b dc ed 08 71 82 b6 8a 69 8b ab 88 .-.W....q...i... 0490 35 0b b2 12 59 b2 d3 3f b5 79 11 fe db 50 0c c7 5...Y..?.y...P.. 04a0 7a 34 66 d5 f7 aa 23 04 1f b6 52 3f 9e 4d 32 71 z4f...#...R?.M2q 04b0 de 23 43 a1 5a 40 1d 2d bd 18 4b 3e 55 45 d0 5f .#[email protected]>UE._ 04c0 4b 13 0c d6 1f 44 34 32 57 ca 75 70 8d 0f bf c2 K....D42W.up.... 04d0 f3 93 cd 8d 06 e2 b6 c4 f8 ef 95 1b 93 21 68 7d .............!h} 04e0 6b ef 26 ee b4 43 a1 9a 41 ae 62 e1 60 68 0e 6c k.&..C..A.b.`h.l 04f0 0b 85 cb 04 b8 e1 e6 4a 22 39 45 e4 18 4c b6 74 .......J"9E..L.t 0500 c4 0d dd 75 a6 fd 52 80 c3 26 84 3d 4a c2 b3 42 ...u..R..&.=J..B 0510 89 44 43 3d 0f 15 24 5e 9c a2 42 1f 7a 5c 05 dd .DC=..$^..B.z\.. 0520 c6 33 64 c0 d6 2b c4 c4 0b 5b 37 8b 59 3f c4 65 .3d..+...[7.Y?.e 0530 80 40 ff 22 09 0e 5d f6 ac 0a 98 f1 92 83 c0 1d .@."..]......... 0540 85 32 24 da 4f ba 7d cf 59 4b 9e 11 55 49 a8 9b .2$.O.}.YK..UI.. 0550 8c 67 14 eb b0 ee 8d 91 11 45 2e be 42 4c 75 d3 .g.......E..BLu. 0560 4a 86 57 07 09 6e ff aa d9 dd f7 26 cf 44 f2 e8 J.W..n.....&.D.. 0570 4a db b6 78 aa 5d c6 5d 9e 66 11 87 4d 7d 17 78 J..x.].].f..M}.x 0580 be 4b d8 f4 59 f7 a5 e1 ff 50 5f c9 3d 10 8c a2 .K..Y....P_.=... 0590 f4 70 ed 22 9f 48 8f e7 e5 a6 ea b4 75 a3 a6 9b .p.".H......u... 05a0 aa 36 bd c4 d0 dc 80 d1 .6...... No. Time Source Destination Protocol Length Info 2515 31.573998 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=88023 Ack=1629 Win=1002 Len=1448 TSval=543142 TSecr=727798 Frame 2515: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 88023, Ack: 1629, Len: 1448 Data (1448 bytes) 0000 b1 db 4c bb 33 3d d9 ab 40 6f 81 79 09 c8 ee 9b [email protected].... 0010 82 95 2d ae bf af 71 63 8a 90 9c 42 a7 7f 77 f5 ..-...qc...B..w. 0020 5d 60 c7 2e 1d 0d bb 79 c3 5d 0c 8f 4f 0c 59 d8 ]`.....y.]..O.Y. 0030 17 60 1e bf 27 90 5e f6 bb 58 69 76 9c 55 e8 e4 .`..'.^..Xiv.U.. 0040 ce d8 4e 9f 91 f2 b4 f7 a2 21 a3 89 26 aa af 04 ..N......!..&... 0050 87 3b 5b 8a 13 31 63 86 69 c5 08 92 fe 58 13 e7 .;[..1c.i....X.. 0060 2b d5 f9 c8 f3 17 e9 ca e2 c8 11 77 57 47 54 a8 +..........wWGT. 0070 2c 4d 32 8a f9 9b cf 9a 2a b2 25 02 60 a9 4b d4 ,M2.....*.%.`.K. 0080 36 ec ae 1d cb 46 09 92 be 32 32 d9 27 df 1b 5e 6....F...22.'..^ 0090 f0 43 1a 5a c4 77 65 b6 00 d7 69 cf f0 20 40 86 .C.Z.we...i.. @. 00a0 6d d5 0d ed 7b 2a 92 d8 6f 0f bb 0b f7 81 1c 22 m...{*..o......" 00b0 98 e8 76 d2 e8 c6 5f 7c 05 d3 1d 52 b7 15 da a4 ..v..._|...R.... 00c0 5d b8 d7 6b f4 51 eb 74 47 a7 76 b1 ab bd c2 26 ]..k.Q.tG.v....& 00d0 5e 62 49 e5 db 06 26 13 27 d4 56 c6 a7 60 b4 4a ^bI...&.'.V..`.J 00e0 6e 27 1b 17 a8 f0 0d 1a c4 fc d4 d2 04 7b 37 56 n'...........{7V 00f0 2f 51 46 92 08 63 55 f3 68 bb 24 ca ce eb a6 25 /QF..cU.h.$....% 0100 60 20 fa 53 a3 48 3b a6 d1 fc 7a 0c 83 cc 03 bf ` .S.H;...z..... 0110 94 a3 0c 0c d6 fe 19 48 88 7a e5 f5 a2 09 2d be .......H.z....-. 0120 50 92 63 f2 f5 00 0d 81 da ee c6 50 f1 9d 15 ce P.c........P.... 0130 e4 d3 c4 84 e0 83 dc 27 65 d8 25 49 05 98 c7 75 .......'e.%I...u 0140 40 7d 02 d3 ef 86 f0 b3 6d e4 a7 36 2d 69 97 ec @}......m..6-i.. 0150 d2 4a 1b ca ff 93 83 b0 a7 cd 84 ab d2 75 74 a6 .J...........ut. 0160 92 b7 ed af c7 51 f7 d8 2a 08 fe b9 ae f8 d6 c2 .....Q..*....... 0170 28 9c 43 be f8 d0 38 4e c5 7f 88 17 b5 26 18 8b (.C...8N.....&.. 0180 7b 52 ba 35 8e ed d8 2f 9b a2 a7 f0 ae dd 1e bc {R.5.../........ 0190 22 61 74 b8 29 d0 89 e3 13 c2 4a 34 eb a8 9a 8f "at.).....J4.... 01a0 78 f8 30 44 87 98 8f 85 b7 4f 45 58 5a 0f 39 36 x.0D.....OEXZ.96 01b0 e2 ea 98 20 0d fe c6 bb 93 02 22 fe 79 13 d4 56 ... ......".y..V 01c0 77 12 9b 46 55 b9 7f 3f 8e ad fd 7b 9f 2f 1e ff w..FU..?...{./.. 01d0 27 4b 1a d5 13 19 39 bf bf 04 5e e9 84 46 11 90 'K....9...^..F.. 01e0 9c dc 87 62 54 b8 9c 73 09 78 66 cb 74 39 8b e6 ...bT..s.xf.t9.. 01f0 e0 42 6d 8a e7 54 fe 53 17 71 d0 54 af b5 05 d3 .Bm..T.S.q.T.... 0200 ad c9 ca 16 57 00 12 0c 14 f0 9a 76 f5 13 2b df ....W......v..+. 0210 fa 1c 60 f5 58 c1 36 db 1a c2 29 02 e7 eb d6 8d ..`.X.6...)..... 0220 50 3c bc be 53 25 6f a0 db 9e b3 9c f9 93 42 14 P<..S%o.......B. 0230 22 c9 64 b2 02 40 7b c1 d9 af 21 8f 8d 17 64 86 ".d..@{...!...d. 0240 94 0b 6c 12 ed 59 65 8f 57 3c 2f f0 43 0a 1a 2b ..l..Ye.W</.C..+ 0250 87 f5 13 2f d0 cf c7 de 60 7a 67 94 c5 54 c8 54 .../....`zg..T.T 0260 c1 5e f1 35 4c 52 e7 fa 92 0d 0c 28 ad 2c d1 a9 .^.5LR.....(.,.. 0270 e6 3d 43 de 5f e6 76 ab 95 a4 5a 90 c4 96 ac 90 .=C._.v...Z..... 0280 a9 ba 71 34 f6 d4 8f 77 1c 0e 38 c4 2d 27 ec 70 ..q4...w..8.-'.p 0290 8f c8 e0 65 50 18 68 74 39 f4 7d 58 27 ab f1 78 ...eP.ht9.}X'..x 02a0 6e e3 05 f8 1f 34 41 24 51 b5 61 72 25 de 55 09 n....4A$Q.ar%.U. 02b0 38 dd b6 d0 88 dc d8 dc bf d7 65 d9 51 d6 f4 ec 8.........e.Q... 02c0 b4 ab 42 2a 55 03 4f 02 70 a0 9d ca 0a e5 56 d0 ..B*U.O.p.....V. 02d0 61 b3 eb 72 71 4e 59 fb 8a 57 ed a1 e2 b1 7b ad a..rqNY..W....{. 02e0 3f 12 66 35 08 26 4b c7 54 4f 49 1b 03 2b 4d bb ?.f5.&K.TOI..+M. 02f0 2f 5b aa 6d 30 dd de 30 81 12 33 55 25 b1 64 f2 /[.m0..0..3U%.d. 0300 3f 15 0e bd 58 10 68 87 b7 1d bb 8e fb 92 4c ac ?...X.h.......L. 0310 0f 15 36 6d 5a 43 be ff 9d ea 76 0e 74 fe ad cf ..6mZC....v.t... 0320 33 26 ff 6f 12 ee 1b b2 b7 cb 96 7b 0f f3 fe 24 3&.o.......{...$ 0330 8e eb cd c2 8f 0d 27 f7 42 89 e7 99 17 5f b9 96 ......'.B...._.. 0340 87 c4 43 02 bb 4c 95 a3 22 f4 45 5c 73 d3 a7 aa ..C..L..".E\s... 0350 2b f5 e0 d7 ac 27 b3 5f 87 48 cb f0 e4 57 61 bd +....'._.H...Wa. 0360 39 ba 05 be 2a fe 72 68 62 f2 00 ad 20 06 6a d0 9...*.rhb... .j. 0370 e2 c6 e4 8b 6c da 5b d5 a6 43 f0 66 51 51 b4 5f ....l.[..C.fQQ._ 0380 3e 7b 46 3d 2f b9 62 4f 98 97 5a d5 12 25 3f c4 >{F=/.bO..Z..%?. 0390 1f 9e e2 c8 4f db cd 56 38 d8 e0 1a fd 37 51 bb ....O..V8....7Q. 03a0 fc 6a 98 17 cf 20 6b 6e 8b b5 98 31 de 4f 49 8f .j... kn...1.OI. 03b0 27 18 ac 81 b0 7d d0 18 75 08 d6 03 62 7f 94 41 '....}..u...b..A 03c0 e8 74 8e c9 aa da 11 c8 42 5b b7 5e d8 5a 62 0f .t......B[.^.Zb. 03d0 be 01 52 4f 87 c5 aa 3e 25 1e 26 6f 5b a7 84 0f ..RO...>%.&o[... 03e0 1c 05 4f ed 7f 2f 1d b7 b5 61 5f 10 c5 e8 c7 d4 ..O../...a_..... 03f0 d5 99 89 0c d5 50 19 cf c2 d8 48 0d 33 35 2d 7a .....P....H.35-z 0400 f1 50 52 39 4f e0 04 c6 c2 a4 32 1b 85 8f ff 9a .PR9O.....2..... 0410 cb 33 21 b8 f7 2a 6d 8d 29 98 2a 1b 5c ab 71 93 .3!..*m.).*.\.q. 0420 fe 30 69 a2 f0 7e dd 04 4f a1 16 ef 44 71 c9 23 .0i..~..O...Dq.# 0430 2b 3d 34 c1 d5 7b 77 10 e6 40 ab b6 bd 8c a7 a6 +=4..{w..@...... 0440 2e 8d b8 7b 62 56 82 8a 3e bc 77 93 29 01 cc 11 ...{bV..>.w.)... 0450 bd a2 79 f4 3c 8a c6 e0 6d eb 0e f2 39 e5 d7 7e ..y.<...m...9..~ 0460 b7 26 69 6d fd 15 e8 9c f4 b0 07 b3 dd 9d 32 13 .&im..........2. 0470 64 22 58 73 c4 b9 9c 08 33 c5 56 ba 97 16 18 f4 d"Xs....3.V..... 0480 0f 9e b7 9f e7 9d 3d d9 e9 b1 b9 c6 41 af 6e f5 ......=.....A.n. 0490 b0 43 37 0a 7b da 44 ce 29 26 9d 9e 71 d8 60 3f .C7.{.D.)&..q.`? 04a0 59 94 5f d6 ae 95 01 c2 3b d7 be cd b2 0c 79 60 Y._.....;.....y` 04b0 1b 9b 83 5f e2 12 1a 3e 78 81 15 4e 3b b1 51 59 ..._...>x..N;.QY 04c0 9a 31 ea 0c 47 35 cb 4d 1d 4e 99 2c fe 7f e4 cd .1..G5.M.N.,.... 04d0 86 79 02 0e e2 b2 0b 5e 37 ab 20 73 e2 f0 ce 95 .y.....^7. s.... 04e0 46 69 8f 76 e4 27 0e 21 c4 67 51 27 eb 5a 79 52 Fi.v.'.!.gQ'.ZyR 04f0 58 0d 70 cc cf 3f 30 c8 50 7e e7 51 17 54 0d fb X.p..?0.P~.Q.T.. 0500 8c 90 fe f7 1a f8 b1 62 70 d9 65 83 e9 43 5b 24 .......bp.e..C[$ 0510 3a 3b 26 4c 9a 55 26 4a 54 9a 50 54 9a 58 67 6e :;&L.U&JT.PT.Xgn 0520 11 16 9b e8 29 15 9f 54 c9 59 8e 4d 5c 15 ba 92 ....)..T.Y.M\... 0530 40 f2 5c 1d e4 cf 1b 6b 5f bc cc 53 6a dc 2d a0 @.\....k_..Sj.-. 0540 0b c2 fc 41 ee b0 f4 d3 bc 11 90 59 0c c0 56 26 ...A.......Y..V& 0550 ef 02 7a a0 ff 4f 91 45 42 99 20 6c 34 71 ce ff ..z..O.EB. l4q.. 0560 72 d4 28 ec ef 3c 76 bd 01 92 f9 26 24 e3 15 ed r.(..<v....&$... 0570 c4 f0 8f f9 88 28 f9 2b bc d6 15 fa 69 52 39 68 .....(.+....iR9h 0580 13 0d 54 c9 94 9c a5 58 88 a2 45 bc 28 65 6d 6a ..T....X..E.(emj 0590 01 82 05 d1 9c cc 75 53 b3 5e c2 15 ac 42 2f 54 ......uS.^...B/T 05a0 6e 57 f2 00 9f 20 cb 3c nW... .< No. Time Source Destination Protocol Length Info 2516 31.574054 192.168.10.1 192.168.10.203 TCP 247 34433 > cds [PSH, ACK] Seq=89471 Ack=1629 Win=1002 Len=181 TSval=543142 TSecr=727798 Frame 2516: 247 bytes on wire (1976 bits), 247 bytes captured (1976 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 89471, Ack: 1629, Len: 181 Data (181 bytes) 0000 a8 b4 0f 1b 3b 2c 70 08 99 0a 94 12 0c a1 39 7f ....;,p.......9. 0010 6c 17 49 c7 5e 84 9c 68 10 54 6b 0b e4 0c 3b 69 l.I.^..h.Tk...;i 0020 4b fe 52 37 67 3b cf c7 d5 c2 88 df 44 d1 2d b2 K.R7g;......D.-. 0030 e4 54 19 d6 b6 51 3c 34 a5 0d 3b 1f db 45 48 f1 .T...Q<4..;..EH. 0040 ea 90 69 db 72 f0 1e 63 84 3e 4a 2b 4b 59 1e 9a ..i.r..c.>J+KY.. 0050 50 75 5e fa 76 8b e5 50 8b 4e d3 83 44 5c c7 7d Pu^.v..P.N..D\.} 0060 26 e2 a0 1c c5 d0 1b f5 30 06 25 14 b7 5e 86 ac &.......0.%..^.. 0070 6a 40 9a ed 46 35 6e bd 2f 41 73 77 21 f0 42 40 [email protected]./Asw!.B@ 0080 46 bc 6f 07 6c 1c 21 1a a2 df ce 29 5f 69 f7 7f F.o.l.!....)_i.. 0090 bc c8 c7 d0 da 92 17 32 28 5b 36 08 b4 cf 79 94 .......2([6...y. 00a0 ba 3d d4 b6 1d 72 6c c6 a7 03 c2 4c ca ee a1 0d .=...rl....L.... 00b0 0a 9a e3 30 61 ...0a No. Time Source Destination Protocol Length Info 2517 31.574113 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=1629 Ack=88023 Win=65535 Len=0 TSval=727798 TSecr=543142 Frame 2517: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1629, Ack: 88023, Len: 0 No. Time Source Destination Protocol Length Info 2518 31.574164 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=1629 Ack=89652 Win=65535 Len=0 TSval=727798 TSecr=543142 Frame 2518: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1629, Ack: 89652, Len: 0 No. Time Source Destination Protocol Length Info 2519 31.705315 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2125404416, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2519: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2520 31.705338 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2125404416, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2520: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2521 31.705351 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2125404416, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2521: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2522 31.705363 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2125404416, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2522: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2523 31.712128 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=1629 Ack=89652 Win=65535 Len=74 TSval=727800 TSecr=543142 Frame 2523: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1629, Ack: 89652, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 4b 44 3e 62 ae c6 bc 02 90 4c 00 .... KD>b.....L. 0010 6a b8 28 40 2d 86 77 80 f7 c4 d7 b9 c8 d1 78 ef j.(@-.w.......x. 0020 03 48 b9 c4 f2 17 03 01 00 20 57 ab fc 1b da 91 .H....... W..... 0030 c6 95 6d f0 60 be 2a 14 bd 0f f2 94 8a 96 7f 34 ..m.`.*........4 0040 cd 12 01 a3 12 46 7e 20 8d 16 .....F~ .. No. Time Source Destination Protocol Length Info 2524 31.712186 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=89652 Ack=1703 Win=1002 Len=0 TSval=543176 TSecr=727800 Frame 2524: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 89652, Ack: 1703, Len: 0 No. Time Source Destination Protocol Length Info 2525 31.726095 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3994484992, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2525: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2526 31.726110 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3994484992, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2526: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2527 31.726122 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3994484992, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2527: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2528 31.726134 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3994484992, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2528: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2529 32.051773 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 2529: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2530 32.051805 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 2530: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2531 32.070134 192.168.10.1 192.168.10.245 Syslog 355 LOCAL1.INFO: Oct 3 19:44:50 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo.kaspersky.com" arg="/bases/apu/apu-0607g.xml.dif" sent_bytes="218" rcvd_bytes="1145" (HTTP-proxy-Visitor-00) Frame 2531: 355 bytes on wire (2840 bits), 355 bytes captured (2840 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:50 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo No. Time Source Destination Protocol Length Info 2532 32.087302 192.168.10.220 208.67.222.222 DNS 88 Standard query PTR 136.131.242.115.in-addr.arpa Frame 2532: 88 bytes on wire (704 bits), 88 bytes captured (704 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 55168 (55168), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 2533 32.097560 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 2533: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2689, Ack: 196541, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2534 32.097595 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=197758 Ack=2731 Win=46237 Len=0 Frame 2534: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 197758, Ack: 2731, Len: 0 No. Time Source Destination Protocol Length Info 2535 32.097789 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=2731 Ack=196541 Win=0 Len=0 Frame 2535: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2731, Ack: 196541, Len: 0 No. Time Source Destination Protocol Length Info 2536 32.350472 208.67.222.222 192.168.10.220 DNS 88 Standard query response, No such name Frame 2536: 88 bytes on wire (704 bits), 88 bytes captured (704 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 55168 (55168) Domain Name System (response) No. Time Source Destination Protocol Length Info 2537 32.351004 192.168.10.203 115.242.131.136 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 2537: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 115.242.131.136 (115.242.131.136) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2538 32.472451 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:15:33 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 2538: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:15:33 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 2539 32.508694 202.1.166.13 192.168.10.207 TCP 60 vaprtm > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 2539: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: vaprtm (3654), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 2540 32.508778 192.168.10.1 192.168.10.245 Syslog 202 LOCAL1.INFO: Oct 3 19:44:50 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 202.1.166.13 7x.x.x.3 3654 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 2540: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:50 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 202.1.166.13 7x.x.x.3 3654 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 2541 32.508813 192.168.10.207 202.1.166.13 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:44:25 -0400 Frame 2541: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 202.1.166.13 (202.1.166.13) Transmission Control Protocol, Src Port: smtp (25), Dst Port: vaprtm (3654), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2542 32.508855 202.1.166.13 192.168.10.207 TCP 60 vaprtm > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 2542: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: vaprtm (3654), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 2543 32.512404 Watchgua_3c:4c:d8 Dell_39:5d:dd ARP 60 Who has 192.168.10.207? Tell 192.168.10.1 Frame 2543: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2544 32.512421 Dell_39:5d:dd Watchgua_3c:4c:d8 ARP 60 192.168.10.207 is at 00:18:8b:39:5d:dd Frame 2544: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2545 32.720976 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2142181632, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2545: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2546 32.721001 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2142181632, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2546: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2547 32.721014 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2142181632, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2547: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2548 32.721027 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2142181632, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2548: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2549 32.739766 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 2549: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2550 32.739795 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 2550: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2551 32.739813 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 2551: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2552 32.739823 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 2552: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2553 32.739834 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 2553: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2554 32.739844 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 2554: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2555 32.739857 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 2555: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2556 32.739867 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 2556: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2557 32.739877 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 2557: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2558 32.739888 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 2558: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2559 32.739900 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 2559: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2560 32.739916 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 2560: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2561 32.739950 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 2561: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2562 32.739961 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 2562: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2563 32.739970 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 2563: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2564 32.740002 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 2564: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2565 32.740013 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 2565: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2566 32.740023 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 2566: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2567 32.740032 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 2567: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2568 32.740043 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 2568: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2569 32.740053 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 2569: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2570 32.740064 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 2570: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2571 32.740083 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 2571: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2572 32.740094 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 2572: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2573 32.740111 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 2573: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2574 32.740120 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 2574: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2575 32.740130 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 2575: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2576 32.740140 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 2576: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2577 32.740150 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 2577: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2578 32.740160 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 2578: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2579 32.740170 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 2579: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2580 32.740180 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 2580: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2581 32.740190 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 2581: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2582 32.740200 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 2582: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2583 32.740211 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 2583: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2584 32.740221 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 2584: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2585 32.740230 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 2585: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2586 32.740244 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 2586: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2587 32.740254 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 2587: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2588 32.740264 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 2588: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2589 32.740274 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 2589: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2590 32.740284 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 2590: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2591 32.740294 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 2591: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2592 32.740427 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 2592: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2593 32.741760 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4011262208, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2593: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2594 32.741779 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4011262208, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2594: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2595 32.741791 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4011262208, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2595: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2596 32.741803 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4011262208, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2596: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2597 32.839775 192.168.10.1 192.168.10.245 Syslog 360 LOCAL1.INFO: Oct 3 19:44:50 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo.kaspersky.com" arg="/bases/as/pas4/pas4-0607g.xml.dif" sent_bytes="223" rcvd_bytes="2712" (HTTP-proxy-Visitor-00) Frame 2597: 360 bytes on wire (2880 bits), 360 bytes captured (2880 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:50 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo No. Time Source Destination Protocol Length Info 2598 32.987894 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:15:33 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 2598: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:15:33 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 2599 32.992422 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 2296#1] 9428 > smtp [ACK] Seq=82068 Ack=1555 Win=46594 Len=0 Frame 2599: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 82068, Ack: 1555, Len: 0 No. Time Source Destination Protocol Length Info 2600 32.992454 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=1555 Ack=82043 Win=0 Len=0 Frame 2600: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1555, Ack: 82043, Len: 0 No. Time Source Destination Protocol Length Info 2601 33.110485 192.168.10.1 192.168.10.245 Syslog 306 LOCAL1.INFO: Oct 3 19:44:51 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2159 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eyether@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 2601: 306 bytes on wire (2448 bits), 306 bytes captured (2448 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:51 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2159 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default No. Time Source Destination Protocol Length Info 2602 33.174165 192.168.10.220 192.168.0.5 NBNS 343 Name query response NBSTAT Frame 2602: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.0.5 (192.168.0.5) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2603 33.183967 7x.x.x.1 192.168.10.220 ICMP 70 Destination unreachable (Host unreachable) Frame 2603: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 7x.x.x.1 (7x.x.x.1), Dst: 192.168.10.220 (192.168.10.220) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 2604 33.193839 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 2604: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2605 33.225082 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.219? Tell 192.168.10.220 Frame 2605: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2606 33.225114 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.219? Tell 192.168.10.220 Frame 2606: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2607 33.225129 Dell_ad:25:f8 Intel_38:8d:0a ARP 64 Who has 192.168.10.66? Tell 192.168.10.220 Frame 2607: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2608 33.225140 Dell_ad:25:f8 Intel_89:5e:11 ARP 64 Who has 192.168.10.65? Tell 192.168.10.220 Frame 2608: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2609 33.225155 Intel_38:8d:0a Dell_ad:25:f6 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 2609: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2610 33.225165 Intel_89:5e:11 Dell_ad:25:f8 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 2610: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2611 33.225175 Dell_ad:25:f8 Intel_a5:f5:5b ARP 64 Who has 192.168.10.131? Tell 192.168.10.220 Frame 2611: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2612 33.225186 Dell_ad:25:f8 Intel_38:8c:64 ARP 64 Who has 192.168.10.67? Tell 192.168.10.220 Frame 2612: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2613 33.225195 Dell_ad:25:f8 Intel_02:0e:6d ARP 64 Who has 192.168.10.128? Tell 192.168.10.220 Frame 2613: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2614 33.225206 Intel_a5:f5:5b Dell_ad:25:f8 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 2614: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2615 33.225216 Dell_ad:25:f8 IntelCor_d3:4e:80 ARP 64 Who has 192.168.10.70? Tell 192.168.10.220 Frame 2615: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2616 33.225229 Intel_38:8c:64 Dell_ad:25:f6 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 2616: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2617 33.225240 Dell_ad:25:f8 Intel_d0:7a:8f ARP 64 Who has 192.168.10.68? Tell 192.168.10.220 Frame 2617: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2618 33.225250 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.233? Tell 192.168.10.220 Frame 2618: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2619 33.225260 Intel_02:0e:6d Dell_ad:25:f6 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 2619: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2620 33.225270 Dell_ad:25:f8 Intel_56:83:a5 ARP 64 Who has 192.168.10.59? Tell 192.168.10.220 Frame 2620: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2621 33.225280 IntelCor_d3:4e:80 Dell_ad:25:f8 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 2621: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2622 33.225290 Dell_ad:25:f8 Intel_38:8c:b1 ARP 64 Who has 192.168.10.138? Tell 192.168.10.220 Frame 2622: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2623 33.225300 Intel_d0:7a:8f Dell_ad:25:f8 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 2623: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2624 33.225312 Intel_56:83:a5 Dell_ad:25:f6 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 2624: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2625 33.225322 Dell_ad:25:f8 Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.220 Frame 2625: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2626 33.225333 Intel_38:8c:b1 Dell_ad:25:f6 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 2626: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2627 33.225343 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 2627: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2628 33.225353 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 2628: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2629 33.248086 202.1.166.13 192.168.10.207 SMTP 92 C: HELO hon-adsl-166-013.telekom.net.sb Frame 2629: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: vaprtm (3654), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 38 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2630 33.248252 192.168.10.207 202.1.166.13 SMTP 101 S: 250 mail.mydomain.com Hello [202.1.166.13] Frame 2630: 101 bytes on wire (808 bits), 101 bytes captured (808 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 202.1.166.13 (202.1.166.13) Transmission Control Protocol, Src Port: smtp (25), Dst Port: vaprtm (3654), Seq: 122, Ack: 39, Len: 47 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2631 33.248301 202.1.166.13 192.168.10.207 TCP 60 vaprtm > smtp [ACK] Seq=39 Ack=169 Win=93272 Len=0 Frame 2631: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: vaprtm (3654), Dst Port: smtp (25), Seq: 39, Ack: 169, Len: 0 No. Time Source Destination Protocol Length Info 2632 33.315245 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 2632: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2633 33.416551 192.168.10.1 192.168.10.245 Syslog 358 LOCAL1.INFO: Oct 3 19:44:51 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo.kaspersky.com" arg="/bases/av/emu/emu-0607g.xml.dif" sent_bytes="221" rcvd_bytes="1092" (HTTP-proxy-Visitor-00) Frame 2633: 358 bytes on wire (2864 bits), 358 bytes captured (2864 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:51 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo No. Time Source Destination Protocol Length Info 2634 33.443554 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 2634: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2635 33.518954 182.178.75.135 192.168.10.207 SMTP 60 C: QUIT Frame 2635: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gdbremote (2159), Dst Port: smtp (25), Seq: 57, Ack: 362, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2636 33.518994 192.168.10.207 182.178.75.135 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 2636: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: gdbremote (2159), Seq: 362, Ack: 63, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2637 33.519035 182.178.75.135 192.168.10.207 TCP 60 gdbremote > smtp [ACK] Seq=63 Ack=431 Win=93010 Len=0 Frame 2637: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gdbremote (2159), Dst Port: smtp (25), Seq: 63, Ack: 431, Len: 0 No. Time Source Destination Protocol Length Info 2638 33.519064 192.168.10.207 182.178.75.135 TCP 60 smtp > gdbremote [FIN, ACK] Seq=431 Ack=63 Win=65473 Len=0 Frame 2638: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: gdbremote (2159), Seq: 431, Ack: 63, Len: 0 No. Time Source Destination Protocol Length Info 2639 33.519105 182.178.75.135 192.168.10.207 TCP 60 gdbremote > smtp [ACK] Seq=63 Ack=432 Win=93010 Len=0 Frame 2639: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gdbremote (2159), Dst Port: smtp (25), Seq: 63, Ack: 432, Len: 0 No. Time Source Destination Protocol Length Info 2640 33.542777 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 2640: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2641 33.542819 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 2641: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2642 33.565951 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 2642: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2643 33.589066 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=2731 Ack=196541 Win=52956 Len=0 Frame 2643: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2731, Ack: 196541, Len: 0 No. Time Source Destination Protocol Length Info 2644 33.589100 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 2643#1] smtp > 23308 [ACK] Seq=2731 Ack=196541 Win=52956 Len=0 Frame 2644: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2731, Ack: 196541, Len: 0 No. Time Source Destination Protocol Length Info 2645 33.589134 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2645: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 197758, Ack: 2731, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2646 33.589164 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2646: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 199138, Ack: 2731, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2647 33.589193 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2647: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 200518, Ack: 2731, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2648 33.589223 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2648: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 201898, Ack: 2731, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2649 33.589251 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2649: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 203278, Ack: 2731, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2650 33.589280 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2650: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 204658, Ack: 2731, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2651 33.589312 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2651: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 206038, Ack: 2731, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2652 33.589346 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2652: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 207418, Ack: 2731, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2653 33.589375 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 2643#2] smtp > 23308 [ACK] Seq=2731 Ack=196541 Win=52956 Len=0 Frame 2653: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2731, Ack: 196541, Len: 0 No. Time Source Destination Protocol Length Info 2654 33.589405 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 2643#3] smtp > 23308 [ACK] Seq=2731 Ack=196541 Win=52956 Len=0 Frame 2654: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2731, Ack: 196541, Len: 0 No. Time Source Destination Protocol Length Info 2655 33.589433 192.168.10.207 206.225.164.186 SMTP 180 S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 2655: 180 bytes on wire (1440 bits), 180 bytes captured (1440 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2731, Ack: 196541, Len: 126 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2656 33.589464 206.225.164.186 192.168.10.207 SMTP 1271 [TCP Out-Of-Order] C: DATA fragment, 1217 bytes Frame 2656: 1271 bytes on wire (10168 bits), 1271 bytes captured (10168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 196541, Ack: 2731, Len: 1217 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2657 33.589493 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 2655#1] smtp > 23308 [ACK] Seq=2857 Ack=196541 Win=52956 Len=0 Frame 2657: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2857, Ack: 196541, Len: 0 No. Time Source Destination Protocol Length Info 2658 33.589521 206.225.164.186 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 2658: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 197758, Ack: 2731, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2659 33.589550 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 2655#2] smtp > 23308 [ACK] Seq=2857 Ack=196541 Win=52956 Len=0 Frame 2659: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2857, Ack: 196541, Len: 0 No. Time Source Destination Protocol Length Info 2660 33.589581 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 2655#3] smtp > 23308 [ACK] Seq=2857 Ack=196541 Win=52956 Len=0 Frame 2660: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2857, Ack: 196541, Len: 0 No. Time Source Destination Protocol Length Info 2661 33.589609 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=208798 Ack=2857 Win=46174 Len=0 Frame 2661: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 208798, Ack: 2857, Len: 0 No. Time Source Destination Protocol Length Info 2662 33.589636 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 2655#4] smtp > 23308 [ACK] Seq=2857 Ack=196541 Win=52956 Len=0 Frame 2662: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2857, Ack: 196541, Len: 0 No. Time Source Destination Protocol Length Info 2663 33.589663 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 2655#5] smtp > 23308 [ACK] Seq=2857 Ack=196541 Win=52956 Len=0 Frame 2663: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2857, Ack: 196541, Len: 0 No. Time Source Destination Protocol Length Info 2664 33.589701 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 2655#6] smtp > 23308 [ACK] Seq=2857 Ack=196541 Win=52956 Len=0 Frame 2664: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2857, Ack: 196541, Len: 0 No. Time Source Destination Protocol Length Info 2665 33.589732 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=2857 Ack=208798 Win=40699 Len=0 Frame 2665: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2857, Ack: 208798, Len: 0 No. Time Source Destination Protocol Length Info 2666 33.589761 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2666: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 208798, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2667 33.589791 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2667: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 210178, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2668 33.589819 206.225.164.186 192.168.10.207 TCP 81 [TCP segment of a reassembled PDU] Frame 2668: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 211558, Ack: 2857, Len: 27 No. Time Source Destination Protocol Length Info 2669 33.589847 206.225.164.186 192.168.10.207 SMTP 336 C: DATA fragment, 309 bytes Frame 2669: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 211585, Ack: 2857, Len: 282 [2 Reassembled TCP Segments (309 bytes): #2668(27), #2669(282)] Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2670 33.589875 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2670: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 211867, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2671 33.589904 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2671: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 213247, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2672 33.589934 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2672: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 214627, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2673 33.589969 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2673: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 216007, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2674 33.589998 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2674: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 217387, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2675 33.590026 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=2857 Ack=211867 Win=37630 Len=0 Frame 2675: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2857, Ack: 211867, Len: 0 No. Time Source Destination Protocol Length Info 2676 33.590055 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2676: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 218767, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2677 33.590085 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2677: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 220147, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2678 33.590113 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=2857 Ack=214627 Win=34870 Len=0 Frame 2678: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2857, Ack: 214627, Len: 0 No. Time Source Destination Protocol Length Info 2679 33.590141 206.225.164.186 192.168.10.207 SMTP 1243 C: DATA fragment, 1189 bytes Frame 2679: 1243 bytes on wire (9944 bits), 1243 bytes captured (9944 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 221527, Ack: 2857, Len: 1189 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2680 33.590170 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2680: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 222716, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2681 33.590199 206.225.164.186 192.168.10.207 SMTP 404 C: DATA fragment, 350 bytes Frame 2681: 404 bytes on wire (3232 bits), 404 bytes captured (3232 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 224096, Ack: 2857, Len: 350 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2682 33.590226 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=2857 Ack=218767 Win=30730 Len=0 Frame 2682: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2857, Ack: 218767, Len: 0 No. Time Source Destination Protocol Length Info 2683 33.590254 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2683: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 224446, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2684 33.590283 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2684: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 225826, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2685 33.590313 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2685: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 227206, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2686 33.590341 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=2857 Ack=222716 Win=26781 Len=0 Frame 2686: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2857, Ack: 222716, Len: 0 No. Time Source Destination Protocol Length Info 2687 33.590370 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2687: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 228586, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2688 33.590406 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2688: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 229966, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2689 33.590435 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=2857 Ack=225826 Win=23671 Len=0 Frame 2689: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2857, Ack: 225826, Len: 0 No. Time Source Destination Protocol Length Info 2690 33.590464 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2690: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 231346, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2691 33.590493 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2691: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 232726, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2692 33.590522 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2692: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 234106, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2693 33.590551 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=2857 Ack=228586 Win=20911 Len=0 Frame 2693: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2857, Ack: 228586, Len: 0 No. Time Source Destination Protocol Length Info 2694 33.590579 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2694: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 235486, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2695 33.590608 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2695: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 236866, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2696 33.590637 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=2857 Ack=231346 Win=18151 Len=0 Frame 2696: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2857, Ack: 231346, Len: 0 No. Time Source Destination Protocol Length Info 2697 33.590674 206.225.164.186 192.168.10.207 SMTP 1084 C: DATA fragment, 1030 bytes Frame 2697: 1084 bytes on wire (8672 bits), 1084 bytes captured (8672 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 238246, Ack: 2857, Len: 1030 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2698 33.590704 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2698: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 239276, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2699 33.590733 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2699: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 240656, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2700 33.590761 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=2857 Ack=236866 Win=12631 Len=0 Frame 2700: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2857, Ack: 236866, Len: 0 No. Time Source Destination Protocol Length Info 2701 33.590790 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2701: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 242036, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2702 33.590818 206.225.164.186 192.168.10.207 SMTP 583 C: DATA fragment, 529 bytes Frame 2702: 583 bytes on wire (4664 bits), 583 bytes captured (4664 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 243416, Ack: 2857, Len: 529 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2703 33.590846 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=2857 Ack=239276 Win=10221 Len=0 Frame 2703: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2857, Ack: 239276, Len: 0 No. Time Source Destination Protocol Length Info 2704 33.590874 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2704: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 243945, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2705 33.590902 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=2857 Ack=242036 Win=7461 Len=0 Frame 2705: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2857, Ack: 242036, Len: 0 No. Time Source Destination Protocol Length Info 2706 33.590931 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2706: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 245325, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2707 33.590962 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2707: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 246705, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2708 33.590990 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=2857 Ack=243945 Win=5552 Len=0 Frame 2708: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2857, Ack: 243945, Len: 0 No. Time Source Destination Protocol Length Info 2709 33.591019 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2709: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 248085, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2710 33.591048 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2710: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 249465, Ack: 2857, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2711 33.591076 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=2857 Ack=246705 Win=2792 Len=0 Frame 2711: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2857, Ack: 246705, Len: 0 No. Time Source Destination Protocol Length Info 2712 33.591103 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=2857 Ack=249465 Win=32 Len=0 Frame 2712: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2857, Ack: 249465, Len: 0 No. Time Source Destination Protocol Length Info 2713 33.736729 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2158958848, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2713: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2714 33.736753 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2158958848, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2714: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2715 33.736766 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2158958848, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2715: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2716 33.736778 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2158958848, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2716: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2717 33.757518 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4028039424, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2717: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2718 33.757542 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4028039424, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2718: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2719 33.757555 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4028039424, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2719: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2720 33.757567 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4028039424, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2720: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2721 33.784367 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=2857 Ack=249497 Win=0 Len=0 Frame 2721: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2857, Ack: 249497, Len: 0 No. Time Source Destination Protocol Length Info 2722 33.850272 192.168.10.203 115.242.131.136 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 2722: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 115.242.131.136 (115.242.131.136) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2723 33.865424 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=1555 Ack=82043 Win=47758 Len=0 Frame 2723: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1555, Ack: 82043, Len: 0 No. Time Source Destination Protocol Length Info 2724 33.865456 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 2723#1] smtp > 9428 [ACK] Seq=1555 Ack=82043 Win=47758 Len=0 Frame 2724: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1555, Ack: 82043, Len: 0 No. Time Source Destination Protocol Length Info 2725 33.865491 206.225.164.188 192.168.10.207 TCP 1434 [TCP segment of a reassembled PDU] Frame 2725: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 82068, Ack: 1555, Len: 1380 No. Time Source Destination Protocol Length Info 2726 33.865521 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2726: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 83448, Ack: 1555, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2727 33.865550 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2727: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 84828, Ack: 1555, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2728 33.865580 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2728: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 86208, Ack: 1555, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2729 33.865612 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 2723#2] smtp > 9428 [ACK] Seq=1555 Ack=82043 Win=47758 Len=0 Frame 2729: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1555, Ack: 82043, Len: 0 No. Time Source Destination Protocol Length Info 2730 33.865639 192.168.10.207 206.225.164.188 SMTP 264 S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 2730: 264 bytes on wire (2112 bits), 264 bytes captured (2112 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1555, Ack: 82043, Len: 210 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2731 33.865667 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=87588 Ack=1765 Win=46489 Len=0 Frame 2731: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 87588, Ack: 1765, Len: 0 No. Time Source Destination Protocol Length Info 2732 33.865694 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 2730#1] smtp > 9428 [ACK] Seq=1765 Ack=82043 Win=47758 Len=0 Frame 2732: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1765, Ack: 82043, Len: 0 No. Time Source Destination Protocol Length Info 2733 33.865725 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 2730#2] smtp > 9428 [ACK] Seq=1765 Ack=82043 Win=47758 Len=0 Frame 2733: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1765, Ack: 82043, Len: 0 No. Time Source Destination Protocol Length Info 2734 33.865753 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 2730#3] smtp > 9428 [ACK] Seq=1765 Ack=82043 Win=47758 Len=0 Frame 2734: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1765, Ack: 82043, Len: 0 No. Time Source Destination Protocol Length Info 2735 33.865780 206.225.164.188 192.168.10.207 TCP 79 [TCP Fast Retransmission] [TCP segment of a reassembled PDU] Frame 2735: 79 bytes on wire (632 bits), 79 bytes captured (632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 82043, Ack: 1765, Len: 25 No. Time Source Destination Protocol Length Info 2736 33.865808 206.225.164.188 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1405 bytes Frame 2736: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 82068, Ack: 1765, Len: 1380 [2 Reassembled TCP Segments (1405 bytes): #2735(25), #2736(1380)] Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2737 33.865843 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=1765 Ack=87588 Win=42213 Len=0 Frame 2737: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1765, Ack: 87588, Len: 0 No. Time Source Destination Protocol Length Info 2738 33.865878 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 2737#1] smtp > 9428 [ACK] Seq=1765 Ack=87588 Win=42213 Len=0 Frame 2738: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1765, Ack: 87588, Len: 0 No. Time Source Destination Protocol Length Info 2739 33.865909 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2739: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 87588, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2740 33.865941 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2740: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 88968, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2741 33.866037 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=1765 Ack=90348 Win=39453 Len=0 Frame 2741: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1765, Ack: 90348, Len: 0 No. Time Source Destination Protocol Length Info 2742 33.866251 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2742: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 90348, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2743 33.866280 206.225.164.188 192.168.10.207 SMTP 497 C: DATA fragment, 443 bytes Frame 2743: 497 bytes on wire (3976 bits), 497 bytes captured (3976 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 91728, Ack: 1765, Len: 443 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2744 33.866309 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2744: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 92171, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2745 33.866338 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=1765 Ack=92171 Win=37630 Len=0 Frame 2745: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1765, Ack: 92171, Len: 0 No. Time Source Destination Protocol Length Info 2746 33.866369 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2746: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 93551, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2747 33.866401 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2747: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 94931, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2748 33.866436 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=1765 Ack=94931 Win=34870 Len=0 Frame 2748: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1765, Ack: 94931, Len: 0 No. Time Source Destination Protocol Length Info 2749 33.866470 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2749: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 96311, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2750 33.866499 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2750: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 97691, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2751 33.866530 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2751: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 99071, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2752 33.866561 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=1765 Ack=97691 Win=32110 Len=0 Frame 2752: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1765, Ack: 97691, Len: 0 No. Time Source Destination Protocol Length Info 2753 33.866588 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=1765 Ack=100451 Win=29350 Len=0 Frame 2753: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1765, Ack: 100451, Len: 0 No. Time Source Destination Protocol Length Info 2754 33.866617 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2754: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 100451, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2755 33.866649 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2755: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 101831, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2756 33.866677 206.225.164.188 192.168.10.207 SMTP 1324 C: DATA fragment, 1270 bytes Frame 2756: 1324 bytes on wire (10592 bits), 1324 bytes captured (10592 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 103211, Ack: 1765, Len: 1270 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2757 33.866711 206.225.164.188 192.168.10.207 SMTP 583 C: DATA fragment, 529 bytes Frame 2757: 583 bytes on wire (4664 bits), 583 bytes captured (4664 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 104481, Ack: 1765, Len: 529 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2758 33.866744 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2758: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 105010, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2759 33.866774 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=1765 Ack=103211 Win=26590 Len=0 Frame 2759: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1765, Ack: 103211, Len: 0 No. Time Source Destination Protocol Length Info 2760 33.866806 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=1765 Ack=105010 Win=24791 Len=0 Frame 2760: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1765, Ack: 105010, Len: 0 No. Time Source Destination Protocol Length Info 2761 33.866835 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2761: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 106390, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2762 33.866871 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2762: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 107770, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2763 33.866901 206.225.164.188 192.168.10.207 SMTP 852 C: DATA fragment, 798 bytes Frame 2763: 852 bytes on wire (6816 bits), 852 bytes captured (6816 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 109150, Ack: 1765, Len: 798 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2764 33.866930 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2764: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 109948, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2765 33.866959 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=1765 Ack=109150 Win=20651 Len=0 Frame 2765: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1765, Ack: 109150, Len: 0 No. Time Source Destination Protocol Length Info 2766 33.866991 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2766: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 111328, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2767 33.867019 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=1765 Ack=111328 Win=18473 Len=0 Frame 2767: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1765, Ack: 111328, Len: 0 No. Time Source Destination Protocol Length Info 2768 33.867056 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2768: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 112708, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2769 33.867086 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2769: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 114088, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2770 33.867121 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2770: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 115468, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2771 33.867153 206.225.164.188 192.168.10.207 TCP 107 [TCP segment of a reassembled PDU] Frame 2771: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 116848, Ack: 1765, Len: 53 No. Time Source Destination Protocol Length Info 2772 33.867182 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=1765 Ack=114088 Win=15713 Len=0 Frame 2772: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1765, Ack: 114088, Len: 0 No. Time Source Destination Protocol Length Info 2773 33.867210 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1433 bytes Frame 2773: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 116901, Ack: 1765, Len: 1380 [2 Reassembled TCP Segments (1433 bytes): #2771(53), #2773(1380)] Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2774 33.867245 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2774: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 118281, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2775 33.867280 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2775: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 119661, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2776 33.867309 206.225.164.188 192.168.10.207 SMTP 469 C: DATA fragment, 415 bytes Frame 2776: 469 bytes on wire (3752 bits), 469 bytes captured (3752 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 121041, Ack: 1765, Len: 415 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2777 33.867337 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=1765 Ack=116901 Win=12900 Len=0 Frame 2777: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1765, Ack: 116901, Len: 0 No. Time Source Destination Protocol Length Info 2778 33.867364 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=1765 Ack=119661 Win=10140 Len=0 Frame 2778: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1765, Ack: 119661, Len: 0 No. Time Source Destination Protocol Length Info 2779 33.867392 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2779: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 121456, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2780 33.867422 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2780: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 122836, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2781 33.867450 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=1765 Ack=121456 Win=8345 Len=0 Frame 2781: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1765, Ack: 121456, Len: 0 No. Time Source Destination Protocol Length Info 2782 33.867479 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2782: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 124216, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2783 33.867511 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2783: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 125596, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2784 33.867546 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2784: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 126976, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2785 33.867579 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=1765 Ack=124216 Win=5585 Len=0 Frame 2785: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1765, Ack: 124216, Len: 0 No. Time Source Destination Protocol Length Info 2786 33.867608 206.225.164.188 192.168.10.207 SMTP 1137 C: DATA fragment, 1083 bytes Frame 2786: 1137 bytes on wire (9096 bits), 1137 bytes captured (9096 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 128356, Ack: 1765, Len: 1083 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2787 33.867638 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 2787: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 129439, Ack: 1765, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2788 33.867667 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=1765 Ack=128356 Win=1445 Len=0 Frame 2788: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1765, Ack: 128356, Len: 0 No. Time Source Destination Protocol Length Info 2789 33.867696 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=1765 Ack=129801 Win=0 Len=0 Frame 2789: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1765, Ack: 129801, Len: 0 No. Time Source Destination Protocol Length Info 2790 33.972202 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:15:34 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 2790: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:15:34 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 2791 34.014696 182.178.75.135 192.168.10.207 TCP 60 gdbremote > smtp [RST, ACK] Seq=63 Ack=432 Win=93010 Len=0 Frame 2791: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gdbremote (2159), Dst Port: smtp (25), Seq: 63, Ack: 432, Len: 0 No. Time Source Destination Protocol Length Info 2792 34.014821 192.168.10.1 192.168.10.245 Syslog 202 LOCAL1.INFO: Oct 3 19:44:52 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2159 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 2792: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:52 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2159 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 2793 34.015754 182.178.75.135 192.168.10.207 TCP 62 netiq > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 2793: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: netiq (2220), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 2794 34.015827 192.168.10.207 182.178.75.135 TCP 62 smtp > netiq [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 2794: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: netiq (2220), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 2795 34.078362 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 2795: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2796 34.078393 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 2796: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2797 34.125580 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 2797: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2857, Ack: 249497, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2798 34.125615 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=250845 Ack=2899 Win=46153 Len=0 Frame 2798: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 250845, Ack: 2899, Len: 0 No. Time Source Destination Protocol Length Info 2799 34.125648 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=2899 Ack=249497 Win=0 Len=0 Frame 2799: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2899, Ack: 249497, Len: 0 No. Time Source Destination Protocol Length Info 2800 34.402357 190.42.139.241 192.168.10.207 TCP 62 23629 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 2800: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23629 (23629), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 2801 34.402423 192.168.10.207 190.42.139.241 TCP 62 smtp > 23629 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 2801: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23629 (23629), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 2802 34.478633 182.178.75.135 192.168.10.207 TCP 60 netiq > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 2802: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: netiq (2220), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 2803 34.478790 192.168.10.1 192.168.10.245 Syslog 204 LOCAL1.INFO: Oct 3 19:44:52 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2220 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 2803: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:52 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2220 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 2804 34.478871 192.168.10.207 182.178.75.135 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:44:27 -0400 Frame 2804: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: netiq (2220), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2805 34.478910 182.178.75.135 192.168.10.207 TCP 60 netiq > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 2805: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: netiq (2220), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 2806 34.487785 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:15:35 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 2806: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:15:35 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 2807 34.568011 190.42.139.241 192.168.10.207 TCP 60 23629 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 2807: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23629 (23629), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 2808 34.568096 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:44:52 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23629 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 2808: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:52 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23629 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 2809 34.568153 192.168.10.207 190.42.139.241 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:44:27 -0400 Frame 2809: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23629 (23629), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2810 34.568202 190.42.139.241 192.168.10.207 TCP 60 23629 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 2810: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23629 (23629), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 2811 34.673105 192.168.10.220 192.168.0.5 NBNS 343 Name query response NBSTAT Frame 2811: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.0.5 (192.168.0.5) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2812 34.682995 202.1.166.13 192.168.10.207 SMTP 93 C: MAIL FROM: <ebspleen@xxxxxxxxxxxx> Frame 2812: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: vaprtm (3654), Dst Port: smtp (25), Seq: 39, Ack: 169, Len: 39 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2813 34.683111 192.168.10.207 202.1.166.13 SMTP 103 S: 250 2.1.0 [email protected] OK Frame 2813: 103 bytes on wire (824 bits), 103 bytes captured (824 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 202.1.166.13 (202.1.166.13) Transmission Control Protocol, Src Port: smtp (25), Dst Port: vaprtm (3654), Seq: 169, Ack: 78, Len: 49 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2814 34.683160 202.1.166.13 192.168.10.207 TCP 60 vaprtm > smtp [ACK] Seq=78 Ack=218 Win=93222 Len=0 Frame 2814: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: vaprtm (3654), Dst Port: smtp (25), Seq: 78, Ack: 218, Len: 0 No. Time Source Destination Protocol Length Info 2815 34.752169 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2175736064, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2815: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2816 34.752193 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2175736064, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2816: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2817 34.752206 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2175736064, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2817: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2818 34.752218 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2175736064, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2818: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2819 34.773074 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4044816640, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2819: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2820 34.773097 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4044816640, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2820: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2821 34.773110 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4044816640, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2821: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2822 34.773122 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4044816640, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2822: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2823 34.820195 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-08.geo.kaspersky.com Frame 2823: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 64856 (64856), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 2824 34.857303 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 2824: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1765, Ack: 129801, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2825 34.857338 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=130819 Ack=1807 Win=46468 Len=0 Frame 2825: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 130819, Ack: 1807, Len: 0 No. Time Source Destination Protocol Length Info 2826 34.857371 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=1807 Ack=129801 Win=0 Len=0 Frame 2826: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1807, Ack: 129801, Len: 0 No. Time Source Destination Protocol Length Info 2827 34.962807 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 2827: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2828 34.962839 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 2828: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2829 34.993025 192.168.10.1 192.168.10.245 Syslog 204 LOCAL1.INFO: Oct 3 19:44:53 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.118 216.115.98.240 3748 80 msg="Conn End" (HTTP-proxy.endusers-00) Frame 2829: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:53 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.118 216.115.98.240 3748 80 msg="Conn End" (HTTP-proxy.endusers-00) No. Time Source Destination Protocol Length Info 2830 35.193812 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 2830: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2831 35.312947 192.168.10.207 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 2831: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2832 35.313164 192.168.10.207 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 2832: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2833 35.318320 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 2833: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2834 35.350360 192.168.10.203 115.242.131.136 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 2834: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 115.242.131.136 (115.242.131.136) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2835 35.401612 192.168.10.1 192.168.10.245 Syslog 305 LOCAL1.INFO: Oct 3 19:44:53 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 202.1.166.13 7x.x.x.3 3654 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="ebspleen@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 2835: 305 bytes on wire (2440 bits), 305 bytes captured (2440 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:53 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 202.1.166.13 7x.x.x.3 3654 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" No. Time Source Destination Protocol Length Info 2836 35.443543 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 2836: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2837 35.541033 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 2837: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2838 35.541065 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 2838: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2839 35.565965 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 2839: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2840 35.599987 192.168.10.32 192.168.10.255 UDP 776 Source port: 43836 Destination port: apc-3052 Frame 2840: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 43836 (43836), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 36 3a 33 37 0a 53 52 3d 30 31 31 =20:56:37.SR=011 0060 35 45 36 0a 53 55 3d 36 43 44 43 0a 52 44 3d 41 5E6.SU=6CDC.RD=A 0070 41 34 42 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 A4B.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 38 .4C=207.3.50=038 00c0 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 .0.43=028.5.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 31 3a 1/19/07.6A=0051: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 746005481 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d .46=60.00.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 207.3.4E=205.9.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 30 2e 30 0a 32 46 3d 31 34 2e .5C=030.0.2F=14. 01d0 39 38 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 98.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 000.09=60.00;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 43 45 45 45 36 38 43 41 36 44 43 30 31 36 35 =CEEE68CA6DC0165 02a0 33 44 34 31 34 39 42 30 31 33 32 45 35 36 46 37 3D4149B0132E56F7 02b0 45 0a 4d 44 3d 36 64 61 63 61 31 61 62 63 36 37 E.MD=6daca1abc67 02c0 61 62 61 38 32 33 30 62 37 31 62 34 39 64 37 34 aba8230b71b49d74 02d0 38 30 36 34 36 0a 3c 2f 42 4f 44 59 3e 0a 80646.</BODY>. No. Time Source Destination Protocol Length Info 2841 35.600114 192.168.10.32 192.168.10.255 UDP 776 Source port: 43836 Destination port: apc-3052 Frame 2841: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 43836 (43836), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 36 3a 33 37 0a 53 52 3d 30 31 31 =20:56:37.SR=011 0060 35 45 36 0a 53 55 3d 36 43 44 43 0a 52 44 3d 41 5E6.SU=6CDC.RD=A 0070 41 34 42 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 A4B.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 38 .4C=207.3.50=038 00c0 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 .0.43=028.5.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 31 3a 1/19/07.6A=0051: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 746005481 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d .46=60.00.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 207.3.4E=205.9.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 30 2e 30 0a 32 46 3d 31 34 2e .5C=030.0.2F=14. 01d0 39 38 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 98.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 000.09=60.00;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 43 45 45 45 36 38 43 41 36 44 43 30 31 36 35 =CEEE68CA6DC0165 02a0 33 44 34 31 34 39 42 30 31 33 32 45 35 36 46 37 3D4149B0132E56F7 02b0 45 0a 4d 44 3d 36 64 61 63 61 31 61 62 63 36 37 E.MD=6daca1abc67 02c0 61 62 61 38 32 33 30 62 37 31 62 34 39 64 37 34 aba8230b71b49d74 02d0 38 30 36 34 36 0a 3c 2f 42 4f 44 59 3e 0a 80646.</BODY>. No. Time Source Destination Protocol Length Info 2842 35.767852 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2192513280, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2842: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2843 35.767876 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2192513280, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2843: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2844 35.767889 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2192513280, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2844: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2845 35.767901 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2192513280, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2845: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2846 35.788532 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4061593856, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2846: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2847 35.788555 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4061593856, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2847: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2848 35.788568 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4061593856, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2848: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2849 35.788584 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4061593856, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2849: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2850 35.820374 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-08.geo.kaspersky.com Frame 2850: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 64856 (64856), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 2851 35.848803 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.110? Tell 192.168.10.220 Frame 2851: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2852 35.848835 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.110? Tell 192.168.10.220 Frame 2852: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2853 35.848854 Dell_ad:25:f8 Intel_38:8d:0a ARP 64 Who has 192.168.10.66? Tell 192.168.10.220 Frame 2853: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2854 35.848864 Dell_ad:25:f8 Intel_89:5e:11 ARP 64 Who has 192.168.10.65? Tell 192.168.10.220 Frame 2854: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2855 35.848877 Intel_38:8d:0a Dell_ad:25:f6 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 2855: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2856 35.848887 Intel_89:5e:11 Dell_ad:25:f8 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 2856: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2857 35.848897 Dell_ad:25:f8 Intel_a5:f5:5b ARP 64 Who has 192.168.10.131? Tell 192.168.10.220 Frame 2857: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2858 35.848907 Dell_ad:25:f8 Intel_38:8c:64 ARP 64 Who has 192.168.10.67? Tell 192.168.10.220 Frame 2858: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2859 35.848953 Dell_ad:25:f8 Intel_02:0e:6d ARP 64 Who has 192.168.10.128? Tell 192.168.10.220 Frame 2859: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2860 35.848963 Intel_a5:f5:5b Dell_ad:25:f8 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 2860: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2861 35.848973 Dell_ad:25:f8 IntelCor_d3:4e:80 ARP 64 Who has 192.168.10.70? Tell 192.168.10.220 Frame 2861: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2862 35.848983 Intel_38:8c:64 Dell_ad:25:f6 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 2862: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2863 35.848996 Dell_ad:25:f8 Intel_d0:7a:8f ARP 64 Who has 192.168.10.68? Tell 192.168.10.220 Frame 2863: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2864 35.849006 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.233? Tell 192.168.10.220 Frame 2864: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2865 35.849016 Intel_02:0e:6d Dell_ad:25:f6 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 2865: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2866 35.849026 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 2866: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2867 35.849042 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 2867: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2868 35.849056 Dell_ad:25:f8 Intel_56:83:a5 ARP 64 Who has 192.168.10.59? Tell 192.168.10.220 Frame 2868: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2869 35.849066 IntelCor_d3:4e:80 Dell_ad:25:f8 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 2869: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2870 35.849079 Dell_ad:25:f8 Intel_38:8c:b1 ARP 64 Who has 192.168.10.138? Tell 192.168.10.220 Frame 2870: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2871 35.849090 Intel_d0:7a:8f Dell_ad:25:f8 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 2871: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2872 35.849100 Dell_ad:25:f8 Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.220 Frame 2872: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2873 35.849110 Intel_56:83:a5 Dell_ad:25:f6 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 2873: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2874 35.849120 Intel_38:8c:b1 Dell_ad:25:f6 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 2874: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2875 35.849130 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 2875: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2876 35.849185 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 2876: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2877 35.987974 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:15:36 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 2877: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:15:36 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 2878 36.000698 192.168.10.208 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 2878: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.208 (192.168.10.208), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2879 36.000923 192.168.10.208 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 2879: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.208 (192.168.10.208), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2880 36.048074 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 2880: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2881 36.048105 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 2881: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2882 36.117054 202.1.166.13 192.168.10.207 TCP 60 vaprtm > smtp [FIN, ACK] Seq=78 Ack=218 Win=93222 Len=0 Frame 2882: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: vaprtm (3654), Dst Port: smtp (25), Seq: 78, Ack: 218, Len: 0 No. Time Source Destination Protocol Length Info 2883 36.117092 192.168.10.207 202.1.166.13 TCP 60 smtp > vaprtm [ACK] Seq=218 Ack=79 Win=65458 Len=0 Frame 2883: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 202.1.166.13 (202.1.166.13) Transmission Control Protocol, Src Port: smtp (25), Dst Port: vaprtm (3654), Seq: 218, Ack: 79, Len: 0 No. Time Source Destination Protocol Length Info 2884 36.117181 192.168.10.207 202.1.166.13 TCP 60 smtp > vaprtm [FIN, ACK] Seq=218 Ack=79 Win=65458 Len=0 Frame 2884: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 202.1.166.13 (202.1.166.13) Transmission Control Protocol, Src Port: smtp (25), Dst Port: vaprtm (3654), Seq: 218, Ack: 79, Len: 0 No. Time Source Destination Protocol Length Info 2885 36.117223 202.1.166.13 192.168.10.207 TCP 60 vaprtm > smtp [ACK] Seq=79 Ack=219 Win=93222 Len=0 Frame 2885: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: vaprtm (3654), Dst Port: smtp (25), Seq: 79, Ack: 219, Len: 0 No. Time Source Destination Protocol Length Info 2886 36.117440 192.168.10.1 192.168.10.245 Syslog 200 LOCAL1.INFO: Oct 3 19:44:54 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 202.1.166.13 7x.x.x.3 3654 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 2886: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:54 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 202.1.166.13 7x.x.x.3 3654 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 2887 36.173059 192.168.10.220 192.168.0.5 NBNS 343 Name query response NBSTAT Frame 2887: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.0.5 (192.168.0.5) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2888 36.182669 7x.x.x.1 192.168.10.220 ICMP 70 Destination unreachable (Host unreachable) Frame 2888: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 7x.x.x.1 (7x.x.x.1), Dst: 192.168.10.220 (192.168.10.220) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 2889 36.184520 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 Who has 192.168.10.220? Tell 192.168.10.1 Frame 2889: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2890 36.184534 Dell_ad:25:f6 Watchgua_3c:4c:d8 ARP 60 192.168.10.220 is at 00:22:19:ad:25:f6 Frame 2890: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2891 36.783404 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2209290496, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2891: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2892 36.783428 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2209290496, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2892: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2893 36.783441 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2209290496, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2893: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2894 36.783454 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2209290496, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2894: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2895 36.804169 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4078371072, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2895: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2896 36.804189 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4078371072, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2896: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2897 36.804201 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4078371072, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2897: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2898 36.804213 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4078371072, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2898: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2899 36.820436 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-08.geo.kaspersky.com Frame 2899: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 64856 (64856), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 2900 36.963808 192.168.10.216 64.74.103.131 TLSv1 91 Application Data Frame 2900: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.216 (192.168.10.216), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: ovrimosdbman (2956), Dst Port: https (443), Seq: 38, Ack: 38, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 2901 36.963878 64.74.103.131 192.168.10.216 TCP 60 https > ovrimosdbman [ACK] Seq=38 Ack=75 Win=65535 Len=0 Frame 2901: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.216 (192.168.10.216) Transmission Control Protocol, Src Port: https (443), Dst Port: ovrimosdbman (2956), Seq: 38, Ack: 75, Len: 0 No. Time Source Destination Protocol Length Info 2902 36.964549 Watchgua_3c:4c:d8 IntelCor_36:19:60 ARP 60 Who has 192.168.10.216? Tell 192.168.10.1 Frame 2902: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2903 36.964562 IntelCor_36:19:60 Watchgua_3c:4c:d8 ARP 60 192.168.10.216 is at 00:13:20:36:19:60 Frame 2903: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2904 37.004818 192.168.10.220 208.67.222.222 DNS 86 Standard query PTR 65.197.53.113.in-addr.arpa Frame 2904: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 64920 (64920), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 2905 37.012156 64.74.103.131 192.168.10.216 TLSv1 91 Application Data Frame 2905: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.216 (192.168.10.216) Transmission Control Protocol, Src Port: https (443), Dst Port: ovrimosdbman (2956), Seq: 38, Ack: 75, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 2906 37.135571 192.168.10.216 64.74.103.131 TCP 60 ovrimosdbman > https [ACK] Seq=75 Ack=75 Win=64240 Len=0 Frame 2906: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.216 (192.168.10.216), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: ovrimosdbman (2956), Dst Port: https (443), Seq: 75, Ack: 75, Len: 0 No. Time Source Destination Protocol Length Info 2907 37.136591 208.67.222.222 192.168.10.220 DNS 86 Standard query response, No such name Frame 2907: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 64920 (64920) Domain Name System (response) No. Time Source Destination Protocol Length Info 2908 37.137044 192.168.10.203 113.53.197.65 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 2908: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 113.53.197.65 (113.53.197.65) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2909 37.193872 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 2909: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2910 37.315186 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 2910: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2911 37.391550 192.168.10.30 192.168.10.255 UDP 675 Source port: 34427 Destination port: apc-3052 Frame 2911: 675 bytes on wire (5400 bits), 675 bytes captured (5400 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (633 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 44 54 3d 31 30 .168.10.30.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 31 38 3a 34 /03/2011.TM=18:4 0040 34 3a 33 33 0a 53 52 3d 31 42 0a 53 55 3d 37 42 4:33.SR=1B.SU=7B 0050 31 32 46 41 34 38 0a 52 44 3d 31 43 32 33 0a 54 12FA48.RD=1C23.T 0060 41 3d 31 39 32 2e 31 36 38 2e 31 30 2e 32 35 35 A=192.168.10.255 0070 0a 50 54 3d 33 30 35 32 0a 43 4c 3d 43 30 41 38 .PT=3052.CL=C0A8 0080 30 41 44 42 0a 43 4c 3d 43 30 41 38 30 41 44 30 0ADB.CL=C0A80AD0 0090 0a 43 4c 3d 43 30 41 38 30 41 43 42 0a 43 4c 3d .CL=C0A80ACB.CL= 00a0 43 30 41 38 30 41 43 43 0a 43 4c 3d 43 30 41 38 C0A80ACC.CL=C0A8 00b0 30 41 43 45 0a 43 4c 3d 43 30 41 38 30 41 44 43 0ACE.CL=C0A80ADC 00c0 0a 43 4c 3d 43 30 41 38 30 41 43 46 0a 43 4c 3d .CL=C0A80ACF.CL= 00d0 43 30 41 38 30 41 43 44 0a 43 4c 3d 43 30 41 38 C0A80ACD.CL=C0A8 00e0 30 41 46 30 0a 43 4c 3d 43 30 41 38 30 41 43 39 0AF0.CL=C0A80AC9 00f0 0a 43 4c 3d 43 30 41 38 30 41 31 30 0a 43 4c 3d .CL=C0A80A10.CL= 0100 43 30 41 38 30 41 30 44 0a 43 4c 3d 43 30 41 38 C0A80A0D.CL=C0A8 0110 30 41 30 46 0a 43 4c 3d 43 30 41 38 30 41 30 43 0A0F.CL=C0A80A0C 0120 0a 43 4c 3d 43 30 41 38 30 41 44 31 0a 43 4c 3d .CL=C0A80AD1.CL= 0130 43 30 41 38 30 41 43 41 0a 43 4c 3d 43 30 41 38 C0A80ACA.CL=C0A8 0140 30 41 46 41 0a 43 4c 3d 43 30 41 38 30 41 44 38 0AFA.CL=C0A80AD8 0150 0a 43 4c 3d 43 30 41 38 30 41 32 37 0a 43 4c 3d .CL=C0A80A27.CL= 0160 43 30 41 38 30 41 44 39 0a 43 4c 3d 43 30 41 38 C0A80AD9.CL=C0A8 0170 30 41 44 33 0a 43 4c 3d 43 30 41 38 30 41 44 32 0AD3.CL=C0A80AD2 0180 0a 43 4c 3d 43 30 41 38 30 41 45 32 0a 43 4c 3d .CL=C0A80AE2.CL= 0190 43 30 41 38 30 41 45 33 0a 43 4c 3d 43 30 41 38 C0A80AE3.CL=C0A8 01a0 30 41 44 45 0a 43 4c 3d 43 30 41 38 31 34 30 33 0ADE.CL=C0A81403 01b0 0a 43 4c 3d 43 30 41 38 30 41 46 36 0a 43 4c 3d .CL=C0A80AF6.CL= 01c0 43 30 41 38 30 41 31 31 0a 43 4c 3d 30 30 0a 43 C0A80A11.CL=00.C 01d0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01e0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01f0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0200 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0210 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0220 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0230 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0240 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 4d 44 3d .CL=00.CL=00.MD= 0250 65 32 63 31 31 62 31 33 37 31 37 38 62 33 35 63 e2c11b137178b35c 0260 30 38 65 35 63 36 66 31 36 62 38 63 39 37 62 38 08e5c6f16b8c97b8 0270 0a 3c 2f 42 4f 44 59 3e 0a .</BODY>. No. Time Source Destination Protocol Length Info 2912 37.391689 192.168.10.30 192.168.10.255 UDP 675 Source port: 34427 Destination port: apc-3052 Frame 2912: 675 bytes on wire (5400 bits), 675 bytes captured (5400 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (633 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 44 54 3d 31 30 .168.10.30.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 31 38 3a 34 /03/2011.TM=18:4 0040 34 3a 33 33 0a 53 52 3d 31 42 0a 53 55 3d 37 42 4:33.SR=1B.SU=7B 0050 31 32 46 41 34 38 0a 52 44 3d 31 43 32 33 0a 54 12FA48.RD=1C23.T 0060 41 3d 31 39 32 2e 31 36 38 2e 31 30 2e 32 35 35 A=192.168.10.255 0070 0a 50 54 3d 33 30 35 32 0a 43 4c 3d 43 30 41 38 .PT=3052.CL=C0A8 0080 30 41 44 42 0a 43 4c 3d 43 30 41 38 30 41 44 30 0ADB.CL=C0A80AD0 0090 0a 43 4c 3d 43 30 41 38 30 41 43 42 0a 43 4c 3d .CL=C0A80ACB.CL= 00a0 43 30 41 38 30 41 43 43 0a 43 4c 3d 43 30 41 38 C0A80ACC.CL=C0A8 00b0 30 41 43 45 0a 43 4c 3d 43 30 41 38 30 41 44 43 0ACE.CL=C0A80ADC 00c0 0a 43 4c 3d 43 30 41 38 30 41 43 46 0a 43 4c 3d .CL=C0A80ACF.CL= 00d0 43 30 41 38 30 41 43 44 0a 43 4c 3d 43 30 41 38 C0A80ACD.CL=C0A8 00e0 30 41 46 30 0a 43 4c 3d 43 30 41 38 30 41 43 39 0AF0.CL=C0A80AC9 00f0 0a 43 4c 3d 43 30 41 38 30 41 31 30 0a 43 4c 3d .CL=C0A80A10.CL= 0100 43 30 41 38 30 41 30 44 0a 43 4c 3d 43 30 41 38 C0A80A0D.CL=C0A8 0110 30 41 30 46 0a 43 4c 3d 43 30 41 38 30 41 30 43 0A0F.CL=C0A80A0C 0120 0a 43 4c 3d 43 30 41 38 30 41 44 31 0a 43 4c 3d .CL=C0A80AD1.CL= 0130 43 30 41 38 30 41 43 41 0a 43 4c 3d 43 30 41 38 C0A80ACA.CL=C0A8 0140 30 41 46 41 0a 43 4c 3d 43 30 41 38 30 41 44 38 0AFA.CL=C0A80AD8 0150 0a 43 4c 3d 43 30 41 38 30 41 32 37 0a 43 4c 3d .CL=C0A80A27.CL= 0160 43 30 41 38 30 41 44 39 0a 43 4c 3d 43 30 41 38 C0A80AD9.CL=C0A8 0170 30 41 44 33 0a 43 4c 3d 43 30 41 38 30 41 44 32 0AD3.CL=C0A80AD2 0180 0a 43 4c 3d 43 30 41 38 30 41 45 32 0a 43 4c 3d .CL=C0A80AE2.CL= 0190 43 30 41 38 30 41 45 33 0a 43 4c 3d 43 30 41 38 C0A80AE3.CL=C0A8 01a0 30 41 44 45 0a 43 4c 3d 43 30 41 38 31 34 30 33 0ADE.CL=C0A81403 01b0 0a 43 4c 3d 43 30 41 38 30 41 46 36 0a 43 4c 3d .CL=C0A80AF6.CL= 01c0 43 30 41 38 30 41 31 31 0a 43 4c 3d 30 30 0a 43 C0A80A11.CL=00.C 01d0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01e0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01f0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0200 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0210 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0220 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0230 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0240 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 4d 44 3d .CL=00.CL=00.MD= 0250 65 32 63 31 31 62 31 33 37 31 37 38 62 33 35 63 e2c11b137178b35c 0260 30 38 65 35 63 36 66 31 36 62 38 63 39 37 62 38 08e5c6f16b8c97b8 0270 0a 3c 2f 42 4f 44 59 3e 0a .</BODY>. No. Time Source Destination Protocol Length Info 2913 37.443434 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 2913: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2914 37.546402 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 2914: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2915 37.546433 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 2915: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2916 37.565904 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 2916: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 2917 37.778768 182.178.75.135 192.168.10.207 SMTP 71 C: EHLO uvbibf.com Frame 2917: 71 bytes on wire (568 bits), 71 bytes captured (568 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: netiq (2220), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 17 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2918 37.778875 192.168.10.207 182.178.75.135 SMTP 245 S: 250-mail.mydomain.com Hello [182.178.75.135] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 2918: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: netiq (2220), Seq: 122, Ack: 18, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2919 37.778980 182.178.75.135 192.168.10.207 TCP 60 netiq > smtp [ACK] Seq=18 Ack=313 Win=93128 Len=0 Frame 2919: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: netiq (2220), Dst Port: smtp (25), Seq: 18, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 2920 37.779532 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:44:55 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2220 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 2920: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:55 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2220 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" No. Time Source Destination Protocol Length Info 2921 37.780323 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=89652 Ack=1703 Win=1002 Len=1448 TSval=544693 TSecr=727800 Frame 2921: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 89652, Ack: 1703, Len: 1448 Data (1448 bytes) 0000 17 03 01 21 00 58 ee 0f ff 12 c4 00 40 64 03 0b ...!.X......@d.. 0010 7f 55 11 5c c3 d6 69 98 ee a2 a3 fb a8 54 e3 d4 .U.\..i......T.. 0020 9a 8c c5 c9 df 29 9a cb b9 36 f9 51 ee 24 a2 4f .....)...6.Q.$.O 0030 f5 85 13 fc 20 c7 10 15 e4 1a 92 b4 13 44 af 72 .... ........D.r 0040 38 73 8f c2 5a 35 ea ce 0f d1 8e 23 0e 41 9f 0d 8s..Z5.....#.A.. 0050 68 68 9e 96 40 aa d9 8d 18 ef bf d0 cb f0 16 ee hh..@........... 0060 1c 90 e4 e1 d1 67 08 da 2c 4a 7f 52 b7 e9 da e8 .....g..,J.R.... 0070 b8 87 76 1d de 3b a8 64 85 61 5a ac d0 08 ef 3a ..v..;.d.aZ....: 0080 87 1c 83 83 87 5d e8 da 36 a3 1c 9a cd ff 2d 49 .....]..6.....-I 0090 96 3c b8 d2 a0 78 b7 32 b9 1a a8 5d d4 b8 1c 8d .<...x.2...].... 00a0 d5 35 89 50 c3 9e 68 1f d3 66 48 7f 48 5d 1c 96 .5.P..h..fH.H].. 00b0 4f 3d 2c e4 8d 6d 8a 60 f2 d8 35 50 70 96 33 dd O=,..m.`..5Pp.3. 00c0 6f 59 2e 73 f8 1c e1 7c 99 b0 75 72 66 75 c0 ee oY.s...|..urfu.. 00d0 d5 07 fc 84 ec d8 d5 bf ee ee 5f 54 a1 7b 95 d9 .........._T.{.. 00e0 f3 12 35 75 ca eb 57 eb 98 a5 dc fe 37 f1 25 e1 ..5u..W.....7.%. 00f0 e1 2e c0 94 85 94 c0 ea 09 2b 4a 71 0c cf 9b 37 .........+Jq...7 0100 f4 15 b0 7c d8 f3 9b c8 6f fd 8e 82 08 2c bb 43 ...|....o....,.C 0110 1e 4e 76 db ed 91 7b 34 be 74 3f 17 b9 48 c2 71 .Nv...{4.t?..H.q 0120 b4 90 c3 ce fa 2f 7c 00 db 26 13 5f ee 73 d9 81 ...../|..&._.s.. 0130 37 1b 8c 35 ad ce e5 a2 31 35 0f af b0 dc 5c 96 7..5....15....\. 0140 ee b7 6f cb a4 e6 a2 7c cb 10 95 55 4f e3 37 38 ..o....|...UO.78 0150 4a ef 14 2e df a0 fe 08 38 e7 35 66 7a 19 e1 f0 J.......8.5fz... 0160 5a a0 bd ea f9 34 00 a3 72 c7 e1 0e 56 a8 fa 5e Z....4..r...V..^ 0170 9d e5 72 60 2a e4 ef c7 b7 ec 91 0f 1a dd 62 57 ..r`*.........bW 0180 0e d7 31 b1 36 a7 32 e3 4a 41 16 14 da 7f f0 11 ..1.6.2.JA...... 0190 56 0b 13 b7 92 8c 99 4c cb de 03 48 33 14 ef fc V......L...H3... 01a0 ea 01 76 83 86 0a b3 68 2c 49 c9 2e af 9c 22 5d ..v....h,I...."] 01b0 9c 9e ab 36 40 85 16 22 b1 cd 75 41 d0 5e 45 03 ...6@.."..uA.^E. 01c0 0c 85 d2 08 53 d3 f3 ad fe f6 0c 0a d2 9d 97 99 ....S........... 01d0 a0 5b 45 a5 af d4 c9 68 89 b1 b5 e2 57 4c 06 5a .[E....h....WL.Z 01e0 c3 83 3e f8 87 0f 9c 88 25 e1 43 d0 86 c6 68 24 ..>.....%.C...h$ 01f0 12 11 8f 01 b0 bb 8c 89 ec 10 b2 97 f8 18 6f be ..............o. 0200 d7 2d 0e 4f 3a f4 13 b1 24 eb 98 0b f1 fe ae 85 .-.O:...$....... 0210 3e 0e 50 4f ae 53 54 c6 84 25 bc 9f 4a 0e c1 48 >.PO.ST..%..J..H 0220 99 ed 29 be 8a 16 6a 1f e3 72 13 64 28 e7 a8 f5 ..)...j..r.d(... 0230 2b e8 7e f6 ad 8b ff 37 5d 0c e3 64 94 df 57 65 +.~....7]..d..We 0240 10 93 26 8a 5f 98 e0 eb 2d af 27 c0 1f da 27 31 ..&._...-.'...'1 0250 36 30 3a 79 b6 1d 29 ff 7c 9a 39 1e b0 aa 62 39 60:y..).|.9...b9 0260 da 2f ab 3f d6 33 5b ef 00 43 2b 52 e3 c7 92 1b ./.?.3[..C+R.... 0270 9c 5b 5c eb 09 ea a0 3d fa 3f 72 2b 39 e4 59 6f .[\....=.?r+9.Yo 0280 b7 e6 36 a9 a1 7a da d4 73 c7 97 2c 9f 4f 36 7a ..6..z..s..,.O6z 0290 12 69 fe e2 9b ec 83 a3 ae 08 02 09 c0 5e 23 26 .i...........^#& 02a0 41 b1 e8 ba a3 1a 82 d5 e9 5e 5f a4 dd c8 2d 53 A........^_...-S 02b0 32 76 10 7f 20 43 18 b7 4e aa 09 dc 7a ac ef b7 2v.. C..N...z... 02c0 ab c2 ab 54 0c 93 0e ec 01 81 c1 b0 81 30 0a 32 ...T.........0.2 02d0 3c 22 e3 5f b4 be 62 9b 9f be 57 b7 49 43 2d 45 <"._..b...W.IC-E 02e0 21 e9 32 13 8b df 13 05 5c 3b 0f b4 38 19 56 b0 !.2.....\;..8.V. 02f0 56 b5 45 37 8d 02 9e 00 a5 41 18 cf 4d b3 91 37 V.E7.....A..M..7 0300 fc 7f a0 7d 83 af 0c de ad a0 38 c5 36 a1 f6 bd ...}......8.6... 0310 40 b7 8f 1f 61 ab 4a 91 d7 4a d6 e9 9b b7 bd 00 @...a.J..J...... 0320 71 3f 9e 5c 77 32 0d ae f1 b0 c8 cf b6 2b fb 8e q?.\w2.......+.. 0330 8b 77 0c 99 4c 27 89 45 61 92 fd a1 4b c5 1f 55 .w..L'.Ea...K..U 0340 66 b8 5c 72 84 a9 b1 ee 53 d9 aa 55 3d a9 ea 0e f.\r....S..U=... 0350 28 05 87 46 28 be 6b 32 cf dd 96 0d c4 b9 f9 d7 (..F(.k2........ 0360 e5 de 89 b6 34 a2 5d 96 83 ec f8 6b bc 05 ab 5f ....4.]....k..._ 0370 d2 4f e5 e8 de 5c 31 dd 9c 91 da cb 6e e1 ee 6a .O...\1.....n..j 0380 6c 63 80 4a 08 ef df 0e 82 03 d6 20 14 61 87 31 lc.J....... .a.1 0390 52 4f e6 98 c0 77 53 38 2b 89 33 14 8f 44 51 d1 RO...wS8+.3..DQ. 03a0 fd 6f 5a 79 af 99 eb b1 37 ad bc b7 4a 68 d3 64 .oZy....7...Jh.d 03b0 30 08 26 c2 83 1a 94 77 ce dc e1 85 aa 97 56 e0 0.&....w......V. 03c0 ea eb bf 43 f1 51 8b 6b 31 1d a3 fe 5a 27 24 a9 ...C.Q.k1...Z'$. 03d0 64 72 9b b0 99 30 02 33 5d ee 18 01 c2 ea 08 7e dr...0.3]......~ 03e0 55 a0 d5 23 34 79 a7 3a be 56 90 5c 9c 29 6f 4d U..#4y.:.V.\.)oM 03f0 43 61 73 62 1c 25 03 74 24 9d 58 c8 27 b2 0b 3e Casb.%.t$.X.'..> 0400 89 1a ac 04 40 71 e8 7a af a4 94 c7 44 99 51 cc [email protected]. 0410 b3 22 47 8e f9 35 88 f1 a9 78 02 16 41 75 51 fd ."G..5...x..AuQ. 0420 79 f5 17 b5 70 07 93 04 ca 7b 12 2e c3 a3 0b d5 y...p....{...... 0430 5f 4c 1d c6 a2 3a 3f 88 56 4f 32 6a 68 69 4f cc _L...:?.VO2jhiO. 0440 a9 e2 31 8b 9c 36 35 dc 55 30 c6 62 d2 87 aa 7b ..1..65.U0.b...{ 0450 be e5 09 91 37 c4 42 d3 f5 eb 9b f6 7a 42 4b 45 ....7.B.....zBKE 0460 b9 03 58 5f cc 51 b8 de ff 61 52 75 b5 cb c9 bc ..X_.Q...aRu.... 0470 81 f1 01 70 4f 96 9f 2f 5a 6c f4 57 e4 bf 6b d8 ...pO../Zl.W..k. 0480 6c 5d 38 55 e5 16 f3 58 7f 82 a0 47 07 53 30 92 l]8U...X...G.S0. 0490 11 b2 50 70 23 f2 11 07 53 f9 7e 03 04 9b ab 9e ..Pp#...S.~..... 04a0 9d c1 a9 7f 45 ae f6 8e d9 5b 8c a0 16 77 38 14 ....E....[...w8. 04b0 2e 1e 20 ca 57 18 e8 4c 71 44 74 e2 1c 13 2f 8b .. .W..LqDt.../. 04c0 2f 4a d5 7f f2 9b bd 15 eb fb df c8 ca 05 e9 9b /J.............. 04d0 cb 0a 6f cf f2 33 cf 4f 25 63 bf cd fa 87 6f dd ..o..3.O%c....o. 04e0 23 3a fa c9 cc 54 23 7d 00 0f b7 da 1b dc cd 5d #:...T#}.......] 04f0 88 90 28 fc dd 4c 69 ad fb 40 0b dd be 16 6c 0d ..([email protected]. 0500 c5 a5 4f e3 6d 13 54 52 57 54 f1 9d 49 43 bb 6c ..O.m.TRWT..IC.l 0510 78 4e 4d 3f ca 55 1f 13 86 8f fc c3 e6 f6 28 72 xNM?.U........(r 0520 08 08 71 48 4b 5b 99 e9 79 58 20 b4 fa 24 3c 03 ..qHK[..yX ..$<. 0530 0d d0 2e d6 dc b8 93 8d 81 30 4d 0c 0e fd 12 8a .........0M..... 0540 0e 68 db f9 2f 84 f4 00 3a 41 db af c1 67 65 9a .h../...:A...ge. 0550 7a f0 b1 40 0a d5 c1 47 2a 62 af ee d3 c6 29 77 [email protected]*b....)w 0560 60 4f df 6c a8 78 74 e0 56 d9 d7 7c ae 32 28 47 `O.l.xt.V..|.2(G 0570 6f 8c ef 6a 00 4e f4 88 18 41 14 48 fb 0a 14 73 o..j.N...A.H...s 0580 df af 95 ed d9 bc 4e 39 23 57 62 82 c3 b1 d9 18 ......N9#Wb..... 0590 79 f0 d3 20 c7 55 2f a9 33 f0 b5 c7 a6 59 07 7b y.. .U/.3....Y.{ 05a0 3a 2a 14 ba 6f 67 4d a6 :*..ogM. No. Time Source Destination Protocol Length Info 2922 37.780437 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=91100 Ack=1703 Win=1002 Len=1448 TSval=544693 TSecr=727800 Frame 2922: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 91100, Ack: 1703, Len: 1448 Data (1448 bytes) 0000 2b 5d fe 6f f6 d0 76 1e 72 2c 0b bd df 60 bd 6a +].o..v.r,...`.j 0010 95 31 4c a4 ca 24 aa db aa 1e 91 56 91 c2 7a 45 .1L..$.....V..zE 0020 47 50 2b 09 e3 4c 65 e1 33 54 28 8f 1c 7b aa 77 GP+..Le.3T(..{.w 0030 d3 af 84 6d f5 0d 47 82 b8 af 1f 6a b6 aa 2f 06 ...m..G....j../. 0040 06 9a 3c 86 02 90 70 9f 30 27 b8 d3 c2 62 3c f4 ..<...p.0'...b<. 0050 2f 3f 20 0b 3e a7 32 f5 93 39 f7 19 f5 6b dc 2e /? .>.2..9...k.. 0060 e7 67 16 5b c2 32 1a f4 12 ed 3d c9 1f 01 77 e8 .g.[.2....=...w. 0070 f5 42 d2 35 d8 c6 fa f1 c4 79 fa 3e e4 1a 8d 56 .B.5.....y.>...V 0080 63 3d a4 e2 fc a0 9e 02 b9 fa 2e 48 6a 5a b9 e7 c=.........HjZ.. 0090 86 0b 8c 9b a3 a0 a0 42 fa 14 e6 65 3c 97 a9 87 .......B...e<... 00a0 ba 04 dc ac 29 f0 a5 4c 96 bf a8 d8 ee f2 93 80 ....)..L........ 00b0 19 46 91 e4 9e c4 bf f6 4b 69 86 f2 6e 56 15 8c .F......Ki..nV.. 00c0 cc 47 2b 1d e8 3c f8 0f ab c0 3e 2e 8c ff 34 83 .G+..<....>...4. 00d0 7a 07 25 97 ea 34 ee c0 3f f4 c5 07 e7 fa 75 f8 z.%..4..?.....u. 00e0 2e e5 4e 12 00 d4 ac a6 91 82 e5 62 7f 9f ca e6 ..N........b.... 00f0 74 d6 2d 7d 35 db a9 d6 9d dc 59 cf 9c 2b 8c c0 t.-}5.....Y..+.. 0100 ff 99 ac 71 d0 00 e6 a0 b4 77 e0 ba bb 77 8f 3a ...q.....w...w.: 0110 f7 2c 11 d7 b4 0e 5b 05 6c 73 08 41 b8 fd 46 02 .,....[.ls.A..F. 0120 97 01 b2 36 33 62 ea fd 5a cd d0 66 16 be 1d 54 ...63b..Z..f...T 0130 85 30 dd 0d 54 5c 25 77 a4 be a1 35 63 53 9b d6 .0..T\%w...5cS.. 0140 a7 77 5e ff f2 6a bd a5 9d 2e 45 4e 58 fd 20 98 .w^..j....ENX. . 0150 71 8b 72 dc f6 d7 41 a1 15 74 de 16 e1 11 a2 7c q.r...A..t.....| 0160 ec b6 4f b0 b3 c3 03 73 fc ad 1b 3c a7 cc d6 85 ..O....s...<.... 0170 6b bf 65 e3 50 18 84 a2 1d 75 8e 35 ab 9f f0 74 k.e.P....u.5...t 0180 d4 49 55 8d fa ea 22 99 89 73 ed bb c0 de 31 fe .IU..."..s....1. 0190 46 aa d6 e6 e9 9c b4 e8 96 1d 25 5d 04 4e 29 47 F.........%].N)G 01a0 d0 fb 26 84 a3 ae 34 3d e1 f7 6b da 43 6e 81 26 ..&...4=..k.Cn.& 01b0 4f 65 f8 d0 af 2f dc 33 91 8f 1c 23 19 d1 a3 ff Oe.../.3...#.... 01c0 6c a7 30 d0 9a 77 d1 43 be 65 69 ff e1 5a 9e 85 l.0..w.C.ei..Z.. 01d0 51 30 08 91 f9 37 b5 2c 70 03 85 e4 af 31 10 d8 Q0...7.,p....1.. 01e0 1e 25 5d db 2c ec 68 8e 46 76 d4 7f c2 7d 65 d6 .%].,.h.Fv...}e. 01f0 71 64 ac d2 bd 40 f5 33 ce e2 2d b3 c1 e6 7d 92 [email protected]...}. 0200 ee e7 55 74 3a f9 03 d5 44 55 dc ad 1f d5 98 ab ..Ut:...DU...... 0210 c7 cb c5 7d 7d ed c6 f0 82 9d 81 86 1a 0d b2 cf ...}}........... 0220 7e e2 ee 41 27 de 11 77 65 67 76 c3 1e ae b9 7a ~..A'..wegv....z 0230 67 c4 af f2 15 e0 69 14 e7 80 c4 41 9f 54 28 39 g.....i....A.T(9 0240 f0 a7 69 d3 30 c4 d2 93 22 2e a5 1b f5 9d 5b 6e ..i.0...".....[n 0250 1e 30 49 42 e4 f5 98 52 73 76 e6 9c fd 18 7a 31 .0IB...Rsv....z1 0260 0b 79 52 b5 79 9a 05 9c ef 5c 7a 90 00 4e 07 f4 .yR.y....\z..N.. 0270 72 3c 23 77 40 46 7c 66 7d 65 60 d9 73 40 38 a5 r<#w@F|f}e`.s@8. 0280 ff 69 8b 8b 3b 6d 2b 6f c5 7d 3d c4 0b f1 1d 55 .i..;m+o.}=....U 0290 2a 64 ad b3 f6 59 29 49 c9 92 4c 7b fb 28 96 60 *d...Y)I..L{.(.` 02a0 d9 a0 9c 3e b5 39 6c 11 4b 4d da 03 7a 38 47 d4 ...>.9l.KM..z8G. 02b0 3a e4 45 55 06 da 26 38 ac e3 8c 60 68 31 88 08 :.EU..&8...`h1.. 02c0 67 d9 3e 40 c2 a7 b6 8e 20 7b 5e f3 20 17 b3 ac g.>@.... {^. ... 02d0 24 62 46 51 35 f6 56 86 4c c9 5f df d3 4a 89 cd $bFQ5.V.L._..J.. 02e0 6b 23 3d 82 ea 4c fd ae d6 86 12 ef 30 8a 78 21 k#=..L......0.x! 02f0 b6 08 09 15 12 75 29 4e 75 6a 53 a6 c3 8f 61 94 .....u)NujS...a. 0300 0f 9e 54 a2 2d 92 8e 50 dc 34 4c 18 e3 ef fc ef ..T.-..P.4L..... 0310 a8 2b e9 b0 4f 8d d2 13 7c e9 86 30 4c 4d e4 f9 .+..O...|..0LM.. 0320 00 0c 98 85 d5 d9 fc f4 dc c4 bd b0 f7 c5 04 a8 ................ 0330 d1 f4 1e 41 ec f2 b9 d7 a8 fa d8 37 6e f6 1a 47 ...A.......7n..G 0340 10 9e f6 74 68 37 8d 17 a1 0d 42 6f ef aa 72 bc ...th7....Bo..r. 0350 2f 5d fc ce 1c de 83 aa 27 ff 37 76 be 7e 29 7f /]......'.7v.~). 0360 c2 62 ad 28 cf e7 17 f6 58 bf bd c0 53 ec c0 95 .b.(....X...S... 0370 49 6e 62 18 bc 41 76 32 bf 4f 55 d3 33 63 8e 33 Inb..Av2.OU.3c.3 0380 36 4f 6d 8b 37 04 72 da 58 78 64 61 a5 56 a3 79 6Om.7.r.Xxda.V.y 0390 83 b8 a1 fc e4 87 52 77 67 e7 78 d4 07 59 89 43 ......Rwg.x..Y.C 03a0 45 58 e2 5f 5a f5 97 b0 0f 33 89 66 ae 4d 77 29 EX._Z....3.f.Mw) 03b0 92 63 d0 48 08 24 31 6e b8 a5 85 5a 8a 6c 83 16 .c.H.$1n...Z.l.. 03c0 21 57 d9 a2 45 06 c9 99 44 a4 d7 d1 ee 27 1c 18 !W..E...D....'.. 03d0 7e 6e 1d 22 3e 16 57 70 87 53 8b a1 ea 33 6a d7 ~n.">.Wp.S...3j. 03e0 d5 98 39 4f bb dc 63 aa bd 6e d1 7e 5c ce b1 70 ..9O..c..n.~\..p 03f0 0c c6 4b 6d 93 f3 d1 e6 03 04 f8 58 bb e6 d1 bc ..Km.......X.... 0400 71 99 ef c3 e4 8d dd a5 dc 67 39 68 51 db a6 1f q........g9hQ... 0410 49 50 da 69 fa 3d 64 5f c3 e0 43 b1 32 db 93 49 IP.i.=d_..C.2..I 0420 38 a1 04 8a f2 8c b1 c0 56 18 da 7d 5d fa 7a f9 8.......V..}].z. 0430 2f 3d 22 55 c6 de a1 cc b5 01 1c 07 a0 76 6f d6 /="U.........vo. 0440 ed b2 f7 21 8a 2b 20 4d 8d 3f 93 91 88 03 10 70 ...!.+ M.?.....p 0450 a4 bb 6d 3a e2 cb 3e 60 ec 7d 9a 3c 49 af 2e c0 ..m:..>`.}.<I... 0460 53 61 e6 a2 f4 9e 68 c3 1b ca 3b 74 1d 0a 3d e0 Sa....h...;t..=. 0470 98 92 a9 b2 35 a7 45 a2 75 43 86 99 15 32 0f a2 ....5.E.uC...2.. 0480 54 a9 07 9f 99 37 59 83 db 7b dd 16 5f c0 76 d2 T....7Y..{.._.v. 0490 f2 73 28 95 e1 ae 8f 7d cf ae ee e0 d4 17 ba 83 .s(....}........ 04a0 3d 72 e6 cc 40 b8 35 19 8a 75 56 bc d3 1a d9 08 =r..@xxxxxx..... 04b0 33 e8 97 ae 55 da 1c d2 f3 85 7e ea 8d 8e b1 ab 3...U.....~..... 04c0 3d 01 8e 54 64 75 6f e0 dc e6 8f 2d 70 23 95 87 =..Tduo....-p#.. 04d0 b8 12 f3 8e bc 88 86 2f 1c ae c0 03 73 75 f8 f5 ......./....su.. 04e0 15 7e 60 b7 8c a5 45 6b 66 a9 95 76 5a 0a b9 65 .~`...Ekf..vZ..e 04f0 de ef 8e 93 b5 62 12 a7 f2 a6 16 c9 8e 61 a8 da .....b.......a.. 0500 b4 a7 bf f2 de 7b f9 4f 9c f1 c8 af 87 34 89 89 .....{.O.....4.. 0510 3e 8e 46 97 2b 49 5f ab 5a 2d 2d 0e 3b fd bf 3e >.F.+I_.Z--.;..> 0520 77 d3 8c c4 e0 83 01 e8 e7 d0 81 de dd 35 8b 4e w............5.N 0530 d6 a7 dd 8b e7 9a fe 53 95 53 77 2c a0 bb d6 ad .......S.Sw,.... 0540 a8 96 6e 19 c7 06 42 16 8d a6 66 72 14 dd d3 df ..n...B...fr.... 0550 6a ae ed 53 0e 38 b3 8b f0 e4 a7 63 f8 96 03 f0 j..S.8.....c.... 0560 07 cc b0 73 dd 91 04 69 f4 56 36 3b af 14 31 d6 ...s...i.V6;..1. 0570 e7 6f 0d f0 d8 50 e1 cb e5 5a 9b b4 50 f9 fa bf .o...P...Z..P... 0580 48 24 f3 24 1c f2 51 d0 f0 c4 41 b5 e6 83 9f d7 H$.$..Q...A..... 0590 a4 4f ff 99 1e 18 82 31 43 85 f3 95 17 31 29 98 .O.....1C....1). 05a0 8c db 06 32 0b ac 91 bc ...2.... No. Time Source Destination Protocol Length Info 2923 37.780544 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=92548 Ack=1703 Win=1002 Len=1448 TSval=544693 TSecr=727800 Frame 2923: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 92548, Ack: 1703, Len: 1448 Data (1448 bytes) 0000 1f d2 6f 83 24 b2 1b af b5 8a 3a fb 4e b9 7f e2 ..o.$.....:.N... 0010 37 58 be f6 9b a0 65 94 15 fd 04 07 80 2a a7 8c 7X....e......*.. 0020 06 de 35 c0 95 be 87 19 b6 a9 60 e4 78 93 30 9f ..5.......`.x.0. 0030 2b 0e 96 d8 b8 cc 19 0f e9 ae 6a 8e ba 5c 5d a4 +.........j..\]. 0040 03 a7 3b aa e7 91 b2 78 2e 71 b1 c0 71 91 58 27 ..;....x.q..q.X' 0050 18 4a 4d 35 8b 25 08 f7 8b ba 7c aa 79 8e 6e e8 .JM5.%....|.y.n. 0060 9e 0a 6b 13 54 82 12 9c 57 ab ed 53 91 86 eb 80 ..k.T...W..S.... 0070 2d d6 65 6b 69 07 0d 0f f8 07 9a 03 ed 87 99 a8 -.eki........... 0080 8c 85 7c 1d 88 3e ae 64 3b 84 d3 e1 19 40 73 2d ..|..>.d;....@s- 0090 63 cc ef 62 6b 11 5a 55 4a db af 84 ef 4d 99 0c c..bk.ZUJ....M.. 00a0 34 89 47 57 10 11 60 59 68 35 a9 ae 86 a9 a0 bd 4.GW..`Yh5...... 00b0 5a 5e a9 01 05 1d 37 d6 fe 59 aa aa 01 26 bf 1d Z^....7..Y...&.. 00c0 03 d6 0e f2 7d e0 6b 7d 90 44 6d aa b6 1d 4f 0b ....}.k}.Dm...O. 00d0 eb bb 1d d3 d7 24 ea 87 9e da ce 1f 66 a7 7f 92 .....$......f... 00e0 86 c6 8f 98 37 f5 d2 65 1b 5a a6 75 7a 6e ec b2 ....7..e.Z.uzn.. 00f0 59 e1 b5 3c e3 34 f0 54 0c 47 8d 23 d8 73 1d a9 Y..<.4.T.G.#.s.. 0100 44 02 9f c2 29 3b 01 78 7d 0b 91 95 d4 26 49 eb D...);.x}....&I. 0110 cc 6c ac 48 1b 68 55 04 3b 2e 1a cd 59 6a 9c c7 .l.H.hU.;...Yj.. 0120 c4 76 e4 3a c0 85 fb 60 9a d1 2f 0b 76 ba 66 50 .v.:...`../.v.fP 0130 e4 ca 7b 5a 60 6b ee 00 a7 e4 49 ea 58 27 e6 ac ..{Z`k....I.X'.. 0140 94 bd bd 90 00 39 f7 1e 13 d5 07 b4 6e 11 df 50 .....9......n..P 0150 d5 0d 70 ba bf 94 66 33 bc cc a3 11 09 ca e8 ef ..p...f3........ 0160 40 3e 18 be 70 62 56 2a 5b 55 ac ee 1f 60 72 b7 @>..pbV*[U...`r. 0170 ea 01 4a ed ae 1f 9d 2e 89 09 54 75 7d b7 0a 13 ..J.......Tu}... 0180 0d e5 bc 6b eb b2 e5 46 9e 01 2d 2a 92 6a b5 04 ...k...F..-*.j.. 0190 78 28 c6 6b a8 f3 1a 50 84 f9 1e 52 56 56 58 78 x(.k...P...RVVXx 01a0 62 24 60 ac f6 24 32 7f 76 50 af 25 cb e8 d6 86 b$`..$2.vP.%.... 01b0 4f 5c 68 9a 57 fc d0 93 4c 86 1a fc c3 52 2e 83 O\h.W...L....R.. 01c0 da 17 b7 68 d1 3c 9e a9 d5 72 86 c6 72 b9 ff 43 ...h.<...r..r..C 01d0 39 3e 49 a5 93 82 7f 0a f3 69 c9 75 79 24 4b 08 9>I......i.uy$K. 01e0 70 c3 60 1c b1 37 f7 d6 af ae 7f a6 b2 cb 17 3a p.`..7.........: 01f0 34 97 b0 57 6d b7 e6 fc 9b 6d 5b dd 8a a8 16 35 4..Wm....m[....5 0200 f6 8d 48 9a 79 18 22 f8 92 ef c6 27 43 bd 52 45 ..H.y."....'C.RE 0210 f7 4e a8 8b d2 58 53 ea 8e c7 51 b5 a3 28 95 76 .N...XS...Q..(.v 0220 42 bc 00 39 c0 3c f0 27 58 d9 70 f4 21 1f 65 9e B..9.<.'X.p.!.e. 0230 6c 87 e0 7b 12 87 86 0c 7b 51 7e 43 06 20 33 16 l..{....{Q~C. 3. 0240 21 81 f0 f7 a2 bc 1c f0 72 5f 88 b2 2e 82 29 d8 !.......r_....). 0250 64 6c 7d a6 94 ce bb bc 5e 2a 60 f5 d1 d5 fb 10 dl}.....^*`..... 0260 c7 ee 46 99 83 5b 91 44 4a 04 3a 56 68 b5 ec 15 ..F..[.DJ.:Vh... 0270 ee b3 ec d1 2f 29 0c 3f da fb 9c be 0b 0c e8 e5 ..../).?........ 0280 36 4c b0 b9 b1 2a d5 a5 23 54 49 94 bc c0 5c e4 6L...*..#TI...\. 0290 a2 c0 26 bc e9 5e ef 14 08 89 d7 41 8b 6a ef 06 ..&..^.....A.j.. 02a0 4e e5 46 04 54 79 65 bf 12 f9 6d a4 32 1c 77 71 N.F.Tye...m.2.wq 02b0 92 1b be 5b cd 1d 04 ff 4f 89 b4 d4 c9 ca 68 2a ...[....O.....h* 02c0 3c 0d a0 c5 ee 65 e6 fd 8e dc 95 ca f0 1c 4a 81 <....e........J. 02d0 5c ec d3 f0 c6 9c 3d 7e 10 c2 4c b1 ec 94 6d 96 \.....=~..L...m. 02e0 18 e6 1b 21 4f 6e 29 0d 0e e7 24 0c 9d ea 0d 03 ...!On)...$..... 02f0 70 ba 6b 0a 9c 49 27 3d 33 5a 57 bc 4a c4 61 03 p.k..I'=3ZW.J.a. 0300 99 55 1d ce 57 0a 83 b8 ad ed c6 3e 2e 4c 2f 1f .U..W......>.L/. 0310 5c 23 b1 48 83 19 36 47 b9 a8 1a 5a 9a e8 b7 1c \#.H..6G...Z.... 0320 25 14 ff ed 51 93 ad 8a 58 3a fd 3e e2 e5 e2 6e %...Q...X:.>...n 0330 f8 f3 07 14 7e a7 58 ba 43 10 9b 3a e5 c3 df 18 ....~.X.C..:.... 0340 f6 8e c4 05 b4 fd 9f ae d6 35 70 8c 98 0c e5 ca .........5p..... 0350 cd fb 2b 7e 59 dc 49 ba a2 73 5e 26 93 32 87 ea ..+~Y.I..s^&.2.. 0360 92 70 69 00 b2 39 e1 fe 8e 3e 8f 9f 62 48 09 d9 .pi..9...>..bH.. 0370 7b f3 4e 99 d4 25 b0 18 29 cb 37 f7 77 5c 07 a4 {.N..%..).7.w\.. 0380 59 77 d6 7d 03 f2 ad 00 74 fa 72 aa f0 b5 d2 61 Yw.}....t.r....a 0390 aa d0 e7 61 3d 80 93 61 81 fe aa 70 38 9f 2c 6e ...a=..a...p8.,n 03a0 08 6d 49 79 c9 2c 1b 37 da fd 9d 7b 84 e5 4a af .mIy.,.7...{..J. 03b0 fd ae f0 8b 36 d7 85 60 2b 5a 8e 74 0a 27 d4 f0 ....6..`+Z.t.'.. 03c0 54 e1 3b 72 91 e9 f1 80 76 58 54 7c 15 99 0c 19 T.;r....vXT|.... 03d0 07 a5 76 2f c7 64 f6 2c a7 51 35 09 73 8f 13 cf ..v/.d.,.Q5.s... 03e0 52 8c 7a 20 74 18 2a 88 09 cf fc 38 9c c3 a1 c3 R.z t.*....8.... 03f0 f9 b1 8b 9e 81 26 0b 2c 38 42 aa 0d b5 26 68 c6 .....&.,8B...&h. 0400 ab 29 5f 3e 70 53 92 32 89 9e e3 ee 12 28 49 cc .)_>pS.2.....(I. 0410 3a 1a 43 4e f2 20 e0 1e 33 fc 67 d2 3f 3a f9 c8 :.CN. ..3.g.?:.. 0420 3d 0d 96 07 b4 2c 25 47 4c e5 8c 48 57 8e 50 55 =....,%GL..HW.PU 0430 7d 97 d1 69 b8 82 1c c1 9f 8d 76 3e 5e 40 70 64 }..i......v>^@pd 0440 0e 44 9c 8d 99 d4 7e 1e 20 a7 3e 19 b4 a7 b2 ba .D....~. .>..... 0450 8a 8e 86 6e c9 d5 4a 79 18 64 c7 30 e9 f2 b1 f4 ...n..Jy.d.0.... 0460 77 8e 09 ab 80 93 45 08 94 4a bb 06 19 d3 40 fc w.....E..J....@. 0470 a5 7c db 64 ad 93 9f 2e bc 22 a5 d0 62 b0 71 05 .|.d....."..b.q. 0480 8d a4 16 97 a7 ee 21 79 c6 82 4b 29 e2 f8 d5 49 ......!y..K)...I 0490 c9 3d 4e 39 d7 32 28 de 61 a7 49 3c ee c3 67 9b .=N9.2(.a.I<..g. 04a0 79 95 43 b3 96 16 41 ee b0 9e 68 95 93 f4 35 a8 y.C...A...h...5. 04b0 60 08 3c f1 64 74 c2 4d 1a 2e 7f 70 9e 1a 20 08 `.<.dt.M...p.. . 04c0 af 0a af 63 48 1d 85 ff b8 52 cb 1a ab c3 f0 f7 ...cH....R...... 04d0 c7 ee f6 3d e1 19 d3 d4 9d 95 5f a7 f5 c5 c7 3d ...=......_....= 04e0 54 72 98 f6 5a 9c 3a eb 60 02 a2 59 55 cf c3 f6 Tr..Z.:.`..YU... 04f0 8e 63 ae f1 67 d7 5e 79 e0 1a 69 c4 25 12 4d 0b .c..g.^y..i.%.M. 0500 53 d7 7a 34 c8 02 39 56 1f 9d aa 45 1e a7 0c 51 S.z4..9V...E...Q 0510 59 c9 da 52 d9 0a 2f 49 38 f6 4b 6a d4 a7 6d 7d Y..R../I8.Kj..m} 0520 3a 65 88 cb 28 a5 73 5b 5c 46 65 71 a7 b7 54 f7 :e..(.s[\Feq..T. 0530 b9 48 c1 16 cd e8 04 61 df 44 cb 5f 58 2b 52 58 .H.....a.D._X+RX 0540 0c 8d b0 f4 7a b3 b9 9b 16 56 d9 d7 64 34 c2 ef ....z....V..d4.. 0550 e5 ba 24 85 59 3f 66 43 6b dc 5a c1 a1 0c 7e a3 ..$.Y?fCk.Z...~. 0560 7b 37 57 1a e5 b0 4d 6d 61 cf 8a 37 5a e0 d7 ed {7W...Mma..7Z... 0570 a4 21 36 2d be 1f 14 59 5a b3 f0 cc fb 15 f7 44 .!6-...YZ......D 0580 14 9c 47 39 13 28 30 41 67 d0 b7 8e 26 9b 31 f3 ..G9.(0Ag...&.1. 0590 60 97 86 e6 ea 3d d8 9c 54 6f de 44 32 22 33 22 `....=..To.D2"3" 05a0 09 38 a6 c3 72 c2 b6 48 .8..r..H No. Time Source Destination Protocol Length Info 2924 37.780633 192.168.10.1 192.168.10.245 Syslog 277 LOCAL1.INFO: Oct 3 19:44:55 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2220 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 2924: 277 bytes on wire (2216 bits), 277 bytes captured (2216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:55 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2220 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPEL No. Time Source Destination Protocol Length Info 2925 37.780695 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=1703 Ack=92548 Win=65535 Len=0 TSval=727860 TSecr=544693 Frame 2925: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1703, Ack: 92548, Len: 0 No. Time Source Destination Protocol Length Info 2926 37.780800 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=93996 Ack=1703 Win=1002 Len=1448 TSval=544693 TSecr=727860 Frame 2926: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 93996, Ack: 1703, Len: 1448 Data (1448 bytes) 0000 7c 16 d4 f0 fd 61 59 36 9a 4a 1b 76 4c aa e5 e4 |....aY6.J.vL... 0010 58 0f 1f 0c a0 6d 8e 48 a1 d2 9a 73 84 ae e9 58 X....m.H...s...X 0020 a9 32 f4 33 25 58 44 9a 43 50 1c e4 19 6f f9 84 .2.3%XD.CP...o.. 0030 d3 8f 27 fb cf b8 08 7e 2b c2 2d 78 34 5c ad aa ..'....~+.-x4\.. 0040 2b 41 9d e8 df 12 87 0f 2a c1 46 90 36 02 c7 8e +A......*.F.6... 0050 56 0b 27 0a 61 d1 37 5d ef 88 34 4d f0 00 2d 76 V.'.a.7]..4M..-v 0060 fa 95 5f 6c 86 d9 ce aa 94 ee 5c 01 d9 3e a2 1c .._l......\..>.. 0070 45 59 52 87 5f 4f ce 76 9d 02 4e cd b0 5c 81 ea EYR._O.v..N..\.. 0080 90 17 c8 d0 8c c5 e9 60 87 42 7b 85 60 33 38 c9 .......`.B{.`38. 0090 ad ac c1 16 fe 10 24 ab 4d 7d 3b b6 cf c4 6f c6 ......$.M};...o. 00a0 78 39 9e d6 f5 2e 73 ad 2d a8 e8 f1 33 98 9f 96 x9....s.-...3... 00b0 10 9f b5 42 f2 eb 64 80 10 9b 51 7e b6 fc c5 c6 ...B..d...Q~.... 00c0 59 7f 4f 98 80 92 6d 41 3c 61 04 15 66 51 de 91 Y.O...mA<a..fQ.. 00d0 dc 2f 8b 27 c4 3f 24 b7 15 2a 56 eb 47 a1 0c 55 ./.'.?$..*V.G..U 00e0 84 52 65 28 76 2a ae d8 7f 6f ab f3 ab 1c e6 93 .Re(v*...o...... 00f0 73 63 c5 80 da 0a 64 99 44 22 b5 69 e3 7b f3 72 sc....d.D".i.{.r 0100 a9 d2 a8 de 15 da e9 48 1f 0b 3e ff 8f e8 e8 dd .......H..>..... 0110 4d d0 8f ab 6d d9 ab c9 bc b5 d6 9d b1 34 01 22 M...m........4." 0120 eb df 89 d9 4d 9b 20 55 35 bb 04 8e f7 dc f1 e4 ....M. U5....... 0130 4f e1 06 47 1c 65 e3 53 f2 54 88 1a 27 ce e1 ed O..G.e.S.T..'... 0140 a0 06 c3 68 54 a3 bc a3 be 8f 24 3e 3d 32 50 b2 ...hT.....$>=2P. 0150 dc 18 f8 c6 50 20 27 ab 8b d5 37 76 9b a7 a8 03 ....P '...7v.... 0160 29 1d d2 39 97 26 1d 98 9b 50 d1 ea 13 c4 e2 19 )..9.&...P...... 0170 ad 7e 78 32 20 d9 30 8a f8 61 a7 7e 0f a4 7d 7d .~x2 .0..a.~..}} 0180 27 dc d9 bb 41 a8 12 82 74 a4 8b 38 a2 b9 89 1d '...A...t..8.... 0190 03 c2 d1 27 78 f5 d3 d6 1f ef ca dc 82 c3 1f 50 ...'x..........P 01a0 e6 29 8a 07 71 46 51 bc 73 01 6e 8c 32 c9 56 fd .)..qFQ.s.n.2.V. 01b0 f7 43 59 10 7a 48 5f 0d 7f 00 ce 28 8b fc 20 ea .CY.zH_....(.. . 01c0 ca 7e c9 62 dd 6b 50 7a 82 2f ed a4 94 6b 5d 3f .~.b.kPz./...k]? 01d0 cb 8d 7f 42 16 72 d6 56 85 7f f8 29 76 6a 71 e4 ...B.r.V...)vjq. 01e0 b3 ee 34 d3 db 71 f3 38 4b 60 09 75 03 48 90 c6 ..4..q.8K`.u.H.. 01f0 f6 92 29 2b d1 16 6b f6 eb 30 62 63 65 7a 3b 24 ..)+..k..0bcez;$ 0200 02 46 95 73 a9 ae 3b 92 1f 33 98 0b 3d 61 96 8f .F.s..;..3..=a.. 0210 d1 e4 80 ad 94 d1 ac 8e 1b fd 74 00 4b 81 bf bc ..........t.K... 0220 04 cc cf 00 1b e1 ff 0c ba 10 97 41 be 66 91 1e ...........A.f.. 0230 83 53 74 61 1f 15 0f 6d d3 ca 56 ee 89 c2 3b 83 .Sta...m..V...;. 0240 0a bd f0 ca 82 97 b1 4f f5 97 9f b1 0c e3 a5 fb .......O........ 0250 2a 89 b6 e8 20 43 34 47 f6 b8 4e 52 07 35 a4 c2 *... C4G..NR.5.. 0260 cb 1c 17 ef bf 5c 15 50 20 4a 0d 07 4d 16 af 73 .....\.P J..M..s 0270 1c ff a7 61 9f b4 fa 47 ad 97 7e 44 d0 2c 6d f4 ...a...G..~D.,m. 0280 ec 18 c9 b7 97 c0 e1 3e c0 77 5d 0f 78 04 c0 d4 .......>.w].x... 0290 ec 1b 17 f8 b9 32 5b 14 a6 b7 4d 0c 15 c1 bd 95 .....2[...M..... 02a0 eb e7 c6 08 8d 47 65 8d 79 c2 98 ba 60 4a 2c db .....Ge.y...`J,. 02b0 47 73 33 36 a4 b9 16 4d a4 0f 0c 24 6c a2 55 a0 Gs36...M...$l.U. 02c0 cf 09 67 ed 13 e8 bc ed ee 88 6c de a1 ff 8d f4 ..g.......l..... 02d0 fc 48 ae 3a 14 11 61 9e 16 9b bb 6f 44 4f 6d 83 .H.:..a....oDOm. 02e0 3c b6 e1 f2 05 32 46 ab 1e e0 87 62 ed 92 5e fe <....2F....b..^. 02f0 21 a2 68 8e c8 de a3 ac 59 0c 7b 38 63 11 36 74 !.h.....Y.{8c.6t 0300 4b f6 9f f7 26 fb 24 b2 94 ac dc ff 8e ab 50 fa K...&.$.......P. 0310 33 6c e9 37 4d a0 02 fd 20 02 b9 9b 17 33 c5 0e 3l.7M... ....3.. 0320 1e c7 db 9b 98 b8 bf d8 76 e3 09 ca f7 a1 61 20 ........v.....a 0330 ae 9b 43 ba 04 6a e9 98 33 19 bc 2e 9f 60 b5 b6 ..C..j..3....`.. 0340 e1 e1 66 da ad 27 3a 47 c3 51 7c 94 e5 44 cd 9c ..f..':G.Q|..D.. 0350 5b f9 ad 20 9d ff 03 d6 48 1d ab 52 eb f0 81 b3 [.. ....H..R.... 0360 f4 be 60 ab c7 9a a1 b3 1c d7 03 92 42 5d 53 62 ..`.........B]Sb 0370 ce a1 c1 42 7a 3d 09 80 47 8d 79 55 49 66 74 5c ...Bz=..G.yUIft\ 0380 e7 e5 9d 54 3c 0d ef 1b b3 f3 a5 48 d2 8f 04 57 ...T<......H...W 0390 a6 cc 46 68 e5 8e 05 96 36 fc b4 3e c0 14 6b dc ..Fh....6..>..k. 03a0 7e 7b 61 14 ce 93 57 7e 10 f4 c0 0a a6 53 7b b4 ~{a...W~.....S{. 03b0 16 3d f0 e6 5c ab 42 99 97 e2 f2 dd 43 12 d9 67 .=..\.B.....C..g 03c0 54 13 5c 85 13 d1 5b b6 94 f3 a1 81 e3 92 dd 89 T.\...[......... 03d0 58 41 cb 72 d3 eb 29 38 c3 2e c7 5f 16 fc 04 e9 XA.r..)8..._.... 03e0 fa f6 b3 a2 c1 a4 c9 61 22 ee 42 36 27 4f 7c 38 .......a".B6'O|8 03f0 fe 25 bc 60 91 60 e1 30 cc 09 41 97 54 c9 65 72 .%.`.`.0..A.T.er 0400 1b da 0f 0c 1f 82 77 44 0f 96 1f cd 10 91 c9 34 ......wD.......4 0410 62 7b 30 e5 7d 22 35 65 9f 0f 1a fb 72 df 6c 84 b{0.}"5e....r.l. 0420 66 e1 32 86 ce 4d 31 a1 25 af 5e ac 62 2f 85 5e f.2..M1.%.^.b/.^ 0430 7b 90 ec d4 91 47 30 89 28 5b c5 6c ec d2 52 f2 {....G0.([.l..R. 0440 4b 71 94 e4 06 de 37 d4 d2 ec 18 91 56 69 94 4d Kq....7.....Vi.M 0450 c7 fb 9c 8b a2 d7 dc ab bf 7e 31 84 08 67 cc 97 .........~1..g.. 0460 bf 03 42 b3 78 00 d3 5b 17 5f 8c 08 43 7f 48 c0 ..B.x..[._..C.H. 0470 6b 25 a9 6e 77 aa 4e df 9e 55 3e 28 96 51 aa 27 k%.nw.N..U>(.Q.' 0480 1e 47 0d e6 ba f6 fb c7 b4 91 a9 07 5b b1 69 05 .G..........[.i. 0490 d5 7d a8 97 eb bf 37 45 87 2d 1a 5b 11 18 35 ca .}....7E.-.[..5. 04a0 a3 d9 ec 27 bc 66 ae a3 80 9a 6b 2e 0a 06 1f d0 ...'.f....k..... 04b0 8a b3 0d c6 5b 8e b3 43 6c 84 a2 32 cb ae da e5 ....[..Cl..2.... 04c0 b2 01 80 7c b6 33 45 15 99 98 24 cd 34 d6 7f d6 ...|.3E...$.4... 04d0 11 39 ac b8 84 23 e2 73 69 9c 3a bf 0d 26 a5 98 .9...#.si.:..&.. 04e0 ba 80 e3 72 eb 8f 1d 62 20 02 4b 0b 9b f3 47 5a ...r...b .K...GZ 04f0 b2 47 9e 1f 83 89 1e 71 35 da a1 4a 50 18 fb 18 .G.....q5..JP... 0500 f3 2a 65 fb 68 83 14 6f 6b 8b f3 ae 3f 12 e3 d6 .*e.h..ok...?... 0510 e1 76 5c ee 4f 16 ae d0 c3 7d a8 05 80 9d 1e 0d .v\.O....}...... 0520 a2 db 74 7a 39 24 7f 84 3e de 21 3c a5 d5 ef d4 ..tz9$..>.!<.... 0530 5d c4 0e 72 03 62 ba 9e 11 00 2a f3 09 f6 66 86 ]..r.b....*...f. 0540 d9 6f 1b 03 72 72 21 27 24 d1 a2 09 5d 64 0b 2d .o..rr!'$...]d.- 0550 14 f6 94 c2 84 6a b3 8b 77 66 3d 51 27 fa 2e 6a .....j..wf=Q'..j 0560 bf 49 2e 4e a5 fc e2 07 62 e7 9d fe 7a 67 10 2a .I.N....b...zg.* 0570 6c 20 9b 1b 71 5c 38 89 84 b7 ae 54 c3 4a f5 ba l ..q\8....T.J.. 0580 00 d2 75 f5 0b e7 a3 21 c0 0c 0d 45 02 7b bc cb ..u....!...E.{.. 0590 86 7d 76 44 4c 68 96 a9 d2 7c 0a 74 25 78 d9 52 .}vDLh...|.t%x.R 05a0 f0 3d c6 29 90 71 48 3b .=.).qH; No. Time Source Destination Protocol Length Info 2927 37.780902 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=95444 Ack=1703 Win=1002 Len=1448 TSval=544693 TSecr=727860 Frame 2927: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 95444, Ack: 1703, Len: 1448 Data (1448 bytes) 0000 85 35 78 3c 6b c9 28 67 df 2a 6a fe 68 b9 5e b6 .5x<k.(g.*j.h.^. 0010 8e 29 45 9a 50 f0 2e f5 21 bc 6c 69 50 ff ce 1e .)E.P...!.liP... 0020 be 89 cf 73 c0 12 f2 5e 06 47 c5 f2 e8 8e 49 bd ...s...^.G....I. 0030 f2 45 1b 00 19 c2 72 9a 6e 98 ff b1 c0 83 36 60 .E....r.n.....6` 0040 43 d4 29 06 24 46 21 69 7f 76 32 3a 15 53 dc ce C.).$F!i.v2:.S.. 0050 75 3a 16 d1 c5 7d be bb a2 e0 be 39 27 55 eb ae u:...}.....9'U.. 0060 34 5a 43 68 18 e9 1e 10 7d 64 06 43 18 b1 23 a0 4ZCh....}d.C..#. 0070 f5 2d 0d ef 14 05 e7 9c de cc 3f 1a 2e 7c fb 4f .-........?..|.O 0080 ab 40 29 c4 07 af 81 b5 f0 0b 6f dc 06 b6 04 23 .@).......o....# 0090 b9 33 bc 24 f8 3f b1 26 cd 02 a2 cf d5 69 94 88 .3.$.?.&.....i.. 00a0 fd 28 7b 12 3a 81 1f 8a 9a 36 99 a6 53 cd c0 03 .({.:....6..S... 00b0 12 1c df de fb 0f 51 fa 95 ec 10 d7 cc c7 ab 2f ......Q......../ 00c0 d8 98 dd be cc f6 77 b3 0a 96 32 7a 30 55 92 42 ......w...2z0U.B 00d0 ae 16 c3 32 37 f9 2e 53 e2 86 07 ca 9f f7 09 11 ...27..S........ 00e0 46 ed a8 b1 fd 63 4c 46 33 81 c8 5a 21 50 43 04 F....cLF3..Z!PC. 00f0 b2 04 c2 2b 8d 53 96 1a db 3f 10 bf d0 ce 36 8d ...+.S...?....6. 0100 02 ee c9 79 8b 4c 83 ad c2 ee 74 a0 60 d3 df f2 ...y.L....t.`... 0110 24 2c 53 fd 58 5d 31 d1 0d aa 21 0b 56 36 44 02 $,S.X]1...!.V6D. 0120 d7 b5 a3 25 9e 68 57 c2 17 11 d0 9d f8 1b 56 28 ...%.hW.......V( 0130 fe b2 24 49 56 f0 54 36 7e 49 de 75 d1 38 9c 64 ..$IV.T6~I.u.8.d 0140 94 6a de af 9b a4 38 eb 1c 89 d7 2d 2a 92 d3 c8 .j....8....-*... 0150 ca e7 e3 11 21 e8 21 b7 12 10 ab 23 33 fd 69 ab ....!.!....#3.i. 0160 4f 68 18 7c 54 b9 bf 4d ce ef 4c f4 48 09 d8 6d Oh.|T..M..L.H..m 0170 7e b9 5b f9 b6 00 79 7a 61 b0 a7 f7 97 69 af a4 ~.[...yza....i.. 0180 32 72 da 86 aa c9 5d c0 4d 65 cb dd 3f 60 10 28 2r....].Me..?`.( 0190 74 b1 f9 21 2d c6 66 74 57 d3 34 44 d0 a6 54 90 t..!-.ftW.4D..T. 01a0 82 c7 10 60 33 03 c8 b0 ab a3 82 d8 d1 f3 ad 1f ...`3........... 01b0 94 cd cc e5 73 a8 3b 7c db db 6d ef 38 4b 85 ff ....s.;|..m.8K.. 01c0 09 86 45 64 3d 43 85 05 1d 61 b9 95 c2 44 e7 d5 ..Ed=C...a...D.. 01d0 a9 6c 19 62 28 97 ac c9 b7 d4 b1 18 c3 1c f6 10 .l.b(........... 01e0 ca 28 58 dd 6d af 2f a2 ce 6e af 83 af 93 c3 fe .(X.m./..n...... 01f0 cf e9 6a 99 1a 78 c4 2b 5f 7a e6 00 fc c2 0f 0f ..j..x.+_z...... 0200 68 9c 2f 9d ad 29 ee 27 73 f2 6a 11 c0 30 4f ac h./..).'s.j..0O. 0210 32 ca e9 fd 6e 03 0d 20 0f 2a 6a 4a cd 43 df 66 2...n.. .*jJ.C.f 0220 19 2b fd 0d b4 98 1f 33 50 ae 96 4f b5 20 0a bf .+.....3P..O. .. 0230 d2 4f 7a 6e d1 e3 ab 41 f7 b7 5f 6f 08 2b 95 a6 .Ozn...A.._o.+.. 0240 fd c8 1d 31 aa b6 ec 35 e9 16 2c 3f 4d 17 e5 28 ...1...5..,?M..( 0250 90 ab 13 df 94 07 c8 f2 6f a7 19 53 dd 2e e1 2d ........o..S...- 0260 59 e8 96 27 4d 11 d3 35 60 ea 7a 65 b9 16 7d 94 Y..'M..5`.ze..}. 0270 da 1c 8d f3 36 b7 6f b3 f5 19 fc a8 a1 7e ae 20 ....6.o......~. 0280 f8 a5 59 d9 64 69 6b c0 e3 36 8c bc 70 88 9d e6 ..Y.dik..6..p... 0290 7f 17 5d 2d 4d 67 cf 72 4b 4f 35 21 fd c0 d4 7d ..]-Mg.rKO5!...} 02a0 c3 a6 46 9b e9 72 be 50 f3 9b 4e 62 c8 54 0d 3c ..F..r.P..Nb.T.< 02b0 f6 6c 33 70 ba 4f 6a 43 b9 21 9e 46 94 c7 ed ec .l3p.OjC.!.F.... 02c0 62 fb 31 37 9b da e0 1f 70 4b b6 72 0e e3 57 b4 b.17....pK.r..W. 02d0 b3 63 e1 89 4f 7c 37 93 2e 21 21 ca 0c 5e 45 3a .c..O|7..!!..^E: 02e0 ab 68 f3 1b d7 49 e8 8b d4 14 ca 2f dc 5b ba fb .h...I...../.[.. 02f0 0c 31 40 f9 f2 b5 74 5a bc 38 69 77 0e 29 2b 51 [email protected].)+Q 0300 af a1 46 82 f4 b6 d4 a9 05 95 e1 db 11 21 90 1c ..F..........!.. 0310 8a ce d5 cc 48 50 be de da b5 d0 11 b6 21 f6 7a ....HP.......!.z 0320 43 09 78 5a 19 bf fa 5b ce d7 98 d0 1f 16 01 70 C.xZ...[.......p 0330 cc f2 6c 43 fd f5 d5 2b ba 4b 0c ab ab 61 53 8e ..lC...+.K...aS. 0340 01 f5 f1 2e bf bd 9a 2f a0 ee d3 f3 55 92 54 2c ......./....U.T, 0350 9d e8 5e 58 43 ca a5 5b b7 26 bb 8a 86 89 54 85 ..^XC..[.&....T. 0360 8c 9e 7a df 50 1d a7 52 8e e1 38 c0 6f 24 e5 a0 ..z.P..R..8.o$.. 0370 38 d9 32 9f f8 8d 95 3e a4 b2 ca de 6a 6e 68 a8 8.2....>....jnh. 0380 ee db 5d df 65 bf 0c 74 72 43 04 ce 6a fb a0 b7 ..].e..trC..j... 0390 b4 bf 1b 2b d7 5b 0d e5 de 31 bc 4f f4 4a ba 42 ...+.[...1.O.J.B 03a0 97 b8 82 a4 3b df 37 fd 37 c1 bb aa 75 5e 54 5c ....;.7.7...u^T\ 03b0 5e 42 ca b6 fb 3c 75 06 24 38 7a e2 db f4 13 6b ^B...<u.$8z....k 03c0 93 42 da 23 a2 a1 c3 60 10 2b 75 6d 2e 4b 37 b5 .B.#...`.+um.K7. 03d0 57 3a f1 d6 15 f1 34 b4 e1 25 28 3a 4b 64 93 18 W:....4..%(:Kd.. 03e0 28 7f 72 e9 0b ad a4 fa 2a 23 a3 44 cc 2d dc d5 (.r.....*#.D.-.. 03f0 67 92 5f da a3 69 56 8b fd 71 3c 1c 45 71 28 55 g._..iV..q<.Eq(U 0400 bd 5d 24 6d 80 d9 f2 32 ad b0 ea 37 f6 28 9a b4 .]$m...2...7.(.. 0410 94 97 ee 43 c5 ad bc 77 57 74 39 8e 15 13 33 57 ...C...wWt9...3W 0420 9c ab e6 77 c6 ea 01 79 e5 bc 87 a4 05 84 28 91 ...w...y......(. 0430 70 80 5c df 79 ed 57 d1 ee 4b 09 72 e6 64 97 61 p.\.y.W..K.r.d.a 0440 19 96 a5 58 e2 51 18 d4 e9 9e 8c e2 ba 27 aa 16 ...X.Q.......'.. 0450 9a 3f 13 db 37 e0 df d9 17 dd 66 35 24 92 20 d3 .?..7.....f5$. . 0460 4c 91 ec 42 2a 92 cc 30 95 e5 e6 6b 31 f5 5d e1 L..B*..0...k1.]. 0470 15 40 67 f2 63 b9 5f c6 43 73 5a ed be 68 31 16 [email protected]._.CsZ..h1. 0480 96 d6 86 76 c8 84 ee 9d 6b 53 5c db 49 a5 f0 2f ...v....kS\.I../ 0490 9a 19 53 8c 4c 2c aa 6a 1f cc 24 10 52 9f 6a 5f ..S.L,.j..$.R.j_ 04a0 2c 90 45 06 88 30 97 82 1a f2 54 82 e9 25 04 de ,.E..0....T..%.. 04b0 29 2c 5f 41 d3 09 9f 89 71 d1 71 b8 9f 41 77 29 ),_A....q.q..Aw) 04c0 8e b2 41 2a 18 86 c9 05 3f 56 f7 92 ea 58 5a f0 ..A*....?V...XZ. 04d0 10 0e 9c 3f 0f bf 66 13 75 c5 df 63 97 a4 e0 24 ...?..f.u..c...$ 04e0 c0 20 f8 f9 11 bb eb 30 3c f3 2a cd 95 95 1e 28 . .....0<.*....( 04f0 91 a5 fa db 4c 08 05 c1 3a 82 b1 e1 65 e1 3e 36 ....L...:...e.>6 0500 92 e5 52 c6 13 bf ea 48 2c 8b 55 5a ef 65 23 74 ..R....H,.UZ.e#t 0510 3a 70 62 40 d9 08 82 34 da 07 f7 8a 93 bf f8 25 :[email protected].......% 0520 60 e8 2e 68 b8 fa 40 95 ed 0a 0a 07 ae b8 61 a7 `[email protected]. 0530 02 4b 17 c4 1d be 76 3d a6 45 4d 73 8a 82 37 21 .K....v=.EMs..7! 0540 c8 18 e9 de a0 9b db fb 46 7e 93 77 a6 8e ee a0 ........F~.w.... 0550 c0 ac 67 4a 61 ba 0c ff c4 32 a8 16 ed 9e f4 f0 ..gJa....2...... 0560 38 b3 66 68 8f db 20 57 4e 39 dd 8b bd 32 9e a3 8.fh.. WN9...2.. 0570 7d 89 34 51 02 10 f0 f1 86 7d 35 2b 66 f0 30 af }.4Q.....}5+f.0. 0580 e3 4f 59 8c 4d 2d 41 9d 85 59 d2 09 8f 6b 66 ac .OY.M-A..Y...kf. 0590 06 31 ba d5 01 2d 25 73 0e 7f 4a ae 2d 01 27 05 .1...-%s..J.-.'. 05a0 1e 13 37 57 92 20 92 e8 ..7W. .. No. Time Source Destination Protocol Length Info 2928 37.781001 192.168.10.1 192.168.10.203 TCP 1279 34433 > cds [PSH, ACK] Seq=96892 Ack=1703 Win=1002 Len=1213 TSval=544693 TSecr=727860 Frame 2928: 1279 bytes on wire (10232 bits), 1279 bytes captured (10232 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 96892, Ack: 1703, Len: 1213 Data (1213 bytes) 0000 8b df d2 a0 ec d2 33 d2 ef 2b 7e 7c 2f 8c 93 4a ......3..+~|/..J 0010 76 c9 fa 45 9b eb 1f e0 f8 cf f8 be 9e cb 9a 33 v..E...........3 0020 32 16 82 53 b6 83 c7 b1 54 ee c7 93 d2 6d d8 83 2..S....T....m.. 0030 ef 69 93 0c 20 6f 3c 9b 35 ef 1e 51 2f 31 11 84 .i.. o<.5..Q/1.. 0040 f3 df 2e cb c2 26 e5 da a0 ff 30 3b 0a 63 45 27 .....&....0;.cE' 0050 38 9f cd 20 c3 97 8d 70 98 3d c2 07 87 9f cc 95 8.. ...p.=...... 0060 48 f8 b9 3a f1 09 bc 1b 89 35 48 8f 08 32 d1 cb H..:.....5H..2.. 0070 ef 7d b3 db cd 22 52 42 11 72 c5 e4 b9 c4 71 78 .}..."RB.r....qx 0080 2e 9c 06 a8 43 57 cc 63 76 62 07 00 ed b0 e2 5c ....CW.cvb.....\ 0090 32 ee 01 a8 4b 64 b8 3e ba 43 47 e9 47 e8 3e 03 2...Kd.>.CG.G.>. 00a0 e1 7c f9 37 5e 48 a4 7b cd cf 42 a9 d4 06 55 75 .|.7^H.{..B...Uu 00b0 b9 32 d5 34 7a 6b ca 24 5e 31 1b 80 38 19 00 89 .2.4zk.$^1..8... 00c0 38 a3 ac e1 62 d6 86 7b d4 cb 62 6d f5 e9 e0 37 8...b..{..bm...7 00d0 25 e7 ed 7b b4 f8 a9 78 4c 30 f0 82 fb 3c 89 76 %..{...xL0...<.v 00e0 04 e8 fb 04 fb 82 e8 3a a2 22 6a e9 de fa 54 66 .......:."j...Tf 00f0 4c 50 ac 6a 4c 3f df 55 7b d6 7d f5 40 05 50 e9 LP.jL?.U{.}[email protected]. 0100 1f 82 c1 88 28 bc e1 d7 f4 ce c0 9a ea 05 11 5d ....(..........] 0110 14 c8 ef 94 77 cb 63 fd bc 94 fa 2f 97 41 78 62 ....w.c..../.Axb 0120 6f 2f 12 b7 92 7c c5 92 84 9c 94 4b 73 23 4a 8d o/...|.....Ks#J. 0130 cc 03 2a 63 c4 96 ed 65 39 51 e7 3f ae 43 96 73 ..*c...e9Q.?.C.s 0140 7a e0 ad 8a e2 72 52 50 4e d2 41 4a 8d 6e e8 68 z....rRPN.AJ.n.h 0150 0e b0 a5 63 20 da 99 41 7e fe 09 0c b1 d0 44 ba ...c ..A~.....D. 0160 97 f5 c3 ac af 73 39 aa a8 f4 2e 8c 19 b7 a1 43 .....s9........C 0170 4e 01 c8 c7 61 11 2a ee 51 d9 bb 49 db b4 77 7d N...a.*.Q..I..w} 0180 a5 c9 03 cb 10 65 a0 0e fb 30 b7 b9 7b 60 8e 17 .....e...0..{`.. 0190 90 78 b5 c0 6e eb 02 d8 b1 b1 10 81 19 9b 1c 7f .x..n........... 01a0 68 62 82 cb 90 08 7e 90 50 5c dc 5a fb 76 06 39 hb....~.P\.Z.v.9 01b0 56 4d d8 d8 f1 2a 68 a4 a0 e4 c8 fb 2b 02 e4 9d VM...*h.....+... 01c0 4c 27 46 0a 1e cd ad 51 45 62 c1 1b cd 1a 89 1d L'F....QEb...... 01d0 53 d8 66 50 83 4d 03 66 37 79 ad 85 e0 78 65 cc S.fP.M.f7y...xe. 01e0 d5 30 7e 8c 96 80 ae ed 75 ea fb 6f 28 ad 91 89 .0~.....u..o(... 01f0 6f 40 4b 16 c1 8f c4 16 88 00 49 e2 53 55 8d 3d o@xxxxxxxxxxxx.= 0200 83 d6 bd db f6 75 27 fb 38 d5 85 2b fc f7 37 7c .....u'.8..+..7| 0210 df bc e3 ea 8b fd 67 ab 7b ac 1b 55 99 c1 38 db ......g.{..U..8. 0220 a8 2d 07 00 9d 8b 80 b4 2c d2 27 3a 99 79 2b 83 .-......,.':.y+. 0230 9d 57 e9 3b 4f 98 4c 7e e5 57 45 55 42 d5 56 67 .W.;O.L~.WEUB.Vg 0240 6a 14 5e ed f2 87 a9 e4 12 d6 ec 82 fa b4 a9 6c j.^............l 0250 6a 57 15 6a ca 6f a6 be 98 71 eb 23 6e 91 fd 34 jW.j.o...q.#n..4 0260 0c 67 d8 1a d3 46 26 13 86 49 9c b3 d5 3d c6 03 .g...F&..I...=.. 0270 29 d0 8d 5c e9 62 61 e1 8d 11 b3 4d 49 fd a3 d1 )..\.ba....MI... 0280 b6 92 85 63 08 86 04 7b 18 b5 28 f3 20 6e d2 d4 ...c...{..(. n.. 0290 3c 1b 1a 97 49 43 06 03 9f 61 76 34 28 7e 07 f3 <...IC...av4(~.. 02a0 74 95 eb fc c8 a7 76 f6 b4 ff bd cd be 1e bd 2b t.....v........+ 02b0 ae 5a c4 d6 9d 33 49 c3 dd 04 88 a6 53 69 de d1 .Z...3I.....Si.. 02c0 22 fa 70 50 29 76 ac 6f 4c ad 9d 86 ac 4e bf 0f ".pP)v.oL....N.. 02d0 d0 4d e3 5b f1 d6 16 e1 06 25 21 b9 f4 17 29 a6 .M.[.....%!...). 02e0 eb 24 fe 85 9d eb eb 32 84 ce f8 79 56 c0 35 d7 .$.....2...yV.5. 02f0 1e 2b 03 d9 85 1d 39 9f a7 49 0b 69 3d d1 2f ef .+....9..I.i=./. 0300 31 8f 12 f9 02 62 dd af f2 b8 7c b4 91 5d 48 2a 1....b....|..]H* 0310 e9 72 c0 ee 1c 6d 2d 96 1d cf 68 6b d4 5c cd 49 .r...m-...hk.\.I 0320 00 5a 88 c1 ce 10 d5 3a 38 f3 d2 3e 7b c2 c5 02 .Z.....:8..>{... 0330 2a 43 fe 48 a6 5d f6 17 16 41 a8 10 a9 1a fd b6 *C.H.]...A...... 0340 fd 05 46 5c 03 1e 67 1f e0 00 74 e6 6b 53 53 d7 ..F\..g...t.kSS. 0350 92 d2 1f 4a 01 a0 1f e7 cd b0 0f f2 f3 1e 80 6d ...J...........m 0360 cd 70 8a 34 ac ea a2 e9 3c 2c d3 22 12 c1 0d 31 .p.4....<,."...1 0370 7d 27 7e b0 f3 9f fa 5e 8d 71 02 d2 53 2e 18 4a }'~....^.q..S..J 0380 9c d6 ab 57 50 69 02 7e 11 8a 1b eb 59 ad c7 5d ...WPi.~....Y..] 0390 dd cc a1 7d d9 cb 79 ac f0 56 fd 42 63 f9 97 1e ...}..y..V.Bc... 03a0 69 d5 df 67 82 55 71 dd 9c 3a 1f 59 10 9a 32 46 i..g.Uq..:.Y..2F 03b0 c6 25 47 9f 0f a5 b3 fe a7 39 bf 69 81 f1 a3 29 .%G......9.i...) 03c0 41 91 28 f3 98 4a eb 3a 81 52 fb 13 c3 09 05 66 A.(..J.:.R.....f 03d0 b8 a2 7c 05 89 40 fa 74 05 a2 86 7b 93 2e c0 bc ..|[email protected]...{.... 03e0 60 ae 8b 5a b5 24 c7 a6 2a df d2 ae 0b 81 4e 9c `..Z.$..*.....N. 03f0 ac db 67 29 51 7d c3 17 02 94 27 d7 77 c9 90 c1 ..g)Q}....'.w... 0400 34 c1 a7 19 e2 13 6f a3 93 79 5f 26 1a 46 67 b1 4.....o..y_&.Fg. 0410 5e 22 fd 51 25 53 c9 16 ac 67 bf 37 46 93 74 4f ^".Q%S...g.7F.tO 0420 1a e6 11 02 d9 f7 70 9c 30 8c b8 52 4a 4b 5c 39 ......p.0..RJK\9 0430 ca ca 71 3b d7 cb e2 4b 98 da 90 68 2f d5 2c 68 ..q;...K...h/.,h 0440 f9 fb 00 75 d4 d2 e8 5a 39 f0 6e c9 bb 6d 0b 71 ...u...Z9.n..m.q 0450 08 e7 3f 7c 37 e9 1a 18 0e 1e 3d d6 4a c4 3a a3 ..?|7.....=.J.:. 0460 eb 43 07 91 79 d0 75 ec 19 c5 1e 40 18 41 4e 55 [email protected] 0470 8f 36 df e3 7d c8 a9 c3 82 c2 c6 74 65 a3 f3 7f .6..}......te... 0480 54 75 b9 44 ca e4 59 c3 52 67 b4 c5 10 97 91 f7 Tu.D..Y.Rg...... 0490 81 20 81 30 c7 b0 3c ef 21 75 8d 90 cf 5f 80 56 . .0..<.!u..._.V 04a0 37 8b 40 83 f5 a2 7b 19 8c 6f 79 00 a7 f9 a9 da 7.@...{..oy..... 04b0 82 34 86 33 a8 65 14 ae 1f 67 ad 91 f8 .4.3.e...g... No. Time Source Destination Protocol Length Info 2929 37.781074 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=1703 Ack=95444 Win=65535 Len=0 TSval=727860 TSecr=544693 Frame 2929: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1703, Ack: 95444, Len: 0 No. Time Source Destination Protocol Length Info 2930 37.781137 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=1703 Ack=98105 Win=65535 Len=0 TSval=727860 TSecr=544693 Frame 2930: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1703, Ack: 98105, Len: 0 No. Time Source Destination Protocol Length Info 2931 37.781213 192.168.10.1 192.168.10.245 Syslog 270 LOCAL1.INFO: Oct 3 19:44:55 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2220 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 2931: 270 bytes on wire (2160 bits), 270 bytes captured (2160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:55 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2220 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 2932 37.781286 192.168.10.1 192.168.10.203 TCP 903 34433 > cds [PSH, ACK] Seq=98105 Ack=1703 Win=1002 Len=837 TSval=544693 TSecr=727860 Frame 2932: 903 bytes on wire (7224 bits), 903 bytes captured (7224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 98105, Ack: 1703, Len: 837 Data (837 bytes) 0000 17 03 01 03 40 bd 35 8b 57 13 25 c6 c6 c4 dd 77 [email protected].%....w 0010 50 a5 53 86 a7 32 78 48 9b e6 f3 d5 b4 0d 7b 7f P.S..2xH......{. 0020 58 ac fd a5 ff 0a 6d e1 56 67 b6 d5 3c 9a d6 25 X.....m.Vg..<..% 0030 02 bf 11 68 12 aa 14 14 2c f5 2c c7 41 1e f0 8f ...h....,.,.A... 0040 07 c1 93 a5 58 45 4b 38 ce 2e e2 d0 15 c4 9d 9b ....XEK8........ 0050 4f c6 06 5c 4e df bd fa 38 17 d1 47 ac ef eb f5 O..\N...8..G.... 0060 4a 2b 8f 5b cc cb 9b cd 80 39 00 6c 5a 6d 06 79 J+.[.....9.lZm.y 0070 57 e4 c4 9d d9 8a d3 46 11 1e e1 fa b6 eb 81 22 W......F......." 0080 92 57 53 c6 71 8b 73 07 74 32 c1 8e ba 80 7b bb .WS.q.s.t2....{. 0090 fb da 4b dc d8 82 21 dc 5a 35 96 45 b0 91 5f 44 ..K...!.Z5.E.._D 00a0 f5 73 6d ef 85 34 3d 28 5e ae 0f e9 2a b4 e0 0a .sm..4=(^...*... 00b0 ab 95 81 48 8b 73 70 52 d9 cd 95 13 7a 4b 3b 1c ...H.spR....zK;. 00c0 73 7c cf 62 c6 63 6c 13 b6 00 36 b6 55 13 74 cf s|.b.cl...6.U.t. 00d0 4d 9a a9 7d ac b1 44 69 59 91 01 f0 a6 11 31 d2 M..}..DiY.....1. 00e0 74 e0 b2 36 5c 48 bf 14 7d 0d ce 45 b9 80 85 fb t..6\H..}..E.... 00f0 24 47 0b 16 26 ce 7c 4e c1 98 5f da 42 4f 73 2e $G..&.|N.._.BOs. 0100 4f ce 73 37 66 d9 f2 7f 74 95 fc 63 5a b2 72 0c O.s7f...t..cZ.r. 0110 37 9b b1 c3 db 2c 80 bb 7b 67 4c 6c f3 10 c2 7a 7....,..{gLl...z 0120 c3 77 16 d8 1b 9f 78 20 bd 64 a0 e5 0d b9 b6 69 .w....x .d.....i 0130 7a 5a d5 81 20 54 74 db 82 73 f1 a8 90 30 06 f5 zZ.. Tt..s...0.. 0140 d2 fc ba ba 72 6f a5 59 c5 2c e4 40 88 78 75 2e ....ro.Y.,[email protected]. 0150 b0 08 6d 3d 90 26 64 1a 74 b4 cb 2c 39 1d fa 67 ..m=.&d.t..,9..g 0160 f5 9e 95 9e 4c ac 47 03 d6 d9 46 87 97 a7 94 d3 ....L.G...F..... 0170 d4 14 ef c8 e5 c3 dc f0 d2 60 9c ec 40 16 34 6d .........`[email protected] 0180 3c 0b 73 ef 6c 32 1c 60 26 37 13 ce a5 fb 90 7c <.s.l2.`&7.....| 0190 f5 dc 5b f1 e9 6d 1c ec 42 ae 0f fd 2e 20 58 79 ..[..m..B.... Xy 01a0 3b a7 62 e1 54 c9 fe 45 95 b8 76 6f 38 9f 85 4d ;.b.T..E..vo8..M 01b0 f2 66 3c 7a 8d 04 70 8f 89 69 bd 17 ca 41 bf 3e .f<z..p..i...A.> 01c0 f0 6c 6b ac f3 4c 2d 5c 50 fd 78 bb 20 fe e7 6e .lk..L-\P.x. ..n 01d0 aa e5 ba 0b 60 83 94 18 7a 43 ed 77 87 06 08 18 ....`...zC.w.... 01e0 36 3f 15 75 b6 18 a6 6f a7 80 96 03 ae c4 8f e2 6?.u...o........ 01f0 68 33 b0 90 ca a3 6f 06 2f 18 d5 00 32 dd f5 ca h3....o./...2... 0200 cc 97 d2 c0 38 fe b4 d2 cc 49 14 1c 86 85 64 0f ....8....I....d. 0210 02 f6 5d 6d 46 ff 3a 06 12 30 cf 82 ec d4 2e 51 ..]mF.:..0.....Q 0220 da 00 c1 bb f4 23 6b 58 94 ef 88 b0 ef 55 0d cc .....#kX.....U.. 0230 da 00 3b 51 e9 b4 16 ed 4e b8 3d 52 43 0b 66 28 ..;Q....N.=RC.f( 0240 96 45 4d aa 74 01 9b 3a c9 45 80 3d 7e 5c 2e cd .EM.t..:.E.=~\.. 0250 e8 e3 2e 6a 7a 8b 57 42 ad 0b c2 85 e0 f8 1d c8 ...jz.WB........ 0260 0c 79 b6 65 0e 7f cc 9f 30 c7 6d af 1b 7e 6a 27 .y.e....0.m..~j' 0270 5c 4f f5 a4 5f 12 7f 81 f9 a4 03 17 5f d7 b9 9f \O.._......._... 0280 cf 65 cb e2 95 f4 74 45 29 6c bf e9 d5 94 11 ba .e....tE)l...... 0290 a1 15 4c 12 24 99 a0 b7 87 10 92 e7 c2 6e bd 1c ..L.$........n.. 02a0 16 bd 52 11 fd 95 49 8e 75 2c e3 31 c2 31 7e 50 ..R...I.u,.1.1~P 02b0 03 19 4f 3e b5 16 11 d6 ac 62 4a 21 01 e6 a2 01 ..O>.....bJ!.... 02c0 c4 ad d1 fe 96 59 f2 d7 aa fc 8a e1 22 84 1e 30 .....Y......"..0 02d0 33 48 85 99 df 82 db 15 e6 ae de f2 ba 4c 1a 42 3H...........L.B 02e0 df 90 37 e2 21 0d 2f 6a 22 e6 41 41 a0 4c 7d 44 ..7.!./j".AA.L}D 02f0 86 97 86 0f 79 85 6a 67 b1 1a 2c cf 67 24 46 d4 ....y.jg..,.g$F. 0300 37 53 d0 1e c2 29 34 3f 7a a7 f3 34 b8 10 f2 39 7S...)4?z..4...9 0310 76 79 b5 03 d8 22 0e 11 f8 34 6c af b9 d3 57 d5 vy..."...4l...W. 0320 4d 7d f1 6f 40 f6 80 3a 4d dd 34 af 96 ea a3 06 M}.o@..:M.4..... 0330 62 22 8f 2a 87 1d 64 d4 0a 0f 0d 27 59 7b a5 c5 b".*..d....'Y{.. 0340 d5 72 78 4f 7d .rxO} No. Time Source Destination Protocol Length Info 2933 37.781361 192.168.10.1 192.168.10.245 Syslog 286 LOCAL1.INFO: Oct 3 19:44:55 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2220 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 2933: 286 bytes on wire (2288 bits), 286 bytes captured (2288 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:55 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2220 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHAN No. Time Source Destination Protocol Length Info 2934 37.781429 192.168.10.1 192.168.10.245 Syslog 277 LOCAL1.INFO: Oct 3 19:44:55 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2220 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 2934: 277 bytes on wire (2216 bits), 277 bytes captured (2216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:55 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2220 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINAR No. Time Source Destination Protocol Length Info 2935 37.781513 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=98942 Ack=1703 Win=1002 Len=1448 TSval=544694 TSecr=727860 Frame 2935: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 98942, Ack: 1703, Len: 1448 Data (1448 bytes) 0000 17 03 01 03 50 6b af c6 95 4a 26 81 92 85 2c 3e ....Pk...J&...,> 0010 20 a9 c7 86 e6 7b e7 49 00 d7 18 fd 08 65 79 84 ....{.I.....ey. 0020 82 56 0a 24 7c 92 61 f6 99 66 35 1d f1 ec a5 5f .V.$|.a..f5...._ 0030 98 b3 1a 21 5f 06 7f fc 34 18 1f 17 d6 15 e0 aa ...!_...4....... 0040 3a 8e 18 b0 84 1f ae 9c 48 0f 4b e1 13 c6 c5 9b :.......H.K..... 0050 0a 00 de 7a 93 73 f1 75 a8 08 05 1f 75 b4 52 99 ...z.s.u....u.R. 0060 4b 16 42 6f a8 8b 23 df 76 8b 80 f6 4e ec 41 74 K.Bo..#.v...N.At 0070 c7 82 1b b2 c3 8f 7e 27 7d 9e 31 87 24 e6 2f eb ......~'}.1.$./. 0080 bb 97 75 a6 97 0b 98 14 04 5d 37 0c 19 62 7b d2 ..u......]7..b{. 0090 eb 30 9e e3 4c 14 be cd 30 61 89 bd eb 81 b8 d0 .0..L...0a...... 00a0 c9 78 ec 71 42 62 21 6f fa d4 3f ae b7 d4 42 d4 .x.qBb!o..?...B. 00b0 8d cb 29 dc 1f f3 99 de 2a 56 d6 38 c7 02 31 14 ..).....*V.8..1. 00c0 aa 4b f9 04 be 6a e0 48 5d 8a 26 9b 7e 92 a2 be .K...j.H].&.~... 00d0 9a 64 f1 6d 0f 12 6c e7 6e b7 22 14 2f d0 61 e5 .d.m..l.n."./.a. 00e0 41 be b6 21 d9 2b 0b e0 cf f3 44 f2 47 9a d4 5c A..!.+....D.G..\ 00f0 a1 c1 c1 ea 89 c9 92 8d 8c 6e c3 44 5b a5 83 84 .........n.D[... 0100 d6 4f f5 c1 f6 29 ad dd cf dd e3 30 1c e6 25 1f .O...).....0..%. 0110 c2 70 f5 64 fe 68 33 3c 0f 29 35 17 75 59 54 57 .p.d.h3<.)5.uYTW 0120 f8 5a 3e 52 dd a7 dd 3c 82 89 fc b0 e8 7f 7f 18 .Z>R...<........ 0130 fd 3f 02 8c e1 58 2e f5 5d b8 0f 4e 4d 88 8d 23 .?...X..]..NM..# 0140 51 bd 82 7a 45 96 83 d9 0c a8 be 0c b5 3b 3e 3d Q..zE........;>= 0150 f4 b3 d8 77 e3 13 1b 1d b3 a7 de 42 b1 4a 6e 12 ...w.......B.Jn. 0160 70 ff 63 c8 51 29 bd 30 e9 5c 6b a1 5a 79 c0 f3 p.c.Q).0.\k.Zy.. 0170 31 5a 8b db 4e d5 24 e0 94 d4 3a 09 82 a7 e7 a3 1Z..N.$...:..... 0180 a8 6c df f9 9e 3b c6 d3 33 31 80 47 9b 2a 8f cc .l...;..31.G.*.. 0190 6c 9d 3a 05 13 b7 a4 3d 88 49 1a 24 44 d6 d5 c4 l.:....=.I.$D... 01a0 cf d6 73 44 70 f3 20 d8 08 5e cc 0b a1 5d 95 eb ..sDp. ..^...].. 01b0 a7 e8 5e f2 86 b5 bf 6a d9 ab 06 30 f8 1f 13 09 ..^....j...0.... 01c0 da 95 e2 b6 bf bc 2f 0b 40 76 4c 58 1d 14 6f a8 ....../[email protected]. 01d0 a2 00 59 21 42 09 f4 d7 e6 cf 0f 8b 19 83 05 5d ..Y!B..........] 01e0 d5 c7 e4 53 9b 60 35 0a 9e 40 9f 5d 3f 5b 45 2b ...S.`5..@.]?[E+ 01f0 79 2d c9 7b 55 8a a1 f8 f6 ae 75 f7 3b d5 89 a3 y-.{U.....u.;... 0200 46 18 fa 2e 01 09 b6 6c b6 7a 6a 4a 51 c2 38 1a F......l.zjJQ.8. 0210 48 12 45 a6 bf 10 30 69 1d 40 ea 58 00 2b d6 1c [email protected].+.. 0220 c1 20 25 7e ed 9e 6e 4e 98 89 7c 51 1f 5d 16 8f . %~..nN..|Q.].. 0230 fb a2 db 8a 06 7b 51 fd f7 06 43 7d f4 43 da 28 .....{Q...C}.C.( 0240 51 6a ba 92 b6 10 2d ab 14 ea bb 0d 40 5b 2d 77 Qj....-.....@[-w 0250 95 fe 19 ea 9e 0e 26 29 3c 54 48 42 b8 7b a4 3e ......&)<THB.{.> 0260 05 08 fe 42 54 95 c9 f3 93 bb 5b 73 4a 23 10 14 ...BT.....[sJ#.. 0270 92 ec 8c 06 ff 3c d2 b7 9f b4 9b 1c 4d 35 38 ac .....<......M58. 0280 c6 5c b7 47 03 3d 3d f1 d1 0b 3f 86 f1 15 2c 32 .\.G.==...?...,2 0290 b7 37 44 7e 89 29 29 93 6d 44 89 2b 4a 0e b4 4d .7D~.)).mD.+J..M 02a0 15 03 3c 9c f4 c4 d3 3c a6 89 75 47 92 0c cf e2 ..<....<..uG.... 02b0 d8 54 a6 da b3 bc 58 80 49 d6 72 e4 cd 7e 26 e8 .T....X.I.r..~&. 02c0 57 fb 3e f1 68 20 e3 cb 69 44 7e 8d 1c 59 66 6e W.>.h ..iD~..Yfn 02d0 45 be bc 3c 5e c5 60 44 a8 2b 8b 0a 0c 83 f4 d9 E..<^.`D.+...... 02e0 c1 75 5b 84 b8 96 15 57 de dd bc 10 50 58 06 92 .u[....W....PX.. 02f0 ed 6e 4a ce e0 f4 32 e8 0b 1c 1a f7 1d 19 58 1f .nJ...2.......X. 0300 4a e3 e1 7f fa 23 de c5 89 52 4a 37 4d e7 a2 5e J....#...RJ7M..^ 0310 86 c0 d5 dc ad ce c3 f0 0b 1b 77 7f 44 69 f7 a7 ..........w.Di.. 0320 41 56 bf 9d eb c4 fb 71 0d 76 fc d9 b5 83 6b 54 AV.....q.v....kT 0330 67 67 a7 a3 03 7b 92 c0 3a ff b7 72 a4 c6 da 71 gg...{..:..r...q 0340 12 b5 76 f2 9b cd 73 c3 b7 0f 83 f3 20 f0 10 64 ..v...s..... ..d 0350 80 d0 e7 95 ae 17 03 01 03 40 e0 81 d7 d7 b8 c4 .........@...... 0360 71 3d 46 f1 f8 33 ff 23 13 05 aa fd 55 44 1b 9e q=F..3.#....UD.. 0370 77 76 99 3c c4 09 bf b1 42 42 25 3d 1b d1 49 ab wv.<....BB%=..I. 0380 13 0d c2 a9 57 c3 df 26 d6 24 c0 30 6b 42 5e 13 ....W..&.$.0kB^. 0390 24 75 6b 1d 5f cf 51 c1 1f b5 45 de 22 3f c0 c2 $uk._.Q...E."?.. 03a0 bd b9 f5 b7 c7 a7 7b ae 76 98 e7 12 33 f4 71 5f ......{.v...3.q_ 03b0 3f d2 15 fb a7 74 1e 1c 71 4e 4a 89 d7 b3 fa f3 ?....t..qNJ..... 03c0 00 e5 2e b6 ea 6b 07 50 3d fc 14 f5 8e 82 54 76 .....k.P=.....Tv 03d0 f9 22 c7 0e d1 a5 ca 5c 2f a1 99 45 98 f4 b8 2c .".....\/..E..., 03e0 84 4d d0 71 9a 2e 80 7a 1d c2 24 9b c6 4a 64 f0 .M.q...z..$..Jd. 03f0 8b 74 eb f8 f0 92 b2 52 80 36 a3 25 f2 c8 e6 71 .t.....R.6.%...q 0400 84 33 a3 88 77 ce 7b 8c 26 68 2e 7e 07 c4 51 77 .3..w.{.&h.~..Qw 0410 8b 54 9f e0 e5 f9 68 ca a1 fa c5 9f 45 b3 4a dd .T....h.....E.J. 0420 ac a3 31 7d 0e 1a d8 13 6b e9 05 80 c2 1c 41 aa ..1}....k.....A. 0430 70 b1 a6 bb 8d 5c 86 74 cb ca c3 03 93 f7 21 b8 p....\.t......!. 0440 57 64 e5 10 cd 6e 38 a6 f8 70 de 26 04 df bf da Wd...n8..p.&.... 0450 73 f9 cc 75 26 c0 08 cf 58 79 4d 63 bc 24 41 35 s..u&...XyMc.$A5 0460 f2 bd 09 23 07 b1 f0 c6 e4 6e 4a ef 5c 2a 9b 04 ...#.....nJ.\*.. 0470 79 90 be cc f7 e3 f3 d1 04 9a 82 32 d3 d5 ba a3 y..........2.... 0480 1c 19 bf 88 79 d5 1b f7 b3 fa 30 85 37 9c 41 80 ....y.....0.7.A. 0490 eb 29 68 6c 75 3e 9f f2 82 31 63 33 3a 8d a6 83 .)hlu>...1c3:... 04a0 e1 3a e3 bc 38 90 32 fe 6f 44 51 cb 83 44 cd 30 .:..8.2.oDQ..D.0 04b0 d6 ed a0 16 44 83 f2 16 3c ca 4f c1 5b 54 47 1c ....D...<.O.[TG. 04c0 4d e1 a4 ad b6 04 d1 0f bd 95 df 09 d5 d0 b1 98 M............... 04d0 d5 ec 34 a9 7d 33 98 c3 65 94 81 48 39 0c cb ed ..4.}3..e..H9... 04e0 36 04 9b b3 2e 55 5d 95 fe 9d ec 15 f9 e5 5d b7 6....U].......]. 04f0 2c df 55 36 7a 2b 83 81 9b 64 06 86 56 f7 c4 78 ,.U6z+...d..V..x 0500 14 e3 0d 48 48 60 d7 55 9d e6 06 f6 fe 65 97 01 ...HH`.U.....e.. 0510 53 21 48 b1 5a 87 85 1a 1a 00 c5 15 0b 75 72 c7 S!H.Z........ur. 0520 59 11 af d1 b4 06 24 79 56 bc 47 8a 99 1e 92 d4 Y.....$yV.G..... 0530 8c b6 09 75 fc 38 dd b6 4a 41 ff d6 df de 27 63 ...u.8..JA....'c 0540 df 43 96 11 aa c8 e4 75 f5 88 e2 52 7c 86 c4 3c .C.....u...R|..< 0550 86 c6 a0 cc 30 87 cd 89 4d 7e 1a d4 2a c6 e0 31 ....0...M~..*..1 0560 ee 96 8e 47 51 08 ec a9 f0 ec 61 4f 5c 76 42 e5 ...GQ.....aO\vB. 0570 34 44 72 46 b2 f6 7b 77 bd 75 3c 7d b1 2d 65 57 4DrF..{w.u<}.-eW 0580 fc de 67 dd be 8e 95 42 83 c4 75 ca 56 56 46 39 ..g....B..u.VVF9 0590 5e 73 4f df 2c ff 58 45 f3 9a 8e a7 ef 92 be 49 ^sO.,.XE.......I 05a0 db b9 ad be a0 ef 4a 42 ......JB No. Time Source Destination Protocol Length Info 2936 37.781596 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=1703 Ack=100390 Win=65535 Len=0 TSval=727860 TSecr=544693 Frame 2936: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1703, Ack: 100390, Len: 0 No. Time Source Destination Protocol Length Info 2937 37.781651 192.168.10.1 192.168.10.203 TCP 308 34433 > cds [PSH, ACK] Seq=100390 Ack=1703 Win=1002 Len=242 TSval=544694 TSecr=727860 Frame 2937: 308 bytes on wire (2464 bits), 308 bytes captured (2464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 100390, Ack: 1703, Len: 242 Data (242 bytes) 0000 ba 3c 01 8e 87 59 d5 25 11 b6 42 5c 52 a6 67 25 .<...Y.%..B\R.g% 0010 79 36 b8 dd 3d d6 1e cf a9 ab 33 ed b8 e4 01 4b y6..=.....3....K 0020 9f c8 b2 8d cf b7 02 f4 6e 7b 80 e3 dc b1 d0 76 ........n{.....v 0030 51 08 13 9e 33 e1 e4 5a dd 55 5d d1 76 6c a3 06 Q...3..Z.U].vl.. 0040 c2 81 a5 da c7 b1 66 fa e0 9a 3f 85 c7 54 73 8e ......f...?..Ts. 0050 1e 5a 50 7a 2b b9 0c 1d 14 b4 7f 13 d5 b5 64 76 .ZPz+.........dv 0060 02 5e 9a de d6 8a 88 71 37 ea 71 05 25 c9 72 ea .^.....q7.q.%.r. 0070 20 2c d6 51 72 0a de 37 85 ea f2 23 bc 1e e2 be ,.Qr..7...#.... 0080 46 4e 32 db aa bd 43 5a 0b 52 d0 48 76 60 10 03 FN2...CZ.R.Hv`.. 0090 4f 4e 12 77 36 db 8b 3b af 35 c7 69 5c 29 63 58 ON.w6..;.5.i\)cX 00a0 3f a6 0d da d4 94 6e d6 20 83 c6 e8 19 49 62 70 ?.....n. ....Ibp 00b0 bf 3c a9 2d 28 e7 4e a9 97 5c 08 30 0a 92 e9 61 .<.-(.N..\.0...a 00c0 37 5f 47 18 6d 5a 5e d9 c8 23 d3 c5 f5 0b c2 8c 7_G.mZ^..#...... 00d0 97 a6 0f d7 66 00 2d da 93 f7 d5 15 f1 40 14 c4 ....f.-......@.. 00e0 60 9c f2 f9 b9 da 04 f1 f1 94 2a a9 03 23 de 01 `.........*..#.. 00f0 d8 10 .. No. Time Source Destination Protocol Length Info 2938 37.781720 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:44:55 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2220 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 2938: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:55 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2220 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" No. Time Source Destination Protocol Length Info 2939 37.799181 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2226067712, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2939: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2940 37.799204 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2226067712, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2940: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2941 37.799217 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2226067712, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2941: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2942 37.799230 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2226067712, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2942: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2943 37.819976 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4095148288, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2943: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2944 37.819997 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4095148288, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2944: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2945 37.820009 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4095148288, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2945: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2946 37.820021 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4095148288, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2946: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2947 37.904554 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=1703 Ack=100632 Win=65293 Len=74 TSval=727861 TSecr=544694 Frame 2947: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1703, Ack: 100632, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 41 b4 89 9f 5e eb 2d 48 f0 5e dc .... A...^.-H.^. 0010 87 bf 69 36 b7 12 c7 39 71 be 58 87 86 5d e8 b8 ..i6...9q.X..].. 0020 73 4b 4d 5f f2 17 03 01 00 20 85 26 12 05 f6 31 sKM_..... .&...1 0030 1c df 73 22 d9 78 3f 9f 3c ff bc ab 51 75 cf f4 ..s".x?.<...Qu.. 0040 57 16 28 ca 9a 21 9d 27 ed fa W.(..!.'.. No. Time Source Destination Protocol Length Info 2948 37.904658 192.168.10.1 192.168.10.203 TCP 903 34433 > cds [PSH, ACK] Seq=100632 Ack=1777 Win=1002 Len=837 TSval=544724 TSecr=727861 Frame 2948: 903 bytes on wire (7224 bits), 903 bytes captured (7224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 100632, Ack: 1777, Len: 837 Data (837 bytes) 0000 17 03 01 03 40 86 f1 72 81 e3 1a d7 76 55 1f 0f [email protected].. 0010 26 8d 99 be eb 65 c9 32 24 5e 2b a7 46 52 d0 e0 &....e.2$^+.FR.. 0020 59 51 3c 2b ff 01 0e b3 f3 6a 7a 7b db 0f f4 39 YQ<+.....jz{...9 0030 c8 2e 41 04 d5 c4 1f d9 a3 1e ff 6e 5e cb 4c 72 ..A........n^.Lr 0040 91 1e af f8 ed cd 29 8e b1 80 33 8b 9a 03 3e 69 ......)...3...>i 0050 c1 80 0b a0 6a 97 93 07 41 4e 5c b5 5e bf c4 56 ....j...AN\.^..V 0060 06 a0 86 53 dd 9f 17 0c 01 f5 96 61 e9 55 39 b3 ...S.......a.U9. 0070 a2 33 97 32 dc d9 4e 9f 79 b9 e9 55 4c aa 3b 9a .3.2..N.y..UL.;. 0080 8a 39 71 0e ad 45 00 9d 50 7e bf 6e be d1 3d 01 .9q..E..P~.n..=. 0090 af 34 11 e4 70 8b da 01 56 84 55 8e e8 0a 5d 42 .4..p...V.U...]B 00a0 b3 3b 5c 49 a9 16 c9 76 a2 4c 1d 98 5c d1 6a 6a .;\I...v.L..\.jj 00b0 e5 8c ed 54 9a a9 3a 8b a6 8c ad bd 1c b7 76 b7 ...T..:.......v. 00c0 04 65 fa df 4b 6b 85 6b 40 dc 18 08 fd dd 1d 35 [email protected] 00d0 d6 0a 28 37 d3 e4 46 11 d7 f9 c5 a5 a0 2f 91 ef ..(7..F....../.. 00e0 52 aa 1c c7 59 e1 7d 62 5c 06 2c 81 d4 1c 61 a5 R...Y.}b\.,...a. 00f0 fc 87 e9 fb 4e aa bd 95 6f d7 69 20 20 26 6b c5 ....N...o.i &k. 0100 1d 51 91 d1 ba a5 2d 0d ac 57 80 be 2e f4 13 71 .Q....-..W.....q 0110 a3 a6 f7 8c 7f 94 37 b1 d6 5a 42 a2 dd d8 47 a5 ......7..ZB...G. 0120 df b4 1a 1f 15 8d d5 f3 cd 08 80 88 b0 2d fd 67 .............-.g 0130 7d 74 d7 af 25 8e 00 4f 41 e3 8c 79 76 9b 62 7f }t..%..OA..yv.b. 0140 23 d8 6e 9a ca e8 bd 7d d9 9d aa 15 5d 69 fa 81 #.n....}....]i.. 0150 18 77 ef 8d 48 9c 71 06 b5 ed 55 74 8c 56 51 44 .w..H.q...Ut.VQD 0160 20 88 14 97 06 79 16 0a e5 d4 c2 db 48 b4 8b 88 ....y......H... 0170 74 3b f5 85 95 4a b5 e4 d1 07 c4 f2 1d d1 7f 1c t;...J.......... 0180 30 36 09 b9 fd 51 e1 28 18 66 9f e8 96 99 cb 59 06...Q.(.f.....Y 0190 b8 bb a7 9a 34 e3 fd 50 af b7 08 0c 2f 4f b1 94 ....4..P..../O.. 01a0 29 03 40 02 de fc 80 49 f5 3d 0a b1 af a4 23 36 )[email protected].=....#6 01b0 47 61 92 be 3d 2e 74 34 70 ae 4d 53 89 77 9c a2 Ga..=.t4p.MS.w.. 01c0 a4 e5 41 49 cb 5c 93 ae 42 45 eb 3c 34 c6 e5 15 ..AI.\..BE.<4... 01d0 7b 96 ed 37 b2 46 7f d5 70 e3 13 90 eb a4 b2 f5 {..7.F..p....... 01e0 57 b7 dc 29 0b 7f 5f ff 28 14 f3 11 ab 03 9c d1 W..).._.(....... 01f0 7a 94 47 3d c4 a1 de 9b 19 4c f1 99 15 69 8b 98 z.G=.....L...i.. 0200 57 77 70 e3 11 8e 94 07 ea d7 9d 7c 41 b4 ff ac Wwp........|A... 0210 0d f5 88 e9 03 7f 9c cf cb b4 7b 31 66 e1 54 8a ..........{1f.T. 0220 fa f6 62 d7 4b 36 35 c7 45 e3 53 ee 93 2a 42 c9 ..b.K65.E.S..*B. 0230 90 b8 c4 c7 a7 f5 bb 64 c4 d7 34 37 6e db 0c de .......d..47n... 0240 af 42 fd 58 16 b0 40 8f 69 a4 d7 5a 14 52 52 0e .B.X..@xxxxxxxx. 0250 3b ff cb 76 a2 20 68 ab 38 72 b4 fa 69 8e 8e 51 ;..v. h.8r..i..Q 0260 74 74 6d c8 af 18 5e 43 67 c6 f7 21 8f 2d aa 91 ttm...^Cg..!.-.. 0270 05 d3 5e 7f 39 c6 35 f6 7b c6 16 11 59 32 2b e2 ..^.9.5.{...Y2+. 0280 71 c0 46 28 98 70 f5 9e cd e9 fb f4 ec 7f 89 86 q.F(.p.......... 0290 8a e6 2c eb ff 08 ab 9c df c3 ed 53 49 42 2c de ..,........SIB,. 02a0 72 41 91 7b b6 87 0c d4 8b fe 7e 72 0f 83 c4 0b rA.{......~r.... 02b0 59 13 2d 3d f2 50 92 a8 3e 78 ca 2e ce a8 21 c3 Y.-=.P..>x....!. 02c0 05 76 29 8f 9f 11 6e 48 c2 55 d7 75 18 63 4d 1a .v)...nH.U.u.cM. 02d0 0c b5 fa f5 74 eb 42 63 f3 70 0c 6a 5b 5a c0 6e ....t.Bc.p.j[Z.n 02e0 2e 86 d4 2e 09 d0 8c 15 7a 2c 4c 58 5f 01 e6 60 ........z,LX_..` 02f0 8d f7 81 ee 5b 1e 0a e5 17 d1 70 9b 61 1c 53 3f ....[.....p.a.S? 0300 73 07 2f 1e 8a 09 2f 81 65 68 8f 4f fe 6d 84 92 s./.../.eh.O.m.. 0310 bf f5 a7 f4 fd 67 cb df d1 04 61 dc 71 05 33 95 .....g....a.q.3. 0320 7b f1 ca 2e eb ed 87 23 0d eb 7b fb fb c4 3b 5e {......#..{...;^ 0330 c0 97 db 80 c5 b9 a4 b7 7c 43 fa b1 2f 99 9f 30 ........|C../..0 0340 01 78 2f 29 3a .x/): No. Time Source Destination Protocol Length Info 2949 37.907363 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=1777 Ack=101469 Win=64456 Len=74 TSval=727861 TSecr=544724 Frame 2949: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1777, Ack: 101469, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 88 63 0f 5d 0b 7c 5a 95 9a 50 ce .... .c.].|Z..P. 0010 ab 9e 62 b7 d8 58 b8 47 9d c2 88 e2 ec 42 ed ca ..b..X.G.....B.. 0020 9e 0f 61 69 10 17 03 01 00 20 dc 28 c7 40 c4 97 ..ai..... .(.@.. 0030 8c 3e 58 75 b6 71 6d 48 f2 54 85 d5 96 e9 9c 16 .>Xu.qmH.T...... 0040 8c 8d 14 3a 46 37 98 a8 d9 3f ...:F7...? No. Time Source Destination Protocol Length Info 2950 37.944616 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=101469 Ack=1851 Win=1002 Len=0 TSval=544735 TSecr=727861 Frame 2950: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 101469, Ack: 1851, Len: 0 No. Time Source Destination Protocol Length Info 2951 37.944687 192.168.10.203 192.168.10.1 TCP 288 cds > 34433 [PSH, ACK] Seq=1851 Ack=101469 Win=64456 Len=222 TSval=727862 TSecr=544735 Frame 2951: 288 bytes on wire (2304 bits), 288 bytes captured (2304 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1851, Ack: 101469, Len: 222 Data (222 bytes) 0000 17 03 01 00 20 dc 9e 94 ec 2e f0 bb 3b 98 bb bf .... .......;... 0010 f5 e9 7d e2 99 fd 91 57 0d d9 86 a5 15 53 80 95 ..}....W.....S.. 0020 62 3e 6c c0 8e 17 03 01 00 20 99 53 90 e9 13 c1 b>l...... .S.... 0030 55 60 f1 1e 08 ad ff 9a c0 18 60 cd fa b0 65 d5 U`........`...e. 0040 88 01 f1 90 dd 9a 4d 90 25 97 17 03 01 00 20 52 ......M.%..... R 0050 b9 2e 3f 82 f1 d2 78 9f 07 7c b4 29 b7 66 b5 08 ..?...x..|.).f.. 0060 ef 5e 36 17 07 db bb ec 8f c5 d3 66 9e ac da 17 .^6........f.... 0070 03 01 00 20 be 0b da 14 d1 c2 4d 84 f6 13 d5 04 ... ......M..... 0080 43 ba b7 41 fd 9f 5d eb 5a d8 dc f1 bf be 8f 98 C..A..].Z....... 0090 65 06 4a 85 17 03 01 00 20 6f 9c 71 3b 13 1a 03 e.J..... o.q;... 00a0 4a b2 83 fc 2f 08 f2 d3 a1 9d ff 7d 27 a3 20 9b J.../......}'. . 00b0 5a c6 dd 89 b6 20 46 72 49 17 03 01 00 20 f7 bd Z.... FrI.... .. 00c0 82 c8 50 37 a7 8a 10 77 95 af 5b 5d c7 2a 27 a5 ..P7...w..[].*'. 00d0 58 9b fa 38 9c 15 e4 9f 13 4f c7 b4 66 98 X..8.....O..f. No. Time Source Destination Protocol Length Info 2952 37.944740 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=101469 Ack=2073 Win=1002 Len=0 TSval=544735 TSecr=727862 Frame 2952: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 101469, Ack: 2073, Len: 0 No. Time Source Destination Protocol Length Info 2953 38.046332 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 2953: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2954 38.046364 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 2954: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 2955 38.057403 190.42.139.241 192.168.10.207 SMTP 72 C: EHLO ewossrv.com Frame 2955: 72 bytes on wire (576 bits), 72 bytes captured (576 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23629 (23629), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 18 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2956 38.057657 192.168.10.207 190.42.139.241 SMTP 245 S: 250-mail.mydomain.com Hello [190.42.139.241] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 2956: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23629 (23629), Seq: 122, Ack: 19, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2957 38.057683 190.42.139.241 192.168.10.207 TCP 60 23629 > smtp [ACK] Seq=19 Ack=313 Win=93128 Len=0 Frame 2957: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23629 (23629), Dst Port: smtp (25), Seq: 19, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 2958 38.058018 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:44:56 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23629 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 2958: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:56 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23629 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 2959 38.058101 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:44:56 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23629 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 2959: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:56 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23629 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 2960 38.058223 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:44:56 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23629 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 2960: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:56 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23629 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 2961 38.058354 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:44:56 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23629 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 2961: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:56 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23629 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 2962 38.058479 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:44:56 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23629 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 2962: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:56 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23629 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 2963 38.058602 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:44:56 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23629 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 2963: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:56 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23629 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 2964 38.060504 Watchgua_3c:4c:d8 SunrichT_19:cf:97 ARP 60 Who has 192.168.10.245? Tell 192.168.10.1 Frame 2964: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2965 38.060515 SunrichT_19:cf:97 Watchgua_3c:4c:d8 ARP 60 192.168.10.245 is at 00:0a:cd:19:cf:97 Frame 2965: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:97 (00:0a:cd:19:cf:97), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 2966 38.218305 182.178.75.135 192.168.10.207 SMTP 112 C: MAIL FROM: <caitlyn.flannagan@xxxxxxxxxxxxxxxxxxxxxxxxx> Frame 2966: 112 bytes on wire (896 bits), 112 bytes captured (896 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: netiq (2220), Dst Port: smtp (25), Seq: 18, Ack: 313, Len: 58 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2967 38.218569 192.168.10.207 182.178.75.135 SMTP 122 S: 250 2.1.0 [email protected] OK Frame 2967: 122 bytes on wire (976 bits), 122 bytes captured (976 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: netiq (2220), Seq: 313, Ack: 76, Len: 68 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2968 38.218593 182.178.75.135 192.168.10.207 TCP 60 netiq > smtp [ACK] Seq=76 Ack=381 Win=93060 Len=0 Frame 2968: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: netiq (2220), Dst Port: smtp (25), Seq: 76, Ack: 381, Len: 0 No. Time Source Destination Protocol Length Info 2969 38.343609 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 3 Port 42 TTL = 120 Frame 2969: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 2970 38.379263 190.42.139.241 192.168.10.207 SMTP 97 C: MAIL FROM: <ella.adderiy@xxxxxxxxxxxxxxx> Frame 2970: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23629 (23629), Dst Port: smtp (25), Seq: 19, Ack: 313, Len: 43 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2971 38.379527 192.168.10.207 190.42.139.241 SMTP 107 S: 250 2.1.0 [email protected] OK Frame 2971: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23629 (23629), Seq: 313, Ack: 62, Len: 53 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2972 38.379566 190.42.139.241 192.168.10.207 TCP 60 23629 > smtp [ACK] Seq=62 Ack=366 Win=93074 Len=0 Frame 2972: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23629 (23629), Dst Port: smtp (25), Seq: 62, Ack: 366, Len: 0 No. Time Source Destination Protocol Length Info 2973 38.539153 192.168.10.1 192.168.10.245 Syslog 306 LOCAL1.INFO: Oct 3 19:44:56 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23629 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eygoat@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 2973: 306 bytes on wire (2448 bits), 306 bytes captured (2448 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:56 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23629 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 2974 38.569981 192.168.10.1 192.168.10.245 Syslog 311 LOCAL1.INFO: Oct 3 19:44:56 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2220 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eyineligible@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 2974: 311 bytes on wire (2488 bits), 311 bytes captured (2488 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:56 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2220 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default No. Time Source Destination Protocol Length Info 2975 38.636282 192.168.10.203 113.53.197.65 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 2975: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 113.53.197.65 (113.53.197.65) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 2976 38.695835 190.42.139.241 192.168.10.207 SMTP 60 C: QUIT Frame 2976: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23629 (23629), Dst Port: smtp (25), Seq: 62, Ack: 366, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2977 38.696037 192.168.10.207 190.42.139.241 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 2977: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23629 (23629), Seq: 366, Ack: 68, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2978 38.696061 190.42.139.241 192.168.10.207 TCP 60 23629 > smtp [ACK] Seq=68 Ack=435 Win=93006 Len=0 Frame 2978: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23629 (23629), Dst Port: smtp (25), Seq: 68, Ack: 435, Len: 0 No. Time Source Destination Protocol Length Info 2979 38.696080 192.168.10.207 190.42.139.241 TCP 60 smtp > 23629 [FIN, ACK] Seq=435 Ack=68 Win=65468 Len=0 Frame 2979: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23629 (23629), Seq: 435, Ack: 68, Len: 0 No. Time Source Destination Protocol Length Info 2980 38.696132 190.42.139.241 192.168.10.207 TCP 60 23629 > smtp [ACK] Seq=68 Ack=436 Win=93006 Len=0 Frame 2980: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23629 (23629), Dst Port: smtp (25), Seq: 68, Ack: 436, Len: 0 No. Time Source Destination Protocol Length Info 2981 38.731734 IntelCor_1b:d8:e7 Broadcast ARP 60 Who has 192.168.10.204? Tell 192.168.10.50 Frame 2981: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_1b:d8:e7 (00:13:20:1b:d8:e7), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2982 38.731757 IntelCor_1b:d8:e7 Broadcast ARP 60 Who has 192.168.10.204? Tell 192.168.10.50 Frame 2982: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_1b:d8:e7 (00:13:20:1b:d8:e7), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 2983 38.814615 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2242844928, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2983: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2984 38.814632 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2242844928, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 2984: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2985 38.814639 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2242844928, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2985: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2986 38.814647 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2242844928, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 2986: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2987 38.820266 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-08.geo.kaspersky.com Frame 2987: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 64856 (64856), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 2988 38.820343 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-08.geo.kaspersky.com Frame 2988: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 64856 (64856), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 2989 38.835369 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4111925504, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2989: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2990 38.835383 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4111925504, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 2990: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2991 38.835390 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4111925504, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2991: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2992 38.835398 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4111925504, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 2992: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 2993 38.983395 182.178.75.135 192.168.10.207 SMTP 60 C: QUIT Frame 2993: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: netiq (2220), Dst Port: smtp (25), Seq: 76, Ack: 381, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2994 38.983480 192.168.10.207 182.178.75.135 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 2994: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: netiq (2220), Seq: 381, Ack: 82, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 2995 38.983561 182.178.75.135 192.168.10.207 TCP 60 netiq > smtp [ACK] Seq=82 Ack=450 Win=92990 Len=0 Frame 2995: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: netiq (2220), Dst Port: smtp (25), Seq: 82, Ack: 450, Len: 0 No. Time Source Destination Protocol Length Info 2996 38.983592 192.168.10.207 182.178.75.135 TCP 60 smtp > netiq [FIN, ACK] Seq=450 Ack=82 Win=65454 Len=0 Frame 2996: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135) Transmission Control Protocol, Src Port: smtp (25), Dst Port: netiq (2220), Seq: 450, Ack: 82, Len: 0 No. Time Source Destination Protocol Length Info 2997 38.983639 182.178.75.135 192.168.10.207 TCP 60 netiq > smtp [ACK] Seq=82 Ack=451 Win=92990 Len=0 Frame 2997: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: netiq (2220), Dst Port: smtp (25), Seq: 82, Ack: 451, Len: 0 No. Time Source Destination Protocol Length Info 2998 38.992575 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 2825#1] 9428 > smtp [ACK] Seq=130819 Ack=1807 Win=46468 Len=0 Frame 2998: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 130819, Ack: 1807, Len: 0 No. Time Source Destination Protocol Length Info 2999 38.992604 206.225.164.186 192.168.10.207 TCP 60 [TCP Dup ACK 2798#1] 23308 > smtp [ACK] Seq=250845 Ack=2899 Win=46153 Len=0 Frame 2999: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 250845, Ack: 2899, Len: 0 No. Time Source Destination Protocol Length Info 3000 38.992644 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=1807 Ack=129801 Win=0 Len=0 Frame 3000: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1807, Ack: 129801, Len: 0 No. Time Source Destination Protocol Length Info 3001 38.992672 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=2899 Ack=249497 Win=0 Len=0 Frame 3001: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2899, Ack: 249497, Len: 0 No. Time Source Destination Protocol Length Info 3002 39.187004 190.42.139.241 192.168.10.207 TCP 60 23629 > smtp [RST, ACK] Seq=68 Ack=436 Win=93006 Len=0 Frame 3002: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23629 (23629), Dst Port: smtp (25), Seq: 68, Ack: 436, Len: 0 No. Time Source Destination Protocol Length Info 3003 39.187087 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:44:57 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23629 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 3003: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:57 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23629 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 3004 39.193758 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 3004: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3005 39.249435 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 3005: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3006 39.249468 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 3006: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3007 39.249486 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 3007: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3008 39.249497 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 3008: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3009 39.249509 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 3009: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3010 39.249520 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 3010: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3011 39.249530 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 3011: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3012 39.249542 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 3012: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3013 39.249553 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 3013: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3014 39.249566 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 3014: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3015 39.249576 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 3015: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3016 39.249592 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 3016: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3017 39.249624 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 3017: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3018 39.249635 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 3018: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3019 39.249644 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 3019: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3020 39.249677 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 3020: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3021 39.249687 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 3021: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3022 39.249706 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 3022: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3023 39.249712 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 3023: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3024 39.249718 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 3024: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3025 39.249724 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 3025: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3026 39.249730 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 3026: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3027 39.249737 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 3027: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3028 39.249743 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 3028: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3029 39.249749 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 3029: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3030 39.249756 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 3030: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3031 39.249762 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 3031: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3032 39.249768 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 3032: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3033 39.249775 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 3033: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3034 39.249781 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 3034: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3035 39.249787 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 3035: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3036 39.249793 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 3036: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3037 39.249799 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 3037: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3038 39.249813 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 3038: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3039 39.249819 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 3039: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3040 39.249825 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 3040: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3041 39.249838 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 3041: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3042 39.249847 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 3042: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3043 39.249853 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 3043: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3044 39.249859 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 3044: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3045 39.249868 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 3045: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3046 39.249876 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 3046: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3047 39.249884 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 3047: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3048 39.249927 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 3048: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3049 39.249933 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 3049: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3050 39.249939 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 3050: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3051 39.249946 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 3051: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3052 39.250153 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 3052: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3053 39.284387 192.168.10.1 192.168.10.245 Syslog 364 LOCAL1.INFO: Oct 3 19:44:57 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo.kaspersky.com" arg="/diffs/bases/av/kdb/i386/fa001.kdc.q71" sent_bytes="228" rcvd_bytes="661" (HTTP-proxy-Visitor-00) Frame 3053: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:57 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo No. Time Source Destination Protocol Length Info 3054 39.315174 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 3054: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3055 39.316999 192.168.10.207 206.225.164.186 SMTP 516 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 3055: 516 bytes on wire (4128 bits), 516 bytes captured (4128 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 2857, Ack: 249497, Len: 462 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3056 39.317031 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=250845 Ack=3319 Win=46720 Len=0 Frame 3056: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 250845, Ack: 3319, Len: 0 No. Time Source Destination Protocol Length Info 3057 39.317059 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=3319 Ack=249497 Win=0 Len=0 Frame 3057: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3319, Ack: 249497, Len: 0 No. Time Source Destination Protocol Length Info 3058 39.328793 182.178.75.135 192.168.10.207 TCP 60 netiq > smtp [RST, ACK] Seq=82 Ack=451 Win=92990 Len=0 Frame 3058: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: netiq (2220), Dst Port: smtp (25), Seq: 82, Ack: 451, Len: 0 No. Time Source Destination Protocol Length Info 3059 39.328865 192.168.10.1 192.168.10.245 Syslog 202 LOCAL1.INFO: Oct 3 19:44:57 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2220 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 3059: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:44:57 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2220 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 3060 39.443639 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 3060: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3061 39.448680 192.168.10.1 192.168.10.245 Syslog 368 LOCAL1.INFO: Oct 3 19:44:57 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo.kaspersky.com" arg="/diffs/bases/av/kdb/i386/base0e6c.kdc.zs4" sent_bytes="231" rcvd_bytes="1880" (HTTP-proxy-Visitor-00) Frame 3061: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:57 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo No. Time Source Destination Protocol Length Info 3062 39.537242 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 3062: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3063 39.537265 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 3063: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3064 39.565943 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 3064: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3065 39.665832 192.168.10.115 64.74.103.129 TLSv1 91 Application Data Frame 3065: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.115 (192.168.10.115), Dst: 64.74.103.129 (64.74.103.129) Transmission Control Protocol, Src Port: cogsys-lm (3377), Dst Port: https (443), Seq: 38, Ack: 38, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 3066 39.665903 64.74.103.129 192.168.10.115 TCP 60 https > cogsys-lm [ACK] Seq=38 Ack=75 Win=65535 Len=0 Frame 3066: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Internet Protocol Version 4, Src: 64.74.103.129 (64.74.103.129), Dst: 192.168.10.115 (192.168.10.115) Transmission Control Protocol, Src Port: https (443), Dst Port: cogsys-lm (3377), Seq: 38, Ack: 75, Len: 0 No. Time Source Destination Protocol Length Info 3067 39.668617 Watchgua_3c:4c:d8 IntelCor_ed:1a:c9 ARP 60 Who has 192.168.10.115? Tell 192.168.10.1 Frame 3067: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3068 39.668631 IntelCor_ed:1a:c9 Watchgua_3c:4c:d8 ARP 60 192.168.10.115 is at 00:13:20:ed:1a:c9 Frame 3068: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3069 39.713612 64.74.103.129 192.168.10.115 TLSv1 91 Application Data Frame 3069: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Internet Protocol Version 4, Src: 64.74.103.129 (64.74.103.129), Dst: 192.168.10.115 (192.168.10.115) Transmission Control Protocol, Src Port: https (443), Dst Port: cogsys-lm (3377), Seq: 38, Ack: 75, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 3070 39.830307 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2259622144, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3070: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3071 39.830331 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2259622144, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3071: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3072 39.830344 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2259622144, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3072: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3073 39.830357 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2259622144, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3073: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3074 39.851203 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4128702720, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3074: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3075 39.851224 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4128702720, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3075: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3076 39.851236 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4128702720, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3076: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3077 39.851249 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4128702720, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3077: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3078 39.907353 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=101469 Ack=2073 Win=1002 Len=1448 TSval=545225 TSecr=727862 Frame 3078: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 101469, Ack: 2073, Len: 1448 Data (1448 bytes) 0000 17 03 01 22 90 dc ce 38 43 89 81 c2 3c 94 be 9a ..."...8C...<... 0010 26 9f bb 78 c5 4e 12 cf 36 c4 76 c0 aa 10 7f 1e &..x.N..6.v..... 0020 28 64 ea 50 a7 76 4c 62 1c ce 38 0d e0 16 61 71 (d.P.vLb..8...aq 0030 b3 f2 cf b7 76 2c 57 ee a8 c0 eb d6 5f 29 5a 50 ....v,W....._)ZP 0040 83 1a e0 79 a9 3f f8 86 9a a5 86 8c cd b6 d4 9b ...y.?.......... 0050 a7 4c 85 a6 33 c4 d4 ad ff cd 71 c4 4b c1 21 8a .L..3.....q.K.!. 0060 99 23 9f b2 83 4b ed 00 50 b4 df c7 0b 27 a8 80 .#...K..P....'.. 0070 35 a5 38 e4 85 84 b5 1a 07 72 ce e5 23 1c 3e 54 5.8......r..#.>T 0080 02 4d 4b 54 55 a8 92 aa e8 a7 f7 af d8 62 12 54 .MKTU........b.T 0090 f0 7c 7c 86 93 8a 99 67 c9 9c 2c d0 65 75 a3 4c .||....g..,.eu.L 00a0 e1 54 d7 4b 52 eb 8e 00 55 c3 e2 17 e6 ab 0c f6 .T.KR...U....... 00b0 c0 c0 76 1f 84 42 f0 2c b6 81 37 02 c5 c1 08 33 ..v..B.,..7....3 00c0 9e c5 16 60 1a 2d 94 67 f7 8f b4 1f 3b 6f 79 3e ...`.-.g....;oy> 00d0 76 a9 d8 7c 07 10 5e a5 dc bf 24 1c e2 ab 98 ac v..|..^...$..... 00e0 3c cc bd bb 47 da 64 14 d9 ac ce 60 ae 7e fa e4 <...G.d....`.~.. 00f0 19 95 d4 a2 be ba 39 de 5d d8 c7 93 da ae 4f 1d ......9.].....O. 0100 91 25 2b 36 c4 7a ff 40 95 f4 4e af 33 b0 e2 46 .%[email protected] 0110 d3 f6 e4 70 18 95 fb 85 0e 90 8c 61 a2 41 43 9d ...p.......a.AC. 0120 e2 6d 1e e8 97 e6 ef 9b c8 03 f8 80 d5 84 bc f7 .m.............. 0130 32 a2 8b 3c a6 ca fd 3e c5 27 ac 58 ed c9 17 e0 2..<...>.'.X.... 0140 4a ec da 77 4d fa 65 ca 65 c3 8d 65 d5 74 2e 4d J..wM.e.e..e.t.M 0150 f8 2c 2c c9 0a 2c 9d f4 b1 ac e8 1c 79 6b 40 e1 .,,..,......yk@. 0160 d9 ec 08 59 f1 a5 cd 8e 53 f9 5a dc 46 25 62 7c ...Y....S.Z.F%b| 0170 1d 08 2b 62 46 ed a8 d1 45 b8 73 be c9 a5 98 4a ..+bF...E.s....J 0180 b4 8e b3 2f 82 25 3b 47 8c ef a3 ca 4d 62 f3 78 .../.%;G....Mb.x 0190 d6 e3 83 2f 3f 11 5a e4 77 61 a2 e3 8f 2b 7f d7 .../?.Z.wa...+.. 01a0 22 58 ad 03 61 3c eb 96 43 79 f3 72 84 f2 c1 19 "X..a<..Cy.r.... 01b0 b9 24 be 44 54 d8 fd 51 21 e0 e8 12 b7 8f 07 8d .$.DT..Q!....... 01c0 0c 45 2c 30 ee a0 8c 3a dd 20 78 89 6f 12 76 c8 .E,0...:. x.o.v. 01d0 99 34 36 cb 64 5c a2 59 80 11 ad aa e5 3d d2 8d .46.d\.Y.....=.. 01e0 1e 9a 1b 09 7a e6 d3 94 fc 1f ee 93 e4 3c e1 1d ....z........<.. 01f0 5b 55 10 cc 93 ac 7a d5 30 ef a6 44 a2 68 75 e9 [U....z.0..D.hu. 0200 ad c1 ee 64 e4 d0 75 cb f2 65 d0 74 d1 9e de f5 ...d..u..e.t.... 0210 6b 9d c7 f9 c7 66 bf 3c 46 09 f0 bb a2 6e a7 29 k....f.<F....n.) 0220 ba e5 e3 d9 ac 87 69 be e2 07 0f 36 87 f2 4c 2d ......i....6..L- 0230 e1 97 bc dd 30 0a 62 d2 34 8c 9e 40 0a c3 6a 9b [email protected]. 0240 6c ae 92 ed d1 8d ea 5a 51 98 39 99 75 29 dc a1 l......ZQ.9.u).. 0250 56 af 05 b4 3e 3a 85 0e 20 6f ee eb ee 08 c4 27 V...>:.. o.....' 0260 f9 dc cf 66 52 f2 15 24 9e 2e 2b 98 b0 2d ef b4 ...fR..$..+..-.. 0270 bb ba ba 00 1d 32 ee b3 34 b1 88 d5 f7 62 24 c5 .....2..4....b$. 0280 6f b8 c2 32 0e 11 58 10 0f de b6 1d de ce 64 69 o..2..X.......di 0290 e7 cf f9 b9 b3 80 00 cd 62 bd 6b d9 21 6e 01 3b ........b.k.!n.; 02a0 de 57 01 c8 8d 00 f7 51 16 e3 19 f8 57 31 06 bb .W.....Q....W1.. 02b0 e6 96 bb 87 69 6a a9 bc a1 28 b3 f4 3f fc 01 56 ....ij...(..?..V 02c0 4a 37 19 21 dd 4c 31 00 86 e1 a9 9b b7 62 e3 17 J7.!.L1......b.. 02d0 cb 2b e5 a0 1a 95 a5 6f 1b bf 1f 56 62 7e f1 b0 .+.....o...Vb~.. 02e0 ea 83 fc 20 0c 5d 75 3b 32 c5 17 10 c1 a8 a8 ab ... .]u;2....... 02f0 5c a2 37 1a ac c8 1f a6 2e 46 a3 54 ef c1 ff e0 \.7......F.T.... 0300 ef 62 75 5f 09 7a 31 53 a0 ac e0 a2 56 2b 2b ef .bu_.z1S....V++. 0310 1b 42 46 83 87 fd c0 dc 51 35 e7 ad 47 ec 76 56 .BF.....Q5..G.vV 0320 af 83 fb a7 76 61 a6 bd 4e 59 ec 98 ea 64 fb 58 ....va..NY...d.X 0330 14 0f a5 5b 26 38 6a 2d c9 4b a5 9a b0 91 28 2c ...[&8j-.K....(, 0340 92 16 83 a2 e0 59 0a 77 a0 e1 1e 2f 36 11 57 11 .....Y.w.../6.W. 0350 f8 92 2d c2 8f 5a 87 c2 e5 4f ad bd 78 23 8b fe ..-..Z...O..x#.. 0360 02 86 d0 3e 86 a1 51 2d 46 da 65 9b 25 0a d9 1c ...>..Q-F.e.%... 0370 78 0a fd 3a 3f 88 a9 61 22 d3 2d f8 63 4f 94 5b x..:?..a".-.cO.[ 0380 f2 5f ac 01 1f 54 d3 94 67 cb 18 3e 8e b7 e4 a9 ._...T..g..>.... 0390 99 a7 61 2b 5a 04 d2 1d 5d 4f 2d ef de c8 39 24 ..a+Z...]O-...9$ 03a0 d0 b1 4b 75 a0 b8 b8 03 5f e7 b1 63 01 a3 5d 52 ..Ku...._..c..]R 03b0 fa c5 7c 3a 76 01 84 22 0a 05 9b e2 26 07 e5 1e ..|:v.."....&... 03c0 4c 4a 47 4e 92 d9 48 51 dc 37 5a 63 4d 53 6e bc LJGN..HQ.7ZcMSn. 03d0 49 4d 56 39 8b b4 33 2c 9b 50 36 e7 cf 82 f7 ef IMV9..3,.P6..... 03e0 78 68 6f 88 08 0f 04 4c ed d5 75 35 1a 0d b7 c9 xho....L..u5.... 03f0 03 20 69 a8 8a b6 b4 d3 19 46 90 23 72 33 05 d7 . i......F.#r3.. 0400 4c de 4d b5 77 3f 94 c8 d7 9d d1 c0 5b f3 15 9a L.M.w?......[... 0410 4a 38 4f 1b 2d 38 25 d9 df e4 00 63 41 9f 36 d2 J8O.-8%....cA.6. 0420 dc 00 db 28 06 78 61 31 ed 5a 81 7f 4e 70 59 e2 ...(.xa1.Z..NpY. 0430 de f0 75 69 d2 ea df 4f 90 38 2b 15 0f f9 6b 1d ..ui...O.8+...k. 0440 e4 d7 a9 39 07 dd fe 3b e9 83 d9 2f 9c 0c 8b b1 ...9...;.../.... 0450 fb 3d 25 0e 4d 08 e5 55 a1 da d8 f4 a0 56 46 0c .=%.M..U.....VF. 0460 d3 af 3b 80 e4 2a dd 6f 5f 34 55 b0 9a e1 fa fe ..;..*.o_4U..... 0470 a1 84 ab c0 53 64 00 9a 55 77 0a 52 e3 56 8f d3 ....Sd..Uw.R.V.. 0480 b5 12 1b 18 23 29 28 09 f6 ff c0 af f3 f3 ab dc ....#)(......... 0490 95 2b 2b 55 bd c7 8d 61 da 86 ab 52 ef 86 8d f6 .++U...a...R.... 04a0 fb 63 81 fc 75 4e 9b df c1 62 a3 d4 41 ef dd ca .c..uN...b..A... 04b0 f9 5f a8 d0 9d 08 c0 9f 69 12 ad d3 3f f5 45 de ._......i...?.E. 04c0 15 94 9f 40 1d 01 55 68 b1 f4 92 0d f9 fa 09 84 [email protected]........ 04d0 f2 46 e8 e1 48 b2 fc 9d 56 a9 9f 2e 71 54 65 e2 .F..H...V...qTe. 04e0 6f 39 11 c2 88 04 d7 a2 96 1d b1 09 43 bc 74 fb o9..........C.t. 04f0 97 2c 98 3a b6 34 dd 61 28 0f 4d 66 f2 05 10 b6 .,.:.4.a(.Mf.... 0500 bb b7 3b 15 22 05 22 79 27 e8 0c 3c 28 d8 f3 66 ..;."."y'..<(..f 0510 b0 95 d9 a1 49 90 fa 37 00 a4 b8 7a 15 cc 8a 26 ....I..7...z...& 0520 2a 31 fb df 25 fa b7 c4 f7 10 b6 3a 6f c3 23 e5 *1..%......:o.#. 0530 bc 67 61 10 71 1e ab f0 f6 1c 57 d6 24 39 f5 bb .ga.q.....W.$9.. 0540 38 e6 a2 e0 f0 f9 df 6d 1f 1a 6c 71 a5 f4 29 23 8......m..lq..)# 0550 75 ca 70 10 5e e8 26 00 65 7b 2f a5 ec cc ac ae u.p.^.&.e{/..... 0560 e0 da a2 a3 87 e9 20 77 89 80 d7 2b fd 50 bf 17 ...... w...+.P.. 0570 1c bb 9f d4 57 32 ee c5 36 8d e2 37 43 7b f1 2c ....W2..6..7C{., 0580 5a e5 f0 d7 fb aa 0b 79 0a d8 a6 a8 5f 15 75 f7 Z......y...._.u. 0590 06 17 98 31 fb 40 d3 95 cb 19 6c 8f 27 14 47 52 [email protected].'.GR 05a0 32 3a 07 21 6c f4 42 fb 2:.!l.B. No. Time Source Destination Protocol Length Info 3079 39.907451 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=102917 Ack=2073 Win=1002 Len=1448 TSval=545225 TSecr=727862 Frame 3079: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 102917, Ack: 2073, Len: 1448 Data (1448 bytes) 0000 72 0f 8d ae f2 a9 ae aa 22 06 05 2a 44 2a 1f 78 r......."..*D*.x 0010 e8 53 97 0a 8e ec 01 bd 17 cb 53 bf 60 12 99 25 .S........S.`..% 0020 8b bf 3c a8 73 49 3d 82 b9 32 f2 f3 dd 4e ad 90 ..<.sI=..2...N.. 0030 51 ff 69 bb aa 55 1d 75 21 eb 14 33 8a 3b 10 45 Q.i..U.u!..3.;.E 0040 21 7f 4e 62 3e c6 de 1b e7 e5 07 34 f0 82 60 45 !.Nb>......4..`E 0050 76 b5 7b 86 fc 24 96 f4 93 34 98 0c af 23 c2 92 v.{..$...4...#.. 0060 18 f3 bb 18 15 0e 26 0d 4d 7b c3 31 c0 72 58 d9 ......&.M{.1.rX. 0070 23 9e 25 d4 96 6b f0 07 f7 0e 5e 7f 4e 1d c9 76 #.%..k....^.N..v 0080 ae 1a d7 e0 1a b3 8a d8 4b 99 1f 97 59 31 dc 3d ........K...Y1.= 0090 f9 b5 34 6b 10 3e 27 28 b9 76 a1 1a 73 66 bc fb ..4k.>'(.v..sf.. 00a0 69 59 b0 25 c3 4e 1a 35 be 0d ab 39 92 1a 93 d3 iY.%.N.5...9.... 00b0 4d 42 26 c8 d1 fc 1c 8b e2 a9 b4 2b 80 44 81 ab MB&........+.D.. 00c0 d5 92 5c 0b c3 31 e2 df 46 44 a7 ef de 50 43 eb ..\..1..FD...PC. 00d0 97 73 b2 45 73 61 43 75 6f 32 b3 0d 88 7a 7f 66 .s.EsaCuo2...z.f 00e0 8a 39 af c8 1d eb dd 11 97 c3 0d eb 51 aa af 63 .9..........Q..c 00f0 7d dc b1 83 75 54 2c 1d 80 d1 d9 17 ab 3c 53 bb }...uT,......<S. 0100 a1 52 5c 42 c8 b4 7c e3 99 bd 33 aa 70 0b e3 71 .R\B..|...3.p..q 0110 53 6a 02 31 49 6c fc 59 15 be dd 9a 09 0a dc 7f Sj.1Il.Y........ 0120 06 47 92 a5 fe ca 61 b2 20 a7 71 d9 0d 8b 61 11 .G....a. .q...a. 0130 e9 d9 f5 fe 04 a6 00 3c d1 67 a1 05 e6 b2 e1 fd .......<.g...... 0140 f7 80 69 1c 1d 1b b4 5e ea 40 78 ba 93 11 ff 79 ..i....^[email protected] 0150 b1 db 5b 5a e0 33 5f c9 d9 73 62 31 4c c2 fb 42 ..[Z.3_..sb1L..B 0160 e6 87 c7 ab e6 ab 85 1d 24 d5 ed 41 a0 31 fd 27 ........$..A.1.' 0170 96 56 36 cc 3b d8 aa e9 e5 9b 32 97 0a e3 de 02 .V6.;.....2..... 0180 60 11 73 f5 fc 79 92 14 f1 d3 15 c2 d7 49 6c e3 `.s..y.......Il. 0190 2d 67 e7 39 f7 eb d0 7b 49 3d 4c 3e 03 23 77 be -g.9...{I=L>.#w. 01a0 03 6d e1 ed 09 a0 ff b7 a2 64 b7 e1 0f a3 57 46 .m.......d....WF 01b0 5a 4b 88 bc 1c fe 33 2d f8 8b a5 d2 a3 50 ad ab ZK....3-.....P.. 01c0 5c 18 47 14 fc 0b 90 6b 6f 36 e4 c2 b4 a9 25 9c \.G....ko6....%. 01d0 81 e0 47 3d c4 73 64 ff 43 db 0f d5 ce 4a 68 84 ..G=.sd.C....Jh. 01e0 23 8a 61 a4 87 c3 bd 56 ce 59 d1 79 67 3b 46 99 #.a....V.Y.yg;F. 01f0 44 64 3b 2e fd db b4 cb a9 b0 6e ad 54 6d 07 31 Dd;.......n.Tm.1 0200 b5 4c f0 b5 5c a5 d7 0c 17 79 9b 97 e8 20 e3 e5 .L..\....y... .. 0210 5b 34 8a 3d 2e 3d ed b8 a7 9b cf bd bf 91 8d 59 [4.=.=.........Y 0220 9f be 01 ab 1c 81 28 89 5e 1d fd 35 31 36 1f 1d ......(.^..516.. 0230 30 4a e3 b4 ef 30 cb f2 26 3a d3 5c a6 f2 26 27 0J...0..&:.\..&' 0240 19 57 0f 9c 74 34 13 0c fc ec a8 ee 5c 6f 0c 20 .W..t4......\o. 0250 1f c3 56 62 bf 21 fd aa f7 44 6c 4c 3c ad 6d 1a ..Vb.!...DlL<.m. 0260 a9 a6 b7 53 d9 7f 94 cf 1c 9a fa 3e b9 9c a4 8d ...S.......>.... 0270 d6 92 af 15 a3 71 b7 dc d8 94 3c 9d 23 7e 90 e4 .....q....<.#~.. 0280 0d 27 3a 84 5d 2a 34 4a c1 b8 f5 77 42 c6 b0 a1 .':.]*4J...wB... 0290 91 ed 8a a9 5d be d0 10 54 e2 5c 04 d9 9b 0a b8 ....]...T.\..... 02a0 29 56 f4 8d 3d b9 9b df 22 5f 55 1a 73 5d e5 8d )V..=..."_U.s].. 02b0 86 7c fa 11 7b 1d 37 dc fa b9 68 c5 de 65 b7 30 .|..{.7...h..e.0 02c0 13 46 50 38 e1 12 ca 9e 7d 9c 6e 40 4b 81 30 af .FP8....}[email protected]. 02d0 1f 78 5d 62 b7 e4 00 4b 88 38 99 80 06 03 88 8f .x]b...K.8...... 02e0 ea 69 6a 04 70 31 ad 5d d9 c1 ab b5 1f fd b6 86 .ij.p1.]........ 02f0 1d 5c 9d 70 23 c4 03 00 19 32 5e 8a cc 80 73 01 .\.p#....2^...s. 0300 e3 6b cb 23 43 94 a1 be 5a 13 a0 b8 12 08 75 b2 .k.#C...Z.....u. 0310 4a 0e 43 a0 bb 28 02 63 82 4e f2 43 45 ff 36 6b J.C..(.c.N.CE.6k 0320 32 b8 0f 5c fa 7c 03 7c 18 1c 9f cc e3 1e 59 9f 2..\.|.|......Y. 0330 e4 a0 5f c8 49 d6 e2 6f e5 6e 36 15 00 9b 9a d7 .._.I..o.n6..... 0340 a0 b6 dc e2 8a 47 4e 78 ad cd 31 3b ba 63 0e fc .....GNx..1;.c.. 0350 d6 a4 c1 a7 88 58 08 9e 49 ba 53 a5 ed 5e f2 c7 .....X..I.S..^.. 0360 63 3c 41 5b 7d b0 ba 0e 2b c9 cd 49 6d c9 ce 29 c<A[}...+..Im..) 0370 57 10 81 96 14 e3 bd 02 09 b3 a6 76 2b 74 aa 58 W..........v+t.X 0380 5f 6a dc 66 57 7b 2d 30 48 6e 5e 44 8e 74 3b 9c _j.fW{-0Hn^D.t;. 0390 74 b5 f2 1f f2 fd 42 f5 f2 d8 1d 63 8d 8e fc 1a t.....B....c.... 03a0 5b 08 9e 5f 53 6f 8f 97 bc c9 a9 17 af 7d f3 bc [.._So.......}.. 03b0 93 c4 dc 0d ba ab 3f f1 74 46 ab 88 10 76 7a 27 ......?.tF...vz' 03c0 09 88 7a 5b 59 81 c5 9a bf 5d 93 c5 b7 b3 fd 5d ..z[Y....].....] 03d0 c3 d2 e8 2d 41 34 5c 99 f4 40 cf 10 65 74 74 1e ...-A4\[email protected]. 03e0 f4 53 a8 a4 6b 98 9c 85 71 ae 45 3a 89 90 ae 0c .S..k...q.E:.... 03f0 65 bc 3e a8 15 3f 0d 02 d8 39 2e 19 e3 94 7c f5 e.>..?...9....|. 0400 2c d2 61 50 8f 06 50 b7 25 79 73 4d 3f 1b 52 44 ,.aP..P.%ysM?.RD 0410 61 b2 91 08 77 5d 31 5c a9 7b f2 af 2d 6e 0d 8b a...w]1\.{..-n.. 0420 ae cc 50 37 5f 74 9b 05 ee 68 fb 5e ee d3 3d 3b ..P7_t...h.^..=; 0430 15 e9 1e 44 9c ea 60 a6 a9 95 cf c4 a9 5e f2 04 ...D..`......^.. 0440 77 78 69 7c 3e a2 5e 5d be 3c c1 a1 7a b0 ac 84 wxi|>.^].<..z... 0450 10 ef d2 72 e3 4f 2f 0e 42 52 0c 06 c5 fb fc c2 ...r.O/.BR...... 0460 f6 d3 91 7e 00 00 92 00 52 fb 31 e4 c5 71 5b 19 ...~....R.1..q[. 0470 b6 c5 b1 7f 90 a4 a9 b5 29 2a 1a 0a 82 16 0d 45 ........)*.....E 0480 bf a6 b5 2d 56 80 95 75 c4 78 8a 3d cd a6 86 eb ...-V..u.x.=.... 0490 c4 31 8b 9e eb f6 b4 43 61 c9 7a 15 66 8b 1a ea .1.....Ca.z.f... 04a0 cf 7a 1c bc 80 07 7a 20 6d 2b 49 b2 fa af 5f bf .z....z m+I..._. 04b0 82 b5 89 f2 5b 51 b1 8b 0f 19 0c e4 c4 52 84 18 ....[Q.......R.. 04c0 3f 05 7e 69 e4 14 a9 78 9d 8e 86 f6 ea 84 10 3f ?.~i...x.......? 04d0 ae ff 8d 24 73 cb 64 a6 ec 15 1b 4d c9 23 ba 92 ...$s.d....M.#.. 04e0 13 4c 84 81 08 1b 54 40 bf 81 04 43 c0 ef 5c ba [email protected]..\. 04f0 f0 b9 1f e8 1e e0 30 34 14 84 6c 49 c7 a5 9a 83 ......04..lI.... 0500 94 2d 9f b0 54 a8 a6 41 ea 77 b4 6c c7 3c 7a 84 .-..T..A.w.l.<z. 0510 d7 fc a3 01 30 89 e1 5c c1 ff 76 4c 15 d2 74 49 ....0..\..vL..tI 0520 8f 41 40 c4 73 74 5a 09 55 02 1a f6 d3 ca 5a 63 .A@xxxxxxxxxxxxx 0530 21 ba db 7c d6 20 73 1f cc f9 d5 1c b4 86 ce d9 !..|. s......... 0540 68 7c 67 78 10 5a 06 30 77 4c 42 44 e1 ee f9 ac h|gx.Z.0wLBD.... 0550 c3 f8 90 b4 23 11 14 ff f7 b2 94 56 39 ce 3b 8b ....#......V9.;. 0560 c7 1d 7f c5 d2 c6 9c c2 9e 85 c8 56 50 ff 5b 3b ...........VP.[; 0570 5f 7b 88 d3 eb 32 69 ab b2 16 63 69 d5 20 08 bc _{...2i...ci. .. 0580 6f 84 b3 2e 66 54 d7 2e 70 24 9d b2 e4 57 ee c6 o...fT..p$...W.. 0590 99 78 9d e5 3d 73 5e e4 22 42 97 35 a9 1e 26 65 .x..=s^."B.5..&e 05a0 e7 b4 89 a9 32 bd f3 f7 ....2... No. Time Source Destination Protocol Length Info 3080 39.907590 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=104365 Ack=2073 Win=1002 Len=1448 TSval=545225 TSecr=727862 Frame 3080: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 104365, Ack: 2073, Len: 1448 Data (1448 bytes) 0000 e4 52 5a 2d 5a 33 f8 61 69 44 51 76 61 3d 7f 35 .RZ-Z3.aiDQva=.5 0010 c3 8b fe 1f 84 cd 90 58 51 86 a0 bb 84 6c f9 ab .......XQ....l.. 0020 4e b2 c6 73 a8 1b cd b9 15 20 a6 ae 24 9a ef 55 N..s..... ..$..U 0030 fe d9 34 44 e2 d1 c4 b5 75 92 80 d6 6c 4d fa 25 ..4D....u...lM.% 0040 c0 60 0d 49 cf 42 70 12 7b f0 2c ac c9 c8 8c 25 .`.I.Bp.{.,....% 0050 fb 7d 84 71 65 48 b5 07 00 84 4b e1 62 cb ee fb .}.qeH....K.b... 0060 dc aa 14 da f8 2b a1 e7 aa e7 13 56 47 b6 e5 e8 .....+.....VG... 0070 2c ec ff 83 a8 33 34 b5 3c 4c e2 e6 d8 11 00 f5 ,....34.<L...... 0080 cf 18 29 19 8c 3a 22 e6 41 20 0e 76 97 92 42 c2 ..)..:".A .v..B. 0090 9a bf 0d 7c 82 bd 70 ae 63 04 a7 20 ee 05 26 f6 ...|..p.c.. ..&. 00a0 6e f5 db d0 83 c9 f7 a1 1c 67 12 46 df d1 38 7c n........g.F..8| 00b0 0d c0 1a 2e 59 5b 8e 88 8c 97 bb 93 59 7d 2c 2f ....Y[......Y},/ 00c0 0e e1 9d e7 9d c8 46 d9 6b f4 40 4d 61 cf c4 8e ......F.k.@Ma... 00d0 1d f3 59 38 36 93 c1 6c e7 a4 7e 56 58 f6 63 7b ..Y86..l..~VX.c{ 00e0 c2 be 68 fc 18 e6 c9 e2 c8 d8 77 53 bc 53 5d 41 ..h.......wS.S]A 00f0 92 86 ad db 2f 23 ed f0 7e e5 4f da d4 51 65 ba ..../#..~.O..Qe. 0100 41 94 19 f6 3b 3b 1e 96 ec 9b d0 71 f8 1f f9 ea A...;;.....q.... 0110 98 62 bb 76 71 cb c8 c0 71 e7 eb 16 ba c2 44 53 .b.vq...q.....DS 0120 47 cc f2 7c 13 a4 27 79 4d 36 70 65 12 ce cb b2 G..|..'yM6pe.... 0130 e4 7a ce c8 3a e3 fb 11 3b 1b e5 83 49 42 c9 47 .z..:...;...IB.G 0140 d8 b3 80 03 f6 8a 32 40 4f f9 ea d8 6f a0 1f 88 [email protected]... 0150 56 70 64 b8 34 0b 3a 55 39 fa 28 6b 97 c0 56 17 Vpd.4.:U9.(k..V. 0160 76 c7 6f bc 3a 6b 26 bd f2 3c 93 ea 67 d5 7e 50 v.o.:k&..<..g.~P 0170 db 34 bc df 64 68 bc de a3 67 46 e1 2e 0a 77 17 .4..dh...gF...w. 0180 2e 1e 44 e7 f1 6e 9f 97 47 49 0e 95 7c be 70 ab ..D..n..GI..|.p. 0190 c2 95 cd ea f5 dc 37 0e f3 db 4c 6b 09 de 35 ac ......7...Lk..5. 01a0 56 03 83 29 c4 67 f0 fb 21 ed 8c ce 20 fd 74 bc V..).g..!... .t. 01b0 9d 21 78 55 2a ab 2c 87 bf 82 4c 5a d7 4d cb d2 .!xU*.,...LZ.M.. 01c0 a0 ee 7d be 0e 4a 12 91 e9 7f f0 2c 5a 73 99 5b ..}..J.....,Zs.[ 01d0 a2 71 16 7c 49 52 6e cb ab 01 ea 41 f2 a5 d2 1c .q.|IRn....A.... 01e0 b0 91 a7 8b 55 4d 3c 11 1f 43 b9 1e 25 33 ed 8d ....UM<..C..%3.. 01f0 4d 45 b1 c1 32 c6 5a 9c cb bc 58 cb d6 b0 66 d9 ME..2.Z...X...f. 0200 c6 e4 63 d6 5d 98 65 db c2 6d 71 73 52 0e 99 2a ..c.].e..mqsR..* 0210 66 50 45 1d d8 b2 83 c3 4b 13 62 1a db 69 0b b3 fPE.....K.b..i.. 0220 44 31 75 28 da 49 fd 96 44 5a 9a 0b b7 6d ab 7f D1u(.I..DZ...m.. 0230 71 4d bd 76 7b f1 4c e7 76 a0 11 4b a4 45 81 58 qM.v{.L.v..K.E.X 0240 31 8a e1 61 15 fd 52 d2 48 94 88 83 d6 e5 7c 5e 1..a..R.H.....|^ 0250 14 db f5 87 8b a5 67 b6 c1 e9 08 2e a6 8d 40 70 ......g.......@p 0260 01 6d fd 7f b9 94 97 3b 95 6b 5a 56 41 e2 67 1a .m.....;.kZVA.g. 0270 13 c0 bf eb aa 74 f7 94 3b b7 70 c3 0b 48 45 80 .....t..;.p..HE. 0280 3b 80 08 af a4 20 ad 3a 27 a4 63 23 ed bc c8 c6 ;.... .:'.c#.... 0290 26 a7 2c 0a 63 f7 9e 48 24 d2 93 76 36 58 7f 6c &.,.c..H$..v6X.l 02a0 14 89 84 22 3a 99 64 e7 44 a1 84 a0 31 41 4d 84 ...":.d.D...1AM. 02b0 41 89 35 6a 73 84 e0 1d 23 a2 88 f8 1e 0d f9 e2 A.5js...#....... 02c0 04 f4 3b fb 0a ab 7a b9 ab 6a 31 ac 02 9e 0a ad ..;...z..j1..... 02d0 9c ff cf 81 71 78 87 37 93 49 3f 82 a1 5b 3a 26 ....qx.7.I?..[:& 02e0 aa 0b e3 cf 9f 1a 42 ab 17 f2 73 28 5c c3 02 c7 ......B...s(\... 02f0 2b c0 c6 f5 32 dc 7a e9 21 c5 a6 f7 6d 03 52 a7 +...2.z.!...m.R. 0300 6f ea 87 49 60 70 bd ae 1b 50 a8 c1 8a 43 7a 8d o..I`p...P...Cz. 0310 ad 28 bb ca f4 dd d8 9c 57 e8 4b ce ff aa d1 c6 .(......W.K..... 0320 50 08 bf 92 28 c4 05 06 82 4d 9e 32 43 60 64 67 P...(....M.2C`dg 0330 7f a0 dc 45 e8 01 9b 4d 65 e0 09 d4 73 d7 ff 7f ...E...Me...s... 0340 2e 2b 08 7a a4 2f 58 19 23 de d0 02 89 c3 8e 19 .+.z./X.#....... 0350 96 6c a8 5c 09 93 10 17 ce 7b 2e 38 54 82 3a 03 .l.\.....{.8T.:. 0360 e5 83 69 84 56 94 9d ca 04 04 ec df 3c 8f f3 a2 ..i.V.......<... 0370 80 e5 65 be 88 71 9e 97 e1 00 1b 10 3b 90 89 61 ..e..q......;..a 0380 a9 81 98 17 f6 37 00 72 ec af 07 d6 54 10 63 a0 .....7.r....T.c. 0390 47 57 11 48 46 2d 1a b8 5c a3 ef 1c f6 d4 53 bd GW.HF-..\.....S. 03a0 55 86 25 32 68 80 33 56 64 f6 d4 ce fd 66 3d 9d U.%2h.3Vd....f=. 03b0 a9 84 5d 30 7b 85 fd 9e 91 b7 85 c6 72 e4 43 bb ..]0{.......r.C. 03c0 45 51 f2 81 4b b6 af 50 33 8b 9e ad 9a 24 a0 6b EQ..K..P3....$.k 03d0 b0 b8 d2 ae 4b 7f a4 96 7b d4 4b f6 5a ab b3 bd ....K...{.K.Z... 03e0 1d bd 89 2c 3d 1f f6 80 bb 58 df 4c 6e 01 36 24 ...,=....X.Ln.6$ 03f0 f0 0f 94 f7 01 ac 46 ec f2 0d 79 dc 31 78 d8 6b ......F...y.1x.k 0400 c9 be 51 e2 a2 3b 6d bb d3 0b 46 b7 e7 0e a3 66 ..Q..;m...F....f 0410 16 19 ac 2b 38 2b c2 5a 48 cc 94 d0 d4 47 dd 2a ...+8+.ZH....G.* 0420 0d 43 d8 45 23 04 02 a7 7e a9 68 a8 ec 64 9e b3 .C.E#...~.h..d.. 0430 35 20 93 57 47 ac 95 b9 f8 15 a0 52 c7 cf 3b 90 5 .WG......R..;. 0440 ab 03 0f 0f ad c5 9e 8e d5 35 c6 0b 6d ae 85 e7 .........5..m... 0450 8e bb 37 ed 54 3e 49 ef 82 94 33 35 5b 46 30 5a ..7.T>I...35[F0Z 0460 af 81 79 52 27 43 c9 fe 93 aa 6e 2c 15 84 e9 e5 ..yR'C....n,.... 0470 0f d4 d2 9b b4 6b 3f 81 51 53 e4 90 ab 53 ee 9c .....k?.QS...S.. 0480 86 c8 2f b2 68 77 94 6a ac 08 e1 ff 24 3b 73 5f ../.hw.j....$;s_ 0490 8a 58 0e 20 ad 06 31 34 ee 5c 5b 52 f4 4a 5c 9a .X. ..14.\[R.J\. 04a0 11 46 7e 39 a5 bb 3b 3e 79 70 94 9c 4d f5 12 07 .F~9..;>yp..M... 04b0 4c 43 76 19 9a 1f 27 8a ed 15 80 34 48 2b 95 14 LCv...'....4H+.. 04c0 df ee 4d ce 8f 20 3f b9 7a b6 f6 f7 cb de 4e 14 ..M.. ?.z.....N. 04d0 ae a0 24 6a 7d 92 03 54 98 1c 66 46 12 f3 fa 18 ..$j}..T..fF.... 04e0 be c8 38 ec 7e 0e 17 d9 e3 98 43 48 9a 14 80 98 ..8.~.....CH.... 04f0 64 86 43 42 c4 fa fe d4 17 dc b7 6b 1f 03 4c 0d d.CB.......k..L. 0500 6c 28 1a fd bd 7d 01 f4 3a 45 96 40 10 02 70 3c l(...}..:[email protected]< 0510 2f a6 15 e6 a2 56 cd 94 c4 92 90 fe d7 4f ee d6 /....V.......O.. 0520 97 31 3e ea 90 0b 09 8d 79 16 5a 71 35 2d 7a 2f .1>.....y.Zq5-z/ 0530 0a 52 c7 fe 66 18 b4 d1 b2 02 66 01 d3 19 ed 5b .R..f.....f....[ 0540 39 d4 2a 53 a7 a2 ae d5 fc 21 42 f4 b3 0e ad f5 9.*S.....!B..... 0550 84 88 b5 f1 73 a0 af c3 47 da dc a8 ed 8f 9a 89 ....s...G....... 0560 0d 8c 2e 92 05 63 8a 89 52 d6 59 61 29 7e 90 37 .....c..R.Ya)~.7 0570 9f 99 f3 1d ff 72 2b d9 61 41 6a 48 11 f2 64 99 .....r+.aAjH..d. 0580 10 01 52 80 d9 00 f4 40 95 1b 58 f6 57 f5 94 68 [email protected] 0590 c1 3c 96 39 d1 f3 eb 3f 2d b3 7e e7 94 83 17 bb .<.9...?-.~..... 05a0 21 53 07 61 f8 ba 8a 40 !S.a...@ No. Time Source Destination Protocol Length Info 3081 39.907698 192.168.10.1 192.168.10.245 Syslog 368 LOCAL1.INFO: Oct 3 19:44:57 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo.kaspersky.com" arg="/diffs/bases/av/kdb/i386/base0ebc.kdc.kou" sent_bytes="231" rcvd_bytes="3745" (HTTP-proxy-Visitor-00) Frame 3081: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:57 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo No. Time Source Destination Protocol Length Info 3082 39.907762 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2073 Ack=105813 Win=65535 Len=0 TSval=727881 TSecr=545225 Frame 3082: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2073, Ack: 105813, Len: 0 No. Time Source Destination Protocol Length Info 3083 39.907853 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=105813 Ack=2073 Win=1002 Len=1448 TSval=545225 TSecr=727881 Frame 3083: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 105813, Ack: 2073, Len: 1448 Data (1448 bytes) 0000 44 95 ed 48 b7 06 e4 ff 45 75 93 46 66 fc 18 fa D..H....Eu.Ff... 0010 e7 1b 8a 9c b3 07 71 d1 a4 c3 cf 88 f0 63 be 3e ......q......c.> 0020 cf 38 eb f8 76 cc 6b a4 0a 9b 1a 79 41 97 81 96 .8..v.k....yA... 0030 c6 a9 a7 9b 2c fe 62 6c ba 37 88 58 64 dc cb 25 ....,.bl.7.Xd..% 0040 4b 35 34 f8 6d f8 3f c0 62 b1 7e f5 de 0f b9 20 K54.m.?.b.~.... 0050 09 7c 5c 06 c1 f4 74 2e e4 f4 1f f8 59 27 38 f1 .|\...t.....Y'8. 0060 80 07 8f 54 4d e0 1e 87 90 08 bf 8d 2d aa f4 3e ...TM.......-..> 0070 2a c9 6d 3a 82 00 77 81 7e bb d5 37 b8 30 29 13 *.m:..w.~..7.0). 0080 1e 27 18 b6 f9 33 6f 2e 52 97 f4 34 e2 3f ae ea .'...3o.R..4.?.. 0090 9b a5 a9 f4 44 e1 2d cd 05 2a 9e fb e2 b4 37 f4 ....D.-..*....7. 00a0 1c 0b 87 1c 63 a6 4c ff ca f0 ff ca 8a c1 18 42 ....c.L........B 00b0 bf 96 0d 99 e7 5d 9a 88 a5 f8 28 1f 58 25 8f 4e .....]....(.X%.N 00c0 60 4c 5a 99 ce e6 d7 41 e1 38 e6 ef 0b d9 70 65 `LZ....A.8....pe 00d0 16 be d2 1c 13 71 ff 99 d7 ec 58 31 7b 90 9c ad .....q....X1{... 00e0 61 ef 24 fe 5f 9e d9 6c 4c 81 92 0e d4 50 e3 fd a.$._..lL....P.. 00f0 12 cc 64 bf d1 0e d8 55 1b 2c 6c c6 14 28 7a 06 ..d....U.,l..(z. 0100 2a 83 66 de a7 0f f7 1a 82 6c a7 a5 4f 10 0b 91 *.f......l..O... 0110 45 1b de d4 bd ac e2 4d 60 2f 64 61 6f 07 31 b9 E......M`/dao.1. 0120 07 15 e3 52 7f 64 8c 4c bb 10 ba fc 59 16 3a df ...R.d.L....Y.:. 0130 79 7b 8e 69 aa 2c a3 a5 75 83 67 60 33 2a c2 9e y{.i.,..u.g`3*.. 0140 ff cf dc 6f 64 84 35 46 94 94 0d 19 4c 30 8f 3a ...od.5F....L0.: 0150 2e ff 64 fb b9 b6 d0 6e 67 16 1c bc 25 cd f2 8c ..d....ng...%... 0160 c6 cc 14 40 c4 a5 b7 7d 26 76 2d dc e2 7d 83 6f ...@...}&v-..}.o 0170 0c 4e 1e 4c 27 91 9c c9 75 25 24 15 45 92 72 83 .N.L'...u%$.E.r. 0180 c1 51 57 48 22 3a 69 8a 13 9d 93 02 cb a9 a3 23 .QWH":i........# 0190 16 c0 c7 49 2c 33 c0 b7 64 98 16 8e 80 0d 00 f8 ...I,3..d....... 01a0 ec 96 55 98 15 21 be 11 d5 42 ec 00 b3 54 70 d1 ..U..!...B...Tp. 01b0 e7 10 c8 56 31 2d f9 3f 27 ae 5d 31 06 6e 29 11 ...V1-.?'.]1.n). 01c0 3c 05 6a fc 73 a1 a7 ae a1 a9 bd 59 85 3e 23 d9 <.j.s......Y.>#. 01d0 a4 4c 4b 8e 45 8a 5b f9 0c 43 ed 0c 3b 99 ab 54 .LK.E.[..C..;..T 01e0 71 1d 20 2f db 38 2c 0a 3f 41 34 a4 a2 bd 95 7c q. /.8,.?A4....| 01f0 c4 a0 af c9 aa db 14 eb d7 b2 d6 49 03 a8 aa 08 ...........I.... 0200 c3 d0 35 50 96 e0 a4 cf b6 43 49 32 45 72 b6 6d ..5P.....CI2Er.m 0210 0d 84 5e 06 12 18 e7 8f 9a f5 26 24 50 72 a0 78 ..^.......&$Pr.x 0220 f2 53 f9 9f 2a 97 6c 51 f2 95 d0 a0 5e 46 a8 dc .S..*.lQ....^F.. 0230 82 2c 7e 15 4c cb 13 12 d0 f2 3a e1 82 75 6c 4e .,~.L.....:..ulN 0240 22 14 71 84 b4 8f f7 e5 e4 e6 d7 f4 14 1d 0c 58 ".q............X 0250 ef 20 01 54 6c 0d 43 0b 70 55 41 39 6c 71 c2 4d . .Tl.C.pUA9lq.M 0260 b5 13 68 0a 61 37 c3 d9 18 b5 9d e3 66 94 3a 1b ..h.a7......f.:. 0270 98 91 91 38 31 e4 53 2b 90 8e 16 75 62 5d 5e a5 ...81.S+...ub]^. 0280 68 63 f0 0c b9 e1 2c 98 22 3e fa 21 24 ab 76 a0 hc....,.">.!$.v. 0290 23 fd ef 86 83 f3 84 a0 39 02 ed 1f 9c 53 db 67 #.......9....S.g 02a0 05 e2 30 be 78 ea 49 c9 3b f6 88 79 be ad b6 52 ..0.x.I.;..y...R 02b0 ad 9d 76 12 41 c9 87 40 d1 0d 45 53 36 61 93 cb [email protected].. 02c0 2a ad 22 b5 5f f3 c9 79 42 e9 0d 4f 5d 49 47 2d *."._..yB..O]IG- 02d0 f9 3c 02 99 cd 0d 82 f0 2e fc de 97 19 9f b8 cf .<.............. 02e0 26 fe bf c3 06 0f 3b e3 cb 96 25 ea 4b 8f 39 12 &.....;...%.K.9. 02f0 8f f4 d0 15 d2 07 f2 1c bb b7 b4 d1 0d 2a 5f 93 .............*_. 0300 96 8e 63 76 e8 0a 19 ba f3 9e fd 7c 00 8f de 9d ..cv.......|.... 0310 dc b2 8e 07 89 10 7e da 08 94 ab 3f 8e c6 ce 0a ......~....?.... 0320 bb c7 7c e4 94 df f0 96 e1 ba d2 43 1a b0 22 1b ..|........C..". 0330 b7 4b 6e 44 3f 92 4e 50 fa 08 31 b7 ca 5f e5 81 .KnD?.NP..1.._.. 0340 cf 4e 3f 80 48 3f ff ed ee 9b cc 38 0f a0 9d ea .N?.H?.....8.... 0350 27 10 d5 76 9c f8 59 90 c9 7f 71 ac 62 ce cf 54 '..v..Y...q.b..T 0360 f3 9a c2 42 23 82 20 cb 4b 17 1d f6 34 03 ae 6d ...B#. .K...4..m 0370 89 9e eb 91 08 a3 1e c3 16 d7 19 df a8 50 b1 c3 .............P.. 0380 2b cb 97 8f 59 69 56 c9 cc b0 1a 67 4e cf 3f 03 +...YiV....gN.?. 0390 1d bd c0 23 d3 40 26 77 aa 70 65 e0 59 a9 58 be ...#.@&w.pe.Y.X. 03a0 d4 58 c0 1c f0 bb 9b a3 25 d1 86 5c de 2b 27 54 .X......%..\.+'T 03b0 3c f2 5a f5 fd e0 db ef fd 36 4a bf af 3f f4 56 <.Z......6J..?.V 03c0 b6 53 86 48 dc 2a 2d 63 7c 55 9a 52 dd 3a 4c 76 .S.H.*-c|U.R.:Lv 03d0 c5 33 ab fd c1 c9 04 8b 95 48 25 c2 25 fc 14 a5 .3.......H%.%... 03e0 5d c1 cc e7 58 4f d8 37 f1 bc 96 69 2f b0 5d df ]...XO.7...i/.]. 03f0 1b 6c 85 35 ff 17 ba e2 1c c2 c1 70 e8 5e c3 77 .l.5.......p.^.w 0400 6c 8d 32 63 ba 64 eb de 75 3c 3e 15 b9 46 6b 1c l.2c.d..u<>..Fk. 0410 59 2c 29 9e fe dd d3 21 37 56 d8 a7 66 c8 5a f2 Y,)....!7V..f.Z. 0420 ee 43 94 e2 fd 9a 1a e2 3b 1e b2 42 48 5b 63 40 .C......;..BH[c@ 0430 4f 67 c4 0b 9c 88 43 5f 32 e1 c2 ca 64 cb 31 17 Og....C_2...d.1. 0440 50 5b af e3 4a fb 8c 1c 66 bf 78 c6 6d 5b 66 73 P[..J...f.x.m[fs 0450 3c a3 af 0a e4 34 bc 3b 55 b8 cc aa ed de ac 72 <....4.;U......r 0460 6f 60 37 85 8f 5c 80 a3 b5 ac 56 25 d5 c9 10 dd o`7..\....V%.... 0470 cc 92 4d b0 46 e5 23 3f ff f1 01 f5 61 6f 20 28 ..M.F.#?....ao ( 0480 1b 70 8a 56 e3 8d d7 40 6e 7f db 8c f1 9b 6a fa [email protected]. 0490 fc 4b a8 f5 e6 b7 2b 95 43 d3 87 6c b4 fd 25 42 .K....+.C..l..%B 04a0 f6 13 01 c9 ce f3 82 20 99 bb d5 10 da 35 58 9e ....... .....5X. 04b0 19 fa a0 09 87 a4 d4 49 9e 13 d5 82 45 f1 c2 de .......I....E... 04c0 f6 2c f6 79 14 7e 3a 40 6d a1 7d 88 b6 21 fe 4f .,.y.~:@m.}..!.O 04d0 9b 06 00 5e 50 e3 4a 36 ad 98 56 2f 64 3c 2b ef ...^P.J6..V/d<+. 04e0 26 ef 65 e3 83 98 5c d4 c9 61 a2 66 ae 30 41 84 &.e...\..a.f.0A. 04f0 3d e7 e1 62 df e1 36 d3 d0 5d be 54 a9 e7 a8 47 =..b..6..].T...G 0500 89 d1 70 f9 92 9c 80 ef 8f 95 f9 96 f8 22 8b 36 ..p..........".6 0510 6f a1 5e c5 0e 6e 5a e5 f2 e8 31 30 0c 41 3a 8c o.^..nZ...10.A:. 0520 e1 b4 38 9d f5 0d 6a 0b 8d bf 34 71 2f a3 27 7e ..8...j...4q/.'~ 0530 8a 5e a5 cf fb a2 64 0a 43 0d 44 18 c4 be 32 b4 .^....d.C.D...2. 0540 a1 2f 86 be 42 4d bb 3e f1 d2 89 c7 20 98 f5 52 ./..BM.>.... ..R 0550 5e 67 c3 1e 5f e2 74 5d 3e 55 2e 72 82 74 7b e3 ^g.._.t]>U.r.t{. 0560 8f 4b 54 79 9b 09 39 36 13 59 ac c7 da 42 e6 1b .KTy..96.Y...B.. 0570 0f 3e b5 13 e3 c7 29 6c 1a ed dc d9 05 25 20 e1 .>....)l.....% . 0580 05 1b a0 72 27 a3 a8 da 82 b5 9e 16 b9 cf 07 1d ...r'........... 0590 40 4a 97 52 0d da 8f 6a 1f 22 e9 9b db c9 90 e0 @J.R...j."...... 05a0 37 c6 28 64 20 ce dd 6d 7.(d ..m No. Time Source Destination Protocol Length Info 3084 39.907944 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=107261 Ack=2073 Win=1002 Len=1448 TSval=545225 TSecr=727881 Frame 3084: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 107261, Ack: 2073, Len: 1448 Data (1448 bytes) 0000 a5 cb 9b 89 89 4a b7 4a 99 f6 27 68 3d 94 56 6c .....J.J..'h=.Vl 0010 71 e3 f4 15 41 48 81 99 6f cb f3 c1 46 3f ad 2f q...AH..o...F?./ 0020 95 63 2f 6e 5e 6e a8 fd 12 0f 63 c9 b3 91 eb cf .c/n^n....c..... 0030 f0 6e 73 f5 bb 44 5d 21 2a 94 c7 22 6c 01 f6 42 .ns..D]!*.."l..B 0040 e5 fc 47 df 2d 86 aa 73 4e 6c 83 b2 2f 08 ee ed ..G.-..sNl../... 0050 75 ec 11 1a ee 7f cf 07 02 e1 ec 11 f6 6e 68 17 u............nh. 0060 14 05 f3 12 b5 f4 61 0f 89 79 34 2c 18 55 58 3d ......a..y4,.UX= 0070 f8 36 7d d5 12 e2 46 12 2f 7c e1 ff e3 80 cd 65 .6}...F./|.....e 0080 2f 89 7e 3b 28 04 ca 75 07 b9 06 87 9e 6d 77 77 /.~;(..u.....mww 0090 7b 46 86 2f 66 20 38 a1 20 97 16 f1 4c 80 bc 56 {F./f 8. ...L..V 00a0 f9 a2 ac 78 ba 03 df fa dc d1 dd 7a 09 6f 35 36 ...x.......z.o56 00b0 d7 f0 e7 71 4d 9e 32 a1 28 e7 51 99 43 77 97 e5 ...qM.2.(.Q.Cw.. 00c0 27 39 fe 49 a9 0f fe a6 74 76 9d 34 d1 95 b9 d1 '9.I....tv.4.... 00d0 6e 43 13 af 3a 0a 63 87 99 7d 76 84 a2 cd 19 2b nC..:.c..}v....+ 00e0 22 85 3f 42 5f 42 e8 90 d4 b0 1f 17 07 31 5f b4 ".?B_B.......1_. 00f0 f4 3e eb 67 6b 44 85 0a 16 26 34 56 37 ff c9 7a .>.gkD...&4V7..z 0100 1d 11 c1 45 38 35 7f 07 5d 16 7e 5c ae ad f9 f7 ...E85..].~\.... 0110 a3 5d b0 35 d2 9c 04 9f fe c8 d2 08 71 ca 6e f7 .].5........q.n. 0120 3d b5 07 b2 33 40 7c f3 f4 d6 6e 7d 11 02 56 fd =...3@|...n}..V. 0130 a5 fb e6 2d 70 64 98 70 9e 55 99 16 85 b8 8f 45 ...-pd.p.U.....E 0140 18 fe f7 fa 81 e6 c7 b0 0f 52 3a 89 80 8d 10 3e .........R:....> 0150 59 e8 cc 72 bd f7 f7 db 48 5f 7a fc 7c df 23 27 Y..r....H_z.|.#' 0160 9f 7d ac 93 c7 c1 c9 6e 4e 73 41 ac 9f 6c fc d7 .}.....nNsA..l.. 0170 eb c3 4a 78 a8 61 bf ad 3a 43 e4 fe d1 9a 7f 47 ..Jx.a..:C.....G 0180 d4 c7 24 5e ab 84 94 2c 80 cc 4c 13 9a 76 4c bd ..$^...,..L..vL. 0190 7b 15 d5 8e 2b db f3 41 3c 61 37 bd 8c 92 16 da {...+..A<a7..... 01a0 96 91 3c c1 d2 27 11 70 98 8f 4e 58 59 ab e2 cd ..<..'.p..NXY... 01b0 ad 32 3b dc 4f eb 32 4f c1 dd 05 aa f1 aa 1f 5f .2;.O.2O......._ 01c0 d6 2a 1f 8d f8 8e f6 22 08 ed 7a 60 25 3a e2 0e .*....."..z`%:.. 01d0 30 ab fc ae 22 2c 3c 33 80 59 c3 ca 59 62 69 15 0...",<3.Y..Ybi. 01e0 a8 3a 57 01 75 fc 5e 34 61 22 2a 3a 38 0a e3 39 .:W.u.^4a"*:8..9 01f0 77 30 33 46 63 35 e5 84 cd fe 2b ae 3e bd 87 4a w03Fc5....+.>..J 0200 58 0d 3c 7d 42 43 53 78 0a 7b 5a 60 1b 73 ac 51 X.<}BCSx.{Z`.s.Q 0210 33 ae dd 47 79 7d 57 2e 89 ca ff f9 85 f0 0d d8 3..Gy}W......... 0220 64 ac b2 e9 20 a9 48 cf 14 fe db b7 ae 4b 8b 09 d... .H......K.. 0230 ca 35 b5 73 c4 c5 00 7b 66 44 95 54 29 e5 30 a8 .5.s...{fD.T).0. 0240 c8 25 00 3e de 5c 5f 77 31 da 97 31 0c 5e 44 71 .%.>.\_w1..1.^Dq 0250 09 92 9c bb 67 c7 e0 c0 8d 45 f5 8d 08 71 09 db ....g....E...q.. 0260 c1 74 ec 38 e0 0b 98 44 6e b8 3c 44 b4 47 74 fa .t.8...Dn.<D.Gt. 0270 85 b6 ee f7 96 a3 85 fc 72 d5 54 02 07 fa ec 57 ........r.T....W 0280 2f 4a af 36 1f 61 10 84 fb bf 6a a1 bf cb a6 d9 /J.6.a....j..... 0290 d5 5e 65 33 fd 9a 4b 74 b9 c9 0c ab 4c ab 44 7d .^e3..Kt....L.D} 02a0 bd 39 98 96 0f 33 c0 92 76 42 45 e1 60 01 bc 1c .9...3..vBE.`... 02b0 34 54 45 f2 1a 1b c2 9a 77 4c 01 28 5c b2 a7 42 4TE.....wL.(\..B 02c0 64 62 bc f1 32 73 33 18 1d d9 4f 71 f5 d4 5d 28 db..2s3...Oq..]( 02d0 e7 7a 0e f3 ff f8 0a 7f bd 52 0a c4 3a 45 b8 42 .z.......R..:E.B 02e0 a8 c4 21 47 72 fe 6b fa 53 10 a0 59 e9 02 a0 07 ..!Gr.k.S..Y.... 02f0 f3 0e db 39 50 5e 34 68 72 68 f7 74 07 e1 0a 45 ...9P^4hrh.t...E 0300 2a 62 da 77 93 86 5e 27 04 ce a3 7d 61 7b 06 2f *b.w..^'...}a{./ 0310 22 45 35 2e 71 71 96 b4 e5 5c d2 f5 93 ed e0 c8 "E5.qq...\...... 0320 ea a3 fe a2 62 8d 71 ee e2 83 a5 bd cd e1 91 f3 ....b.q......... 0330 29 a0 da 7f bd e0 c2 48 74 b5 10 58 3f 89 25 21 )......Ht..X?.%! 0340 e0 9c 4c 52 14 01 25 bf b5 55 43 ba 36 4a 4e dd ..LR..%..UC.6JN. 0350 d7 25 a8 4d 5c dc 0c f3 43 b8 84 c6 9c 5c db 02 .%.M\...C....\.. 0360 4b 27 82 68 0d bc d0 a7 78 8f 2d 91 32 1b 6f c2 K'.h....x.-.2.o. 0370 0c f4 26 79 70 79 45 db cf 0a 9c b7 af a2 f5 84 ..&ypyE......... 0380 61 c2 57 b8 42 b5 0e 43 43 50 37 d3 60 64 e4 5c a.W.B..CCP7.`d.\ 0390 fb 52 c6 40 e1 6f 4b de 41 25 29 57 0a 18 45 77 [email protected]%)W..Ew 03a0 3f 6f 46 55 e2 50 00 5e be 33 c6 bf aa 6c b6 66 ?oFU.P.^.3...l.f 03b0 7c c1 fc 33 be 06 b2 bf 3b 02 56 5d 27 45 6c 2b |..3....;.V]'El+ 03c0 5e 1a 80 9d 5f 37 e5 1d b1 cd fe 94 27 e6 6f 6e ^..._7......'.on 03d0 68 83 c8 c7 00 83 f6 53 7d 82 02 4c 8d 5e 2f ae h......S}..L.^/. 03e0 a1 b3 90 74 e4 ad 5a 45 08 21 5f 65 08 fe 1a 00 ...t..ZE.!_e.... 03f0 f5 c7 54 83 84 39 4e 94 ea 33 57 6b 2d b0 09 5a ..T..9N..3Wk-..Z 0400 f8 1a aa 7a b1 34 15 c1 5d 6c 11 11 ae bd d7 62 ...z.4..]l.....b 0410 5b b6 cd 69 70 ba b9 b6 e7 fe 51 12 ef e1 f4 5d [..ip.....Q....] 0420 6c 72 4a 8c 21 e7 d4 05 af 68 30 33 3c df 6f f5 lrJ.!....h03<.o. 0430 30 31 71 92 3d 67 88 2a 28 19 5c ea 2d bf 71 7e 01q.=g.*(.\.-.q~ 0440 de 10 df 4d 1d 28 2c eb ed 11 8b 7d 4e f9 88 c8 ...M.(,....}N... 0450 dd c5 85 a6 f5 88 f8 d5 7a a0 19 c0 69 23 b4 23 ........z...i#.# 0460 2b fd e0 db 1f 92 ce 97 b0 26 1d e8 cb 8b 7f 36 +........&.....6 0470 f3 91 d4 06 47 6d aa 9c 09 8a 65 f7 06 c4 80 b8 ....Gm....e..... 0480 c5 a7 3b 09 28 fe 37 10 5b 26 e1 e3 7e 7a 8c 31 ..;.(.7.[&..~z.1 0490 45 dd e4 f7 6b 00 22 bc fb 84 94 67 8a 31 a7 20 E...k."....g.1. 04a0 fe 52 0f 04 8c e9 a7 37 4b 1f 60 d1 67 d2 5b ba .R.....7K.`.g.[. 04b0 ad d1 fc 18 94 fc 50 ac 8c b7 16 71 1a 3f 6e bd ......P....q.?n. 04c0 d7 a7 b0 90 3d fe fc 8d 2a fb f6 47 a0 a8 3b fc ....=...*..G..;. 04d0 85 ce 97 b6 df a4 82 77 32 d4 99 8a 57 d3 a1 95 .......w2...W... 04e0 6d a6 d1 34 93 b9 f8 3d 98 b6 c3 94 8f c7 10 07 m..4...=........ 04f0 6f d5 d4 40 5c 6e b7 a1 e6 37 23 3b 3e 71 8f b7 o..@\n...7#;>q.. 0500 61 98 f4 e0 21 70 fa 59 3c 7d 94 e6 ba 21 4c 57 a...!p.Y<}...!LW 0510 bf e3 28 e2 fd 5f 87 f8 28 fc 5e d6 ec 36 f4 82 ..(.._..(.^..6.. 0520 d8 0c ce 46 31 77 a4 a4 a4 a8 79 95 5d 4c f3 bf ...F1w....y.]L.. 0530 f6 6f 02 2d 18 34 a8 b0 e1 52 6b 0b 14 c1 d3 83 .o.-.4...Rk..... 0540 a8 74 1e 31 84 90 65 cf 60 8e 1f 15 95 bd 17 a5 .t.1..e.`....... 0550 4e 00 53 f5 80 ca 10 e8 01 8d 5a 31 f5 e1 65 aa N.S.......Z1..e. 0560 bd 95 7a 2c 48 fd d2 bb 88 c2 78 16 34 47 f2 ce ..z,H.....x.4G.. 0570 28 96 e8 ae f9 eb 10 2e 0c 6e 94 45 08 29 8f 1b (........n.E.).. 0580 e6 f5 f6 7e 90 9a 28 9c 63 0b de 41 4e c0 e6 20 ...~..(.c..AN.. 0590 4a ca f1 fe 2b 2c d4 c3 38 ee bd 97 e1 22 72 a3 J...+,..8...."r. 05a0 f3 01 9c a3 e3 2e 58 de ......X. No. Time Source Destination Protocol Length Info 3085 39.908037 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=108709 Ack=2073 Win=1002 Len=1448 TSval=545225 TSecr=727881 Frame 3085: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 108709, Ack: 2073, Len: 1448 Data (1448 bytes) 0000 1d b8 bf 79 ed ec 6f b7 10 61 41 96 4e cd 1e 0d ...y..o..aA.N... 0010 41 3f a3 ac 0b 45 ca 0e 66 31 10 51 0a 2e e9 88 A?...E..f1.Q.... 0020 df 59 a3 05 6d 58 f5 04 7b 2b 43 d2 6a 32 6a 3c .Y..mX..{+C.j2j< 0030 e8 c2 5d 7e 25 98 e0 5e ce a8 4d b2 9d a8 26 f9 ..]~%..^..M...&. 0040 27 b4 c8 44 4e 9d 86 a3 ad c9 a3 94 86 bb f8 b8 '..DN........... 0050 7e d0 69 9c a6 c5 69 8c a3 63 c7 f9 11 21 36 62 ~.i...i..c...!6b 0060 b1 61 96 0e c5 d6 21 e5 f7 90 40 32 51 69 87 81 .a....!...@2Qi.. 0070 38 8c 77 16 3a 27 02 9e 3b 37 33 02 ff b5 e2 38 8.w.:'..;73....8 0080 04 26 0d ae a6 a1 7e 81 d9 0f 69 46 a9 66 01 88 .&....~...iF.f.. 0090 be 2e 7f c5 79 c1 17 fa 1d e2 45 b7 da 34 47 d4 ....y.....E..4G. 00a0 b2 77 23 9f 94 43 f9 14 f5 7c 40 c4 0c e5 e6 c5 .w#..C...|@..... 00b0 d0 60 4d 57 72 2d 72 c5 14 61 bf 75 5b a6 67 e6 .`MWr-r..a.u[.g. 00c0 4a fc ee 49 b6 6d ce dc f7 7b ca 71 21 6b db b1 J..I.m...{.q!k.. 00d0 7a 1d 88 aa 28 de 5a d2 d3 f5 63 cb 1f 6f 5a bb z...(.Z...c..oZ. 00e0 e2 a0 cc 44 ed 49 ca b3 5e 2f 23 5a db 92 15 d6 ...D.I..^/#Z.... 00f0 b7 9e da 23 eb 5a d4 55 23 0a 97 b9 0a 2a c5 dd ...#.Z.U#....*.. 0100 24 0d cf 48 6d ac d3 df 9d 8f e8 88 6b 13 9c 74 $..Hm.......k..t 0110 01 06 87 de 5c 5e f2 1e cb 37 f4 d7 f4 9d b6 75 ....\^...7.....u 0120 65 d5 b7 68 ad 95 de 22 6a f6 ea 66 05 8f db 27 e..h..."j..f...' 0130 a7 3e bd 98 0f cc d9 0c 0d f0 40 67 99 da 56 cd .>[email protected]. 0140 05 da 80 02 61 61 7a 7e c3 63 8b ca c8 60 18 5f ....aaz~.c...`._ 0150 74 ef e4 c9 91 28 9d 8e 0f f0 c5 37 8f 85 0a eb t....(.....7.... 0160 2f f9 42 8e 15 6b 20 bb 22 a0 ef c8 57 2a a1 e3 /.B..k ."...W*.. 0170 a4 52 4e e8 4a 0a 58 00 50 d9 33 97 0b 65 42 90 .RN.J.X.P.3..eB. 0180 1b 62 db 2e 39 4b c0 54 e1 a0 09 2c 4f 6d 7f ba .b..9K.T...,Om.. 0190 9b 21 f3 e6 6d a8 b2 9e d6 3e 8e 36 e5 3d 28 38 .!..m....>.6.=(8 01a0 92 0e 58 14 21 75 b0 e5 21 d3 63 02 11 3b cd 3a ..X.!u..!.c..;.: 01b0 4a ab 9d db 6a 8b c3 93 59 9c a3 1b 93 af da 7f J...j...Y....... 01c0 eb 19 53 f0 c6 22 db c9 f1 44 0d d3 c8 bd 6e 1c ..S.."...D....n. 01d0 53 c3 bc 17 94 92 0d c4 5b 09 01 9f ff 7c 19 3a S.......[....|.: 01e0 e0 a3 10 a9 01 21 31 4e f4 c0 bd 8b eb 37 2a ac .....!1N.....7*. 01f0 5b 47 28 ba 04 97 50 31 ba 33 f6 f1 4e 35 aa 56 [G(...P1.3..N5.V 0200 90 58 63 aa ff 22 74 98 45 0e e6 9e a4 e3 56 8d .Xc.."t.E.....V. 0210 6b f9 2e 37 fb ce f8 be 93 68 7b 36 f7 04 26 e1 k..7.....h{6..&. 0220 21 c3 11 9c 2a b9 bf c1 d5 37 1f d5 18 ae 0c e2 !...*....7...... 0230 d6 4c 9e c5 46 1a ae 0a 18 c2 c1 cf aa 5b 82 89 .L..F........[.. 0240 3a 34 dc 18 54 e9 ff cb 04 a9 3e 15 7b 3e c1 cb :4..T.....>.{>.. 0250 fa 3c ba 7b a3 f0 d9 15 a0 dc 3a 1b d2 bd c2 71 .<.{......:....q 0260 71 50 c9 2f e1 62 73 f3 90 fa d3 9c 78 d0 35 c1 qP./.bs.....x.5. 0270 3c 39 ce 5f ac 44 6b 5b d9 08 2b 08 f1 93 a3 2c <9._.Dk[..+...., 0280 81 67 b6 1d 85 11 96 bb 70 d2 f3 7a 39 77 dd 94 .g......p..z9w.. 0290 d7 75 e8 ba e8 df 99 97 93 71 4f 4c 82 e1 78 a1 .u.......qOL..x. 02a0 fa 22 b0 75 ef f5 3d 35 91 55 e1 0e a1 6d 5f 61 .".u..=5.U...m_a 02b0 26 75 59 ff d4 06 ec 16 e9 3d c3 f5 c4 73 6d 12 &uY......=...sm. 02c0 68 76 b0 b3 81 02 5b 13 7c 86 54 c9 ce dd ed 1a hv....[.|.T..... 02d0 9c f7 bd f5 bd b5 08 92 ec 1c b2 5d 03 04 8b 0e ...........].... 02e0 b9 56 93 09 f8 e6 c9 a8 58 8b 3d a7 26 e2 75 1c .V......X.=.&.u. 02f0 c9 3c da f0 5f 66 ed 47 8f 94 0a 47 15 1b 2b 66 .<.._f.G...G..+f 0300 5f 36 38 9a f1 ac d5 55 77 db c8 62 dc a7 35 c3 _68....Uw..b..5. 0310 42 60 96 a8 d0 37 0f d6 56 dc e4 f2 7c 77 f1 21 B`...7..V...|w.! 0320 ad 89 12 cf 94 13 5e 9c ff 0a 6d e1 a1 ab 21 07 ......^...m...!. 0330 39 d2 4c 12 ef 23 e2 c1 cc d0 65 1f 79 c4 4b 3c 9.L..#....e.y.K< 0340 38 28 83 e8 5b ff 2f ad c2 96 9d 40 70 6f 72 c4 8(..[./....@por. 0350 82 2a 7e 57 0a 56 02 63 cd 8a 6c 81 bc 5c 90 51 .*~W.V.c..l..\.Q 0360 9d 32 13 5a 32 5d 28 90 4f 1a 31 97 85 44 cb 85 .2.Z2](.O.1..D.. 0370 05 ff cc 3d 9b 5f ba 72 57 c3 f5 cc 0e 58 87 db ...=._.rW....X.. 0380 67 0b 32 27 67 16 9b 1f 97 de 12 9a c5 e6 3e e5 g.2'g.........>. 0390 2b 97 32 d7 15 f2 d3 ff b2 d7 5e 37 04 8a 98 1c +.2.......^7.... 03a0 48 9a 73 30 73 71 e5 d1 f0 6a 71 fc 21 cf 7a 06 H.s0sq...jq.!.z. 03b0 d2 99 c5 78 31 5d 29 07 22 e7 8d e3 4a 6c 7d a3 ...x1])."...Jl}. 03c0 02 19 2e 2e 71 cc 56 98 07 55 5d 06 9b 9c 86 61 ....q.V..U]....a 03d0 4a c4 61 82 ec 21 c7 34 90 a7 60 07 47 64 40 81 J.a..!.4..`.Gd@. 03e0 1c 58 19 f0 4a 71 4a 1f ca f7 18 d6 79 be 28 0e .X..JqJ.....y.(. 03f0 0d 48 88 d8 fd 1b b7 b0 5e 9a 6b 29 c7 c8 8c e4 .H......^.k).... 0400 04 31 74 07 fc 21 0a f4 4f 53 09 73 ff 36 47 f1 .1t..!..OS.s.6G. 0410 7b b7 cf 44 ce da 9e d1 0a fe ed f9 00 f8 83 90 {..D............ 0420 d7 a8 d5 70 6a 51 27 8f 4c dd 66 af 18 7a f1 f4 ...pjQ'.L.f..z.. 0430 42 c9 ab f7 16 e4 7f dc 2e e2 9f 39 f1 4f 3d e5 B..........9.O=. 0440 cb 32 1a 1f 8d ea 15 b6 ac 5b 37 1f 54 ae 2c 14 .2.......[7.T.,. 0450 ec 7c 76 f0 c6 e0 12 c5 43 8a 33 80 44 1e bc dc .|v.....C.3.D... 0460 f3 e8 99 fe 1c a4 0f e5 69 3a 71 4b 9a f5 00 6d ........i:qK...m 0470 33 3f f4 22 a0 68 b1 b6 60 57 d2 cf 0a 31 06 46 3?.".h..`W...1.F 0480 c4 47 4b 45 60 69 80 0d 91 9a 1f 17 f9 08 d9 86 .GKE`i.......... 0490 26 ef 27 8f 42 4d 3d ee f0 55 ab b0 c7 6b 42 83 &.'.BM=..U...kB. 04a0 1b 57 21 dc 1c 44 72 26 fd ce 76 0e ce e3 96 a3 .W!..Dr&..v..... 04b0 93 04 f0 e8 70 ec ca 7c a2 8d 68 0d 22 10 ba 47 ....p..|..h."..G 04c0 e4 39 ab ee 49 f4 c2 35 7b b3 de ea bc 4a 1d 84 .9..I..5{....J.. 04d0 17 a8 11 e7 27 d9 c3 6f df f5 10 1c cf 00 51 12 ....'..o......Q. 04e0 78 02 f4 4a 4a 4c c7 26 27 ce c9 ce 93 26 54 eb x..JJL.&'....&T. 04f0 17 d3 3f ad 05 30 50 31 57 b7 0f 40 10 c7 6c fa [email protected]. 0500 e2 40 b5 94 2b af 5c 6d aa 6a 05 aa 87 95 35 6e .@..+.\m.j....5n 0510 33 e5 c5 60 65 99 92 64 b4 eb 44 d4 c6 69 29 89 3..`e..d..D..i). 0520 dd 94 88 9c b0 e2 00 e6 7b 54 2e 55 01 13 23 36 ........{T.U..#6 0530 46 35 1a d5 51 94 a3 af 19 4b 09 5b 03 a3 2a fb F5..Q....K.[..*. 0540 79 0a e1 81 d3 5b 49 d1 61 eb 63 fa 2f 82 23 d4 y....[I.a.c./.#. 0550 03 c7 d8 74 39 8d 36 46 66 8a f6 bf 8b 98 a9 b8 ...t9.6Ff....... 0560 98 5b 71 b1 1d 99 c3 fd 68 5d 56 66 23 14 b7 81 .[q.....h]Vf#... 0570 9b 66 2c b6 ab 5c 3c 8a 74 8b 15 16 95 cc 34 9a .f,..\<.t.....4. 0580 9d 65 38 d3 5f 5f ca e9 21 5d 50 60 e2 04 db 1c .e8.__..!]P`.... 0590 2a 0a ee 0c 75 9c 24 3a 19 0c 88 b9 10 05 03 82 *...u.$:........ 05a0 8f 41 6b 48 e3 5c 0c 65 .AkH.\.e No. Time Source Destination Protocol Length Info 3086 39.908093 192.168.10.1 192.168.10.203 TCP 231 34433 > cds [PSH, ACK] Seq=110157 Ack=2073 Win=1002 Len=165 TSval=545225 TSecr=727881 Frame 3086: 231 bytes on wire (1848 bits), 231 bytes captured (1848 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 110157, Ack: 2073, Len: 165 Data (165 bytes) 0000 e2 22 0c 58 51 bc 5a ce a0 2c 0c 71 40 63 2d 53 .".XQ.Z..,.q@c-S 0010 d3 9a 7b 42 85 ac 5c cf 1b 9b ac 45 18 76 0f 82 ..{B..\....E.v.. 0020 79 59 d2 2a da ca 38 95 60 19 03 88 e9 2e 90 ae yY.*..8.`....... 0030 42 7c 5e b7 f2 fe 51 dc b7 b4 e6 2e f8 96 dc e4 B|^...Q......... 0040 d5 30 60 49 15 19 1b f8 00 a4 85 61 42 a3 66 e6 .0`I.......aB.f. 0050 1a d9 ac 53 89 0f 31 08 c7 54 51 04 06 29 04 21 ...S..1..TQ..).! 0060 84 9a 03 e3 17 e2 51 3c dd 2e d4 72 11 d4 f6 03 ......Q<...r.... 0070 03 2b cc cc 27 61 3b a1 c4 5f 5e 8c cf a4 b3 a0 .+..'a;.._^..... 0080 89 84 14 21 45 44 4d 27 0a a0 d4 4a 06 f9 88 b7 ...!EDM'...J.... 0090 21 ec dc ab 42 0a 9e 28 7d d6 29 73 df a5 73 48 !...B..(}.)s..sH 00a0 b8 dd 74 4f 36 ..tO6 No. Time Source Destination Protocol Length Info 3087 39.908143 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2073 Ack=108709 Win=65535 Len=0 TSval=727881 TSecr=545225 Frame 3087: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2073, Ack: 108709, Len: 0 No. Time Source Destination Protocol Length Info 3088 39.908193 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2073 Ack=110322 Win=65535 Len=0 TSval=727881 TSecr=545225 Frame 3088: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2073, Ack: 110322, Len: 0 No. Time Source Destination Protocol Length Info 3089 39.915768 192.168.10.115 64.74.103.129 TCP 60 cogsys-lm > https [ACK] Seq=75 Ack=75 Win=65535 Len=0 Frame 3089: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.115 (192.168.10.115), Dst: 64.74.103.129 (64.74.103.129) Transmission Control Protocol, Src Port: cogsys-lm (3377), Dst Port: https (443), Seq: 75, Ack: 75, Len: 0 No. Time Source Destination Protocol Length Info 3090 39.924316 192.168.10.220 192.168.0.5 NBNS 343 Name query response NBSTAT Frame 3090: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.0.5 (192.168.0.5) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 3091 39.933867 7x.x.x.1 192.168.10.220 ICMP 70 Destination unreachable (Host unreachable) Frame 3091: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 7x.x.x.1 (7x.x.x.1), Dst: 192.168.10.220 (192.168.10.220) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3092 39.941334 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=2073 Ack=110322 Win=65535 Len=74 TSval=727882 TSecr=545225 Frame 3092: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2073, Ack: 110322, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 ba d0 46 4c 9f 13 df fb 0b 1b 92 .... ..FL....... 0010 7d a3 c7 a4 79 62 7e ac 48 b5 7e 77 fc fa be 83 }...yb~.H.~w.... 0020 cc b5 4d c5 24 17 03 01 00 20 c8 f9 ea 98 60 e0 ..M.$.... ....`. 0030 34 61 bb 52 61 ad cb e6 aa bb 44 69 12 a2 a3 ac 4a.Ra.....Di.... 0040 63 80 d3 75 eb c8 64 88 59 46 c..u..d.YF No. Time Source Destination Protocol Length Info 3093 39.941401 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=110322 Ack=2147 Win=1002 Len=0 TSval=545234 TSecr=727882 Frame 3093: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 110322, Ack: 2147, Len: 0 No. Time Source Destination Protocol Length Info 3094 39.956967 192.168.10.1 192.168.10.245 Syslog 192 LOCAL1.WARNING: Oct 3 19:44:58 MyFirewall firewall: Deny 0-External Firebox 71 udp 20 247 10.10.7.213 7x.x.x.2 5300 21689 (Unhandled External Packet-00) Frame 3094: 192 bytes on wire (1536 bits), 192 bytes captured (1536 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.WARNING: Oct 3 19:44:58 MyFirewall firewall: Deny 0-External Firebox 71 udp 20 247 10.10.7.213 7x.x.x.2 5300 21689 (Unhandled External Packet-00) No. Time Source Destination Protocol Length Info 3095 40.051698 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 3095: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3096 40.051730 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 3096: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3097 40.071962 Dell_f6:3f:45 Broadcast ARP 60 Who has 192.168.10.1? Tell 192.168.10.206 Frame 3097: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3098 40.071998 Dell_f6:3f:45 Broadcast ARP 60 Who has 192.168.10.1? Tell 192.168.10.206 Frame 3098: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3099 40.072013 Watchgua_3c:4c:d8 Dell_f6:3f:45 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 3099: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3100 40.072142 192.168.10.206 184.91.99.226 TLSv1 88 Application Data Frame 3100: 88 bytes on wire (704 bits), 88 bytes captured (704 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.206 (192.168.10.206), Dst: 184.91.99.226 (184.91.99.226) Transmission Control Protocol, Src Port: https (443), Dst Port: 52960 (52960), Seq: 1, Ack: 1, Len: 34 Secure Sockets Layer No. Time Source Destination Protocol Length Info 3101 40.072196 184.91.99.226 192.168.10.206 TCP 60 52960 > https [ACK] Seq=1 Ack=4294967053 Win=46698 Len=0 Frame 3101: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 184.91.99.226 (184.91.99.226), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 52960 (52960), Dst Port: https (443), Seq: 1, Ack: 4294967053, Len: 0 No. Time Source Destination Protocol Length Info 3102 40.072569 Watchgua_3c:4c:d8 Dell_f6:3f:45 ARP 60 Who has 192.168.10.206? Tell 192.168.10.1 Frame 3102: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3103 40.072581 Dell_f6:3f:45 Watchgua_3c:4c:d8 ARP 60 192.168.10.206 is at 00:13:72:f6:3f:45 Frame 3103: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3104 40.136290 192.168.10.203 113.53.197.65 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 3104: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 113.53.197.65 (113.53.197.65) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 3105 40.315041 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 3105: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3106 40.315073 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 3106: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3107 40.331381 192.168.10.203 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 3107: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 3108 40.331600 192.168.10.203 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 3108: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 3109 40.645756 192.168.10.1 192.168.10.245 Syslog 368 LOCAL1.INFO: Oct 3 19:44:58 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo.kaspersky.com" arg="/diffs/bases/av/kdb/i386/baseee3c.kdc.poj" sent_bytes="231" rcvd_bytes="2294" (HTTP-proxy-Visitor-00) Frame 3109: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:58 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo No. Time Source Destination Protocol Length Info 3110 40.845873 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2276399360, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3110: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3111 40.845897 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2276399360, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3111: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3112 40.845910 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2276399360, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3112: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3113 40.845923 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2276399360, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3113: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3114 40.866614 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4145479936, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3114: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3115 40.866638 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4145479936, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3115: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3116 40.866651 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4145479936, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3116: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3117 40.866664 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4145479936, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3117: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3118 41.092226 192.168.10.1 192.168.10.245 Syslog 368 LOCAL1.INFO: Oct 3 19:44:59 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo.kaspersky.com" arg="/diffs/bases/av/kdb/i386/basef54c.kdc.bpm" sent_bytes="231" rcvd_bytes="6775" (HTTP-proxy-Visitor-00) Frame 3118: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:59 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo No. Time Source Destination Protocol Length Info 3119 41.193838 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 3119: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3120 41.315835 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 3120: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3121 41.331494 192.168.10.217 4.2.2.2 DNS 77 Standard query TXT _nfsv4idmapdomain Frame 3121: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.217 (192.168.10.217), Dst: 4.2.2.2 (4.2.2.2) User Datagram Protocol, Src Port: 51150 (51150), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 3122 41.350010 4.2.2.2 192.168.10.217 DNS 152 Standard query response, No such name Frame 3122: 152 bytes on wire (1216 bits), 152 bytes captured (1216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Oracle_86:77:66 (00:14:4f:86:77:66) Internet Protocol Version 4, Src: 4.2.2.2 (4.2.2.2), Dst: 192.168.10.217 (192.168.10.217) User Datagram Protocol, Src Port: domain (53), Dst Port: 51150 (51150) Domain Name System (response) No. Time Source Destination Protocol Length Info 3123 41.352705 Watchgua_3c:4c:d8 Oracle_86:77:66 ARP 60 Who has 192.168.10.217? Tell 192.168.10.1 Frame 3123: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Oracle_86:77:66 (00:14:4f:86:77:66) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3124 41.352719 Oracle_86:77:66 Watchgua_3c:4c:d8 ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 3124: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3125 41.423298 192.168.10.220 192.168.0.5 NBNS 343 Name query response NBSTAT Frame 3125: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.0.5 (192.168.0.5) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 3126 41.432372 7x.x.x.1 192.168.10.220 ICMP 70 Destination unreachable (Host unreachable) Frame 3126: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 7x.x.x.1 (7x.x.x.1), Dst: 192.168.10.220 (192.168.10.220) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3127 41.443564 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 3127: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3128 41.535511 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 3128: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3129 41.535544 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 3129: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3130 41.565873 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 3130: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3131 41.629129 192.168.10.1 192.168.10.245 Syslog 367 LOCAL1.INFO: Oct 3 19:44:59 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo.kaspersky.com" arg="/diffs/bases/av/kdb/i386/dailyc.kdc.xle" sent_bytes="229" rcvd_bytes="15611" (HTTP-proxy-Visitor-00) Frame 3131: 367 bytes on wire (2936 bits), 367 bytes captured (2936 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:59 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo No. Time Source Destination Protocol Length Info 3132 41.683671 192.168.10.220 208.67.222.222 DNS 85 Standard query PTR 69.37.125.93.in-addr.arpa Frame 3132: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 52137 (52137), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 3133 41.767214 192.168.10.1 192.168.10.245 Syslog 368 LOCAL1.INFO: Oct 3 19:44:59 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo.kaspersky.com" arg="/diffs/bases/av/kdb/i386/daily-ec.kdc.ahc" sent_bytes="231" rcvd_bytes="1858" (HTTP-proxy-Visitor-00) Frame 3133: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:59 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo No. Time Source Destination Protocol Length Info 3134 41.861679 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2293176576, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3134: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3135 41.861703 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2293176576, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3135: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3136 41.861715 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2293176576, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3136: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3137 41.861727 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2293176576, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3137: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3138 41.870199 192.168.10.1 192.168.10.245 Syslog 365 LOCAL1.INFO: Oct 3 19:44:59 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo.kaspersky.com" arg="/diffs/bases/av/kdb/i386/daily.kdc.boz" sent_bytes="228" rcvd_bytes="1026" (HTTP-proxy-Visitor-00) Frame 3138: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:59 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo No. Time Source Destination Protocol Length Info 3139 41.882277 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4162257152, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3139: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3140 41.882297 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4162257152, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3140: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3141 41.882310 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4162257152, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3141: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3142 41.882322 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4162257152, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3142: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3143 41.910288 192.168.10.206 184.91.99.226 TLSv1 332 [TCP Retransmission] Application Data, Application Data Frame 3143: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.206 (192.168.10.206), Dst: 184.91.99.226 (184.91.99.226) Transmission Control Protocol, Src Port: https (443), Dst Port: 52960 (52960), Seq: 4294967053, Ack: 1, Len: 278 Secure Sockets Layer No. Time Source Destination Protocol Length Info 3144 41.910340 184.91.99.226 192.168.10.206 TCP 60 52960 > https [ACK] Seq=1 Ack=35 Win=46559 Len=0 Frame 3144: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 184.91.99.226 (184.91.99.226), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 52960 (52960), Dst Port: https (443), Seq: 1, Ack: 35, Len: 0 No. Time Source Destination Protocol Length Info 3145 41.910378 184.91.99.226 192.168.10.206 TCP 60 [TCP Dup ACK 3144#1] 52960 > https [ACK] Seq=1 Ack=35 Win=46559 Len=0 Frame 3145: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 184.91.99.226 (184.91.99.226), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 52960 (52960), Dst Port: https (443), Seq: 1, Ack: 35, Len: 0 No. Time Source Destination Protocol Length Info 3146 42.042848 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 3146: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3147 42.042879 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 3147: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3148 42.117529 184.91.99.226 192.168.10.206 TLSv1 77 Encrypted Alert Frame 3148: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 184.91.99.226 (184.91.99.226), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 52960 (52960), Dst Port: https (443), Seq: 1, Ack: 35, Len: 23 Secure Sockets Layer No. Time Source Destination Protocol Length Info 3149 42.121630 184.91.99.226 192.168.10.206 TCP 60 52960 > https [FIN, ACK] Seq=24 Ack=35 Win=46559 Len=0 Frame 3149: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 184.91.99.226 (184.91.99.226), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 52960 (52960), Dst Port: https (443), Seq: 24, Ack: 35, Len: 0 No. Time Source Destination Protocol Length Info 3150 42.121664 192.168.10.206 184.91.99.226 TCP 60 https > 52960 [ACK] Seq=35 Ack=25 Win=64699 Len=0 Frame 3150: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.206 (192.168.10.206), Dst: 184.91.99.226 (184.91.99.226) Transmission Control Protocol, Src Port: https (443), Dst Port: 52960 (52960), Seq: 35, Ack: 25, Len: 0 No. Time Source Destination Protocol Length Info 3151 42.121692 192.168.10.206 184.91.99.226 TCP 60 https > 52960 [FIN, ACK] Seq=35 Ack=25 Win=64699 Len=0 Frame 3151: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.206 (192.168.10.206), Dst: 184.91.99.226 (184.91.99.226) Transmission Control Protocol, Src Port: https (443), Dst Port: 52960 (52960), Seq: 35, Ack: 25, Len: 0 No. Time Source Destination Protocol Length Info 3152 42.121732 184.91.99.226 192.168.10.206 TCP 60 52960 > https [ACK] Seq=25 Ack=36 Win=46559 Len=0 Frame 3152: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 184.91.99.226 (184.91.99.226), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 52960 (52960), Dst Port: https (443), Seq: 25, Ack: 36, Len: 0 No. Time Source Destination Protocol Length Info 3153 42.193573 184.91.99.226 192.168.10.206 TCP 62 52221 > https [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 3153: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 184.91.99.226 (184.91.99.226), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 52221 (52221), Dst Port: https (443), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 3154 42.193643 192.168.10.206 184.91.99.226 TCP 62 https > 52221 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 3154: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.206 (192.168.10.206), Dst: 184.91.99.226 (184.91.99.226) Transmission Control Protocol, Src Port: https (443), Dst Port: 52221 (52221), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 3155 42.216970 184.91.99.226 192.168.10.206 TCP 60 52221 > https [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 3155: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 184.91.99.226 (184.91.99.226), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 52221 (52221), Dst Port: https (443), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 3156 42.221598 184.91.99.226 192.168.10.206 TLSv1 142 Client Hello Frame 3156: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 184.91.99.226 (184.91.99.226), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 52221 (52221), Dst Port: https (443), Seq: 1, Ack: 1, Len: 88 Secure Sockets Layer No. Time Source Destination Protocol Length Info 3157 42.221715 192.168.10.206 184.91.99.226 TCP 1454 [TCP segment of a reassembled PDU] Frame 3157: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.206 (192.168.10.206), Dst: 184.91.99.226 (184.91.99.226) Transmission Control Protocol, Src Port: https (443), Dst Port: 52221 (52221), Seq: 1, Ack: 89, Len: 1400 No. Time Source Destination Protocol Length Info 3158 42.221751 192.168.10.206 184.91.99.226 TLSv1 336 Server Hello, Certificate, Server Hello Done Frame 3158: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.206 (192.168.10.206), Dst: 184.91.99.226 (184.91.99.226) Transmission Control Protocol, Src Port: https (443), Dst Port: 52221 (52221), Seq: 1401, Ack: 89, Len: 282 [2 Reassembled TCP Segments (1682 bytes): #3157(1400), #3158(282)] Secure Sockets Layer No. Time Source Destination Protocol Length Info 3159 42.221792 184.91.99.226 192.168.10.206 TCP 60 52221 > https [ACK] Seq=89 Ack=1683 Win=91758 Len=0 Frame 3159: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 184.91.99.226 (184.91.99.226), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 52221 (52221), Dst Port: https (443), Seq: 89, Ack: 1683, Len: 0 No. Time Source Destination Protocol Length Info 3160 42.221832 184.91.99.226 192.168.10.206 TCP 60 [TCP Window Update] 52221 > https [ACK] Seq=89 Ack=1683 Win=93440 Len=0 Frame 3160: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 184.91.99.226 (184.91.99.226), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 52221 (52221), Dst Port: https (443), Seq: 89, Ack: 1683, Len: 0 No. Time Source Destination Protocol Length Info 3161 42.251860 184.91.99.226 192.168.10.206 TLSv1 236 Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message Frame 3161: 236 bytes on wire (1888 bits), 236 bytes captured (1888 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 184.91.99.226 (184.91.99.226), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 52221 (52221), Dst Port: https (443), Seq: 89, Ack: 1683, Len: 182 Secure Sockets Layer No. Time Source Destination Protocol Length Info 3162 42.254829 192.168.10.206 184.91.99.226 TLSv1 97 Change Cipher Spec, Encrypted Handshake Message Frame 3162: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.206 (192.168.10.206), Dst: 184.91.99.226 (184.91.99.226) Transmission Control Protocol, Src Port: https (443), Dst Port: 52221 (52221), Seq: 1683, Ack: 271, Len: 43 Secure Sockets Layer No. Time Source Destination Protocol Length Info 3163 42.254878 184.91.99.226 192.168.10.206 TCP 60 52221 > https [ACK] Seq=271 Ack=1726 Win=93396 Len=0 Frame 3163: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 184.91.99.226 (184.91.99.226), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 52221 (52221), Dst Port: https (443), Seq: 271, Ack: 1726, Len: 0 No. Time Source Destination Protocol Length Info 3164 42.274929 192.168.10.1 192.168.10.245 Syslog 358 LOCAL1.INFO: Oct 3 19:45:00 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo.kaspersky.com" arg="/diffs/bases/apu/apu0025.dat.kjc" sent_bytes="222" rcvd_bytes="552" (HTTP-proxy-Visitor-00) Frame 3164: 358 bytes on wire (2864 bits), 358 bytes captured (2864 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:00 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo No. Time Source Destination Protocol Length Info 3165 42.298244 184.91.99.226 192.168.10.206 TLSv1 597 Application Data Frame 3165: 597 bytes on wire (4776 bits), 597 bytes captured (4776 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 184.91.99.226 (184.91.99.226), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 52221 (52221), Dst Port: https (443), Seq: 271, Ack: 1726, Len: 543 Secure Sockets Layer No. Time Source Destination Protocol Length Info 3166 42.340313 192.168.10.190 64.74.103.148 TLSv1 91 Application Data Frame 3166: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.190 (192.168.10.190), Dst: 64.74.103.148 (64.74.103.148) Transmission Control Protocol, Src Port: wsmlb (3806), Dst Port: https (443), Seq: 38, Ack: 38, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 3167 42.340379 64.74.103.148 192.168.10.190 TCP 60 https > wsmlb [ACK] Seq=38 Ack=75 Win=65535 Len=0 Frame 3167: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Internet Protocol Version 4, Src: 64.74.103.148 (64.74.103.148), Dst: 192.168.10.190 (192.168.10.190) Transmission Control Protocol, Src Port: https (443), Dst Port: wsmlb (3806), Seq: 38, Ack: 75, Len: 0 No. Time Source Destination Protocol Length Info 3168 42.340603 Watchgua_3c:4c:d8 IntelCor_ed:1a:23 ARP 60 Who has 192.168.10.190? Tell 192.168.10.1 Frame 3168: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3169 42.340650 IntelCor_ed:1a:23 Watchgua_3c:4c:d8 ARP 60 192.168.10.190 is at 00:13:20:ed:1a:23 Frame 3169: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3170 42.457061 192.168.10.206 184.91.99.226 TCP 60 https > 52221 [ACK] Seq=1726 Ack=814 Win=64722 Len=0 Frame 3170: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.206 (192.168.10.206), Dst: 184.91.99.226 (184.91.99.226) Transmission Control Protocol, Src Port: https (443), Dst Port: 52221 (52221), Seq: 1726, Ack: 814, Len: 0 No. Time Source Destination Protocol Length Info 3171 42.683598 192.168.10.246 65.32.1.65 DNS 85 Standard query PTR 69.37.125.93.in-addr.arpa Frame 3171: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 58549 (58549), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 3172 42.810770 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 3172: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3173 42.810802 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 3173: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3174 42.820395 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-08.geo.kaspersky.com Frame 3174: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 64856 (64856), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 3175 42.820584 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-08.geo.kaspersky.com Frame 3175: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 64856 (64856), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 3176 42.877131 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2309953792, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3176: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3177 42.877154 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2309953792, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3177: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3178 42.877167 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2309953792, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3178: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3179 42.877180 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2309953792, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3179: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3180 42.898042 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4179034368, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3180: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3181 42.898064 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4179034368, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3181: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3182 42.898076 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4179034368, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3182: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3183 42.898088 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4179034368, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3183: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3184 42.923281 192.168.10.220 192.168.0.5 NBNS 343 Name query response NBSTAT Frame 3184: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.0.5 (192.168.0.5) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 3185 42.932617 7x.x.x.1 192.168.10.220 ICMP 70 Destination unreachable (Host unreachable) Frame 3185: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 7x.x.x.1 (7x.x.x.1), Dst: 192.168.10.220 (192.168.10.220) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3186 43.046742 65.32.1.65 192.168.10.246 DNS 141 Standard query response, No such name Frame 3186: 141 bytes on wire (1128 bits), 141 bytes captured (1128 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 58549 (58549) Domain Name System (response) No. Time Source Destination Protocol Length Info 3187 43.047445 192.168.10.203 93.125.37.69 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 3187: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 93.125.37.69 (93.125.37.69) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 3188 43.141329 192.168.10.1 192.168.10.245 Syslog 361 LOCAL1.INFO: Oct 3 19:45:01 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo.kaspersky.com" arg="/diffs/bases/as/pas4/base.keb._1i" sent_bytes="223" rcvd_bytes="95341" (HTTP-proxy-Visitor-00) Frame 3188: 361 bytes on wire (2888 bits), 361 bytes captured (2888 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:01 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo No. Time Source Destination Protocol Length Info 3189 43.152207 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=3319 Ack=249497 Win=12579 Len=0 Frame 3189: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3319, Ack: 249497, Len: 0 No. Time Source Destination Protocol Length Info 3190 43.152238 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3189#1] smtp > 23308 [ACK] Seq=3319 Ack=249497 Win=12579 Len=0 Frame 3190: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3319, Ack: 249497, Len: 0 No. Time Source Destination Protocol Length Info 3191 43.152270 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3191: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 250845, Ack: 3319, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3192 43.152301 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3192: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 252225, Ack: 3319, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3193 43.152331 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3193: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 253605, Ack: 3319, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3194 43.152363 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3194: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 254985, Ack: 3319, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3195 43.152392 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3195: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 256365, Ack: 3319, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3196 43.152422 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3196: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 257745, Ack: 3319, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3197 43.152451 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3197: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 259125, Ack: 3319, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3198 43.152483 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3198: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 260505, Ack: 3319, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3199 43.152512 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3199: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 261885, Ack: 3319, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3200 43.152541 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3189#2] smtp > 23308 [ACK] Seq=3319 Ack=249497 Win=12579 Len=0 Frame 3200: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3319, Ack: 249497, Len: 0 No. Time Source Destination Protocol Length Info 3201 43.152571 192.168.10.207 206.225.164.186 SMTP 348 S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 3201: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3319, Ack: 249497, Len: 294 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3202 43.152600 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=263265 Ack=3613 Win=46573 Len=0 Frame 3202: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 263265, Ack: 3613, Len: 0 No. Time Source Destination Protocol Length Info 3203 43.152630 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3201#1] smtp > 23308 [ACK] Seq=3613 Ack=249497 Win=12579 Len=0 Frame 3203: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3613, Ack: 249497, Len: 0 No. Time Source Destination Protocol Length Info 3204 43.152657 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3201#2] smtp > 23308 [ACK] Seq=3613 Ack=249497 Win=12579 Len=0 Frame 3204: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3613, Ack: 249497, Len: 0 No. Time Source Destination Protocol Length Info 3205 43.152689 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3201#3] smtp > 23308 [ACK] Seq=3613 Ack=249497 Win=12579 Len=0 Frame 3205: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3613, Ack: 249497, Len: 0 No. Time Source Destination Protocol Length Info 3206 43.152716 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3201#4] smtp > 23308 [ACK] Seq=3613 Ack=249497 Win=12579 Len=0 Frame 3206: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3613, Ack: 249497, Len: 0 No. Time Source Destination Protocol Length Info 3207 43.152744 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3201#5] smtp > 23308 [ACK] Seq=3613 Ack=249497 Win=12579 Len=0 Frame 3207: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3613, Ack: 249497, Len: 0 No. Time Source Destination Protocol Length Info 3208 43.152773 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3201#6] smtp > 23308 [ACK] Seq=3613 Ack=249497 Win=12579 Len=0 Frame 3208: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3613, Ack: 249497, Len: 0 No. Time Source Destination Protocol Length Info 3209 43.152800 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3201#7] smtp > 23308 [ACK] Seq=3613 Ack=249497 Win=12579 Len=0 Frame 3209: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3613, Ack: 249497, Len: 0 No. Time Source Destination Protocol Length Info 3210 43.152828 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3201#8] smtp > 23308 [ACK] Seq=3613 Ack=249497 Win=12579 Len=0 Frame 3210: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3613, Ack: 249497, Len: 0 No. Time Source Destination Protocol Length Info 3211 43.152859 206.225.164.186 192.168.10.207 SMTP 1402 [TCP Fast Retransmission] C: DATA fragment, 1348 bytes Frame 3211: 1402 bytes on wire (11216 bits), 1402 bytes captured (11216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 249497, Ack: 3613, Len: 1348 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3212 43.152887 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3201#9] smtp > 23308 [ACK] Seq=3613 Ack=249497 Win=12579 Len=0 Frame 3212: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3613, Ack: 249497, Len: 0 No. Time Source Destination Protocol Length Info 3213 43.152916 206.225.164.186 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 3213: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 250845, Ack: 3613, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3214 43.152946 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=3613 Ack=262076 Win=0 Len=0 Frame 3214: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3613, Ack: 262076, Len: 0 No. Time Source Destination Protocol Length Info 3215 43.152974 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=3613 Ack=262076 Win=0 Len=0 Frame 3215: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3613, Ack: 262076, Len: 0 No. Time Source Destination Protocol Length Info 3216 43.174199 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.32 Frame 3216: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3217 43.174229 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.32 Frame 3217: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3218 43.193869 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 3218: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3219 43.218982 192.168.10.31 192.168.20.3 UDP 776 Source port: 50764 Destination port: apc-3052 Frame 3219: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 34 39 3a 30 34 0a 53 52 3d 31 30 37 =19:49:04.SR=107 0060 43 0a 53 55 3d 32 44 38 32 43 36 43 42 0a 52 44 C.SU=2D82C6CB.RD 0070 3d 37 42 43 33 0a 54 41 3d 31 39 32 2e 31 36 38 =7BC3.TA=192.168 0080 2e 32 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a .20.3.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 34 .4C=207.3.50=034 00c0 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 3d 31 .0.43=029.1.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 37 3a 1/19/07.6A=0057: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 3d 31 746005443 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 36 30 2e 30 31 0a 34 44 3d .46=60.01.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 37 2e 33 0a 34 207.3.4E=207.3.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 33 2e .5C=028.0.2F=13. 01d0 39 30 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 90.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 000.09=60.00;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 42 44 41 44 46 32 36 35 44 34 35 39 37 32 31 =BDADF265D459721 02a0 35 45 38 35 46 30 38 43 41 39 32 33 32 34 37 37 5E85F08CA9232477 02b0 35 0a 4d 44 3d 39 33 62 33 65 39 39 62 35 63 63 5.MD=93b3e99b5cc 02c0 33 35 61 30 64 37 66 39 35 64 33 63 34 63 30 36 35a0d7f95d3c4c06 02d0 38 33 36 63 37 0a 3c 2f 42 4f 44 59 3e 0a 836c7.</BODY>. No. Time Source Destination Protocol Length Info 3220 43.219068 192.168.10.31 192.168.20.3 UDP 776 Source port: 50764 Destination port: apc-3052 Frame 3220: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 34 39 3a 30 34 0a 53 52 3d 31 30 37 =19:49:04.SR=107 0060 43 0a 53 55 3d 32 44 38 32 43 36 43 42 0a 52 44 C.SU=2D82C6CB.RD 0070 3d 37 42 43 33 0a 54 41 3d 31 39 32 2e 31 36 38 =7BC3.TA=192.168 0080 2e 32 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a .20.3.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 34 .4C=207.3.50=034 00c0 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 3d 31 .0.43=029.1.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 37 3a 1/19/07.6A=0057: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 3d 31 746005443 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 36 30 2e 30 31 0a 34 44 3d .46=60.01.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 37 2e 33 0a 34 207.3.4E=207.3.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 33 2e .5C=028.0.2F=13. 01d0 39 30 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 90.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 000.09=60.00;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 42 44 41 44 46 32 36 35 44 34 35 39 37 32 31 =BDADF265D459721 02a0 35 45 38 35 46 30 38 43 41 39 32 33 32 34 37 37 5E85F08CA9232477 02b0 35 0a 4d 44 3d 39 33 62 33 65 39 39 62 35 63 63 5.MD=93b3e99b5cc 02c0 33 35 61 30 64 37 66 39 35 64 33 63 34 63 30 36 35a0d7f95d3c4c06 02d0 38 33 36 63 37 0a 3c 2f 42 4f 44 59 3e 0a 836c7.</BODY>. No. Time Source Destination Protocol Length Info 3221 43.219159 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:15:43 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS2/50764 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 3221: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:15:43 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS2/50764 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 3222 43.220626 Watchgua_3c:4c:d8 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.1 Frame 3222: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3223 43.220843 Cisco_bb:96:6d Watchgua_3c:4c:d8 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 3223: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3224 43.283053 64.74.103.148 192.168.10.190 TLSv1 91 Application Data Frame 3224: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Internet Protocol Version 4, Src: 64.74.103.148 (64.74.103.148), Dst: 192.168.10.190 (192.168.10.190) Transmission Control Protocol, Src Port: https (443), Dst Port: wsmlb (3806), Seq: 38, Ack: 75, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 3225 43.315356 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 3225: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3226 43.418435 192.168.10.190 64.74.103.148 TCP 60 wsmlb > https [ACK] Seq=75 Ack=75 Win=64166 Len=0 Frame 3226: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.190 (192.168.10.190), Dst: 64.74.103.148 (64.74.103.148) Transmission Control Protocol, Src Port: wsmlb (3806), Dst Port: https (443), Seq: 75, Ack: 75, Len: 0 No. Time Source Destination Protocol Length Info 3227 43.443560 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 3227: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3228 43.541066 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 3228: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3229 43.541098 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 3229: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3230 43.565986 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 3230: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3231 43.696182 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 3231: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3613, Ack: 262076, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3232 43.696217 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=263265 Ack=3655 Win=46552 Len=0 Frame 3232: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 263265, Ack: 3655, Len: 0 No. Time Source Destination Protocol Length Info 3233 43.696249 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=3655 Ack=262076 Win=0 Len=0 Frame 3233: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3655, Ack: 262076, Len: 0 No. Time Source Destination Protocol Length Info 3234 43.756624 192.168.10.104 192.168.10.255 BROWSER 224 Become Backup Browser Frame 3234: 224 bytes on wire (1792 bits), 224 bytes captured (1792 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 3235 43.892720 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2326731008, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3235: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3236 43.892743 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2326731008, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3236: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3237 43.892756 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2326731008, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3237: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3238 43.892771 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2326731008, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3238: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3239 43.913439 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4195811584, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3239: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3240 43.913453 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4195811584, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3240: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3241 43.913465 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4195811584, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3241: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3242 43.913477 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4195811584, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3242: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3243 44.041087 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 3243: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3244 44.041118 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 3244: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3245 44.064497 192.168.10.1 192.168.10.245 Syslog 365 LOCAL1.INFO: Oct 3 19:45:02 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo.kaspersky.com" arg="/diffs/bases/as/pas4/data.check.keb.tuf" sent_bytes="229" rcvd_bytes="461" (HTTP-proxy-Visitor-00) Frame 3245: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:02 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo No. Time Source Destination Protocol Length Info 3246 44.157495 192.168.10.1 192.168.10.245 Syslog 367 LOCAL1.INFO: Oct 3 19:45:02 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo.kaspersky.com" arg="/diffs/bases/as/pas4/data.set.idn.keb.ia3" sent_bytes="231" rcvd_bytes="305" (HTTP-proxy-Visitor-00) Frame 3246: 367 bytes on wire (2936 bits), 367 bytes captured (2936 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:02 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo No. Time Source Destination Protocol Length Info 3247 44.162082 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 3247: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3248 44.162113 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 3248: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3249 44.332138 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=110322 Ack=2147 Win=1002 Len=1448 TSval=546331 TSecr=727882 Frame 3249: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 110322, Ack: 2147, Len: 1448 Data (1448 bytes) 0000 17 03 01 21 40 59 51 12 e9 a8 70 25 3e f4 96 65 [email protected]%>..e 0010 b3 2c ab f8 41 bb 0d 33 a6 59 44 fd 56 b3 cc 09 .,..A..3.YD.V... 0020 cd 09 b8 39 2c d6 c1 71 66 50 9b 8a 8f 4f 9b 24 ...9,..qfP...O.$ 0030 3b 3a 06 c2 9f c3 d4 0f a6 58 bb 8f 23 b7 db a2 ;:.......X..#... 0040 e9 d3 96 ef 0d be 62 2e 27 19 1e fb 70 a1 2d 98 ......b.'...p.-. 0050 1b 53 61 4e 0e bc e8 d8 dc a6 d4 75 1f 7a aa 53 .SaN.......u.z.S 0060 5c 03 c0 47 3b af 1f 3c c1 73 74 5b 19 4a d7 ef \..G;..<.st[.J.. 0070 f1 68 e4 42 59 91 98 f0 bb d1 13 8f 0c 2d ca c2 .h.BY........-.. 0080 e3 60 13 78 22 69 59 61 1e df 83 62 d0 d5 b4 0f .`.x"iYa...b.... 0090 76 1f 3a c2 6f 20 57 b9 7e 26 21 34 08 f5 a9 a3 v.:.o W.~&!4.... 00a0 41 d8 21 28 02 b9 69 a6 87 23 64 13 3d 6a 2c 5f A.!(..i..#d.=j,_ 00b0 8b 95 ca 28 42 a4 c2 fa be 16 e2 45 94 8e 10 fb ...(B......E.... 00c0 c9 2a ae 61 eb 5f 42 b2 0f 5e c4 26 3b 05 8f b1 .*.a._B..^.&;... 00d0 74 c7 f0 50 b8 75 dc e0 6f 06 e6 95 9b 5d c9 9b t..P.u..o....].. 00e0 83 3c 28 d3 40 e5 72 bb 4e f1 bd 43 06 18 1b 4f .<([email protected] 00f0 5f 17 ae aa e9 2e 40 6d c8 40 56 68 ce a8 e9 d1 _.....@m.@Vh.... 0100 a2 2b be 54 94 56 98 75 5d 1f 2e 61 19 4f 07 5f .+.T.V.u]..a.O._ 0110 f3 82 9b 03 3a 2b 52 f4 a4 11 f3 f9 d7 46 ed 8e ....:+R......F.. 0120 1f 23 e0 b9 0b 0e 2a c0 71 e0 25 e2 c8 ec e6 5e .#....*.q.%....^ 0130 f3 b0 76 b0 aa 0d 24 df d3 91 92 a6 4c e9 99 68 ..v...$.....L..h 0140 ae ab ac d7 d0 45 5e 84 02 dc 83 df d5 4e 5c f8 .....E^......N\. 0150 2d 13 c6 63 b0 0a a4 29 60 2c fd a3 95 38 71 14 -..c...)`,...8q. 0160 59 1b 7a aa 0a f2 ac 13 f2 fe 31 42 1c db de 26 Y.z.......1B...& 0170 29 f9 67 99 4a 89 7d a8 45 d7 65 bf 48 2b 72 00 ).g.J.}.E.e.H+r. 0180 d9 86 0a 95 70 6a b4 f0 28 d1 2a 8b b4 a2 b0 96 ....pj..(.*..... 0190 ed 10 1e 6d 2d 0a c8 23 ab 2d 13 04 b4 b1 cd 6e ...m-..#.-.....n 01a0 e8 3a 0c 10 07 2b b6 20 71 8c 5d 13 7d c2 a1 cd .:...+. q.].}... 01b0 64 d4 7f b7 c7 30 68 d3 e1 07 b2 83 97 bc 14 a2 d....0h......... 01c0 2c 2a f0 61 b4 79 11 d4 8c ec f1 16 55 d4 9b b2 ,*.a.y......U... 01d0 2f 94 bf 31 32 0f 79 4b c6 39 ce 14 dc b3 67 28 /..12.yK.9....g( 01e0 63 ec 9b 2a 7a 51 56 26 98 57 f1 66 37 81 2c 5e c..*zQV&.W.f7.,^ 01f0 cb fb f8 9b 87 f8 5a 5e 62 b7 1b ec b6 3a 5c e4 ......Z^b....:\. 0200 65 ef 57 07 a1 01 c2 a5 34 ab 8a 76 4a c9 d7 b9 e.W.....4..vJ... 0210 f5 03 5a db d0 09 ac 13 27 a9 e2 86 f5 e1 33 5e ..Z.....'.....3^ 0220 a7 93 4f 89 f4 f6 b7 0b 8d 0f 6f 91 a2 97 6b 5a ..O.......o...kZ 0230 1b 25 62 65 ae 8d b7 4d 74 6f 53 4e 07 74 47 c9 .%be...MtoSN.tG. 0240 4b b6 a1 66 c7 00 a4 ef 1d 03 c2 a5 0f 73 ef 1e K..f.........s.. 0250 7e 10 8b b9 a8 d0 69 e1 b0 32 14 c8 17 60 c0 86 ~.....i..2...`.. 0260 9d c7 b6 93 33 0d c9 6c 37 c0 fd 3d ce 23 2b bd ....3..l7..=.#+. 0270 37 bc 1b e3 44 7f c7 a7 9e d2 47 c3 16 4f 96 42 7...D.....G..O.B 0280 92 fa 39 76 61 23 d5 20 fe 78 7b 47 1c 62 8a 8f ..9va#. .x{G.b.. 0290 cd f7 74 f9 99 fc 76 32 02 56 49 4a 85 84 24 fa ..t...v2.VIJ..$. 02a0 a3 73 02 f7 e6 14 e3 38 96 c0 25 45 05 aa b1 47 .s.....8..%E...G 02b0 58 ca 5a 26 1c 9c af 91 91 4a 37 3d 8f 06 0a c5 X.Z&.....J7=.... 02c0 a3 88 06 aa 29 72 06 22 33 46 41 77 6f 2f cb 96 ....)r."3FAwo/.. 02d0 74 0b d8 12 8a 9a 5e 32 43 0e 70 59 80 ae 78 6a t.....^2C.pY..xj 02e0 9c ae 9b 98 8d 17 14 16 06 63 aa 7f 3a 26 f9 3c .........c..:&.< 02f0 ca b4 c3 6f 2e 04 38 20 32 8f a4 7e a6 e6 ee 58 ...o..8 2..~...X 0300 47 36 f1 3a 8b 00 24 33 a0 3b 3a 02 d0 01 30 5e G6.:..$3.;:...0^ 0310 c8 a7 ad f5 51 82 7d 5d b9 5b e0 f6 0c 5a 3f 77 ....Q.}].[...Z?w 0320 c0 1f 97 19 08 cb 9a 09 c8 f3 4c 65 5d fa 59 c0 ..........Le].Y. 0330 e5 a8 38 d5 36 d8 41 51 8d 73 c9 af d9 1f 34 fa ..8.6.AQ.s....4. 0340 e3 3f 6a 63 e7 31 af 25 17 4c eb f1 15 18 16 f7 .?jc.1.%.L...... 0350 30 5e 5f e1 18 e8 18 a9 c5 2c c0 01 24 a3 86 80 0^_......,..$... 0360 2d 1c 12 07 fa 29 d6 07 94 8e e3 13 db 4e b6 89 -....).......N.. 0370 39 d9 d0 2b 06 35 b1 79 bf 84 c0 b0 c8 ba a4 4f 9..+.5.y.......O 0380 80 a3 3e 7c 27 7b 59 0b 28 d3 9d 2a c8 12 96 fb ..>|'{Y.(..*.... 0390 11 5c dd 83 c8 d3 9e 0e 81 bd 3f 72 bd 8f 7e 81 .\........?r..~. 03a0 a1 e8 ad 64 37 6a ca fc a9 48 09 c6 39 21 fd 90 ...d7j...H..9!.. 03b0 6d 60 60 bb ee da 4e 88 45 16 b9 d5 5d de 50 e4 m``...N.E...].P. 03c0 2e a6 2f 23 df b3 e9 92 3c 55 a1 2f a0 39 aa a2 ../#....<U./.9.. 03d0 f6 a8 ae 3a 8c 7e f6 c2 ea 60 e7 4b cb 62 02 f2 ...:.~...`.K.b.. 03e0 73 f4 1b 0f a5 d1 10 45 3b e5 9f 54 ef 75 31 cc s......E;..T.u1. 03f0 27 33 63 9b d8 e3 50 45 0c 23 10 9f d5 a3 22 58 '3c...PE.#...."X 0400 a4 1e 04 ef c3 59 7c 12 a2 86 56 7a 29 52 9c a2 .....Y|...Vz)R.. 0410 b6 e8 ef f3 1a 9f da 39 56 df 7b 99 20 4a 67 d0 .......9V.{. Jg. 0420 fc 7d e4 90 91 f5 44 a9 4e c1 7b a4 48 8c d9 9a .}....D.N.{.H... 0430 b5 1f b2 36 9a fd 3b 82 ba 59 d4 5e 8d ba 64 3d ...6..;..Y.^..d= 0440 19 e1 dd aa fd b8 f0 94 68 e4 6f 30 b4 19 4b 5d ........h.o0..K] 0450 ec 27 63 30 f7 35 5b a3 c7 cf 6d 29 c0 85 25 ee .'c0.5[...m)..%. 0460 0c f0 61 6b 06 67 56 23 1b 5b 55 de 05 04 ce f9 ..ak.gV#.[U..... 0470 08 08 0b f7 a6 2f 1a 2c bd a7 65 bc 61 a4 a5 fb ...../.,..e.a... 0480 69 09 48 80 b5 c0 ba fd d5 c8 84 4e 30 d2 19 38 i.H........N0..8 0490 c6 41 b4 9c 36 b6 d9 0f 77 54 6a 78 b1 8a ad d3 .A..6...wTjx.... 04a0 14 49 80 c5 0f 38 34 3e c0 cb 3f d0 44 af c6 61 .I...84>..?.D..a 04b0 da c4 8a 65 68 e0 16 73 38 24 53 49 42 ff 3f be ...eh..s8$SIB.?. 04c0 63 85 87 a4 a6 28 6d 7f 4b 73 9d 49 dc d4 61 16 c....(m.Ks.I..a. 04d0 ec 84 20 76 30 5b bf ef 4b ff 2f 35 c1 2b 3c 3e .. v0[..K./5.+<> 04e0 31 c9 51 39 39 05 b0 9f e2 10 c7 46 1c 1f 41 4b 1.Q99......F..AK 04f0 ed a8 86 24 d3 4c 2a 95 54 58 40 c1 26 46 d3 15 ...$.L*.TX@.&F.. 0500 00 f2 af 0b 59 0c 49 ee ae d3 d1 5b 4d 48 6c 7b ....Y.I....[MHl{ 0510 5b 49 86 1d 89 ec 3e 59 fa 8d 11 fe f0 55 ce 74 [I....>Y.....U.t 0520 3c 94 5f 9d 3c 84 24 33 4c 7b 6e bd f5 98 42 e3 <._.<.$3L{n...B. 0530 69 53 1d f3 6a 7b 9e 33 a2 40 d2 91 49 fd 59 61 iS..j{.3.@xxxxxx 0540 18 3f a2 35 b2 ac 27 c5 af 57 81 4e ad a7 da cd .?.5..'..W.N.... 0550 f7 46 ed 54 25 42 3d 2d 8a a1 56 6b c7 d1 7c cc .F.T%B=-..Vk..|. 0560 45 a1 94 fc de 9c 47 c7 68 24 65 db ee 41 25 7c E.....G.h$e..A%| 0570 97 59 cd c0 d4 53 73 11 df ea 09 1d 46 ba ca b8 .Y...Ss.....F... 0580 53 b5 a9 7b 44 ef 8f bf 88 5e 1e d0 54 85 12 cf S..{D....^..T... 0590 89 7a 7a 09 58 89 48 70 b3 53 0d 33 f8 b1 fa e6 .zz.X.Hp.S.3.... 05a0 fe 89 92 fe 1f a1 4c 62 ......Lb No. Time Source Destination Protocol Length Info 3250 44.332259 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=111770 Ack=2147 Win=1002 Len=1448 TSval=546331 TSecr=727882 Frame 3250: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 111770, Ack: 2147, Len: 1448 Data (1448 bytes) 0000 8a ef 08 ed 47 e2 25 b5 4e 71 d2 69 06 83 ed 0a ....G.%.Nq.i.... 0010 2c 84 28 ec 2c e4 2f 9f 0c 91 e1 7d 96 6d 37 6e ,.(.,./....}.m7n 0020 42 61 27 24 76 74 e3 73 7a 10 5d a8 58 3f 8d 53 Ba'$vt.sz.].X?.S 0030 eb 23 44 a7 ec da d9 bd 72 eb d5 bd 5d 13 cd a9 .#D.....r...]... 0040 ba 36 53 81 39 a6 8e 19 9b 46 ea 60 62 01 60 05 .6S.9....F.`b.`. 0050 42 8e 00 bd 57 3a 0c b7 d3 32 08 72 41 ef 6c 8b B...W:...2.rA.l. 0060 37 df ab 13 22 34 a1 58 d5 c4 08 2f f3 31 91 af 7..."4.X.../.1.. 0070 ac fa 35 61 42 7e 4c 6b ae 40 e4 e2 63 6c 93 de ..5aB~Lk.@xxxx.. 0080 e5 a6 0b 3f bd 5e f9 17 d3 cd 20 75 05 de 96 cd ...?.^.... u.... 0090 9b c0 d7 0e cd f4 fb 19 02 5c a2 42 ab 49 ca b7 .........\.B.I.. 00a0 d4 94 4c df db 85 1b 0a 3c 74 8a f1 8b 8b c8 bf ..L.....<t...... 00b0 60 af 4a 81 38 3d 9d 4a 5f ad a8 38 f8 08 80 4c `.J.8=.J_..8...L 00c0 8e 5c 93 69 12 db c2 36 a0 50 f9 bf f5 25 1e f1 .\.i...6.P...%.. 00d0 2a 3f bc fe 1b 8d 1f 8b a4 c4 0d a8 40 a1 9e 35 *[email protected] 00e0 b4 54 69 1a 07 9f 7e 42 90 31 cf 1d af eb 64 ef .Ti...~B.1....d. 00f0 70 eb cb c2 d0 a6 fa e0 4c f1 a7 b0 ed 1e ef bf p.......L....... 0100 f7 c3 d6 8a d0 e5 e8 24 d8 dd 5b f3 04 d7 57 87 .......$..[...W. 0110 d1 a9 43 ba 7b 1a 51 5e 1f d8 15 f0 ab b2 14 71 ..C.{.Q^.......q 0120 ab 6c f4 87 e6 58 d9 67 01 ec 43 1d bc e1 29 a7 .l...X.g..C...). 0130 09 ab 09 2d f7 b6 23 0e f3 3a e5 3f c1 6c 20 25 ...-..#..:.?.l % 0140 f8 2c e3 ea d1 1d e3 b4 10 3b af 32 ee 53 0e 44 .,.......;.2.S.D 0150 67 ab 03 e7 b6 2a 53 ca 86 7c e3 bf 8c 2d 62 51 g....*S..|...-bQ 0160 de d1 c6 be f8 4e 9a a2 65 8f b7 8a 67 58 fb 38 .....N..e...gX.8 0170 65 9d c2 96 3c c5 9d f2 de 62 9d ce f4 7d 8b 8d e...<....b...}.. 0180 a8 d6 70 0e 1d ac 38 f9 69 17 94 ba 08 d1 9c c4 ..p...8.i....... 0190 c5 63 d4 06 a2 9c e5 0e 45 c4 03 e1 89 d4 e1 c0 .c......E....... 01a0 c3 0b 34 95 93 1d 83 4a c7 12 aa 2f 8b f5 6e aa ..4....J.../..n. 01b0 d3 a7 94 91 00 94 8f 12 b3 15 f3 cc c8 19 fb ef ................ 01c0 96 d3 64 32 48 83 a5 ab 7c 6e af 0e 8e 26 7c d8 ..d2H...|n...&|. 01d0 4d 80 12 a4 d6 7e 95 19 1b 90 0f 0c 62 b3 31 1b M....~......b.1. 01e0 ac a2 13 4c 00 63 07 b5 35 0d 6f 35 55 0d 61 5d ...L.c..5.o5U.a] 01f0 4b 61 61 85 1b 78 45 f3 5c 86 16 a0 0c aa 7a 55 Kaa..xE.\.....zU 0200 fb 07 01 73 cd 49 21 1b 88 1d ca 6b d8 de bf e3 ...s.I!....k.... 0210 e7 27 b9 e3 3b e8 58 c4 ae a0 6d 36 17 e1 73 f2 .'..;.X...m6..s. 0220 1a c3 51 6e 16 dc 79 12 eb f7 0e 09 59 d9 ec e1 ..Qn..y.....Y... 0230 1a c1 62 f8 47 83 4b ad 0e eb 62 d5 93 bd 93 11 ..b.G.K...b..... 0240 9a f1 05 c5 e0 66 a0 e8 80 e4 e1 74 6f 68 35 87 .....f.....toh5. 0250 56 ef f1 43 3c c9 43 9e 2e 75 27 5c c0 dd ff ae V..C<.C..u'\.... 0260 20 8e 60 aa c9 27 3d 22 70 46 07 d6 46 7d 2d e4 .`..'="pF..F}-. 0270 85 fe e0 56 77 0a fc ee cc cc 38 6b 29 19 73 fc ...Vw.....8k).s. 0280 23 9a 72 ea 35 ee f6 27 d5 9a c1 42 41 4a b8 65 #.r.5..'...BAJ.e 0290 2d f7 25 1f 90 4e f7 2e 7c 80 9b 23 ad c0 aa 58 -.%..N..|..#...X 02a0 96 32 23 c4 9c 97 5c 5b f3 85 24 19 3d b5 a0 05 .2#...\[..$.=... 02b0 65 ce c7 1c fd bc 95 1b 9b 74 c8 35 5a 7f a5 1a e........t.5Z... 02c0 87 7d 11 ac fb c7 9f 44 07 65 66 8b 75 d0 34 b9 .}.....D.ef.u.4. 02d0 83 39 dc f9 13 da 51 0e c3 b1 73 e0 c9 cb 6d ac .9....Q...s...m. 02e0 35 ac 9d 58 af 39 45 06 02 ae 31 7f 9d fd 0f b4 5..X.9E...1..... 02f0 c2 dc 6d 97 34 cd e7 27 cc 2e a5 77 e7 b5 8c a5 ..m.4..'...w.... 0300 82 e0 6b ea 3f ab 6b 6a 97 0c 09 96 14 9b 83 a8 ..k.?.kj........ 0310 95 1f 08 12 9c 75 dd ff 2b b6 ce e3 69 ac 61 c2 .....u..+...i.a. 0320 03 2f 64 34 0b 4b 44 96 4c eb 0f c6 e6 04 a9 c4 ./d4.KD.L....... 0330 50 e4 7f 4b dc 21 93 48 84 6d b3 40 43 68 8a 44 [email protected] 0340 17 93 6f 9e 26 27 b0 68 17 62 a2 f0 b6 a9 95 32 ..o.&'.h.b.....2 0350 aa ff ea 63 16 90 14 c4 75 a0 3b 9d a1 6a d8 b6 ...c....u.;..j.. 0360 84 f3 1a d6 2c ba 19 16 06 49 87 80 0d 3c ef e2 ....,....I...<.. 0370 a6 47 da 88 f1 14 da c7 23 48 a1 dc 8a aa 57 03 .G......#H....W. 0380 6e 9c b1 57 5f ac 4f bd 30 df 3b 92 49 bf 3b 03 n..W_.O.0.;.I.;. 0390 be e5 22 d2 79 e8 db 6a a2 bb ef 43 0e a2 cc e1 ..".y..j...C.... 03a0 96 8c c0 c1 93 fb 12 ec 8b e6 8d 55 c9 23 0e 5b ...........U.#.[ 03b0 05 39 bd 78 a5 e3 74 28 b8 cf dc b2 b3 ee fc 62 .9.x..t(.......b 03c0 e3 f6 57 cc 91 ef 6f 2b 6c cc 6a 86 1c 1b 51 30 ..W...o+l.j...Q0 03d0 14 63 6e 3e a0 e6 da d0 7f 3a c2 30 94 9e 22 4a .cn>.....:.0.."J 03e0 83 de 9a 7c 8a 02 d2 f9 f0 e3 09 4b 2f 70 92 00 ...|.......K/p.. 03f0 40 67 06 e8 ef c3 27 5e b2 2b 3a ce 4e 15 04 81 @g....'^.+:.N... 0400 ef d9 ab 81 72 13 3c 93 be 22 07 0a 68 d5 3e 48 ....r.<.."..h.>H 0410 1b 86 a3 ea 23 2b bf 6e 1a 46 84 5b 1f 1e 7e 1a ....#+.n.F.[..~. 0420 9f ef bd 4f 4d 2a 2a 5b 8a cc c2 55 d5 12 21 7a ...OM**[...U..!z 0430 31 33 2a d0 26 d7 19 16 c8 e9 c4 33 58 01 c1 af 13*.&......3X... 0440 ab 1f 5e 62 c6 ea be 6f 0c 18 1f 4d 7a df 19 bd ..^b...o...Mz... 0450 0d ed da 25 a5 1b e6 6e 0c b5 85 f3 46 84 8a 3b ...%...n....F..; 0460 f6 6c 6d b9 37 93 dd a7 18 37 b6 59 a1 23 23 85 .lm.7....7.Y.##. 0470 e0 e5 96 3d da 11 ce 65 db e8 91 95 44 90 53 91 ...=...e....D.S. 0480 ec b2 06 cc ef 62 dc 1c 6b 5b a0 70 5e 5a d3 47 .....b..k[.p^Z.G 0490 c3 a5 ef bc e1 c5 21 47 90 b1 68 c8 24 f9 5a cd ......!G..h.$.Z. 04a0 e9 ec a3 2e 25 91 94 e8 44 86 8d 89 1f 8b 36 3f ....%...D.....6? 04b0 d6 a1 93 4c e8 02 25 8a 2f 6c 96 df 22 1e fd fc ...L..%./l.."... 04c0 9b 30 43 e1 5d ba e6 bb 5b 12 de 09 51 5a 9e 15 .0C.]...[...QZ.. 04d0 91 bf 18 b6 63 78 0d ad 06 45 2b df 40 1c 54 08 [email protected]. 04e0 56 5f 54 5c 60 f3 55 3a d6 bb 5c bf 8e dd 31 e9 V_T\`.U:..\...1. 04f0 95 43 c9 28 ac 7f cb 62 67 85 c9 b5 8a dd ec 28 .C.(...bg......( 0500 43 44 9d b5 95 ff 4b a4 67 ba 90 b7 b5 47 18 d0 CD....K.g....G.. 0510 84 80 9b 91 e6 08 25 62 e7 9e d5 1c 34 05 60 48 ......%b....4.`H 0520 70 b4 02 af 43 61 ce 02 6a 56 4a 13 44 52 88 2e p...Ca..jVJ.DR.. 0530 ba f4 92 4d 00 d5 6d 26 7e f3 e8 1e 73 78 d8 8c ...M..m&~...sx.. 0540 89 7f fc e0 2b 65 33 6a 16 dd b8 a5 8d 0a d3 8a ....+e3j........ 0550 61 3b 79 c8 f2 87 28 cb ad 22 15 01 79 f3 8b b5 a;y...(.."..y... 0560 f8 62 39 1b 24 97 67 92 cb 10 82 1e de 80 e6 0d .b9.$.g......... 0570 6a 11 05 11 ee 1b 9f 8c 64 a4 41 2c 6a be bf ae j.......d.A,j... 0580 23 16 e0 ae aa 1f 98 49 41 31 3f 52 2e df 98 b4 #......IA1?R.... 0590 b0 b9 17 e8 4d 54 1b 30 6c e0 6e 25 11 b8 aa b3 ....MT.0l.n%.... 05a0 e3 9b 46 33 fc 0d d0 ce ..F3.... No. Time Source Destination Protocol Length Info 3251 44.332366 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=113218 Ack=2147 Win=1002 Len=1448 TSval=546331 TSecr=727882 Frame 3251: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 113218, Ack: 2147, Len: 1448 Data (1448 bytes) 0000 f4 69 12 df 1a 85 2b 18 5d a4 f7 0a e2 67 4c 0b .i....+.]....gL. 0010 bf 3e 42 ad d2 01 f5 9c 5b 32 5d f3 f6 7c 52 77 .>B.....[2]..|Rw 0020 ce d4 92 7a da 79 1b cb f4 75 b0 d7 15 66 ae e7 ...z.y...u...f.. 0030 cd 29 95 23 e1 2b 50 8f a4 23 a8 21 3a be e3 ae .).#.+P..#.!:... 0040 76 48 f2 6e 02 e7 f2 f5 38 d2 90 cf c5 ba be 87 vH.n....8....... 0050 69 80 51 0f 57 e9 82 ef 19 e7 dd ad 67 15 5b 06 i.Q.W.......g.[. 0060 3a e4 28 8c f1 ca 08 e1 b6 40 2d 59 6d 65 61 ee :.(......@-Ymea. 0070 74 4f 8c 05 88 df 0d a7 e1 9e 98 e5 3f e0 7c 13 tO..........?.|. 0080 2b 66 11 4e c6 e2 22 1f b0 92 a2 4a 9d 8d 97 d8 +f.N.."....J.... 0090 8f 67 1d ef 44 31 84 b0 86 04 29 3b 9d 69 7b a2 .g..D1....);.i{. 00a0 25 bd 64 ad b3 73 44 7c 62 09 80 4d 24 3a c4 7a %.d..sD|b..M$:.z 00b0 a6 11 c1 b9 c6 e0 ab 95 9f 2f 4f fb f0 42 59 1d ........./O..BY. 00c0 43 bd 9a 73 5f d8 bb 5c ba be 86 0d e9 10 91 af C..s_..\........ 00d0 43 8f 82 68 58 a5 bb 05 81 7c 11 39 20 c7 35 c3 C..hX....|.9 .5. 00e0 e8 d3 31 87 94 b2 c9 00 23 31 bb 22 a3 ae 31 c2 ..1.....#1."..1. 00f0 a6 4d 26 94 81 09 36 d0 a7 5e da 73 f0 94 80 42 .M&...6..^.s...B 0100 5a f9 d8 80 35 c3 32 2c 52 e3 b5 30 90 79 bc 6d Z...5.2,R..0.y.m 0110 05 de ea 10 30 11 97 a5 17 6d 63 41 9c f5 6d 20 ....0....mcA..m 0120 cf 1f 88 26 d7 dc e8 eb d6 7b 6a 7f ef 5f 03 6a ...&.....{j.._.j 0130 7d 21 f9 04 7c 65 3c 04 ed b0 31 27 e1 a3 20 07 }!..|e<...1'.. . 0140 38 6e 3b 20 f5 99 5b 5e e4 2d 6f ee 69 13 12 e4 8n; ..[^.-o.i... 0150 7a d8 ba 44 82 ca c5 3d 84 98 04 0a d1 23 df 65 z..D...=.....#.e 0160 ef cc a8 e6 18 fa db 1a 8d 28 00 65 61 53 bb fc .........(.eaS.. 0170 45 a2 b4 46 0e ca b5 d9 1f 0e f1 b1 d9 5a 8d 53 E..F.........Z.S 0180 57 26 12 d6 36 11 6d e7 55 99 ea 05 11 09 72 9f W&..6.m.U.....r. 0190 1e 04 af ff d1 a1 99 e6 3a 03 73 a2 5f ed 5d fa ........:.s._.]. 01a0 1d a9 a7 60 ea e4 65 7d 65 41 8d c9 2c 4d ac 16 ...`..e}eA..,M.. 01b0 67 b9 a5 79 74 a3 6b e0 3b c1 3f bc 89 69 89 9d g..yt.k.;.?..i.. 01c0 40 bc f9 28 1c 16 f6 89 40 74 ed e1 bf c9 e9 c0 @..(....@t...... 01d0 06 d3 09 8b f6 87 ec 25 b9 50 a8 bf a1 8d dc 51 .......%.P.....Q 01e0 aa e5 46 ec a3 35 68 7b 40 ec 38 c5 99 66 6e ac ..F..5h{@.8..fn. 01f0 4e 92 4e 27 40 e5 3d 10 5c 9f e4 83 e5 79 3c 0f N.N'@.=.\....y<. 0200 b8 70 73 f4 6c f8 bd de 6e 72 16 5b 86 d3 00 42 .ps.l...nr.[...B 0210 87 ad 89 df 45 a0 7c 25 ee 26 d9 7d 95 ab 2c d6 ....E.|%.&.}..,. 0220 6d 9a 06 74 27 48 4d ab bb 21 ed 8a cb 17 1a b9 m..t'HM..!...... 0230 d2 8c ea 8d 52 7b 7b c1 f7 c7 f7 3c 66 dc fa cf ....R{{....<f... 0240 3e 13 e4 ee 8f 1c 87 71 23 91 d0 f2 c0 f5 ee fc >......q#....... 0250 49 79 b9 0e 4d fb 7b 17 fa 52 2b 48 1a 01 39 43 Iy..M.{..R+H..9C 0260 f8 87 0c b7 5b e9 aa 30 76 29 43 7c a2 71 c2 4b ....[..0v)C|.q.K 0270 1a 28 de 6c 69 e2 3b 53 2d 95 65 0a cb b0 0f 33 .(.li.;S-.e....3 0280 c5 d6 7c d2 92 69 08 e3 8e 57 ac 4f d9 e4 e7 b4 ..|..i...W.O.... 0290 e5 da e1 b2 37 4a 01 76 db 93 b2 97 6e 96 68 67 ....7J.v....n.hg 02a0 56 82 1e a7 78 67 3f 03 60 85 da 02 c0 56 25 d3 V...xg?.`....V%. 02b0 7f 3b 27 97 bc 28 4e f7 dd a3 0b 8b 79 fc fc d6 .;'..(N.....y... 02c0 bd 45 bb 64 a0 71 8b 66 9c 0e ed 09 11 fe 37 89 .E.d.q.f......7. 02d0 76 57 a5 86 13 0b 82 4f 02 dd 5e 5e 39 b6 de d1 vW.....O..^^9... 02e0 ec 4f 1a 53 e5 c1 ba b5 bc 0e 39 8a a5 88 18 cc .O.S......9..... 02f0 ed fd 05 d2 46 94 2e 4c 93 cf 60 e2 cb 54 a5 95 ....F..L..`..T.. 0300 55 3d 71 42 ce 30 0d 1a 5a 7b 27 f1 4f 4e 73 22 U=qB.0..Z{'.ONs" 0310 47 90 95 de e9 e4 4a 84 69 ff d3 5b 50 ba 28 5d G.....J.i..[P.(] 0320 53 55 6f ff 52 a2 f6 ec a1 18 76 ce 97 e0 e9 ed SUo.R.....v..... 0330 d2 30 8b 65 58 20 2c ff e6 ed 2e 5f 92 d8 75 85 .0.eX ,...._..u. 0340 d4 8c 00 01 b1 e4 01 8d 8a fb 40 6e 8c eb 7b 93 ..........@n..{. 0350 78 63 71 7d 83 03 be 84 5c 05 e0 85 b2 14 f6 f3 xcq}....\....... 0360 11 8f 14 2f 18 2b cf 95 91 10 c3 1b 53 a9 83 9f .../.+......S... 0370 6c 41 be 79 b9 c6 48 12 77 c0 d2 d1 43 92 48 6c lA.y..H.w...C.Hl 0380 40 4d c4 ce 60 17 4c 32 ed bb a5 95 2d 07 6e 93 @M..`.L2....-.n. 0390 0b f1 21 69 72 ef 62 81 98 32 e9 fd b0 bb f0 af ..!ir.b..2...... 03a0 f3 5f 70 9a 4e ae 43 74 d0 50 60 3c 0e f6 41 f4 ._p.N.Ct.P`<..A. 03b0 76 29 86 82 d4 e7 fb 8b 24 bd 58 4b 85 d9 0e 2e v)......$.XK.... 03c0 83 24 9e aa 9f 61 3b 32 f6 a1 d6 5f a6 f5 65 0e .$...a;2..._..e. 03d0 89 37 b0 d9 e5 51 f4 36 1f 0f a2 db 83 46 9d 9f .7...Q.6.....F.. 03e0 5e a7 96 67 ee 77 90 2e b8 2c 03 d0 b2 ed 1b 1c ^..g.w...,...... 03f0 6b fe ae 37 7a 72 38 56 79 cc d8 fb 26 f8 b1 59 k..7zr8Vy...&..Y 0400 9a 19 e6 92 6f e9 22 5d f8 bd f6 53 c5 4f e6 cc ....o."]...S.O.. 0410 5f 3e 62 69 a8 61 bf 4c 1a 22 95 ff a8 9b f4 18 _>bi.a.L."...... 0420 36 c2 9b ed f0 af 28 14 f4 d0 99 48 ef 57 bf 9f 6.....(....H.W.. 0430 2a 6c 05 6f c4 cb c1 8f f6 d7 6b ae 99 37 51 d0 *l.o......k..7Q. 0440 9c be f1 9b b4 6c e9 5e 73 94 3a 45 85 bb 67 96 .....l.^s.:E..g. 0450 fc f2 e4 07 58 81 31 1c 02 0b 64 53 4d df e2 07 ....X.1...dSM... 0460 bc 83 4e c7 df f4 ed 49 7e 17 69 65 68 1a 92 d7 ..N....I~.ieh... 0470 fb a9 4e 12 1b aa 29 d4 ab c5 70 73 c2 25 fc d3 ..N...)...ps.%.. 0480 bc 38 67 fc 6e 4b bc 8a 9c 99 4a 87 c5 bf b8 3a .8g.nK....J....: 0490 b0 be a9 2e 10 43 5d 84 59 61 5a da e4 b4 8e 43 .....C].YaZ....C 04a0 13 39 18 30 64 0d f0 2e 91 03 8f c8 c7 08 80 c6 .9.0d........... 04b0 17 94 48 01 af 26 11 4f 53 d9 8f d5 05 98 bb 01 ..H..&.OS....... 04c0 33 04 7f 89 63 cb e4 75 78 68 5a 85 fc bf 39 ea 3...c..uxhZ...9. 04d0 22 64 0b dc f6 55 85 92 8e b4 c5 0d fa 44 e5 bf "d...U.......D.. 04e0 75 75 0c e9 6b ff 42 4d d1 07 73 27 b9 41 28 6c uu..k.BM..s'.A(l 04f0 b6 16 91 bd ea 10 97 f7 62 ec 35 e9 53 bf a1 7c ........b.5.S..| 0500 78 bb f2 64 e9 7e f0 ba 5f 8c a1 56 df f8 7b c8 x..d.~.._..V..{. 0510 b6 14 52 df 45 0b 5e 79 14 59 bc 25 e7 c5 8b b5 ..R.E.^y.Y.%.... 0520 b7 0c a3 11 d6 ac 19 5d 77 4f 38 2b 3d ff 67 fc .......]wO8+=.g. 0530 0a 54 ce 75 91 96 7b e3 0d 19 be 54 d7 17 c2 3e .T.u..{....T...> 0540 69 45 42 db 0e 03 5b 93 09 1d 36 a8 79 96 85 bc iEB...[...6.y... 0550 9d a2 1e 81 b3 10 1d 65 59 72 90 16 e1 ab fe d7 .......eYr...... 0560 e9 a7 a4 81 ad 61 35 1c 91 fd c7 04 53 53 9b f4 .....a5.....SS.. 0570 83 41 2b ab c3 9e d8 bd 05 8e 20 9c ff 66 45 1a .A+....... ..fE. 0580 13 77 58 51 6d 06 09 f6 8c 76 b5 00 29 28 5a b6 .wXQm....v..)(Z. 0590 e7 72 1b ed cc 61 8b 54 9c e1 b8 6b 7b 9b 25 ea .r...a.T...k{.%. 05a0 93 60 99 8b 4d a7 e4 93 .`..M... No. Time Source Destination Protocol Length Info 3252 44.332483 192.168.10.1 192.168.10.245 Syslog 364 LOCAL1.INFO: Oct 3 19:45:02 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo.kaspersky.com" arg="/diffs/bases/as/pas4/profiles.keb.pzi" sent_bytes="227" rcvd_bytes="1177" (HTTP-proxy-Visitor-00) Frame 3252: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:02 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo No. Time Source Destination Protocol Length Info 3253 44.332549 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2147 Ack=114666 Win=65535 Len=0 TSval=727925 TSecr=546331 Frame 3253: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2147, Ack: 114666, Len: 0 No. Time Source Destination Protocol Length Info 3254 44.332661 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=114666 Ack=2147 Win=1002 Len=1448 TSval=546331 TSecr=727925 Frame 3254: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 114666, Ack: 2147, Len: 1448 Data (1448 bytes) 0000 39 c9 42 e0 4a 83 9a 0b 19 3f 00 90 63 54 ed ff 9.B.J....?..cT.. 0010 30 8f 28 4a 52 34 06 fc 36 47 24 15 a8 d0 ac a3 0.(JR4..6G$..... 0020 50 dd b7 a1 c2 04 21 c6 2a e7 0a 45 12 50 33 b2 P.....!.*..E.P3. 0030 e1 6a b0 63 b6 c3 fc 5a b0 0a c4 5a 07 a5 be 76 .j.c...Z...Z...v 0040 29 2e 75 d1 98 7d 4b 97 11 1c 28 9d ed 12 37 ce ).u..}K...(...7. 0050 a1 61 52 a4 af 17 f2 8c 0c d8 f9 85 d0 0f 6f 58 .aR...........oX 0060 04 11 75 fa 51 4a dd e2 a7 c7 06 17 05 3a 1b a0 ..u.QJ.......:.. 0070 4c 1e 80 0a 3e 01 59 65 5c 31 99 ae 3e 9b 9f 36 L...>.Ye\1..>..6 0080 cd b0 80 70 d2 c6 be 14 e4 7b a4 b5 44 78 d6 3e ...p.....{..Dx.> 0090 f3 40 15 96 11 b5 63 c1 ff 30 24 ed 3d eb e8 b2 [email protected]$.=... 00a0 c7 e0 e3 f1 c2 3c cd 1c d7 de 57 98 e5 b2 f1 fc .....<....W..... 00b0 0b b1 e5 19 62 f4 2c 0f a6 1e c8 8f 1b e8 75 9a ....b.,.......u. 00c0 c5 cd 45 25 dc 69 ea 03 eb 21 2e 09 01 a0 d8 99 ..E%.i...!...... 00d0 29 fd d9 e1 ea 79 c6 0c 5b e6 3b ed ec 29 0d c5 )....y..[.;..).. 00e0 0b 38 15 e1 33 1d ac fc 02 1c 36 ac 68 79 b2 24 .8..3.....6.hy.$ 00f0 29 a8 ef 21 ef f5 4b 9b f3 7f 7d dc c5 28 a8 a2 )..!..K...}..(.. 0100 84 c6 82 6d 54 6d b2 e0 9a 32 7a 56 6f 95 85 d4 ...mTm...2zVo... 0110 a8 fe 3b 4d 28 dc 2d 66 68 88 ee f8 7d 93 02 73 ..;M(.-fh...}..s 0120 fb 37 b0 eb ee 39 07 66 4b 5b 50 8a fd 44 25 7c .7...9.fK[P..D%| 0130 77 0a 13 9f 8c 83 b3 e8 61 eb 0e 8f cf 54 de 97 w.......a....T.. 0140 fd fa 5e 52 a4 ec f4 88 80 cd 98 0b 85 6c 11 bc ..^R.........l.. 0150 03 2b 45 49 0b 75 ce 9b 4c 7f f2 f4 40 f1 5c d9 .+EI.u..L...@.\. 0160 63 74 0f e9 1e b6 d9 3c 54 09 1f 4a e5 f9 14 ff ct.....<T..J.... 0170 6e 57 1b ac 59 99 fa f4 94 85 dd 22 b6 6b 7b 6b nW..Y......".k{k 0180 1e c3 ed 6c c6 ce 18 1f ba a7 0c 65 28 7b 5d 31 ...l.......e({]1 0190 8c 0b f5 e7 71 03 fa c4 33 4e f5 e0 18 34 7c 0b ....q...3N...4|. 01a0 80 d6 5a c2 88 49 b3 8a ed a2 ad f1 fe 68 14 16 ..Z..I.......h.. 01b0 4b ea 16 c0 4a aa 27 91 75 1f 14 28 5b 91 af b0 K...J.'.u..([... 01c0 79 cf 1c e4 12 41 64 bf 52 4b 44 09 64 c3 29 f0 y....Ad.RKD.d.). 01d0 f2 86 7e 52 c4 a3 30 48 b6 2b 34 b8 a9 32 11 99 ..~R..0H.+4..2.. 01e0 f0 22 e8 80 a5 8d 7c 57 10 8c 41 c1 61 63 39 58 ."....|W..A.ac9X 01f0 48 fa 43 6b 5e ca ae 6c ea 01 6f fc df 1f 71 7c H.Ck^..l..o...q| 0200 f4 5d 93 7c fc 50 04 4f 50 35 fb 95 2f a0 74 40 .].|.P.OP5../.t@ 0210 62 3e 97 70 08 90 4b 4a 2e f5 a6 8d ef 0c a0 0e b>.p..KJ........ 0220 84 23 11 70 39 b0 1c d7 8a c5 36 e5 3b 98 84 3c .#.p9.....6.;..< 0230 6b 10 18 d8 c6 2a 9d c1 05 1b 66 b0 c2 30 79 a3 k....*....f..0y. 0240 d8 1f 50 c5 30 23 d8 3b 25 d0 28 17 28 63 b7 5e ..P.0#.;%.(.(c.^ 0250 33 d6 8b 0c 84 ae 0e 3a e8 8e b7 e8 18 34 56 35 3......:.....4V5 0260 46 c2 f2 e7 69 70 9d 0c bf f5 27 79 46 d5 c6 b6 F...ip....'yF... 0270 47 9b e3 fb b7 cc 81 b3 12 a4 2b 6c a1 bd 8d b3 G.........+l.... 0280 8d d8 cd 4f 29 6b a9 f8 c9 7f 5f b8 96 f6 34 a1 ...O)k...._...4. 0290 a0 c9 9a 68 ea a6 3e c7 81 8f 6c 99 07 b7 5c c4 ...h..>...l...\. 02a0 1f 17 77 b2 a5 a8 53 64 0a 75 f4 53 cc 43 65 be ..w...Sd.u.S.Ce. 02b0 43 02 22 ce 17 02 11 c1 ce f7 a4 a3 0b 35 ba bf C."..........5.. 02c0 ec ba 00 e4 54 c2 a7 15 fb 2d ec 50 78 d4 0f 2c ....T....-.Px.., 02d0 8c 58 7e b0 c9 93 c2 ff 01 2f 3e e5 2e 16 b7 ea .X~....../>..... 02e0 b9 aa 54 57 9f 8e 15 c9 1c 9f 62 5b 66 98 93 ab ..TW......b[f... 02f0 e0 95 30 79 c7 0c ac b0 d6 f8 b2 61 bc da ee 71 ..0y.......a...q 0300 d4 35 05 3a e9 5d 2b 25 93 c5 ab 8a 5b 61 7d 59 .5.:.]+%....[a}Y 0310 fa 93 1c c6 b4 b7 e3 24 24 36 ce e8 25 53 53 df .......$$6..%SS. 0320 2e e4 cc ea 8a 79 dd 1d 74 85 9c 30 eb ea 67 38 .....y..t..0..g8 0330 69 ba 02 42 6b 60 cb 01 88 d6 7d 5c ad 84 ca b7 i..Bk`....}\.... 0340 87 11 50 37 d7 13 4a 76 ba d5 51 de f8 c3 f8 ac ..P7..Jv..Q..... 0350 13 21 6f 47 a0 9f e0 e2 f5 91 50 09 c2 6c 6b ef .!oG......P..lk. 0360 d4 b8 7c c9 c0 43 bd ad c4 5f ad 25 7f 95 6e 09 ..|..C..._.%..n. 0370 ce 73 fb 8f 02 ef c8 2b 4d fc d4 c4 9a bf b7 6a .s.....+M......j 0380 b3 e5 b2 45 1c 59 ab 5d 91 5c 28 e9 19 a6 ce 32 ...E.Y.].\(....2 0390 fa 5c 97 96 c5 48 1d ef 25 a4 ec 00 97 76 28 f0 .\...H..%....v(. 03a0 2e d7 52 4a f7 19 a4 d7 1f a5 1f 73 7d 1b 99 b3 ..RJ.......s}... 03b0 14 c9 f4 0b 9f a2 ac 18 e7 f4 ea a2 19 7a ee bf .............z.. 03c0 7d 6a 0a 0d ab 11 1c 00 ac 25 94 e0 c6 27 3f c3 }j.......%...'?. 03d0 19 e3 a8 0b d0 97 74 64 f7 c4 58 f3 60 79 5f 07 ......td..X.`y_. 03e0 75 a6 ed c2 5b 23 15 5b 09 5e 4c dc f8 18 82 db u...[#.[.^L..... 03f0 5a 50 3a 72 80 ab a2 32 a4 c8 03 91 7c 6e 0d 82 ZP:r...2....|n.. 0400 0b 08 d7 c8 a3 e9 35 e2 2e 1b 3d cf 57 61 75 2e ......5...=.Wau. 0410 82 51 6a 7a eb e8 f4 30 a3 9a 47 45 85 dc 1c 63 .Qjz...0..GE...c 0420 26 c6 74 eb a5 a5 13 db 85 06 44 54 72 5c d0 6e &.t.......DTr\.n 0430 dd 7f 5d a0 0f 57 00 2d 79 85 55 79 d6 65 c3 82 ..]..W.-y.Uy.e.. 0440 54 c4 f7 84 54 10 f3 6e f5 01 e1 f6 94 12 ee 85 T...T..n........ 0450 0f 18 7d 05 17 c4 f1 bc 26 e8 5f 16 57 e5 58 34 ..}.....&._.W.X4 0460 d7 b8 7d 12 85 0f 5e 1f be 47 c1 66 19 4d 2c 70 ..}...^..G.f.M,p 0470 30 6f 11 75 8a ff f2 d6 e9 3a 1a 3a 1d 79 0c 1e 0o.u.....:.:.y.. 0480 dd a7 11 a8 99 83 ea 26 be 9e da 56 2b c8 49 37 .......&...V+.I7 0490 60 25 cd 64 52 0f e0 e8 77 79 ed 32 12 c9 6e 95 `%.dR...wy.2..n. 04a0 24 69 cc f5 96 51 b2 7c af 14 0d cd eb c5 f9 3b $i...Q.|.......; 04b0 88 49 93 d7 0e 56 51 03 f6 70 d4 bf 61 61 47 70 .I...VQ..p..aaGp 04c0 f7 cd f0 4e 50 ed 93 b9 da df 11 b5 3f 8c 45 bf ...NP.......?.E. 04d0 04 7c 8e 64 57 ac d5 14 9f 34 d3 9d b5 22 ab 3d .|.dW....4...".= 04e0 89 9f cd 7b ba f7 d9 ab 3e a1 92 4c 24 75 1f 08 ...{....>..L$u.. 04f0 98 6d 18 50 71 e9 4b ed 5d 37 58 ee 4d 9a 69 27 .m.Pq.K.]7X.M.i' 0500 dc e5 d3 e7 f7 fa 17 08 07 a0 db 29 8e 70 36 c8 ...........).p6. 0510 8a 80 bf 92 50 a4 c0 dc b6 56 31 b5 86 b2 cd db ....P....V1..... 0520 71 58 1b 11 d1 59 a6 3b eb 83 f2 57 74 bc 42 49 qX...Y.;...Wt.BI 0530 d0 5a ee e1 66 a6 26 6b e0 a5 e6 a0 4b ad 15 41 .Z..f.&k....K..A 0540 fd 5c d4 b5 b0 88 f4 54 fc e9 8f e9 30 dc 33 1d .\.....T....0.3. 0550 33 30 cc 78 89 96 93 87 96 d8 45 ba 59 b2 65 dc 30.x......E.Y.e. 0560 03 cd 4b 25 f7 65 96 4f d0 2c 17 90 77 68 75 ac ..K%.e.O.,..whu. 0570 5a 42 d3 5e f2 61 4d 69 2f 00 e0 c4 fd be 55 f1 ZB.^.aMi/.....U. 0580 89 f5 06 e1 c5 13 1f cb ad c3 66 16 d1 3e ab d4 ..........f..>.. 0590 73 81 06 35 b7 d5 fe 79 9b 9c 0b fe cb 4a 40 ae s..5...y.....J@. 05a0 87 ad ed 6c e0 5f 0c 01 ...l._.. No. Time Source Destination Protocol Length Info 3255 44.332768 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=116114 Ack=2147 Win=1002 Len=1448 TSval=546331 TSecr=727925 Frame 3255: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 116114, Ack: 2147, Len: 1448 Data (1448 bytes) 0000 b7 3e c0 13 7d f1 e2 d0 8f 82 90 bd 3e 98 83 60 .>..}.......>..` 0010 e7 37 60 d1 a3 64 e9 75 b1 6c fd e5 2b 7d 1a 0c .7`..d.u.l..+}.. 0020 97 66 ec b6 4c c1 35 8f 6c 32 d7 41 40 ec 81 5e .f..L.5.l2.A@..^ 0030 b6 22 9e 09 98 48 29 28 9d d9 05 39 b3 3a 56 d9 ."...H)(...9.:V. 0040 27 08 14 c0 fb 69 ca d5 e2 58 1c 43 ca 27 52 86 '....i...X.C.'R. 0050 74 d9 c1 c0 e0 2e ee be a2 6a 5b d6 75 3f 4f 09 t........j[.u?O. 0060 b0 63 3e 50 03 f5 c6 54 27 ac 8b 38 51 47 6f 17 .c>P...T'..8QGo. 0070 e5 a2 30 02 c4 e3 3a f7 7d 3b 33 98 c1 5c 1c e0 ..0...:.};3..\.. 0080 4b 79 80 fa d7 01 83 eb 01 e5 45 b6 70 ce 84 12 Ky........E.p... 0090 9c 15 55 d0 e4 48 f4 5c 81 7c 62 4d fe 51 85 c8 ..U..H.\.|bM.Q.. 00a0 93 ad fd 2a e7 e4 ea 5f e7 35 b4 00 33 21 97 d3 ...*..._.5..3!.. 00b0 b5 a5 0f ec 56 e3 e8 08 22 27 1b 20 bf 3e cc 3b ....V..."'. .>.; 00c0 a8 0e 0c 3d 66 8f 64 20 f2 43 93 e4 20 fe 20 29 ...=f.d .C.. . ) 00d0 10 0c 8a 09 4c 6d 15 d3 82 dc 87 ae ce e4 be 34 ....Lm.........4 00e0 51 60 a6 a0 48 fd 27 56 60 b2 9a 76 ab bc 97 cd Q`..H.'V`..v.... 00f0 b5 cd f8 6a 4d a7 d7 54 aa 60 3c 59 26 63 28 5d ...jM..T.`<Y&c(] 0100 30 d4 35 e8 0b a1 07 63 2b 7e 3c 80 af 0b 93 4a 0.5....c+~<....J 0110 e4 9a 2d 6f d3 ad 6a 3f 10 e9 02 45 91 fe e9 0c ..-o..j?...E.... 0120 ea 07 57 88 3b 81 5c d2 20 00 48 0c a2 be 3e f9 ..W.;.\. .H...>. 0130 d8 4f 65 37 15 0b 54 20 b1 8e f6 a7 21 b5 bb 13 .Oe7..T ....!... 0140 77 70 1a db cc d3 c9 c1 4f b9 ea 01 62 5f 41 e6 wp......O...b_A. 0150 d3 47 0b 49 46 24 c5 76 1f 25 0d 42 b4 08 7f aa .G.IF$.v.%.B.... 0160 58 6f a1 63 87 3c ba 34 7e 85 ff 99 8e 6b 98 19 Xo.c.<.4~....k.. 0170 a0 2c e3 88 41 74 1e 22 db 72 3a 4a 14 5d 49 cc .,..At.".r:J.]I. 0180 3b 3d 2e b2 ad b1 12 a0 8d ff f8 22 31 73 79 7f ;=........."1sy. 0190 2c ad c3 6f f5 06 55 ce e3 20 cd 01 ec df bb 82 ,..o..U.. ...... 01a0 5e 63 79 bd a5 db 16 3c c1 1d af 68 d8 0c c2 8b ^cy....<...h.... 01b0 d0 3f 9b 0a 98 c9 9e c8 14 b7 4d c9 6a 65 9a 6b .?........M.je.k 01c0 a6 67 54 69 e8 c6 3c ef 4c cd 30 75 35 47 11 d4 .gTi..<.L.0u5G.. 01d0 7d 7c 0a 23 91 9f c3 d0 fd 78 05 0b d0 2f b1 95 }|.#.....x.../.. 01e0 f9 8c 83 de 34 6c 89 2a ed 09 ea 21 d4 62 5c 8e ....4l.*...!.b\. 01f0 73 20 da 42 25 b6 88 c7 f7 56 32 b8 05 1d 86 c8 s .B%....V2..... 0200 24 5f ca 69 2d 9d 0b 71 bd 87 2c de 89 8b 2c ea $_.i-..q..,...,. 0210 22 ca c9 72 03 46 dd 31 4a db 94 de a6 d2 f8 38 "..r.F.1J......8 0220 05 98 a4 8f 1c 36 86 d8 8b 37 6d 0e 2b 35 ed 22 .....6...7m.+5." 0230 07 bb be 17 7c eb 9a 44 2a ad c8 30 a4 4f 87 78 ....|..D*..0.O.x 0240 04 6a 05 92 17 ed 6a 0d 27 b0 7c 0a c7 51 8d ed .j....j.'.|..Q.. 0250 d3 4f 8f 6c 1b e0 e1 d4 d9 07 d9 3b 40 81 34 bc .O.l.......;@.4. 0260 26 19 3b e2 af 97 4e 11 81 13 b3 ec 2d 26 8e ce &.;...N.....-&.. 0270 a4 8b 25 ea e9 c1 7a 43 b5 19 1b 22 d4 c9 da eb ..%...zC...".... 0280 50 d0 51 b6 34 a3 5e b0 30 35 37 a8 cd 00 98 4d P.Q.4.^.057....M 0290 bc 5a 29 e3 d1 3f 89 86 33 73 31 1c 88 cc 49 d6 .Z)..?..3s1...I. 02a0 a4 b6 60 ab c5 88 49 e9 12 51 21 58 6d d3 88 6e ..`...I..Q!Xm..n 02b0 53 5c 33 43 95 76 45 89 75 23 d6 cb 41 d9 5b a9 S\3C.vE.u#..A.[. 02c0 43 5d 3a d0 8b c1 80 8c 37 2d f6 96 09 4e a3 3f C]:.....7-...N.? 02d0 02 d1 b5 a5 85 e5 e8 d8 92 69 c2 09 66 e5 c6 b5 .........i..f... 02e0 f1 a7 b1 45 0b e8 63 d4 d6 85 19 dd c2 d8 99 26 ...E..c........& 02f0 50 18 1e 74 6c bc ea 7a 61 2c ca 2d 5f 68 59 82 P..tl..za,.-_hY. 0300 b1 09 5f 7a bc 7b d1 3d 2e 61 1f 11 45 3d 18 b5 .._z.{.=.a..E=.. 0310 72 b5 59 bd 64 db ca 9d f3 e5 4d 0c d0 c7 a7 25 r.Y.d.....M....% 0320 68 53 ad 02 ff e9 c1 c4 b1 96 00 56 4f 29 a5 4d hS.........VO).M 0330 7b b8 44 e0 4e 4f 43 6a 01 41 8f aa 5a e4 11 88 {.D.NOCj.A..Z... 0340 ab 3c 9b 78 b2 dc da 54 3d d3 76 30 fa f3 43 1c .<.x...T=.v0..C. 0350 8e 91 97 0c 02 a1 01 99 6b f2 52 51 e4 6e 4c 4e ........k.RQ.nLN 0360 17 a6 7e 04 59 ea ef 0f 6d 57 db 20 96 0a 1e e9 ..~.Y...mW. .... 0370 ef 1c 72 97 45 e0 1f 31 52 45 85 79 e8 0c b9 2e ..r.E..1RE.y.... 0380 0c 20 89 42 69 8b 4b 12 28 d6 6f cc 95 94 1a 3a . .Bi.K.(.o....: 0390 a2 56 f1 a9 0d a7 d4 42 16 20 c1 ef 5e 85 68 18 .V.....B. ..^.h. 03a0 01 d2 7a 6e e3 21 d7 2d ae 23 42 8d 04 de 26 4d ..zn.!.-.#B...&M 03b0 b8 0c 23 81 3d 8b 24 14 56 f4 ed 1c 6b 57 2f 4f ..#.=.$.V...kW/O 03c0 fa 2a d9 eb 6c 3b c6 89 da 84 90 b2 e7 dd 8c 0f .*..l;.......... 03d0 04 46 c3 d3 3c b2 7e 46 cd a8 7f d9 ec 6e 59 57 .F..<.~F.....nYW 03e0 bb c0 7b 50 e8 fe fd c7 c6 e1 b9 ea 80 f2 23 83 ..{P..........#. 03f0 6e f2 e3 cb 86 ff 93 84 af b8 ac a2 9a 65 81 eb n............e.. 0400 4d 48 8e 69 bd 51 b0 90 03 cc 37 cd bd ee c4 ad MH.i.Q....7..... 0410 22 58 fe b2 6f e1 34 a1 93 25 d6 0b f1 83 a8 e2 "X..o.4..%...... 0420 1b 58 85 07 af a5 2b dc 4e e2 09 17 42 5f 08 5a .X....+.N...B_.Z 0430 5a d5 f6 71 e4 46 91 64 a1 3e f5 6b 25 94 ae 51 Z..q.F.d.>.k%..Q 0440 95 66 2d 78 02 64 33 9a 82 d8 73 7e af 90 f1 b4 .f-x.d3...s~.... 0450 7a 94 96 8b 73 c7 ea 1f 32 2c 9c cd c1 b9 24 f5 z...s...2,....$. 0460 07 62 a7 38 23 3e a8 a6 28 1b 9c 4c 13 db f8 16 .b.8#>..(..L.... 0470 cc 38 cd 32 1d e4 d5 32 5c 0b 89 ef 66 ba 99 a0 .8.2...2\...f... 0480 56 17 00 97 f0 19 39 88 88 5a b3 bb a8 9e 4a a4 V.....9..Z....J. 0490 65 db ee e5 c3 53 bc b4 f5 3d f3 d4 ab 0a f6 ad e....S...=...... 04a0 86 87 24 f2 99 a4 21 4c 02 66 c3 92 b9 82 3c 68 ..$...!L.f....<h 04b0 8e 89 45 57 29 22 11 9e 4a ca 81 61 f7 89 2e fb ..EW)"..J..a.... 04c0 33 3c 32 63 99 9a e7 5f aa 73 f7 8f 0d bd 2b 51 3<2c..._.s....+Q 04d0 9f 55 20 8c 55 57 92 d7 e7 99 48 15 f8 b0 c8 02 .U .UW....H..... 04e0 5d 49 ea 08 d8 57 72 9e 25 85 7a 7a b3 5e e8 9e ]I...Wr.%.zz.^.. 04f0 d5 c1 00 c7 4c eb 16 52 91 ee 96 d8 b5 94 c7 28 ....L..R.......( 0500 94 f1 ea 48 69 77 a8 a3 9d 73 48 05 01 a8 0f 4b ...Hiw...sH....K 0510 08 e2 69 70 c7 08 86 58 96 a3 48 dc 67 8d 39 d9 ..ip...X..H.g.9. 0520 0f 3e 0a 96 ae 05 e5 6b c9 0b 54 33 1a 8e 5d a8 .>.....k..T3..]. 0530 60 cb 5c 86 ef 66 7e 35 5d e1 08 71 d9 6e 91 06 `.\..f~5]..q.n.. 0540 c7 4b 06 ee ae 62 8d 0e 45 0e 89 29 d4 94 ba 37 .K...b..E..)...7 0550 44 64 3a d4 40 b8 2b e1 ab 0e 50 3e b9 1d cd 32 Dd:.@.+...P>...2 0560 3a a9 01 80 34 ae 1b 8d 4b 62 c2 1a 12 a0 6b b0 :...4...Kb....k. 0570 2c 75 c0 ef cc 60 a7 98 50 6b 88 ff 14 9d 7d 03 ,u...`..Pk....}. 0580 e8 d7 53 03 7d 9c 64 21 3e df 8f 36 b3 58 9a 80 ..S.}.d!>..6.X.. 0590 43 42 46 d2 ff e5 41 d3 a1 97 45 f5 7e b7 b3 3d CBF...A...E.~..= 05a0 0f 5b 6b 81 8b 82 35 e2 .[k...5. No. Time Source Destination Protocol Length Info 3256 44.332878 192.168.10.1 192.168.10.203 TCP 1343 34433 > cds [PSH, ACK] Seq=117562 Ack=2147 Win=1002 Len=1277 TSval=546331 TSecr=727925 Frame 3256: 1343 bytes on wire (10744 bits), 1343 bytes captured (10744 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 117562, Ack: 2147, Len: 1277 Data (1277 bytes) 0000 08 28 1b 40 d2 37 d3 16 54 fb 53 f0 52 88 27 60 .([email protected].'` 0010 dc af 63 80 b7 ca 52 d1 c0 f5 b8 6c b2 39 8d 7b ..c...R....l.9.{ 0020 a4 62 6c dc 4d 94 39 1e 8f 12 fe 2b f9 2d 5b 01 .bl.M.9....+.-[. 0030 d0 c6 72 b7 18 bf ee d7 a7 ef 54 6c d7 4b ef b4 ..r.......Tl.K.. 0040 c8 a3 85 3f 3c 28 b2 33 16 b1 17 9f 30 0c 33 36 ...?<(.3....0.36 0050 a5 fd fd 73 ba e1 32 41 5a 50 88 8e 9f b4 56 37 ...s..2AZP....V7 0060 db 4f bf 97 0a 1d 3f 77 b4 d5 d4 f5 d2 52 48 68 .O....?w.....RHh 0070 91 84 c4 e8 19 93 dc 08 1f 0f ee 75 49 24 a4 b0 ...........uI$.. 0080 2f 39 30 2c 6e 0b c1 a3 1e ed f8 58 cb 1a b9 1a /90,n......X.... 0090 88 88 7e e2 74 3b ad 40 d3 44 a0 ca 43 7a 1e 7a ..~.t;[email protected] 00a0 e2 e2 e3 70 9e a6 ff 29 03 80 e3 14 fb e7 74 4d ...p...)......tM 00b0 cc 52 d9 4b dc 73 4e 9c e3 c8 aa 46 47 f5 79 79 .R.K.sN....FG.yy 00c0 52 bf 43 4c f7 66 bc e6 aa 6d d8 33 9d 44 b7 30 R.CL.f...m.3.D.0 00d0 ce ab 41 03 d4 e9 85 7d d1 83 0a 0a ab f6 06 39 ..A....}.......9 00e0 16 c1 f5 0a 5c f7 11 ae 7b 53 66 81 fd 48 26 10 ....\...{Sf..H&. 00f0 3e 3a fc 68 2f 31 15 eb 4f 8e 42 32 4f 5b b3 91 >:.h/1..O.B2O[.. 0100 f0 63 a3 7a 51 c9 58 ef 1d 37 23 45 97 53 ed 9f .c.zQ.X..7#E.S.. 0110 fb a0 95 9a 5d 25 ad e2 30 31 aa 1a 62 b6 41 1b ....]%..01..b.A. 0120 b9 e8 30 9c 3c eb 90 ea 65 c9 94 dd b4 a7 7e 52 ..0.<...e.....~R 0130 0a 56 6d ce d6 df cf 67 1e 96 89 76 e0 bd 3b cc .Vm....g...v..;. 0140 18 8c 1a 63 c6 93 57 fe f1 35 7c 01 74 1a 87 f1 ...c..W..5|.t... 0150 61 32 7c 3d 3d 79 9c 8e 35 2d aa 56 e5 6f 62 e7 a2|==y..5-.V.ob. 0160 9e 29 3f a6 7e 25 f9 c1 53 91 2f bd 6f c7 ce f6 .)?.~%..S./.o... 0170 c1 5c 6d d1 a6 29 32 fe e3 3f a0 22 73 3f c4 8c .\m..)2..?."s?.. 0180 21 6a f6 8a 6d 76 fd 23 9a 62 6e e7 fb c9 38 db !j..mv.#.bn...8. 0190 6f 38 cc b8 23 ec b4 3a 20 64 f8 43 b9 d0 a8 89 o8..#..: d.C.... 01a0 a9 9f 59 84 6a c7 2a d0 e7 5e a8 1a ca 10 f8 50 ..Y.j.*..^.....P 01b0 d8 da c5 aa 4c ab 45 1d ba 53 4a 89 e8 ae 75 52 ....L.E..SJ...uR 01c0 68 3c 8f 9c 3f 05 22 4c 98 0f cd be ef 1e 28 f7 h<..?."L......(. 01d0 ea 3a 88 da 13 40 63 7a 94 f1 a7 60 d7 e7 79 ae .:...@cz...`..y. 01e0 cf 50 35 66 54 d9 ab c4 22 a3 63 18 bf 47 17 eb .P5fT...".c..G.. 01f0 95 ba 92 dd a9 18 e4 75 a3 96 be 93 2e 49 85 fc .......u.....I.. 0200 70 01 33 21 27 5b c2 65 c9 00 83 a5 3d 30 48 32 p.3!'[.e....=0H2 0210 93 a0 59 e2 e9 3d 46 47 04 19 5c 33 64 4e 74 7f ..Y..=FG..\3dNt. 0220 b0 2c ac 9c 95 b6 c2 99 6b 93 c8 48 27 21 e5 30 .,......k..H'!.0 0230 fd 5a 8a dc 95 f5 2b 47 07 67 b2 7c 78 60 86 a4 .Z....+G.g.|x`.. 0240 3a 63 a9 64 dc 82 b2 02 92 a5 39 41 e5 bb 39 8b :c.d......9A..9. 0250 99 97 80 bb 40 c3 e3 2f 54 5e 2a 72 96 b0 40 9c ....@../T^*r..@. 0260 a9 32 b2 d2 60 70 bd 04 2e e0 00 50 8d 10 ed 80 .2..`p.....P.... 0270 8c d4 ae 1b f9 e9 31 64 9e cc a8 63 be c4 18 fb ......1d...c.... 0280 9e 32 43 e8 1d af 33 8b 12 59 9c cb 8f c7 b1 11 .2C...3..Y...... 0290 57 11 a1 99 80 7c 98 e0 69 39 36 0f a2 ce 82 6b W....|..i96....k 02a0 fc df 5e 15 55 82 8a 35 5d ab 60 bf 26 c1 aa bb ..^.U..5].`.&... 02b0 ea 64 e7 54 c7 4b 65 22 dc 5f 12 b0 61 cf e5 63 .d.T.Ke"._..a..c 02c0 f6 4e 25 c9 42 7f 14 a5 3e 2f 18 75 54 65 6c 97 .N%.B...>/.uTel. 02d0 8b c7 46 85 4c d8 f7 8d 3c fa d4 e0 85 d8 26 b2 ..F.L...<.....&. 02e0 bd 06 7d 85 c8 b8 80 4b ad 2f 30 ea 87 95 85 ce ..}....K./0..... 02f0 9d 43 6c bb 28 a0 b3 44 b0 94 ea 14 5c d2 b0 8a .Cl.(..D....\... 0300 71 cc ab 93 aa 17 53 4f f4 4e 56 58 de 22 62 f5 q.....SO.NVX."b. 0310 5b 80 56 75 a6 f3 5c 60 84 c4 e8 fd 4b 80 b3 1d [.Vu..\`....K... 0320 31 70 37 c9 03 d4 25 ec 7e 75 0f 70 3b 67 40 09 1p7...%.~u.p;g@. 0330 43 ce 9a ad 39 9b e3 25 3b 12 54 20 bf 7a c9 1a C...9..%;.T .z.. 0340 f0 9a 02 6f 2d 3b 50 56 68 8a a5 a1 7e 36 23 70 ...o-;PVh...~6#p 0350 a3 a4 ea aa 84 61 7b 0a 41 34 94 f7 a9 34 8e 0b .....a{.A4...4.. 0360 00 ed 77 5e 80 5a 72 89 5c dc a2 cb a8 9d 73 de ..w^.Zr.\.....s. 0370 b0 49 c7 8f 60 07 be bd ea 83 f0 85 2d 36 53 6a .I..`.......-6Sj 0380 93 c6 90 87 43 db 6f 1e 21 71 f2 58 fa c2 bb b6 ....C.o.!q.X.... 0390 8c 3e 47 e9 97 7e 21 23 d5 18 59 b5 cc 75 50 21 .>G..~!#..Y..uP! 03a0 ac b6 96 4b f3 eb 60 94 4c a8 9b 97 12 93 9c 29 ...K..`.L......) 03b0 a2 19 78 02 5b 56 8b 1d c4 8a 67 97 b3 53 fd e0 ..x.[V....g..S.. 03c0 1b 15 2e 49 d8 27 de 77 6f 5c 58 5c 85 f0 1e cc ...I.'.wo\X\.... 03d0 8e 4e 83 4d 10 38 22 4d a6 c6 04 3d 0c 36 0f 6f .N.M.8"M...=.6.o 03e0 e4 35 1a ca 1b 3c 82 5f 05 f7 05 07 53 70 ce ad .5...<._....Sp.. 03f0 4f 4f 72 69 db 80 2e b9 75 a9 31 ab 48 11 6e 51 OOri....u.1.H.nQ 0400 8e 8c a3 53 cb ec 88 b0 3a fe ce 0b 85 64 16 27 ...S....:....d.' 0410 cb c7 fb e5 67 42 bb 8a 0b e0 8e 7b 04 f3 97 1a ....gB.....{.... 0420 90 ef 85 02 b8 1d 94 0d cf c5 91 64 6f f9 7e 33 ...........do.~3 0430 c0 ce ab 24 3c 66 7a c4 2a b8 8c 12 9b 81 0e a5 ...$<fz.*....... 0440 85 f9 7e 34 37 37 0f 5b 28 ef a6 b6 61 e4 42 5e ..~477.[(...a.B^ 0450 7f 77 a9 0c 8f d5 be b9 02 a1 b9 ae c6 f2 f7 fb .w.............. 0460 23 76 8b d7 25 bb 4d 25 4d 7e fd 2f cf 85 72 4d #v..%.M%M~./..rM 0470 ce 0e a9 fb d4 8c 18 94 ce 5c 3d dc 5d c0 03 09 .........\=.]... 0480 01 31 36 18 b1 ef 5c c9 16 eb 8a fb ea bb 36 4e .16...\.......6N 0490 02 44 85 9c 13 b9 a2 a1 15 86 d7 10 82 6d fe 4b .D...........m.K 04a0 a3 a0 f9 45 ff fb 43 62 7e c9 8a 93 4e c7 62 90 ...E..Cb~...N.b. 04b0 b8 64 68 00 91 84 7d be 9c e2 27 a2 2d b7 e7 dc .dh...}...'.-... 04c0 70 79 22 3f 1f fe 6a 48 e3 5e d3 b7 13 d2 31 c4 py"?..jH.^....1. 04d0 d5 87 56 bf 88 08 2c 25 6f 4a 74 e0 9e 01 dc 22 ..V...,%oJt...." 04e0 27 2b 4b 63 1a 28 d8 75 60 e3 a7 7d af 80 60 ee '+Kc.(.u`..}..`. 04f0 eb 5e dd 53 fb 0d de 4e 99 df 58 83 bb .^.S...N..X.. No. Time Source Destination Protocol Length Info 3257 44.332929 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2147 Ack=117562 Win=65535 Len=0 TSval=727925 TSecr=546331 Frame 3257: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2147, Ack: 117562, Len: 0 No. Time Source Destination Protocol Length Info 3258 44.360520 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 3258: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3259 44.360552 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 3259: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3260 44.361167 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=2147 Ack=118839 Win=64258 Len=74 TSval=727926 TSecr=546331 Frame 3260: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2147, Ack: 118839, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 8e c4 45 e6 fb e8 78 18 83 39 f1 .... ..E...x..9. 0010 33 83 1c fb 64 88 23 19 25 d8 d1 51 0d 99 c6 56 3...d.#.%..Q...V 0020 14 a5 b4 d5 17 17 03 01 00 20 2b a7 03 67 92 7a ......... +..g.z 0030 03 3b 0c 68 1c 79 26 68 2f 16 da d8 ce 05 ff f9 .;.h.y&h/....... 0040 6a 3e a5 2a 93 03 a0 39 95 b8 j>.*...9.. No. Time Source Destination Protocol Length Info 3261 44.361235 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=118839 Ack=2221 Win=1002 Len=0 TSval=546339 TSecr=727926 Frame 3261: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 118839, Ack: 2221, Len: 0 No. Time Source Destination Protocol Length Info 3262 44.547446 192.168.10.203 93.125.37.69 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 3262: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 93.125.37.69 (93.125.37.69) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 3263 44.908395 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2343508224, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3263: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3264 44.908419 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2343508224, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3264: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3265 44.908431 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2343508224, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3265: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3266 44.908443 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2343508224, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3266: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3267 44.929094 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4212588800, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3267: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3268 44.929116 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4212588800, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3268: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3269 44.929129 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4212588800, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3269: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3270 44.929141 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4212588800, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3270: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3271 44.992855 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 2825#2] 9428 > smtp [ACK] Seq=130819 Ack=1807 Win=46468 Len=0 Frame 3271: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 130819, Ack: 1807, Len: 0 No. Time Source Destination Protocol Length Info 3272 44.992891 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=1807 Ack=129801 Win=0 Len=0 Frame 3272: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1807, Ack: 129801, Len: 0 No. Time Source Destination Protocol Length Info 3273 45.196424 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 3273: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3274 45.315226 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 3274: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3275 45.325541 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=3655 Ack=262076 Win=52956 Len=0 Frame 3275: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3655, Ack: 262076, Len: 0 No. Time Source Destination Protocol Length Info 3276 45.325576 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3275#1] smtp > 23308 [ACK] Seq=3655 Ack=262076 Win=52956 Len=0 Frame 3276: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3655, Ack: 262076, Len: 0 No. Time Source Destination Protocol Length Info 3277 45.325613 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3277: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 263265, Ack: 3655, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3278 45.325643 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3278: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 264645, Ack: 3655, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3279 45.325674 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3279: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 266025, Ack: 3655, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3280 45.325703 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3280: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 267405, Ack: 3655, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3281 45.325732 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3281: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 268785, Ack: 3655, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3282 45.325767 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3282: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 270165, Ack: 3655, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3283 45.325802 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3283: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 271545, Ack: 3655, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3284 45.325835 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3275#2] smtp > 23308 [ACK] Seq=3655 Ack=262076 Win=52956 Len=0 Frame 3284: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3655, Ack: 262076, Len: 0 No. Time Source Destination Protocol Length Info 3285 45.325871 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3285: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 272925, Ack: 3655, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3286 45.325901 192.168.10.207 206.225.164.186 SMTP 180 S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 3286: 180 bytes on wire (1440 bits), 180 bytes captured (1440 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3655, Ack: 262076, Len: 126 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3287 45.325931 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3287: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 274305, Ack: 3655, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3288 45.325973 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3288: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 275685, Ack: 3655, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3289 45.326004 206.225.164.186 192.168.10.207 SMTP 391 C: DATA fragment, 337 bytes Frame 3289: 391 bytes on wire (3128 bits), 391 bytes captured (3128 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 277065, Ack: 3655, Len: 337 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3290 45.326033 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3286#1] smtp > 23308 [ACK] Seq=3781 Ack=262076 Win=52956 Len=0 Frame 3290: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 262076, Len: 0 No. Time Source Destination Protocol Length Info 3291 45.326062 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3291: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 277402, Ack: 3655, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3292 45.326090 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3286#2] smtp > 23308 [ACK] Seq=3781 Ack=262076 Win=52956 Len=0 Frame 3292: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 262076, Len: 0 No. Time Source Destination Protocol Length Info 3293 45.326118 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3286#3] smtp > 23308 [ACK] Seq=3781 Ack=262076 Win=52956 Len=0 Frame 3293: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 262076, Len: 0 No. Time Source Destination Protocol Length Info 3294 45.326146 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3294: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 278782, Ack: 3655, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3295 45.326178 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3286#4] smtp > 23308 [ACK] Seq=3781 Ack=262076 Win=52956 Len=0 Frame 3295: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 262076, Len: 0 No. Time Source Destination Protocol Length Info 3296 45.326213 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3296: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 280162, Ack: 3655, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3297 45.326243 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=281542 Ack=3781 Win=46489 Len=0 Frame 3297: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 281542, Ack: 3781, Len: 0 No. Time Source Destination Protocol Length Info 3298 45.326283 206.225.164.186 192.168.10.207 SMTP 1243 [TCP Fast Retransmission] C: DATA fragment, 1189 bytes Frame 3298: 1243 bytes on wire (9944 bits), 1243 bytes captured (9944 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 262076, Ack: 3781, Len: 1189 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3299 45.326312 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3286#5] smtp > 23308 [ACK] Seq=3781 Ack=262076 Win=52956 Len=0 Frame 3299: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 262076, Len: 0 No. Time Source Destination Protocol Length Info 3300 45.326341 206.225.164.186 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 3300: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 263265, Ack: 3781, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3301 45.326368 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3286#6] smtp > 23308 [ACK] Seq=3781 Ack=262076 Win=52956 Len=0 Frame 3301: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 262076, Len: 0 No. Time Source Destination Protocol Length Info 3302 45.326396 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3286#7] smtp > 23308 [ACK] Seq=3781 Ack=262076 Win=52956 Len=0 Frame 3302: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 262076, Len: 0 No. Time Source Destination Protocol Length Info 3303 45.326423 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3286#8] smtp > 23308 [ACK] Seq=3781 Ack=262076 Win=52956 Len=0 Frame 3303: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 262076, Len: 0 No. Time Source Destination Protocol Length Info 3304 45.326451 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3286#9] smtp > 23308 [ACK] Seq=3781 Ack=262076 Win=52956 Len=0 Frame 3304: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 262076, Len: 0 No. Time Source Destination Protocol Length Info 3305 45.326478 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3286#10] smtp > 23308 [ACK] Seq=3781 Ack=262076 Win=52956 Len=0 Frame 3305: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 262076, Len: 0 No. Time Source Destination Protocol Length Info 3306 45.326506 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3306: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 281542, Ack: 3781, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3307 45.326535 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3307: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 282922, Ack: 3781, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3308 45.326563 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3286#11] smtp > 23308 [ACK] Seq=3781 Ack=262076 Win=52956 Len=0 Frame 3308: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 262076, Len: 0 No. Time Source Destination Protocol Length Info 3309 45.326591 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3286#12] smtp > 23308 [ACK] Seq=3781 Ack=262076 Win=52956 Len=0 Frame 3309: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 262076, Len: 0 No. Time Source Destination Protocol Length Info 3310 45.326618 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 3286#13] smtp > 23308 [ACK] Seq=3781 Ack=262076 Win=52956 Len=0 Frame 3310: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 262076, Len: 0 No. Time Source Destination Protocol Length Info 3311 45.326645 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=3781 Ack=281542 Win=33490 Len=0 Frame 3311: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 281542, Len: 0 No. Time Source Destination Protocol Length Info 3312 45.326679 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3312: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 284302, Ack: 3781, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3313 45.326713 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3313: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 285682, Ack: 3781, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3314 45.326744 206.225.164.186 192.168.10.207 SMTP 1430 C: DATA fragment, 1376 bytes Frame 3314: 1430 bytes on wire (11440 bits), 1430 bytes captured (11440 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 287062, Ack: 3781, Len: 1376 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3315 45.326775 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3315: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 288438, Ack: 3781, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3316 45.326806 206.225.164.186 192.168.10.207 SMTP 217 C: DATA fragment, 163 bytes Frame 3316: 217 bytes on wire (1736 bits), 217 bytes captured (1736 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 289818, Ack: 3781, Len: 163 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3317 45.326834 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=3781 Ack=284302 Win=30730 Len=0 Frame 3317: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 284302, Len: 0 No. Time Source Destination Protocol Length Info 3318 45.326863 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3318: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 289981, Ack: 3781, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3319 45.326893 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=3781 Ack=287062 Win=27970 Len=0 Frame 3319: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 287062, Len: 0 No. Time Source Destination Protocol Length Info 3320 45.326932 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3320: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 291361, Ack: 3781, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3321 45.326962 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3321: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 292741, Ack: 3781, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3322 45.326992 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=3781 Ack=289981 Win=25051 Len=0 Frame 3322: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 289981, Len: 0 No. Time Source Destination Protocol Length Info 3323 45.327022 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3323: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 294121, Ack: 3781, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3324 45.327054 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3324: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 295501, Ack: 3781, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3325 45.327089 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3325: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 296881, Ack: 3781, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3326 45.327120 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=3781 Ack=292741 Win=22291 Len=0 Frame 3326: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 292741, Len: 0 No. Time Source Destination Protocol Length Info 3327 45.327149 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3327: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 298261, Ack: 3781, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3328 45.327179 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3328: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 299641, Ack: 3781, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3329 45.327208 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=3781 Ack=295501 Win=19531 Len=0 Frame 3329: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 295501, Len: 0 No. Time Source Destination Protocol Length Info 3330 45.327236 206.225.164.186 192.168.10.207 SMTP 1271 C: DATA fragment, 1217 bytes Frame 3330: 1271 bytes on wire (10168 bits), 1271 bytes captured (10168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 301021, Ack: 3781, Len: 1217 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3331 45.327264 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=3781 Ack=298261 Win=16771 Len=0 Frame 3331: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 298261, Len: 0 No. Time Source Destination Protocol Length Info 3332 45.327299 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3332: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 302238, Ack: 3781, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3333 45.327327 206.225.164.186 192.168.10.207 SMTP 583 C: DATA fragment, 529 bytes Frame 3333: 583 bytes on wire (4664 bits), 583 bytes captured (4664 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 303618, Ack: 3781, Len: 529 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3334 45.327355 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=3781 Ack=301021 Win=14011 Len=0 Frame 3334: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 301021, Len: 0 No. Time Source Destination Protocol Length Info 3335 45.327389 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3335: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 304147, Ack: 3781, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3336 45.327423 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3336: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 305527, Ack: 3781, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3337 45.327453 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3337: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 306907, Ack: 3781, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3338 45.327484 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3338: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 308287, Ack: 3781, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3339 45.327512 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=3781 Ack=304147 Win=10885 Len=0 Frame 3339: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 304147, Len: 0 No. Time Source Destination Protocol Length Info 3340 45.327542 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3340: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 309667, Ack: 3781, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3341 45.327577 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3341: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 311047, Ack: 3781, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3342 45.327609 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3342: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 312427, Ack: 3781, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3343 45.327637 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=3781 Ack=308287 Win=6745 Len=0 Frame 3343: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 308287, Len: 0 No. Time Source Destination Protocol Length Info 3344 45.327664 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=3781 Ack=311047 Win=3985 Len=0 Frame 3344: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 311047, Len: 0 No. Time Source Destination Protocol Length Info 3345 45.327692 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=3781 Ack=313807 Win=1225 Len=0 Frame 3345: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 313807, Len: 0 No. Time Source Destination Protocol Length Info 3346 45.367919 192.168.10.1 192.168.10.245 Syslog 371 LOCAL1.INFO: Oct 3 19:45:03 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo.kaspersky.com" arg="/diffs/bases/as/pas4/upd_terms-full.keb.g9g" sent_bytes="233" rcvd_bytes="17243" (HTTP-proxy-Visitor-00) Frame 3346: 371 bytes on wire (2968 bits), 371 bytes captured (2968 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:03 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo No. Time Source Destination Protocol Length Info 3347 45.368886 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:45:03 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="Conn End" (HTTP-proxy-Visitor-00) Frame 3347: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:45:03 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="Conn End" (HTTP-proxy-Visitor-00) No. Time Source Destination Protocol Length Info 3348 45.443423 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 3348: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3349 45.532172 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 3349: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3350 45.532204 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 3350: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3351 45.566027 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 3351: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3352 45.764836 192.168.10.226 192.168.10.68 ICMP 60 Echo (ping) request id=0x0400, seq=35824/61579, ttl=128 Frame 3352: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.68 (192.168.10.68) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3353 45.764896 192.168.10.68 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=35824/61579, ttl=128 Frame 3353: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.68 (192.168.10.68), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3354 45.764934 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.89? Tell 192.168.10.226 Frame 3354: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3355 45.764966 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.87? Tell 192.168.10.226 Frame 3355: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3356 45.764981 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.89? Tell 192.168.10.226 Frame 3356: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3357 45.764994 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.87? Tell 192.168.10.226 Frame 3357: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3358 45.765113 192.168.10.226 192.168.10.1 ICMP 60 Echo (ping) request id=0x0400, seq=39152/61592, ttl=128 Frame 3358: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.1 (192.168.10.1) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3359 45.765272 192.168.10.46 192.168.10.245 Syslog 214 LOCAL4.WARNING: Oct 03 2011 19:15:46 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n Frame 3359: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:15:46 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n No. Time Source Destination Protocol Length Info 3360 45.765325 192.168.10.1 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=39152/61592, ttl=64 Frame 3360: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3361 45.765376 192.168.10.226 192.168.10.131 ICMP 60 Echo (ping) request id=0x0400, seq=40688/61598, ttl=128 Frame 3361: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.131 (192.168.10.131) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3362 45.765432 192.168.10.226 192.168.10.68 ICMP 60 Echo (ping) request id=0x0400, seq=40944/61599, ttl=128 Frame 3362: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.68 (192.168.10.68) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3363 45.765482 192.168.10.68 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=40944/61599, ttl=128 Frame 3363: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.68 (192.168.10.68), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3364 45.765529 192.168.10.131 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=40688/61598, ttl=128 Frame 3364: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.131 (192.168.10.131), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3365 45.765540 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 3365: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3366 45.765551 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 3366: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3367 45.765564 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 3367: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3368 45.765574 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 3368: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3369 45.765605 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 3369: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3370 45.765619 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 3370: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3371 45.765631 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 3371: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3372 45.765681 192.168.10.226 192.168.10.1 ICMP 60 Echo (ping) request id=0x0400, seq=44272/61612, ttl=128 Frame 3372: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.1 (192.168.10.1) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3373 45.765694 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 3373: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3374 45.765795 192.168.10.1 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=44272/61612, ttl=64 Frame 3374: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3375 45.765843 192.168.10.226 192.168.10.131 ICMP 60 Echo (ping) request id=0x0400, seq=45808/61618, ttl=128 Frame 3375: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.131 (192.168.10.131) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3376 45.765893 192.168.10.226 192.168.10.68 ICMP 60 Echo (ping) request id=0x0400, seq=46064/61619, ttl=128 Frame 3376: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.68 (192.168.10.68) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3377 45.765938 192.168.10.131 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=45808/61618, ttl=128 Frame 3377: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Internet Protocol Version 4, Src: 192.168.10.131 (192.168.10.131), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3378 45.765984 192.168.10.68 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=46064/61619, ttl=128 Frame 3378: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.68 (192.168.10.68), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3379 45.765994 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 3379: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3380 45.766008 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 3380: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3381 45.766019 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 3381: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3382 45.766036 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 3382: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3383 45.766050 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 3383: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3384 45.766065 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 3384: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3385 45.766097 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 3385: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3386 45.766108 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 3386: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3387 45.766118 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 3387: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3388 45.766144 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 3388: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3389 45.766155 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 3389: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3390 45.766177 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 3390: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3391 45.766191 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 3391: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3392 45.766202 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 3392: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3393 45.766212 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 3393: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3394 45.766226 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 3394: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3395 45.766236 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 3395: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3396 45.766249 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 3396: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3397 45.766261 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 3397: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3398 45.766271 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 3398: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3399 45.766281 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 3399: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3400 45.766335 192.168.10.226 192.168.10.1 ICMP 60 Echo (ping) request id=0x0400, seq=49392/61632, ttl=128 Frame 3400: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.1 (192.168.10.1) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3401 45.766347 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 3401: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3402 45.766361 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 3402: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3403 45.766372 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 3403: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3404 45.766428 192.168.10.1 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=49392/61632, ttl=64 Frame 3404: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3405 45.766444 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 3405: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3406 45.766454 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 3406: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3407 45.766464 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 3407: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3408 45.766475 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 3408: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3409 45.766523 192.168.10.226 192.168.10.131 ICMP 60 Echo (ping) request id=0x0400, seq=50928/61638, ttl=128 Frame 3409: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.131 (192.168.10.131) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3410 45.766534 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 3410: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3411 45.766579 192.168.10.131 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=50928/61638, ttl=128 Frame 3411: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Internet Protocol Version 4, Src: 192.168.10.131 (192.168.10.131), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3412 45.766590 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 3412: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3413 45.766600 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 3413: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3414 45.766610 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 3414: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3415 45.766620 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 3415: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3416 45.766630 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 3416: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3417 45.766641 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 3417: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3418 45.766651 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 3418: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3419 45.766662 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 3419: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3420 45.766672 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 3420: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3421 45.766682 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 3421: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3422 45.766692 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 3422: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3423 45.766702 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 3423: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3424 45.766717 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.186? Tell 192.168.10.226 Frame 3424: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3425 45.766732 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.186? Tell 192.168.10.226 Frame 3425: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3426 45.766746 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 3426: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3427 45.766756 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 3427: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3428 45.766767 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 3428: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3429 45.766777 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 3429: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3430 45.766787 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 3430: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3431 45.766797 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 3431: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3432 45.766807 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 3432: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3433 45.766822 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 3433: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3434 45.766832 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 3434: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3435 45.766842 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 3435: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3436 45.766851 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 3436: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3437 45.766875 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 3437: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3438 45.766886 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 3438: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3439 45.766894 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 3439: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3440 45.766918 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 3440: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3441 45.766929 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 3441: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3442 45.766939 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 3442: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3443 45.766950 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 3443: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3444 45.766960 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 3444: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3445 45.766970 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 3445: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3446 45.766980 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 3446: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3447 45.766992 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 3447: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3448 45.767010 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 3448: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3449 45.767022 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 3449: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3450 45.767033 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 3450: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3451 45.767048 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 3451: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3452 45.767060 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 3452: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3453 45.767071 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 3453: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3454 45.767081 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 3454: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3455 45.767092 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 3455: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3456 45.767102 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 3456: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3457 45.767113 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 3457: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3458 45.767124 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 3458: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3459 45.767134 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 3459: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3460 45.767145 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 3460: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3461 45.767155 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 3461: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3462 45.767166 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 3462: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3463 45.767176 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 3463: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3464 45.767187 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 3464: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3465 45.767200 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 3465: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3466 45.767210 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 3466: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3467 45.767221 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 3467: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3468 45.767232 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 3468: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3469 45.817111 192.168.10.1 192.168.10.245 Syslog 192 LOCAL1.WARNING: Oct 3 19:45:03 MyFirewall firewall: Deny 0-External Firebox 71 udp 20 247 10.10.7.207 7x.x.x.2 5300 21325 (Unhandled External Packet-00) Frame 3469: 192 bytes on wire (1536 bits), 192 bytes captured (1536 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.WARNING: Oct 3 19:45:03 MyFirewall firewall: Deny 0-External Firebox 71 udp 20 247 10.10.7.207 7x.x.x.2 5300 21325 (Unhandled External Packet-00) No. Time Source Destination Protocol Length Info 3470 45.841887 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 3470: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3781, Ack: 313807, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3471 45.841921 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=313807 Ack=3823 Win=46468 Len=0 Frame 3471: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 313807, Ack: 3823, Len: 0 No. Time Source Destination Protocol Length Info 3472 45.924159 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2360285440, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3472: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3473 45.924183 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2360285440, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3473: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3474 45.924196 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2360285440, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3474: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3475 45.924208 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2360285440, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3475: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3476 45.944884 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4229366016, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3476: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3477 45.944903 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4229366016, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3477: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3478 45.944915 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4229366016, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3478: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3479 45.944927 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4229366016, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3479: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3480 46.046906 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 3480: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3481 46.046938 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 3481: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3482 46.047382 192.168.10.203 93.125.37.69 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 3482: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 93.125.37.69 (93.125.37.69) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 3483 46.346289 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 3483: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3823, Ack: 313807, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3484 46.346324 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=313807 Ack=3865 Win=46447 Len=0 Frame 3484: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 313807, Ack: 3865, Len: 0 No. Time Source Destination Protocol Length Info 3485 46.391278 190.42.139.241 192.168.10.207 TCP 62 23661 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 3485: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23661 (23661), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 3486 46.391349 192.168.10.207 190.42.139.241 TCP 62 smtp > 23661 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 3486: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23661 (23661), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 3487 46.556884 190.42.139.241 192.168.10.207 TCP 60 23661 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 3487: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23661 (23661), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 3488 46.556973 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:45:04 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23661 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 3488: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:45:04 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23661 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 3489 46.557009 192.168.10.207 190.42.139.241 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:44:39 -0400 Frame 3489: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23661 (23661), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3490 46.557051 190.42.139.241 192.168.10.207 TCP 60 23661 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 3490: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23661 (23661), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 3491 46.715961 190.42.139.241 192.168.10.207 SMTP 69 C: EHLO xexc.com Frame 3491: 69 bytes on wire (552 bits), 69 bytes captured (552 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23661 (23661), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 15 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3492 46.716114 192.168.10.207 190.42.139.241 SMTP 245 S: 250-mail.mydomain.com Hello [190.42.139.241] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 3492: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23661 (23661), Seq: 122, Ack: 16, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3493 46.716199 190.42.139.241 192.168.10.207 TCP 60 23661 > smtp [ACK] Seq=16 Ack=313 Win=93128 Len=0 Frame 3493: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23661 (23661), Dst Port: smtp (25), Seq: 16, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 3494 46.716548 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:45:04 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23661 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 3494: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:04 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23661 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 3495 46.716641 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:45:04 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23661 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 3495: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:04 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23661 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 3496 46.716729 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:45:04 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23661 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 3496: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:04 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23661 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 3497 46.716911 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:45:04 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23661 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 3497: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:04 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23661 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 3498 46.717027 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:45:04 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23661 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 3498: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:04 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23661 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 3499 46.717139 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:45:04 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23661 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 3499: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:04 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23661 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 3500 46.854667 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 3500: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3865, Ack: 313807, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3501 46.854704 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=313807 Ack=3907 Win=46426 Len=0 Frame 3501: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 313807, Ack: 3907, Len: 0 No. Time Source Destination Protocol Length Info 3502 46.862145 192.168.10.207 206.225.164.188 SMTP 558 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 3502: 558 bytes on wire (4464 bits), 558 bytes captured (4464 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1765, Ack: 129801, Len: 504 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3503 46.862176 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=130819 Ack=2269 Win=46237 Len=0 Frame 3503: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 130819, Ack: 2269, Len: 0 No. Time Source Destination Protocol Length Info 3504 46.862253 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=2269 Ack=129801 Win=0 Len=0 Frame 3504: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2269, Ack: 129801, Len: 0 No. Time Source Destination Protocol Length Info 3505 46.939602 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2377062656, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3505: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3506 46.939628 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2377062656, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3506: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3507 46.939641 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2377062656, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3507: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3508 46.939653 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2377062656, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3508: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3509 46.960315 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4246143232, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3509: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3510 46.960332 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4246143232, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3510: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3511 46.960344 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4246143232, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3511: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3512 46.960357 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4246143232, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3512: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3513 47.038099 190.42.139.241 192.168.10.207 SMTP 97 C: MAIL FROM: <cadence.edwards@xxxxxxxxxxxx> Frame 3513: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23661 (23661), Dst Port: smtp (25), Seq: 16, Ack: 313, Len: 43 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3514 47.038306 192.168.10.207 190.42.139.241 SMTP 107 S: 250 2.1.0 [email protected] OK Frame 3514: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23661 (23661), Seq: 313, Ack: 59, Len: 53 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3515 47.038353 190.42.139.241 192.168.10.207 TCP 60 23661 > smtp [ACK] Seq=59 Ack=366 Win=93074 Len=0 Frame 3515: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23661 (23661), Dst Port: smtp (25), Seq: 59, Ack: 366, Len: 0 No. Time Source Destination Protocol Length Info 3516 47.193929 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 3516: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3517 47.239950 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.89? Tell 192.168.10.226 Frame 3517: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3518 47.239982 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.89? Tell 192.168.10.226 Frame 3518: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3519 47.240012 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 3519: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3520 47.240023 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 3520: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3521 47.240033 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 3521: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3522 47.240044 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 3522: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3523 47.240054 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 3523: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3524 47.240067 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 3524: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3525 47.240077 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 3525: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3526 47.240089 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 3526: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3527 47.240099 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 3527: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3528 47.240111 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 3528: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3529 47.240127 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 3529: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3530 47.240164 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 3530: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3531 47.240175 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 3531: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3532 47.240185 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 3532: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3533 47.240213 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 3533: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3534 47.240223 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 3534: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3535 47.240233 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 3535: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3536 47.240243 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 3536: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3537 47.240254 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 3537: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3538 47.240264 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 3538: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3539 47.240274 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 3539: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3540 47.240291 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 3540: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3541 47.240302 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 3541: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3542 47.240312 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 3542: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3543 47.240322 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 3543: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3544 47.240332 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 3544: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3545 47.240342 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 3545: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3546 47.240352 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 3546: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3547 47.240362 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 3547: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3548 47.240372 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 3548: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3549 47.240382 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 3549: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3550 47.240392 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 3550: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3551 47.240402 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 3551: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3552 47.240412 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 3552: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3553 47.240422 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 3553: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3554 47.240435 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 3554: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3555 47.240445 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 3555: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3556 47.240455 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 3556: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3557 47.240465 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 3557: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3558 47.240475 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 3558: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3559 47.240485 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 3559: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3560 47.240642 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 3560: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3561 47.315349 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 3561: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3562 47.443492 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 3562: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3563 47.479955 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 3563: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3907, Ack: 313807, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3564 47.479993 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=313807 Ack=3949 Win=46405 Len=0 Frame 3564: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 313807, Ack: 3949, Len: 0 No. Time Source Destination Protocol Length Info 3565 47.530196 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 3565: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3566 47.530229 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 3566: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3567 47.566027 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 3567: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3568 47.639831 192.168.10.246 65.32.1.65 DNS 85 Standard query PTR 75.211.46.77.in-addr.arpa Frame 3568: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 51791 (51791), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 3569 47.641918 192.168.10.220 208.67.220.220 DNS 85 Standard query PTR 69.37.125.93.in-addr.arpa Frame 3569: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.220.220 (208.67.220.220) User Datagram Protocol, Src Port: 52137 (52137), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 3570 47.794038 65.32.1.65 192.168.10.246 DNS 134 Standard query response PTR 77-46-211-75.dynamic.isp.telekom.rs Frame 3570: 134 bytes on wire (1072 bits), 134 bytes captured (1072 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 51791 (51791) Domain Name System (response) No. Time Source Destination Protocol Length Info 3571 47.796764 Watchgua_3c:4c:d8 Dell_44:d0:9e ARP 60 Who has 192.168.10.246? Tell 192.168.10.1 Frame 3571: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3572 47.796941 Dell_44:d0:9e Watchgua_3c:4c:d8 ARP 60 192.168.10.246 is at 84:2b:2b:44:d0:9e Frame 3572: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3573 47.938527 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 132.76.172.85.in-addr.arpa Frame 3573: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 60564 (60564), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 3574 47.955395 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2393839872, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3574: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3575 47.955420 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2393839872, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3575: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3576 47.955432 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2393839872, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3576: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3577 47.955444 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2393839872, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3577: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3578 47.976116 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4262920448, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3578: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3579 47.976140 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4262920448, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3579: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3580 47.976153 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4262920448, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3580: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3581 47.976164 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4262920448, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3581: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3582 47.999977 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 3582: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3949, Ack: 313807, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3583 48.000011 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=313807 Ack=3991 Win=46384 Len=0 Frame 3583: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 313807, Ack: 3991, Len: 0 No. Time Source Destination Protocol Length Info 3584 48.037574 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 3584: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3585 48.037605 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 3585: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3586 48.362168 208.67.220.220 192.168.10.220 DNS 85 Standard query response, No such name Frame 3586: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.220.220 (208.67.220.220), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 52137 (52137) Domain Name System (response) No. Time Source Destination Protocol Length Info 3587 48.429283 65.32.1.65 192.168.10.246 DNS 153 Standard query response, No such name Frame 3587: 153 bytes on wire (1224 bits), 153 bytes captured (1224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 60564 (60564) Domain Name System (response) No. Time Source Destination Protocol Length Info 3588 48.429808 192.168.10.203 85.172.76.132 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 3588: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 85.172.76.132 (85.172.76.132) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 3589 48.585202 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 3589: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 3991, Ack: 313807, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3590 48.585238 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=313807 Ack=4033 Win=46363 Len=0 Frame 3590: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 313807, Ack: 4033, Len: 0 No. Time Source Destination Protocol Length Info 3591 48.622291 62.183.59.7 192.168.10.203 ICMP 70 Destination unreachable (Host unreachable) Frame 3591: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 62.183.59.7 (62.183.59.7), Dst: 192.168.10.203 (192.168.10.203) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3592 48.906592 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 4 Port 45 TTL = 120 Frame 3592: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 3593 48.930970 192.168.10.32 192.168.20.3 UDP 774 Source port: 43836 Destination port: apc-3052 Frame 3593: 774 bytes on wire (6192 bits), 774 bytes captured (6192 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 43836 (43836), Dst Port: apc-3052 (3052) Data (732 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 36 3a 35 30 0a 53 52 3d 30 31 31 =20:56:50.SR=011 0060 35 45 36 0a 53 55 3d 37 32 31 30 0a 52 44 3d 44 5E6.SU=7210.RD=D 0070 30 42 31 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 0B1.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 37 2e 30 0a 35 31 3d 30 =2.4F=207.0.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 0a 34 8.7E=00.3E=002.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 37 2e 30 C=207.3.50=037.0 00c0 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 31 2f .43=028.5.78=11/ 00d0 31 39 2f 30 37 0a 36 41 3d 30 30 35 31 3a 0a 34 19/07.6A=0051:.4 00e0 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 4e 0a 7=S.63=UPS_IDEN. 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 37 34 0.38=00.6E=IS074 0120 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 31 2f 6005481 .6D=11/ 0130 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 2d 55 19/07.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 58 4c 20 20 PS RT 10000 XL 0150 20 0a 34 36 3d 35 39 2e 39 39 0a 34 44 3d 32 30 .46=59.99.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 35 3d 7.3.4E=205.9.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 3d 31 00.42=217.0.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 30 2e 30 0a 32 46 3d 31 34 2e 39 38 C=030.0.2F=14.98 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 2e 33 0.09=59.99;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 0a 49 9=0.I0=2.I1=00.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a 49 38 5=0.I6=0.I7=0.I8 0250 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 0a 49 =Int Contact 1.I 0260 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e 74 61 9=0.IA=Int Conta 0270 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 6e 74 ct 2.IB=0.IC=Int 0280 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 3d 33 Relay.ID=0.SH=3 0290 45 41 35 33 46 37 41 34 41 31 33 45 43 41 44 43 EA53F7A4A13ECADC 02a0 32 41 41 39 34 31 41 33 32 42 35 39 31 39 42 0a 2AA941A32B5919B. 02b0 4d 44 3d 31 66 64 30 66 63 63 33 34 63 62 32 32 MD=1fd0fcc34cb22 02c0 33 61 62 64 37 39 38 33 35 33 30 30 39 37 62 33 3abd7983530097b3 02d0 36 36 37 0a 3c 2f 42 4f 44 59 3e 0a 667.</BODY>. No. Time Source Destination Protocol Length Info 3594 48.931055 192.168.10.32 192.168.20.3 UDP 774 Source port: 43836 Destination port: apc-3052 Frame 3594: 774 bytes on wire (6192 bits), 774 bytes captured (6192 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 43836 (43836), Dst Port: apc-3052 (3052) Data (732 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 36 3a 35 30 0a 53 52 3d 30 31 31 =20:56:50.SR=011 0060 35 45 36 0a 53 55 3d 37 32 31 30 0a 52 44 3d 44 5E6.SU=7210.RD=D 0070 30 42 31 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 0B1.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 37 2e 30 0a 35 31 3d 30 =2.4F=207.0.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 0a 34 8.7E=00.3E=002.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 37 2e 30 C=207.3.50=037.0 00c0 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 31 2f .43=028.5.78=11/ 00d0 31 39 2f 30 37 0a 36 41 3d 30 30 35 31 3a 0a 34 19/07.6A=0051:.4 00e0 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 4e 0a 7=S.63=UPS_IDEN. 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 37 34 0.38=00.6E=IS074 0120 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 31 2f 6005481 .6D=11/ 0130 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 2d 55 19/07.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 58 4c 20 20 PS RT 10000 XL 0150 20 0a 34 36 3d 35 39 2e 39 39 0a 34 44 3d 32 30 .46=59.99.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 35 3d 7.3.4E=205.9.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 3d 31 00.42=217.0.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 30 2e 30 0a 32 46 3d 31 34 2e 39 38 C=030.0.2F=14.98 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 2e 33 0.09=59.99;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 0a 49 9=0.I0=2.I1=00.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a 49 38 5=0.I6=0.I7=0.I8 0250 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 0a 49 =Int Contact 1.I 0260 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e 74 61 9=0.IA=Int Conta 0270 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 6e 74 ct 2.IB=0.IC=Int 0280 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 3d 33 Relay.ID=0.SH=3 0290 45 41 35 33 46 37 41 34 41 31 33 45 43 41 44 43 EA53F7A4A13ECADC 02a0 32 41 41 39 34 31 41 33 32 42 35 39 31 39 42 0a 2AA941A32B5919B. 02b0 4d 44 3d 31 66 64 30 66 63 63 33 34 63 62 32 32 MD=1fd0fcc34cb22 02c0 33 61 62 64 37 39 38 33 35 33 30 30 39 37 62 33 3abd7983530097b3 02d0 36 36 37 0a 3c 2f 42 4f 44 59 3e 0a 667.</BODY>. No. Time Source Destination Protocol Length Info 3595 48.931178 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:15:49 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS3/43836 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 3595: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:15:49 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS3/43836 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 3596 48.970838 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2410617088, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3596: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3597 48.970861 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2410617088, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3597: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3598 48.970873 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2410617088, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3598: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3599 48.970886 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2410617088, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3599: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3600 48.991571 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4279697664, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3600: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3601 48.991600 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 4279697664, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3601: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3602 48.991614 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4279697664, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3602: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3603 48.991627 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 4279697664, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3603: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3604 49.093461 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 3604: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4033, Ack: 313807, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3605 49.093498 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=313807 Ack=4075 Win=46342 Len=0 Frame 3605: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 313807, Ack: 4075, Len: 0 No. Time Source Destination Protocol Length Info 3606 49.112239 IntelCor_ed:1c:1c Broadcast ARP 60 Who has 192.168.10.240? Tell 192.168.10.225 Frame 3606: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1c:1c (00:13:20:ed:1c:1c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3607 49.112269 IntelCor_ed:1c:1c Broadcast ARP 60 Who has 192.168.10.240? Tell 192.168.10.225 Frame 3607: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1c:1c (00:13:20:ed:1c:1c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3608 49.193853 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 3608: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3609 49.314010 192.168.10.1 192.168.10.245 Syslog 307 LOCAL1.INFO: Oct 3 19:45:07 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23661 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eygpope@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 3609: 307 bytes on wire (2456 bits), 307 bytes captured (2456 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:07 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23661 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 3610 49.315337 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 3610: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3611 49.443520 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 3611: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3612 49.536004 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 3612: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3613 49.536036 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 3613: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3614 49.566014 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 3614: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3615 49.609745 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 3615: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4075, Ack: 313807, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3616 49.609779 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=313807 Ack=4117 Win=46321 Len=0 Frame 3616: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 313807, Ack: 4117, Len: 0 No. Time Source Destination Protocol Length Info 3617 49.824545 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-09.geo.kaspersky.com Frame 3617: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 56842 (56842), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 3618 49.929363 192.168.10.203 85.172.76.132 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 3618: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 85.172.76.132 (85.172.76.132) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 3619 49.986576 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2427394304, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3619: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3620 49.986599 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2427394304, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3620: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3621 49.986612 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2427394304, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3621: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3622 49.986624 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2427394304, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3622: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3623 49.989331 190.42.139.241 192.168.10.207 SMTP 60 C: QUIT Frame 3623: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23661 (23661), Dst Port: smtp (25), Seq: 59, Ack: 366, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3624 49.989427 192.168.10.207 190.42.139.241 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 3624: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23661 (23661), Seq: 366, Ack: 65, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3625 49.989474 190.42.139.241 192.168.10.207 TCP 60 23661 > smtp [ACK] Seq=65 Ack=435 Win=93006 Len=0 Frame 3625: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23661 (23661), Dst Port: smtp (25), Seq: 65, Ack: 435, Len: 0 No. Time Source Destination Protocol Length Info 3626 49.989502 192.168.10.207 190.42.139.241 TCP 60 smtp > 23661 [FIN, ACK] Seq=435 Ack=65 Win=65471 Len=0 Frame 3626: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23661 (23661), Seq: 435, Ack: 65, Len: 0 No. Time Source Destination Protocol Length Info 3627 49.989540 190.42.139.241 192.168.10.207 TCP 60 23661 > smtp [ACK] Seq=65 Ack=436 Win=93006 Len=0 Frame 3627: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23661 (23661), Dst Port: smtp (25), Seq: 65, Ack: 436, Len: 0 No. Time Source Destination Protocol Length Info 3628 50.007342 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1573120, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3628: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3629 50.007365 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1573120, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3629: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3630 50.007377 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1573120, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3630: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3631 50.007390 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1573120, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3631: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3632 50.035823 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 3632: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3633 50.035853 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 3633: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3634 50.090675 192.168.10.142 192.168.10.185 VNC 92 Authentication result Frame 3634: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 826, Ack: 846, Len: 38 Virtual Network Computing No. Time Source Destination Protocol Length Info 3635 50.100002 192.168.10.246 192.168.47.1 TCP 62 netbios-ssn > business [SYN, ACK] Seq=0 Ack=0 Win=16384 Len=0 MSS=1460 SACK_PERM=1 Frame 3635: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 192.168.47.1 (192.168.47.1) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: business (3107), Seq: 0, Ack: 0, Len: 0 No. Time Source Destination Protocol Length Info 3636 50.102944 192.168.10.185 192.168.10.142 VNC 76 Authentication result Frame 3636: 76 bytes on wire (608 bits), 76 bytes captured (608 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 846, Ack: 864, Len: 22 Virtual Network Computing No. Time Source Destination Protocol Length Info 3637 50.120993 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 3637: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4117, Ack: 313807, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3638 50.121031 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=313807 Ack=4159 Win=46300 Len=0 Frame 3638: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 313807, Ack: 4159, Len: 0 No. Time Source Destination Protocol Length Info 3639 50.121785 62.183.59.7 192.168.10.203 ICMP 70 Destination unreachable (Host unreachable) Frame 3639: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 62.183.59.7 (62.183.59.7), Dst: 192.168.10.203 (192.168.10.203) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3640 50.148680 192.168.10.142 192.168.10.185 VNC 88 Authentication result Frame 3640: 88 bytes on wire (704 bits), 88 bytes captured (704 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 864, Ack: 868, Len: 34 Virtual Network Computing No. Time Source Destination Protocol Length Info 3641 50.152683 192.168.10.142 192.168.10.185 VNC 89 Authentication result Frame 3641: 89 bytes on wire (712 bits), 89 bytes captured (712 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 898, Ack: 868, Len: 35 Virtual Network Computing No. Time Source Destination Protocol Length Info 3642 50.152716 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=868 Ack=933 Win=64603 Len=0 Frame 3642: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 868, Ack: 933, Len: 0 No. Time Source Destination Protocol Length Info 3643 50.153039 192.168.10.142 192.168.10.185 VNC 90 Authentication result Frame 3643: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 933, Ack: 868, Len: 36 Virtual Network Computing No. Time Source Destination Protocol Length Info 3644 50.153094 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 3644: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 969, Ack: 868, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 3645 50.153127 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=868 Ack=1001 Win=64535 Len=0 Frame 3645: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 868, Ack: 1001, Len: 0 No. Time Source Destination Protocol Length Info 3646 50.153419 192.168.10.142 192.168.10.185 VNC 90 Authentication result Frame 3646: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1001, Ack: 868, Len: 36 Virtual Network Computing No. Time Source Destination Protocol Length Info 3647 50.153463 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 3647: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1037, Ack: 868, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 3648 50.153495 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=868 Ack=1069 Win=64467 Len=0 Frame 3648: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 868, Ack: 1069, Len: 0 No. Time Source Destination Protocol Length Info 3649 50.153536 192.168.10.142 192.168.10.185 VNC 82 Authentication result Frame 3649: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1069, Ack: 868, Len: 28 Virtual Network Computing No. Time Source Destination Protocol Length Info 3650 50.153662 192.168.10.142 192.168.10.185 VNC 77 Authentication result Frame 3650: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1097, Ack: 868, Len: 23 Virtual Network Computing No. Time Source Destination Protocol Length Info 3651 50.153696 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=868 Ack=1120 Win=64416 Len=0 Frame 3651: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 868, Ack: 1120, Len: 0 No. Time Source Destination Protocol Length Info 3652 50.196485 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.89? Tell 192.168.10.226 Frame 3652: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3653 50.196516 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.89? Tell 192.168.10.226 Frame 3653: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3654 50.196532 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 3654: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3655 50.196542 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 3655: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3656 50.196553 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 3656: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3657 50.196569 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 3657: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3658 50.196580 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 3658: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3659 50.196590 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 3659: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3660 50.196601 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 3660: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3661 50.196611 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 3661: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3662 50.196621 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 3662: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3663 50.196637 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 3663: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3664 50.196670 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 3664: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3665 50.196681 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 3665: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3666 50.196691 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 3666: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3667 50.196718 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 3667: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3668 50.196729 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 3668: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3669 50.196740 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 3669: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3670 50.196750 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 3670: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3671 50.196761 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 3671: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3672 50.196771 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 3672: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3673 50.196781 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 3673: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3674 50.196791 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 3674: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3675 50.196801 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 3675: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3676 50.196811 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 3676: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3677 50.196830 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 3677: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3678 50.196840 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 3678: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3679 50.196850 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 3679: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3680 50.196860 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 3680: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3681 50.196870 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 3681: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3682 50.196880 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 3682: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3683 50.196890 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 3683: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3684 50.196900 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 3684: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3685 50.196910 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 3685: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3686 50.196920 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 3686: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3687 50.196930 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 3687: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3688 50.196940 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 3688: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3689 50.196950 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 3689: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3690 50.196960 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 3690: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3691 50.196970 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 3691: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3692 50.196980 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 3692: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3693 50.196989 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 3693: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3694 50.197000 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 3694: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3695 50.197022 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 3695: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3696 50.332171 192.168.10.185 192.168.10.142 VNC 84 Authentication result Frame 3696: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 868, Ack: 1120, Len: 30 Virtual Network Computing No. Time Source Destination Protocol Length Info 3697 50.342279 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=2269 Ack=129801 Win=17777 Len=0 Frame 3697: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2269, Ack: 129801, Len: 0 No. Time Source Destination Protocol Length Info 3698 50.342310 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 3697#1] smtp > 9428 [ACK] Seq=2269 Ack=129801 Win=17777 Len=0 Frame 3698: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2269, Ack: 129801, Len: 0 No. Time Source Destination Protocol Length Info 3699 50.342343 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3699: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 130819, Ack: 2269, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3700 50.342373 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3700: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 132199, Ack: 2269, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3701 50.342402 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3701: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 133579, Ack: 2269, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3702 50.342432 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3702: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 134959, Ack: 2269, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3703 50.342461 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3703: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 136339, Ack: 2269, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3704 50.342490 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3704: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 137719, Ack: 2269, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3705 50.342528 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 3697#2] smtp > 9428 [ACK] Seq=2269 Ack=129801 Win=17777 Len=0 Frame 3705: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2269, Ack: 129801, Len: 0 No. Time Source Destination Protocol Length Info 3706 50.342561 192.168.10.207 206.225.164.188 SMTP 222 S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 3706: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2269, Ack: 129801, Len: 168 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3707 50.342589 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 3706#1] smtp > 9428 [ACK] Seq=2437 Ack=129801 Win=17777 Len=0 Frame 3707: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2437, Ack: 129801, Len: 0 No. Time Source Destination Protocol Length Info 3708 50.342617 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 3706#2] smtp > 9428 [ACK] Seq=2437 Ack=129801 Win=17777 Len=0 Frame 3708: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2437, Ack: 129801, Len: 0 No. Time Source Destination Protocol Length Info 3709 50.342644 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 3706#3] smtp > 9428 [ACK] Seq=2437 Ack=129801 Win=17777 Len=0 Frame 3709: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2437, Ack: 129801, Len: 0 No. Time Source Destination Protocol Length Info 3710 50.342672 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=139099 Ack=2437 Win=46153 Len=0 Frame 3710: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 139099, Ack: 2437, Len: 0 No. Time Source Destination Protocol Length Info 3711 50.342700 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 3706#4] smtp > 9428 [ACK] Seq=2437 Ack=129801 Win=17777 Len=0 Frame 3711: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2437, Ack: 129801, Len: 0 No. Time Source Destination Protocol Length Info 3712 50.342727 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 3706#5] smtp > 9428 [ACK] Seq=2437 Ack=129801 Win=17777 Len=0 Frame 3712: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2437, Ack: 129801, Len: 0 No. Time Source Destination Protocol Length Info 3713 50.342755 206.225.164.188 192.168.10.207 SMTP 1072 [TCP Fast Retransmission] C: DATA fragment, 1018 bytes Frame 3713: 1072 bytes on wire (8576 bits), 1072 bytes captured (8576 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 129801, Ack: 2437, Len: 1018 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3714 50.342784 206.225.164.188 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 3714: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 130819, Ack: 2437, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3715 50.342814 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3715: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 139099, Ack: 2437, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3716 50.342843 206.225.164.188 192.168.10.207 SMTP 583 C: DATA fragment, 529 bytes Frame 3716: 583 bytes on wire (4664 bits), 583 bytes captured (4664 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 140479, Ack: 2437, Len: 529 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3717 50.342874 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=2437 Ack=139099 Win=8479 Len=0 Frame 3717: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2437, Ack: 139099, Len: 0 No. Time Source Destination Protocol Length Info 3718 50.342902 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3718: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 141008, Ack: 2437, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3719 50.342931 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3719: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 142388, Ack: 2437, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3720 50.342959 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=2437 Ack=141008 Win=6570 Len=0 Frame 3720: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2437, Ack: 141008, Len: 0 No. Time Source Destination Protocol Length Info 3721 50.342990 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3721: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 143768, Ack: 2437, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3722 50.343019 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 3722: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 145148, Ack: 2437, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3723 50.343048 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=2437 Ack=143768 Win=3810 Len=0 Frame 3723: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2437, Ack: 143768, Len: 0 No. Time Source Destination Protocol Length Info 3724 50.343076 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=2437 Ack=146528 Win=1050 Len=0 Frame 3724: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2437, Ack: 146528, Len: 0 No. Time Source Destination Protocol Length Info 3725 50.450201 192.168.10.30 192.168.20.3 UDP 673 Source port: 34427 Destination port: apc-3052 Frame 3725: 673 bytes on wire (5384 bits), 673 bytes captured (5384 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (631 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 44 54 3d 31 30 .168.10.30.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 31 38 3a 34 /03/2011.TM=18:4 0040 34 3a 34 36 0a 53 52 3d 31 42 0a 53 55 3d 37 42 4:46.SR=1B.SU=7B 0050 31 32 46 46 36 32 0a 52 44 3d 46 43 42 39 0a 54 12FF62.RD=FCB9.T 0060 41 3d 31 39 32 2e 31 36 38 2e 32 30 2e 33 0a 50 A=192.168.20.3.P 0070 54 3d 33 30 35 32 0a 43 4c 3d 43 30 41 38 30 41 T=3052.CL=C0A80A 0080 44 42 0a 43 4c 3d 43 30 41 38 30 41 44 30 0a 43 DB.CL=C0A80AD0.C 0090 4c 3d 43 30 41 38 30 41 43 42 0a 43 4c 3d 43 30 L=C0A80ACB.CL=C0 00a0 41 38 30 41 43 43 0a 43 4c 3d 43 30 41 38 30 41 A80ACC.CL=C0A80A 00b0 43 45 0a 43 4c 3d 43 30 41 38 30 41 44 43 0a 43 CE.CL=C0A80ADC.C 00c0 4c 3d 43 30 41 38 30 41 43 46 0a 43 4c 3d 43 30 L=C0A80ACF.CL=C0 00d0 41 38 30 41 43 44 0a 43 4c 3d 43 30 41 38 30 41 A80ACD.CL=C0A80A 00e0 46 30 0a 43 4c 3d 43 30 41 38 30 41 43 39 0a 43 F0.CL=C0A80AC9.C 00f0 4c 3d 43 30 41 38 30 41 31 30 0a 43 4c 3d 43 30 L=C0A80A10.CL=C0 0100 41 38 30 41 30 44 0a 43 4c 3d 43 30 41 38 30 41 A80A0D.CL=C0A80A 0110 30 46 0a 43 4c 3d 43 30 41 38 30 41 30 43 0a 43 0F.CL=C0A80A0C.C 0120 4c 3d 43 30 41 38 30 41 44 31 0a 43 4c 3d 43 30 L=C0A80AD1.CL=C0 0130 41 38 30 41 43 41 0a 43 4c 3d 43 30 41 38 30 41 A80ACA.CL=C0A80A 0140 46 41 0a 43 4c 3d 43 30 41 38 30 41 44 38 0a 43 FA.CL=C0A80AD8.C 0150 4c 3d 43 30 41 38 30 41 32 37 0a 43 4c 3d 43 30 L=C0A80A27.CL=C0 0160 41 38 30 41 44 39 0a 43 4c 3d 43 30 41 38 30 41 A80AD9.CL=C0A80A 0170 44 33 0a 43 4c 3d 43 30 41 38 30 41 44 32 0a 43 D3.CL=C0A80AD2.C 0180 4c 3d 43 30 41 38 30 41 45 32 0a 43 4c 3d 43 30 L=C0A80AE2.CL=C0 0190 41 38 30 41 45 33 0a 43 4c 3d 43 30 41 38 30 41 A80AE3.CL=C0A80A 01a0 44 45 0a 43 4c 3d 43 30 41 38 31 34 30 33 0a 43 DE.CL=C0A81403.C 01b0 4c 3d 43 30 41 38 30 41 46 36 0a 43 4c 3d 43 30 L=C0A80AF6.CL=C0 01c0 41 38 30 41 31 31 0a 43 4c 3d 30 30 0a 43 4c 3d A80A11.CL=00.CL= 01d0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 01e0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01f0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0200 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0210 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0220 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0230 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0240 4c 3d 30 30 0a 43 4c 3d 30 30 0a 4d 44 3d 66 33 L=00.CL=00.MD=f3 0250 35 38 35 39 37 63 35 32 32 36 66 31 65 36 65 33 58597c5226f1e6e3 0260 34 63 34 35 39 35 66 34 34 31 62 35 39 39 0a 3c 4c4595f441b599.< 0270 2f 42 4f 44 59 3e 0a /BODY>. No. Time Source Destination Protocol Length Info 3726 50.450301 192.168.10.30 192.168.20.3 UDP 673 Source port: 34427 Destination port: apc-3052 Frame 3726: 673 bytes on wire (5384 bits), 673 bytes captured (5384 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (631 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 44 54 3d 31 30 .168.10.30.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 31 38 3a 34 /03/2011.TM=18:4 0040 34 3a 34 36 0a 53 52 3d 31 42 0a 53 55 3d 37 42 4:46.SR=1B.SU=7B 0050 31 32 46 46 36 32 0a 52 44 3d 46 43 42 39 0a 54 12FF62.RD=FCB9.T 0060 41 3d 31 39 32 2e 31 36 38 2e 32 30 2e 33 0a 50 A=192.168.20.3.P 0070 54 3d 33 30 35 32 0a 43 4c 3d 43 30 41 38 30 41 T=3052.CL=C0A80A 0080 44 42 0a 43 4c 3d 43 30 41 38 30 41 44 30 0a 43 DB.CL=C0A80AD0.C 0090 4c 3d 43 30 41 38 30 41 43 42 0a 43 4c 3d 43 30 L=C0A80ACB.CL=C0 00a0 41 38 30 41 43 43 0a 43 4c 3d 43 30 41 38 30 41 A80ACC.CL=C0A80A 00b0 43 45 0a 43 4c 3d 43 30 41 38 30 41 44 43 0a 43 CE.CL=C0A80ADC.C 00c0 4c 3d 43 30 41 38 30 41 43 46 0a 43 4c 3d 43 30 L=C0A80ACF.CL=C0 00d0 41 38 30 41 43 44 0a 43 4c 3d 43 30 41 38 30 41 A80ACD.CL=C0A80A 00e0 46 30 0a 43 4c 3d 43 30 41 38 30 41 43 39 0a 43 F0.CL=C0A80AC9.C 00f0 4c 3d 43 30 41 38 30 41 31 30 0a 43 4c 3d 43 30 L=C0A80A10.CL=C0 0100 41 38 30 41 30 44 0a 43 4c 3d 43 30 41 38 30 41 A80A0D.CL=C0A80A 0110 30 46 0a 43 4c 3d 43 30 41 38 30 41 30 43 0a 43 0F.CL=C0A80A0C.C 0120 4c 3d 43 30 41 38 30 41 44 31 0a 43 4c 3d 43 30 L=C0A80AD1.CL=C0 0130 41 38 30 41 43 41 0a 43 4c 3d 43 30 41 38 30 41 A80ACA.CL=C0A80A 0140 46 41 0a 43 4c 3d 43 30 41 38 30 41 44 38 0a 43 FA.CL=C0A80AD8.C 0150 4c 3d 43 30 41 38 30 41 32 37 0a 43 4c 3d 43 30 L=C0A80A27.CL=C0 0160 41 38 30 41 44 39 0a 43 4c 3d 43 30 41 38 30 41 A80AD9.CL=C0A80A 0170 44 33 0a 43 4c 3d 43 30 41 38 30 41 44 32 0a 43 D3.CL=C0A80AD2.C 0180 4c 3d 43 30 41 38 30 41 45 32 0a 43 4c 3d 43 30 L=C0A80AE2.CL=C0 0190 41 38 30 41 45 33 0a 43 4c 3d 43 30 41 38 30 41 A80AE3.CL=C0A80A 01a0 44 45 0a 43 4c 3d 43 30 41 38 31 34 30 33 0a 43 DE.CL=C0A81403.C 01b0 4c 3d 43 30 41 38 30 41 46 36 0a 43 4c 3d 43 30 L=C0A80AF6.CL=C0 01c0 41 38 30 41 31 31 0a 43 4c 3d 30 30 0a 43 4c 3d A80A11.CL=00.CL= 01d0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 01e0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01f0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0200 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0210 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0220 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0230 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0240 4c 3d 30 30 0a 43 4c 3d 30 30 0a 4d 44 3d 66 33 L=00.CL=00.MD=f3 0250 35 38 35 39 37 63 35 32 32 36 66 31 65 36 65 33 58597c5226f1e6e3 0260 34 63 34 35 39 35 66 34 34 31 62 35 39 39 0a 3c 4c4595f441b599.< 0270 2f 42 4f 44 59 3e 0a /BODY>. No. Time Source Destination Protocol Length Info 3727 50.450403 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:15:51 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS1/34427 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 3727: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:15:51 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS1/34427 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 3728 50.524623 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=1120 Ack=898 Win=63343 Len=0 Frame 3728: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1120, Ack: 898, Len: 0 No. Time Source Destination Protocol Length Info 3729 50.524663 192.168.10.185 192.168.10.142 VNC 202 Authentication result Frame 3729: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 898, Ack: 1120, Len: 148 Virtual Network Computing No. Time Source Destination Protocol Length Info 3730 50.606589 192.168.10.142 192.168.10.185 VNC 98 Authentication result Frame 3730: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1120, Ack: 1046, Len: 44 Virtual Network Computing No. Time Source Destination Protocol Length Info 3731 50.619257 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 3731: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4159, Ack: 313807, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3732 50.619337 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=313807 Ack=4201 Win=46279 Len=0 Frame 3732: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 313807, Ack: 4201, Len: 0 No. Time Source Destination Protocol Length Info 3733 50.621587 192.168.10.185 192.168.10.142 VNC 101 Authentication result Frame 3733: 101 bytes on wire (808 bits), 101 bytes captured (808 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 1046, Ack: 1164, Len: 47 Virtual Network Computing No. Time Source Destination Protocol Length Info 3734 50.800416 Dell_44:d0:a0 Broadcast ARP 60 Gratuitous ARP for 192.168.0.120 (Reply) Frame 3734: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:a0 (84:2b:2b:44:d0:a0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply/gratuitous ARP) No. Time Source Destination Protocol Length Info 3735 50.800448 Dell_44:d0:a0 Broadcast ARP 60 Gratuitous ARP for 192.168.0.120 (Reply) Frame 3735: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:a0 (84:2b:2b:44:d0:a0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply/gratuitous ARP) No. Time Source Destination Protocol Length Info 3736 50.823011 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 3 Port 47 TTL = 120 Frame 3736: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 3737 50.824266 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-09.geo.kaspersky.com Frame 3737: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 56842 (56842), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 3738 50.835466 190.42.139.241 192.168.10.207 TCP 60 23661 > smtp [RST, ACK] Seq=65 Ack=436 Win=93006 Len=0 Frame 3738: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23661 (23661), Dst Port: smtp (25), Seq: 65, Ack: 436, Len: 0 No. Time Source Destination Protocol Length Info 3739 50.835547 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:45:08 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23661 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 3739: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:45:08 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23661 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 3740 50.856514 192.168.10.142 192.168.10.185 VNC 127 Authentication result Frame 3740: 127 bytes on wire (1016 bits), 127 bytes captured (1016 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1164, Ack: 1093, Len: 73 Virtual Network Computing No. Time Source Destination Protocol Length Info 3741 50.869063 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 3741: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1237, Ack: 1093, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 3742 50.869096 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=1093 Ack=1264 Win=65535 Len=0 Frame 3742: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 1093, Ack: 1264, Len: 0 No. Time Source Destination Protocol Length Info 3743 50.869124 192.168.10.185 192.168.10.142 VNC 81 Authentication result Frame 3743: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 1093, Ack: 1264, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 3744 50.874185 192.168.10.142 192.168.10.185 VNC 95 Authentication result Frame 3744: 95 bytes on wire (760 bits), 95 bytes captured (760 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1264, Ack: 1093, Len: 41 Virtual Network Computing No. Time Source Destination Protocol Length Info 3745 50.874296 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 3745: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 1120, Ack: 1305, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 3746 50.874327 192.168.10.185 192.168.10.142 VNC 117 Authentication result Frame 3746: 117 bytes on wire (936 bits), 117 bytes captured (936 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 2380, Ack: 1305, Len: 63 Virtual Network Computing No. Time Source Destination Protocol Length Info 3747 50.896839 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=1305 Ack=2380 Win=64240 Len=0 Frame 3747: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1305, Ack: 2380, Len: 0 No. Time Source Destination Protocol Length Info 3748 50.977920 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 3748: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3749 50.977953 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 3749: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3750 51.002094 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2444171520, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3750: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3751 51.002122 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2444171520, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3751: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3752 51.002136 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2444171520, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3752: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3753 51.002149 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2444171520, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3753: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3754 51.022790 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 18350336, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3754: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3755 51.022815 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 18350336, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3755: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3756 51.022828 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 18350336, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3756: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3757 51.022840 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 18350336, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3757: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3758 51.067317 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 3758: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1305, Ack: 2443, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 3759 51.083301 192.168.10.142 192.168.10.185 VNC 205 Authentication result Frame 3759: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1337, Ack: 2443, Len: 151 Virtual Network Computing No. Time Source Destination Protocol Length Info 3760 51.083338 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=2443 Ack=1488 Win=65311 Len=0 Frame 3760: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 2443, Ack: 1488, Len: 0 No. Time Source Destination Protocol Length Info 3761 51.090798 192.168.10.142 192.168.10.185 VNC 97 Authentication result Frame 3761: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1488, Ack: 2443, Len: 43 Virtual Network Computing No. Time Source Destination Protocol Length Info 3762 51.114673 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 3762: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 2443, Ack: 1531, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 3763 51.114709 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 3763: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 3703, Ack: 1531, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 3764 51.114738 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 3764: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 4963, Ack: 1531, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 3765 51.114767 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 3765: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 6223, Ack: 1531, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 3766 51.124861 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 3766: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1531, Ack: 2443, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 3767 51.132655 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 3767: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4201, Ack: 313807, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3768 51.132688 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=313807 Ack=4243 Win=46258 Len=0 Frame 3768: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 313807, Ack: 4243, Len: 0 No. Time Source Destination Protocol Length Info 3769 51.141149 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=1558 Ack=4963 Win=64240 Len=0 Frame 3769: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1558, Ack: 4963, Len: 0 No. Time Source Destination Protocol Length Info 3770 51.141190 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 3770: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 6539, Ack: 1558, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 3771 51.141220 192.168.10.185 192.168.10.142 VNC 192 Authentication result Frame 3771: 192 bytes on wire (1536 bits), 192 bytes captured (1536 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 7799, Ack: 1558, Len: 138 Virtual Network Computing No. Time Source Destination Protocol Length Info 3772 51.141257 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=1558 Ack=6223 Win=64240 Len=0 Frame 3772: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1558, Ack: 6223, Len: 0 No. Time Source Destination Protocol Length Info 3773 51.164635 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=1558 Ack=7799 Win=64240 Len=0 Frame 3773: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1558, Ack: 7799, Len: 0 No. Time Source Destination Protocol Length Info 3774 51.194242 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 3774: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3775 51.222752 192.168.10.142 192.168.10.185 VNC 99 [TCP Previous segment lost] Authentication result Frame 3775: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1761, Ack: 7937, Len: 45 Virtual Network Computing No. Time Source Destination Protocol Length Info 3776 51.222790 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 3771#1] rfb > xrl [ACK] Seq=7937 Ack=1558 Win=65241 Len=0 SLE=1761 SRE=1806 Frame 3776: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 7937, Ack: 1558, Len: 0 No. Time Source Destination Protocol Length Info 3777 51.232264 192.168.10.142 192.168.10.185 VNC 127 Authentication result Frame 3777: 127 bytes on wire (1016 bits), 127 bytes captured (1016 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1806, Ack: 7937, Len: 73 Virtual Network Computing No. Time Source Destination Protocol Length Info 3778 51.232298 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 3771#2] rfb > xrl [ACK] Seq=7937 Ack=1558 Win=65241 Len=0 SLE=1761 SRE=1879 Frame 3778: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 7937, Ack: 1558, Len: 0 No. Time Source Destination Protocol Length Info 3779 51.232336 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 3779: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1879, Ack: 7937, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 3780 51.232368 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 3771#3] rfb > xrl [ACK] Seq=7937 Ack=1558 Win=65241 Len=0 SLE=1761 SRE=1911 Frame 3780: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 7937, Ack: 1558, Len: 0 No. Time Source Destination Protocol Length Info 3781 51.255335 192.168.10.142 192.168.10.185 VNC 257 [TCP Retransmission] Authentication result Frame 3781: 257 bytes on wire (2056 bits), 257 bytes captured (2056 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1558, Ack: 7937, Len: 203 Virtual Network Computing No. Time Source Destination Protocol Length Info 3782 51.255372 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=7937 Ack=1911 Win=64888 Len=0 Frame 3782: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 7937, Ack: 1911, Len: 0 No. Time Source Destination Protocol Length Info 3783 51.263059 192.168.10.185 192.168.10.142 VNC 93 Authentication result Frame 3783: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 7937, Ack: 1911, Len: 39 Virtual Network Computing No. Time Source Destination Protocol Length Info 3784 51.264549 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 3784: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 7976, Ack: 1911, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 3785 51.264592 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 3785: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 9236, Ack: 1911, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 3786 51.264633 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 3786: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 10496, Ack: 1911, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 3787 51.264667 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 3787: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 11756, Ack: 1911, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 3788 51.264699 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 3788: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 12072, Ack: 1911, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 3789 51.291092 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=1911 Ack=9236 Win=64240 Len=0 Frame 3789: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1911, Ack: 9236, Len: 0 No. Time Source Destination Protocol Length Info 3790 51.291208 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 3790: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 13332, Ack: 1911, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 3791 51.297132 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=1911 Ack=11756 Win=64240 Len=0 Frame 3791: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1911, Ack: 11756, Len: 0 No. Time Source Destination Protocol Length Info 3792 51.297167 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 3792: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 14592, Ack: 1911, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 3793 51.297200 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 3793: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 15852, Ack: 1911, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 3794 51.297239 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=1911 Ack=13332 Win=64240 Len=0 Frame 3794: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1911, Ack: 13332, Len: 0 No. Time Source Destination Protocol Length Info 3795 51.297267 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 3795: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 17112, Ack: 1911, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 3796 51.297299 192.168.10.185 192.168.10.142 VNC 372 Authentication result Frame 3796: 372 bytes on wire (2976 bits), 372 bytes captured (2976 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 18372, Ack: 1911, Len: 318 Virtual Network Computing No. Time Source Destination Protocol Length Info 3797 51.297331 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 3797: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 18690, Ack: 1911, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 3798 51.302506 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 3798: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2437, Ack: 146528, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3799 51.302538 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=146528 Ack=2479 Win=46132 Len=0 Frame 3799: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 146528, Ack: 2479, Len: 0 No. Time Source Destination Protocol Length Info 3800 51.315333 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 3800: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3801 51.322898 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=1911 Ack=15852 Win=64240 Len=0 Frame 3801: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1911, Ack: 15852, Len: 0 No. Time Source Destination Protocol Length Info 3802 51.322936 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 3802: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 19950, Ack: 1911, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 3803 51.322965 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 3803: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 21210, Ack: 1911, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 3804 51.323004 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 3804: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 22470, Ack: 1911, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 3805 51.323041 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=1911 Ack=18372 Win=64240 Len=0 Frame 3805: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1911, Ack: 18372, Len: 0 No. Time Source Destination Protocol Length Info 3806 51.326642 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=1911 Ack=19950 Win=64240 Len=0 Frame 3806: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1911, Ack: 19950, Len: 0 No. Time Source Destination Protocol Length Info 3807 51.326724 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 3807: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 22786, Ack: 1911, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 3808 51.326756 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 3808: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 24046, Ack: 1911, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 3809 51.326785 192.168.10.185 192.168.10.142 VNC 82 Authentication result Frame 3809: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 25306, Ack: 1911, Len: 28 Virtual Network Computing No. Time Source Destination Protocol Length Info 3810 51.347236 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=1911 Ack=22470 Win=64240 Len=0 Frame 3810: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1911, Ack: 22470, Len: 0 No. Time Source Destination Protocol Length Info 3811 51.350778 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=1911 Ack=24046 Win=64240 Len=0 Frame 3811: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1911, Ack: 24046, Len: 0 No. Time Source Destination Protocol Length Info 3812 51.350819 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=1911 Ack=25334 Win=64240 Len=0 Frame 3812: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1911, Ack: 25334, Len: 0 No. Time Source Destination Protocol Length Info 3813 51.361438 192.168.10.142 192.168.10.185 VNC 127 Authentication result Frame 3813: 127 bytes on wire (1016 bits), 127 bytes captured (1016 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1911, Ack: 25334, Len: 73 Virtual Network Computing No. Time Source Destination Protocol Length Info 3814 51.429280 192.168.10.203 85.172.76.132 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 3814: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 85.172.76.132 (85.172.76.132) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 3815 51.432437 190.42.139.241 192.168.10.207 TCP 62 23698 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 3815: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23698 (23698), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 3816 51.432506 192.168.10.207 190.42.139.241 TCP 62 smtp > 23698 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 3816: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23698 (23698), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 3817 51.434290 192.168.10.32 192.168.10.1 ICMP 98 Echo (ping) request id=0xbf4d, seq=0/0, ttl=64 Frame 3817: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.10.1 (192.168.10.1) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3818 51.434367 192.168.10.1 192.168.10.32 ICMP 98 Echo (ping) reply id=0xbf4d, seq=0/0, ttl=64 Frame 3818: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: American_ca:aa:ae (00:c0:b7:ca:aa:ae) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.32 (192.168.10.32) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 3819 51.436987 Watchgua_3c:4c:d8 American_ca:aa:ae ARP 60 Who has 192.168.10.32? Tell 192.168.10.1 Frame 3819: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: American_ca:aa:ae (00:c0:b7:ca:aa:ae) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3820 51.443444 American_ca:aa:ae Watchgua_3c:4c:d8 ARP 60 192.168.10.32 is at 00:c0:b7:ca:aa:ae Frame 3820: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3821 51.443457 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 3821: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3822 51.474682 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=25334 Ack=1984 Win=64815 Len=0 Frame 3822: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 25334, Ack: 1984, Len: 0 No. Time Source Destination Protocol Length Info 3823 51.526897 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 3823: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3824 51.526929 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 3824: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3825 51.566020 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 3825: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3826 51.602897 190.42.139.241 192.168.10.207 TCP 60 23698 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 3826: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23698 (23698), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 3827 51.603016 192.168.10.207 190.42.139.241 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:44:44 -0400 Frame 3827: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23698 (23698), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3828 51.603545 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=118839 Ack=2221 Win=1002 Len=1448 TSval=548149 TSecr=727926 Frame 3828: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 118839, Ack: 2221, Len: 1448 Data (1448 bytes) 0000 17 03 01 22 90 6d 95 51 44 e1 d3 0a fe d5 dc 07 ...".m.QD....... 0010 e0 fb bb 66 24 f7 3d 6d b6 64 da 73 01 81 e8 af ...f$.=m.d.s.... 0020 c9 fc 82 30 e3 b5 24 78 bf d1 61 a8 25 9c 79 cf ...0..$x..a.%.y. 0030 03 75 9b 7b 03 07 83 5a 87 18 bf fd 36 eb a4 61 .u.{...Z....6..a 0040 0d e7 b5 30 f0 49 52 b3 db 71 11 5c 25 03 d3 fc ...0.IR..q.\%... 0050 2d a2 ea 04 ab 5c 59 9b ac a4 b0 f8 04 ca 3d 6a -....\Y.......=j 0060 5f 65 29 e0 18 c3 0f 47 a6 a6 7d e1 06 98 69 36 _e)....G..}...i6 0070 81 99 eb 4c 7b e4 15 86 7d c6 a9 9b 0f 35 66 5b ...L{...}....5f[ 0080 2e 8b 8a aa d8 3e 36 12 c2 31 51 cf 51 11 7f 33 .....>6..1Q.Q..3 0090 5a fb e2 85 18 ea 49 6f 6b 72 35 a3 81 f9 f9 85 Z.....Iokr5..... 00a0 ee 7f 8b 60 05 bf 0a 31 5b f7 39 2f d2 ae 70 5c ...`...1[.9/..p\ 00b0 e6 57 ab 3a 60 10 cd db 8d a1 0c 93 cd 54 53 b9 .W.:`........TS. 00c0 b6 33 63 72 e3 ef 0f be f6 1b aa f8 c2 bd c7 0e .3cr............ 00d0 7a dc 8f 87 88 be 90 da 59 5e 75 43 cf 1e 2b d0 z.......Y^uC..+. 00e0 0a bc d0 d0 0f f1 07 ba 54 6c 0b eb ba 90 1c 3d ........Tl.....= 00f0 46 8f 7e fc c2 9b 7a aa 82 ea 78 cf a1 5b 5c d3 F.~...z...x..[\. 0100 27 70 24 05 c9 28 61 93 48 59 70 f8 f8 f6 69 62 'p$..(a.HYp...ib 0110 36 c7 78 0e 63 05 9d c6 ec f1 08 dd 70 56 37 36 6.x.c.......pV76 0120 11 fb 3f 61 54 60 dc 81 21 7a 48 1a a8 63 bd a3 ..?aT`..!zH..c.. 0130 31 a4 24 1a 4e 33 fa 6e fd 43 fc 69 83 ff d5 ce 1.$.N3.n.C.i.... 0140 fa f5 e3 9d 5f 5b b6 dd 22 0a 21 2e ac ac a1 3a ...._[..".!....: 0150 f9 c5 75 18 f1 16 fb 27 31 08 d2 cc 41 50 a2 58 ..u....'1...AP.X 0160 a0 d3 ad 96 12 52 25 2a c4 0f d9 77 2c 4c 77 6d .....R%*...w,Lwm 0170 1c 1f 3a c5 81 78 ee 8d 6c 17 8e 10 79 ba 5f e8 ..:..x..l...y._. 0180 44 21 8f d4 d4 de b9 5e 85 d9 04 c6 e5 d1 94 59 D!.....^.......Y 0190 19 6e 3a 2c 2e 87 0e 0f 28 ee 3b 15 d0 19 d2 11 .n:,....(.;..... 01a0 28 c0 22 b9 ca a3 f1 ff 6a 02 da 5a 52 d5 4e 85 (.".....j..ZR.N. 01b0 5f d8 7b 3b f5 31 e5 f3 c2 cf 6c 1a 6d f6 58 55 _.{;.1....l.m.XU 01c0 dc 1d 63 f4 22 e8 97 83 10 0f 2b 5a 0f e4 73 f6 ..c.".....+Z..s. 01d0 fe 39 17 06 d5 d9 83 c0 3f f4 2b 24 19 c2 c7 9f .9......?.+$.... 01e0 81 5f de f0 e2 77 6c 83 fa 75 31 7f 2c a0 8d 4c ._...wl..u1.,..L 01f0 b7 66 bb c6 aa c6 4e 6b 85 56 59 bb 0c 42 7c cf .f....Nk.VY..B|. 0200 97 ba 10 87 28 bc 95 0c 9a 9f 71 74 01 ac 4f 0a ....(.....qt..O. 0210 71 50 f7 d0 b9 02 18 35 d5 41 4d 4e a1 4d 5e d8 qP.....5.AMN.M^. 0220 d5 32 d3 5c b9 77 f3 0d bb 59 aa e5 11 bb 28 e4 .2.\.w...Y....(. 0230 82 95 c4 2e 86 0e b8 7a 09 71 29 39 e1 20 ca c4 .......z.q)9. .. 0240 73 1a db 01 94 34 b5 0c 4c 56 7b 8a 36 d0 64 6f s....4..LV{.6.do 0250 ef 7a fb 1f 69 14 16 c0 e0 b5 89 08 3c ce 58 52 .z..i.......<.XR 0260 88 88 46 5b 79 ce 19 2c ed ca 03 71 38 75 74 00 ..F[y..,...q8ut. 0270 c2 ed b8 eb 24 fe 74 3b 01 a9 44 66 17 a4 aa 2e ....$.t;..Df.... 0280 e2 1e b6 1a 7c 03 89 69 7a 75 26 8e 9a b5 c4 2a ....|..izu&....* 0290 dc 95 f2 f9 86 69 60 6a 5f 25 e7 1a 95 87 b1 21 .....i`j_%.....! 02a0 b4 b8 fc c1 83 42 ca c8 a0 20 a1 57 d9 7c 3b b8 .....B... .W.|;. 02b0 b4 7e f5 82 29 5b 3c 37 a8 62 2a 66 d3 ff e7 a5 .~..)[<7.b*f.... 02c0 e4 59 0a 54 ff 3b f5 a6 75 2e fd e3 98 eb 67 6a .Y.T.;..u.....gj 02d0 5e e6 9d 15 61 c0 56 79 92 6e 71 33 c1 fe 81 11 ^...a.Vy.nq3.... 02e0 6c e6 c3 a9 7e c5 55 df 8a e2 05 64 e2 aa d6 60 l...~.U....d...` 02f0 09 f4 3c aa c9 e6 95 20 49 52 df 93 7f 16 8a a9 ..<.... IR...... 0300 93 b5 6c 40 73 ac f8 63 8b aa aa 98 6b 06 68 ac [email protected]. 0310 2b d5 00 ee 2a 55 f3 e9 06 c2 22 76 f2 a6 38 7c +...*U...."v..8| 0320 9e 48 59 78 60 f0 35 21 ab 89 91 21 b9 24 b5 ab .HYx`.5!...!.$.. 0330 9b ad d8 7e a9 a5 4c 05 61 be c4 30 36 31 3f 7a ...~..L.a..061?z 0340 a1 2e 05 b9 70 ae 17 e3 9e 30 72 31 a1 64 87 22 ....p....0r1.d." 0350 76 08 6c 78 8e c7 37 6d 8d 5f 10 5c a7 fe 7f 2c v.lx..7m._.\..., 0360 03 5d 0e 24 e3 d5 41 84 e1 50 72 40 42 af c9 fa .].$..A..Pr@B... 0370 a7 2c 2c b0 bf 4a 49 1e aa bb 4a 5a 41 e6 a2 80 .,,..JI...JZA... 0380 1f 73 1b ef 37 de 11 79 30 ce 5c 6e 96 91 dc 45 .s..7..y0.\n...E 0390 14 d5 11 64 c6 de ac a5 43 4a 19 00 8f e9 38 9d ...d....CJ....8. 03a0 a7 2f 82 a4 3b 7a 89 b1 0e 93 40 a5 fc 19 15 3d ./..;z....@....= 03b0 f2 7b ba 33 a6 68 71 64 3a c0 84 bf b4 c3 87 2b .{.3.hqd:......+ 03c0 a8 5c 40 51 0c 14 d2 ec 51 21 be eb b9 3d 07 23 .\@Q....Q!...=.# 03d0 d9 2e fd 37 88 37 e5 e3 b3 cf 63 9d 60 43 56 93 ...7.7....c.`CV. 03e0 7f 05 c3 d0 86 49 dd 1a 37 1b f7 2d 1d 11 8c 63 .....I..7..-...c 03f0 94 08 dd 43 59 09 49 ed e0 67 c5 15 99 f9 c7 24 ...CY.I..g.....$ 0400 aa b7 86 9b d9 da e0 23 22 c4 a6 a0 33 33 36 bd .......#"...336. 0410 57 51 22 be 10 14 ea fa 1e 49 c6 48 e6 66 49 33 WQ"......I.H.fI3 0420 0e 9c 63 83 ef 15 ca 4d c9 7a a7 04 e1 64 bb d7 ..c....M.z...d.. 0430 1d 91 0a 64 9d 6e c0 df 79 ef 15 72 f2 6b 50 ac ...d.n..y..r.kP. 0440 62 e2 52 1c fe 9b d7 7d 88 ae 7a 09 57 40 d8 3e b.R....}..z.W@.> 0450 ab 1e 25 1a 60 9f d8 70 50 5a df d5 4b a1 b8 45 ..%.`..pPZ..K..E 0460 f3 63 2f 87 77 9d 25 e4 fc bd 14 12 0b 7a f2 05 .c/.w.%......z.. 0470 2a ed 02 4d 0d 03 a0 27 31 13 2f 0b 0f 29 b6 05 *..M...'1./..).. 0480 31 39 f2 4a a3 4d 1a fd ee 8a 06 4a 94 01 de fb 19.J.M.....J.... 0490 62 e7 93 c0 b5 73 48 e0 52 ed 35 b2 fa 05 97 80 b....sH.R.5..... 04a0 34 02 39 fa 01 a3 e3 12 69 06 77 61 ad 53 c4 f4 4.9.....i.wa.S.. 04b0 af f4 e5 41 09 83 40 94 e0 9a b2 4a 95 5c 72 da [email protected].\r. 04c0 23 cc 69 ac 2d 3f b5 1f c8 61 0b a2 76 53 7f 4e #.i.-?...a..vS.N 04d0 6d 7a 0a 59 ee 62 65 15 fe 68 1c 34 d1 27 2a de mz.Y.be..h.4.'*. 04e0 73 77 cb b7 13 39 ef d8 c7 aa d6 10 69 1a 87 8a sw...9......i... 04f0 ab aa ae fc 5e be af 8e 50 90 83 f7 42 61 0d 6f ....^...P...Ba.o 0500 08 c1 f2 62 c8 cd 8e cd 16 93 01 44 73 8c 94 6d ...b.......Ds..m 0510 a9 ce 48 1e e3 ef 85 8c 4f 4f b6 23 1e 71 2b 5a ..H.....OO.#.q+Z 0520 65 ee dd 47 34 f0 52 f7 af 24 32 2a 03 7b 21 22 e..G4.R..$2*.{!" 0530 b9 99 80 ab bd e5 9f fb 88 83 85 61 e5 89 66 58 ...........a..fX 0540 c8 32 b4 3f 27 cc 56 2f 38 40 3c 7c 68 7a 61 b6 .2.?'.V/8@<|hza. 0550 d1 ce 04 cd da a7 ca b5 02 91 8b 7f aa 4b 8a 28 .............K.( 0560 8a fb fc 6a 5d 93 f6 77 29 5a ac fa dc 8c 22 bb ...j]..w)Z....". 0570 c9 a8 03 0a 1b b7 1e 4b c1 6f b6 e1 9e d7 1d 63 .......K.o.....c 0580 f7 02 c9 e2 f9 59 76 69 0a d5 3e 65 ee 69 04 ef .....Yvi..>e.i.. 0590 61 f5 78 83 32 cb 96 31 3d 2f 73 3e 79 71 93 46 a.x.2..1=/s>yq.F 05a0 0c e2 86 68 72 78 d1 a8 ...hrx.. No. Time Source Destination Protocol Length Info 3829 51.603658 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=120287 Ack=2221 Win=1002 Len=1448 TSval=548149 TSecr=727926 Frame 3829: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 120287, Ack: 2221, Len: 1448 Data (1448 bytes) 0000 5f ee 23 16 7a b1 a0 f3 d9 7e b2 2b d8 1f 48 58 _.#.z....~.+..HX 0010 f2 17 1c 5d 59 02 6f e6 b4 1c 8c f5 b5 a6 a3 1a ...]Y.o......... 0020 84 57 7b 5b ae 1c 64 37 9c 07 8d 18 d7 41 16 1c .W{[..d7.....A.. 0030 34 1a 26 ba 22 07 38 ed eb 75 2d 6b c1 7d 86 23 4.&.".8..u-k.}.# 0040 12 f1 e9 0d aa b0 13 e2 6c f6 65 17 58 c1 20 e2 ........l.e.X. . 0050 c8 61 bd af 5d bc 4f 56 16 9a d4 7a b7 4a 27 a6 .a..].OV...z.J'. 0060 7b 60 16 24 7a 8c fe 03 8a 52 3f b8 66 28 bb 69 {`.$z....R?.f(.i 0070 f7 6c 6f c6 6e 67 55 25 63 b6 0c 0d 72 7e 5d 9e .lo.ngU%c...r~]. 0080 ef 8e 50 1c a0 77 fe 54 82 d2 64 26 43 00 87 80 ..P..w.T..d&C... 0090 2e ac ba 5f 07 6d 0d 84 56 89 85 7a 8b c5 4c 93 ..._.m..V..z..L. 00a0 44 20 53 8e 8e 46 6d 8d 27 57 be 60 be 1b 89 f5 D S..Fm.'W.`.... 00b0 f3 11 8a f1 b9 74 80 7e e8 82 36 83 1d 0d 39 73 .....t.~..6...9s 00c0 b3 ef 57 b4 b3 03 89 95 d5 a8 2a 14 c6 1f 46 16 ..W.......*...F. 00d0 78 bd 59 1e 95 2f df 87 2e 30 71 ee aa 54 06 50 x.Y../...0q..T.P 00e0 21 d7 ba 08 b4 65 78 ca e9 b9 19 db 37 1d 07 b0 !....ex.....7... 00f0 e1 35 65 a4 86 75 3f 18 56 8a 18 72 42 9c f8 e2 .5e..u?.V..rB... 0100 7b f6 73 68 96 7a ee 0c e8 40 a5 c3 12 8e 34 8e {[email protected]. 0110 fa 9c b2 0c 08 df a2 73 50 02 01 1e 6a 3e 11 82 .......sP...j>.. 0120 a6 5d 11 74 8f b4 bc 09 8d be 52 fe 73 6b 0c 4c .].t......R.sk.L 0130 4d da 0b 55 f3 f3 38 fd 45 98 fa a4 9c db 6f 02 M..U..8.E.....o. 0140 9b 4e 60 4d 75 3e e9 2b 87 52 cb 60 b5 2b c6 12 .N`Mu>.+.R.`.+.. 0150 11 2b af e2 69 d5 8b 0f 2f f4 bf cb 2f 11 8c 4e .+..i.../.../..N 0160 0d 05 a8 42 3b 74 c7 d7 f8 79 70 68 cf 38 78 28 ...B;t...yph.8x( 0170 15 28 64 d4 72 21 6b 95 2b 8f bf ad 56 81 3a 7d .(d.r!k.+...V.:} 0180 fa 30 71 b8 94 87 a0 2d 7d bf 3e fc 0f ed f2 c4 .0q....-}.>..... 0190 5a a9 29 74 88 be da 8a ff cc e6 f6 d3 8d 8d 3c Z.)t...........< 01a0 53 ba 72 93 76 1a d6 44 2e 89 14 0b 90 cf 82 e0 S.r.v..D........ 01b0 04 47 86 04 7f 97 f7 2b b7 ca 3c 98 9c 4a b7 1a .G.....+..<..J.. 01c0 d5 1d 36 0a 5e fe cb 74 9f 33 0d d1 ff 44 92 22 ..6.^..t.3...D." 01d0 15 50 e7 32 24 83 6d f7 5a 55 23 31 53 06 81 77 .P.2$.m.ZU#1S..w 01e0 fd 1d fb 56 29 b2 3f 53 bf fd 2b a5 cd 38 d6 76 ...V).?S..+..8.v 01f0 70 d5 ba 55 91 8d 28 c3 7c 45 9c d5 2c 5c 95 92 p..U..(.|E..,\.. 0200 27 18 3a cf 20 d4 f9 8b 4e 00 1b 70 c7 a5 36 a5 '.:. ...N..p..6. 0210 a4 f1 96 dd 33 3d a1 1d ff 1a d2 ac ad c2 bf 9f ....3=.......... 0220 b9 3e 49 7f da 96 b1 22 b7 12 e4 d4 2a 2c 88 60 .>I...."....*,.` 0230 62 df f3 ab db 6b 6f 16 5e 48 c1 f9 f5 af a2 ad b....ko.^H...... 0240 5f 00 a9 51 6e d7 94 3a 86 fd 62 b7 5d cd ad 2c _..Qn..:..b.].., 0250 46 f8 72 b3 b8 4e 02 6e 2a d6 d4 e9 34 10 23 a6 F.r..N.n*...4.#. 0260 47 62 6e b8 ca e5 98 23 4c 26 8a e3 3d 71 d9 ee Gbn....#L&..=q.. 0270 5d c2 27 03 52 ef de 3f bf cf a9 28 f4 78 fa af ].'.R..?...(.x.. 0280 7b 9d cc be d7 ac 5d 3f 87 6c c4 06 bd 2b 58 84 {.....]?.l...+X. 0290 23 4e 82 71 18 5c f2 71 41 de 3a fd 8a ac 7b 10 #N.q.\.qA.:...{. 02a0 03 76 19 82 b9 ad 1a 0d 98 a6 b3 2a ea 92 93 cc .v.........*.... 02b0 f9 f0 e9 27 63 c2 97 7c 9f f7 d3 b0 bb ec 2e 6d ...'c..|.......m 02c0 ab 12 59 37 7f 45 c2 4e 38 c5 4d 60 21 19 51 ab ..Y7.E.N8.M`!.Q. 02d0 9d ab 8d 61 59 87 ee 73 da 73 11 0c a3 98 aa ac ...aY..s.s...... 02e0 7e 54 fb 55 fe e8 cf eb d1 79 16 65 2c b8 40 5b ~T.U.....y.e,.@[ 02f0 69 81 8a 44 96 1a 3c 68 82 6e d4 10 03 70 5c 9c i..D..<h.n...p\. 0300 98 70 ab 5c 22 fe 84 b5 d4 ac b6 68 ad 56 a5 91 .p.\"......h.V.. 0310 a7 b9 14 cf 3b 36 8b 06 00 59 e5 79 64 47 86 fa ....;6...Y.ydG.. 0320 ad 04 66 aa c6 d1 7c 1e a2 b3 3f 68 bc 67 51 b4 ..f...|...?h.gQ. 0330 38 4f 22 74 be 26 0e 03 d2 5c 6d d4 47 21 de 05 8O"t.&...\m.G!.. 0340 79 49 91 8c 0f a3 14 40 b1 4a d6 9d a2 06 af 02 [email protected]...... 0350 d8 8e 33 f6 f9 f0 8f bd 4f 82 98 c8 2e f8 b8 4a ..3.....O......J 0360 f6 8c 6c 31 17 1a 93 c2 43 ec 5f 79 78 cf 33 75 ..l1....C._yx.3u 0370 06 04 59 46 01 ba 55 e2 ae fb 26 2c 46 28 a8 07 ..YF..U...&,F(.. 0380 c8 76 f2 a2 56 e5 a9 0a f6 bc b9 56 97 b6 0e 43 .v..V......V...C 0390 03 42 4e 22 8b 45 49 44 52 4d e9 4c 9d 45 c6 29 .BN".EIDRM.L.E.) 03a0 83 7f 43 16 d6 c5 94 05 1e 90 ed ce e8 10 75 0b ..C...........u. 03b0 f3 4f f9 55 de 9e 22 72 5f de 6c 8b 29 b9 bc dc .O.U.."r_.l.)... 03c0 e3 57 d8 98 00 cc 7a ab 8e 43 30 0a 75 0d 11 89 .W....z..C0.u... 03d0 d9 d3 40 2c 2d 9f cc ee 37 57 5d 31 11 44 e4 d1 ..@,-...7W]1.D.. 03e0 42 d6 6a 05 da 32 9c e1 dd 4e 09 d8 71 bc ef e2 B.j..2...N..q... 03f0 f1 c6 6f 92 6a 35 81 a3 09 1d 84 66 76 24 54 25 ..o.j5.....fv$T% 0400 93 96 6d 3c a3 eb 53 47 85 8f 75 22 ae a9 98 20 ..m<..SG..u"... 0410 0d c4 59 7b 70 88 35 78 7a b4 ff 46 a7 63 08 08 ..Y{p.5xz..F.c.. 0420 9b 06 1a d1 ef 27 93 27 ba e1 43 e1 76 da b1 2a .....'.'..C.v..* 0430 69 e7 6d 8f 41 6b c7 9b a4 db 72 33 60 67 4b 77 i.m.Ak....r3`gKw 0440 b9 98 b1 9a b4 77 86 07 66 30 cf 94 d0 3b 4f cf .....w..f0...;O. 0450 fa 6d e7 6a f0 66 f4 ae 4f c4 e8 09 5d ec 03 e6 .m.j.f..O...]... 0460 52 17 42 eb 9c c4 e2 38 73 59 74 6e c9 9f e1 cc R.B....8sYtn.... 0470 c3 db 4a e1 f9 c4 03 99 d8 91 43 a0 a5 5a 6c 26 ..J.......C..Zl& 0480 cc aa 9d cb ab 05 52 e7 a0 2c 41 d1 ab 50 59 75 ......R..,A..PYu 0490 ee b2 6c e9 f9 78 93 34 c1 c8 9e b4 56 5e 9b d2 ..l..x.4....V^.. 04a0 96 61 f4 34 c7 8f fb 3f c5 4e a6 9e 43 03 d9 3b .a.4...?.N..C..; 04b0 a0 8b 3d d9 ef bf 74 ca 53 11 77 b7 ac d4 ad a5 ..=...t.S.w..... 04c0 83 29 dd f4 08 80 f7 0d e7 1a fe 15 fb 8b 42 95 .)............B. 04d0 4f b4 ad 64 70 88 9d 59 33 07 5f a3 a8 0f b7 d8 O..dp..Y3._..... 04e0 67 4c 25 61 fa 88 10 c5 e5 72 31 1e e5 8d 9d f0 gL%a.....r1..... 04f0 0d 02 9d 08 42 b1 a0 fc 2b 37 dd 20 9f 9c af 33 ....B...+7. ...3 0500 28 e3 e3 6f 6e a1 bc 44 3a 0e ce 1d 0a d5 dc d2 (..on..D:....... 0510 2d 1d 3a 6c 99 1a 81 20 07 5a bb 08 8a c8 c7 33 -.:l... .Z.....3 0520 75 bf cf 26 9e c8 03 b8 e9 d1 ef 87 66 e5 9b ef u..&........f... 0530 8f 3b 7e 86 e8 d8 a7 07 cf f8 7e 53 f6 ae c2 5b .;~.......~S...[ 0540 8f 7f 19 c9 6e 40 44 a2 c0 28 a5 29 3f 4f 0c ea ....n@D..(.)?O.. 0550 57 f9 e4 f3 89 5c 5e ca 1f 55 4e 8b f0 37 d2 b5 W....\^..UN..7.. 0560 18 d3 42 fa 00 7d 10 92 cd fa 2b ae 38 b1 e4 93 ..B..}....+.8... 0570 7d b8 04 a4 d6 0a 8f fb 8d e9 a9 79 9a 9f e7 cf }..........y.... 0580 b0 9e 3b 41 cc fb d0 62 50 33 ff db 22 cb 4d a0 ..;A...bP3..".M. 0590 e7 05 e9 0b 9d b6 0f f0 f1 65 c3 38 3f 46 34 b4 .........e.8?F4. 05a0 a8 05 88 53 7a d5 a7 fd ...Sz... No. Time Source Destination Protocol Length Info 3830 51.603765 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=121735 Ack=2221 Win=1002 Len=1448 TSval=548149 TSecr=727926 Frame 3830: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 121735, Ack: 2221, Len: 1448 Data (1448 bytes) 0000 f1 ee 61 44 01 85 6d 29 5a 58 de 67 a5 c3 30 41 ..aD..m)ZX.g..0A 0010 11 c7 50 47 bb 01 f3 0a f6 1b f1 0e 50 db 01 6d ..PG........P..m 0020 49 7b 8c 0a ed 09 4e d9 13 e9 63 07 78 b1 b5 4b I{....N...c.x..K 0030 aa 1b f5 f9 ca 3e 52 5f 9b 7d 2a 4e b7 4f 59 96 .....>R_.}*N.OY. 0040 5e 70 3b bf ad a2 9c d1 18 97 b7 f2 9d dd 2c 03 ^p;...........,. 0050 64 a7 12 bf e8 c6 6f a3 c3 8e 59 3e 02 2f 04 8c d.....o...Y>./.. 0060 2d 5e f8 d8 7c db 81 1f f2 0f 08 42 f6 bb cb 8c -^..|......B.... 0070 59 78 c2 eb 56 53 68 60 4a eb 25 30 49 30 f7 6d Yx..VSh`J.%0I0.m 0080 02 34 1b 3a 14 34 9a 5b 1e 7a 64 88 cb 95 18 63 .4.:.4.[.zd....c 0090 bd fb 97 2a 34 8a ce 06 e3 3e 94 26 d5 f6 cb 37 ...*4....>.&...7 00a0 80 e3 a0 34 d8 aa f3 ed 3c 84 0a 85 17 5c bc a5 ...4....<....\.. 00b0 4e 9e b9 e8 fe 55 08 2a 12 95 94 b0 c4 e0 5d df N....U.*......]. 00c0 1a cb 96 ad 27 14 8d d6 a3 b4 51 7a b6 98 66 bc ....'.....Qz..f. 00d0 06 ec 6c 64 9a 19 17 51 0c f2 7b dd e6 02 a5 4c ..ld...Q..{....L 00e0 b9 b9 10 c3 0c 2a 8a ab e6 5c 66 a4 a1 43 60 17 .....*...\f..C`. 00f0 bd e6 36 10 1e cb a8 10 2a c0 1b 76 78 24 e7 56 ..6.....*..vx$.V 0100 68 0e 77 c3 2c e4 85 54 56 7b 4e fa 1a 4d 47 4e h.w.,..TV{N..MGN 0110 e5 e7 c7 63 59 78 c0 ae 96 fb 48 f7 7c 27 8a 15 ...cYx....H.|'.. 0120 38 cc da d1 d6 0b cc 3a b2 00 e4 fb e9 63 29 e7 8......:.....c). 0130 ba 04 28 b1 86 60 c4 a3 42 4c 33 22 6a e6 4d ab ..(..`..BL3"j.M. 0140 36 69 39 f9 0d 24 00 7b 04 90 06 60 3a 5c f3 38 6i9..$.{...`:\.8 0150 6f bf 8d 60 6e 3b ce eb 3a a5 ed 91 5a 24 d9 16 o..`n;..:...Z$.. 0160 a1 c1 75 55 69 29 09 bc 84 ee 1d d0 e3 69 b2 64 ..uUi).......i.d 0170 22 fd 62 a6 2f 94 89 99 f2 fb 6e 92 76 59 8f 53 ".b./.....n.vY.S 0180 ec b0 53 ed 68 d1 fc 91 b4 7e 27 8c 59 2b ef 25 ..S.h....~'.Y+.% 0190 71 21 36 74 bd 69 f4 15 85 16 a2 46 53 14 33 e6 q!6t.i.....FS.3. 01a0 ee 76 d1 9b 21 68 71 8c 87 ec 3a 0f 84 af 98 16 .v..!hq...:..... 01b0 96 71 ef a0 aa f9 3f 0a da 48 40 71 23 ce 1b fe .q....?..H@q#... 01c0 50 43 62 c4 01 51 76 6f 34 79 9f 3a 55 c2 22 5a PCb..Qvo4y.:U."Z 01d0 20 4a 9c e3 fc 68 5f b0 d1 5f 0b e4 24 e0 62 39 J...h_.._..$.b9 01e0 0c ed 27 0f 84 99 4d bc 65 9b 73 43 34 24 5f 57 ..'...M.e.sC4$_W 01f0 32 5a 89 a4 af cc f1 a3 81 44 20 dd ac 28 1d e6 2Z.......D ..(.. 0200 ba 6f 81 98 94 a0 0f c9 97 8a c6 1e 34 08 37 31 .o..........4.71 0210 53 bd 3c 0b 0e fe 95 17 d9 71 c1 bc 71 fd ac 03 S.<......q..q... 0220 f8 97 6a fc 54 22 62 b8 39 f7 a5 6d 18 11 29 5e ..j.T"b.9..m..)^ 0230 fc 79 34 2b 26 49 41 50 03 d0 9a 0e cf 52 00 fe .y4+&IAP.....R.. 0240 ac 74 e3 50 0c af a8 4d 3a 1f fc 81 58 70 97 b9 .t.P...M:...Xp.. 0250 ef 2b 69 ab 21 a2 ff c7 87 42 e7 22 cd 36 b4 b7 .+i.!....B.".6.. 0260 38 de db 89 de 37 eb 23 2f 69 ea d5 cc 0a b8 86 8....7.#/i...... 0270 56 6a 16 6d c6 b0 3e 49 a9 30 f7 8a 85 bf a0 e1 Vj.m..>I.0...... 0280 e5 01 b2 2d 9a cd 53 46 5f 40 5f f7 09 54 d4 a3 ...-..SF_@_..T.. 0290 5f 10 a4 93 6f 96 b4 ef fc e8 75 3f 2d 7e 85 ed _...o.....u?-~.. 02a0 12 c8 e0 ef 55 d7 5c 73 5a eb 19 02 a0 f3 03 44 ....U.\sZ......D 02b0 3a 85 cc 85 74 52 f4 7d 42 c3 7d 69 51 ef 42 1b :...tR.}B.}iQ.B. 02c0 c6 e6 a6 78 d5 6a b7 32 f9 b5 d6 25 a0 4d b6 33 ...x.j.2...%.M.3 02d0 e4 09 5f 15 88 51 0a d4 3c 21 99 df 49 dd 0b f1 .._..Q..<!..I... 02e0 d8 44 1f 36 48 b0 78 e4 b2 44 7a 88 83 87 ec 8b .D.6H.x..Dz..... 02f0 b4 a6 9e fe c8 bd f0 7b 8b 1b b5 5a 8f 15 2f bc .......{...Z../. 0300 a4 86 9f 79 60 7e 06 ce b8 8c 02 00 0a 82 d1 d9 ...y`~.......... 0310 98 e7 55 21 f1 3c 68 47 c8 2c c8 ec fa f0 aa 88 ..U!.<hG.,...... 0320 2b 12 10 98 ca 73 9e f5 6a fe 51 01 83 47 d0 42 +....s..j.Q..G.B 0330 1d ee 2e 8c 86 9d d6 3e 5f 85 8b 2d 28 b5 55 0e .......>_..-(.U. 0340 6d ae 0a 1a 24 ea d6 a0 7b 3f dd b0 eb c7 4b 67 m...$...{?....Kg 0350 4c b2 11 bb 70 a8 de e2 ff ba 6d 3f a2 95 8e 50 L...p.....m?...P 0360 86 80 02 5e 22 70 27 c3 f9 c7 79 a8 25 53 fe 89 ...^"p'...y.%S.. 0370 f4 36 b4 78 e9 90 8e c6 9e fb 55 1f 0f 39 96 13 .6.x......U..9.. 0380 6f c9 bc c8 f4 bf 36 ff c8 96 71 b6 8f fb d3 c9 o.....6...q..... 0390 3b d1 54 25 5d 6d 43 40 a6 d3 c8 18 e6 01 fb c2 ;.T%]mC@........ 03a0 e9 8d d6 5d 89 89 0c 99 7f 96 12 c6 72 3e 7a 3b ...]........r>z; 03b0 b7 5c aa f4 75 0b 45 dd 15 3e 1d c8 bc 4c ef fa .\..u.E..>...L.. 03c0 95 4f 26 52 f1 df 67 4f 6a 1b ca 01 ea a8 18 cb .O&R..gOj....... 03d0 78 80 85 72 4b ee 52 da c0 d6 28 c4 82 e0 fd 15 x..rK.R...(..... 03e0 bb 5d 6f 6d fe 24 a6 05 08 4d e4 9c 00 18 78 e1 .]om.$...M....x. 03f0 85 62 e7 03 73 8b f0 8d d2 89 48 e8 5b 9e 68 44 .b..s.....H.[.hD 0400 66 e7 3b dc ea 09 43 aa e1 1d ad e8 47 e6 19 aa f.;...C.....G... 0410 0b e7 c4 98 22 25 12 82 d2 ff 2b de 78 6d ae b3 ...."%....+.xm.. 0420 7f c9 fa 15 55 56 b2 41 82 7b cf 0a 6d 73 df 18 ....UV.A.{..ms.. 0430 7f 00 c3 ef e6 b1 3b e1 bc ec 65 c7 75 56 a9 76 ......;...e.uV.v 0440 a4 34 ce a7 1c 62 e2 db 19 36 86 7a 18 89 59 a1 .4...b...6.z..Y. 0450 b7 5f 1a a1 ba ea 71 02 10 48 4c 0c e2 41 e7 42 ._....q..HL..A.B 0460 9d c4 7b 31 80 97 ef 4d 3f 04 37 77 cd aa d9 22 ..{1...M?.7w..." 0470 94 3d 90 0f f1 7d 45 5c 90 93 d4 c2 cc 0a d9 be .=...}E\........ 0480 dd 69 17 12 fc ab ed 51 b0 34 60 ba 31 4b 0d e7 .i.....Q.4`.1K.. 0490 5e ce 1f a2 5b 4e 9a f5 23 ef 65 5f c7 b7 75 41 ^...[N..#.e_..uA 04a0 00 e2 e0 e1 97 5c 34 84 b4 8d f9 01 a1 1a 90 f7 .....\4......... 04b0 1b 58 2d f1 1e 42 98 0f aa fb 01 2d 38 18 29 84 .X-..B.....-8.). 04c0 cf ec 61 bd 2e e8 2f 7b f6 eb 43 fa 15 e4 9c 9a ..a.../{..C..... 04d0 97 e4 b9 b9 dd a8 06 74 c2 72 46 47 66 95 2c 4b .......t.rFGf.,K 04e0 f6 ea a7 13 fb bd 0b b6 d7 b2 f9 c6 8d 18 40 b3 ..............@. 04f0 5b f4 37 4c 01 57 c2 0e 61 6e 3c 5a 8e 1c 07 99 [.7L.W..an<Z.... 0500 97 fc 2c d3 2d 0e 2b 5d c4 ce 88 bc 43 47 ca 79 ..,.-.+]....CG.y 0510 49 12 2b 85 26 27 54 62 00 3b 6e 63 23 cc c3 73 I.+.&'Tb.;nc#..s 0520 c7 2c 07 df 63 e8 54 e8 cc c4 04 1a 48 e8 29 05 .,..c.T.....H.). 0530 50 0c 22 01 cc 10 45 af 0c 2a 04 c3 9f fd 18 d3 P."...E..*...... 0540 b2 eb 02 be 07 6e bb e1 e7 b0 dc 04 cf e4 f9 11 .....n.......... 0550 d3 de 6d 7d b4 44 c5 21 dc ef d7 15 6f 35 11 3f ..m}.D.!....o5.? 0560 ce 59 f5 98 fb 12 96 a2 54 93 53 92 28 3e b9 8d .Y......T.S.(>.. 0570 ec 5d 57 07 55 1c f7 a6 bc fb 35 6f 3a 6d 7c 13 .]W.U.....5o:m|. 0580 31 c1 8d 95 fa 54 42 96 7f 80 b1 15 9e 23 2f 6e 1....TB......#/n 0590 28 6d 6d 23 0e cb 35 b8 51 ac 26 3e cc 20 a1 2f (mm#..5.Q.&>. ./ 05a0 03 3d b8 7e 1a 26 5d 0f .=.~.&]. No. Time Source Destination Protocol Length Info 3831 51.603857 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:45:09 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23698 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 3831: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:45:09 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23698 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 3832 51.603919 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2221 Ack=123183 Win=65535 Len=0 TSval=727999 TSecr=548149 Frame 3832: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2221, Ack: 123183, Len: 0 No. Time Source Destination Protocol Length Info 3833 51.604040 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=123183 Ack=2221 Win=1002 Len=1448 TSval=548149 TSecr=727999 Frame 3833: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 123183, Ack: 2221, Len: 1448 Data (1448 bytes) 0000 43 85 72 00 67 2b 40 22 26 a3 1a 2a 09 28 ce 51 C.r.g+@"&..*.(.Q 0010 cb 3f d5 80 6e 25 4f aa c6 c9 c7 ee f2 ff 18 89 .?..n%O......... 0020 c5 9c 0d 35 1d 10 5b 18 cc c5 69 1c 2b aa ce e9 ...5..[...i.+... 0030 51 82 67 3f 83 81 04 c1 f6 d2 1f 69 be c2 1e 9d Q.g?.......i.... 0040 56 0e ec f1 33 f7 4d 91 e3 42 78 24 82 d0 14 23 V...3.M..Bx$...# 0050 1c 0a 48 e7 4c 20 78 2c 12 14 36 5e 8b be f9 8f ..H.L x,..6^.... 0060 16 74 ad c3 ee 10 61 ab 7f 29 a7 09 8e 4f ac a3 .t....a..)...O.. 0070 9a 59 68 bc 42 d5 7c 68 40 31 27 75 e4 fe 11 f8 .Yh.B.|h@1'u.... 0080 b5 f5 cb 81 e9 8e f7 4d 67 42 0d b0 86 01 2f ef .......MgB..../. 0090 57 9b 04 04 2d 29 f5 14 87 2c b3 ab c9 53 59 92 W...-)...,...SY. 00a0 7e ae e8 2e a4 da 32 14 5d 9b 57 d5 1a d3 d3 3c ~.....2.].W....< 00b0 5d 92 af fd e4 45 7e f2 39 a6 7d 58 2b 4f 37 61 ]....E~.9.}X+O7a 00c0 e8 1e 28 ce 74 78 52 61 ab fe 3f 88 17 d9 d5 5d ..(.txRa..?....] 00d0 4b 6d fe d4 75 27 87 ef af 60 cd 3d 43 55 2e b9 Km..u'...`.=CU.. 00e0 7c 71 69 cf 3c 1e b3 b9 02 29 b6 4e 8b 1f fc 76 |qi.<....).N...v 00f0 a3 d1 97 4a 87 f7 85 ad 57 72 9d 46 7d 70 63 3f ...J....Wr.F}pc? 0100 97 a0 69 94 91 d1 44 5e 70 a2 ed 12 21 33 80 a4 ..i...D^p...!3.. 0110 04 8a 5e 20 ec a2 01 3f 32 46 c8 30 b4 4f 0c 6a ..^ ...?2F.0.O.j 0120 91 7a c4 65 e4 cf d5 c3 f9 99 8d 65 4a 70 15 7d .z.e.......eJp.} 0130 ca 07 9f 72 95 32 ba 3d a5 34 0e 01 65 f7 ee be ...r.2.=.4..e... 0140 5c 82 1a 75 f3 92 7e 54 71 d7 dd 1e 3e fa 17 7a \..u..~Tq...>..z 0150 b1 e3 7e cf 9c 7a 95 71 9f 47 f9 85 48 b3 ff 86 ..~..z.q.G..H... 0160 b8 1c 19 3f 62 ea 3e cd 32 51 db 78 38 4f 82 32 ...?b.>.2Q.x8O.2 0170 ad c0 de e1 2e 0d 96 df e3 26 1f 3f 89 61 17 e9 .........&.?.a.. 0180 21 74 d3 43 cb 05 3e bc cf 38 8b f0 f2 78 fc 8a !t.C..>..8...x.. 0190 4f aa 93 74 27 7e 4b 42 d0 34 8e c9 40 a4 08 8a O..t'~KB.4..@... 01a0 e4 b2 63 fd cc 04 76 b1 4c 4b 88 ae 3b 2e 8a 26 ..c...v.LK..;..& 01b0 09 f0 56 d1 1b bd 87 b1 5e 86 04 60 f4 2c 95 78 ..V.....^..`.,.x 01c0 e8 91 84 e7 b4 7f 72 ef 56 67 58 b6 79 94 2f 79 ......r.VgX.y./y 01d0 a1 17 3d c4 85 a0 ea 03 a5 6e 7a 54 71 10 66 9e ..=......nzTq.f. 01e0 20 d6 e0 4e 6c 87 87 3e a8 32 ec 7f e3 cc 07 61 ..Nl..>.2.....a 01f0 92 01 23 d1 48 5d 2e f0 c2 c5 e5 ed cf f0 c4 9e ..#.H].......... 0200 ba 5e 21 8b d3 77 d6 b1 36 bc ac ec 4a a6 c6 2e .^!..w..6...J... 0210 43 76 c3 7f f7 cd e4 bf e9 fd 7c ec 45 ee cf 4a Cv........|.E..J 0220 46 47 4b 77 ef d3 a1 6e 86 65 e2 1b 05 49 af 7d FGKw...n.e...I.} 0230 73 ea ef 3c 5d 89 80 09 9f 83 7e fa 5e 08 53 4d s..<].....~.^.SM 0240 14 ac 2c f9 ce 64 64 15 f5 c7 2f 03 48 0c 1e 1d ..,..dd.../.H... 0250 3e 26 87 ca 68 68 bc 1e a4 43 58 2f a1 28 7e 71 >&..hh...CX/.(~q 0260 96 14 48 34 e2 0c 89 1b f5 3a b7 37 1c 62 0a 86 ..H4.....:.7.b.. 0270 09 e6 42 f7 44 8f 65 61 dc 31 b1 d0 57 63 72 d0 ..B.D.ea.1..Wcr. 0280 de 4c 30 84 74 79 d2 cf 24 32 24 cc 65 0a 76 16 .L0.ty..$2$.e.v. 0290 dd f9 6b 81 36 d3 42 89 df 24 0d d4 f5 f7 24 b2 ..k.6.B..$....$. 02a0 53 c2 84 81 8c d6 00 55 50 57 59 fd c8 7f 9c 9e S......UPWY..... 02b0 65 c8 c0 fa c8 92 ba 11 89 24 b2 d5 57 a0 11 2f e........$..W../ 02c0 dc 03 d2 35 59 2e 84 10 76 cf 16 80 5f 56 cf 78 ...5Y...v..._V.x 02d0 54 ac d0 6a 67 42 be 5b 49 a6 d0 fb 36 01 0f d8 T..jgB.[I...6... 02e0 a7 12 00 d8 63 63 ea 55 6f 30 ca 2e 49 60 ee 02 ....cc.Uo0..I`.. 02f0 18 76 59 93 17 c8 81 9d 47 41 90 30 38 7f c3 c7 .vY.....GA.08... 0300 2e c4 0f 5e 3f 38 f5 2f dc 75 e7 75 0f a3 c5 a3 ...^?8./.u.u.... 0310 1d 4e 6c b7 20 85 e7 e6 a7 98 b2 68 fa 00 ea 66 .Nl. ......h...f 0320 c7 aa 86 9e 80 d7 82 64 bf 0c 45 6a 12 fc 73 23 .......d..Ej..s# 0330 2d 1a 55 71 c4 a1 01 a1 7c 10 03 3c 11 ea 2d 67 -.Uq....|..<..-g 0340 c6 74 a3 02 54 d0 97 02 df 7d 93 ea 34 8f 1b d8 .t..T....}..4... 0350 86 c5 ca 5f 07 e6 cb 69 06 4b a0 00 5c 71 2b 85 ..._...i.K..\q+. 0360 f0 02 b7 a6 7a d1 67 e7 04 78 c8 03 b0 16 6a cf ....z.g..x....j. 0370 4f b7 94 47 5a b4 37 f0 19 cb 6b 40 3a e0 a9 37 O..GZ.7...k@:..7 0380 bd c3 af 53 09 b2 7b 18 f6 69 4b 7e f6 eb 97 a5 ...S..{..iK~.... 0390 7f 12 fe 6a 45 a3 3b 7a b8 28 1b b4 1d 7c 42 dd ...jE.;z.(...|B. 03a0 9a 72 6b d2 12 75 a2 53 dc cd 48 24 86 40 11 8e .rk..u.S..H$.@.. 03b0 b7 3b e4 63 13 3a 04 a7 3a 3a db 78 05 b2 04 e0 .;.c.:..::.x.... 03c0 d9 a4 87 55 58 8a aa d6 5c 08 aa c1 ae 51 0b 05 ...UX...\....Q.. 03d0 7a c6 f4 7f 1e 5a 0d 3f 24 c6 2c 7b 22 e0 b5 c9 z....Z.?$.,{"... 03e0 6b 1a c8 8c 4a 04 82 f6 92 13 cc 90 a0 00 ae 0b k...J........... 03f0 12 be a1 2e 20 00 70 13 22 6d 23 60 bd 08 9d e6 .... .p."m#`.... 0400 ea 8f 54 b1 ed 55 f7 7d 2d a9 90 d4 70 39 03 a7 ..T..U.}-...p9.. 0410 79 f5 dd 95 72 e3 b0 03 38 9e b1 f7 3b 88 a0 66 y...r...8...;..f 0420 c1 a0 9e 03 b1 5f e2 fa 78 ac 3a 90 7a f4 76 28 ....._..x.:.z.v( 0430 e4 2f 64 d5 6a ab 32 22 bd 73 c9 76 71 37 d5 69 ./d.j.2".s.vq7.i 0440 53 b1 3f 0d e1 10 7a 9b fe f4 7f b5 46 77 4d 9b S.?...z.....FwM. 0450 a1 e7 a7 a1 89 10 e7 d8 c2 28 a4 67 4f 8d 6c 8b .........(.gO.l. 0460 ce 8f 1f 33 91 b1 3b 41 cc 6e fe 5f 90 4c 8d 3e ...3..;A.n._.L.> 0470 3c 09 d7 64 94 f5 41 bb 21 53 51 52 b4 bb f2 24 <..d..A.!SQR...$ 0480 4f 2c 22 8d 27 2e 07 13 f1 9e 13 cf 2a 1c 3c 88 O,".'.......*.<. 0490 e5 f1 38 c5 8a 89 13 0e f9 8f 98 f1 66 ae 75 03 ..8.........f.u. 04a0 6e f6 bc 6a 0b 4c 84 c9 9c 4a 51 22 88 13 b1 74 n..j.L...JQ"...t 04b0 d1 4d 53 b4 f4 9a 0e 3e 5b 2c ef 6e 2b a1 46 77 .MS....>[,.n+.Fw 04c0 84 7e 2b f7 7a 7b 06 3e 3b ec 3c f2 f2 ec 9b 94 .~+.z{.>;.<..... 04d0 34 b0 9b 20 87 bd 9e a5 9a 75 11 04 44 89 e4 d8 4.. .....u..D... 04e0 76 99 f6 68 b5 34 ec 5b 6f 12 a7 26 c4 38 0c 39 v..h.4.[o..&.8.9 04f0 fd ae 2a 0e 36 1a 4a 0e d8 96 a2 0a 91 21 ae 66 ..*.6.J......!.f 0500 c7 b5 61 2d f6 b5 48 f6 ca 35 ce c7 ec cf 77 59 ..a-..H..5....wY 0510 c0 a7 a3 12 2a 9c 01 61 19 80 ca 98 ed 3b 08 4e ....*..a.....;.N 0520 8b 9c d7 cc dc 77 6e 74 8c 39 47 85 32 3b 4f ea .....wnt.9G.2;O. 0530 6d ed c6 ea 9c dd c6 ff 74 12 a6 6a e9 0f 67 07 m.......t..j..g. 0540 91 7c e1 60 20 22 1e 53 c6 dd f7 5c 21 80 cd 14 .|.` ".S...\!... 0550 81 19 1b bb 89 8f 2d 14 60 56 ec a0 ab d4 3a d2 ......-.`V....:. 0560 23 fa 33 f0 98 2a ba 02 31 87 3e 6b 0c 67 c0 6b #.3..*..1.>k.g.k 0570 ed b1 ae 60 2e 4d 54 43 88 b8 44 5f 73 3b 6f 48 ...`.MTC..D_s;oH 0580 15 e9 74 89 2f 6a 2a f0 e5 fb aa 6f 55 f7 a1 c7 ..t./j*....oU... 0590 d1 66 7b bd 9d e9 af 4a 3d 23 d4 b9 1d f8 0a df .f{....J=#...... 05a0 17 d8 e7 53 52 4a a2 eb ...SRJ.. No. Time Source Destination Protocol Length Info 3834 51.604148 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=124631 Ack=2221 Win=1002 Len=1448 TSval=548149 TSecr=727999 Frame 3834: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 124631, Ack: 2221, Len: 1448 Data (1448 bytes) 0000 a8 4f e9 11 d4 6c 60 ec cc 41 e2 e8 8d 23 c8 e9 .O...l`..A...#.. 0010 76 2c 7b 19 30 93 56 c1 56 fc 2c ae 2d 4a d7 6b v,{.0.V.V.,.-J.k 0020 45 1c 2b 5f a6 3e 4f de e6 eb ee ea 58 9a 44 9c E.+_.>O.....X.D. 0030 f8 15 88 29 b4 97 0c bf 77 70 1c 7d 92 00 aa f5 ...)....wp.}.... 0040 7f d3 76 c5 4e a3 8d c7 a7 84 4f d9 f0 f0 ff c7 ..v.N.....O..... 0050 59 66 eb cc bf a9 47 b2 ac ee 70 81 cd 8f bf 89 Yf....G...p..... 0060 98 a1 67 11 8c 42 81 69 26 95 ef ab e0 3c e6 31 ..g..B.i&....<.1 0070 68 5f 97 91 dd 56 19 eb 8f b4 a9 fc d4 48 d5 d4 h_...V.......H.. 0080 4f d0 78 a2 5e 0f 1f ef b9 9f f1 4e 27 be b1 29 O.x.^......N'..) 0090 37 94 30 05 45 a0 f3 95 f2 2a e5 51 5d 76 b8 4b 7.0.E....*.Q]v.K 00a0 b6 02 a0 94 ee b9 87 c7 83 20 78 0e 11 de 3b d6 ......... x...;. 00b0 a5 64 68 b8 9e dc 66 ac 3f d7 0b 18 f9 77 c9 67 .dh...f.?....w.g 00c0 e9 c0 07 b9 c2 ec 9b ab 26 33 6b ba c9 9f 12 a7 ........&3k..... 00d0 58 99 d2 f2 d2 5d f9 99 70 11 c1 56 81 0d 72 46 X....]..p..V..rF 00e0 68 04 b7 f2 cc 54 b3 03 8e f9 a5 db df 6a 9b 39 h....T.......j.9 00f0 f0 ac 3a 48 4d 87 b0 e0 3d 99 3f 2b d0 c5 f5 0f ..:HM...=.?+.... 0100 c8 7a 53 d4 b2 72 3d 57 cb f0 d8 17 ee b7 fe 2f .zS..r=W......./ 0110 4c 2d 58 9f 5e 26 ae f6 79 4c 88 27 71 bb d2 3f L-X.^&..yL.'q..? 0120 79 2e 42 7b aa 83 46 60 26 b1 a9 a7 7a 32 98 9c y.B{..F`&...z2.. 0130 51 fe 98 8c 09 9b cf ea 4a 1d d3 2b f0 f5 ee 26 Q.......J..+...& 0140 6f 34 98 a3 7e 68 37 f3 c0 7a 13 9f c1 7f 82 75 o4..~h7..z.....u 0150 ff 77 14 13 47 a7 6c d8 3f 08 b8 6d ac a7 5f 38 .w..G.l.?..m.._8 0160 17 2e 20 a3 b2 7d ee d0 89 fe 45 c5 3e 54 4a 10 .. ..}....E.>TJ. 0170 4c 94 94 86 29 f2 d9 54 14 45 6e a2 57 7e 96 91 L...)..T.En.W~.. 0180 61 35 18 dc a5 fb 48 94 32 73 a0 1f ac 7d 24 b7 a5....H.2s...}$. 0190 01 4d 14 1b f1 40 a9 39 b3 ee e7 6d 45 fa e9 10 .M...@xxxxxxx... 01a0 53 39 70 62 d1 a3 3e 9e e2 90 78 2b 8d c5 7a ff S9pb..>...x+..z. 01b0 c6 d0 1f 41 7b 15 fd 95 9b 72 d8 b9 47 2e d9 63 ...A{....r..G..c 01c0 01 b7 ac ae 65 34 a4 4c aa 60 5b 73 58 ef 33 31 ....e4.L.`[sX.31 01d0 78 e0 34 0b 59 90 3e 7e 8b a1 cd dc 8d 39 84 9b x.4.Y.>~.....9.. 01e0 69 61 c9 6c db 90 0b 2e 50 af 0b e0 a9 91 ab 22 ia.l....P......" 01f0 dd 6e 03 88 fd 29 be 5a 93 fc 6d 5c 67 4a b8 a2 .n...).Z..m\gJ.. 0200 91 90 2f 1f 1c e6 3d 42 8c 55 99 6a 4a 16 98 2c ../...=B.U.jJ.., 0210 4b 41 b9 0f c0 2e a2 8d 1b a1 dc 2f c7 e2 7b ab KA........./..{. 0220 86 8a 91 8b 13 d7 59 98 53 de 3b 59 01 0b 69 7e ......Y.S.;Y..i~ 0230 88 33 e9 54 5b e0 29 07 14 ad 11 89 32 90 7b 04 .3.T[.).....2.{. 0240 04 ff cf 15 44 3b 21 cf 63 68 29 ba cf 0b de 43 ....D;!.ch)....C 0250 22 72 9a 8f 9e 49 a3 13 bf 8a 74 98 59 c6 02 45 "r...I....t.Y..E 0260 1f c4 cd 8a 46 78 91 c9 f8 14 22 95 3e 98 5c de ....Fx....".>.\. 0270 68 13 92 f7 fa d8 65 e8 c8 84 2f 1c c1 92 c6 9c h.....e.../..... 0280 ad 3b 75 27 b4 da 43 ba f5 76 c3 7e 2b 44 90 3d .;u'..C..v.~+D.= 0290 a0 63 99 07 62 24 ef 9b 6e a1 2f 42 33 5f b6 09 .c..b$..n./B3_.. 02a0 5f 63 94 89 de dd f0 d0 50 90 a6 20 83 01 1c 76 _c......P.. ...v 02b0 be e7 0d 3d 13 42 3f 0b 70 c3 5a 19 df b6 23 ab ...=.B?.p.Z...#. 02c0 e3 32 b8 ba b0 40 4d bd d1 5a 0d 09 59 ba ab 93 [email protected]... 02d0 bc 53 7c 69 50 a9 8a 4f 9c 84 e3 56 92 4c 3c 47 .S|iP..O...V.L<G 02e0 14 03 97 d5 de 28 43 f7 e9 68 68 e5 53 a0 3d 01 .....(C..hh.S.=. 02f0 98 68 35 fa 95 14 8f 28 5a f7 f1 33 77 d4 d8 dc .h5....(Z..3w... 0300 6f 24 35 b0 b7 97 a5 97 45 fd ca 6d 47 37 ee 76 o$5.....E..mG7.v 0310 c4 fd 70 5d d6 7c a9 e2 de be d2 49 b4 c3 b2 b5 ..p].|.....I.... 0320 13 fb 0a b7 80 7e 00 81 fe 4f 12 b1 f1 f4 90 b7 .....~...O...... 0330 25 68 cf cc 84 2e 80 a6 d9 03 cd 83 f6 5e 80 5c %h...........^.\ 0340 10 2d 1d c4 f7 60 e2 97 04 9f a5 24 ef b5 cf 57 .-...`.....$...W 0350 ad 38 f8 69 b2 12 21 8e 5a ff f3 68 94 bf 45 4d .8.i..!.Z..h..EM 0360 b4 a4 5a 09 1d aa cf 44 3a 37 c9 09 9b 34 96 a1 ..Z....D:7...4.. 0370 6a e3 7e d5 fa 50 2e 51 a8 df 9f c3 9f 8b e7 13 j.~..P.Q........ 0380 a8 c1 8d 20 fe 8f df 45 13 66 58 3e 02 ec 66 c4 ... ...E.fX>..f. 0390 0d a2 74 f6 cd 5b 61 e4 cc 9d 89 d3 4d 0c 52 9e ..t..[a.....M.R. 03a0 b6 7e c2 ee e1 14 de f6 9f a7 8f db 55 44 4d a7 .~..........UDM. 03b0 10 d7 cf 8d a3 8e 8e f6 3b 30 21 53 d9 2d 08 df ........;0!S.-.. 03c0 e9 a2 d2 d3 e8 6f 27 e1 12 db 5d 49 01 69 24 80 .....o'...]I.i$. 03d0 e5 e2 18 a6 2f 90 5d 78 f5 a6 e9 6f ca ae 60 04 ..../.]x...o..`. 03e0 db 96 0e ab 06 31 ce 9b bf 8b 35 a5 f9 36 ce 52 .....1....5..6.R 03f0 83 dc 8c 91 28 b5 d9 aa 31 62 a6 72 ad ea f2 11 ....(...1b.r.... 0400 cb d5 ac 3e 97 f1 76 c6 87 b5 08 04 38 ba 37 40 ...>..v.....8.7@ 0410 13 f7 90 0f 90 f5 42 2e 8b 84 43 d4 e6 11 1d d0 ......B...C..... 0420 32 28 68 ed 8c 64 b6 18 7c 09 7e a1 31 9e 71 d8 2(h..d..|.~.1.q. 0430 c5 c2 69 95 ea 65 2f 82 26 be 00 3b 32 76 60 c2 ..i..e/.&..;2v`. 0440 24 31 91 2e b9 ab c5 d6 19 0c 59 9a 8a b2 18 2e $1........Y..... 0450 43 63 46 f6 89 49 d7 f2 17 1e a4 3c 86 e9 63 d8 CcF..I.....<..c. 0460 6d 5c 18 f3 71 a9 a0 86 83 83 a4 93 79 3b b1 b1 m\..q.......y;.. 0470 85 c0 e2 76 d1 97 a8 ad 90 79 64 86 61 ab 64 70 ...v.....yd.a.dp 0480 43 10 11 64 43 26 89 c6 c5 0c f7 0f ca f7 69 8f C..dC&........i. 0490 ac 0d ea 3b 7b 9e 14 3d eb 7a 07 04 e1 95 ea 55 ...;{..=.z.....U 04a0 72 34 20 d6 ac 76 d1 c9 3a 5d 61 7e e0 dd ef 3e r4 ..v..:]a~...> 04b0 e9 4a d1 49 d8 a1 30 a2 39 87 7f 3a 9c bf ae ec .J.I..0.9..:.... 04c0 a7 e1 4b c9 58 1a e5 98 cc c4 47 a8 09 1e 78 68 ..K.X.....G...xh 04d0 25 ce 0e 75 88 b2 08 eb d0 13 80 14 94 1f 44 98 %..u..........D. 04e0 7f 19 56 ec 80 d8 85 b5 3c 7b 6b 4f ac dc c5 6c ..V.....<{kO...l 04f0 c3 f0 31 08 81 32 7f 3c d2 63 66 c5 29 6a c5 82 ..1..2.<.cf.)j.. 0500 67 c5 ee 9a a4 d4 b5 0b 66 90 dc dc 3b 59 2f f6 g.......f...;Y/. 0510 8c f6 97 a3 4e 3c 0c d5 1f e5 09 8a 89 31 94 ca ....N<.......1.. 0520 d9 80 50 60 4d fd d8 54 6d 97 ea a0 35 d9 07 71 ..P`M..Tm...5..q 0530 44 33 d8 02 93 01 b9 cd 15 a0 33 14 4b 93 2d 90 D3........3.K.-. 0540 39 6d 07 83 e8 f6 eb 7a 20 dd 40 8b f9 79 05 ba 9m.....z [email protected].. 0550 5c 1c 4e 91 a5 12 d2 4c d3 d2 2f b7 27 8f ae 0d \.N....L../.'... 0560 68 10 04 3a 49 55 eb 87 04 0b 4f 4d b2 19 da 6b h..:IU....OM...k 0570 08 56 94 65 d0 ee aa 97 f4 f3 ea 2d 63 47 00 bf .V.e.......-cG.. 0580 7f 51 69 1f 72 b5 a9 81 4b 60 09 09 ef 9c 1b 18 .Qi.r...K`...... 0590 03 00 70 be 36 6f 1c d1 ce 12 12 44 f5 1b b9 96 ..p.6o.....D.... 05a0 9b f7 e3 aa 98 9c e8 db ........ No. Time Source Destination Protocol Length Info 3835 51.604274 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=126079 Ack=2221 Win=1002 Len=1448 TSval=548149 TSecr=727999 Frame 3835: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 126079, Ack: 2221, Len: 1448 Data (1448 bytes) 0000 83 fe 7d 76 f6 8d ef 1b 72 be f5 46 76 1e 59 ee ..}v....r..Fv.Y. 0010 58 49 1e eb d7 25 d2 62 b8 74 1a 30 9d c5 98 48 XI...%.b.t.0...H 0020 25 f1 03 5d 5c 46 6e 83 10 d8 0a 0f f6 bc af 59 %..]\Fn........Y 0030 67 ff 25 18 92 aa d6 65 9a 5e 53 98 96 25 97 59 g.%....e.^S..%.Y 0040 be 8b 46 57 28 65 cf f4 e8 86 7a 20 51 e6 b2 3e ..FW(e....z Q..> 0050 36 80 9c 92 e5 2e 00 ef 3f 01 32 6e 48 0d b0 89 6.......?.2nH... 0060 e0 70 1d dd cb 4a b4 9f ff a4 4b d0 20 76 fc 47 .p...J....K. v.G 0070 47 44 29 4c 22 13 17 8b 52 48 77 aa ad 14 9e 0c GD)L"...RHw..... 0080 81 49 21 fd 32 c3 61 8a 3a d6 6e f4 13 da 7f 80 .I!.2.a.:.n..... 0090 f7 e5 c9 8e f2 c0 16 75 7a e3 97 bc af 8d e3 88 .......uz....... 00a0 75 3b f3 54 24 8e 3c 66 f3 a0 c9 e8 26 b5 d8 c2 u;.T$.<f....&... 00b0 42 fc c0 2c 01 7c 7e 6a c1 05 57 35 b9 0f a9 6a B..,.|~j..W5...j 00c0 4f c8 9c 3e dd 03 37 95 78 c8 0b 93 78 d7 f5 45 O..>..7.x...x..E 00d0 e0 0b 79 de cd 35 c5 d8 f9 cc e4 06 65 b1 11 b4 ..y..5......e... 00e0 8b d0 f6 ae 91 0b 11 29 ad 76 76 a1 fd 8e 8d 94 .......).vv..... 00f0 ae c4 f2 9e 06 de 72 ac a2 9a 34 3d d4 aa 08 b3 ......r...4=.... 0100 60 f4 f4 8c 1d 65 ea 38 bf 3d 20 c8 b4 5c 32 40 `....e.8.= ..\2@ 0110 b8 f7 f1 f5 8c 84 0e 77 6f ef bf 05 dc e4 c1 cf .......wo....... 0120 cd 6e 0c ee 43 35 6b bb ef a7 e8 bc 7c f0 f8 ff .n..C5k.....|... 0130 99 cb b6 37 b2 bc 1f 74 68 19 20 1c 8a 8e 36 bb ...7...th. ...6. 0140 de c1 d6 14 ab 5c 82 24 49 1f d8 28 bc 54 ed 94 .....\.$I..(.T.. 0150 fa f0 3f bf 1d b9 3b 2a 83 07 7d eb 5e 6f b6 d3 ..?...;*..}.^o.. 0160 2e 80 52 33 56 fc 6d 4f c4 eb 43 98 67 ad 70 ff ..R3V.mO..C.g.p. 0170 9a 18 65 96 5e 3a c0 7b d1 86 73 1e 58 f1 c1 6a ..e.^:.{..s.X..j 0180 c2 e3 f7 cc 6b a7 cc 09 e4 70 08 e1 97 fd 27 d9 ....k....p....'. 0190 0b e6 dd 8b fe bd 80 bc cf 30 12 91 b6 c4 56 e3 .........0....V. 01a0 4e bf 6f c0 6a a7 48 2e 31 24 5b 4a 3e eb c1 a8 N.o.j.H.1$[J>... 01b0 cd 88 34 91 41 cf a8 da c7 f7 bc 62 b8 c3 90 e3 ..4.A......b.... 01c0 6b c6 3c af 66 3e b5 98 a4 31 b2 62 0c 2b 4e 3a k.<.f>...1.b.+N: 01d0 0d f1 85 b2 58 dd 9a a2 34 c1 4d a6 7c 74 ac 35 ....X...4.M.|t.5 01e0 02 ce c0 a4 3a a5 55 d1 fd d8 5e 71 b9 5c a7 90 ....:.U...^q.\.. 01f0 e7 85 17 d0 4d 9b 13 08 57 35 11 58 8a ec f8 22 ....M...W5.X..." 0200 27 6d f0 01 91 bd 4e 1b 93 08 68 36 44 e5 06 1e 'm....N...h6D... 0210 08 36 47 b4 ed 82 f3 b7 60 2c b8 aa cc 36 35 e4 .6G.....`,...65. 0220 31 0f ec 0a 9b 9b 63 c2 d5 0f ce e1 5e f2 eb d9 1.....c.....^... 0230 a8 ad 12 29 2a 11 8b 97 e5 99 be 30 17 21 46 b6 ...)*......0.!F. 0240 bc 3e a3 ea 56 bb 45 fb cc c7 5a 7a 8c 1e ab a1 .>..V.E...Zz.... 0250 c9 5d 36 0c ad 64 03 dc dd 6e 55 63 65 fd be b4 .]6..d...nUce... 0260 9f 0e 3a 5b 2f b7 39 cb b6 03 63 84 21 1b f4 87 ..:[/.9...c.!... 0270 36 2c 0e 8e 57 17 50 11 3a 5d fa 44 7e f1 8b 75 6,..W.P.:].D~..u 0280 be 48 df 44 c1 5d f2 b9 5e 05 fc d0 9a 5f ea d5 .H.D.]..^...._.. 0290 07 0c 1a 68 f3 e0 38 7f 5c c3 a3 63 05 00 2d ca ...h..8.\..c..-. 02a0 b5 42 8b 44 26 9e 71 23 34 0b 5c e2 73 d9 30 ca .B.D&.q#4.\.s.0. 02b0 b4 9d 99 5f 3c 1c fb 85 cd 9a 2f 90 12 c3 c3 18 ..._<...../..... 02c0 56 4f cc 9d 58 4a e1 35 ab 4d 58 3d da 78 01 68 VO..XJ.5.MX=.x.h 02d0 c3 7a da f1 9f 49 d1 7d d0 c7 2c ef f3 57 66 30 .z...I.}..,..Wf0 02e0 6b 36 a9 10 df eb da d6 10 96 e9 6a a1 c6 c5 a2 k6.........j.... 02f0 12 38 01 56 f0 10 10 a0 6c 18 b3 e8 41 c2 7d 6f .8.V....l...A.}o 0300 09 04 cd 84 67 27 67 2f 68 08 e4 7c f0 d2 b5 86 ....g'g/h..|.... 0310 d4 ee 79 2b 87 3a 22 3c 49 a3 dd e5 48 6d fc 93 ..y+.:"<I...Hm.. 0320 aa 49 77 e9 53 68 b3 22 ee b3 8a 05 fc a4 43 2e .Iw.Sh."......C. 0330 72 20 97 24 7d 4a 5d b4 62 3d 6e a9 49 82 9a a5 r .$}J].b=n.I... 0340 fe 1a 79 c2 78 5a bc f1 72 0e 62 3a 55 f6 bd 2d ..y.xZ..r.b:U..- 0350 90 40 e9 d7 46 6b d2 2b 64 52 54 32 26 bc 4b 1a [email protected].+dRT2&.K. 0360 f0 8c a0 76 4c 67 0d a1 25 c4 8a 47 28 aa 4f c4 ...vLg..%..G(.O. 0370 6c 80 a4 2f ba 41 6e d9 3c 46 9a 49 0a 39 e0 47 l../.An.<F.I.9.G 0380 5d 60 93 60 9b c1 01 a0 60 80 1c 14 05 fb d3 4e ]`.`....`......N 0390 04 2e a7 2a c1 4c f9 09 ee f9 1a 74 b5 e6 18 90 ...*.L.....t.... 03a0 d8 7d 55 72 35 34 64 d5 5c 6a ae 04 2f 48 ee 08 .}Ur54d.\j../H.. 03b0 9d 4c 05 3e 44 29 4c 83 4a 3d bb 79 db 53 75 aa .L.>D)L.J=.y.Su. 03c0 1b 94 fe 6e 9b ea 67 ca 5c 41 81 f5 c9 c1 eb bf ...n..g.\A...... 03d0 68 ae 7b 33 43 59 a7 12 0c 9e f0 48 c4 74 76 3d h.{3CY.....H.tv= 03e0 07 9c 07 97 6f a0 30 4e b0 ce df ad 8e e0 74 72 ....o.0N......tr 03f0 88 4b e3 3f 82 bb 84 24 33 83 2a e5 65 2c db 94 .K.?...$3.*.e,.. 0400 08 7f f4 26 5d ac 58 9d c1 26 6b 5e b3 1e 88 6a ...&].X..&k^...j 0410 fc 3c 75 a6 45 af c3 cd 2a 85 9b 4a 42 43 a9 7d .<u.E...*..JBC.} 0420 39 2e 19 6c e4 9e 54 ab 4d 94 b1 79 06 9c 08 6b 9..l..T.M..y...k 0430 04 0c ce f5 d9 f7 92 3d 63 87 a6 18 0c 47 bb 1f .......=c....G.. 0440 66 86 2e 1b 85 43 21 d4 1d 83 29 26 3b a2 5c d9 f....C!...)&;.\. 0450 8e 3e 42 d4 af 53 95 3a 14 24 0a 79 56 41 fb b9 .>B..S.:.$.yVA.. 0460 52 dd e3 04 75 58 7c 54 6e 13 97 1d 8b 61 5e cb R...uX|Tn....a^. 0470 3a 22 4a e8 6c 2d e9 fd ac de 26 7e 0e 07 09 7d :"J.l-....&~...} 0480 51 32 49 db 5c 17 b5 65 d3 c6 d6 6c a0 5c c3 ab Q2I.\..e...l.\.. 0490 c3 01 0a 75 cf a9 ae 9e 4d 04 75 83 e9 de df 8e ...u....M.u..... 04a0 f0 15 2a 27 68 6e 72 fc ab 0d 6b e9 51 cc 5c c8 ..*'hnr...k.Q.\. 04b0 96 8e e2 ce 5e 99 65 e6 04 2f c8 be b9 af 93 f4 ....^.e../...... 04c0 e7 22 ae 4b 71 48 2a 73 fb 7f 42 50 8e 54 85 8a .".KqH*s..BP.T.. 04d0 8f 2a 6e bd 9f 58 27 e5 35 89 6b 2e 64 a0 45 1d .*n..X'.5.k.d.E. 04e0 a3 2f 92 1f ce 25 62 f4 52 3f 24 39 c3 b5 ac 00 ./...%b.R?$9.... 04f0 03 66 88 00 89 ed 0e 10 d9 4f 48 8f cc 46 d9 5c .f.......OH..F.\ 0500 e8 8d dd 59 f1 b3 0f 67 88 30 77 42 10 b2 45 79 ...Y...g.0wB..Ey 0510 fb f7 97 c8 ac d7 9c ac f9 e5 d1 03 c1 e2 7a e9 ..............z. 0520 4c 63 7a 1a a9 bc 2b b0 c6 5b 6c 17 05 b4 93 53 Lcz...+..[l....S 0530 2c 31 e9 59 11 bc f4 ce 6c 99 e6 f2 a5 b2 51 f6 ,1.Y....l.....Q. 0540 15 e5 0a 89 a9 2f bf e5 f9 2e c4 5c d5 01 ce fe ...../.....\.... 0550 a6 f0 b8 9d c0 a4 24 29 d7 91 04 0b 60 46 8f 09 ......$)....`F.. 0560 45 30 8a 7a 90 27 1c 1e 61 2b fb 2c 8d 9e 6c 98 E0.z.'..a+.,..l. 0570 49 1a d0 09 fe 72 1d dc 8c ee 28 81 60 7e 4a 60 I....r....(.`~J` 0580 34 33 ca 4e 4a e6 16 5c a7 96 b9 cd 5c 62 68 e1 43.NJ..\....\bh. 0590 9e 93 bb 01 61 92 30 90 72 fb 9c d1 96 d2 55 66 ....a.0.r.....Uf 05a0 3a 22 51 e7 0e 67 62 27 :"Q..gb' No. Time Source Destination Protocol Length Info 3836 51.604332 192.168.10.1 192.168.10.203 TCP 231 34433 > cds [PSH, ACK] Seq=127527 Ack=2221 Win=1002 Len=165 TSval=548149 TSecr=727999 Frame 3836: 231 bytes on wire (1848 bits), 231 bytes captured (1848 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 127527, Ack: 2221, Len: 165 Data (165 bytes) 0000 92 4e 07 7b 51 d5 dd 99 cc fd 26 9a 48 40 07 04 .N.{Q.....&.H@.. 0010 f4 7d 80 7c de 5b bb 12 c3 ac 96 ea ee bf d7 a7 .}.|.[.......... 0020 93 32 c7 1f f0 93 27 f3 7f d3 07 bb 1f 0f 49 09 .2....'.......I. 0030 4e 0c 0d 56 87 ff 8e 38 eb 3f 65 43 8e ec ba b2 N..V...8.?eC.... 0040 e5 09 50 70 e9 f6 99 53 b6 a9 6e 92 38 b7 f5 48 ..Pp...S..n.8..H 0050 fd a2 31 55 5d 59 b1 a9 0b 3d 34 06 24 3d 63 5f ..1U]Y...=4.$=c_ 0060 f4 6a e7 20 62 51 58 f9 3c 2f da 20 17 d9 0a ad .j. bQX.</. .... 0070 5f ba 73 ce 07 01 29 82 63 5a 63 09 11 54 07 79 _.s...).cZc..T.y 0080 b8 2f a3 0b ed 40 92 13 4c df ab 9c 30 1e 78 70 ./[email protected] 0090 ac ff 2c 13 02 f9 7d 18 d1 d2 ea e8 75 84 74 f0 ..,...}.....u.t. 00a0 8b bb 6e de 63 ..n.c No. Time Source Destination Protocol Length Info 3837 51.604383 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2221 Ack=126079 Win=65535 Len=0 TSval=727999 TSecr=548149 Frame 3837: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2221, Ack: 126079, Len: 0 No. Time Source Destination Protocol Length Info 3838 51.604431 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2221 Ack=127692 Win=65535 Len=0 TSval=727999 TSecr=548149 Frame 3838: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2221, Ack: 127692, Len: 0 No. Time Source Destination Protocol Length Info 3839 51.604470 190.42.139.241 192.168.10.207 TCP 60 23698 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 3839: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23698 (23698), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 3840 51.607270 64.74.103.131 192.168.10.240 TLSv1 107 Application Data Frame 3840: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.240 (192.168.10.240) Transmission Control Protocol, Src Port: https (443), Dst Port: mentaserver (2118), Seq: 54, Ack: 54, Len: 53 Secure Sockets Layer No. Time Source Destination Protocol Length Info 3841 51.607349 192.168.10.240 64.74.103.131 TLSv1 107 Application Data Frame 3841: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.240 (192.168.10.240), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: mentaserver (2118), Dst Port: https (443), Seq: 54, Ack: 107, Len: 53 Secure Sockets Layer No. Time Source Destination Protocol Length Info 3842 51.607417 64.74.103.131 192.168.10.240 TCP 60 https > mentaserver [ACK] Seq=107 Ack=107 Win=65535 Len=0 Frame 3842: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.240 (192.168.10.240) Transmission Control Protocol, Src Port: https (443), Dst Port: mentaserver (2118), Seq: 107, Ack: 107, Len: 0 No. Time Source Destination Protocol Length Info 3843 51.608960 Watchgua_3c:4c:d8 Dell_ba:b4:3c ARP 60 Who has 192.168.10.240? Tell 192.168.10.1 Frame 3843: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3844 51.608972 Dell_ba:b4:3c Watchgua_3c:4c:d8 ARP 60 192.168.10.240 is at 00:1e:c9:ba:b4:3c Frame 3844: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3845 51.651240 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 3845: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4243, Ack: 313807, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3846 51.651279 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=313807 Ack=4285 Win=46237 Len=0 Frame 3846: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 313807, Ack: 4285, Len: 0 No. Time Source Destination Protocol Length Info 3847 51.789227 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=2221 Ack=127692 Win=65535 Len=74 TSval=728000 TSecr=548149 Frame 3847: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2221, Ack: 127692, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 8a 4e 24 9a 2a 87 0b 2f 81 8e a1 .... .N$.*../... 0010 bc 76 22 31 c0 d3 20 69 3f 00 93 aa 66 bd 08 65 .v"1.. i?...f..e 0020 6c bb 1c e0 40 17 03 01 00 20 be c0 81 54 80 08 l...@.... ...T.. 0030 39 8f d8 c8 a4 1f 34 7e f5 fd 51 89 f4 5b 8a d8 9.....4~..Q..[.. 0040 ea b2 69 ff 8a 42 1d cc 83 df ..i..B.... No. Time Source Destination Protocol Length Info 3848 51.789289 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=127692 Ack=2295 Win=1002 Len=0 TSval=548196 TSecr=728000 Frame 3848: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 127692, Ack: 2295, Len: 0 No. Time Source Destination Protocol Length Info 3849 51.824156 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-09.geo.kaspersky.com Frame 3849: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 56842 (56842), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 3850 51.824786 190.42.139.241 192.168.10.207 SMTP 72 C: EHLO fyadbgw.com Frame 3850: 72 bytes on wire (576 bits), 72 bytes captured (576 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23698 (23698), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 18 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3851 51.825012 192.168.10.207 190.42.139.241 SMTP 245 S: 250-mail.mydomain.com Hello [190.42.139.241] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 3851: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23698 (23698), Seq: 122, Ack: 19, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3852 51.825054 190.42.139.241 192.168.10.207 TCP 60 23698 > smtp [ACK] Seq=19 Ack=313 Win=93128 Len=0 Frame 3852: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23698 (23698), Dst Port: smtp (25), Seq: 19, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 3853 51.825401 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:45:09 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23698 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 3853: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:09 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23698 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 3854 51.825509 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:45:09 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23698 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 3854: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:09 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23698 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 3855 51.825622 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:45:09 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23698 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 3855: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:09 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23698 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 3856 51.825743 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:45:09 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23698 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 3856: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:09 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23698 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 3857 51.825859 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:45:09 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23698 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 3857: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:09 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23698 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 3858 51.826154 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:45:09 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23698 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 3858: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:09 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23698 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 3859 52.017696 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2460948736, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3859: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3860 52.017720 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2460948736, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3860: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3861 52.017732 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2460948736, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3861: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3862 52.017744 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2460948736, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3862: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3863 52.038580 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 35127552, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3863: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3864 52.038601 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 35127552, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3864: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3865 52.038613 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 35127552, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3865: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3866 52.038625 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 35127552, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3866: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3867 52.041543 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 3867: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3868 52.041569 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 3868: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3869 52.159927 190.42.139.241 192.168.10.207 SMTP 95 C: MAIL FROM: <paige.hancock@xxxxxxxxxxxx> Frame 3869: 95 bytes on wire (760 bits), 95 bytes captured (760 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23698 (23698), Dst Port: smtp (25), Seq: 19, Ack: 313, Len: 41 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3870 52.160197 192.168.10.207 190.42.139.241 SMTP 105 S: 250 2.1.0 [email protected] OK Frame 3870: 105 bytes on wire (840 bits), 105 bytes captured (840 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23698 (23698), Seq: 313, Ack: 60, Len: 51 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3871 52.160244 190.42.139.241 192.168.10.207 TCP 60 23698 > smtp [ACK] Seq=60 Ack=364 Win=93076 Len=0 Frame 3871: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23698 (23698), Dst Port: smtp (25), Seq: 60, Ack: 364, Len: 0 No. Time Source Destination Protocol Length Info 3872 52.160980 Watchgua_3c:4c:d8 Dell_39:5d:dd ARP 60 Who has 192.168.10.207? Tell 192.168.10.1 Frame 3872: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3873 52.160994 Dell_39:5d:dd Watchgua_3c:4c:d8 ARP 60 192.168.10.207 is at 00:18:8b:39:5d:dd Frame 3873: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3874 52.170016 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 3874: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4285, Ack: 313807, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3875 52.170052 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=313807 Ack=4327 Win=46216 Len=0 Frame 3875: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 313807, Ack: 4327, Len: 0 No. Time Source Destination Protocol Length Info 3876 52.274937 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 3876: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 1984, Ack: 25334, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 3877 52.278185 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 3877: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2479, Ack: 146528, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3878 52.278221 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=146528 Ack=2521 Win=46111 Len=0 Frame 3878: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 146528, Ack: 2521, Len: 0 No. Time Source Destination Protocol Length Info 3879 52.311796 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 3879: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 25334, Ack: 2016, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 3880 52.311830 192.168.10.185 192.168.10.142 VNC 117 Authentication result Frame 3880: 117 bytes on wire (936 bits), 117 bytes captured (936 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 26594, Ack: 2016, Len: 63 Virtual Network Computing No. Time Source Destination Protocol Length Info 3881 52.337251 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=2016 Ack=26657 Win=64240 Len=0 Frame 3881: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2016, Ack: 26657, Len: 0 No. Time Source Destination Protocol Length Info 3882 52.358422 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 3882: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 26657, Ack: 2016, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 3883 52.358456 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 3883: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 27917, Ack: 2016, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 3884 52.358486 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 3884: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 29177, Ack: 2016, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 3885 52.358514 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 3885: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 30437, Ack: 2016, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 3886 52.358543 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 3886: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 30753, Ack: 2016, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 3887 52.358571 192.168.10.185 192.168.10.142 VNC 348 Authentication result Frame 3887: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32013, Ack: 2016, Len: 294 Virtual Network Computing No. Time Source Destination Protocol Length Info 3888 52.382839 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=2016 Ack=29177 Win=64240 Len=0 Frame 3888: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2016, Ack: 29177, Len: 0 No. Time Source Destination Protocol Length Info 3889 52.400204 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=2016 Ack=30437 Win=64240 Len=0 Frame 3889: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2016, Ack: 30437, Len: 0 No. Time Source Destination Protocol Length Info 3890 52.400387 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=2016 Ack=32013 Win=64240 Len=0 Frame 3890: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2016, Ack: 32013, Len: 0 No. Time Source Destination Protocol Length Info 3891 52.400437 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 3891: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2016, Ack: 32307, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 3892 52.568459 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=32307 Ack=2048 Win=64751 Len=0 Frame 3892: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32307, Ack: 2048, Len: 0 No. Time Source Destination Protocol Length Info 3893 52.716526 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 3893: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4327, Ack: 313807, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3894 52.716570 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=313807 Ack=4369 Win=46195 Len=0 Frame 3894: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 313807, Ack: 4369, Len: 0 No. Time Source Destination Protocol Length Info 3895 52.775540 192.168.10.246 192.168.47.1 TCP 62 netbios-ssn > business [SYN, ACK] Seq=0 Ack=0 Win=16384 Len=0 MSS=1460 SACK_PERM=1 Frame 3895: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 192.168.47.1 (192.168.47.1) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: business (3107), Seq: 0, Ack: 0, Len: 0 No. Time Source Destination Protocol Length Info 3896 52.796802 192.168.10.185 192.168.10.142 VNC 464 Authentication result Frame 3896: 464 bytes on wire (3712 bits), 464 bytes captured (3712 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32307, Ack: 2048, Len: 410 Virtual Network Computing No. Time Source Destination Protocol Length Info 3897 52.812636 71.5.105.194 192.168.10.207 TCP 62 41408 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 3897: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 71.5.105.194 (71.5.105.194), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 41408 (41408), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 3898 52.812713 192.168.10.207 71.5.105.194 TCP 62 smtp > 41408 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 3898: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 71.5.105.194 (71.5.105.194) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 41408 (41408), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 3899 52.823206 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 3899: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2048, Ack: 32717, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 3900 52.823242 192.168.10.185 192.168.10.142 VNC 100 Authentication result Frame 3900: 100 bytes on wire (800 bits), 100 bytes captured (800 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32717, Ack: 2080, Len: 46 Virtual Network Computing No. Time Source Destination Protocol Length Info 3901 52.831792 192.168.10.1 192.168.10.245 Syslog 308 LOCAL1.INFO: Oct 3 19:45:10 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23698 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eygstand@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 3901: 308 bytes on wire (2464 bits), 308 bytes captured (2464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:10 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23698 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 3902 52.847374 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 3902: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2080, Ack: 32763, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 3903 52.865299 71.5.105.194 192.168.10.207 TCP 60 41408 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 3903: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 71.5.105.194 (71.5.105.194), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 41408 (41408), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 3904 52.865387 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:45:10 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 71.5.105.194 7x.x.x.3 41408 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 3904: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:45:10 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 71.5.105.194 7x.x.x.3 41408 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 3905 52.865470 192.168.10.207 71.5.105.194 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:44:45 -0400 Frame 3905: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 71.5.105.194 (71.5.105.194) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 41408 (41408), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3906 52.865515 71.5.105.194 192.168.10.207 TCP 60 41408 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 3906: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 71.5.105.194 (71.5.105.194), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 41408 (41408), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 3907 52.921115 71.5.105.194 192.168.10.207 SMTP 84 C: EHLO fs01.knowledgefront.com Frame 3907: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 71.5.105.194 (71.5.105.194), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 41408 (41408), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 30 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3908 52.921291 192.168.10.207 71.5.105.194 SMTP 243 S: 250-mail.mydomain.com Hello [71.5.105.194] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 3908: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 71.5.105.194 (71.5.105.194) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 41408 (41408), Seq: 122, Ack: 31, Len: 189 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3909 52.921334 71.5.105.194 192.168.10.207 TCP 60 41408 > smtp [ACK] Seq=31 Ack=311 Win=93130 Len=0 Frame 3909: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 71.5.105.194 (71.5.105.194), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 41408 (41408), Dst Port: smtp (25), Seq: 31, Ack: 311, Len: 0 No. Time Source Destination Protocol Length Info 3910 52.921683 192.168.10.1 192.168.10.245 Syslog 270 LOCAL1.INFO: Oct 3 19:45:10 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 71.5.105.194 7x.x.x.3 41408 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 3910: 270 bytes on wire (2160 bits), 270 bytes captured (2160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:10 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 71.5.105.194 7x.x.x.3 41408 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" No. Time Source Destination Protocol Length Info 3911 52.921913 192.168.10.1 192.168.10.245 Syslog 276 LOCAL1.INFO: Oct 3 19:45:10 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 71.5.105.194 7x.x.x.3 41408 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 3911: 276 bytes on wire (2208 bits), 276 bytes captured (2208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:10 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 71.5.105.194 7x.x.x.3 41408 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELI No. Time Source Destination Protocol Length Info 3912 52.921980 192.168.10.1 192.168.10.245 Syslog 269 LOCAL1.INFO: Oct 3 19:45:10 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 71.5.105.194 7x.x.x.3 41408 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 3912: 269 bytes on wire (2152 bits), 269 bytes captured (2152 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:10 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 71.5.105.194 7x.x.x.3 41408 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 3913 52.922056 192.168.10.1 192.168.10.245 Syslog 285 LOCAL1.INFO: Oct 3 19:45:10 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 71.5.105.194 7x.x.x.3 41408 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 3913: 285 bytes on wire (2280 bits), 285 bytes captured (2280 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:10 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 71.5.105.194 7x.x.x.3 41408 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANC No. Time Source Destination Protocol Length Info 3914 52.922633 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=127692 Ack=2295 Win=1002 Len=1448 TSval=548479 TSecr=728000 Frame 3914: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 127692, Ack: 2295, Len: 1448 Data (1448 bytes) 0000 17 03 01 21 30 3c 09 da 4d 1f 71 64 d4 9e b9 2a ...!0<..M.qd...* 0010 19 69 2a 52 ee 8c 5d e9 15 85 91 ba 64 fc a3 30 .i*R..].....d..0 0020 e6 66 c3 67 86 38 e3 ae 3e e1 d7 ea e4 6a 9a ac .f.g.8..>....j.. 0030 85 91 55 79 5a 92 71 96 54 82 40 ab 7a 6f cc dd [email protected].. 0040 c7 56 d7 80 16 f0 05 02 64 77 be 84 a2 b6 a3 0b .V......dw...... 0050 7e 97 5f c8 5d 56 5e 2b af 88 35 a2 69 42 a9 3d ~._.]V^+..5.iB.= 0060 df 15 1c 41 0e c3 b3 e3 2e af 51 1d 82 cf 57 2f ...A......Q...W/ 0070 d1 2d 11 58 b0 e1 45 08 c7 eb a2 ea 34 07 98 92 .-.X..E.....4... 0080 93 c6 c4 18 04 c7 e0 61 64 68 ad 77 75 d3 f6 15 .......adh.wu... 0090 bf e4 5d 3b 7c 76 ca a8 1e 80 a0 b4 36 49 16 cd ..];|v......6I.. 00a0 e7 53 c7 5c 4b ae 20 d0 cf 13 72 52 26 d4 21 6f .S.\K. ...rR&.!o 00b0 bc c9 20 e0 6c 94 4f 7e 43 e2 26 8e dd e5 71 fe .. .l.O~C.&...q. 00c0 25 7e 76 7d ee 7f b8 03 09 17 5b f1 e9 10 38 eb %~v}......[...8. 00d0 ce 21 50 f6 5a 3a 73 e4 11 52 44 a5 fd d6 95 ca .!P.Z:s..RD..... 00e0 d3 60 da 8e b3 8c f2 41 10 29 1d 8d 6f 68 99 22 .`.....A.)..oh." 00f0 2d 01 28 9a 6b ae cb e8 0b 34 06 6a fe e6 6c 39 -.(.k....4.j..l9 0100 ad cc 4c 78 e8 04 e8 a7 7c b2 f1 3d 2f 33 10 5a ..Lx....|..=/3.Z 0110 b2 b3 f3 ef 96 74 02 9d 94 b0 1a e6 8f 8d 04 94 .....t.......... 0120 6a 47 75 c5 7d 2b bf a2 cf 26 14 de 21 e4 9f 8e jGu.}+...&..!... 0130 cb fd dd d7 db 9b 74 03 ee 66 8c 67 64 e7 9b 5e ......t..f.gd..^ 0140 7d bc a4 f3 04 dd c6 73 dd 40 23 34 e4 28 83 3a }......s.@#4.(.: 0150 49 05 35 5e 67 2a a9 b3 1e 62 fb 80 02 2c a6 0d I.5^g*...b...,.. 0160 5f 54 97 b0 9d 65 34 c4 63 1f c0 f5 67 76 1b e7 _T...e4.c...gv.. 0170 05 4d f2 1d 5a 25 ab b6 59 7a 21 69 7f 51 13 0f .M..Z%..Yz!i.Q.. 0180 35 3f 19 49 14 b7 8c 35 d6 9c 99 a1 a1 5e d9 ab 5?.I...5.....^.. 0190 c5 e1 9e d9 92 77 e7 2e 8d 8d e9 07 dd 6a 0d 85 .....w.......j.. 01a0 95 47 90 e7 f8 9c ec c3 d6 54 8d 8c 0f 38 98 c2 .G.......T...8.. 01b0 27 cd fc 2a 03 16 ef b1 b5 63 a3 cf ee cb c0 b6 '..*.....c...... 01c0 19 24 5a 55 1d eb 56 01 85 25 a2 f3 42 63 38 dd .$ZU..V..%..Bc8. 01d0 99 51 a8 78 ca f8 fc 24 3b 7d 58 eb e0 71 b3 41 .Q.x...$;}X..q.A 01e0 e6 7e 82 47 83 95 8c c2 48 f1 d9 d7 6b 57 0f c5 .~.G....H...kW.. 01f0 9f 70 75 9a 5e 0d d0 fc d2 20 9c 2d b3 9c ab 8c .pu.^.... .-.... 0200 51 08 93 51 ce aa 23 a8 b9 88 f1 02 88 11 f6 9a Q..Q..#......... 0210 d3 3f 79 35 de 56 35 c9 cd 7c ed 89 b6 a9 be c3 .?y5.V5..|...... 0220 04 59 e0 76 16 60 a9 96 f8 f8 73 d1 87 a2 6d 9a .Y.v.`....s...m. 0230 e1 0b 6e be 7f e5 01 76 ab 66 e5 2d 58 1c 22 45 ..n....v.f.-X."E 0240 7d 58 58 af d0 cf a8 94 76 7c 32 16 a1 89 ba ad }XX.....v|2..... 0250 1c dd fd d4 11 b3 e3 84 2b fa a3 11 bd 03 71 6a ........+.....qj 0260 01 a0 f4 20 89 0b 2d 77 8f 4c 5c 66 82 db b7 67 ... ..-w.L\f...g 0270 3c af 11 5a cf 39 1c 68 4a a8 f9 f2 9e 03 3f 18 <..Z.9.hJ.....?. 0280 cd 1f 50 e7 f8 9e bc f2 6d bd 19 5f f7 ca 3e 9b ..P.....m.._..>. 0290 27 81 06 e5 76 fc d8 ab 03 f7 ee 8b 3e 7e 1f 94 '...v.......>~.. 02a0 07 ec 73 e2 4e c5 c1 dc 09 c2 c8 03 62 ea 69 e0 ..s.N.......b.i. 02b0 55 65 d9 83 8d 76 a7 df 25 8f bd 8e af 3c 45 8f Ue...v..%....<E. 02c0 c6 6b 81 7d a9 01 7d c4 2b b3 81 04 41 fd d8 64 .k.}..}.+...A..d 02d0 8f 59 73 28 74 37 c4 bb 46 7d 72 a3 21 96 ec 13 .Ys(t7..F}r.!... 02e0 41 df 20 a1 ea 04 02 2c 03 2e 02 0c b7 28 3b 6f A. ....,.....(;o 02f0 99 7f 64 b6 d3 37 4f b0 63 b6 fc a8 fa 56 b2 b0 ..d..7O.c....V.. 0300 20 ab 6e 11 b1 00 6b e0 e5 53 73 2b 62 37 c2 c2 .n...k..Ss+b7.. 0310 27 b8 d4 f2 7b e2 d1 8f a8 3b 32 f4 dd 25 fd 1a '...{....;2..%.. 0320 9e 20 db 04 fc cf 48 cd 6e 45 d5 78 c6 74 f4 81 . ....H.nE.x.t.. 0330 10 b9 2d 8b bb a1 c7 be 66 d3 c6 9c e1 64 29 ba ..-.....f....d). 0340 4a 37 85 0a 85 f0 ac b1 4f 2b 7e e6 8d e6 fb 74 J7......O+~....t 0350 e4 85 df 15 e0 59 c3 e1 4d 52 f1 f5 98 90 26 07 .....Y..MR....&. 0360 7f 4f cc df 19 2c 0a ac ad af a4 13 08 1b 49 44 .O...,........ID 0370 91 88 6a 0b fa 02 11 2c 20 ad 34 b9 ce af 29 3d ..j...., .4...)= 0380 9b ac ac d4 f7 bb fb cd 30 db 72 81 ed 15 e0 fe ........0.r..... 0390 1b 13 ef a0 cf 0f 74 f7 08 c3 37 99 9c 8d 7d 9e ......t...7...}. 03a0 74 8f 27 0a 3e fa 59 c1 d0 4b be 20 9e e3 ba 48 t.'.>.Y..K. ...H 03b0 d0 37 d0 dd 32 e3 3a c0 35 20 db 03 5c b3 9c c2 .7..2.:.5 ..\... 03c0 be be 38 ed 1d 27 84 f8 c7 12 53 65 31 de e7 1b ..8..'....Se1... 03d0 76 b4 a7 a0 47 b0 92 4f 0d 0e 37 5c 2a e1 8b d4 v...G..O..7\*... 03e0 80 cd 03 28 3d fd ca 5f 5c 4b 37 c0 18 de 21 68 ...(=.._\K7...!h 03f0 e4 2e e1 17 6e 1d 69 5c c2 88 ea 73 d1 0f df 53 ....n.i\...s...S 0400 53 41 a9 60 e6 1d 51 fd d3 3f 90 cf 53 1e ce 80 SA.`..Q..?..S... 0410 96 55 bb 04 1d 82 68 8d be 01 24 da a2 f9 7d 6c .U....h...$...}l 0420 61 6b 56 71 31 61 17 00 6a d2 99 3c 51 e7 4c cc akVq1a..j..<Q.L. 0430 28 a4 ec 58 77 da d7 11 c3 85 37 df 7f c3 68 1d (..Xw.....7...h. 0440 bc 5d 28 c7 e1 5b da 1b 9c 74 80 3d 49 46 31 11 .](..[...t.=IF1. 0450 ea 01 79 b6 4f 46 a4 71 16 e5 68 73 56 40 54 f2 ..y.OF.q..hsV@T. 0460 7d fa 98 a3 fe 36 fc ff 19 ea f9 b9 e6 b2 87 06 }....6.......... 0470 cd b6 40 c2 54 e4 ce e3 2b a6 a0 7a 3f 32 24 96 [email protected]...+..z?2$. 0480 54 88 7c 7a 30 36 95 ca 59 ab 04 d3 5c 1c 9f 70 T.|z06..Y...\..p 0490 40 16 3d 80 59 c1 04 b4 0c 03 6b b1 8e c8 b9 f6 @.=.Y.....k..... 04a0 64 c6 52 f8 02 74 13 13 72 a6 e1 53 2c 84 92 3f d.R..t..r..S,..? 04b0 16 19 c2 44 57 cc 79 80 96 3d 73 12 cc f9 57 4c ...DW.y..=s...WL 04c0 c0 22 6a 70 6b f2 c3 e5 bf d3 a0 4e 79 27 5e ad ."jpk......Ny'^. 04d0 01 de c1 d5 dc 79 cf be 99 4b d8 11 0c f4 16 99 .....y...K...... 04e0 c8 d1 54 b9 7b 88 3a 66 13 27 25 dd 5f eb 16 bd ..T.{.:f.'%._... 04f0 06 4b f0 10 1d 76 ff 5a 72 15 0e 6d 03 be e5 27 .K...v.Zr..m...' 0500 42 2c b9 63 62 89 f5 63 ff 19 87 73 d6 69 9d 5c B,.cb..c...s.i.\ 0510 b6 0e f1 f1 c2 23 8d 62 ab da bc 83 89 7f 0c 21 .....#.b.......! 0520 92 4d 94 92 99 dc 98 35 58 b8 66 67 74 aa ba 0a .M.....5X.fgt... 0530 ee 0c c6 3b 6a 18 5e 6a ff 8c de ad ac b9 81 9b ...;j.^j........ 0540 18 d8 26 e7 f0 19 ca d2 bd bc 27 64 ff c7 2e 04 ..&.......'d.... 0550 20 61 3c fb e1 46 bc 3f f4 31 12 81 65 d1 41 58 a<..F.?.1..e.AX 0560 6b 7d 8c db c6 9f a3 ae 41 fd 65 ac c7 be 6e 89 k}......A.e...n. 0570 45 9a 0d 5d 36 fc 61 92 7d 65 2c 2c 32 5c 83 c8 E..]6.a.}e,,2\.. 0580 7e ba 70 58 d2 e7 0c 2d 24 1b 88 c6 c6 49 54 43 ~.pX...-$....ITC 0590 0a 93 be 38 3c b1 be 0f a2 45 92 cc df ff 05 1f ...8<....E...... 05a0 b6 83 05 34 b7 27 1b 96 ...4.'.. No. Time Source Destination Protocol Length Info 3915 52.922731 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=129140 Ack=2295 Win=1002 Len=1448 TSval=548479 TSecr=728000 Frame 3915: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 129140, Ack: 2295, Len: 1448 Data (1448 bytes) 0000 75 c4 56 30 86 c4 ad 6a dc c2 ea b3 98 94 bd 27 u.V0...j.......' 0010 f4 3a 79 1e a1 32 ac 21 a8 58 86 47 7d 5e e2 d2 .:y..2.!.X.G}^.. 0020 7f b0 28 44 49 23 b1 86 5b ac a1 9a 82 16 77 d7 ..(DI#..[.....w. 0030 d9 24 f5 93 dc 70 05 e1 93 7b 0d 0c a0 38 35 e4 .$...p...{...85. 0040 bc 86 3d cb 18 39 5b 5b d0 0d c5 cf 93 5f fe 2b ..=..9[[....._.+ 0050 7d ad 02 78 36 b8 cc 58 89 3e 30 0b 32 1a 5a 6b }..x6..X.>0.2.Zk 0060 99 c4 79 cf ca ea cd a8 5b cd c3 fe 40 e3 cd e1 ..y.....[...@... 0070 6c 20 b4 ca 60 73 9f 9e b8 a8 39 ee c6 60 ad a9 l ..`s....9..`.. 0080 b9 8e 17 24 b9 89 f2 28 4e b5 31 22 ab 52 8b a8 ...$...(N.1".R.. 0090 27 b4 f9 f4 46 04 19 5b d1 87 da 8e 25 af 1a 1c '...F..[....%... 00a0 3c 51 11 c6 3e 1e d1 85 ed 8b 56 a5 78 a7 fe 3d <Q..>.....V.x..= 00b0 22 b5 83 23 9d 76 e6 d9 a5 b8 16 fa d6 63 17 83 "..#.v.......c.. 00c0 1e 63 08 28 c9 ec 6a b5 44 50 81 37 85 e1 58 9e .c.(..j.DP.7..X. 00d0 e3 50 b8 69 5d cf c7 e2 3b 9b c4 a5 34 64 4d 6c .P.i]...;...4dMl 00e0 f4 66 d1 a4 e6 42 c6 59 70 f6 4a 6b 86 a6 1e 61 .f...B.Yp.Jk...a 00f0 4f e9 af cd 6f aa 7f 4a 93 3e c9 99 51 1c 6c a0 O...o..J.>..Q.l. 0100 d7 3f 8b 78 00 84 16 6e 72 41 de f4 12 b3 4d 56 .?.x...nrA....MV 0110 d4 6a ce 57 88 2c af 92 38 24 d0 bf 6c cb 40 04 .j.W.,..8$..l.@. 0120 13 40 c6 31 c4 5d fa 08 23 f0 d4 6f 82 3a 63 54 [email protected].]..#..o.:cT 0130 1d c7 a3 4e 44 d6 96 fa bd 16 73 11 46 5e 99 b3 ...ND.....s.F^.. 0140 1a b1 64 2c b0 da bb 8b f5 8f 33 c1 e0 b3 14 2c ..d,......3...., 0150 07 52 49 4d 8e c1 f5 60 15 57 60 6f 21 69 06 7d .RIM...`.W`o!i.} 0160 a2 b7 33 eb 9d 49 7f 47 d1 a8 b3 ec 15 be f2 2b ..3..I.G.......+ 0170 0b a4 a7 1b 65 e8 b3 e0 06 8b d9 b7 aa c5 96 72 ....e..........r 0180 11 61 00 d3 51 24 5e 0c 3a 7f d2 5d e1 cc 24 6f .a..Q$^.:..]..$o 0190 38 8b 53 e1 e9 1f e2 bf 16 2e 0f 4e f9 53 c1 42 8.S........N.S.B 01a0 27 3c 1a e9 e2 fd 55 36 53 d6 c4 14 51 67 7d d4 '<....U6S...Qg}. 01b0 2d ad 80 37 a2 d9 ca ed 23 cf da ab 40 b3 78 54 -..7....#[email protected] 01c0 d8 6b e7 ce 84 f5 6d fc ad 02 95 16 1c e2 f5 ff .k....m......... 01d0 2e 5a 43 e3 ae a0 df f0 59 0c 77 f6 ca 8b 16 3a .ZC.....Y.w....: 01e0 97 9c f8 3f 8f b7 a7 5a ed 17 c7 96 6f 6e ca 94 ...?...Z....on.. 01f0 51 6c 0f 72 37 3a 3f 04 53 89 af 81 9a 1f 28 98 Ql.r7:?.S.....(. 0200 6c ca 9a 83 6a 14 e9 3c af fc 2a 1d 64 57 7a a6 l...j..<..*.dWz. 0210 69 d9 38 f6 38 81 e8 eb dd ae f6 04 d9 22 03 3c i.8.8........".< 0220 c6 0f 01 23 3f 0d 09 da 80 6b 18 93 9a 35 58 b3 ...#?....k...5X. 0230 1a 4e ec 75 e9 a5 60 ff 85 99 62 65 2a d4 56 81 .N.u..`...be*.V. 0240 0b ff c9 98 84 14 a4 a7 dc 32 24 e0 c0 19 fc e3 .........2$..... 0250 12 80 1c 1e 92 2e c0 3f 9a 19 e7 73 a9 e1 05 ae .......?...s.... 0260 fd 2e e9 07 3c b0 44 4d 37 2c a9 74 ce 04 d7 8c ....<.DM7,.t.... 0270 ef d7 69 6a 4a 24 e5 9a a8 2e ba 40 c3 c1 47 86 [email protected]. 0280 6e 2c d3 49 74 f6 8d eb 9f 85 a8 04 ba d0 71 1c n,.It.........q. 0290 58 d9 7b b9 62 d4 8c 0f 6e 84 f3 db 48 e7 d9 c2 X.{.b...n...H... 02a0 c2 24 60 46 06 ee 87 4d 1b 4b fc 94 3b 0b 83 b1 .$`F...M.K..;... 02b0 a0 fb 21 1d 36 54 81 fe 4d 4c 8a 27 81 34 09 d7 ..!.6T..ML.'.4.. 02c0 1e bb f9 88 71 5c ab 97 40 85 35 3e 79 29 3c 8b ....q\[email protected]>y)<. 02d0 8c 61 43 b0 6a fd 90 39 20 fd f1 11 79 c2 13 0f .aC.j..9 ...y... 02e0 d1 7d a4 01 e1 fb 11 52 9f f7 82 ee 4b a2 0b f3 .}.....R....K... 02f0 0d 2d 6b 98 8f 70 df 3c f5 fb 2f 61 49 c0 08 cc .-k..p.<../aI... 0300 6a 00 72 a1 75 a2 3c bf 6e a4 2a 63 e1 71 6c fc j.r.u.<.n.*c.ql. 0310 1c 95 eb 57 c8 68 59 5e c7 c2 8a ae 70 cd 89 ab ...W.hY^....p... 0320 7a e3 26 68 2d 5f 6c 2e b4 f3 a3 91 d4 cb ba 33 z.&h-_l........3 0330 f3 d4 8b f4 bc 57 b5 6e ef 24 e4 b4 f2 22 9f 5f .....W.n.$..."._ 0340 6e 8f a1 c9 f7 e3 4b 07 47 02 4c 5c 73 61 25 84 n.....K.G.L\sa%. 0350 c0 b2 d4 54 ae a2 7f 5b 96 c7 e1 c2 c6 e8 9f 5a ...T...[.......Z 0360 a0 6b af 22 38 27 ef 13 79 9c 07 1b a9 39 03 c5 .k."8'..y....9.. 0370 bf fb 6c 6f e7 72 bc 8f d0 87 f5 a0 fd cb 1f 64 ..lo.r.........d 0380 9a 4b da 51 15 d6 06 1a 78 a8 aa e5 4c 03 29 ae .K.Q....x...L.). 0390 47 03 8d 26 2e a1 9d f1 b7 a4 02 cb be fd 73 bb G..&..........s. 03a0 6d de 33 c1 21 ae 6a 44 61 fa 23 f7 b7 74 cc de m.3.!.jDa.#..t.. 03b0 7f 8b d8 a1 a0 21 19 a5 1a e3 1b f4 6c a9 fc e0 .....!......l... 03c0 fa 34 4c ab fd 59 25 4f ad cc 80 f6 56 18 09 33 .4L..Y%O....V..3 03d0 45 ab f6 f7 9c 44 35 b4 68 6a 08 f7 01 78 bf 4c E....D5.hj...x.L 03e0 6a 9f 80 2b 34 5f ec 4d 00 cf 85 10 58 73 da 5e j..+4_.M....Xs.^ 03f0 29 54 11 08 64 71 a1 2e d8 72 84 3f 97 21 93 03 )T..dq...r.?.!.. 0400 8c 3e bb 22 fd ad ef 34 2d 1f 2f 48 c2 a4 ce 1c .>."...4-./H.... 0410 c0 77 d3 be 77 a2 9e cd 27 76 20 b1 3c 8f fa 3b .w..w...'v .<..; 0420 b2 d8 4e b0 fb 91 5b c8 0d c4 86 a9 1d da 50 5f ..N...[.......P_ 0430 e7 90 4f 29 d2 e5 6a 35 1d f0 a1 4d d3 4b 5f be ..O)..j5...M.K_. 0440 e9 9a 11 72 40 2d 4a 9d 6c 8c 55 1f 55 87 b5 b5 [email protected]... 0450 ec c1 44 02 6f 5f 72 10 8c d1 98 ce 00 66 ce 0b ..D.o_r......f.. 0460 25 c6 11 d3 9c 79 40 04 c0 25 ec 71 4c 56 77 11 %....y@..%.qLVw. 0470 af c6 fc 76 d9 38 b0 12 2e 23 81 b3 b2 e5 6f d9 ...v.8...#....o. 0480 0c dc 6a 10 4a 9d 42 b4 78 5c fd 12 50 f5 70 b2 ..j.J.B.x\..P.p. 0490 2b 76 ad bc 1f 3b 94 d2 b7 f7 6c e4 f9 ef c9 4d +v...;....l....M 04a0 40 dc bd ce d0 7e b4 0f 7c 9a 45 e6 65 b7 5a 83 @....~..|.E.e.Z. 04b0 f8 50 e5 71 19 3e 45 af 8e 82 64 c5 6c 63 b5 00 .P.q.>E...d.lc.. 04c0 4e 32 23 47 4c a1 4d ed eb 2d 81 ef 5d f0 00 e4 N2#GL.M..-..]... 04d0 fb 33 80 b0 38 77 b0 69 1b a6 ae 23 85 6f 50 1c .3..8w.i...#.oP. 04e0 05 58 fb 3d 2b ca 20 b4 26 47 bb 3e 29 08 de 8a .X.=+. .&G.>)... 04f0 09 a7 12 95 fe f4 00 89 81 b0 37 30 a4 14 af 06 ..........70.... 0500 10 a7 91 14 63 be a5 e8 26 5e 3a af 07 d8 56 fb ....c...&^:...V. 0510 17 b1 e5 c0 d1 0d af 4c 44 37 92 94 50 f1 7b 8e .......LD7..P.{. 0520 00 f2 d3 4e 2a 9f 38 2e 85 6f 5f 79 cd de 1d c8 ...N*.8..o_y.... 0530 b3 95 f6 80 eb bb a0 75 bf 49 37 b9 ac cf 0b 22 .......u.I7...." 0540 97 75 0f 37 f9 a9 d8 fe 11 dd c0 05 d5 1d c9 a4 .u.7............ 0550 67 81 c1 75 6a 25 01 0a 48 91 51 ee db d1 af 96 g..uj%..H.Q..... 0560 de 76 1e a6 3f 1c 6b b7 16 d8 ac 10 1f 25 42 9a .v..?.k......%B. 0570 08 be 60 b9 59 a9 ae f3 85 81 6c 9f 64 ce b2 6d ..`.Y.....l.d..m 0580 37 bd 98 39 d5 ed e4 43 d4 f1 1e bd 83 c7 3e da 7..9...C......>. 0590 61 c7 41 45 1e a8 4b 6b e3 8a b0 4e 68 fc b7 d6 a.AE..Kk...Nh... 05a0 de 56 f8 cc 78 fb 2e e1 .V..x... No. Time Source Destination Protocol Length Info 3916 52.922817 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=130588 Ack=2295 Win=1002 Len=1448 TSval=548479 TSecr=728000 Frame 3916: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 130588, Ack: 2295, Len: 1448 Data (1448 bytes) 0000 61 86 48 17 27 38 a8 df aa b4 1a c1 1d 83 42 a6 a.H.'8........B. 0010 05 1f 5a a6 1b 81 86 25 4a a7 46 f0 bf b9 34 a8 ..Z....%J.F...4. 0020 3b 98 8e ed 50 89 d4 93 92 1e 8f 19 a7 d6 b8 c5 ;...P........... 0030 af e2 14 86 7a 9c 0e 94 1a 80 04 99 f3 33 05 c4 ....z........3.. 0040 df 85 9e f6 c4 89 97 74 f3 c7 cd 52 4b 2c 94 3d .......t...RK,.= 0050 0f ff 40 9f ee 95 62 da 98 39 fd 42 80 03 53 ca [email protected]. 0060 d2 2b 9c 97 29 db 20 56 aa a0 45 84 f2 c9 b7 9d .+..). V..E..... 0070 60 9d 34 8b 4c b1 d0 01 f7 3d ca 36 f3 97 53 66 `.4.L....=.6..Sf 0080 ea ec 2b 24 cf 8d bd 9e 55 22 57 5d ad 6e f5 46 ..+$....U"W].n.F 0090 8a 94 e2 4b ea ff c2 da 48 98 8a 8e 18 2f 52 84 ...K....H..../R. 00a0 7c 1b 53 df 69 db 91 1f 39 b4 a5 97 f2 18 6c a7 |.S.i...9.....l. 00b0 bb 75 91 eb 5f 79 be e6 4b ba 74 f7 d1 90 9c a4 .u.._y..K.t..... 00c0 19 5f 9f 45 a8 5d f6 2b 01 52 c1 41 72 c9 56 d9 ._.E.].+.R.Ar.V. 00d0 39 54 7c 0f ee e1 f3 26 68 a9 d4 93 16 3c 16 81 9T|....&h....<.. 00e0 41 20 03 53 11 cd ab 31 6f 2f f2 cc 9b 7f 0f dc A .S...1o/...... 00f0 18 71 76 2d 50 b4 a5 45 7d b2 f9 f1 96 a5 87 62 .qv-P..E}......b 0100 0a 34 7c a9 8f b0 04 bc cf 1c 32 d9 34 66 e1 9d .4|.......2.4f.. 0110 b1 27 bf 69 36 01 a3 21 07 b1 66 af 8a 62 17 b8 .'.i6..!..f..b.. 0120 74 a5 74 4f b0 31 81 4a 98 f6 56 85 47 92 ff 7e t.tO.1.J..V.G..~ 0130 3b 8b 02 85 ef 26 c6 f1 17 a4 44 1b 1e 20 62 7f ;....&....D.. b. 0140 91 20 6e db f4 11 02 58 38 20 24 6f 3d 52 e8 0e . n....X8 $o=R.. 0150 0c 1c d5 36 87 69 71 f1 e5 88 c9 db a2 61 ce df ...6.iq......a.. 0160 36 96 84 eb 34 0c 01 a7 f9 b2 ed bb 5e 0b 7a b1 6...4.......^.z. 0170 a7 42 52 7f 7c 88 29 d9 11 1e a9 4a 53 ab 6f d1 .BR.|.)....JS.o. 0180 55 64 46 dc 4c ce c4 7e 4c 31 3f b9 4a 96 76 7b UdF.L..~L1?.J.v{ 0190 fe e0 c4 0c 11 f5 7f fa 34 a1 b2 47 73 73 b7 2f ........4..Gss./ 01a0 ec 2b a6 97 5c 3d c7 26 27 ee 0d 59 f3 c8 8a d2 .+..\=.&'..Y.... 01b0 10 16 af 03 7b 07 cd 55 84 e0 92 16 94 62 0e 25 ....{..U.....b.% 01c0 8a 9a b8 c0 a7 3f c8 9c 20 0f 4a 44 61 e5 18 50 .....?.. .JDa..P 01d0 b3 12 06 5d b7 af 30 b1 a5 53 98 bb bd 40 f3 f4 ...]..0..S...@.. 01e0 7a 5c eb d2 c1 3f d2 51 47 7b 88 cd 24 36 da 75 z\...?.QG{..$6.u 01f0 bf 35 d3 49 4d fc 46 39 12 9c 30 64 86 f1 0f 59 .5.IM.F9..0d...Y 0200 05 e6 2b e3 34 d2 69 30 d2 13 af d3 47 6f 7d c6 ..+.4.i0....Go}. 0210 ee 0e 11 f6 49 82 0f 92 e5 9c 35 7c 1b c6 2d a1 ....I.....5|..-. 0220 e1 db 08 61 8d f4 25 61 ec c2 c3 b4 8a 58 b6 53 ...a..%a.....X.S 0230 a1 35 74 c7 43 5e 1f d3 10 85 be e9 8f 68 29 99 .5t.C^.......h). 0240 0a f9 d7 f0 50 56 36 80 93 19 4b 76 a9 9c 57 82 ....PV6...Kv..W. 0250 ee bb ae 57 4f 2f 66 61 fc a8 07 ab 69 22 30 5f ...WO/fa....i"0_ 0260 a4 c8 55 a3 07 06 a4 9c cb 89 64 9d 15 40 8e 32 [email protected] 0270 1c ec 86 1d db b4 82 ea 87 a3 d1 2b ab 1b 9f 92 ...........+.... 0280 80 cb 3d 7b 5e 3c 17 02 0d 59 de aa ee 7e 35 a5 ..={^<...Y...~5. 0290 c3 22 86 a4 7d 84 67 76 0b f9 12 5c b9 78 e3 23 ."..}.gv...\.x.# 02a0 02 2c 1f 4e a6 7a bc ee fc 40 f3 74 bd 23 93 e3 .,[email protected].#.. 02b0 a1 90 75 22 8c 72 e6 74 0a 85 39 a6 5e 43 bd cd ..u".r.t..9.^C.. 02c0 f8 95 4e 40 86 f0 9e f9 36 97 c3 39 27 73 01 3f [email protected]'s.? 02d0 d1 a3 e9 e7 f9 76 1a c1 ad 9a 71 c7 59 1d 06 5c .....v....q.Y..\ 02e0 da bc 96 62 8a c9 ff 34 90 38 69 8c 85 80 b7 2b ...b...4.8i....+ 02f0 43 64 30 61 7d 31 cf 1d 6f af 4c 30 63 d4 74 f7 Cd0a}1..o.L0c.t. 0300 e4 dc 57 c7 bb c3 5c cd 10 0e 7f 3e 88 de 52 b8 ..W...\....>..R. 0310 b6 c6 88 31 89 10 1f 33 19 d1 36 68 83 f4 7b 93 ...1...3..6h..{. 0320 f8 cd bb 58 40 48 b3 f2 d9 c8 fa a5 7d b0 44 12 ...X@H......}.D. 0330 55 99 18 13 13 25 83 f5 6b 8e e1 df 65 e5 e1 fc U....%..k...e... 0340 d9 7e 48 c4 51 ff a8 0f 02 78 ae fd 57 62 56 c7 .~H.Q....x..WbV. 0350 95 95 38 76 95 17 b5 5f 33 d9 2f 42 16 5d 13 04 ..8v..._3./B.].. 0360 dc ad 8b 72 2b e8 80 33 3c 4d c7 cb 10 bf 06 f0 ...r+..3<M...... 0370 b5 d6 15 06 88 7e 21 84 bd 08 7d ce 0d 8b bf 80 .....~!...}..... 0380 ff a0 f1 07 73 9c 13 9f fd 50 a5 e1 b5 38 69 4c ....s....P...8iL 0390 ab 7f df cd c2 4c 9d bc f2 7c 8f f8 0f 1d 98 99 .....L...|...... 03a0 46 10 44 f3 5d 66 84 62 77 15 b3 e8 a3 7f 5c e4 F.D.]f.bw.....\. 03b0 ce bc 43 ba ee 3e a4 0c 21 a9 94 15 9d 94 cd 63 ..C..>..!......c 03c0 6a 6e 20 c2 bf 92 d0 bd fb 6a f7 c8 f3 4c c0 87 jn ......j...L.. 03d0 46 da cd f8 7e ec f1 39 0c 89 7c 93 86 b7 14 4d F...~..9..|....M 03e0 e7 da 82 09 8b fd 1b 5d 62 50 c6 26 90 c2 22 f5 .......]bP.&..". 03f0 d6 d7 da d9 81 8f bf 33 de 36 78 a3 91 38 bc b7 .......3.6x..8.. 0400 ce 64 dc 25 41 31 41 5c 31 c4 ff d3 6b 22 44 99 .d.%A1A\1...k"D. 0410 97 17 ca 18 f5 68 3d 7f 4a 1c 95 0f bf bf f3 d5 .....h=.J....... 0420 09 ae c3 22 e8 11 74 b1 ec 9d b3 c0 28 7f ab 2a ..."..t.....(..* 0430 92 df 0f b4 88 b6 88 88 bc 13 1b c9 be 1f 54 fa ..............T. 0440 8f c2 93 d6 6f bd a0 11 a9 6f 58 a6 03 67 6a 15 ....o....oX..gj. 0450 4c 1d 12 44 67 0d 1b 3f 7a 6a e2 8d e5 b8 7c f2 L..Dg..?zj....|. 0460 09 d6 20 e7 d2 bb 1a 15 7d e0 af fd 4e d6 14 6d .. .....}...N..m 0470 01 5c 13 3d 0d a6 4c 5c 41 71 66 89 3f 25 55 1f .\.=..L\Aqf.?%U. 0480 58 c6 0f 10 25 1f c1 d2 07 2b 38 bf 9b 04 5c 50 X...%....+8...\P 0490 85 55 4c 9f 31 be 40 ee 3f a3 56 e4 6b 32 65 c6 .UL.1.@.?.V.k2e. 04a0 03 ba 29 16 93 f6 10 dd 40 48 f7 0d af e1 2a 9f ..).....@H....*. 04b0 7f 84 7e 03 58 95 6a 09 f4 a1 59 82 ff f2 d8 bf ..~.X.j...Y..... 04c0 e2 cd 9c fe f4 33 91 72 92 ba ac 39 9b f1 f2 75 .....3.r...9...u 04d0 4c a1 82 e3 07 39 37 de c9 bf f7 07 01 d6 c6 cb L....97......... 04e0 98 d8 89 05 21 e9 54 7c fc 2a a5 36 fa 5d b6 f5 ....!.T|.*.6.].. 04f0 bb ed 7b 07 a3 24 e4 cf 16 54 c5 49 63 39 f2 a7 ..{..$...T.Ic9.. 0500 b5 e2 5c ce 81 d1 17 5e 46 48 ce 54 c7 3b fd 84 ..\....^FH.T.;.. 0510 47 2a 22 05 bf 32 98 1a c0 95 fc 32 20 0e 07 04 G*"..2.....2 ... 0520 63 33 63 b1 31 49 28 64 8f 99 7c 43 13 d1 24 da c3c.1I(d..|C..$. 0530 65 68 25 57 a7 93 2b f5 4e c4 fe 7b 4a f3 f2 89 eh%W..+.N..{J... 0540 aa fb 01 0e 47 c8 59 2e 58 f7 20 c9 a4 c6 7c 09 ....G.Y.X. ...|. 0550 77 29 b9 15 38 57 e9 a7 d8 23 a9 65 2f 09 33 19 w)..8W...#.e/.3. 0560 76 2e 9f 54 73 55 9f 82 f8 c4 28 e3 7f 68 7a 7c v..TsU....(..hz| 0570 69 e1 64 15 4b c2 28 20 ba 7f ad 75 c5 14 ff 25 i.d.K.( ...u...% 0580 e2 96 fc 5b 00 cf 7e c5 1e 44 4f e1 92 a7 bf 04 ...[..~..DO..... 0590 76 e6 51 36 e3 9a 17 14 d1 57 40 2c b4 26 71 f8 v.Q6.....W@,.&q. 05a0 69 68 42 0c 9f 35 33 63 ihB..53c No. Time Source Destination Protocol Length Info 3917 52.922892 192.168.10.1 192.168.10.245 Syslog 276 LOCAL1.INFO: Oct 3 19:45:10 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 71.5.105.194 7x.x.x.3 41408 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 3917: 276 bytes on wire (2208 bits), 276 bytes captured (2208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:10 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 71.5.105.194 7x.x.x.3 41408 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARY No. Time Source Destination Protocol Length Info 3918 52.922943 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2295 Ack=132036 Win=65535 Len=0 TSval=728012 TSecr=548479 Frame 3918: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2295, Ack: 132036, Len: 0 No. Time Source Destination Protocol Length Info 3919 52.923032 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=132036 Ack=2295 Win=1002 Len=1448 TSval=548479 TSecr=728012 Frame 3919: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 132036, Ack: 2295, Len: 1448 Data (1448 bytes) 0000 46 9c 39 0c 9d 99 30 1a 46 e1 c1 f8 c1 24 f6 be F.9...0.F....$.. 0010 ed 11 59 30 b4 c1 2d 07 73 da 99 0e 1a 71 ec f0 ..Y0..-.s....q.. 0020 8c 9a 53 0e f4 56 25 38 42 53 c7 f1 ea 2f 18 fa ..S..V%8BS.../.. 0030 67 ee 06 7e 03 71 cd fa 23 ef d5 d9 35 48 d3 0b g..~.q..#...5H.. 0040 0e 02 17 72 00 36 d5 41 44 09 cc 06 f1 83 11 6a ...r.6.AD......j 0050 17 25 bc dd 9e a5 53 a5 3f db 97 ea 9e 34 fd d0 .%....S.?....4.. 0060 7f d7 96 d6 cd 55 3c df c8 36 b3 96 f0 3e c1 26 .....U<..6...>.& 0070 94 de 0b 61 f0 77 d7 7e 0e e0 25 0f ef cb 7a 06 ...a.w.~..%...z. 0080 1f 1a 26 aa eb 32 17 fa 92 dd d5 77 3d bd 86 e2 ..&..2.....w=... 0090 5e a3 b3 5f 23 37 3f c4 2d 70 4f a0 5f 53 f3 6e ^.._#7?.-pO._S.n 00a0 79 05 55 8b a0 af 5b 19 57 66 c1 9f be 0d dc 10 y.U...[.Wf...... 00b0 23 29 f9 a7 03 04 1b b3 a9 3e ac b2 5e ba 9c f4 #).......>..^... 00c0 24 be e3 b6 ed 11 88 d0 4b 49 67 f9 45 41 b7 b8 $.......KIg.EA.. 00d0 58 88 17 b4 43 d8 06 78 a6 e3 f6 88 ec e6 39 58 X...C..x......9X 00e0 46 74 19 57 af f1 bd f5 af 57 44 56 51 04 ff 90 Ft.W.....WDVQ... 00f0 7d df 71 ed 68 d2 97 42 9d 72 b0 01 9a 36 3a b9 }.q.h..B.r...6:. 0100 82 25 b7 ae cc fd 0f 94 72 a5 37 1c 09 87 35 90 .%......r.7...5. 0110 64 a4 5a ac 28 42 8a ee 96 79 6e 3a e8 d8 20 8d d.Z.(B...yn:.. . 0120 cb e7 34 43 e6 45 64 d3 bd 6d d0 cf c3 90 ad 17 ..4C.Ed..m...... 0130 45 b0 c2 f3 d9 db 65 b0 6a 9d 0f c6 94 6e e8 f0 E.....e.j....n.. 0140 19 0f 32 52 9a 1f 3b 70 11 02 d4 be e7 19 d1 85 ..2R..;p........ 0150 d4 e7 d3 ea f3 e4 44 0e 7b 9e 14 a2 73 72 a1 b0 ......D.{...sr.. 0160 42 b5 1f ff 35 c1 13 79 be cf 76 0d dd 65 f1 f0 B...5..y..v..e.. 0170 44 b7 1c 30 00 4d c1 f5 a5 15 bc fd 86 5f e5 de D..0.M......._.. 0180 db 58 cd 3a bc 11 fa ce 8d 59 fd 38 88 da 0d 8c .X.:.....Y.8.... 0190 eb 97 96 72 93 e3 61 fa 2b 1c a8 b3 5c c8 91 24 ...r..a.+...\..$ 01a0 48 2a 89 d9 6c 59 94 b5 42 81 d1 57 97 36 02 6a H*..lY..B..W.6.j 01b0 c6 b3 16 3e 04 b8 63 a4 8b 9b ce 97 7e 08 8f 8c ...>..c.....~... 01c0 4e 4b 46 97 0c b5 e0 eb 82 7d 93 b0 ed 78 3d 27 NKF......}...x=' 01d0 5d 87 9d 15 ef 77 6d 82 c7 c8 a9 5c f5 ad a7 1e ]....wm....\.... 01e0 9d a1 f9 35 b8 a0 2a eb 76 07 74 48 2f 48 e7 aa ...5..*.v.tH/H.. 01f0 95 f1 a9 bb c8 74 44 ab e0 82 f4 26 14 d2 a5 6a .....tD....&...j 0200 1c 11 97 3b 98 c4 60 4a 21 de aa 18 97 42 a6 3c ...;..`J!....B.< 0210 b3 3a c0 82 52 a7 72 53 15 7c 8f 21 f8 e1 e6 1d .:..R.rS.|.!.... 0220 58 9d e1 29 e5 f7 ca 38 45 63 5a 75 02 8b f4 27 X..)...8EcZu...' 0230 ab 16 b0 4f f9 42 d0 92 4d ea 09 26 f7 45 96 d0 ...O.B..M..&.E.. 0240 96 51 71 bb fb f8 9b 42 e3 db 50 94 2e b4 c4 49 .Qq....B..P....I 0250 b4 15 b4 05 71 03 bf 8e 16 18 65 f3 73 de 9b da ....q.....e.s... 0260 66 2a 73 a3 87 a1 ed 17 8e 0c a9 81 1a 92 c3 5b f*s............[ 0270 ae a5 77 83 e5 e4 01 19 4b f4 2e 0d d6 fb f4 7b ..w.....K......{ 0280 54 6a 11 b8 d0 e0 de 43 1f 79 14 9b 2b 73 11 c5 Tj.....C.y..+s.. 0290 2b 21 36 50 75 2b a2 40 dc 97 a5 10 53 95 dd 5c [email protected]..\ 02a0 c6 ab da 66 f7 e4 ca 71 b6 71 e3 58 8d eb 16 5f ...f...q.q.X..._ 02b0 26 7d ca 41 f9 00 eb 36 d7 61 97 67 6a 38 91 12 &}.A...6.a.gj8.. 02c0 15 7d 0c 14 ae d0 ef 72 4c 75 99 d8 9e c2 7e 3e .}.....rLu....~> 02d0 5d ec 64 d7 12 1c f4 b5 e6 15 7c 17 ee 16 fe b6 ].d.......|..... 02e0 48 45 c9 ba 34 8b 8e 19 ef 79 68 20 80 0e ff c6 HE..4....yh .... 02f0 a5 31 e0 56 df 75 38 b0 a9 28 d3 fc 94 bc 5a 5a .1.V.u8..(....ZZ 0300 cd 0e d4 46 92 3d 2e 4b af a1 92 a8 f0 16 2d e0 ...F.=.K......-. 0310 ca d1 04 1c 43 b9 e8 63 b1 9f 6c e2 1a 45 c3 c0 ....C..c..l..E.. 0320 54 bd cf 48 1f d8 04 ee 67 9e 9d a7 ae 14 ad f5 T..H....g....... 0330 a9 3b 69 dc 63 f3 8e 3a a7 4b dd d6 e1 7a ad 19 .;i.c..:.K...z.. 0340 f0 ee cd 86 4c da ba c8 16 82 a9 db ec ff 73 a3 ....L.........s. 0350 f3 af db 10 46 32 20 aa ef f9 01 ba 95 fa c2 db ....F2 ......... 0360 71 fe ec 32 fe e6 ba c8 c7 00 a2 e4 aa 7c 3d 8e q..2.........|=. 0370 f5 96 76 43 b4 78 e3 1d 01 f7 85 4d 8a 8a 09 f3 ..vC.x.....M.... 0380 52 f1 aa 18 ca 85 67 6e a1 9c 70 c4 99 bb dc e4 R.....gn..p..... 0390 62 62 79 eb 7b d5 cb 69 f6 f7 44 6d 39 0f 12 53 bby.{..i..Dm9..S 03a0 c9 09 c4 34 ba 99 49 14 24 db 60 f6 0c 3b 92 bd ...4..I.$.`..;.. 03b0 24 9b 32 e4 82 0b 6f fa f1 2d 75 d4 aa 1f 7a b8 $.2...o..-u...z. 03c0 cf 94 88 fd b3 4d 18 3d d7 8b 71 b4 00 fa 99 62 .....M.=..q....b 03d0 ae 72 db 7a 92 d7 20 c8 9f 5e 31 5a d0 a4 50 d2 .r.z.. ..^1Z..P. 03e0 36 a0 7a 9a 2a ee c1 97 31 ff 2d 7d 86 74 88 3f 6.z.*...1.-}.t.? 03f0 5a f6 42 11 55 c5 5d ff 52 fd f9 32 01 1d 91 d5 Z.B.U.].R..2.... 0400 e2 ef 5a 55 b3 ac f3 5d 42 9b 4f 01 4d 37 b6 38 ..ZU...]B.O.M7.8 0410 2e e5 3f a0 01 a7 a7 a1 1c e1 d1 1d d6 27 dd 41 ..?..........'.A 0420 8b 45 8f 02 66 6d 41 c7 5c 38 e8 5d 11 b2 7d 67 .E..fmA.\8.]..}g 0430 c6 c9 aa 36 e5 ac b3 33 64 ac 49 57 f8 51 cb d4 ...6...3d.IW.Q.. 0440 9d a9 c9 e2 e2 59 49 47 cb 4f 3b 1a 00 03 2e f9 .....YIG.O;..... 0450 67 9e 24 55 22 52 60 bd b1 6e 1e 1c 2d 16 f9 86 g.$U"R`..n..-... 0460 f6 c2 40 9e 1a c0 18 8f 27 83 8e e1 34 31 69 36 ..@.....'...41i6 0470 e7 ca 25 be 8c 45 1a 23 e4 a8 79 49 af 3d d8 ba ..%..E.#..yI.=.. 0480 fe 15 e2 5b cc 24 bb 09 f8 b8 28 0b de 4b 26 15 ...[.$....(..K&. 0490 ee 2c ef 91 b4 ca da 78 63 d1 9a 28 11 6e cc 54 .,.....xc..(.n.T 04a0 b4 4c 73 60 0e 22 b4 92 74 90 1f d6 fc 18 2e f1 .Ls`."..t....... 04b0 4e 06 7f c1 93 68 6c 26 83 b7 86 51 74 68 ee 01 N....hl&...Qth.. 04c0 0d 06 4d 2b da 2f bb 64 57 42 c0 72 f4 b9 0d 7a ..M+./.dWB.r...z 04d0 09 ec 39 fb fc eb 86 15 ac ae 7d d2 31 4f 86 8c ..9.......}.1O.. 04e0 aa f2 46 2d 34 e9 c6 9e 55 fd ad 8d d8 ec be 5d ..F-4...U......] 04f0 76 95 48 ba 86 10 1f 71 0d e8 a0 a9 ac a7 29 dd v.H....q......). 0500 09 32 4e 19 89 7c 57 cd ef 83 20 f8 76 84 7b 17 .2N..|W... .v.{. 0510 ff be 5e cc 9a f0 9c 13 01 1a c3 e7 06 b2 41 b8 ..^...........A. 0520 c6 d2 40 18 f0 e8 e1 f1 c8 24 24 79 68 8e 71 a6 ..@......$$yh.q. 0530 31 f3 2c 6b 9a 50 29 d7 12 29 7c 1f 61 b9 00 8f 1.,k.P)..)|.a... 0540 26 74 67 22 fb 47 6a a3 8d 59 8c 16 25 2c f5 90 &tg".Gj..Y..%,.. 0550 8a a1 91 35 43 b9 23 3e 20 7f d0 5f ce ce ae 9e ...5C.#> .._.... 0560 3d 72 1c 76 e0 dc 4f d4 3d 55 2a 35 41 be a4 c9 =r.v..O.=U*5A... 0570 35 77 35 7b 4c 3f 3c 84 b6 5c 74 52 90 f0 8f 04 5w5{L?<..\tR.... 0580 f7 5c ff 83 20 a8 74 53 fb 54 21 5f 0a 7b a4 a0 .\.. .tS.T!_.{.. 0590 ad fa 30 fc 95 17 a7 f4 da ad f6 8c 0b fc 36 35 ..0...........65 05a0 e1 7d ca 69 6a 28 c4 fb .}.ij(.. No. Time Source Destination Protocol Length Info 3920 52.923135 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=133484 Ack=2295 Win=1002 Len=1448 TSval=548479 TSecr=728012 Frame 3920: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 133484, Ack: 2295, Len: 1448 Data (1448 bytes) 0000 ee dc 1c ed 92 a4 9b a2 2a ec 22 ce 61 a0 1c 4b ........*.".a..K 0010 22 3b b7 93 cb b0 c8 fe 41 7c 64 4d e5 2c 1f 26 ";......A|dM.,.& 0020 82 99 6c 2f 00 91 68 4a fc a1 c7 0d a1 19 fe e9 ..l/..hJ........ 0030 f7 c7 57 aa 94 10 61 98 10 1a 1d 19 3d 28 8b e8 ..W...a.....=(.. 0040 ac 39 0d 7e aa 12 2f be 1d 6c c5 1f 73 7d 16 09 .9.~../..l..s}.. 0050 8a 83 89 4d 44 61 fa d3 c1 cb cd dd 7d 77 92 42 ...MDa......}w.B 0060 63 e8 83 b5 c4 09 e2 d9 08 d3 10 90 f9 c6 11 46 c..............F 0070 df 61 18 00 02 c4 08 c1 56 94 18 d4 0f 19 67 ae .a......V.....g. 0080 66 67 f4 c0 b3 2e 72 91 bd 59 97 f4 23 08 46 fc fg....r..Y..#.F. 0090 75 18 3c af 2a 4b 27 8b 0b d0 88 66 e0 dd ce 71 u.<.*K'....f...q 00a0 1f b5 b5 a3 39 d8 c9 60 54 d1 8e 16 d1 b3 4a 84 ....9..`T.....J. 00b0 c3 50 99 bf ca 91 28 d6 74 bb 75 47 f5 c9 35 58 .P....(.t.uG..5X 00c0 41 85 42 41 94 4e 5a f4 79 69 e3 89 d2 c2 b2 f5 A.BA.NZ.yi...... 00d0 64 60 30 5a a6 a3 f3 61 7e 5c 69 9c 49 60 22 47 d`0Z...a~\i.I`"G 00e0 f3 e0 ca 59 a5 2c 23 b8 f0 ae 78 69 45 ec 34 71 ...Y.,#...xiE.4q 00f0 7c 38 82 c4 67 d2 86 99 c5 d4 97 25 c8 9a 4f 84 |8..g......%..O. 0100 6c 7f 1d ac 3e 0e e6 35 6d 56 47 c3 7e 8c a6 58 l...>..5mVG.~..X 0110 db b0 9a a0 82 2c 61 dc f8 11 ae 3c d8 09 ad 9a .....,a....<.... 0120 2e 52 59 8e ab b8 29 d0 79 d9 94 4d 7e a8 a7 69 .RY...).y..M~..i 0130 80 3d 3f 50 2e cc fb 31 9b 8b ea a3 c6 2e 90 7e .=?P...1.......~ 0140 e1 c5 56 60 b3 d7 ad 93 b6 3f 2c 76 48 68 a7 ea ..V`.....?,vHh.. 0150 09 d9 08 fb de 58 4b 95 48 30 5e ac 60 86 61 d8 .....XK.H0^.`.a. 0160 00 cc 68 36 82 81 91 8d 11 b0 0d fc 69 f6 b1 98 ..h6........i... 0170 84 61 cc b7 88 31 f7 6a 44 35 17 b1 3c 85 4a 25 .a...1.jD5..<.J% 0180 1f d4 57 84 a8 35 79 4d 46 0d 82 06 a8 a4 a1 e8 ..W..5yMF....... 0190 a0 c9 19 e5 64 ee 06 f7 36 ed 2a c5 e0 cc d4 0c ....d...6.*..... 01a0 01 b1 94 a0 2d 1b 9a 0c b2 81 a8 90 a9 f8 5e fd ....-.........^. 01b0 8a 50 a9 48 05 16 68 ea aa 50 66 2e fc 65 63 9f .P.H..h..Pf..ec. 01c0 30 f4 c9 df fa 6a 88 1c a3 5e 7d 28 1e 54 17 2b 0....j...^}(.T.+ 01d0 20 21 bf 3c f5 26 4b 25 69 f7 2b 27 ef 77 a8 52 !.<.&K%i.+'.w.R 01e0 6c 2f 18 4f c4 b6 b1 1b 8d e8 26 cd c3 2b 29 f9 l/.O......&..+). 01f0 80 48 01 12 d7 54 79 c0 e0 e1 ce 9c 0c 6e b0 da .H...Ty......n.. 0200 87 15 e0 35 9c 7d 36 f9 4d 44 4f f0 c2 9a 49 7b ...5.}6.MDO...I{ 0210 eb 02 b1 5b 9a 4b 9e 42 e2 2e 1c c7 12 7e 70 59 ...[.K.B.....~pY 0220 a7 c6 32 02 ae 72 11 b5 8a 54 15 fd 17 4e 80 1b ..2..r...T...N.. 0230 39 75 68 18 8c 4f 8c ab 6c 80 8e 7e 59 90 32 ae 9uh..O..l..~Y.2. 0240 50 63 1b ba 75 5b a5 98 82 4b 19 12 67 31 59 fc Pc..u[...K..g1Y. 0250 23 d2 b6 16 a6 17 59 52 e8 0c d6 84 43 3c bd d7 #.....YR....C<.. 0260 43 f5 a7 c4 0f c1 5d cd 07 56 a3 89 ce 85 41 f2 C.....]..V....A. 0270 1e 80 ba c5 a5 bf 2a bb 96 cd b8 63 0f d3 87 f3 ......*....c.... 0280 aa 68 70 23 6b c3 31 70 f9 4b e8 4a 59 8c a4 3c .hp#k.1p.K.JY..< 0290 b8 00 f6 5f 7b bc d9 45 08 32 29 17 9f 0a df 33 ..._{..E.2)....3 02a0 5d 24 2e 7c 42 50 32 5e 5a 05 b8 6b bc 7e f8 48 ]$.|BP2^Z..k.~.H 02b0 b0 37 60 d6 7b 07 9f a8 42 02 f8 6e d4 00 c9 06 .7`.{...B..n.... 02c0 15 b2 4a 2c c3 d4 18 91 55 04 14 e5 fa 50 c6 ad ..J,....U....P.. 02d0 33 ec c9 e3 e4 40 fb 7f 69 c4 7d fb 76 39 a7 b4 [email protected].}.v9.. 02e0 7a 47 a0 cc 86 95 ba 65 11 1a 7a a0 59 f7 e8 5a zG.....e..z.Y..Z 02f0 03 e7 2c e4 a8 03 8d e6 09 48 b0 77 9f c3 f6 d5 ..,......H.w.... 0300 db ac 55 78 b0 4f 8d 19 f1 63 43 28 c3 0b 7b 23 ..Ux.O...cC(..{# 0310 e6 2f c0 8e e2 b7 d6 0d ee dc 3a 6a 56 51 24 c3 ./........:jVQ$. 0320 ff ce 23 27 03 e6 b9 64 b4 eb b1 11 c0 f7 61 0b ..#'...d......a. 0330 0b a9 a1 e7 ea cc 9e 61 73 22 33 3e b4 ab c5 ee .......as"3>.... 0340 71 1f c4 de a1 96 88 1a b3 35 5a 0a 15 1b f5 28 q........5Z....( 0350 d9 00 66 b8 15 4e de 51 40 3b 49 cb 99 25 38 b8 ..f..N.Q@;I..%8. 0360 d6 34 f3 94 19 bc 36 cd 11 50 e3 81 40 91 98 f4 .4....6..P..@... 0370 57 48 62 91 dc 54 99 24 52 43 3c e0 95 63 ad 5b WHb..T.$RC<..c.[ 0380 31 6a 2b d5 11 8d 5a b9 70 bf 3a 8d 58 ca f0 9b 1j+...Z.p.:.X... 0390 c8 83 3a 04 0c 7b 76 21 4f 66 40 d0 ce 38 44 8e ..:..{[email protected]. 03a0 a1 8b 41 e3 5f 87 94 57 95 30 29 f5 f2 d1 1a 1b ..A._..W.0)..... 03b0 97 8c 7c 47 fc fc ef 04 ca 1e 6e 88 98 9d c6 4f ..|G......n....O 03c0 51 4f 47 47 fa a5 5a a0 46 8e 30 5e 05 c2 49 e6 QOGG..Z.F.0^..I. 03d0 87 b7 c4 55 7a 40 04 07 0e 5a 38 8e 55 63 ca 06 ...Uz@xxxxxxxx.. 03e0 e7 8e df 55 2d 31 94 2a 31 ad 0a 5e 96 58 40 aa ...U-1.*1..^.X@. 03f0 68 85 18 f7 ee d4 b0 3d 5a 3f 25 d7 fe 16 fc 67 h......=Z?%....g 0400 02 cf f2 c0 7b 51 a9 70 22 66 3f f2 7a a1 22 53 ....{Q.p"f?.z."S 0410 b2 e3 75 a2 cc 82 2c 77 d7 a9 13 6a 39 57 a3 91 ..u...,w...j9W.. 0420 ae 01 7c d8 9d af a1 b9 35 4d 30 8d 05 76 67 da ..|.....5M0..vg. 0430 cd 79 73 30 0b 33 63 a3 77 1e bb 05 53 3c 53 06 .ys0.3c.w...S<S. 0440 e4 ec b9 9c be d6 6b 9f 31 90 e8 91 d9 49 91 fb ......k.1....I.. 0450 b9 6a 71 2a e9 bc 4f 72 44 ed 19 07 78 c7 28 1f .jq*..OrD...x.(. 0460 9e 42 42 a3 db 5f 62 2e 57 82 32 8a 20 73 eb 8b .BB.._b.W.2. s.. 0470 84 ed 72 82 a5 6c 46 d8 3e 9b 93 d7 5b be 32 8a ..r..lF.>...[.2. 0480 14 ca 8d cc 9e f5 4c de c0 f3 f5 d8 05 fa 6e ce ......L.......n. 0490 32 87 ac 02 4a 18 28 e7 38 28 51 e5 d0 9d 78 48 2...J.(.8(Q...xH 04a0 66 bc 58 0c ad 58 9d 80 45 08 54 30 92 15 0e cb f.X..X..E.T0.... 04b0 bc 0e d6 c5 b2 d8 ca 92 13 5a 86 84 81 4e da 3a .........Z...N.: 04c0 ef 20 2e 1d 7c cc bb 5b d9 70 89 df 0a fb 7b 1e . ..|..[.p....{. 04d0 ff fb 89 26 02 8c 2a 74 e1 60 c6 cb 76 8f 57 fc ...&..*t.`..v.W. 04e0 e9 d4 c4 ff 11 54 bf bc 57 87 f4 4c 5a 42 24 63 .....T..W..LZB$c 04f0 3f cf be 51 c4 d3 f5 88 56 cc 2d f4 40 28 f0 ae ?..Q....V.-.@(.. 0500 41 23 d3 d2 bd 2e e5 1a a5 33 2b 47 d7 af b7 08 A#.......3+G.... 0510 4a ea 58 67 5f 2e 3a 9c 8e c5 41 50 23 08 48 7b J.Xg_.:...AP#.H{ 0520 ec a6 b4 ca ee ff bb 7c 7e 0e 69 ac 4a 64 1a 7a .......|~.i.Jd.z 0530 8f b7 dd 6f b0 c8 91 6c d2 0f 72 08 fa d6 10 03 ...o...l..r..... 0540 ef f4 99 52 5c 54 59 a6 22 8a ac d0 c6 bf 4d b3 ...R\TY.".....M. 0550 26 62 a4 f4 4c d1 98 74 5a cd 3f 2a 71 e1 0c 5a &b..L..tZ.?*q..Z 0560 f3 74 30 42 7b aa 8e bf d0 07 28 33 c6 0e 6c 01 .t0B{.....(3..l. 0570 dc 0e db ff 77 27 15 da ba df 30 d6 91 9c fe 5a ....w'....0....Z 0580 a1 a5 1c cf f1 9d 2b f9 13 14 06 4e 0b 27 fc 1b ......+....N.'.. 0590 55 dd 4d 1f 0f fc b5 97 22 82 1f 6b cc 43 ca 23 U.M....."..k.C.# 05a0 c7 b2 c1 a5 55 f5 fe 9b ....U... No. Time Source Destination Protocol Length Info 3921 52.923222 192.168.10.1 192.168.10.203 TCP 1327 34433 > cds [PSH, ACK] Seq=134932 Ack=2295 Win=1002 Len=1261 TSval=548479 TSecr=728012 Frame 3921: 1327 bytes on wire (10616 bits), 1327 bytes captured (10616 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 134932, Ack: 2295, Len: 1261 Data (1261 bytes) 0000 25 4d df 78 00 7b 97 17 14 62 6c f8 82 12 cb 4e %M.x.{...bl....N 0010 67 b1 93 36 b7 0d e1 7b be 08 24 f1 55 db 10 4f g..6...{..$.U..O 0020 f9 52 f1 e2 ae ac 2f 1a 9e 2a 9c b3 db 75 f2 45 .R..../..*...u.E 0030 5e 09 e4 27 cf 58 54 c4 54 45 ed fb ae d1 9b b6 ^..'.XT.TE...... 0040 df 5d 69 1e 71 23 a9 8c ee 35 97 d0 0a 4c 75 9f .]i.q#...5...Lu. 0050 d2 ae b4 f1 97 1d f1 a2 24 f0 23 37 41 1e dd e8 ........$.#7A... 0060 73 c3 71 ca c3 8f 96 af aa 8e f7 d5 f0 7b 97 f3 s.q..........{.. 0070 4a 95 85 66 db 37 49 f4 f2 36 59 eb 5e a8 62 4c J..f.7I..6Y.^.bL 0080 29 5f 38 78 07 01 fa 98 db 18 12 2b 2f 21 f5 78 )_8x.......+/!.x 0090 b1 2c 21 92 cb 97 6c ef 5b 97 14 45 29 e2 c8 ef .,!...l.[..E)... 00a0 ab 06 d9 64 c1 9d 71 c2 e4 5c e0 41 bc 9f a9 be ...d..q..\.A.... 00b0 80 a8 6d ab 2f 09 53 9e c9 04 a8 ac b6 99 12 9d ..m./.S......... 00c0 4e da b8 a5 b0 6e ec a5 42 45 fc 56 d6 4d 32 08 N....n..BE.V.M2. 00d0 7d 7d 84 b3 71 7d 6c da 95 f0 0f 22 09 ec 0e 26 }}..q}l...."...& 00e0 2c 06 ab ff e9 e5 bc 53 69 0c 0c f0 83 34 3c 86 ,......Si....4<. 00f0 fe 48 b2 a8 8b 39 45 8a e5 d1 d3 35 35 a5 21 b9 .H...9E....55.!. 0100 a0 3c 7f 51 a6 bd dc ca a9 05 2a 10 62 29 c3 b2 .<.Q......*.b).. 0110 a3 20 54 4c 1c 9b 1a 24 fd 0e ee f9 79 e4 e7 62 . TL...$....y..b 0120 4d b4 0d c3 ad 91 0d 49 5c b8 16 7b f4 fd 6e 9e M......I\..{..n. 0130 a1 27 83 ac ca af 4e b6 d4 0f f8 ef 88 f5 84 63 .'....N........c 0140 13 f5 fc 7b ac fb f0 de 4e ee 36 11 5f ca f8 71 ...{....N.6._..q 0150 e8 89 a0 d3 f1 83 eb bc ee 2e 4f 3c 27 cb 83 86 ..........O<'... 0160 f9 bc 09 7f a3 3a d5 04 e4 80 41 c7 a9 fa c8 5f .....:....A...._ 0170 7b 94 1b 20 48 7f fe be e4 85 d0 8b a7 28 95 71 {.. H........(.q 0180 99 ea 23 86 b8 b7 91 a9 2c b7 e9 23 67 7d 4b c1 ..#.....,..#g}K. 0190 f4 39 da 6b e0 a3 f8 ce 13 e1 81 81 06 4f f8 1a .9.k.........O.. 01a0 75 de fc 58 87 88 59 e3 a7 df 99 4e 9d c4 c0 1d u..X..Y....N.... 01b0 6d e9 c7 45 07 3c 1b dd 89 da 68 2a dc 7f 15 5e m..E.<....h*...^ 01c0 eb 17 8e 65 f2 a4 2f f0 0b 8d 34 96 49 d9 50 c8 ...e../...4.I.P. 01d0 3a 73 c8 6f a0 8c c4 72 da 0d f9 5a 0e 80 60 e3 :s.o...r...Z..`. 01e0 bf ff 9f 34 2d a9 07 ff a7 f7 e0 fb 70 5e 14 6e ...4-.......p^.n 01f0 72 4b 99 e5 b2 56 3c c7 17 6e 84 3c 3c 82 6e c4 rK...V<..n.<<.n. 0200 3c f9 9b 0e e2 8d 38 ee d2 ed 53 12 25 73 a9 9c <.....8...S.%s.. 0210 fc a2 51 8a cb 06 0f e0 12 b6 47 cd 07 2e 6c a7 ..Q.......G...l. 0220 ad 0b 5a 1c 3d 6b df 63 77 51 f5 3c d2 bb 75 f0 ..Z.=k.cwQ.<..u. 0230 27 3c 22 e3 f3 10 41 2e fc e0 49 98 40 ad 68 a5 '<"[email protected]. 0240 d9 e6 2f ff ed 6c 0a 53 ba 46 fd 50 41 ed 01 b6 ../..l.S.F.PA... 0250 ac 40 4d a2 ba 16 76 d6 af 9d 37 c4 19 c1 92 cf [email protected]..... 0260 5e 17 6a aa 3c 03 cc ea 83 8f 17 6c b4 d5 d0 3f ^.j.<......l...? 0270 2c ad 16 56 0d 93 b4 d5 35 dd fc 4c 3b 2a 22 5b ,..V....5..L;*"[ 0280 99 e9 fd 34 81 c1 9c ce 8c 7a 46 0c bc 72 f7 a8 ...4.....zF..r.. 0290 2a 98 99 a8 c3 63 0b 73 e7 6f 20 eb 72 50 a6 65 *....c.s.o .rP.e 02a0 9b 7c 43 fb db e4 23 8f 83 e4 0d 2a 04 c1 cc 28 .|C...#....*...( 02b0 d2 c3 3d 97 9a 8d c1 1a 11 0e 2f 22 34 d5 e1 db ..=......./"4... 02c0 9f 8f 06 2d fe 76 c1 ae 2e 74 a7 ee b4 99 13 0d ...-.v...t...... 02d0 d8 1f 10 4b 74 cb 28 a0 01 39 2e a9 91 bd 55 97 ...Kt.(..9....U. 02e0 cc bb 1c 72 d7 f7 1e d4 01 7f d0 7c 33 40 b0 6d ...r.......|[email protected] 02f0 29 0e b6 c2 58 e4 aa f8 d1 71 1a 45 f0 7f 20 55 )...X....q.E.. U 0300 be 85 e9 4b 4d 57 de df ba 18 75 96 6e 4c 1f b4 ...KMW....u.nL.. 0310 c4 f6 da e0 a3 ed 58 bc cc 57 c4 04 bc b3 ae c3 ......X..W...... 0320 4f 5a 85 ba dc 5b e6 43 d4 ec 34 4a cd f2 dc b9 OZ...[.C..4J.... 0330 f2 1c 53 8f 86 9f 12 3f f0 ce f4 a9 f9 21 c9 09 ..S....?.....!.. 0340 6f 09 a0 f9 f0 69 51 41 ef 46 1b e5 12 b9 95 a7 o....iQA.F...... 0350 ea c9 8e 15 a6 c2 2e 59 8e 09 58 d9 51 08 21 63 .......Y..X.Q.!c 0360 61 20 06 87 a4 9f 29 21 75 98 2a a3 a5 de 8d 26 a ....)!u.*....& 0370 2d 5f 6b 47 3e 37 bd 80 89 dd 04 b5 1a 99 26 a9 -_kG>7........&. 0380 04 b7 81 ed d0 52 8b 65 99 64 61 5c 54 dc 61 18 .....R.e.da\T.a. 0390 48 94 76 5b 59 d1 62 62 12 fa f9 23 4d ac 55 1a H.v[Y.bb...#M.U. 03a0 5d d8 c2 5f 93 50 16 ef 79 d6 ec f8 c6 08 a3 84 ].._.P..y....... 03b0 e4 f0 e7 4c a8 b5 08 31 69 bc c8 aa a9 1a 26 39 ...L...1i.....&9 03c0 fb 87 ad 28 9a 71 97 9b e1 2d 35 22 01 8a f0 15 ...(.q...-5".... 03d0 aa ca d2 63 a4 ce 11 35 c3 49 d8 29 82 fd 33 e8 ...c...5.I.)..3. 03e0 86 fd 4d 8a d9 a8 bb 8f 06 a7 07 36 d8 3e 66 ed ..M........6.>f. 03f0 33 96 40 d7 e8 df 41 96 7b 8e 27 5d 5e 6f 25 19 [email protected].{.']^o%. 0400 57 2f a6 b0 b8 d2 1c c5 32 a9 7d d3 46 f7 d5 3c W/......2.}.F..< 0410 55 52 18 1b c4 74 cf 3d e1 cc d6 3f 0e 5c c2 83 UR...t.=...?.\.. 0420 1b 7c 9f 4a 90 73 0b 24 f3 4a 01 03 61 c2 f0 15 .|.J.s.$.J..a... 0430 7e 84 60 f4 96 d7 cb 66 41 e6 d8 78 41 93 67 a7 ~.`....fA..xA.g. 0440 f9 ac 18 8a 15 6a 28 20 28 20 c8 fd c3 3d 43 44 .....j( ( ...=CD 0450 c3 2d 33 2e 4b c5 29 04 4c ca 46 50 82 ed 89 41 .-3.K.).L.FP...A 0460 7d 6a ab 8c c1 66 c3 ee cf a6 e1 3a df b7 62 2e }j...f.....:..b. 0470 1e f3 6a e8 ea fd a5 f6 20 53 8a 64 18 89 6d 25 ..j..... S.d..m% 0480 20 e0 34 9d 30 6c e6 21 d4 25 66 f2 7c e5 6f 44 .4.0l.!.%f.|.oD 0490 70 30 b5 53 2f c7 3d f7 b2 ff 54 94 91 13 e0 9c p0.S/.=...T..... 04a0 7d 8f cd 50 fc cb 63 1e ff 53 9e d5 20 10 7a 3d }..P..c..S.. .z= 04b0 72 4d 6b 68 65 16 2f 0a 83 9e 48 db 87 86 ad 16 rMkhe./...H..... 04c0 2e e0 c9 2b d7 f2 ec f3 50 ac 10 15 c7 b7 5d d5 ...+....P.....]. 04d0 f5 3e 3e e9 00 15 3b f7 14 bd 01 73 c5 dd e3 38 .>>...;....s...8 04e0 2a 9f 9f 2c 33 fd a4 01 a9 47 05 2c 9a *..,3....G.,. No. Time Source Destination Protocol Length Info 3922 52.923296 192.168.10.1 192.168.10.245 Syslog 270 LOCAL1.INFO: Oct 3 19:45:10 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 71.5.105.194 7x.x.x.3 41408 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 3922: 270 bytes on wire (2160 bits), 270 bytes captured (2160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:10 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 71.5.105.194 7x.x.x.3 41408 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" No. Time Source Destination Protocol Length Info 3923 52.923346 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2295 Ack=134932 Win=65535 Len=0 TSval=728012 TSecr=548479 Frame 3923: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2295, Ack: 134932, Len: 0 No. Time Source Destination Protocol Length Info 3924 52.957841 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=2295 Ack=136193 Win=64274 Len=74 TSval=728012 TSecr=548479 Frame 3924: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2295, Ack: 136193, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 d9 de 8f 74 f8 6f 9c 6c 81 db 99 .... ...t.o.l... 0010 83 fd 7a 25 8b 3e b7 3b 36 8c 8a 23 21 90 e9 d9 ..z%.>.;6..#!... 0020 dc 66 67 0d 7c 17 03 01 00 20 55 89 01 4e 83 d3 .fg.|.... U..N.. 0030 d7 0c 4c 9e 52 02 b8 5b 13 7d 84 8b a2 f7 65 cf ..L.R..[.}....e. 0040 1b d6 df 86 16 f3 97 99 c6 31 .........1 No. Time Source Destination Protocol Length Info 3925 52.957941 192.168.10.1 192.168.10.203 TCP 903 34433 > cds [PSH, ACK] Seq=136193 Ack=2369 Win=1002 Len=837 TSval=548488 TSecr=728012 Frame 3925: 903 bytes on wire (7224 bits), 903 bytes captured (7224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 136193, Ack: 2369, Len: 837 Data (837 bytes) 0000 17 03 01 03 40 c8 d8 44 37 99 68 1f d2 8c 30 3b [email protected]; 0010 ab a8 fd de 05 a8 0d fe d4 dd ad 5f 9e 34 eb 63 ..........._.4.c 0020 95 a3 bf 9b c2 6d f0 af e5 6d 48 7b dd 76 18 87 .....m...mH{.v.. 0030 8a cf eb d7 7e 93 82 f7 f5 f4 20 64 2d 2d 32 14 ....~..... d--2. 0040 ed 59 c3 6c f0 c8 1b bc e0 b2 cc 86 c6 26 ee 0b .Y.l.........&.. 0050 0a ac 69 ed dd ef ff 81 44 b8 8c c8 2f 81 9b 5e ..i.....D.../..^ 0060 c8 9c 8a b6 e1 cf 8a 26 d6 4f f7 9d 8d e3 62 94 .......&.O....b. 0070 6f 55 67 e9 b5 ea 7f c4 22 96 e0 e2 88 49 2f 42 oUg....."....I/B 0080 fe 7f 89 49 13 ff 7a bf 6f fd 1b b2 5d 07 ac 30 ...I..z.o...]..0 0090 1a 01 f1 ef dd db 27 19 00 9d 17 c8 03 fa 0d d3 ......'......... 00a0 bc d9 86 b5 1e 1f 1d f3 78 6a 0e a6 6a ab 4a c1 ........xj..j.J. 00b0 ab 2a fb 57 ea f3 04 e2 43 f9 e1 90 9d 01 14 91 .*.W....C....... 00c0 00 02 8f 48 18 5d 2c 29 1a 63 f0 6f fa 42 83 27 ...H.],).c.o.B.' 00d0 8e 87 d3 35 5e a7 eb 7e 09 3b d1 99 86 4d 64 a5 ...5^..~.;...Md. 00e0 a7 34 35 a4 ed 14 f6 32 f3 d7 7d ae dc 08 64 14 .45....2..}...d. 00f0 78 fa 57 87 9d fc 73 80 72 11 ce 2e 01 96 77 a8 x.W...s.r.....w. 0100 d0 47 45 5c e7 fb 4d 7f 2a c9 77 c2 0c 1c 08 04 .GE\..M.*.w..... 0110 87 bd 6d 14 89 37 fc 25 a2 48 02 49 67 3a e8 67 ..m..7.%.H.Ig:.g 0120 11 d5 d8 43 1f 42 6b 8c 5c 1c 42 88 22 0d 13 77 ...C.Bk.\.B."..w 0130 07 64 69 77 05 19 73 b3 7e f1 18 5e 18 09 4e 51 .diw..s.~..^..NQ 0140 2e 90 b1 d4 44 7e db e9 6d 07 96 1a ae 94 39 ad ....D~..m.....9. 0150 e6 13 18 fc 6b 36 a6 1b 14 26 e9 92 13 3d 79 db ....k6...&...=y. 0160 fc 79 a9 79 1c 72 22 2a 6e 90 d0 24 c1 5d bf 4c .y.y.r"*n..$.].L 0170 64 38 6a 77 5d 6a 00 3c 74 e1 24 02 1c 07 6b c7 d8jw]j.<t.$...k. 0180 19 45 6b b1 2b 7f 81 09 84 bc 01 91 63 a5 60 a5 .Ek.+.......c.`. 0190 7f c8 0a a1 22 ef de c2 c6 b1 c2 f4 1f 22 a8 07 ...."........".. 01a0 88 a7 fe ee e6 cf 9f 39 ed d0 06 50 8d c8 64 84 .......9...P..d. 01b0 1a fa 94 c6 ae de 10 3a e6 8f 7f cc ab b0 32 55 .......:......2U 01c0 e2 7e 1e 06 3d 80 41 cf d5 eb db 3c 99 9c 83 c6 .~..=.A....<.... 01d0 b3 47 5b 3b 0a 53 10 79 e5 f4 53 74 b8 27 be d8 .G[;.S.y..St.'.. 01e0 ab e5 69 2e f0 85 a5 3d 65 1a 59 32 2e 3d d3 56 ..i....=e.Y2.=.V 01f0 97 52 96 9d 72 76 6f 77 fe 70 ac 6b 51 03 dd ee .R..rvow.p.kQ... 0200 8c b8 d8 94 55 25 f3 86 28 a7 d9 1c 33 09 ee 1f ....U%..(...3... 0210 90 22 99 ef 64 9c a7 71 98 03 ce 00 fe 1e 66 01 ."..d..q......f. 0220 c0 73 c5 71 7c d9 d7 50 93 da 81 4d 2d a3 86 dc .s.q|..P...M-... 0230 00 ad b8 84 a9 1c 52 21 8e df 7f 1e fb 94 a0 67 ......R!.......g 0240 f8 b2 e3 dc 2a 56 2f eb 0d 9f 9b a3 64 42 72 77 ....*V/.....dBrw 0250 ed 77 fb c4 61 ea 88 c8 5c f3 5c 5d 55 a1 fc 61 .w..a...\.\]U..a 0260 33 ed d2 64 c3 c2 b5 8e 21 3b 0d ef cc 04 79 0e 3..d....!;....y. 0270 cd 2d d5 b8 0f 51 3d 8b 58 b6 64 53 5a 56 5f 8a .-...Q=.X.dSZV_. 0280 ac 0d 53 13 a1 a5 63 57 0e 3d d5 03 59 de a5 94 ..S...cW.=..Y... 0290 db bb 9f ce cf e4 42 bb e9 d2 67 d3 ed 84 e3 e3 ......B...g..... 02a0 e4 1f 77 75 c5 1a bc 8b 10 6e e8 d5 e4 0f e0 44 ..wu.....n.....D 02b0 c8 ed 41 d0 b7 5b 95 f0 2a 3b 0c c5 3b d5 cb 91 ..A..[..*;..;... 02c0 c6 9f ad e1 3b 9d fa 59 54 c9 1a c4 92 b9 43 4e ....;..YT.....CN 02d0 ff 97 e0 24 66 e4 bf 1f 17 80 cd 55 c3 5e b3 49 ...$f......U.^.I 02e0 12 67 c3 e6 22 1a 48 da a7 97 79 9a 75 f1 c9 6c .g..".H...y.u..l 02f0 66 5d 8d db 3c a5 67 6f 6c f9 e2 89 62 8b 64 d9 f]..<.gol...b.d. 0300 0b bc 3a 1e 4c 36 c6 47 6c fe 38 e6 6f 8e 49 f0 ..:.L6.Gl.8.o.I. 0310 57 af 20 e3 78 c3 22 de 97 7d fa 05 5f 68 7a 16 W. .x."..}.._hz. 0320 d7 5f 7d d9 a2 87 31 03 f8 99 55 b3 11 e4 4a c6 ._}...1...U...J. 0330 0f fa 8d 0d 1b e8 c6 7f 29 e8 66 9c 3d a4 f0 01 ........).f.=... 0340 11 36 35 66 b2 .65f. No. Time Source Destination Protocol Length Info 3926 52.960705 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=2369 Ack=137030 Win=65535 Len=74 TSval=728012 TSecr=548488 Frame 3926: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2369, Ack: 137030, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 a5 ab 31 26 c6 c4 55 23 8d 2c ba .... ..1&..U#.,. 0010 19 c7 09 27 b0 a8 b1 bf 6a f1 e6 b8 44 69 29 ac ...'....j...Di). 0020 d8 47 1b a1 69 17 03 01 00 20 fb ef f8 88 2b 6e .G..i.... ....+n 0030 3e e0 7a 53 09 b8 bd cd 0a 3b b3 43 4c a7 a3 43 >.zS.....;.CL..C 0040 0b cc fe 70 76 83 71 78 b0 6f ...pv.qx.o No. Time Source Destination Protocol Length Info 3927 52.963969 192.168.10.246 65.32.1.65 DNS 87 Standard query PTR 51.207.110.216.in-addr.arpa Frame 3927: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 57761 (57761), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 3928 52.975430 71.5.105.194 192.168.10.207 SMTP 104 C: MAIL FROM: <mailive@xxxxxxxxxxxxxxxxxx> SIZE=436 Frame 3928: 104 bytes on wire (832 bits), 104 bytes captured (832 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 71.5.105.194 (71.5.105.194), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 41408 (41408), Dst Port: smtp (25), Seq: 31, Ack: 311, Len: 50 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3929 52.975767 192.168.10.207 71.5.105.194 SMTP 105 S: 250 2.1.0 [email protected] OK Frame 3929: 105 bytes on wire (840 bits), 105 bytes captured (840 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 71.5.105.194 (71.5.105.194) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 41408 (41408), Seq: 311, Ack: 81, Len: 51 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3930 52.975811 71.5.105.194 192.168.10.207 TCP 60 41408 > smtp [ACK] Seq=81 Ack=362 Win=93078 Len=0 Frame 3930: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 71.5.105.194 (71.5.105.194), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 41408 (41408), Dst Port: smtp (25), Seq: 81, Ack: 362, Len: 0 No. Time Source Destination Protocol Length Info 3931 52.997056 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=137030 Ack=2443 Win=1002 Len=0 TSval=548498 TSecr=728012 Frame 3931: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 137030, Ack: 2443, Len: 0 No. Time Source Destination Protocol Length Info 3932 53.005821 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=32763 Ack=2112 Win=64687 Len=0 Frame 3932: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2112, Len: 0 No. Time Source Destination Protocol Length Info 3933 53.029149 71.5.105.194 192.168.10.207 SMTP 90 C: RCPT TO: <mailive@xxxxxxxxxxxx> Frame 3933: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 71.5.105.194 (71.5.105.194), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 41408 (41408), Dst Port: smtp (25), Seq: 81, Ack: 362, Len: 36 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3934 53.029570 192.168.10.207 71.5.105.194 SMTP 90 S: 250 2.1.5 mailive@xxxxxxxxxxxx Frame 3934: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 71.5.105.194 (71.5.105.194) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 41408 (41408), Seq: 362, Ack: 117, Len: 36 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3935 53.029611 71.5.105.194 192.168.10.207 TCP 60 41408 > smtp [ACK] Seq=117 Ack=398 Win=93042 Len=0 Frame 3935: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 71.5.105.194 (71.5.105.194), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 41408 (41408), Dst Port: smtp (25), Seq: 117, Ack: 398, Len: 0 No. Time Source Destination Protocol Length Info 3936 53.033298 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2477725952, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3936: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3937 53.033317 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2477725952, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 3937: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3938 53.033332 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2477725952, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3938: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3939 53.033345 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2477725952, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 3939: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3940 53.054001 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 51904768, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3940: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3941 53.054016 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 51904768, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 3941: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3942 53.054028 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 51904768, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3942: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3943 53.054040 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 51904768, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 3943: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 3944 53.083274 71.5.105.194 192.168.10.207 SMTP 60 C: DATA Frame 3944: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 71.5.105.194 (71.5.105.194), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 41408 (41408), Dst Port: smtp (25), Seq: 117, Ack: 398, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3945 53.100791 65.32.1.65 192.168.10.246 DNS 130 Standard query response PTR 216-110-207-51.lsnetworks.net Frame 3945: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 57761 (57761) Domain Name System (response) No. Time Source Destination Protocol Length Info 3946 53.103634 192.168.10.207 71.5.105.194 SMTP 100 S: 354 Start mail input; end with <CRLF>.<CRLF> Frame 3946: 100 bytes on wire (800 bits), 100 bytes captured (800 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 71.5.105.194 (71.5.105.194) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 41408 (41408), Seq: 398, Ack: 123, Len: 46 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3947 53.103675 71.5.105.194 192.168.10.207 TCP 60 41408 > smtp [ACK] Seq=123 Ack=444 Win=92996 Len=0 Frame 3947: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 71.5.105.194 (71.5.105.194), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 41408 (41408), Dst Port: smtp (25), Seq: 123, Ack: 444, Len: 0 No. Time Source Destination Protocol Length Info 3948 53.144989 190.42.139.241 192.168.10.207 SMTP 60 C: QUIT Frame 3948: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23698 (23698), Dst Port: smtp (25), Seq: 60, Ack: 364, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3949 53.145028 192.168.10.207 190.42.139.241 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 3949: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23698 (23698), Seq: 364, Ack: 66, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3950 53.145074 190.42.139.241 192.168.10.207 TCP 60 23698 > smtp [ACK] Seq=66 Ack=433 Win=93008 Len=0 Frame 3950: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23698 (23698), Dst Port: smtp (25), Seq: 66, Ack: 433, Len: 0 No. Time Source Destination Protocol Length Info 3951 53.145103 192.168.10.207 190.42.139.241 TCP 60 smtp > 23698 [FIN, ACK] Seq=433 Ack=66 Win=65470 Len=0 Frame 3951: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23698 (23698), Seq: 433, Ack: 66, Len: 0 No. Time Source Destination Protocol Length Info 3952 53.145142 190.42.139.241 192.168.10.207 TCP 60 23698 > smtp [ACK] Seq=66 Ack=434 Win=93008 Len=0 Frame 3952: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23698 (23698), Dst Port: smtp (25), Seq: 66, Ack: 434, Len: 0 No. Time Source Destination Protocol Length Info 3953 53.157680 192.168.10.1 192.168.10.245 Syslog 324 LOCAL1.INFO: Oct 3 19:45:11 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 71.5.105.194 7x.x.x.3 41408 25 msg="ProxyStrip: SMTP Header" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" header="X-Mailive-ID: [FSMAILID:MTM2NXwxMzE3Njg1NDg1]" (SMTP-proxy-incoming-00) Frame 3953: 324 bytes on wire (2592 bits), 324 bytes captured (2592 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:11 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 71.5.105.194 7x.x.x.3 41408 25 msg="ProxyStrip: SMTP Header" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" h No. Time Source Destination Protocol Length Info 3954 53.166995 192.168.10.246 65.32.1.65 DNS 88 Standard query PTR 141.197.160.119.in-addr.arpa Frame 3954: 88 bytes on wire (704 bits), 88 bytes captured (704 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 50879 (50879), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 3955 53.193874 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 3955: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3956 53.210848 71.5.105.194 192.168.10.207 IMF 448 from: mailive@xxxxxxxxxxxxxxxxxx, subject: Mailive! Test - ID:[FSMAILID:MTM2NXwxMzE3Njg1NDg1], (text/plain) Frame 3956: 448 bytes on wire (3584 bits), 448 bytes captured (3584 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 71.5.105.194 (71.5.105.194), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 41408 (41408), Dst Port: smtp (25), Seq: 123, Ack: 444, Len: 394 Simple Mail Transfer Protocol Internet Message Format No. Time Source Destination Protocol Length Info 3957 53.210957 192.168.10.1 192.168.10.245 Syslog 345 LOCAL1.INFO: Oct 3 19:45:11 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 71.5.105.194 7x.x.x.3 41408 25 msg="SMTP Request" proxy_act="SMTP-Incoming-Mail.1" rcvd_bytes="441" sent_bytes="394" sender="mailive@xxxxxxxxxxxxxxxxxx" recipients="mailive@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 3957: 345 bytes on wire (2760 bits), 345 bytes captured (2760 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:11 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 71.5.105.194 7x.x.x.3 41408 25 msg="SMTP Request" proxy_act="SMTP-Incoming-Mail.1" rcvd_bytes="441" sent_bytes="394 No. Time Source Destination Protocol Length Info 3958 53.237999 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 3958: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4369, Ack: 313807, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3959 53.238043 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=313807 Ack=4411 Win=46174 Len=0 Frame 3959: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 313807, Ack: 4411, Len: 0 No. Time Source Destination Protocol Length Info 3960 53.272220 192.168.10.207 71.5.105.194 SMTP 144 S: 250 2.6.0 <20111003234445.19601.29644@xxxxxxxxxxxxxxxxxxxxxxx> Queued mail for delivery Frame 3960: 144 bytes on wire (1152 bits), 144 bytes captured (1152 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 71.5.105.194 (71.5.105.194) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 41408 (41408), Seq: 444, Ack: 517, Len: 90 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3961 53.272272 71.5.105.194 192.168.10.207 TCP 60 41408 > smtp [ACK] Seq=517 Ack=534 Win=92906 Len=0 Frame 3961: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 71.5.105.194 (71.5.105.194), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 41408 (41408), Dst Port: smtp (25), Seq: 517, Ack: 534, Len: 0 No. Time Source Destination Protocol Length Info 3962 53.278682 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 3962: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2521, Ack: 146528, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3963 53.278714 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=146528 Ack=2563 Win=46090 Len=0 Frame 3963: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 146528, Ack: 2563, Len: 0 No. Time Source Destination Protocol Length Info 3964 53.315331 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 3964: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3965 53.319566 190.42.139.241 192.168.10.207 TCP 60 23698 > smtp [RST, ACK] Seq=66 Ack=434 Win=93008 Len=0 Frame 3965: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23698 (23698), Dst Port: smtp (25), Seq: 66, Ack: 434, Len: 0 No. Time Source Destination Protocol Length Info 3966 53.319646 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:45:11 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23698 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 3966: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:45:11 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23698 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 3967 53.327182 71.5.105.194 192.168.10.207 SMTP 66 C: QUIT | RSET Frame 3967: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 71.5.105.194 (71.5.105.194), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 41408 (41408), Dst Port: smtp (25), Seq: 517, Ack: 534, Len: 12 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3968 53.327275 192.168.10.207 71.5.105.194 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 3968: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 71.5.105.194 (71.5.105.194) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 41408 (41408), Seq: 534, Ack: 529, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 3969 53.327335 71.5.105.194 192.168.10.207 TCP 60 41408 > smtp [ACK] Seq=529 Ack=603 Win=92838 Len=0 Frame 3969: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 71.5.105.194 (71.5.105.194), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 41408 (41408), Dst Port: smtp (25), Seq: 529, Ack: 603, Len: 0 No. Time Source Destination Protocol Length Info 3970 53.327367 192.168.10.207 71.5.105.194 TCP 60 smtp > 41408 [FIN, ACK] Seq=603 Ack=529 Win=65007 Len=0 Frame 3970: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 71.5.105.194 (71.5.105.194) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 41408 (41408), Seq: 603, Ack: 529, Len: 0 No. Time Source Destination Protocol Length Info 3971 53.327406 71.5.105.194 192.168.10.207 TCP 60 41408 > smtp [ACK] Seq=529 Ack=604 Win=92838 Len=0 Frame 3971: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 71.5.105.194 (71.5.105.194), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 41408 (41408), Dst Port: smtp (25), Seq: 529, Ack: 604, Len: 0 No. Time Source Destination Protocol Length Info 3972 53.381290 71.5.105.194 192.168.10.207 TCP 60 41408 > smtp [FIN, ACK] Seq=529 Ack=604 Win=92838 Len=0 Frame 3972: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 71.5.105.194 (71.5.105.194), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 41408 (41408), Dst Port: smtp (25), Seq: 529, Ack: 604, Len: 0 No. Time Source Destination Protocol Length Info 3973 53.381324 192.168.10.207 71.5.105.194 TCP 60 smtp > 41408 [ACK] Seq=604 Ack=530 Win=65007 Len=0 Frame 3973: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 71.5.105.194 (71.5.105.194) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 41408 (41408), Seq: 604, Ack: 530, Len: 0 No. Time Source Destination Protocol Length Info 3974 53.381441 192.168.10.1 192.168.10.245 Syslog 201 LOCAL1.INFO: Oct 3 19:45:11 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 71.5.105.194 7x.x.x.3 41408 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 3974: 201 bytes on wire (1608 bits), 201 bytes captured (1608 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:45:11 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 71.5.105.194 7x.x.x.3 41408 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 3975 53.443526 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 3975: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3976 53.472980 Dell_39:5d:dd Broadcast ARP 60 Who has 192.168.10.206? Tell 192.168.10.207 Frame 3976: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3977 53.473011 Dell_39:5d:dd Broadcast ARP 60 Who has 192.168.10.206? Tell 192.168.10.207 Frame 3977: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3978 53.525072 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 3978: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3979 53.525102 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 3979: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 3980 53.566026 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 3980: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 3981 53.749492 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.87? Tell 192.168.10.226 Frame 3981: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3982 53.749529 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.87? Tell 192.168.10.226 Frame 3982: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3983 53.749548 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 3983: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3984 53.749559 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 3984: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3985 53.749572 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 3985: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3986 53.749582 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 3986: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3987 53.749594 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 3987: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3988 53.749604 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 3988: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3989 53.749643 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 3989: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3990 53.749696 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 3990: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3991 53.749708 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 3991: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3992 53.749719 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 3992: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3993 53.749745 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 3993: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3994 53.749786 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 3994: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3995 53.749797 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 3995: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3996 53.749807 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 3996: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 3997 53.749834 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 3997: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3998 53.749844 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 3998: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 3999 53.749854 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 3999: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4000 53.749864 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 4000: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4001 53.749875 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 4001: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4002 53.749885 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 4002: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4003 53.749896 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 4003: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4004 53.749906 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 4004: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4005 53.749916 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 4005: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4006 53.749935 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 4006: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4007 53.749946 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 4007: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4008 53.749957 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 4008: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4009 53.749968 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 4009: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4010 53.749979 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 4010: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4011 53.749990 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 4011: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4012 53.750000 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 4012: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4013 53.750010 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 4013: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4014 53.750021 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 4014: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4015 53.750031 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 4015: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4016 53.750047 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 4016: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4017 53.750060 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 4017: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4018 53.750070 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 4018: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4019 53.750081 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 4019: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4020 53.750091 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 4020: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4021 53.750101 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 4021: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4022 53.750112 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 4022: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4023 53.750122 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 4023: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4024 53.750135 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 4024: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4025 53.750146 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 4025: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4026 53.750158 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 4026: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4027 53.751006 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 4027: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4411, Ack: 313807, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4028 53.751039 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=313807 Ack=4453 Win=46153 Len=0 Frame 4028: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 313807, Ack: 4453, Len: 0 No. Time Source Destination Protocol Length Info 4029 53.824155 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-09.geo.kaspersky.com Frame 4029: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 56842 (56842), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 4030 53.824289 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-09.geo.kaspersky.com Frame 4030: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 56842 (56842), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 4031 54.032384 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 4031: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 4032 54.032417 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 4032: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 4033 54.049104 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2494503168, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 4033: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4034 54.049125 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2494503168, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 4034: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4035 54.049138 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2494503168, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 4035: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4036 54.049150 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2494503168, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 4036: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4037 54.051316 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 4037: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2112, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 4038 54.069633 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 68681984, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 4038: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4039 54.069653 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 68681984, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 4039: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4040 54.069665 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 68681984, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 4040: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4041 54.069677 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 68681984, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 4041: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4042 54.078244 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 4042: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2139, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 4043 54.078280 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=32763 Ack=2166 Win=64633 Len=0 Frame 4043: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2166, Len: 0 No. Time Source Destination Protocol Length Info 4044 54.084465 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 4044: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2166, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 4045 54.101636 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 4045: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2193, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 4046 54.101671 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=32763 Ack=2220 Win=64579 Len=0 Frame 4046: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2220, Len: 0 No. Time Source Destination Protocol Length Info 4047 54.108214 192.168.10.207 75.101.155.144 TCP 62 netwatcher-mon > smtp [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM=1 Frame 4047: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 75.101.155.144 (75.101.155.144) Transmission Control Protocol, Src Port: netwatcher-mon (3203), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 4048 54.115187 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 4048: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2220, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 4049 54.133275 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 4049: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2247, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 4050 54.133309 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=32763 Ack=2274 Win=64525 Len=0 Frame 4050: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2274, Len: 0 No. Time Source Destination Protocol Length Info 4051 54.166753 192.168.10.220 208.67.222.222 DNS 88 Standard query PTR 141.197.160.119.in-addr.arpa Frame 4051: 88 bytes on wire (704 bits), 88 bytes captured (704 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 65059 (65059), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 4052 54.229502 75.101.155.144 192.168.10.207 TCP 62 smtp > netwatcher-mon [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1400 SACK_PERM=1 Frame 4052: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 75.101.155.144 (75.101.155.144), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: smtp (25), Dst Port: netwatcher-mon (3203), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 4053 54.229556 192.168.10.207 75.101.155.144 TCP 60 netwatcher-mon > smtp [ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 4053: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 75.101.155.144 (75.101.155.144) Transmission Control Protocol, Src Port: netwatcher-mon (3203), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 4054 54.350573 75.101.155.144 192.168.10.207 SMTP 90 S: 220 ecc01.kfront.net ESMTP Postfix Frame 4054: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 75.101.155.144 (75.101.155.144), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: smtp (25), Dst Port: netwatcher-mon (3203), Seq: 1, Ack: 1, Len: 36 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4055 54.350776 192.168.10.207 75.101.155.144 SMTP 81 C: EHLO mail.mydomain.com Frame 4055: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 75.101.155.144 (75.101.155.144) Transmission Control Protocol, Src Port: netwatcher-mon (3203), Dst Port: smtp (25), Seq: 1, Ack: 37, Len: 27 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4056 54.371283 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 4056: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2563, Ack: 146528, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4057 54.371340 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=146528 Ack=2605 Win=46069 Len=0 Frame 4057: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 146528, Ack: 2605, Len: 0 No. Time Source Destination Protocol Length Info 4058 54.392656 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 4058: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4453, Ack: 313807, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4059 54.392694 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=313807 Ack=4495 Win=46132 Len=0 Frame 4059: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 313807, Ack: 4495, Len: 0 No. Time Source Destination Protocol Length Info 4060 54.392738 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=4495 Ack=313807 Win=13804 Len=0 Frame 4060: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4495, Ack: 313807, Len: 0 No. Time Source Destination Protocol Length Info 4061 54.392768 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 4060#1] smtp > 23308 [ACK] Seq=4495 Ack=313807 Win=13804 Len=0 Frame 4061: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4495, Ack: 313807, Len: 0 No. Time Source Destination Protocol Length Info 4062 54.392827 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4062: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 313807, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4063 54.392860 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4063: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 315187, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4064 54.392889 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4064: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 316567, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4065 54.392922 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4065: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 317947, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4066 54.392952 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4066: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 319327, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4067 54.392985 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4067: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 320707, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4068 54.393022 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4068: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 322087, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4069 54.393059 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4069: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 323467, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4070 54.393089 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4070: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 324847, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4071 54.393119 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4071: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 326227, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4072 54.393149 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=4495 Ack=319327 Win=8284 Len=0 Frame 4072: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4495, Ack: 319327, Len: 0 No. Time Source Destination Protocol Length Info 4073 54.393181 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=4495 Ack=326227 Win=1384 Len=0 Frame 4073: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4495, Ack: 326227, Len: 0 No. Time Source Destination Protocol Length Info 4074 54.471244 75.101.155.144 192.168.10.207 TCP 60 smtp > netwatcher-mon [ACK] Seq=37 Ack=28 Win=5840 Len=0 Frame 4074: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 75.101.155.144 (75.101.155.144), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: smtp (25), Dst Port: netwatcher-mon (3203), Seq: 37, Ack: 28, Len: 0 No. Time Source Destination Protocol Length Info 4075 54.471305 75.101.155.144 192.168.10.207 SMTP 179 S: 250-ecc01.kfront.net | 250-PIPELINING | 250-SIZE 10240000 | 250-VRFY | 250-ETRN | 250-ENHANCEDSTATUSCODES | 250-8BITMIME | 250 DSN Frame 4075: 179 bytes on wire (1432 bits), 179 bytes captured (1432 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 75.101.155.144 (75.101.155.144), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: smtp (25), Dst Port: netwatcher-mon (3203), Seq: 37, Ack: 28, Len: 125 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4076 54.505651 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=4495 Ack=327607 Win=4 Len=0 Frame 4076: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4495, Ack: 327607, Len: 0 No. Time Source Destination Protocol Length Info 4077 54.507262 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 4077: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2274, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 4078 54.507341 192.168.10.207 75.101.155.144 SMTP 103 C: MAIL FROM:<mailive@xxxxxxxxxxxxxxxxxx> SIZE=989 Frame 4078: 103 bytes on wire (824 bits), 103 bytes captured (824 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 75.101.155.144 (75.101.155.144) Transmission Control Protocol, Src Port: netwatcher-mon (3203), Dst Port: smtp (25), Seq: 28, Ack: 162, Len: 49 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4079 54.541153 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 4079: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2328, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 4080 54.541188 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=32763 Ack=2301 Win=64498 Len=0 SLE=2328 SRE=2355 Frame 4080: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2301, Len: 0 No. Time Source Destination Protocol Length Info 4081 54.559515 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 4081: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2355, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 4082 54.559544 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 4080#1] rfb > xrl [ACK] Seq=32763 Ack=2301 Win=64498 Len=0 SLE=2328 SRE=2382 Frame 4082: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2301, Len: 0 No. Time Source Destination Protocol Length Info 4083 54.626543 75.101.155.144 192.168.10.207 SMTP 68 S: 250 2.1.0 Ok Frame 4083: 68 bytes on wire (544 bits), 68 bytes captured (544 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 75.101.155.144 (75.101.155.144), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: smtp (25), Dst Port: netwatcher-mon (3203), Seq: 162, Ack: 77, Len: 14 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4084 54.626921 192.168.10.207 75.101.155.144 SMTP 92 C: RCPT TO:<mailive@xxxxxxxxxxxxxxxxxx> Frame 4084: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 75.101.155.144 (75.101.155.144) Transmission Control Protocol, Src Port: netwatcher-mon (3203), Dst Port: smtp (25), Seq: 77, Ack: 176, Len: 38 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4085 54.747909 75.101.155.144 192.168.10.207 SMTP 68 S: 250 2.1.5 Ok Frame 4085: 68 bytes on wire (544 bits), 68 bytes captured (544 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 75.101.155.144 (75.101.155.144), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: smtp (25), Dst Port: netwatcher-mon (3203), Seq: 176, Ack: 115, Len: 14 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4086 54.748037 192.168.10.207 75.101.155.144 SMTP 60 C: DATA Frame 4086: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 75.101.155.144 (75.101.155.144) Transmission Control Protocol, Src Port: netwatcher-mon (3203), Dst Port: smtp (25), Seq: 115, Ack: 190, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4087 54.886310 208.67.222.222 192.168.10.220 DNS 88 Standard query response, No such name Frame 4087: 88 bytes on wire (704 bits), 88 bytes captured (704 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 65059 (65059) Domain Name System (response) No. Time Source Destination Protocol Length Info 4088 54.887021 192.168.10.203 119.160.197.141 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 4088: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 119.160.197.141 (119.160.197.141) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 4089 54.945275 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 4089: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4495, Ack: 327607, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4090 54.945314 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=327607 Ack=4537 Win=46111 Len=0 Frame 4090: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 327607, Ack: 4537, Len: 0 No. Time Source Destination Protocol Length Info 4091 55.064555 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2511280384, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 4091: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4092 55.064579 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2511280384, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 4092: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4093 55.064592 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2511280384, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 4093: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4094 55.064604 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2511280384, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 4094: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4095 55.085213 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 85459200, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 4095: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4096 55.085235 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 85459200, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 4096: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4097 55.085248 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 85459200, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 4097: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4098 55.085260 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 85459200, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 4098: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4099 55.193870 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 4099: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 4100 55.216915 75.101.155.144 192.168.10.207 SMTP 91 S: 354 End data with <CR><LF>.<CR><LF> Frame 4100: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 75.101.155.144 (75.101.155.144), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: smtp (25), Dst Port: netwatcher-mon (3203), Seq: 190, Ack: 121, Len: 37 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4101 55.217247 192.168.10.207 75.101.155.144 IMF 1046 from: mailive@xxxxxxxxxxxxxxxxxx, subject: Mailive! Test - ID:[FSMAILID:MTM2NXwxMzE3Njg1NDg1], (text/plain) Frame 4101: 1046 bytes on wire (8368 bits), 1046 bytes captured (8368 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 75.101.155.144 (75.101.155.144) Transmission Control Protocol, Src Port: netwatcher-mon (3203), Dst Port: smtp (25), Seq: 121, Ack: 227, Len: 992 Simple Mail Transfer Protocol Internet Message Format No. Time Source Destination Protocol Length Info 4102 55.228498 192.168.10.142 192.168.10.185 VNC 135 [TCP Retransmission] Authentication result Frame 4102: 135 bytes on wire (1080 bits), 135 bytes captured (1080 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2301, Ack: 32763, Len: 81 Virtual Network Computing No. Time Source Destination Protocol Length Info 4103 55.302777 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=32763 Ack=2382 Win=64417 Len=0 Frame 4103: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2382, Len: 0 No. Time Source Destination Protocol Length Info 4104 55.312085 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 4104: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2605, Ack: 146528, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4105 55.312148 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=146528 Ack=2647 Win=46048 Len=0 Frame 4105: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 146528, Ack: 2647, Len: 0 No. Time Source Destination Protocol Length Info 4106 55.315309 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 4106: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 4107 55.347510 75.101.155.144 192.168.10.207 SMTP 90 S: 250 2.0.0 Ok: queued as 2D6CB5E381 Frame 4107: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 75.101.155.144 (75.101.155.144), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: smtp (25), Dst Port: netwatcher-mon (3203), Seq: 227, Ack: 1113, Len: 36 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4108 55.348521 192.168.10.207 75.101.155.144 SMTP 60 C: QUIT Frame 4108: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 75.101.155.144 (75.101.155.144) Transmission Control Protocol, Src Port: netwatcher-mon (3203), Dst Port: smtp (25), Seq: 1113, Ack: 263, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4109 55.443522 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 4109: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 4110 55.470729 75.101.155.144 192.168.10.207 SMTP 69 S: 221 2.0.0 Bye Frame 4110: 69 bytes on wire (552 bits), 69 bytes captured (552 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 75.101.155.144 (75.101.155.144), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: smtp (25), Dst Port: netwatcher-mon (3203), Seq: 263, Ack: 1119, Len: 15 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4111 55.470781 192.168.10.207 75.101.155.144 TCP 60 netwatcher-mon > smtp [FIN, ACK] Seq=1119 Ack=278 Win=65258 Len=0 Frame 4111: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 75.101.155.144 (75.101.155.144) Transmission Control Protocol, Src Port: netwatcher-mon (3203), Dst Port: smtp (25), Seq: 1119, Ack: 278, Len: 0 No. Time Source Destination Protocol Length Info 4112 55.470810 75.101.155.144 192.168.10.207 TCP 60 smtp > netwatcher-mon [FIN, ACK] Seq=278 Ack=1119 Win=6944 Len=0 Frame 4112: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 75.101.155.144 (75.101.155.144), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: smtp (25), Dst Port: netwatcher-mon (3203), Seq: 278, Ack: 1119, Len: 0 No. Time Source Destination Protocol Length Info 4113 55.470849 192.168.10.207 75.101.155.144 TCP 60 netwatcher-mon > smtp [ACK] Seq=1120 Ack=279 Win=65258 Len=0 Frame 4113: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 75.101.155.144 (75.101.155.144) Transmission Control Protocol, Src Port: netwatcher-mon (3203), Dst Port: smtp (25), Seq: 1120, Ack: 279, Len: 0 No. Time Source Destination Protocol Length Info 4114 55.520139 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 4114: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4537, Ack: 327607, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4115 55.520173 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=327607 Ack=4579 Win=46090 Len=0 Frame 4115: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 327607, Ack: 4579, Len: 0 No. Time Source Destination Protocol Length Info 4116 55.532068 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 4116: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 4117 55.532098 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 4117: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 4118 55.566030 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 4118: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 4119 55.592471 75.101.155.144 192.168.10.207 TCP 60 smtp > netwatcher-mon [ACK] Seq=279 Ack=1120 Win=6944 Len=0 Frame 4119: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 75.101.155.144 (75.101.155.144), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: smtp (25), Dst Port: netwatcher-mon (3203), Seq: 279, Ack: 1120, Len: 0 No. Time Source Destination Protocol Length Info 4120 55.623873 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 4 Port 48 TTL = 120 Frame 4120: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 4121 55.639022 192.168.10.79 192.168.10.255 BROWSER 243 Host Announcement DBOGURSKEXP, Workstation, Server, NT Workstation, Potential Browser Frame 4121: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: SunrichT_19:cf:b5 (00:0a:cd:19:cf:b5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.79 (192.168.10.79), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 4122 55.639232 192.168.10.79 192.168.10.255 BROWSER 243 Host Announcement DBOGURSKEXP, Workstation, Server, NT Workstation, Potential Browser Frame 4122: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: SunrichT_19:cf:b5 (00:0a:cd:19:cf:b5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.79 (192.168.10.79), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 4123 55.707499 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 4123: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2382, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 4124 55.743781 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 4124: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2436, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 4125 55.743815 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=32763 Ack=2409 Win=64390 Len=0 SLE=2436 SRE=2463 Frame 4125: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2409, Len: 0 No. Time Source Destination Protocol Length Info 4126 55.758323 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 4126: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2463, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 4127 55.758357 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 4125#1] rfb > xrl [ACK] Seq=32763 Ack=2409 Win=64390 Len=0 SLE=2436 SRE=2490 Frame 4127: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2409, Len: 0 No. Time Source Destination Protocol Length Info 4128 55.775319 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 4128: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2490, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 4129 55.775354 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 4125#2] rfb > xrl [ACK] Seq=32763 Ack=2409 Win=64390 Len=0 SLE=2436 SRE=2517 Frame 4129: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2409, Len: 0 No. Time Source Destination Protocol Length Info 4130 55.776873 192.168.10.31 192.168.10.255 UDP 665 Source port: 50764 Destination port: apc-3052 Frame 4130: 665 bytes on wire (5320 bits), 665 bytes captured (5320 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (623 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 44 54 3d 31 30 .168.10.31.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 31 39 3a 34 /03/2011.TM=19:4 0040 39 3a 31 37 0a 53 52 3d 31 30 37 43 0a 53 55 3d 9:17.SR=107C.SU= 0050 32 44 38 32 43 42 43 46 0a 52 44 3d 44 31 39 39 2D82CBCF.RD=D199 0060 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 30 2e 32 .TA=192.168.10.2 0070 35 35 0a 50 54 3d 33 30 35 32 0a 43 4c 3d 43 30 55.PT=3052.CL=C0 0080 41 38 30 41 44 39 0a 43 4c 3d 43 30 41 38 30 41 A80AD9.CL=C0A80A 0090 43 44 0a 43 4c 3d 43 30 41 38 30 41 44 38 0a 43 CD.CL=C0A80AD8.C 00a0 4c 3d 43 30 41 38 30 41 44 42 0a 43 4c 3d 43 30 L=C0A80ADB.CL=C0 00b0 41 38 30 41 44 30 0a 43 4c 3d 43 30 41 38 30 41 A80AD0.CL=C0A80A 00c0 43 42 0a 43 4c 3d 43 30 41 38 30 41 43 43 0a 43 CB.CL=C0A80ACC.C 00d0 4c 3d 43 30 41 38 30 41 43 45 0a 43 4c 3d 43 30 L=C0A80ACE.CL=C0 00e0 41 38 30 41 44 43 0a 43 4c 3d 43 30 41 38 30 41 A80ADC.CL=C0A80A 00f0 43 46 0a 43 4c 3d 43 30 41 38 30 41 46 30 0a 43 CF.CL=C0A80AF0.C 0100 4c 3d 43 30 41 38 30 41 43 39 0a 43 4c 3d 43 30 L=C0A80AC9.CL=C0 0110 41 38 30 41 31 30 0a 43 4c 3d 43 30 41 38 30 41 A80A10.CL=C0A80A 0120 30 44 0a 43 4c 3d 43 30 41 38 30 41 30 46 0a 43 0D.CL=C0A80A0F.C 0130 4c 3d 43 30 41 38 30 41 30 43 0a 43 4c 3d 43 30 L=C0A80A0C.CL=C0 0140 41 38 30 41 44 31 0a 43 4c 3d 43 30 41 38 30 41 A80AD1.CL=C0A80A 0150 43 41 0a 43 4c 3d 43 30 41 38 30 41 46 41 0a 43 CA.CL=C0A80AFA.C 0160 4c 3d 43 30 41 38 30 41 32 37 0a 43 4c 3d 43 30 L=C0A80A27.CL=C0 0170 41 38 30 41 44 33 0a 43 4c 3d 43 30 41 38 30 41 A80AD3.CL=C0A80A 0180 44 32 0a 43 4c 3d 43 30 41 38 30 41 45 32 0a 43 D2.CL=C0A80AE2.C 0190 4c 3d 43 30 41 38 30 41 45 33 0a 43 4c 3d 43 30 L=C0A80AE3.CL=C0 01a0 41 38 30 41 44 45 0a 43 4c 3d 43 30 41 38 31 34 A80ADE.CL=C0A814 01b0 30 33 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 03.CL=00.CL=00.C 01c0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01d0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01e0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 01f0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0200 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0210 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0220 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0230 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0240 30 30 0a 4d 44 3d 36 36 62 38 62 32 36 34 65 39 00.MD=66b8b264e9 0250 66 66 62 34 34 37 36 65 37 39 63 61 38 61 30 37 ffb4476e79ca8a07 0260 33 31 37 35 63 33 0a 3c 2f 42 4f 44 59 3e 0a 3175c3.</BODY>. No. Time Source Destination Protocol Length Info 4131 55.777002 192.168.10.31 192.168.10.255 UDP 665 Source port: 50764 Destination port: apc-3052 Frame 4131: 665 bytes on wire (5320 bits), 665 bytes captured (5320 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (623 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 44 54 3d 31 30 .168.10.31.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 31 39 3a 34 /03/2011.TM=19:4 0040 39 3a 31 37 0a 53 52 3d 31 30 37 43 0a 53 55 3d 9:17.SR=107C.SU= 0050 32 44 38 32 43 42 43 46 0a 52 44 3d 44 31 39 39 2D82CBCF.RD=D199 0060 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 30 2e 32 .TA=192.168.10.2 0070 35 35 0a 50 54 3d 33 30 35 32 0a 43 4c 3d 43 30 55.PT=3052.CL=C0 0080 41 38 30 41 44 39 0a 43 4c 3d 43 30 41 38 30 41 A80AD9.CL=C0A80A 0090 43 44 0a 43 4c 3d 43 30 41 38 30 41 44 38 0a 43 CD.CL=C0A80AD8.C 00a0 4c 3d 43 30 41 38 30 41 44 42 0a 43 4c 3d 43 30 L=C0A80ADB.CL=C0 00b0 41 38 30 41 44 30 0a 43 4c 3d 43 30 41 38 30 41 A80AD0.CL=C0A80A 00c0 43 42 0a 43 4c 3d 43 30 41 38 30 41 43 43 0a 43 CB.CL=C0A80ACC.C 00d0 4c 3d 43 30 41 38 30 41 43 45 0a 43 4c 3d 43 30 L=C0A80ACE.CL=C0 00e0 41 38 30 41 44 43 0a 43 4c 3d 43 30 41 38 30 41 A80ADC.CL=C0A80A 00f0 43 46 0a 43 4c 3d 43 30 41 38 30 41 46 30 0a 43 CF.CL=C0A80AF0.C 0100 4c 3d 43 30 41 38 30 41 43 39 0a 43 4c 3d 43 30 L=C0A80AC9.CL=C0 0110 41 38 30 41 31 30 0a 43 4c 3d 43 30 41 38 30 41 A80A10.CL=C0A80A 0120 30 44 0a 43 4c 3d 43 30 41 38 30 41 30 46 0a 43 0D.CL=C0A80A0F.C 0130 4c 3d 43 30 41 38 30 41 30 43 0a 43 4c 3d 43 30 L=C0A80A0C.CL=C0 0140 41 38 30 41 44 31 0a 43 4c 3d 43 30 41 38 30 41 A80AD1.CL=C0A80A 0150 43 41 0a 43 4c 3d 43 30 41 38 30 41 46 41 0a 43 CA.CL=C0A80AFA.C 0160 4c 3d 43 30 41 38 30 41 32 37 0a 43 4c 3d 43 30 L=C0A80A27.CL=C0 0170 41 38 30 41 44 33 0a 43 4c 3d 43 30 41 38 30 41 A80AD3.CL=C0A80A 0180 44 32 0a 43 4c 3d 43 30 41 38 30 41 45 32 0a 43 D2.CL=C0A80AE2.C 0190 4c 3d 43 30 41 38 30 41 45 33 0a 43 4c 3d 43 30 L=C0A80AE3.CL=C0 01a0 41 38 30 41 44 45 0a 43 4c 3d 43 30 41 38 31 34 A80ADE.CL=C0A814 01b0 30 33 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 03.CL=00.CL=00.C 01c0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01d0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01e0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 01f0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0200 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0210 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0220 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0230 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0240 30 30 0a 4d 44 3d 36 36 62 38 62 32 36 34 65 39 00.MD=66b8b264e9 0250 66 66 62 34 34 37 36 65 37 39 63 61 38 61 30 37 ffb4476e79ca8a07 0260 33 31 37 35 63 33 0a 3c 2f 42 4f 44 59 3e 0a 3175c3.</BODY>. No. Time Source Destination Protocol Length Info 4132 55.791022 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 4132: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2517, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 4133 55.791055 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 4125#3] rfb > xrl [ACK] Seq=32763 Ack=2409 Win=64390 Len=0 SLE=2436 SRE=2544 Frame 4133: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2409, Len: 0 No. Time Source Destination Protocol Length Info 4134 55.805468 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 4134: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2409, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 4135 55.805500 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=32763 Ack=2544 Win=65535 Len=0 Frame 4135: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2544, Len: 0 No. Time Source Destination Protocol Length Info 4136 55.810225 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 4136: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2544, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 4137 55.958932 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=32763 Ack=2571 Win=65508 Len=0 Frame 4137: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2571, Len: 0 No. Time Source Destination Protocol Length Info 4138 56.030487 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 4138: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 4139 56.030515 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 4139: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 4140 56.057798 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 4140: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4579, Ack: 327607, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4141 56.057835 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=327607 Ack=4621 Win=46069 Len=0 Frame 4141: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 327607, Ack: 4621, Len: 0 No. Time Source Destination Protocol Length Info 4142 56.080352 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2528057600, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 4142: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4143 56.080376 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2528057600, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 4143: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4144 56.080389 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2528057600, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 4144: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4145 56.080401 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2528057600, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 4145: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4146 56.101022 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 102236416, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 4146: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4147 56.101040 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 102236416, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 4147: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4148 56.101053 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 102236416, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 4148: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4149 56.101064 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 102236416, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 4149: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4150 56.199451 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 4150: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2571, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 4151 56.229476 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 4151: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2625, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 4152 56.229512 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=32763 Ack=2598 Win=65481 Len=0 SLE=2625 SRE=2652 Frame 4152: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2598, Len: 0 No. Time Source Destination Protocol Length Info 4153 56.327421 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 4153: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2647, Ack: 146528, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4154 56.327458 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=146528 Ack=2689 Win=46720 Len=0 Frame 4154: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 146528, Ack: 2689, Len: 0 No. Time Source Destination Protocol Length Info 4155 56.327539 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=2689 Ack=146528 Win=48808 Len=0 Frame 4155: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2689, Ack: 146528, Len: 0 No. Time Source Destination Protocol Length Info 4156 56.327567 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 4155#1] smtp > 9428 [ACK] Seq=2689 Ack=146528 Win=48808 Len=0 Frame 4156: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2689, Ack: 146528, Len: 0 No. Time Source Destination Protocol Length Info 4157 56.327665 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4157: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 146528, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4158 56.327698 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4158: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 147908, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4159 56.327727 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4159: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 149288, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4160 56.327756 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4160: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 150668, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4161 56.327786 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4161: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 152048, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4162 56.327817 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=2689 Ack=152048 Win=43288 Len=0 Frame 4162: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2689, Ack: 152048, Len: 0 No. Time Source Destination Protocol Length Info 4163 56.327861 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4163: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 153428, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4164 56.327898 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4164: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 154808, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4165 56.327932 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4165: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 156188, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4166 56.327961 206.225.164.188 192.168.10.207 SMTP 192 C: DATA fragment, 138 bytes Frame 4166: 192 bytes on wire (1536 bits), 192 bytes captured (1536 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 157568, Ack: 2689, Len: 138 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4167 56.327991 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4167: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 157706, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4168 56.328019 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=2689 Ack=154808 Win=40528 Len=0 Frame 4168: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2689, Ack: 154808, Len: 0 No. Time Source Destination Protocol Length Info 4169 56.328051 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4169: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 159086, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4170 56.328082 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4170: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 160466, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4171 56.328111 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=2689 Ack=159086 Win=36250 Len=0 Frame 4171: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2689, Ack: 159086, Len: 0 No. Time Source Destination Protocol Length Info 4172 56.328142 206.225.164.188 192.168.10.207 SMTP 445 C: DATA fragment, 391 bytes Frame 4172: 445 bytes on wire (3560 bits), 445 bytes captured (3560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 161846, Ack: 2689, Len: 391 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4173 56.328178 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4173: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 162237, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4174 56.328212 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4174: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 163617, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4175 56.328241 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=2689 Ack=161846 Win=33490 Len=0 Frame 4175: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2689, Ack: 161846, Len: 0 No. Time Source Destination Protocol Length Info 4176 56.328274 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4176: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 164997, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4177 56.328304 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=2689 Ack=163617 Win=31719 Len=0 Frame 4177: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2689, Ack: 163617, Len: 0 No. Time Source Destination Protocol Length Info 4178 56.328337 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4178: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 166377, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4179 56.328369 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4179: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 167757, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4180 56.328397 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=2689 Ack=166377 Win=28959 Len=0 Frame 4180: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2689, Ack: 166377, Len: 0 No. Time Source Destination Protocol Length Info 4181 56.328429 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4181: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 169137, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4182 56.328458 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4182: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 170517, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4183 56.328487 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4183: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 171897, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4184 56.328516 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4184: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 173277, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4185 56.328547 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=2689 Ack=169137 Win=26199 Len=0 Frame 4185: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2689, Ack: 169137, Len: 0 No. Time Source Destination Protocol Length Info 4186 56.328586 206.225.164.188 192.168.10.207 SMTP 880 C: DATA fragment, 826 bytes Frame 4186: 880 bytes on wire (7040 bits), 880 bytes captured (7040 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 174657, Ack: 2689, Len: 826 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4187 56.328615 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=2689 Ack=174657 Win=20679 Len=0 Frame 4187: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2689, Ack: 174657, Len: 0 No. Time Source Destination Protocol Length Info 4188 56.328644 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4188: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 175483, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4189 56.328674 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4189: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 176863, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4190 56.328703 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4190: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 178243, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4191 56.328732 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=2689 Ack=176863 Win=18473 Len=0 Frame 4191: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2689, Ack: 176863, Len: 0 No. Time Source Destination Protocol Length Info 4192 56.328760 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4192: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 179623, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4193 56.328789 206.225.164.188 192.168.10.207 TCP 79 [TCP segment of a reassembled PDU] Frame 4193: 79 bytes on wire (632 bits), 79 bytes captured (632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 181003, Ack: 2689, Len: 25 No. Time Source Destination Protocol Length Info 4194 56.328830 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1405 bytes Frame 4194: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 181028, Ack: 2689, Len: 1380 [2 Reassembled TCP Segments (1405 bytes): #4193(25), #4194(1380)] Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4195 56.328864 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4195: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 182408, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4196 56.328896 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=2689 Ack=179623 Win=15713 Len=0 Frame 4196: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2689, Ack: 179623, Len: 0 No. Time Source Destination Protocol Length Info 4197 56.328926 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4197: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 183788, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4198 56.328955 206.225.164.188 192.168.10.207 SMTP 497 C: DATA fragment, 443 bytes Frame 4198: 497 bytes on wire (3976 bits), 497 bytes captured (3976 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 185168, Ack: 2689, Len: 443 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4199 56.328984 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4199: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 185611, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4200 56.329020 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4200: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 186991, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4201 56.329049 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=2689 Ack=183788 Win=11548 Len=0 Frame 4201: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2689, Ack: 183788, Len: 0 No. Time Source Destination Protocol Length Info 4202 56.329078 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=2689 Ack=185611 Win=9725 Len=0 Frame 4202: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2689, Ack: 185611, Len: 0 No. Time Source Destination Protocol Length Info 4203 56.329111 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4203: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 188371, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4204 56.329140 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4204: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 189751, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4205 56.329168 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=2689 Ack=188371 Win=6965 Len=0 Frame 4205: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2689, Ack: 188371, Len: 0 No. Time Source Destination Protocol Length Info 4206 56.329197 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4206: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 191131, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4207 56.329226 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4207: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 192511, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4208 56.329255 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4208: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 193891, Ack: 2689, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4209 56.329286 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=2689 Ack=191131 Win=4205 Len=0 Frame 4209: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2689, Ack: 191131, Len: 0 No. Time Source Destination Protocol Length Info 4210 56.329320 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=2689 Ack=193891 Win=1445 Len=0 Frame 4210: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2689, Ack: 193891, Len: 0 No. Time Source Destination Protocol Length Info 4211 56.345885 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 4211: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4212 56.345915 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 4212: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4213 56.386215 192.168.10.203 119.160.197.141 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 4213: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 119.160.197.141 (119.160.197.141) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 4214 56.471634 fe80::9e8e:99ff:fe88:e94c ff02::1:2 DHCPv6 128 Solicit XID: 0x282f CID: 00020000000b9c8e9988e94c Frame 4214: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: HewlettP_88:e9:4c (9c:8e:99:88:e9:4c), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02) Internet Protocol Version 6, Src: fe80::9e8e:99ff:fe88:e94c (fe80::9e8e:99ff:fe88:e94c), Dst: ff02::1:2 (ff02::1:2) User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547) DHCPv6 No. Time Source Destination Protocol Length Info 4215 56.471705 fe80::9e8e:99ff:fe88:e94c ff02::1:2 DHCPv6 128 Solicit XID: 0x282f CID: 00020000000b9c8e9988e94c Frame 4215: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: HewlettP_88:e9:4c (9c:8e:99:88:e9:4c), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02) Internet Protocol Version 6, Src: fe80::9e8e:99ff:fe88:e94c (fe80::9e8e:99ff:fe88:e94c), Dst: ff02::1:2 (ff02::1:2) User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547) DHCPv6 No. Time Source Destination Protocol Length Info 4216 56.562788 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 4216: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4621, Ack: 327607, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4217 56.562826 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=327607 Ack=4663 Win=46048 Len=0 Frame 4217: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 327607, Ack: 4663, Len: 0 No. Time Source Destination Protocol Length Info 4218 56.618229 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=2689 Ack=195271 Win=65 Len=0 Frame 4218: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2689, Ack: 195271, Len: 0 No. Time Source Destination Protocol Length Info 4219 56.756852 123.18.166.30 192.168.10.207 TCP 62 28379 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 4219: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 123.18.166.30 (123.18.166.30), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 28379 (28379), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 4220 56.756913 192.168.10.207 123.18.166.30 TCP 62 smtp > 28379 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 4220: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 123.18.166.30 (123.18.166.30) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 28379 (28379), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 4221 57.053270 123.18.166.30 192.168.10.207 TCP 60 28379 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 4221: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 123.18.166.30 (123.18.166.30), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 28379 (28379), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 4222 57.053388 192.168.10.1 192.168.10.245 Syslog 204 LOCAL1.INFO: Oct 3 19:45:15 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 28379 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 4222: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:45:15 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 28379 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 4223 57.053420 192.168.10.207 123.18.166.30 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:44:49 -0400 Frame 4223: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 123.18.166.30 (123.18.166.30) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 28379 (28379), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4224 57.053472 123.18.166.30 192.168.10.207 TCP 60 28379 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 4224: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 123.18.166.30 (123.18.166.30), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 28379 (28379), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 4225 57.072341 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 4225: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4663, Ack: 327607, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4226 57.072377 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=327607 Ack=4705 Win=46720 Len=0 Frame 4226: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 327607, Ack: 4705, Len: 0 No. Time Source Destination Protocol Length Info 4227 57.072445 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=4705 Ack=327607 Win=51735 Len=0 Frame 4227: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4705, Ack: 327607, Len: 0 No. Time Source Destination Protocol Length Info 4228 57.072476 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 4227#1] smtp > 23308 [ACK] Seq=4705 Ack=327607 Win=51735 Len=0 Frame 4228: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4705, Ack: 327607, Len: 0 No. Time Source Destination Protocol Length Info 4229 57.072546 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4229: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 327607, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4230 57.072582 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4230: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 328987, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4231 57.072617 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4231: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 330367, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4232 57.072646 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4232: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 331747, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4233 57.072675 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4233: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 333127, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4234 57.072707 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4234: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 334507, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4235 57.072745 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4235: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 335887, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4236 57.072781 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4236: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 337267, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4237 57.072812 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4237: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 338647, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4238 57.072842 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4238: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 340027, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4239 57.072871 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=4705 Ack=333127 Win=46215 Len=0 Frame 4239: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4705, Ack: 333127, Len: 0 No. Time Source Destination Protocol Length Info 4240 57.072900 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4240: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 341407, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4241 57.072930 206.225.164.186 192.168.10.207 SMTP 172 C: DATA fragment, 118 bytes Frame 4241: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 342787, Ack: 4705, Len: 118 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4242 57.072968 206.225.164.186 192.168.10.207 TCP 86 [TCP segment of a reassembled PDU] Frame 4242: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 342905, Ack: 4705, Len: 32 No. Time Source Destination Protocol Length Info 4243 57.072997 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=4705 Ack=338647 Win=40695 Len=0 Frame 4243: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4705, Ack: 338647, Len: 0 No. Time Source Destination Protocol Length Info 4244 57.073026 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1412 bytes Frame 4244: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 342937, Ack: 4705, Len: 1380 [2 Reassembled TCP Segments (1412 bytes): #4242(32), #4244(1380)] Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4245 57.073075 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4245: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 344317, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4246 57.073106 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4246: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 345697, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4247 57.073136 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=4705 Ack=341407 Win=37935 Len=0 Frame 4247: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4705, Ack: 341407, Len: 0 No. Time Source Destination Protocol Length Info 4248 57.073166 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4248: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 347077, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4249 57.073197 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4249: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 348457, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4250 57.073229 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4250: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 349837, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4251 57.073260 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4251: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 351217, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4252 57.073291 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4252: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 352597, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4253 57.073329 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4253: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 353977, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4254 57.073358 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=4705 Ack=344317 Win=35025 Len=0 Frame 4254: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4705, Ack: 344317, Len: 0 No. Time Source Destination Protocol Length Info 4255 57.073386 206.225.164.186 192.168.10.207 SMTP 213 C: DATA fragment, 159 bytes Frame 4255: 213 bytes on wire (1704 bits), 213 bytes captured (1704 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 355357, Ack: 4705, Len: 159 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4256 57.073415 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4256: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 355516, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4257 57.073445 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4257: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 356896, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4258 57.073474 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=4705 Ack=355357 Win=23985 Len=0 Frame 4258: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4705, Ack: 355357, Len: 0 No. Time Source Destination Protocol Length Info 4259 57.073511 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4259: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 358276, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4260 57.073541 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=4705 Ack=356896 Win=22446 Len=0 Frame 4260: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4705, Ack: 356896, Len: 0 No. Time Source Destination Protocol Length Info 4261 57.073570 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4261: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 359656, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4262 57.073599 206.225.164.186 192.168.10.207 SMTP 392 C: DATA fragment, 338 bytes Frame 4262: 392 bytes on wire (3136 bits), 392 bytes captured (3136 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 361036, Ack: 4705, Len: 338 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4263 57.073631 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4263: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 361374, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4264 57.073667 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4264: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 362754, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4265 57.073697 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4265: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 364134, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4266 57.073727 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=4705 Ack=359656 Win=19686 Len=0 Frame 4266: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4705, Ack: 359656, Len: 0 No. Time Source Destination Protocol Length Info 4267 57.073756 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4267: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 365514, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4268 57.073786 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4268: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 366894, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4269 57.073815 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=4705 Ack=361374 Win=17968 Len=0 Frame 4269: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4705, Ack: 361374, Len: 0 No. Time Source Destination Protocol Length Info 4270 57.073842 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4270: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 368274, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4271 57.073871 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=4705 Ack=364134 Win=15208 Len=0 Frame 4271: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4705, Ack: 364134, Len: 0 No. Time Source Destination Protocol Length Info 4272 57.073899 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4272: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 369654, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4273 57.073943 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4273: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 371034, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4274 57.073976 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=4705 Ack=368274 Win=11068 Len=0 Frame 4274: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4705, Ack: 368274, Len: 0 No. Time Source Destination Protocol Length Info 4275 57.074005 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4275: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 372414, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4276 57.074035 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4276: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 373794, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4277 57.074065 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4277: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 375174, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4278 57.074094 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4278: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 376554, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4279 57.074123 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=4705 Ack=371034 Win=8308 Len=0 Frame 4279: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4705, Ack: 371034, Len: 0 No. Time Source Destination Protocol Length Info 4280 57.074151 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 4280: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 377934, Ack: 4705, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4281 57.074179 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=4705 Ack=375174 Win=4168 Len=0 Frame 4281: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4705, Ack: 375174, Len: 0 No. Time Source Destination Protocol Length Info 4282 57.074207 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=4705 Ack=377934 Win=1408 Len=0 Frame 4282: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4705, Ack: 377934, Len: 0 No. Time Source Destination Protocol Length Info 4283 57.085845 192.168.10.142 192.168.10.185 VNC 108 [TCP Retransmission] Authentication result Frame 4283: 108 bytes on wire (864 bits), 108 bytes captured (864 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2598, Ack: 32763, Len: 54 Virtual Network Computing No. Time Source Destination Protocol Length Info 4284 57.095805 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2544834816, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 4284: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4285 57.095828 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2544834816, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 4285: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4286 57.095841 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2544834816, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 4286: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4287 57.095856 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2544834816, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 4287: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4288 57.116438 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 119013632, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 4288: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4289 57.116460 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 119013632, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 4289: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4290 57.116473 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 119013632, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 4290: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4291 57.116485 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 119013632, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 4291: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4292 57.193805 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 4292: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 4293 57.221625 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=4705 Ack=379314 Win=28 Len=0 Frame 4293: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4705, Ack: 379314, Len: 0 No. Time Source Destination Protocol Length Info 4294 57.274363 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 4294: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2689, Ack: 195271, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4295 57.274397 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=195271 Ack=2731 Win=46699 Len=0 Frame 4295: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 195271, Ack: 2731, Len: 0 No. Time Source Destination Protocol Length Info 4296 57.315244 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 4296: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 4297 57.380883 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=32763 Ack=2652 Win=65427 Len=0 Frame 4297: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2652, Len: 0 No. Time Source Destination Protocol Length Info 4298 57.443539 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 4298: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 4299 57.521329 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 4299: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 4300 57.521362 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 4300: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 4301 57.568495 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 4301: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 4302 57.671998 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4302: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 320601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4303 57.672985 Watchgua_3c:4c:d8 Dell_80:27:ab ARP 60 Who has 192.168.10.221? Tell 192.168.10.1 Frame 4303: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4304 57.673033 Dell_80:27:ab Watchgua_3c:4c:d8 ARP 60 192.168.10.221 is at 00:22:19:80:27:ab Frame 4304: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) [Duplicate IP address detected for 192.168.10.221 (00:22:19:80:27:ab) - also in use by 00:22:19:80:27:ad (frame 195)] Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4305 57.690379 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4305: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 322001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4306 57.690432 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=323401 Win=65535 Len=0 Frame 4306: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 323401, Len: 0 No. Time Source Destination Protocol Length Info 4307 57.690463 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4307: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 323401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4308 57.708468 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4308: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 324801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4309 57.708524 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=326201 Win=65535 Len=0 Frame 4309: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 326201, Len: 0 No. Time Source Destination Protocol Length Info 4310 57.708554 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4310: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 326201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4311 57.708646 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4311: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 327601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4312 57.708722 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=329001 Win=65535 Len=0 Frame 4312: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 329001, Len: 0 No. Time Source Destination Protocol Length Info 4313 57.727341 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4313: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 329001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4314 57.727380 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4314: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 330401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4315 57.727443 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=331801 Win=65535 Len=0 Frame 4315: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 331801, Len: 0 No. Time Source Destination Protocol Length Info 4316 57.727503 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4316: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 331801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4317 57.727602 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4317: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 333201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4318 57.727658 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=334601 Win=65535 Len=0 Frame 4318: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 334601, Len: 0 No. Time Source Destination Protocol Length Info 4319 57.764085 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4319: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 334601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4320 57.764120 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4320: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 336001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4321 57.764157 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4321: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 337401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4322 57.764187 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4322: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 338801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4323 57.764217 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4323: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 340201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4324 57.764247 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4324: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 341601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4325 57.764292 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=337401 Win=65535 Len=0 Frame 4325: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 337401, Len: 0 No. Time Source Destination Protocol Length Info 4326 57.764329 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=340201 Win=65535 Len=0 Frame 4326: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 340201, Len: 0 No. Time Source Destination Protocol Length Info 4327 57.764376 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=343001 Win=65535 Len=0 Frame 4327: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 343001, Len: 0 No. Time Source Destination Protocol Length Info 4328 57.782170 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4328: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 343001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4329 57.800259 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4329: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 344401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4330 57.800352 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=345801 Win=65535 Len=0 Frame 4330: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 345801, Len: 0 No. Time Source Destination Protocol Length Info 4331 57.818882 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4331: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 345801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4332 57.818921 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4332: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 347201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4333 57.818968 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=348601 Win=65535 Len=0 Frame 4333: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 348601, Len: 0 No. Time Source Destination Protocol Length Info 4334 57.824131 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-09.geo.kaspersky.com Frame 4334: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 56842 (56842), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 4335 57.824286 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-09.geo.kaspersky.com Frame 4335: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 56842 (56842), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 4336 57.886126 192.168.10.203 119.160.197.141 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 4336: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 119.160.197.141 (119.160.197.141) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 4337 57.891737 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4337: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 348601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4338 57.891773 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4338: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 350001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4339 57.891806 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4339: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 351401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4340 57.891842 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4340: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 352801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4341 57.891874 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4341: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 354201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4342 57.891904 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4342: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 355601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4343 57.891947 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=351401 Win=65535 Len=0 Frame 4343: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 351401, Len: 0 No. Time Source Destination Protocol Length Info 4344 57.891976 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4344: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 357001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4345 57.892018 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=354201 Win=65535 Len=0 Frame 4345: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 354201, Len: 0 No. Time Source Destination Protocol Length Info 4346 57.892053 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=357001 Win=65535 Len=0 Frame 4346: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 357001, Len: 0 No. Time Source Destination Protocol Length Info 4347 57.909904 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4347: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 358401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4348 57.909946 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=359801 Win=65535 Len=0 Frame 4348: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 359801, Len: 0 No. Time Source Destination Protocol Length Info 4349 57.927931 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4349: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 359801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4350 57.946214 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4350: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 361201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4351 57.946257 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=362601 Win=65535 Len=0 Frame 4351: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 362601, Len: 0 No. Time Source Destination Protocol Length Info 4352 57.946308 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4352: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 362601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4353 57.964275 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4353: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 364001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4354 57.964321 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=365401 Win=65535 Len=0 Frame 4354: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 365401, Len: 0 No. Time Source Destination Protocol Length Info 4355 57.964353 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4355: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 365401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4356 57.964442 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4356: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 366801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4357 57.964501 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=368201 Win=65535 Len=0 Frame 4357: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 368201, Len: 0 No. Time Source Destination Protocol Length Info 4358 57.982530 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4358: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 368201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4359 57.982573 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4359: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 369601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4360 57.982628 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=371001 Win=65535 Len=0 Frame 4360: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 371001, Len: 0 No. Time Source Destination Protocol Length Info 4361 57.982714 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4361: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 371001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4362 58.000769 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4362: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 372401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4363 58.000803 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=373801 Win=65535 Len=0 Frame 4363: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 373801, Len: 0 No. Time Source Destination Protocol Length Info 4364 58.000822 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4364: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 373801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4365 58.000974 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4365: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 375201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4366 58.000998 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=376601 Win=65535 Len=0 Frame 4366: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 376601, Len: 0 No. Time Source Destination Protocol Length Info 4367 58.001085 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4367: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 376601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4368 58.018913 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4368: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 378001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4369 58.018950 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=379401 Win=65535 Len=0 Frame 4369: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 379401, Len: 0 No. Time Source Destination Protocol Length Info 4370 58.018992 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4370: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 379401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4371 58.019097 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4371: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 380801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4372 58.019164 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=382201 Win=65535 Len=0 Frame 4372: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 382201, Len: 0 No. Time Source Destination Protocol Length Info 4373 58.019223 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4373: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 382201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4374 58.036140 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 4374: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 4375 58.036164 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 4375: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 4376 58.037187 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4376: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 383601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4377 58.037218 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=385001 Win=65535 Len=0 Frame 4377: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 385001, Len: 0 No. Time Source Destination Protocol Length Info 4378 58.037260 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4378: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 385001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4379 58.037406 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4379: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 386401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4380 58.037427 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=387801 Win=65535 Len=0 Frame 4380: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 387801, Len: 0 No. Time Source Destination Protocol Length Info 4381 58.037501 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4381: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 387801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4382 58.037636 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4382: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 389201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4383 58.037657 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=390601 Win=65535 Len=0 Frame 4383: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 390601, Len: 0 No. Time Source Destination Protocol Length Info 4384 58.055391 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4384: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 390601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4385 58.055451 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4385: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 392001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4386 58.055499 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=393401 Win=65535 Len=0 Frame 4386: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 393401, Len: 0 No. Time Source Destination Protocol Length Info 4387 58.055607 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4387: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 393401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4388 58.055678 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4388: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 394801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4389 58.055724 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=396201 Win=65535 Len=0 Frame 4389: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 396201, Len: 0 No. Time Source Destination Protocol Length Info 4390 58.055805 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4390: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 396201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4391 58.055953 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4391: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 397601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4392 58.055975 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=399001 Win=65535 Len=0 Frame 4392: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 399001, Len: 0 No. Time Source Destination Protocol Length Info 4393 58.073635 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4393: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 399001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4394 58.073696 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4394: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 400401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4395 58.073758 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=401801 Win=65535 Len=0 Frame 4395: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 401801, Len: 0 No. Time Source Destination Protocol Length Info 4396 58.073865 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4396: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 401801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4397 58.073935 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4397: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 403201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4398 58.073984 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=404601 Win=65535 Len=0 Frame 4398: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 404601, Len: 0 No. Time Source Destination Protocol Length Info 4399 58.074065 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4399: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 404601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4400 58.074162 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4400: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 406001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4401 58.074208 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=407401 Win=65535 Len=0 Frame 4401: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 407401, Len: 0 No. Time Source Destination Protocol Length Info 4402 58.091564 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4402: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 407401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4403 58.091649 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4403: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 408801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4404 58.091711 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=410201 Win=65535 Len=0 Frame 4404: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 410201, Len: 0 No. Time Source Destination Protocol Length Info 4405 58.091847 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4405: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 410201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4406 58.091922 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4406: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 411601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4407 58.091978 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=413001 Win=65535 Len=0 Frame 4407: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 413001, Len: 0 No. Time Source Destination Protocol Length Info 4408 58.092047 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4408: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 413001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4409 58.092156 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4409: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 414401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4410 58.092222 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=415801 Win=65535 Len=0 Frame 4410: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 415801, Len: 0 No. Time Source Destination Protocol Length Info 4411 58.092282 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4411: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 415801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4412 58.092416 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4412: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 417201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4413 58.092440 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=418601 Win=65535 Len=0 Frame 4413: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 418601, Len: 0 No. Time Source Destination Protocol Length Info 4414 58.110215 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4414: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 418601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4415 58.110269 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4415: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 420001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4416 58.110300 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=421401 Win=65535 Len=0 Frame 4416: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 421401, Len: 0 No. Time Source Destination Protocol Length Info 4417 58.110362 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4417: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 421401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4418 58.110514 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4418: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 422801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4419 58.110540 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=424201 Win=65535 Len=0 Frame 4419: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 424201, Len: 0 No. Time Source Destination Protocol Length Info 4420 58.110606 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4420: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 424201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4421 58.110743 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4421: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 425601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4422 58.110767 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=427001 Win=65535 Len=0 Frame 4422: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 427001, Len: 0 No. Time Source Destination Protocol Length Info 4423 58.110841 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4423: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 427001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4424 58.111380 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2561612032, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 4424: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4425 58.111396 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2561612032, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 4425: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4426 58.111405 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2561612032, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 4426: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4427 58.111413 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2561612032, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 4427: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4428 58.132078 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 135790848, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 4428: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4429 58.132094 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 135790848, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 4429: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4430 58.132102 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 135790848, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 4430: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4431 58.132109 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 135790848, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 4431: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4432 58.147479 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4432: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 428401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4433 58.147503 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4433: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 429801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4434 58.147521 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4434: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 431201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4435 58.147544 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4435: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 432601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4436 58.147561 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4436: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 434001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4437 58.147590 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=429801 Win=65535 Len=0 Frame 4437: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 429801, Len: 0 No. Time Source Destination Protocol Length Info 4438 58.147607 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4438: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 435401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4439 58.147625 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4439: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 436801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4440 58.147646 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=432601 Win=65535 Len=0 Frame 4440: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 432601, Len: 0 No. Time Source Destination Protocol Length Info 4441 58.147663 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4441: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 438201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4442 58.147680 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4442: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 439601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4443 58.147702 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=435401 Win=65535 Len=0 Frame 4443: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 435401, Len: 0 No. Time Source Destination Protocol Length Info 4444 58.147723 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=438201 Win=65535 Len=0 Frame 4444: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 438201, Len: 0 No. Time Source Destination Protocol Length Info 4445 58.147746 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=441001 Win=65535 Len=0 Frame 4445: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 441001, Len: 0 No. Time Source Destination Protocol Length Info 4446 58.165662 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4446: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 441001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4447 58.165688 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4447: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 442401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4448 58.165706 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4448: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 443801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4449 58.165730 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4449: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 445201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4450 58.165747 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4450: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 446601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4451 58.165774 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=443801 Win=65535 Len=0 Frame 4451: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 443801, Len: 0 No. Time Source Destination Protocol Length Info 4452 58.165791 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4452: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 448001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4453 58.165814 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=446601 Win=65535 Len=0 Frame 4453: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 446601, Len: 0 No. Time Source Destination Protocol Length Info 4454 58.165842 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=449401 Win=65535 Len=0 Frame 4454: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 449401, Len: 0 No. Time Source Destination Protocol Length Info 4455 58.635900 IntelCor_1b:d8:e7 Broadcast ARP 60 Who has 192.168.10.17? Tell 192.168.10.50 Frame 4455: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_1b:d8:e7 (00:13:20:1b:d8:e7), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4456 58.635922 IntelCor_1b:d8:e7 Broadcast ARP 60 Who has 192.168.10.17? Tell 192.168.10.50 Frame 4456: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_1b:d8:e7 (00:13:20:1b:d8:e7), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4457 58.825901 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 4457: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4458 58.825933 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 4458: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4459 58.984159 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 4459: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4705, Ack: 379314, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4460 58.984196 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=379314 Ack=4747 Win=46699 Len=0 Frame 4460: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 379314, Ack: 4747, Len: 0 No. Time Source Destination Protocol Length Info 4461 58.994165 192.168.10.246 65.32.1.70 DNS 88 Standard query PTR 141.197.160.119.in-addr.arpa Frame 4461: 88 bytes on wire (704 bits), 88 bytes captured (704 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.70 (65.32.1.70) User Datagram Protocol, Src Port: 50879 (50879), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 4462 59.041088 Dell_15:05:81 Broadcast ARP 60 Who has 192.168.10.204? Tell 192.168.10.17 Frame 4462: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:05:81 (00:1a:a0:15:05:81), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4463 59.041118 Dell_15:05:81 Broadcast ARP 60 Who has 192.168.10.204? Tell 192.168.10.17 Frame 4463: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:05:81 (00:1a:a0:15:05:81), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4464 59.048574 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 4464: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2731, Ack: 195271, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4465 59.048595 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=195271 Ack=2773 Win=46678 Len=0 Frame 4465: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 195271, Ack: 2773, Len: 0 No. Time Source Destination Protocol Length Info 4466 59.127020 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2578389248, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 4466: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4467 59.127038 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2578389248, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 4467: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4468 59.127046 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2578389248, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 4468: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4469 59.127054 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2578389248, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 4469: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4470 59.147684 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 152568064, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 4470: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4471 59.147698 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 152568064, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 4471: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4472 59.147707 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 152568064, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 4472: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4473 59.147714 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 152568064, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 4473: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4474 59.193824 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 4474: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 4475 59.213667 Pronet_a6:aa:f5 Broadcast ARP 60 Gratuitous ARP for 192.168.10.40 (Request) Frame 4475: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Pronet_a6:aa:f5 (00:20:4a:a6:aa:f5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 4476 59.213685 Pronet_a6:aa:f5 Broadcast ARP 60 Gratuitous ARP for 192.168.10.40 (Request) Frame 4476: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Pronet_a6:aa:f5 (00:20:4a:a6:aa:f5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 4477 59.315432 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 4477: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 4478 59.337953 192.168.10.246 192.168.47.1 TCP 62 netbios-ssn > business [SYN, ACK] Seq=0 Ack=0 Win=16384 Len=0 MSS=1460 SACK_PERM=1 Frame 4478: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 192.168.47.1 (192.168.47.1) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: business (3107), Seq: 0, Ack: 0, Len: 0 No. Time Source Destination Protocol Length Info 4479 59.443498 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 4479: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 4480 59.482879 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 4480: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4747, Ack: 379314, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4481 59.482917 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=379314 Ack=4789 Win=46678 Len=0 Frame 4481: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 379314, Ack: 4789, Len: 0 No. Time Source Destination Protocol Length Info 4482 59.489433 192.168.10.220 208.67.222.222 DNS 86 Standard query PTR 14.181.207.91.in-addr.arpa Frame 4482: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 54129 (54129), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 4483 59.519857 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 4483: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 4484 59.519886 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 4484: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 4485 59.566005 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 4485: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 4486 59.756474 65.32.1.70 192.168.10.246 DNS 144 Standard query response, No such name Frame 4486: 144 bytes on wire (1152 bits), 144 bytes captured (1152 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.70 (65.32.1.70), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 50879 (50879) Domain Name System (response) No. Time Source Destination Protocol Length Info 4487 59.796167 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4487: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 449401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4488 59.796204 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4488: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 450801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4489 59.796234 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4489: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 452201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4490 59.796264 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4490: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 453601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4491 59.796311 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=453601 Win=65535 Len=0 Frame 4491: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 453601, Len: 0 No. Time Source Destination Protocol Length Info 4492 59.814321 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4492: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 455001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4493 59.814373 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=456401 Win=65535 Len=0 Frame 4493: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 456401, Len: 0 No. Time Source Destination Protocol Length Info 4494 59.814403 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4494: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 456401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4495 59.814451 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4495: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 457801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4496 59.814551 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=459201 Win=65535 Len=0 Frame 4496: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 459201, Len: 0 No. Time Source Destination Protocol Length Info 4497 59.832436 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4497: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 459201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4498 59.832476 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4498: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 460601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4499 59.832524 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=462001 Win=65535 Len=0 Frame 4499: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 462001, Len: 0 No. Time Source Destination Protocol Length Info 4500 59.832662 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4500: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 462001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4501 59.844007 208.67.222.222 192.168.10.220 DNS 86 Standard query response, No such name Frame 4501: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 54129 (54129) Domain Name System (response) No. Time Source Destination Protocol Length Info 4502 59.844593 192.168.10.203 91.207.181.14 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 4502: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 91.207.181.14 (91.207.181.14) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 4503 59.845171 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 Who has 192.168.10.220? Tell 192.168.10.1 Frame 4503: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4504 59.845185 Dell_ad:25:f6 Watchgua_3c:4c:d8 ARP 60 192.168.10.220 is at 00:22:19:ad:25:f6 Frame 4504: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4505 59.850696 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4505: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 463401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4506 59.850750 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=464801 Win=65535 Len=0 Frame 4506: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 464801, Len: 0 No. Time Source Destination Protocol Length Info 4507 59.850782 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4507: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 464801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4508 59.850858 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4508: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 466201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4509 59.850955 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=467601 Win=65535 Len=0 Frame 4509: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 467601, Len: 0 No. Time Source Destination Protocol Length Info 4510 59.850989 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4510: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 467601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4511 59.868618 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4511: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 469001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4512 59.868675 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=470401 Win=65535 Len=0 Frame 4512: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 470401, Len: 0 No. Time Source Destination Protocol Length Info 4513 59.868706 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4513: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 470401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4514 59.868761 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4514: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 471801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4515 59.868856 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=473201 Win=65535 Len=0 Frame 4515: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 473201, Len: 0 No. Time Source Destination Protocol Length Info 4516 59.868926 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4516: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 473201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4517 59.886339 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4517: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 474601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4518 59.886393 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=476001 Win=65535 Len=0 Frame 4518: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 476001, Len: 0 No. Time Source Destination Protocol Length Info 4519 59.886436 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4519: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 476001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4520 59.886580 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4520: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 477401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4521 59.886664 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=478801 Win=65535 Len=0 Frame 4521: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 478801, Len: 0 No. Time Source Destination Protocol Length Info 4522 59.886748 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4522: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 478801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4523 59.923158 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4523: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 480201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4524 59.923194 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4524: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 481601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4525 59.923225 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4525: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 483001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4526 59.923261 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4526: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 484401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4527 59.923295 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4527: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 485801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4528 59.923348 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=481601 Win=65535 Len=0 Frame 4528: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 481601, Len: 0 No. Time Source Destination Protocol Length Info 4529 59.923379 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4529: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 487201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4530 59.923410 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4530: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 488601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4531 59.923449 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=484401 Win=65535 Len=0 Frame 4531: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 484401, Len: 0 No. Time Source Destination Protocol Length Info 4532 59.923479 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4532: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 490001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4533 59.923515 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=487201 Win=65535 Len=0 Frame 4533: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 487201, Len: 0 No. Time Source Destination Protocol Length Info 4534 59.923559 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=490001 Win=65535 Len=0 Frame 4534: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 490001, Len: 0 No. Time Source Destination Protocol Length Info 4535 59.923591 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4535: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 491401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4536 59.923627 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=492801 Win=65535 Len=0 Frame 4536: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 492801, Len: 0 No. Time Source Destination Protocol Length Info 4537 59.941431 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4537: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 492801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4538 59.959481 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4538: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 494201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4539 59.959548 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=495601 Win=65535 Len=0 Frame 4539: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 495601, Len: 0 No. Time Source Destination Protocol Length Info 4540 59.959590 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4540: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 495601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4541 59.959677 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4541: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 497001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4542 59.959736 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=498401 Win=65535 Len=0 Frame 4542: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 498401, Len: 0 No. Time Source Destination Protocol Length Info 4543 59.959822 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4543: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 498401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4544 59.978001 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4544: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 499801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4545 59.978052 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=501201 Win=65535 Len=0 Frame 4545: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 501201, Len: 0 No. Time Source Destination Protocol Length Info 4546 59.978086 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4546: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 501201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4547 59.978146 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4547: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 502601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4548 59.978250 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=504001 Win=65535 Len=0 Frame 4548: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 504001, Len: 0 No. Time Source Destination Protocol Length Info 4549 59.978283 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4549: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 504001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4550 59.995981 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4550: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 505401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4551 59.996024 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=506801 Win=65535 Len=0 Frame 4551: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 506801, Len: 0 No. Time Source Destination Protocol Length Info 4552 59.996057 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4552: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 506801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4553 59.996203 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4553: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 508201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4554 59.996242 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=509601 Win=65535 Len=0 Frame 4554: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 509601, Len: 0 No. Time Source Destination Protocol Length Info 4555 59.996330 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4555: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 509601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4556 60.013846 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4556: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 511001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4557 60.013893 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=512401 Win=65535 Len=0 Frame 4557: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 512401, Len: 0 No. Time Source Destination Protocol Length Info 4558 60.013926 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4558: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 512401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4559 60.014166 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4559: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 513801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4560 60.014208 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=515201 Win=65535 Len=0 Frame 4560: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 515201, Len: 0 No. Time Source Destination Protocol Length Info 4561 60.014295 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4561: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 515201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4562 60.026975 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 4562: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 4563 60.027003 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 4563: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 4564 60.032104 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4564: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 516601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4565 60.032146 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=518001 Win=65535 Len=0 Frame 4565: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 518001, Len: 0 No. Time Source Destination Protocol Length Info 4566 60.032178 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4566: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 518001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4567 60.032328 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4567: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 519401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4568 60.032368 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=520801 Win=65535 Len=0 Frame 4568: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 520801, Len: 0 No. Time Source Destination Protocol Length Info 4569 60.032458 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4569: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 520801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4570 60.032533 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4570: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 522201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4571 60.032617 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=523601 Win=65535 Len=0 Frame 4571: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 523601, Len: 0 No. Time Source Destination Protocol Length Info 4572 60.050554 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4572: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 523601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4573 60.050672 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4573: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 525001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4574 60.050712 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=526401 Win=65535 Len=0 Frame 4574: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 526401, Len: 0 No. Time Source Destination Protocol Length Info 4575 60.050805 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4575: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 526401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4576 60.050899 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4576: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 527801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4577 60.050985 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=529201 Win=65535 Len=0 Frame 4577: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 529201, Len: 0 No. Time Source Destination Protocol Length Info 4578 60.051068 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4578: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 529201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4579 60.051140 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4579: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 530601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4580 60.051225 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=532001 Win=65535 Len=0 Frame 4580: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 532001, Len: 0 No. Time Source Destination Protocol Length Info 4581 60.051307 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4581: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 532001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4582 60.068621 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4582: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 533401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4583 60.068659 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=534801 Win=65535 Len=0 Frame 4583: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 534801, Len: 0 No. Time Source Destination Protocol Length Info 4584 60.068874 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4584: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 534801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4585 60.069029 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4585: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 536201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4586 60.069075 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=537601 Win=65535 Len=0 Frame 4586: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 537601, Len: 0 No. Time Source Destination Protocol Length Info 4587 60.069145 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4587: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 537601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4588 60.069234 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4588: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 539001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4589 60.069275 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=540401 Win=65535 Len=0 Frame 4589: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 540401, Len: 0 No. Time Source Destination Protocol Length Info 4590 60.069360 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4590: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 540401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4591 60.069465 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4591: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 541801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4592 60.069512 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=543201 Win=65535 Len=0 Frame 4592: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 543201, Len: 0 No. Time Source Destination Protocol Length Info 4593 60.069592 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4593: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 543201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4594 60.087031 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4594: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 544601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4595 60.087085 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=546001 Win=65535 Len=0 Frame 4595: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 546001, Len: 0 No. Time Source Destination Protocol Length Info 4596 60.087120 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4596: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 546001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4597 60.087152 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4597: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 547401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4598 60.087195 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=548801 Win=65535 Len=0 Frame 4598: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 548801, Len: 0 No. Time Source Destination Protocol Length Info 4599 60.087293 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4599: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 548801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4600 60.087385 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4600: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 550201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4601 60.087428 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=551601 Win=65535 Len=0 Frame 4601: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 551601, Len: 0 No. Time Source Destination Protocol Length Info 4602 60.087510 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4602: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 551601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4603 60.105325 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4603: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 553001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4604 60.105377 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=554401 Win=65535 Len=0 Frame 4604: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 554401, Len: 0 No. Time Source Destination Protocol Length Info 4605 60.105408 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4605: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 554401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4606 60.105552 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4606: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 555801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4607 60.105593 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=557201 Win=65535 Len=0 Frame 4607: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 557201, Len: 0 No. Time Source Destination Protocol Length Info 4608 60.105677 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4608: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 557201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4609 60.105771 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4609: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 558601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4610 60.105817 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=560001 Win=65535 Len=0 Frame 4610: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 560001, Len: 0 No. Time Source Destination Protocol Length Info 4611 60.105849 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4611: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 560001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4612 60.106000 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4612: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 561401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4613 60.106043 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=562801 Win=65535 Len=0 Frame 4613: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 562801, Len: 0 No. Time Source Destination Protocol Length Info 4614 60.109152 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 4614: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2773, Ack: 195271, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4615 60.109190 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=195271 Ack=2815 Win=46657 Len=0 Frame 4615: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 195271, Ack: 2815, Len: 0 No. Time Source Destination Protocol Length Info 4616 60.119755 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 4616: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4789, Ack: 379314, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4617 60.119790 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=379314 Ack=4831 Win=46657 Len=0 Frame 4617: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 379314, Ack: 4831, Len: 0 No. Time Source Destination Protocol Length Info 4618 60.123822 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4618: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 562801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4619 60.123854 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4619: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 564201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4620 60.123902 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=565601 Win=65535 Len=0 Frame 4620: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 565601, Len: 0 No. Time Source Destination Protocol Length Info 4621 60.123932 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4621: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 565601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4622 60.123968 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4622: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 567001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4623 60.124010 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=568401 Win=65535 Len=0 Frame 4623: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 568401, Len: 0 No. Time Source Destination Protocol Length Info 4624 60.124040 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4624: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 568401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4625 60.124072 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4625: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 569801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4626 60.124134 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=571201 Win=65535 Len=0 Frame 4626: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 571201, Len: 0 No. Time Source Destination Protocol Length Info 4627 60.124228 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4627: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 571201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4628 60.124309 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4628: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 572601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4629 60.124397 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=574001 Win=65535 Len=0 Frame 4629: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 574001, Len: 0 No. Time Source Destination Protocol Length Info 4630 60.124474 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4630: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 574001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4631 60.124537 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4631: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 575401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4632 60.124621 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=576801 Win=65535 Len=0 Frame 4632: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 576801, Len: 0 No. Time Source Destination Protocol Length Info 4633 60.141923 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4633: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 576801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4634 60.141990 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4634: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 578201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4635 60.142039 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=579601 Win=65535 Len=0 Frame 4635: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 579601, Len: 0 No. Time Source Destination Protocol Length Info 4636 60.142070 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4636: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 579601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4637 60.142227 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4637: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 581001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4638 60.142270 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=582401 Win=65535 Len=0 Frame 4638: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 582401, Len: 0 No. Time Source Destination Protocol Length Info 4639 60.142311 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4639: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 582401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4640 60.142457 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4640: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 583801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4641 60.142499 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=585201 Win=65535 Len=0 Frame 4641: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 585201, Len: 0 No. Time Source Destination Protocol Length Info 4642 60.142584 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4642: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 585201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4643 60.142600 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2595166464, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 4643: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4644 60.142619 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2595166464, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 4644: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4645 60.142631 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2595166464, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 4645: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4646 60.142643 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2595166464, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 4646: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4647 60.142677 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4647: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 586601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4648 60.142718 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=588001 Win=65535 Len=0 Frame 4648: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 588001, Len: 0 No. Time Source Destination Protocol Length Info 4649 60.142774 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4649: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 588001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4650 60.142894 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4650: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 589401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4651 60.142936 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=590801 Win=65535 Len=0 Frame 4651: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 590801, Len: 0 No. Time Source Destination Protocol Length Info 4652 60.143022 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4652: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 590801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4653 60.160937 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4653: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 592201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4654 60.160985 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=593601 Win=65535 Len=0 Frame 4654: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 593601, Len: 0 No. Time Source Destination Protocol Length Info 4655 60.161015 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4655: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 593601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4656 60.161045 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4656: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 595001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4657 60.161083 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=596401 Win=65535 Len=0 Frame 4657: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 596401, Len: 0 No. Time Source Destination Protocol Length Info 4658 60.161118 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4658: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 596401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4659 60.161147 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4659: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 597801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4660 60.161183 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=599201 Win=65535 Len=0 Frame 4660: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 599201, Len: 0 No. Time Source Destination Protocol Length Info 4661 60.161212 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4661: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 599201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4662 60.161243 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4662: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 600601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4663 60.161280 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=602001 Win=65535 Len=0 Frame 4663: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 602001, Len: 0 No. Time Source Destination Protocol Length Info 4664 60.161309 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4664: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 602001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4665 60.161342 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4665: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 603401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4666 60.161379 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=604801 Win=65535 Len=0 Frame 4666: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 604801, Len: 0 No. Time Source Destination Protocol Length Info 4667 60.161408 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4667: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 604801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4668 60.161440 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4668: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 606201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4669 60.161479 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=607601 Win=65535 Len=0 Frame 4669: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 607601, Len: 0 No. Time Source Destination Protocol Length Info 4670 60.161573 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4670: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 607601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4671 60.163327 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 169345280, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 4671: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4672 60.163346 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 169345280, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 4672: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4673 60.163359 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 169345280, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 4673: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4674 60.163371 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 169345280, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 4674: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 4675 60.178658 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4675: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 609001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4676 60.178710 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=610401 Win=65535 Len=0 Frame 4676: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 610401, Len: 0 No. Time Source Destination Protocol Length Info 4677 60.178740 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4677: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 610401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4678 60.178773 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4678: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 611801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4679 60.178810 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=613201 Win=65535 Len=0 Frame 4679: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 613201, Len: 0 No. Time Source Destination Protocol Length Info 4680 60.178844 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4680: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 613201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4681 60.179091 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4681: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 614601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4682 60.179132 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=616001 Win=65535 Len=0 Frame 4682: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 616001, Len: 0 No. Time Source Destination Protocol Length Info 4683 60.179162 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4683: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 616001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4684 60.179320 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4684: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 617401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4685 60.179359 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=618801 Win=65535 Len=0 Frame 4685: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 618801, Len: 0 No. Time Source Destination Protocol Length Info 4686 60.179418 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4686: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 618801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4687 60.179590 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4687: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 620201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4688 60.179630 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=621601 Win=65535 Len=0 Frame 4688: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 621601, Len: 0 No. Time Source Destination Protocol Length Info 4689 60.179720 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4689: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 621601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4690 60.179826 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4690: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 623001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4691 60.179865 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=624401 Win=65535 Len=0 Frame 4691: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 624401, Len: 0 No. Time Source Destination Protocol Length Info 4692 60.179963 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4692: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 624401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4693 60.196924 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4693: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 625801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4694 60.196983 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=627201 Win=65535 Len=0 Frame 4694: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 627201, Len: 0 No. Time Source Destination Protocol Length Info 4695 60.197070 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4695: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 627201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4696 60.197211 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4696: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 628601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4697 60.197258 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=630001 Win=65535 Len=0 Frame 4697: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 630001, Len: 0 No. Time Source Destination Protocol Length Info 4698 60.197291 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4698: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 630001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4699 60.197396 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4699: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 631401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4700 60.197444 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=632801 Win=65535 Len=0 Frame 4700: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 632801, Len: 0 No. Time Source Destination Protocol Length Info 4701 60.197578 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4701: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 632801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4702 60.198257 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4702: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 634201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4703 60.198305 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=635601 Win=65535 Len=0 Frame 4703: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 635601, Len: 0 No. Time Source Destination Protocol Length Info 4704 60.198338 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4704: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 635601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4705 60.198370 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4705: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 637001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4706 60.198409 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=638401 Win=65535 Len=0 Frame 4706: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 638401, Len: 0 No. Time Source Destination Protocol Length Info 4707 60.198550 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4707: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 638401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4708 60.198585 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4708: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 639801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4709 60.198629 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=641201 Win=65535 Len=0 Frame 4709: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 641201, Len: 0 No. Time Source Destination Protocol Length Info 4710 60.209178 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 4710: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4711 60.209209 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 4711: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4712 60.214724 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4712: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 641201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4713 60.214759 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4713: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 642601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4714 60.214811 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=644001 Win=65535 Len=0 Frame 4714: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 644001, Len: 0 No. Time Source Destination Protocol Length Info 4715 60.214841 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4715: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 644001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4716 60.215629 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4716: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 645401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4717 60.215672 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=646801 Win=65535 Len=0 Frame 4717: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 646801, Len: 0 No. Time Source Destination Protocol Length Info 4718 60.215701 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4718: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 646801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4719 60.215730 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4719: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 648201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4720 60.215769 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=649601 Win=65535 Len=0 Frame 4720: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 649601, Len: 0 No. Time Source Destination Protocol Length Info 4721 60.215800 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4721: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 649601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4722 60.215863 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4722: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 651001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4723 60.215902 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=652401 Win=65535 Len=0 Frame 4723: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 652401, Len: 0 No. Time Source Destination Protocol Length Info 4724 60.216630 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4724: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 652401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4725 60.216664 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4725: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 653801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4726 60.216713 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=655201 Win=65535 Len=0 Frame 4726: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 655201, Len: 0 No. Time Source Destination Protocol Length Info 4727 60.216748 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4727: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 655201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4728 60.216778 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4728: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 656601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4729 60.216817 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=658001 Win=65535 Len=0 Frame 4729: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 658001, Len: 0 No. Time Source Destination Protocol Length Info 4730 60.216905 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4730: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 658001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4731 60.232952 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4731: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 659401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4732 60.233002 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=660801 Win=65535 Len=0 Frame 4732: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 660801, Len: 0 No. Time Source Destination Protocol Length Info 4733 60.233036 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4733: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 660801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4734 60.233926 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4734: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 662201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4735 60.233976 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=663601 Win=65535 Len=0 Frame 4735: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 663601, Len: 0 No. Time Source Destination Protocol Length Info 4736 60.234008 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4736: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 663601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4737 60.234095 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4737: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 665001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4738 60.234186 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=666401 Win=65535 Len=0 Frame 4738: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 666401, Len: 0 No. Time Source Destination Protocol Length Info 4739 60.234223 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4739: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 666401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4740 60.234385 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4740: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 667801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4741 60.234434 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=669201 Win=65535 Len=0 Frame 4741: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 669201, Len: 0 No. Time Source Destination Protocol Length Info 4742 60.234470 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4742: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 669201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4743 60.234573 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4743: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 670601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4744 60.234618 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=672001 Win=65535 Len=0 Frame 4744: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 672001, Len: 0 No. Time Source Destination Protocol Length Info 4745 60.234691 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4745: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 672001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4746 60.234795 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4746: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 673401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4747 60.234836 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=674801 Win=65535 Len=0 Frame 4747: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 674801, Len: 0 No. Time Source Destination Protocol Length Info 4748 60.234933 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4748: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 674801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4749 60.235023 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4749: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 676201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4750 60.235263 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=677601 Win=65535 Len=0 Frame 4750: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 677601, Len: 0 No. Time Source Destination Protocol Length Info 4751 60.235293 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4751: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 677601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4752 60.235325 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4752: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 679001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4753 60.235362 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=680401 Win=65535 Len=0 Frame 4753: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 680401, Len: 0 No. Time Source Destination Protocol Length Info 4754 60.252776 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4754: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 680401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4755 60.252811 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4755: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 681801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4756 60.252858 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=683201 Win=65535 Len=0 Frame 4756: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 683201, Len: 0 No. Time Source Destination Protocol Length Info 4757 60.252888 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4757: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 683201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4758 60.252918 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4758: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 684601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4759 60.252958 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=686001 Win=65535 Len=0 Frame 4759: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 686001, Len: 0 No. Time Source Destination Protocol Length Info 4760 60.252993 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4760: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 686001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4761 60.253024 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4761: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 687401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4762 60.253063 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=688801 Win=65535 Len=0 Frame 4762: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 688801, Len: 0 No. Time Source Destination Protocol Length Info 4763 60.253092 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4763: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 688801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4764 60.253122 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4764: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 690201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4765 60.253160 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=691601 Win=65535 Len=0 Frame 4765: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 691601, Len: 0 No. Time Source Destination Protocol Length Info 4766 60.253193 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4766: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 691601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4767 60.253223 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4767: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 693001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4768 60.253262 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=694401 Win=65535 Len=0 Frame 4768: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 694401, Len: 0 No. Time Source Destination Protocol Length Info 4769 60.253308 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4769: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 694401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4770 60.265422 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.186? Tell 192.168.10.226 Frame 4770: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4771 60.265454 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.186? Tell 192.168.10.226 Frame 4771: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4772 60.265469 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 4772: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4773 60.265479 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 4773: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4774 60.265489 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 4774: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4775 60.265499 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 4775: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4776 60.265510 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 4776: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4777 60.265527 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 4777: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4778 60.265538 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 4778: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4779 60.265548 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 4779: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4780 60.265656 192.168.10.46 192.168.10.245 Syslog 214 LOCAL4.WARNING: Oct 03 2011 19:16:00 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n Frame 4780: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:16:00 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n No. Time Source Destination Protocol Length Info 4781 60.265668 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 4781: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4782 60.265684 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 4782: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4783 60.265717 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 4783: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4784 60.265726 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 4784: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4785 60.265749 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 4785: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4786 60.265760 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 4786: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4787 60.265770 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 4787: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4788 60.265781 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 4788: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4789 60.265791 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 4789: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4790 60.265801 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 4790: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4791 60.265811 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 4791: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4792 60.265821 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 4792: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4793 60.265832 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 4793: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4794 60.265842 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 4794: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4795 60.265852 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 4795: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4796 60.265862 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 4796: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4797 60.265872 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 4797: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4798 60.265882 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 4798: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4799 60.265892 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 4799: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4800 60.265903 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 4800: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4801 60.265913 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 4801: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4802 60.265923 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 4802: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4803 60.265933 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 4803: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4804 60.265943 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 4804: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4805 60.265953 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 4805: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4806 60.265964 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 4806: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4807 60.265974 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 4807: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4808 60.265995 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 4808: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4809 60.266005 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 4809: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4810 60.266016 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 4810: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4811 60.266031 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 4811: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4812 60.266044 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 4812: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4813 60.266057 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 4813: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4814 60.266071 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 4814: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4815 60.266081 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 4815: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4816 60.266092 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 4816: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4817 60.266102 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 4817: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4818 60.266112 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 4818: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4819 60.270473 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4819: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 695801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4820 60.270524 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=697201 Win=65535 Len=0 Frame 4820: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 697201, Len: 0 No. Time Source Destination Protocol Length Info 4821 60.270553 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4821: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 697201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4822 60.270584 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4822: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 698601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4823 60.270629 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=700001 Win=65535 Len=0 Frame 4823: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 700001, Len: 0 No. Time Source Destination Protocol Length Info 4824 60.270674 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4824: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 700001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4825 60.270708 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4825: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 701401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4826 60.270752 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=702801 Win=65535 Len=0 Frame 4826: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 702801, Len: 0 No. Time Source Destination Protocol Length Info 4827 60.270785 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4827: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 702801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4828 60.270877 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4828: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 704201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4829 60.270921 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=705601 Win=65535 Len=0 Frame 4829: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 705601, Len: 0 No. Time Source Destination Protocol Length Info 4830 60.271020 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4830: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 705601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4831 60.271109 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4831: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 707001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4832 60.271149 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=708401 Win=65535 Len=0 Frame 4832: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 708401, Len: 0 No. Time Source Destination Protocol Length Info 4833 60.271233 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4833: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 708401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4834 60.271337 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4834: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 709801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4835 60.271423 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=711201 Win=65535 Len=0 Frame 4835: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 711201, Len: 0 No. Time Source Destination Protocol Length Info 4836 60.271456 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4836: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 711201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4837 60.288742 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4837: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 712601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4838 60.288806 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=714001 Win=65535 Len=0 Frame 4838: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 714001, Len: 0 No. Time Source Destination Protocol Length Info 4839 60.288836 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4839: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 714001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4840 60.288892 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4840: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 715401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4841 60.288974 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=716801 Win=65535 Len=0 Frame 4841: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 716801, Len: 0 No. Time Source Destination Protocol Length Info 4842 60.289052 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4842: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 716801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4843 60.289184 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4843: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 718201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4844 60.289225 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=719601 Win=65535 Len=0 Frame 4844: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 719601, Len: 0 No. Time Source Destination Protocol Length Info 4845 60.289257 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4845: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 719601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4846 60.289369 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4846: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 721001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4847 60.289430 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=722401 Win=65535 Len=0 Frame 4847: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 722401, Len: 0 No. Time Source Destination Protocol Length Info 4848 60.289517 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4848: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 722401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4849 60.289642 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4849: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 723801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4850 60.289681 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=725201 Win=65535 Len=0 Frame 4850: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 725201, Len: 0 No. Time Source Destination Protocol Length Info 4851 60.289930 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4851: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 725201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4852 60.289966 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4852: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 726601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4853 60.290008 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=728001 Win=65535 Len=0 Frame 4853: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 728001, Len: 0 No. Time Source Destination Protocol Length Info 4854 60.290042 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4854: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 728001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4855 60.290100 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4855: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 729401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4856 60.290146 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=730801 Win=65535 Len=0 Frame 4856: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 730801, Len: 0 No. Time Source Destination Protocol Length Info 4857 60.290202 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4857: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 730801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4858 60.290307 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4858: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 732201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4859 60.290388 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=733601 Win=65535 Len=0 Frame 4859: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 733601, Len: 0 No. Time Source Destination Protocol Length Info 4860 60.290469 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4860: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 733601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4861 60.290552 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4861: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 735001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4862 60.290596 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=736401 Win=65535 Len=0 Frame 4862: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 736401, Len: 0 No. Time Source Destination Protocol Length Info 4863 60.307496 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4863: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 736401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4864 60.307530 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4864: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 737801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4865 60.307577 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=739201 Win=65535 Len=0 Frame 4865: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 739201, Len: 0 No. Time Source Destination Protocol Length Info 4866 60.307607 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4866: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 739201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4867 60.307636 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4867: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 740601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4868 60.307674 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=742001 Win=65535 Len=0 Frame 4868: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 742001, Len: 0 No. Time Source Destination Protocol Length Info 4869 60.307707 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4869: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 742001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4870 60.307738 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4870: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 743401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4871 60.307776 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=744801 Win=65535 Len=0 Frame 4871: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 744801, Len: 0 No. Time Source Destination Protocol Length Info 4872 60.307910 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4872: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 744801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4873 60.308024 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4873: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 746201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4874 60.308086 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=747601 Win=65535 Len=0 Frame 4874: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 747601, Len: 0 No. Time Source Destination Protocol Length Info 4875 60.308173 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4875: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 747601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4876 60.308298 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4876: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 749001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4877 60.308341 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=750401 Win=65535 Len=0 Frame 4877: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 750401, Len: 0 No. Time Source Destination Protocol Length Info 4878 60.308383 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4878: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 750401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4879 60.308904 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4879: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 751801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4880 60.308943 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=753201 Win=65535 Len=0 Frame 4880: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 753201, Len: 0 No. Time Source Destination Protocol Length Info 4881 60.308973 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4881: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 753201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4882 60.309003 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4882: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 754601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4883 60.309039 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=756001 Win=65535 Len=0 Frame 4883: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 756001, Len: 0 No. Time Source Destination Protocol Length Info 4884 60.309071 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4884: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 756001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4885 60.309101 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4885: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 757401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4886 60.309138 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=758801 Win=65535 Len=0 Frame 4886: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 758801, Len: 0 No. Time Source Destination Protocol Length Info 4887 60.309169 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4887: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 758801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4888 60.309200 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4888: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 760201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4889 60.309253 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=761601 Win=65535 Len=0 Frame 4889: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 761601, Len: 0 No. Time Source Destination Protocol Length Info 4890 60.344986 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4890: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 761601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4891 60.345022 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4891: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 763001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4892 60.345052 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4892: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 764401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4893 60.345081 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4893: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 765801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4894 60.345110 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4894: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 767201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4895 60.345194 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=764401 Win=65535 Len=0 Frame 4895: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 764401, Len: 0 No. Time Source Destination Protocol Length Info 4896 60.345234 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4896: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 768601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4897 60.345267 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4897: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 770001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4898 60.345308 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=767201 Win=65535 Len=0 Frame 4898: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 767201, Len: 0 No. Time Source Destination Protocol Length Info 4899 60.345339 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4899: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 771401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4900 60.345369 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4900: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 772801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4901 60.345409 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4901: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 774201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4902 60.345447 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=770001 Win=65535 Len=0 Frame 4902: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 770001, Len: 0 No. Time Source Destination Protocol Length Info 4903 60.345476 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4903: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 775601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4904 60.345505 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4904: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 777001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4905 60.345542 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=772801 Win=65535 Len=0 Frame 4905: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 772801, Len: 0 No. Time Source Destination Protocol Length Info 4906 60.345570 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4906: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 778401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4907 60.345607 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=775601 Win=65535 Len=0 Frame 4907: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 775601, Len: 0 No. Time Source Destination Protocol Length Info 4908 60.345636 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4908: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 779801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4909 60.345666 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4909: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 781201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4910 60.345702 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=778401 Win=65535 Len=0 Frame 4910: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 778401, Len: 0 No. Time Source Destination Protocol Length Info 4911 60.345731 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4911: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 782601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4912 60.345761 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4912: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 784001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4913 60.345790 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4913: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 785401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4914 60.345820 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4914: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 786801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4915 60.345856 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=782601 Win=65535 Len=0 Frame 4915: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 782601, Len: 0 No. Time Source Destination Protocol Length Info 4916 60.345885 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4916: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 788201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4917 60.345915 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4917: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 789601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4918 60.345950 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=785401 Win=65535 Len=0 Frame 4918: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 785401, Len: 0 No. Time Source Destination Protocol Length Info 4919 60.345987 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4919: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 791001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4920 60.346016 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4920: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 792401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4921 60.346052 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=788201 Win=65535 Len=0 Frame 4921: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 788201, Len: 0 No. Time Source Destination Protocol Length Info 4922 60.346081 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4922: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 793801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4923 60.346117 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=791001 Win=65535 Len=0 Frame 4923: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 791001, Len: 0 No. Time Source Destination Protocol Length Info 4924 60.346146 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4924: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 795201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4925 60.346176 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4925: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 796601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4926 60.346212 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=793801 Win=62735 Len=0 Frame 4926: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 793801, Len: 0 No. Time Source Destination Protocol Length Info 4927 60.346242 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4927: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 798001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4928 60.346278 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=796601 Win=59935 Len=0 Frame 4928: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 796601, Len: 0 No. Time Source Destination Protocol Length Info 4929 60.346313 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=798001 Win=62295 Len=0 Frame 4929: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 798001, Len: 0 No. Time Source Destination Protocol Length Info 4930 60.346348 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=798001 Win=65535 Len=0 Frame 4930: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 798001, Len: 0 No. Time Source Destination Protocol Length Info 4931 60.346385 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4931: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 799401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4932 60.346421 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=800801 Win=65535 Len=0 Frame 4932: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 800801, Len: 0 No. Time Source Destination Protocol Length Info 4933 60.346450 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4933: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 800801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4934 60.351406 123.18.166.30 192.168.10.207 SMTP 72 C: EHLO ohhdfhn.com Frame 4934: 72 bytes on wire (576 bits), 72 bytes captured (576 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 123.18.166.30 (123.18.166.30), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 28379 (28379), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 18 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4935 60.351727 192.168.10.207 123.18.166.30 SMTP 244 S: 250-mail.mydomain.com Hello [123.18.166.30] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 4935: 244 bytes on wire (1952 bits), 244 bytes captured (1952 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 123.18.166.30 (123.18.166.30) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 28379 (28379), Seq: 122, Ack: 19, Len: 190 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 4936 60.351773 123.18.166.30 192.168.10.207 TCP 60 28379 > smtp [ACK] Seq=19 Ack=312 Win=93128 Len=0 Frame 4936: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 123.18.166.30 (123.18.166.30), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 28379 (28379), Dst Port: smtp (25), Seq: 19, Ack: 312, Len: 0 No. Time Source Destination Protocol Length Info 4937 60.352226 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:45:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 28379 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 4937: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 28379 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" No. Time Source Destination Protocol Length Info 4938 60.352311 192.168.10.1 192.168.10.245 Syslog 277 LOCAL1.INFO: Oct 3 19:45:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 28379 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 4938: 277 bytes on wire (2216 bits), 277 bytes captured (2216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 28379 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPEL No. Time Source Destination Protocol Length Info 4939 60.352384 192.168.10.1 192.168.10.245 Syslog 270 LOCAL1.INFO: Oct 3 19:45:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 28379 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 4939: 270 bytes on wire (2160 bits), 270 bytes captured (2160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 28379 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 4940 60.352463 192.168.10.1 192.168.10.245 Syslog 286 LOCAL1.INFO: Oct 3 19:45:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 28379 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 4940: 286 bytes on wire (2288 bits), 286 bytes captured (2288 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 28379 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHAN No. Time Source Destination Protocol Length Info 4941 60.352537 192.168.10.1 192.168.10.245 Syslog 277 LOCAL1.INFO: Oct 3 19:45:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 28379 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 4941: 277 bytes on wire (2216 bits), 277 bytes captured (2216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 28379 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINAR No. Time Source Destination Protocol Length Info 4942 60.352645 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:45:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 28379 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 4942: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 28379 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" No. Time Source Destination Protocol Length Info 4943 60.353168 Watchgua_3c:4c:d8 SunrichT_19:cf:97 ARP 60 Who has 192.168.10.245? Tell 192.168.10.1 Frame 4943: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4944 60.353180 SunrichT_19:cf:97 Watchgua_3c:4c:d8 ARP 60 192.168.10.245 is at 00:0a:cd:19:cf:97 Frame 4944: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:97 (00:0a:cd:19:cf:97), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 4945 60.360443 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 4945: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4946 60.360473 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 4946: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 4947 60.361903 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4947: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 802201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4948 60.361953 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=803601 Win=65535 Len=0 Frame 4948: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 803601, Len: 0 No. Time Source Destination Protocol Length Info 4949 60.361982 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4949: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 803601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4950 60.362899 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4950: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 805001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4951 60.362946 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=806401 Win=65535 Len=0 Frame 4951: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 806401, Len: 0 No. Time Source Destination Protocol Length Info 4952 60.362985 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4952: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 806401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4953 60.363086 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4953: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 807801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4954 60.363129 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=809201 Win=65535 Len=0 Frame 4954: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 809201, Len: 0 No. Time Source Destination Protocol Length Info 4955 60.363358 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4955: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 809201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4956 60.379784 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4956: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 810601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4957 60.379844 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=812001 Win=65535 Len=0 Frame 4957: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 812001, Len: 0 No. Time Source Destination Protocol Length Info 4958 60.379915 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4958: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 812001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4959 60.380636 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4959: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 813401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4960 60.380688 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=814801 Win=65535 Len=0 Frame 4960: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 814801, Len: 0 No. Time Source Destination Protocol Length Info 4961 60.380720 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4961: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 814801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4962 60.380823 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4962: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 816201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4963 60.380922 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=817601 Win=65535 Len=0 Frame 4963: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 817601, Len: 0 No. Time Source Destination Protocol Length Info 4964 60.380956 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4964: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 817601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4965 60.381094 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4965: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 819001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4966 60.381136 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=820401 Win=65535 Len=0 Frame 4966: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 820401, Len: 0 No. Time Source Destination Protocol Length Info 4967 60.381218 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4967: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 820401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4968 60.381310 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4968: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 821801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4969 60.381350 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=823201 Win=65535 Len=0 Frame 4969: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 823201, Len: 0 No. Time Source Destination Protocol Length Info 4970 60.381441 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4970: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 823201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4971 60.381754 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4971: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 824601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4972 60.381800 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=826001 Win=65535 Len=0 Frame 4972: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 826001, Len: 0 No. Time Source Destination Protocol Length Info 4973 60.381832 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4973: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 826001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4974 60.381866 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4974: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 827401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4975 60.381903 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=828801 Win=65535 Len=0 Frame 4975: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 828801, Len: 0 No. Time Source Destination Protocol Length Info 4976 60.398999 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4976: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 828801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4977 60.399052 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4977: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 830201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4978 60.399152 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=831601 Win=65535 Len=0 Frame 4978: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 831601, Len: 0 No. Time Source Destination Protocol Length Info 4979 60.399348 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4979: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 831601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4980 60.399378 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4980: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 833001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4981 60.399420 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=834401 Win=65535 Len=0 Frame 4981: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 834401, Len: 0 No. Time Source Destination Protocol Length Info 4982 60.399617 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4982: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 834401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4983 60.399696 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4983: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 835801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4984 60.399783 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=837201 Win=65535 Len=0 Frame 4984: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 837201, Len: 0 No. Time Source Destination Protocol Length Info 4985 60.399854 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4985: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 837201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4986 60.399940 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4986: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 838601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4987 60.399981 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=840001 Win=65535 Len=0 Frame 4987: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 840001, Len: 0 No. Time Source Destination Protocol Length Info 4988 60.417238 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4988: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 840001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4989 60.417296 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4989: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 841401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4990 60.417392 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=842801 Win=65535 Len=0 Frame 4990: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 842801, Len: 0 No. Time Source Destination Protocol Length Info 4991 60.417462 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4991: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 842801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4992 60.417533 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4992: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 844201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4993 60.417613 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=845601 Win=65535 Len=0 Frame 4993: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 845601, Len: 0 No. Time Source Destination Protocol Length Info 4994 60.417705 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4994: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 845601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4995 60.417766 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4995: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 847001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4996 60.417851 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=848401 Win=65535 Len=0 Frame 4996: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 848401, Len: 0 No. Time Source Destination Protocol Length Info 4997 60.417944 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4997: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 848401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4998 60.418005 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 4998: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 849801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 4999 60.418093 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=851201 Win=65535 Len=0 Frame 4999: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 851201, Len: 0 No. Time Source Destination Protocol Length Info 5000 60.435300 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5000: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 851201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5001 60.435365 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5001: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 852601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5002 60.435415 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=854001 Win=65535 Len=0 Frame 5002: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 854001, Len: 0 No. Time Source Destination Protocol Length Info 5003 60.435503 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5003: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 854001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5004 60.435631 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5004: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 855401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5005 60.435673 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=856801 Win=65535 Len=0 Frame 5005: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 856801, Len: 0 No. Time Source Destination Protocol Length Info 5006 60.435726 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5006: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 856801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5007 60.435834 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5007: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 858201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5008 60.435922 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=859601 Win=65535 Len=0 Frame 5008: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 859601, Len: 0 No. Time Source Destination Protocol Length Info 5009 60.436003 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5009: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 859601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5010 60.436067 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5010: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 861001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5011 60.436154 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=862401 Win=65535 Len=0 Frame 5011: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 862401, Len: 0 No. Time Source Destination Protocol Length Info 5012 60.436243 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5012: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 862401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5013 60.453602 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5013: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 863801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5014 60.453657 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=865201 Win=65535 Len=0 Frame 5014: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 865201, Len: 0 No. Time Source Destination Protocol Length Info 5015 60.453690 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5015: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 865201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5016 60.453750 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5016: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 866601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5017 60.454018 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=868001 Win=65535 Len=0 Frame 5017: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 868001, Len: 0 No. Time Source Destination Protocol Length Info 5018 60.454048 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5018: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 868001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5019 60.454081 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5019: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 869401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5020 60.454118 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=870801 Win=65535 Len=0 Frame 5020: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 870801, Len: 0 No. Time Source Destination Protocol Length Info 5021 60.454149 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5021: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 870801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5022 60.454225 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5022: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 872201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5023 60.454265 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=873601 Win=65535 Len=0 Frame 5023: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 873601, Len: 0 No. Time Source Destination Protocol Length Info 5024 60.454349 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5024: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 873601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5025 60.454455 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5025: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 875001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5026 60.454503 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=876401 Win=65535 Len=0 Frame 5026: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 876401, Len: 0 No. Time Source Destination Protocol Length Info 5027 60.454589 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5027: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 876401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5028 60.454696 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5028: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 877801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5029 60.454794 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=879201 Win=65535 Len=0 Frame 5029: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 879201, Len: 0 No. Time Source Destination Protocol Length Info 5030 60.454864 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5030: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 879201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5031 60.454926 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5031: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 880601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5032 60.455012 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=882001 Win=65535 Len=0 Frame 5032: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 882001, Len: 0 No. Time Source Destination Protocol Length Info 5033 60.471843 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5033: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 882001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5034 60.471932 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5034: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 883401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5035 60.472027 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=884801 Win=65535 Len=0 Frame 5035: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 884801, Len: 0 No. Time Source Destination Protocol Length Info 5036 60.472095 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5036: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 884801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5037 60.472184 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5037: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 886201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5038 60.472225 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=887601 Win=65535 Len=0 Frame 5038: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 887601, Len: 0 No. Time Source Destination Protocol Length Info 5039 60.472310 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5039: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 887601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5040 60.472460 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5040: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 889001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5041 60.472501 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=890401 Win=65535 Len=0 Frame 5041: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 890401, Len: 0 No. Time Source Destination Protocol Length Info 5042 60.472555 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5042: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 890401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5043 60.472652 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5043: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 891801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5044 60.472743 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=893201 Win=65535 Len=0 Frame 5044: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 893201, Len: 0 No. Time Source Destination Protocol Length Info 5045 60.472820 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5045: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 893201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5046 60.472882 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5046: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 894601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5047 60.472967 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=896001 Win=65535 Len=0 Frame 5047: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 896001, Len: 0 No. Time Source Destination Protocol Length Info 5048 60.489881 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5048: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 896001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5049 60.489920 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5049: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 897401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5050 60.489989 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=898801 Win=65535 Len=0 Frame 5050: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 898801, Len: 0 No. Time Source Destination Protocol Length Info 5051 60.490050 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5051: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 898801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5052 60.490157 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5052: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 900201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5053 60.490202 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=901601 Win=65535 Len=0 Frame 5053: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 901601, Len: 0 No. Time Source Destination Protocol Length Info 5054 60.490289 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5054: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 901601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5055 60.490393 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5055: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 903001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5056 60.490476 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=904401 Win=65535 Len=0 Frame 5056: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 904401, Len: 0 No. Time Source Destination Protocol Length Info 5057 60.490557 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5057: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 904401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5058 60.490641 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5058: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 905801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5059 60.490681 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=907201 Win=65535 Len=0 Frame 5059: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 907201, Len: 0 No. Time Source Destination Protocol Length Info 5060 60.490768 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5060: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 907201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5061 60.490897 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5061: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 908601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5062 60.490958 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=910001 Win=65535 Len=0 Frame 5062: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 910001, Len: 0 No. Time Source Destination Protocol Length Info 5063 60.490991 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5063: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 910001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5064 60.507782 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5064: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 911401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5065 60.507834 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=912801 Win=65535 Len=0 Frame 5065: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 912801, Len: 0 No. Time Source Destination Protocol Length Info 5066 60.507866 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5066: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 912801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5067 60.507952 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5067: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 914201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5068 60.508039 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=915601 Win=65535 Len=0 Frame 5068: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 915601, Len: 0 No. Time Source Destination Protocol Length Info 5069 60.508115 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5069: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 915601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5070 60.508339 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5070: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 917001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5071 60.508383 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=918401 Win=65535 Len=0 Frame 5071: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 918401, Len: 0 No. Time Source Destination Protocol Length Info 5072 60.508423 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5072: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 918401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5073 60.508578 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5073: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 919801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5074 60.508617 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=921201 Win=65535 Len=0 Frame 5074: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 921201, Len: 0 No. Time Source Destination Protocol Length Info 5075 60.508669 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5075: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 921201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5076 60.508768 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5076: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 922601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5077 60.508854 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=924001 Win=65535 Len=0 Frame 5077: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 924001, Len: 0 No. Time Source Destination Protocol Length Info 5078 60.508935 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5078: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 924001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5079 60.509021 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5079: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 925401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5080 60.509070 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=926801 Win=65535 Len=0 Frame 5080: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 926801, Len: 0 No. Time Source Destination Protocol Length Info 5081 60.509175 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5081: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 926801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5082 60.509256 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5082: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 928201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5083 60.509296 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=929601 Win=65535 Len=0 Frame 5083: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 929601, Len: 0 No. Time Source Destination Protocol Length Info 5084 60.509389 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5084: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 929601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5085 60.526013 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5085: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 931001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5086 60.526077 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=932401 Win=65535 Len=0 Frame 5086: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 932401, Len: 0 No. Time Source Destination Protocol Length Info 5087 60.526258 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5087: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 932401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5088 60.526306 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5088: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 933801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5089 60.526350 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=935201 Win=65535 Len=0 Frame 5089: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 935201, Len: 0 No. Time Source Destination Protocol Length Info 5090 60.526438 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5090: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 935201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5091 60.526540 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5091: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 936601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5092 60.526584 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=938001 Win=65535 Len=0 Frame 5092: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 938001, Len: 0 No. Time Source Destination Protocol Length Info 5093 60.526671 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5093: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 938001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5094 60.526765 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5094: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 939401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5095 60.526834 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=940801 Win=65535 Len=0 Frame 5095: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 940801, Len: 0 No. Time Source Destination Protocol Length Info 5096 60.527083 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5096: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 940801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5097 60.527163 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5097: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 942201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5098 60.527250 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=943601 Win=65535 Len=0 Frame 5098: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 943601, Len: 0 No. Time Source Destination Protocol Length Info 5099 60.527330 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5099: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 943601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5100 60.527402 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5100: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 945001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5101 60.527486 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=946401 Win=65535 Len=0 Frame 5101: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 946401, Len: 0 No. Time Source Destination Protocol Length Info 5102 60.527566 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5102: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 946401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5103 60.527629 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5103: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 947801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5104 60.527688 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=949201 Win=65535 Len=0 Frame 5104: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 949201, Len: 0 No. Time Source Destination Protocol Length Info 5105 60.527778 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5105: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 949201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5106 60.544198 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5106: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 950601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5107 60.544264 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=952001 Win=65535 Len=0 Frame 5107: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 952001, Len: 0 No. Time Source Destination Protocol Length Info 5108 60.544310 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5108: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 952001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5109 60.544344 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5109: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 953401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5110 60.544387 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=954801 Win=65535 Len=0 Frame 5110: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 954801, Len: 0 No. Time Source Destination Protocol Length Info 5111 60.544628 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5111: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 954801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5112 60.544705 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5112: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 956201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5113 60.544750 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=957601 Win=65535 Len=0 Frame 5113: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 957601, Len: 0 No. Time Source Destination Protocol Length Info 5114 60.544842 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5114: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 957601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5115 60.544980 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5115: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 959001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5116 60.545024 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=960401 Win=65535 Len=0 Frame 5116: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 960401, Len: 0 No. Time Source Destination Protocol Length Info 5117 60.545100 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5117: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 960401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5118 60.545185 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5118: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 961801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5119 60.545226 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=963201 Win=65535 Len=0 Frame 5119: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 963201, Len: 0 No. Time Source Destination Protocol Length Info 5120 60.545439 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5120: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 963201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5121 60.545509 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5121: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 964601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5122 60.545605 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=966001 Win=65535 Len=0 Frame 5122: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 966001, Len: 0 No. Time Source Destination Protocol Length Info 5123 60.545801 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5123: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 966001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5124 60.545833 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5124: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 967401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5125 60.545873 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=968801 Win=65535 Len=0 Frame 5125: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 968801, Len: 0 No. Time Source Destination Protocol Length Info 5126 60.545907 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5126: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 968801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5127 60.545994 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5127: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 970201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5128 60.546035 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=971601 Win=65535 Len=0 Frame 5128: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 971601, Len: 0 No. Time Source Destination Protocol Length Info 5129 60.562038 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5129: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 971601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5130 60.562062 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5130: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 973001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5131 60.562109 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=974401 Win=65535 Len=0 Frame 5131: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 974401, Len: 0 No. Time Source Destination Protocol Length Info 5132 60.562226 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5132: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 974401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5133 60.562728 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5133: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 975801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5134 60.562756 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=977201 Win=65535 Len=0 Frame 5134: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 977201, Len: 0 No. Time Source Destination Protocol Length Info 5135 60.562817 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5135: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 977201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5136 60.562964 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5136: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 978601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5137 60.562989 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=980001 Win=65535 Len=0 Frame 5137: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 980001, Len: 0 No. Time Source Destination Protocol Length Info 5138 60.563061 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5138: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 980001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5139 60.563316 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5139: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 981401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5140 60.563343 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=982801 Win=65535 Len=0 Frame 5140: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 982801, Len: 0 No. Time Source Destination Protocol Length Info 5141 60.563361 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5141: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 982801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5142 60.563549 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5142: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 984201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5143 60.563600 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=985601 Win=65535 Len=0 Frame 5143: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 985601, Len: 0 No. Time Source Destination Protocol Length Info 5144 60.563708 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5144: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 985601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5145 60.563781 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5145: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 987001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5146 60.563839 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=988401 Win=65535 Len=0 Frame 5146: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 988401, Len: 0 No. Time Source Destination Protocol Length Info 5147 60.563909 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5147: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 988401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5148 60.564014 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5148: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 989801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5149 60.564079 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=991201 Win=65535 Len=0 Frame 5149: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 991201, Len: 0 No. Time Source Destination Protocol Length Info 5150 60.564137 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5150: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 991201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5151 60.564254 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5151: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 992601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5152 60.564289 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=994001 Win=65535 Len=0 Frame 5152: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 994001, Len: 0 No. Time Source Destination Protocol Length Info 5153 60.564422 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5153: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 994001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5154 60.564486 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5154: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 995401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5155 60.564532 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=996801 Win=65535 Len=0 Frame 5155: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 996801, Len: 0 No. Time Source Destination Protocol Length Info 5156 60.580725 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5156: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 996801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5157 60.580868 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5157: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 998201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5158 60.580909 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=999601 Win=65535 Len=0 Frame 5158: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 999601, Len: 0 No. Time Source Destination Protocol Length Info 5159 60.580957 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5159: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 999601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5160 60.581050 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5160: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1001001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5161 60.581095 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1002401 Win=65535 Len=0 Frame 5161: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1002401, Len: 0 No. Time Source Destination Protocol Length Info 5162 60.581178 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5162: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1002401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5163 60.581337 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5163: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1003801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5164 60.581377 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1005201 Win=65535 Len=0 Frame 5164: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1005201, Len: 0 No. Time Source Destination Protocol Length Info 5165 60.581840 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5165: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1005201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5166 60.581928 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5166: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1006601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5167 60.582012 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1008001 Win=65535 Len=0 Frame 5167: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1008001, Len: 0 No. Time Source Destination Protocol Length Info 5168 60.582085 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5168: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1008001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5169 60.582156 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5169: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1009401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5170 60.582204 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1010801 Win=65535 Len=0 Frame 5170: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1010801, Len: 0 No. Time Source Destination Protocol Length Info 5171 60.582281 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5171: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1010801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5172 60.582405 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5172: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1012201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5173 60.582462 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1013601 Win=65535 Len=0 Frame 5173: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1013601, Len: 0 No. Time Source Destination Protocol Length Info 5174 60.582527 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5174: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1013601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5175 60.582634 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5175: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1015001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5176 60.582710 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1016401 Win=65535 Len=0 Frame 5176: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1016401, Len: 0 No. Time Source Destination Protocol Length Info 5177 60.582901 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5177: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1016401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5178 60.582918 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5178: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1017801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5179 60.582941 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1019201 Win=65535 Len=0 Frame 5179: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1019201, Len: 0 No. Time Source Destination Protocol Length Info 5180 60.582981 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5180: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1019201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5181 60.583107 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5181: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1020601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5182 60.583162 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1022001 Win=65535 Len=0 Frame 5182: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1022001, Len: 0 No. Time Source Destination Protocol Length Info 5183 60.599122 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5183: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1022001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5184 60.599227 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5184: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1023401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5185 60.599321 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1024801 Win=65535 Len=0 Frame 5185: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1024801, Len: 0 No. Time Source Destination Protocol Length Info 5186 60.599393 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5186: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1024801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5187 60.599481 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5187: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1026201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5188 60.599521 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1027601 Win=65535 Len=0 Frame 5188: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1027601, Len: 0 No. Time Source Destination Protocol Length Info 5189 60.599604 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5189: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1027601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5190 60.599740 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5190: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1029001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5191 60.599777 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1030401 Win=65535 Len=0 Frame 5191: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1030401, Len: 0 No. Time Source Destination Protocol Length Info 5192 60.599835 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5192: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1030401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5193 60.600209 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5193: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1031801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5194 60.600249 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1033201 Win=65535 Len=0 Frame 5194: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1033201, Len: 0 No. Time Source Destination Protocol Length Info 5195 60.600335 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5195: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1033201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5196 60.600439 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5196: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1034601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5197 60.600486 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1036001 Win=65535 Len=0 Frame 5197: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1036001, Len: 0 No. Time Source Destination Protocol Length Info 5198 60.600573 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5198: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1036001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5199 60.600665 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5199: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1037401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5200 60.600729 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1038801 Win=65535 Len=0 Frame 5200: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1038801, Len: 0 No. Time Source Destination Protocol Length Info 5201 60.600815 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5201: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1038801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5202 60.600945 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5202: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1040201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5203 60.600985 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1041601 Win=65535 Len=0 Frame 5203: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1041601, Len: 0 No. Time Source Destination Protocol Length Info 5204 60.601072 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5204: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1041601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5205 60.617411 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5205: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1043001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5206 60.617498 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1044401 Win=65535 Len=0 Frame 5206: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1044401, Len: 0 No. Time Source Destination Protocol Length Info 5207 60.617529 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5207: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1044401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5208 60.617641 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5208: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1045801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5209 60.617680 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1047201 Win=65535 Len=0 Frame 5209: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1047201, Len: 0 No. Time Source Destination Protocol Length Info 5210 60.617770 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5210: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1047201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5211 60.617869 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5211: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1048601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5212 60.617982 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1050001 Win=65535 Len=0 Frame 5212: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1050001, Len: 0 No. Time Source Destination Protocol Length Info 5213 60.618029 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5213: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1050001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5214 60.618123 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5214: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1051401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5215 60.618205 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1052801 Win=65535 Len=0 Frame 5215: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1052801, Len: 0 No. Time Source Destination Protocol Length Info 5216 60.618236 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5216: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1052801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5217 60.618352 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5217: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1054201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5218 60.618402 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1055601 Win=65535 Len=0 Frame 5218: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1055601, Len: 0 No. Time Source Destination Protocol Length Info 5219 60.618490 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5219: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1055601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5220 60.618587 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5220: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1057001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5221 60.618628 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1058401 Win=65535 Len=0 Frame 5221: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1058401, Len: 0 No. Time Source Destination Protocol Length Info 5222 60.618709 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5222: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1058401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5223 60.619033 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5223: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1059801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5224 60.619073 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1061201 Win=65535 Len=0 Frame 5224: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1061201, Len: 0 No. Time Source Destination Protocol Length Info 5225 60.619104 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5225: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1061201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5226 60.619260 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5226: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1062601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5227 60.619297 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1064001 Win=65535 Len=0 Frame 5227: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1064001, Len: 0 No. Time Source Destination Protocol Length Info 5228 60.619359 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5228: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1064001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5229 60.619466 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5229: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1065401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5230 60.619506 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1066801 Win=65535 Len=0 Frame 5230: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1066801, Len: 0 No. Time Source Destination Protocol Length Info 5231 60.619579 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5231: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1066801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5232 60.619705 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5232: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1068201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5233 60.619755 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1069601 Win=65535 Len=0 Frame 5233: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1069601, Len: 0 No. Time Source Destination Protocol Length Info 5234 60.635722 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5234: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1069601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5235 60.635827 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5235: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1071001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5236 60.635911 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1072401 Win=65535 Len=0 Frame 5236: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1072401, Len: 0 No. Time Source Destination Protocol Length Info 5237 60.636328 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5237: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1072401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5238 60.636420 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5238: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1073801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5239 60.636491 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1075201 Win=65535 Len=0 Frame 5239: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1075201, Len: 0 No. Time Source Destination Protocol Length Info 5240 60.636574 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5240: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1075201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5241 60.636635 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5241: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1076601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5242 60.636699 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1078001 Win=65535 Len=0 Frame 5242: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1078001, Len: 0 No. Time Source Destination Protocol Length Info 5243 60.636785 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5243: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1078001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5244 60.636921 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5244: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1079401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5245 60.636960 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1080801 Win=65535 Len=0 Frame 5245: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1080801, Len: 0 No. Time Source Destination Protocol Length Info 5246 60.637045 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5246: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1080801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5247 60.637172 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5247: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1082201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5248 60.637213 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1083601 Win=65535 Len=0 Frame 5248: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1083601, Len: 0 No. Time Source Destination Protocol Length Info 5249 60.637249 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5249: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1083601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5250 60.637361 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5250: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1085001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5251 60.637424 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1086401 Win=65535 Len=0 Frame 5251: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1086401, Len: 0 No. Time Source Destination Protocol Length Info 5252 60.637615 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5252: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1086401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5253 60.637645 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5253: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1087801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5254 60.637684 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1089201 Win=65535 Len=0 Frame 5254: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1089201, Len: 0 No. Time Source Destination Protocol Length Info 5255 60.637736 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5255: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1089201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5256 60.637867 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5256: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1090601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5257 60.637908 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1092001 Win=65535 Len=0 Frame 5257: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1092001, Len: 0 No. Time Source Destination Protocol Length Info 5258 60.637983 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5258: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1092001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5259 60.638055 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5259: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1093401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5260 60.638111 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1094801 Win=65535 Len=0 Frame 5260: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1094801, Len: 0 No. Time Source Destination Protocol Length Info 5261 60.638180 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5261: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1094801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5262 60.638286 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5262: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1096201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5263 60.638343 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1097601 Win=65535 Len=0 Frame 5263: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1097601, Len: 0 No. Time Source Destination Protocol Length Info 5264 60.638454 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5264: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1097601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5265 60.650180 123.18.166.30 192.168.10.207 SMTP 100 C: MAIL FROM: <maya.donovan@xxxxxxxxxxxxxxxxxx> Frame 5265: 100 bytes on wire (800 bits), 100 bytes captured (800 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 123.18.166.30 (123.18.166.30), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 28379 (28379), Dst Port: smtp (25), Seq: 19, Ack: 312, Len: 46 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 5266 60.650745 192.168.10.207 123.18.166.30 SMTP 110 S: 250 2.1.0 [email protected] OK Frame 5266: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 123.18.166.30 (123.18.166.30) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 28379 (28379), Seq: 312, Ack: 65, Len: 56 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 5267 60.650813 123.18.166.30 192.168.10.207 TCP 60 28379 > smtp [ACK] Seq=65 Ack=368 Win=93072 Len=0 Frame 5267: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 123.18.166.30 (123.18.166.30), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 28379 (28379), Dst Port: smtp (25), Seq: 65, Ack: 368, Len: 0 No. Time Source Destination Protocol Length Info 5268 60.654641 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5268: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1099001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5269 60.654686 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1100401 Win=65535 Len=0 Frame 5269: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1100401, Len: 0 No. Time Source Destination Protocol Length Info 5270 60.654718 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5270: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1100401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5271 60.654862 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5271: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1101801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5272 60.654903 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1103201 Win=65535 Len=0 Frame 5272: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1103201, Len: 0 No. Time Source Destination Protocol Length Info 5273 60.655002 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5273: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1103201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5274 60.655195 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5274: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1104601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5275 60.655233 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1106001 Win=65535 Len=0 Frame 5275: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1106001, Len: 0 No. Time Source Destination Protocol Length Info 5276 60.655264 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5276: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1106001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5277 60.655321 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5277: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1107401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5278 60.655361 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1108801 Win=65535 Len=0 Frame 5278: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1108801, Len: 0 No. Time Source Destination Protocol Length Info 5279 60.655901 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5279: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1108801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5280 60.655983 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5280: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1110201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5281 60.656023 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1111601 Win=65535 Len=0 Frame 5281: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1111601, Len: 0 No. Time Source Destination Protocol Length Info 5282 60.656109 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5282: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1111601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5283 60.656246 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5283: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1113001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5284 60.656285 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1114401 Win=65535 Len=0 Frame 5284: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1114401, Len: 0 No. Time Source Destination Protocol Length Info 5285 60.656370 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5285: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1114401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5286 60.656443 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5286: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1115801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5287 60.656528 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1117201 Win=65535 Len=0 Frame 5287: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1117201, Len: 0 No. Time Source Destination Protocol Length Info 5288 60.656610 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5288: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1117201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5289 60.656675 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5289: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1118601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5290 60.656719 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1120001 Win=65535 Len=0 Frame 5290: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1120001, Len: 0 No. Time Source Destination Protocol Length Info 5291 60.672504 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5291: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1120001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5292 60.672608 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5292: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1121401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5293 60.672670 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1122801 Win=65535 Len=0 Frame 5293: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1122801, Len: 0 No. Time Source Destination Protocol Length Info 5294 60.672745 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5294: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1122801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5295 60.672851 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5295: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1124201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5296 60.672936 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1125601 Win=65535 Len=0 Frame 5296: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1125601, Len: 0 No. Time Source Destination Protocol Length Info 5297 60.672967 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5297: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1125601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5298 60.673086 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5298: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1127001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5299 60.673127 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1128401 Win=65535 Len=0 Frame 5299: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1128401, Len: 0 No. Time Source Destination Protocol Length Info 5300 60.673214 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5300: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1128401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5301 60.673322 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5301: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1129801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5302 60.673393 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1131201 Win=65535 Len=0 Frame 5302: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1131201, Len: 0 No. Time Source Destination Protocol Length Info 5303 60.673453 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5303: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1131201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5304 60.673588 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5304: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1132601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5305 60.673628 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1134001 Win=65535 Len=0 Frame 5305: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1134001, Len: 0 No. Time Source Destination Protocol Length Info 5306 60.673714 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5306: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1134001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5307 60.674286 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5307: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1135401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5308 60.674326 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1136801 Win=65535 Len=0 Frame 5308: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1136801, Len: 0 No. Time Source Destination Protocol Length Info 5309 60.674357 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5309: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1136801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5310 60.674522 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5310: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1138201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5311 60.674560 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1139601 Win=65535 Len=0 Frame 5311: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1139601, Len: 0 No. Time Source Destination Protocol Length Info 5312 60.674591 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5312: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1139601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5313 60.674758 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5313: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1141001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5314 60.674795 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1142401 Win=65535 Len=0 Frame 5314: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1142401, Len: 0 No. Time Source Destination Protocol Length Info 5315 60.674878 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5315: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1142401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5316 60.674952 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5316: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1143801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5317 60.674991 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1145201 Win=65535 Len=0 Frame 5317: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1145201, Len: 0 No. Time Source Destination Protocol Length Info 5318 60.675083 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5318: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1145201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5319 60.690726 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5319: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1146601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5320 60.690755 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1148001 Win=65535 Len=0 Frame 5320: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1148001, Len: 0 No. Time Source Destination Protocol Length Info 5321 60.690802 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5321: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1148001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5322 60.690946 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5322: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1149401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5323 60.690971 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1150801 Win=65535 Len=0 Frame 5323: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1150801, Len: 0 No. Time Source Destination Protocol Length Info 5324 60.691037 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5324: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1150801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5325 60.691180 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5325: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1152201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5326 60.691205 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1153601 Win=65535 Len=0 Frame 5326: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1153601, Len: 0 No. Time Source Destination Protocol Length Info 5327 60.691314 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5327: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1153601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5328 60.691454 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5328: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1155001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5329 60.691480 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1156401 Win=65535 Len=0 Frame 5329: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1156401, Len: 0 No. Time Source Destination Protocol Length Info 5330 60.691549 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5330: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1156401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5331 60.691688 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5331: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1157801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5332 60.691712 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1159201 Win=65535 Len=0 Frame 5332: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1159201, Len: 0 No. Time Source Destination Protocol Length Info 5333 60.691781 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5333: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1159201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5334 60.691925 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5334: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1160601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5335 60.691952 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1162001 Win=65535 Len=0 Frame 5335: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1162001, Len: 0 No. Time Source Destination Protocol Length Info 5336 60.692014 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5336: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1162001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5337 60.692160 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5337: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1163401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5338 60.692184 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1164801 Win=65535 Len=0 Frame 5338: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1164801, Len: 0 No. Time Source Destination Protocol Length Info 5339 60.692689 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5339: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1164801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5340 60.692845 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5340: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1166201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5341 60.692869 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1167601 Win=65535 Len=0 Frame 5341: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1167601, Len: 0 No. Time Source Destination Protocol Length Info 5342 60.692947 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5342: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1167601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5343 60.693083 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5343: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1169001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5344 60.693110 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1170401 Win=65535 Len=0 Frame 5344: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1170401, Len: 0 No. Time Source Destination Protocol Length Info 5345 60.693175 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5345: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1170401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5346 60.693328 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5346: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1171801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5347 60.693352 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1173201 Win=65535 Len=0 Frame 5347: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1173201, Len: 0 No. Time Source Destination Protocol Length Info 5348 60.693414 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5348: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1173201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5349 60.693552 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5349: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1174601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5350 60.693575 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1176001 Win=65535 Len=0 Frame 5350: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1176001, Len: 0 No. Time Source Destination Protocol Length Info 5351 60.708667 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5351: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1176001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5352 60.708756 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5352: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1177401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5353 60.708860 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1178801 Win=65535 Len=0 Frame 5353: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1178801, Len: 0 No. Time Source Destination Protocol Length Info 5354 60.708900 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5354: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1178801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5355 60.708971 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5355: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1180201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5356 60.709016 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1181601 Win=65535 Len=0 Frame 5356: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1181601, Len: 0 No. Time Source Destination Protocol Length Info 5357 60.710192 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5357: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1181601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5358 60.710266 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5358: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1183001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5359 60.710327 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1184401 Win=65535 Len=0 Frame 5359: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1184401, Len: 0 No. Time Source Destination Protocol Length Info 5360 60.710393 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5360: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1184401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5361 60.710497 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5361: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1185801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5362 60.710566 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1187201 Win=65535 Len=0 Frame 5362: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1187201, Len: 0 No. Time Source Destination Protocol Length Info 5363 60.710658 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5363: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1187201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5364 60.710744 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5364: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1188601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5365 60.710783 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1190001 Win=65535 Len=0 Frame 5365: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1190001, Len: 0 No. Time Source Destination Protocol Length Info 5366 60.710873 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5366: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1190001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5367 60.711014 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5367: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1191401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5368 60.711056 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1192801 Win=65535 Len=0 Frame 5368: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1192801, Len: 0 No. Time Source Destination Protocol Length Info 5369 60.711229 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5369: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1192801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5370 60.711296 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5370: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1194201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5371 60.711378 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1195601 Win=65535 Len=0 Frame 5371: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1195601, Len: 0 No. Time Source Destination Protocol Length Info 5372 60.711468 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5372: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1195601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5373 60.711536 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5373: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1197001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5374 60.711628 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1198401 Win=65535 Len=0 Frame 5374: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1198401, Len: 0 No. Time Source Destination Protocol Length Info 5375 60.711706 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5375: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1198401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5376 60.711771 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5376: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1199801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5377 60.711881 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1201201 Win=65535 Len=0 Frame 5377: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1201201, Len: 0 No. Time Source Destination Protocol Length Info 5378 60.711912 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5378: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1201201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5379 60.712040 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5379: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1202601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5380 60.712079 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1204001 Win=65535 Len=0 Frame 5380: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1204001, Len: 0 No. Time Source Destination Protocol Length Info 5381 60.727384 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5381: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1204001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5382 60.727414 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5382: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1205401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5383 60.727453 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1206801 Win=65535 Len=0 Frame 5383: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1206801, Len: 0 No. Time Source Destination Protocol Length Info 5384 60.727483 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5384: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1206801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5385 60.727512 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5385: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1208201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5386 60.727550 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1209601 Win=65535 Len=0 Frame 5386: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1209601, Len: 0 No. Time Source Destination Protocol Length Info 5387 60.727582 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5387: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1209601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5388 60.728878 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5388: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1211001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5389 60.728917 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1212401 Win=65535 Len=0 Frame 5389: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1212401, Len: 0 No. Time Source Destination Protocol Length Info 5390 60.728945 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5390: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1212401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5391 60.728975 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5391: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1213801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5392 60.729013 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1215201 Win=65535 Len=0 Frame 5392: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1215201, Len: 0 No. Time Source Destination Protocol Length Info 5393 60.729045 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5393: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1215201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5394 60.729074 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5394: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1216601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5395 60.729113 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1218001 Win=65535 Len=0 Frame 5395: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1218001, Len: 0 No. Time Source Destination Protocol Length Info 5396 60.729176 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5396: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1218001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5397 60.729243 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5397: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1219401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5398 60.729287 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1220801 Win=65535 Len=0 Frame 5398: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1220801, Len: 0 No. Time Source Destination Protocol Length Info 5399 60.729403 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5399: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1220801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5400 60.729903 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5400: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1222201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5401 60.729941 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1223601 Win=65535 Len=0 Frame 5401: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1223601, Len: 0 No. Time Source Destination Protocol Length Info 5402 60.729973 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5402: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1223601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5403 60.730002 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5403: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1225001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5404 60.730038 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1226401 Win=65535 Len=0 Frame 5404: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1226401, Len: 0 No. Time Source Destination Protocol Length Info 5405 60.730067 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5405: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1226401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5406 60.745910 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5406: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1227801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5407 60.745950 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1229201 Win=65535 Len=0 Frame 5407: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1229201, Len: 0 No. Time Source Destination Protocol Length Info 5408 60.745978 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5408: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1229201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5409 60.746007 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5409: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1230601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5410 60.746047 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1232001 Win=65535 Len=0 Frame 5410: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1232001, Len: 0 No. Time Source Destination Protocol Length Info 5411 60.746076 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5411: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1232001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5412 60.746106 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5412: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1233401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5413 60.746143 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1234801 Win=65535 Len=0 Frame 5413: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1234801, Len: 0 No. Time Source Destination Protocol Length Info 5414 60.746161 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5414: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1234801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5415 60.746219 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5415: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1236201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5416 60.746243 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1237601 Win=65535 Len=0 Frame 5416: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1237601, Len: 0 No. Time Source Destination Protocol Length Info 5417 60.746316 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5417: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1237601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5418 60.746454 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5418: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1239001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5419 60.746478 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1240401 Win=65535 Len=0 Frame 5419: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1240401, Len: 0 No. Time Source Destination Protocol Length Info 5420 60.747350 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5420: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1240401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5421 60.747409 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5421: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1241801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5422 60.747476 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1243201 Win=65535 Len=0 Frame 5422: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1243201, Len: 0 No. Time Source Destination Protocol Length Info 5423 60.747854 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5423: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1243201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5424 60.747885 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5424: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1244601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5425 60.747921 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1246001 Win=65535 Len=0 Frame 5425: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1246001, Len: 0 No. Time Source Destination Protocol Length Info 5426 60.747951 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5426: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1246001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5427 60.747983 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5427: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1247401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5428 60.748019 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1248801 Win=65535 Len=0 Frame 5428: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1248801, Len: 0 No. Time Source Destination Protocol Length Info 5429 60.748050 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5429: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1248801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5430 60.748119 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5430: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1250201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5431 60.748201 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1251601 Win=65535 Len=0 Frame 5431: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1251601, Len: 0 No. Time Source Destination Protocol Length Info 5432 60.748276 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5432: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1251601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5433 60.748345 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5433: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1253001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5434 60.748391 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1254401 Win=65535 Len=0 Frame 5434: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1254401, Len: 0 No. Time Source Destination Protocol Length Info 5435 60.748478 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5435: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1254401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5436 60.748820 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5436: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1255801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5437 60.748858 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1257201 Win=65535 Len=0 Frame 5437: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1257201, Len: 0 No. Time Source Destination Protocol Length Info 5438 60.748886 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5438: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1257201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5439 60.748916 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5439: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1258601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5440 60.748955 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1260001 Win=65535 Len=0 Frame 5440: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1260001, Len: 0 No. Time Source Destination Protocol Length Info 5441 60.763495 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5441: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1260001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5442 60.763557 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5442: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1261401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5443 60.763648 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1262801 Win=65535 Len=0 Frame 5443: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1262801, Len: 0 No. Time Source Destination Protocol Length Info 5444 60.763740 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5444: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1262801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5445 60.763775 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5445: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1264201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5446 60.763876 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1265601 Win=65535 Len=0 Frame 5446: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1265601, Len: 0 No. Time Source Destination Protocol Length Info 5447 60.764380 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5447: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1265601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5448 60.764447 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5448: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1267001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5449 60.764511 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1268401 Win=65535 Len=0 Frame 5449: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1268401, Len: 0 No. Time Source Destination Protocol Length Info 5450 60.764568 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5450: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1268401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5451 60.764690 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5451: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1269801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5452 60.764736 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1271201 Win=65535 Len=0 Frame 5452: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1271201, Len: 0 No. Time Source Destination Protocol Length Info 5453 60.764856 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5453: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1271201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5454 60.764927 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5454: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1272601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5455 60.764984 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1274001 Win=65535 Len=0 Frame 5455: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1274001, Len: 0 No. Time Source Destination Protocol Length Info 5456 60.765981 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5456: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1274001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5457 60.766097 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5457: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1275401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5458 60.766120 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1276801 Win=65535 Len=0 Frame 5458: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1276801, Len: 0 No. Time Source Destination Protocol Length Info 5459 60.766202 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5459: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1276801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5460 60.766289 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5460: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1278201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5461 60.766413 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1279601 Win=65535 Len=0 Frame 5461: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1279601, Len: 0 No. Time Source Destination Protocol Length Info 5462 60.766465 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5462: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1279601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5463 60.766533 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5463: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1281001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5464 60.766602 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1282401 Win=65535 Len=0 Frame 5464: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1282401, Len: 0 No. Time Source Destination Protocol Length Info 5465 60.766661 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5465: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1282401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5466 60.766775 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5466: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1283801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5467 60.766814 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1285201 Win=65535 Len=0 Frame 5467: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1285201, Len: 0 No. Time Source Destination Protocol Length Info 5468 60.766894 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5468: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1285201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5469 60.781868 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5469: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1286601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5470 60.781911 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1288001 Win=65535 Len=0 Frame 5470: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1288001, Len: 0 No. Time Source Destination Protocol Length Info 5471 60.781948 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5471: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1288001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5472 60.781982 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5472: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1289401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5473 60.782019 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1290801 Win=65535 Len=0 Frame 5473: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1290801, Len: 0 No. Time Source Destination Protocol Length Info 5474 60.782047 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5474: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1290801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5475 60.782075 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5475: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1292201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5476 60.782113 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1293601 Win=65535 Len=0 Frame 5476: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1293601, Len: 0 No. Time Source Destination Protocol Length Info 5477 60.782143 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5477: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1293601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5478 60.782159 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5478: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1295001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5479 60.782275 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1296401 Win=65535 Len=0 Frame 5479: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1296401, Len: 0 No. Time Source Destination Protocol Length Info 5480 60.782303 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5480: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1296401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5481 60.782377 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5481: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1297801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5482 60.782424 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1299201 Win=65535 Len=0 Frame 5482: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1299201, Len: 0 No. Time Source Destination Protocol Length Info 5483 60.782817 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5483: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1299201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5484 60.782851 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5484: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1300601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5485 60.782950 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1302001 Win=65535 Len=0 Frame 5485: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1302001, Len: 0 No. Time Source Destination Protocol Length Info 5486 60.782981 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5486: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1302001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5487 60.783139 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5487: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1303401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5488 60.783161 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1304801 Win=65535 Len=0 Frame 5488: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1304801, Len: 0 No. Time Source Destination Protocol Length Info 5489 60.783235 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5489: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1304801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5490 60.783357 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5490: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1306201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5491 60.783381 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1307601 Win=65535 Len=0 Frame 5491: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1307601, Len: 0 No. Time Source Destination Protocol Length Info 5492 60.783461 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5492: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1307601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5493 60.783907 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5493: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1309001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5494 60.783944 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1310401 Win=65535 Len=0 Frame 5494: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1310401, Len: 0 No. Time Source Destination Protocol Length Info 5495 60.783973 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5495: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1310401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5496 60.784402 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5496: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1311801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5497 60.784439 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1313201 Win=65535 Len=0 Frame 5497: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1313201, Len: 0 No. Time Source Destination Protocol Length Info 5498 60.784516 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5498: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1313201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5499 60.784567 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5499: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1314601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5500 60.784652 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1316001 Win=65535 Len=0 Frame 5500: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1316001, Len: 0 No. Time Source Destination Protocol Length Info 5501 60.784714 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5501: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1316001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5502 60.784841 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5502: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1317401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5503 60.784870 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1318801 Win=65535 Len=0 Frame 5503: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1318801, Len: 0 No. Time Source Destination Protocol Length Info 5504 60.784957 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5504: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1318801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5505 60.799881 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5505: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1320201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5506 60.799919 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1321601 Win=65535 Len=0 Frame 5506: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1321601, Len: 0 No. Time Source Destination Protocol Length Info 5507 60.799948 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5507: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1321601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5508 60.799977 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5508: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1323001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5509 60.800017 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1324401 Win=65535 Len=0 Frame 5509: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1324401, Len: 0 No. Time Source Destination Protocol Length Info 5510 60.800048 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5510: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1324401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5511 60.800876 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5511: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1325801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5512 60.800916 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1327201 Win=65535 Len=0 Frame 5512: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1327201, Len: 0 No. Time Source Destination Protocol Length Info 5513 60.800945 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5513: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1327201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5514 60.800974 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5514: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1328601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5515 60.801012 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1330001 Win=65535 Len=0 Frame 5515: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1330001, Len: 0 No. Time Source Destination Protocol Length Info 5516 60.801043 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5516: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1330001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5517 60.801709 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5517: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1331401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5518 60.801746 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1332801 Win=65535 Len=0 Frame 5518: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1332801, Len: 0 No. Time Source Destination Protocol Length Info 5519 60.801776 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5519: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1332801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5520 60.801806 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5520: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1334201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5521 60.801843 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1335601 Win=65535 Len=0 Frame 5521: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1335601, Len: 0 No. Time Source Destination Protocol Length Info 5522 60.801872 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5522: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1335601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5523 60.801901 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5523: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1337001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5524 60.801937 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1338401 Win=65535 Len=0 Frame 5524: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1338401, Len: 0 No. Time Source Destination Protocol Length Info 5525 60.801969 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5525: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1338401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5526 60.802952 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5526: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1339801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5527 60.802990 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1341201 Win=65535 Len=0 Frame 5527: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1341201, Len: 0 No. Time Source Destination Protocol Length Info 5528 60.803539 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5528: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1341201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5529 60.803568 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5529: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1342601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5530 60.803604 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1344001 Win=65535 Len=0 Frame 5530: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1344001, Len: 0 No. Time Source Destination Protocol Length Info 5531 60.803633 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5531: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1344001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5532 60.803662 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5532: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1345401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5533 60.803698 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1346801 Win=65535 Len=0 Frame 5533: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1346801, Len: 0 No. Time Source Destination Protocol Length Info 5534 60.803729 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5534: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1346801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5535 60.803760 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5535: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1348201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5536 60.803796 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1349601 Win=65535 Len=0 Frame 5536: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1349601, Len: 0 No. Time Source Destination Protocol Length Info 5537 60.803825 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5537: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1349601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5538 60.803875 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5538: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1351001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5539 60.803913 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1352401 Win=65535 Len=0 Frame 5539: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1352401, Len: 0 No. Time Source Destination Protocol Length Info 5540 60.817937 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5540: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1352401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5541 60.818132 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5541: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1353801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5542 60.818171 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1355201 Win=65535 Len=0 Frame 5542: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1355201, Len: 0 No. Time Source Destination Protocol Length Info 5543 60.818199 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5543: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1355201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5544 60.818286 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5544: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1356601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5545 60.818322 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1358001 Win=65535 Len=0 Frame 5545: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1358001, Len: 0 No. Time Source Destination Protocol Length Info 5546 60.818870 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5546: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1358001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5547 60.818899 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5547: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1359401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5548 60.818936 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1360801 Win=65535 Len=0 Frame 5548: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1360801, Len: 0 No. Time Source Destination Protocol Length Info 5549 60.818967 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5549: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1360801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5550 60.819044 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5550: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1362201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5551 60.819084 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1363601 Win=65535 Len=0 Frame 5551: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1363601, Len: 0 No. Time Source Destination Protocol Length Info 5552 60.819258 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5552: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1363601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5553 60.819291 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5553: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1365001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5554 60.819327 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1366401 Win=65535 Len=0 Frame 5554: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1366401, Len: 0 No. Time Source Destination Protocol Length Info 5555 60.821905 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5555: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1366401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5556 60.821935 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5556: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1367801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5557 60.821983 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1369201 Win=65535 Len=0 Frame 5557: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1369201, Len: 0 No. Time Source Destination Protocol Length Info 5558 60.822012 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5558: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1369201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5559 60.822046 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5559: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1370601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5560 60.822084 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1372001 Win=65535 Len=0 Frame 5560: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1372001, Len: 0 No. Time Source Destination Protocol Length Info 5561 60.822113 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5561: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1372001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5562 60.822142 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5562: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1373401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5563 60.822181 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1374801 Win=65535 Len=0 Frame 5563: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1374801, Len: 0 No. Time Source Destination Protocol Length Info 5564 60.822197 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5564: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1374801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5565 60.822214 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5565: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1376201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5566 60.822235 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1377601 Win=65535 Len=0 Frame 5566: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1377601, Len: 0 No. Time Source Destination Protocol Length Info 5567 60.822252 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5567: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1377601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5568 60.822271 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5568: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1379001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5569 60.822291 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1380401 Win=65535 Len=0 Frame 5569: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1380401, Len: 0 No. Time Source Destination Protocol Length Info 5570 60.822319 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5570: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1380401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5571 60.836757 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5571: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1381801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5572 60.836800 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1383201 Win=65535 Len=0 Frame 5572: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1383201, Len: 0 No. Time Source Destination Protocol Length Info 5573 60.836830 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5573: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1383201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5574 60.836859 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5574: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1384601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5575 60.836895 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1386001 Win=65535 Len=0 Frame 5575: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1386001, Len: 0 No. Time Source Destination Protocol Length Info 5576 60.836927 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5576: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1386001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5577 60.836956 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5577: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1387401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5578 60.836990 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1388801 Win=65535 Len=0 Frame 5578: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1388801, Len: 0 No. Time Source Destination Protocol Length Info 5579 60.837007 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5579: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1388801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5580 60.837198 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5580: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1390201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5581 60.837220 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1391601 Win=65535 Len=0 Frame 5581: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1391601, Len: 0 No. Time Source Destination Protocol Length Info 5582 60.837673 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5582: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1391601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5583 60.837703 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5583: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1393001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5584 60.837771 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1394401 Win=65535 Len=0 Frame 5584: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1394401, Len: 0 No. Time Source Destination Protocol Length Info 5585 60.838944 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5585: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1394401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5586 60.839108 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5586: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1395801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5587 60.839145 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1397201 Win=65535 Len=0 Frame 5587: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1397201, Len: 0 No. Time Source Destination Protocol Length Info 5588 60.839176 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5588: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1397201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5589 60.839274 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5589: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1398601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5590 60.839358 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1400001 Win=65535 Len=0 Frame 5590: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1400001, Len: 0 No. Time Source Destination Protocol Length Info 5591 60.839441 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5591: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1400001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5592 60.839547 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5592: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1401401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5593 60.839586 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1402801 Win=65535 Len=0 Frame 5593: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1402801, Len: 0 No. Time Source Destination Protocol Length Info 5594 60.839635 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5594: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1402801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5595 60.839820 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5595: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1404201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5596 60.839857 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1405601 Win=65535 Len=0 Frame 5596: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1405601, Len: 0 No. Time Source Destination Protocol Length Info 5597 60.839935 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5597: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1405601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5598 60.839985 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5598: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1407001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5599 60.840070 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1408401 Win=65535 Len=0 Frame 5599: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1408401, Len: 0 No. Time Source Destination Protocol Length Info 5600 60.840152 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5600: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1408401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5601 60.840212 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5601: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1409801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5602 60.840258 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1411201 Win=65535 Len=0 Frame 5602: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1411201, Len: 0 No. Time Source Destination Protocol Length Info 5603 60.840411 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5603: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1411201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5604 60.854880 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5604: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1412601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5605 60.854919 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1414001 Win=65535 Len=0 Frame 5605: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1414001, Len: 0 No. Time Source Destination Protocol Length Info 5606 60.854948 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5606: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1414001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5607 60.854977 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5607: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1415401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5608 60.855015 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1416801 Win=65535 Len=0 Frame 5608: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1416801, Len: 0 No. Time Source Destination Protocol Length Info 5609 60.855047 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5609: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1416801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5610 60.855077 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5610: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1418201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5611 60.855115 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1419601 Win=65535 Len=0 Frame 5611: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1419601, Len: 0 No. Time Source Destination Protocol Length Info 5612 60.855146 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5612: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1419601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5613 60.855233 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5613: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1421001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5614 60.855288 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1422401 Win=65535 Len=0 Frame 5614: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1422401, Len: 0 No. Time Source Destination Protocol Length Info 5615 60.855368 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5615: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1422401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5616 60.855474 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5616: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1423801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5617 60.855528 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1425201 Win=65535 Len=0 Frame 5617: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1425201, Len: 0 No. Time Source Destination Protocol Length Info 5618 60.856901 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5618: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1425201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5619 60.856980 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5619: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1426601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5620 60.857019 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1428001 Win=65535 Len=0 Frame 5620: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1428001, Len: 0 No. Time Source Destination Protocol Length Info 5621 60.857254 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5621: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1428001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5622 60.857284 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5622: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1429401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5623 60.857321 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1430801 Win=65535 Len=0 Frame 5623: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1430801, Len: 0 No. Time Source Destination Protocol Length Info 5624 60.857360 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5624: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1430801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5625 60.857448 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5625: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1432201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5626 60.857489 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1433601 Win=65535 Len=0 Frame 5626: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1433601, Len: 0 No. Time Source Destination Protocol Length Info 5627 60.857556 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5627: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1433601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5628 60.857912 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5628: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1435001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5629 60.857949 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1436401 Win=65535 Len=0 Frame 5629: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1436401, Len: 0 No. Time Source Destination Protocol Length Info 5630 60.857978 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5630: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1436401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5631 60.858007 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5631: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1437801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5632 60.858047 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1439201 Win=65535 Len=0 Frame 5632: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1439201, Len: 0 No. Time Source Destination Protocol Length Info 5633 60.858358 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5633: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1439201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5634 60.858390 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5634: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1440601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5635 60.858430 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1442001 Win=65535 Len=0 Frame 5635: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1442001, Len: 0 No. Time Source Destination Protocol Length Info 5636 60.858522 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5636: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1442001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5637 60.858582 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5637: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1443401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5638 60.858637 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1444801 Win=65535 Len=0 Frame 5638: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1444801, Len: 0 No. Time Source Destination Protocol Length Info 5639 60.858710 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5639: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1444801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5640 60.858892 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5640: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1446201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5641 60.858929 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1447601 Win=65535 Len=0 Frame 5641: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1447601, Len: 0 No. Time Source Destination Protocol Length Info 5642 60.859006 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5642: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1447601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5643 60.859065 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5643: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1449001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5644 60.859113 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1450401 Win=65535 Len=0 Frame 5644: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1450401, Len: 0 No. Time Source Destination Protocol Length Info 5645 60.859203 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5645: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1450401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5646 60.859315 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5646: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1451801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5647 60.859338 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1453201 Win=65535 Len=0 Frame 5647: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1453201, Len: 0 No. Time Source Destination Protocol Length Info 5648 60.872981 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5648: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1453201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5649 60.873696 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5649: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1454601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5650 60.873746 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1456001 Win=65535 Len=0 Frame 5650: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1456001, Len: 0 No. Time Source Destination Protocol Length Info 5651 60.873774 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5651: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1456001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5652 60.873803 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5652: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1457401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5653 60.873840 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1458801 Win=65535 Len=0 Frame 5653: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1458801, Len: 0 No. Time Source Destination Protocol Length Info 5654 60.875817 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5654: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1458801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5655 60.875848 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5655: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1460201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5656 60.875887 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1461601 Win=65535 Len=0 Frame 5656: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1461601, Len: 0 No. Time Source Destination Protocol Length Info 5657 60.875919 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5657: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1461601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5658 60.875948 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5658: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1463001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5659 60.875984 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1464401 Win=65535 Len=0 Frame 5659: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1464401, Len: 0 No. Time Source Destination Protocol Length Info 5660 60.876013 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5660: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1464401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5661 60.876042 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5661: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1465801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5662 60.876089 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1467201 Win=65535 Len=0 Frame 5662: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1467201, Len: 0 No. Time Source Destination Protocol Length Info 5663 60.876105 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5663: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1467201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5664 60.876123 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5664: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1468601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5665 60.876187 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1470001 Win=65535 Len=0 Frame 5665: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1470001, Len: 0 No. Time Source Destination Protocol Length Info 5666 60.876248 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5666: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1470001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5667 60.876771 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5667: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1471401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5668 60.876813 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1472801 Win=65535 Len=0 Frame 5668: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1472801, Len: 0 No. Time Source Destination Protocol Length Info 5669 60.876842 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5669: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1472801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5670 60.876871 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5670: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1474201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5671 60.876907 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1475601 Win=65535 Len=0 Frame 5671: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1475601, Len: 0 No. Time Source Destination Protocol Length Info 5672 60.876936 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5672: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1475601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5673 60.876968 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5673: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1477001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5674 60.877020 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1478401 Win=65535 Len=0 Frame 5674: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1478401, Len: 0 No. Time Source Destination Protocol Length Info 5675 60.877039 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5675: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1478401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5676 60.877091 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5676: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1479801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5677 60.877116 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1481201 Win=65535 Len=0 Frame 5677: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1481201, Len: 0 No. Time Source Destination Protocol Length Info 5678 60.877207 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5678: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1481201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5679 60.877303 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5679: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1482601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5680 60.877369 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1484001 Win=65535 Len=0 Frame 5680: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1484001, Len: 0 No. Time Source Destination Protocol Length Info 5681 60.877470 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5681: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1484001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5682 60.912868 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5682: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1485401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5683 60.912904 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5683: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1486801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5684 60.912947 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5684: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1488201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5685 60.912979 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5685: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1489601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5686 60.913009 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5686: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1491001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5687 60.913051 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1486801 Win=65535 Len=0 Frame 5687: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1486801, Len: 0 No. Time Source Destination Protocol Length Info 5688 60.913081 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5688: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1492401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5689 60.913115 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5689: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1493801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5690 60.913136 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1489601 Win=65535 Len=0 Frame 5690: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1489601, Len: 0 No. Time Source Destination Protocol Length Info 5691 60.913153 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5691: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1495201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5692 60.913172 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5692: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1496601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5693 60.913194 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1492401 Win=65535 Len=0 Frame 5693: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1492401, Len: 0 No. Time Source Destination Protocol Length Info 5694 60.913211 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5694: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1498001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5695 60.913237 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5695: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1499401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5696 60.913259 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1495201 Win=65535 Len=0 Frame 5696: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1495201, Len: 0 No. Time Source Destination Protocol Length Info 5697 60.913277 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5697: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1500801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5698 60.913295 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5698: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1502201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5699 60.913316 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1498001 Win=65535 Len=0 Frame 5699: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1498001, Len: 0 No. Time Source Destination Protocol Length Info 5700 60.913333 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5700: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1503601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5701 60.913351 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5701: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1505001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5702 60.913371 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1500801 Win=65535 Len=0 Frame 5702: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1500801, Len: 0 No. Time Source Destination Protocol Length Info 5703 60.913387 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5703: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1506401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5704 60.913405 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5704: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1507801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5705 60.913430 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1503601 Win=62735 Len=0 Frame 5705: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1503601, Len: 0 No. Time Source Destination Protocol Length Info 5706 60.913448 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5706: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1509201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5707 60.913465 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5707: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1510601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5708 60.913487 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1506401 Win=59935 Len=0 Frame 5708: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1506401, Len: 0 No. Time Source Destination Protocol Length Info 5709 60.913503 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5709: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1512001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5710 60.913520 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5710: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1513401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5711 60.913540 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1509201 Win=57135 Len=0 Frame 5711: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1509201, Len: 0 No. Time Source Destination Protocol Length Info 5712 60.913556 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5712: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1514801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5713 60.913577 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=1509201 Win=60895 Len=0 Frame 5713: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1509201, Len: 0 No. Time Source Destination Protocol Length Info 5714 60.913593 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5714: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1516201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5715 60.913617 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1512001 Win=65535 Len=0 Frame 5715: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1512001, Len: 0 No. Time Source Destination Protocol Length Info 5716 60.913635 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5716: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1517601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5717 60.913656 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1514801 Win=62735 Len=0 Frame 5717: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1514801, Len: 0 No. Time Source Destination Protocol Length Info 5718 60.913673 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5718: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1519001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5719 60.913691 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5719: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1520401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5720 60.913707 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5720: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1521801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5721 60.913727 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1517601 Win=59935 Len=0 Frame 5721: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1517601, Len: 0 No. Time Source Destination Protocol Length Info 5722 60.913744 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5722: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1523201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5723 60.913774 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5723: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1524601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5724 60.913799 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1520401 Win=60895 Len=0 Frame 5724: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1520401, Len: 0 No. Time Source Destination Protocol Length Info 5725 60.913817 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5725: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1526001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5726 60.913837 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1521801 Win=64135 Len=0 Frame 5726: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1521801, Len: 0 No. Time Source Destination Protocol Length Info 5727 60.913858 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1523201 Win=62735 Len=0 Frame 5727: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1523201, Len: 0 No. Time Source Destination Protocol Length Info 5728 60.913874 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5728: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1527401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5729 60.913891 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5729: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1528801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5730 60.913911 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1526001 Win=59935 Len=0 Frame 5730: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1526001, Len: 0 No. Time Source Destination Protocol Length Info 5731 60.913928 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5731: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1530201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5732 60.913948 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1527401 Win=62295 Len=0 Frame 5732: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1527401, Len: 0 No. Time Source Destination Protocol Length Info 5733 60.913965 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5733: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1531601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5734 60.913986 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1530201 Win=64135 Len=0 Frame 5734: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1530201, Len: 0 No. Time Source Destination Protocol Length Info 5735 60.914002 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5735: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1533001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5736 60.914025 192.168.10.221 24.143.205.163 TCP 60 [TCP Dup ACK 5734#1] 4795 > http [ACK] Seq=3042 Ack=1530201 Win=64135 Len=0 Frame 5736: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1530201, Len: 0 No. Time Source Destination Protocol Length Info 5737 60.914044 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5737: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1534401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5738 60.914065 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1533001 Win=61335 Len=0 Frame 5738: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1533001, Len: 0 No. Time Source Destination Protocol Length Info 5739 60.914082 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5739: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1535801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5740 60.914100 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5740: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1537201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5741 60.914117 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5741: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1538601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5742 60.914137 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1535801 Win=58535 Len=0 Frame 5742: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1535801, Len: 0 No. Time Source Destination Protocol Length Info 5743 60.914154 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5743: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1540001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5744 60.914170 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5744: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1541401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5745 60.914188 24.143.205.163 192.168.10.221 TCP 1054 [TCP segment of a reassembled PDU] Frame 5745: 1054 bytes on wire (8432 bits), 1054 bytes captured (8432 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1542801, Ack: 3042, Len: 1000 No. Time Source Destination Protocol Length Info 5746 60.914212 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1538601 Win=55735 Len=0 Frame 5746: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1538601, Len: 0 No. Time Source Destination Protocol Length Info 5747 60.914229 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5747: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1543801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5748 60.914252 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1541401 Win=52935 Len=0 Frame 5748: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1541401, Len: 0 No. Time Source Destination Protocol Length Info 5749 60.914269 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5749: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1545201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5750 60.914286 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5750: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1546601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5751 60.914307 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1543801 Win=54295 Len=0 Frame 5751: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1543801, Len: 0 No. Time Source Destination Protocol Length Info 5752 60.914324 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5752: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1548001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5753 60.914341 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5753: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1549401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5754 60.914359 24.143.205.163 192.168.10.221 TCP 454 [TCP segment of a reassembled PDU] Frame 5754: 454 bytes on wire (3632 bits), 454 bytes captured (3632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1550801, Ack: 3042, Len: 400 No. Time Source Destination Protocol Length Info 5755 60.914381 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1545201 Win=65535 Len=0 Frame 5755: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1545201, Len: 0 No. Time Source Destination Protocol Length Info 5756 60.914405 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1549401 Win=61335 Len=0 Frame 5756: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1549401, Len: 0 No. Time Source Destination Protocol Length Info 5757 60.914426 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1551201 Win=59535 Len=0 Frame 5757: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1551201, Len: 0 No. Time Source Destination Protocol Length Info 5758 60.914446 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=1551201 Win=63295 Len=0 Frame 5758: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1551201, Len: 0 No. Time Source Destination Protocol Length Info 5759 60.914467 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=1551201 Win=65535 Len=0 Frame 5759: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1551201, Len: 0 No. Time Source Destination Protocol Length Info 5760 60.914485 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5760: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1551201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5761 60.915733 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5761: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1552601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5762 60.915772 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1554001 Win=65535 Len=0 Frame 5762: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1554001, Len: 0 No. Time Source Destination Protocol Length Info 5763 60.927536 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5763: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1554001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5764 60.927914 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5764: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1555401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5765 60.927955 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1556801 Win=65535 Len=0 Frame 5765: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1556801, Len: 0 No. Time Source Destination Protocol Length Info 5766 60.927984 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5766: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1556801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5767 60.928013 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5767: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1558201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5768 60.928050 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1559601 Win=65535 Len=0 Frame 5768: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1559601, Len: 0 No. Time Source Destination Protocol Length Info 5769 60.928082 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5769: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1559601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5770 60.928152 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5770: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1561001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5771 60.928218 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1562401 Win=65535 Len=0 Frame 5771: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1562401, Len: 0 No. Time Source Destination Protocol Length Info 5772 60.928519 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5772: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1562401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5773 60.928884 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5773: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1563801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5774 60.928921 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1565201 Win=65535 Len=0 Frame 5774: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1565201, Len: 0 No. Time Source Destination Protocol Length Info 5775 60.930622 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5775: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1565201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5776 60.930652 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5776: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1566601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5777 60.930690 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1568001 Win=65535 Len=0 Frame 5777: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1568001, Len: 0 No. Time Source Destination Protocol Length Info 5778 60.930729 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5778: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1568001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5779 60.930746 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5779: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1569401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5780 60.930770 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1570801 Win=65535 Len=0 Frame 5780: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1570801, Len: 0 No. Time Source Destination Protocol Length Info 5781 60.930790 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5781: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1570801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5782 60.931415 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5782: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1572201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5783 60.931451 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1573601 Win=65535 Len=0 Frame 5783: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1573601, Len: 0 No. Time Source Destination Protocol Length Info 5784 60.931480 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5784: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1573601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5785 60.931511 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5785: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1575001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5786 60.931547 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1576401 Win=65535 Len=0 Frame 5786: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1576401, Len: 0 No. Time Source Destination Protocol Length Info 5787 60.931576 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5787: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1576401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5788 60.946922 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5788: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1577801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5789 60.946969 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1579201 Win=65535 Len=0 Frame 5789: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1579201, Len: 0 No. Time Source Destination Protocol Length Info 5790 60.946999 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5790: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1579201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5791 60.947031 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5791: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1580601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5792 60.947068 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1582001 Win=65535 Len=0 Frame 5792: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1582001, Len: 0 No. Time Source Destination Protocol Length Info 5793 60.947097 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5793: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1582001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5794 60.947198 192.168.10.1 192.168.10.245 Syslog 310 LOCAL1.INFO: Oct 3 19:45:18 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 28379 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="exuniversal@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 5794: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:18 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 28379 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default No. Time Source Destination Protocol Length Info 5795 60.948903 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5795: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1583401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5796 60.948949 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1584801 Win=65535 Len=0 Frame 5796: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1584801, Len: 0 No. Time Source Destination Protocol Length Info 5797 60.948979 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5797: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1584801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5798 60.949012 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5798: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1586201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5799 60.949049 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1587601 Win=65535 Len=0 Frame 5799: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1587601, Len: 0 No. Time Source Destination Protocol Length Info 5800 60.949077 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5800: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1587601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5801 60.949106 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5801: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1589001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5802 60.949142 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1590401 Win=65535 Len=0 Frame 5802: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1590401, Len: 0 No. Time Source Destination Protocol Length Info 5803 60.949176 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5803: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1590401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5804 60.949195 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5804: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1591801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5805 60.949216 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1593201 Win=65535 Len=0 Frame 5805: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1593201, Len: 0 No. Time Source Destination Protocol Length Info 5806 60.949234 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5806: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1593201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5807 60.949359 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5807: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1594601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5808 60.949383 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1596001 Win=65535 Len=0 Frame 5808: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1596001, Len: 0 No. Time Source Destination Protocol Length Info 5809 60.949884 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5809: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1596001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5810 60.949922 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5810: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1597401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5811 60.949959 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1598801 Win=65535 Len=0 Frame 5811: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1598801, Len: 0 No. Time Source Destination Protocol Length Info 5812 60.949986 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5812: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1598801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5813 60.950016 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5813: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1600201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5814 60.950054 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1601601 Win=65535 Len=0 Frame 5814: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1601601, Len: 0 No. Time Source Destination Protocol Length Info 5815 60.950085 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5815: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1601601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5816 60.950502 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5816: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1603001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5817 60.950527 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1604401 Win=65535 Len=0 Frame 5817: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1604401, Len: 0 No. Time Source Destination Protocol Length Info 5818 60.951526 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5818: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1604401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5819 60.951896 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5819: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1605801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5820 60.951934 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1607201 Win=65535 Len=0 Frame 5820: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1607201, Len: 0 No. Time Source Destination Protocol Length Info 5821 60.954020 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5821: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1607201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5822 60.967560 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5822: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1608601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5823 60.967598 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1610001 Win=65535 Len=0 Frame 5823: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1610001, Len: 0 No. Time Source Destination Protocol Length Info 5824 60.967627 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5824: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1610001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5825 60.967661 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5825: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1611401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5826 60.967699 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1612801 Win=65535 Len=0 Frame 5826: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1612801, Len: 0 No. Time Source Destination Protocol Length Info 5827 60.967728 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5827: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1612801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5828 60.967757 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5828: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1614201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5829 60.967799 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1615601 Win=65535 Len=0 Frame 5829: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1615601, Len: 0 No. Time Source Destination Protocol Length Info 5830 60.967816 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5830: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1615601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5831 60.967835 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5831: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1617001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5832 60.967856 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1618401 Win=65535 Len=0 Frame 5832: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1618401, Len: 0 No. Time Source Destination Protocol Length Info 5833 60.967873 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5833: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1618401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5834 60.967891 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5834: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1619801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5835 60.967992 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1621201 Win=65535 Len=0 Frame 5835: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1621201, Len: 0 No. Time Source Destination Protocol Length Info 5836 60.968028 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5836: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1621201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5837 60.968134 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5837: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1622601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5838 60.968194 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1624001 Win=65535 Len=0 Frame 5838: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1624001, Len: 0 No. Time Source Destination Protocol Length Info 5839 60.968590 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5839: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1624001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5840 60.971597 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5840: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1625401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5841 60.971634 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1626801 Win=65535 Len=0 Frame 5841: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1626801, Len: 0 No. Time Source Destination Protocol Length Info 5842 60.971712 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5842: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1626801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5843 60.971785 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5843: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1628201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5844 60.971825 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1629601 Win=65535 Len=0 Frame 5844: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1629601, Len: 0 No. Time Source Destination Protocol Length Info 5845 60.971919 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5845: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1629601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5846 60.972061 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5846: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1631001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5847 60.972083 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1632401 Win=65535 Len=0 Frame 5847: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1632401, Len: 0 No. Time Source Destination Protocol Length Info 5848 60.972452 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5848: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1632401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5849 60.985521 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5849: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1633801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5850 60.985554 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1635201 Win=65535 Len=0 Frame 5850: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1635201, Len: 0 No. Time Source Destination Protocol Length Info 5851 60.985573 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5851: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1635201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5852 60.985727 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5852: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1636601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5853 60.985779 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1638001 Win=65535 Len=0 Frame 5853: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1638001, Len: 0 No. Time Source Destination Protocol Length Info 5854 60.985851 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5854: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1638001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5855 60.985971 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5855: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1639401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5856 60.985997 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1640801 Win=65535 Len=0 Frame 5856: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1640801, Len: 0 No. Time Source Destination Protocol Length Info 5857 60.986069 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5857: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1640801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5858 60.986200 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5858: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1642201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5859 60.986223 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1643601 Win=65535 Len=0 Frame 5859: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1643601, Len: 0 No. Time Source Destination Protocol Length Info 5860 60.989879 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5860: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1643601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5861 60.989990 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5861: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1645001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5862 60.990044 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1646401 Win=65535 Len=0 Frame 5862: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1646401, Len: 0 No. Time Source Destination Protocol Length Info 5863 60.990161 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5863: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1646401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5864 60.990233 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5864: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1647801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5865 60.990291 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1649201 Win=65535 Len=0 Frame 5865: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1649201, Len: 0 No. Time Source Destination Protocol Length Info 5866 60.990360 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5866: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1649201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5867 60.990465 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5867: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1650601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5868 60.990523 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1652001 Win=65535 Len=0 Frame 5868: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1652001, Len: 0 No. Time Source Destination Protocol Length Info 5869 60.990592 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5869: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1652001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5870 60.991912 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 5870: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4831, Ack: 379314, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 5871 60.991931 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=379314 Ack=4873 Win=46636 Len=0 Frame 5871: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 379314, Ack: 4873, Len: 0 No. Time Source Destination Protocol Length Info 5872 61.003783 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5872: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1653401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5873 61.003809 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1654801 Win=65535 Len=0 Frame 5873: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1654801, Len: 0 No. Time Source Destination Protocol Length Info 5874 61.003866 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5874: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1654801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5875 61.004018 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5875: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1656201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5876 61.004041 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1657601 Win=65535 Len=0 Frame 5876: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1657601, Len: 0 No. Time Source Destination Protocol Length Info 5877 61.004112 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5877: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1657601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5878 61.004248 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5878: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1659001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5879 61.004270 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1660401 Win=65535 Len=0 Frame 5879: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1660401, Len: 0 No. Time Source Destination Protocol Length Info 5880 61.004339 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5880: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1660401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5881 61.008535 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5881: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1661801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5882 61.008560 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1663201 Win=65535 Len=0 Frame 5882: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1663201, Len: 0 No. Time Source Destination Protocol Length Info 5883 61.008618 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5883: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1663201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5884 61.008766 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5884: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1664601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5885 61.008789 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1666001 Win=65535 Len=0 Frame 5885: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1666001, Len: 0 No. Time Source Destination Protocol Length Info 5886 61.008856 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5886: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1666001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5887 61.009011 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5887: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1667401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5888 61.009036 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1668801 Win=65535 Len=0 Frame 5888: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1668801, Len: 0 No. Time Source Destination Protocol Length Info 5889 61.009117 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5889: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1668801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5890 61.009211 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5890: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1670201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5891 61.009251 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1671601 Win=65535 Len=0 Frame 5891: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1671601, Len: 0 No. Time Source Destination Protocol Length Info 5892 61.009333 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5892: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1671601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5893 61.009443 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5893: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1673001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5894 61.009494 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1674401 Win=65535 Len=0 Frame 5894: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1674401, Len: 0 No. Time Source Destination Protocol Length Info 5895 61.009613 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5895: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1674401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5896 61.009675 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5896: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1675801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5897 61.009742 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1677201 Win=65535 Len=0 Frame 5897: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1677201, Len: 0 No. Time Source Destination Protocol Length Info 5898 61.009812 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5898: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1677201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5899 61.009918 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5899: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1678601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5900 61.009957 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1680001 Win=65535 Len=0 Frame 5900: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1680001, Len: 0 No. Time Source Destination Protocol Length Info 5901 61.010088 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5901: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1680001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5902 61.022521 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5902: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1681401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5903 61.022553 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1682801 Win=65535 Len=0 Frame 5903: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1682801, Len: 0 No. Time Source Destination Protocol Length Info 5904 61.022601 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5904: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1682801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5905 61.022740 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5905: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1684201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5906 61.022766 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1685601 Win=65535 Len=0 Frame 5906: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1685601, Len: 0 No. Time Source Destination Protocol Length Info 5907 61.022824 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5907: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1685601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5908 61.022972 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5908: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1687001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5909 61.022998 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1688401 Win=65535 Len=0 Frame 5909: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1688401, Len: 0 No. Time Source Destination Protocol Length Info 5910 61.023064 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5910: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1688401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5911 61.026411 91.193.253.129 192.168.10.207 TCP 62 silkp3 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 5911: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 91.193.253.129 (91.193.253.129), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: silkp3 (2831), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 5912 61.026447 192.168.10.207 91.193.253.129 TCP 62 smtp > silkp3 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 5912: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 91.193.253.129 (91.193.253.129) Transmission Control Protocol, Src Port: smtp (25), Dst Port: silkp3 (2831), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 5913 61.027225 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5913: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1689801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5914 61.027252 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1691201 Win=65535 Len=0 Frame 5914: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1691201, Len: 0 No. Time Source Destination Protocol Length Info 5915 61.027306 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5915: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1691201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5916 61.027452 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5916: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1692601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5917 61.027476 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1694001 Win=65535 Len=0 Frame 5917: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1694001, Len: 0 No. Time Source Destination Protocol Length Info 5918 61.027544 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5918: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1694001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5919 61.027692 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5919: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1695401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5920 61.027718 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1696801 Win=65535 Len=0 Frame 5920: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1696801, Len: 0 No. Time Source Destination Protocol Length Info 5921 61.027790 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5921: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1696801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5922 61.027927 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5922: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1698201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5923 61.027951 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1699601 Win=65535 Len=0 Frame 5923: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1699601, Len: 0 No. Time Source Destination Protocol Length Info 5924 61.028031 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5924: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1699601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5925 61.028160 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5925: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1701001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5926 61.028184 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1702401 Win=65535 Len=0 Frame 5926: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1702401, Len: 0 No. Time Source Destination Protocol Length Info 5927 61.028264 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5927: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1702401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5928 61.028402 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5928: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1703801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5929 61.028431 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1705201 Win=65535 Len=0 Frame 5929: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1705201, Len: 0 No. Time Source Destination Protocol Length Info 5930 61.028489 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5930: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1705201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5931 61.028636 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5931: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1706601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5932 61.028660 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1708001 Win=65535 Len=0 Frame 5932: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1708001, Len: 0 No. Time Source Destination Protocol Length Info 5933 61.028733 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5933: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1708001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5934 61.040341 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5934: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1709401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5935 61.040382 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1710801 Win=65535 Len=0 Frame 5935: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1710801, Len: 0 No. Time Source Destination Protocol Length Info 5936 61.040401 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5936: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1710801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5937 61.045785 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5937: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1712201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5938 61.045826 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1713601 Win=65535 Len=0 Frame 5938: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1713601, Len: 0 No. Time Source Destination Protocol Length Info 5939 61.045850 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5939: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1713601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5940 61.045984 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5940: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1715001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5941 61.046009 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1716401 Win=65535 Len=0 Frame 5941: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1716401, Len: 0 No. Time Source Destination Protocol Length Info 5942 61.046079 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5942: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1716401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5943 61.046227 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5943: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1717801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5944 61.046251 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1719201 Win=65535 Len=0 Frame 5944: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1719201, Len: 0 No. Time Source Destination Protocol Length Info 5945 61.046320 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5945: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1719201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5946 61.046458 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5946: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1720601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5947 61.046489 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1722001 Win=65535 Len=0 Frame 5947: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1722001, Len: 0 No. Time Source Destination Protocol Length Info 5948 61.046556 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5948: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1722001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5949 61.046691 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5949: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1723401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5950 61.046716 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1724801 Win=65535 Len=0 Frame 5950: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1724801, Len: 0 No. Time Source Destination Protocol Length Info 5951 61.046824 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5951: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1724801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5952 61.046897 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5952: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1726201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5953 61.046954 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1727601 Win=65535 Len=0 Frame 5953: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1727601, Len: 0 No. Time Source Destination Protocol Length Info 5954 61.047024 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5954: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1727601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5955 61.047172 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5955: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1729001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5956 61.047202 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1730401 Win=65535 Len=0 Frame 5956: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1730401, Len: 0 No. Time Source Destination Protocol Length Info 5957 61.047256 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5957: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1730401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5958 61.047407 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5958: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1731801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5959 61.047432 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1733201 Win=65535 Len=0 Frame 5959: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1733201, Len: 0 No. Time Source Destination Protocol Length Info 5960 61.047503 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5960: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1733201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5961 61.047640 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5961: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1734601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5962 61.047666 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1736001 Win=65535 Len=0 Frame 5962: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1736001, Len: 0 No. Time Source Destination Protocol Length Info 5963 61.058329 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5963: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1736001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5964 61.058421 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5964: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1737401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5965 61.058476 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1738801 Win=65535 Len=0 Frame 5965: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1738801, Len: 0 No. Time Source Destination Protocol Length Info 5966 61.058594 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5966: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1738801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5967 61.058652 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5967: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1740201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5968 61.058710 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1741601 Win=65535 Len=0 Frame 5968: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1741601, Len: 0 No. Time Source Destination Protocol Length Info 5969 61.063985 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5969: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1741601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5970 61.064085 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5970: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1743001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5971 61.064132 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1744401 Win=65535 Len=0 Frame 5971: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1744401, Len: 0 No. Time Source Destination Protocol Length Info 5972 61.064495 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5972: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1744401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5973 61.064650 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5973: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1745801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5974 61.064679 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1747201 Win=65535 Len=0 Frame 5974: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1747201, Len: 0 No. Time Source Destination Protocol Length Info 5975 61.064739 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5975: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1747201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5976 61.064885 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5976: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1748601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5977 61.064910 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1750001 Win=65535 Len=0 Frame 5977: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1750001, Len: 0 No. Time Source Destination Protocol Length Info 5978 61.064984 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5978: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1750001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5979 61.065128 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5979: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1751401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5980 61.065154 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1752801 Win=65535 Len=0 Frame 5980: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1752801, Len: 0 No. Time Source Destination Protocol Length Info 5981 61.065208 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5981: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1752801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5982 61.065346 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5982: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1754201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5983 61.065375 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1755601 Win=65535 Len=0 Frame 5983: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1755601, Len: 0 No. Time Source Destination Protocol Length Info 5984 61.065575 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5984: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1755601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5985 61.065730 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5985: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1757001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5986 61.065755 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1758401 Win=65535 Len=0 Frame 5986: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1758401, Len: 0 No. Time Source Destination Protocol Length Info 5987 61.065815 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5987: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1758401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5988 61.065964 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5988: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1759801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5989 61.065988 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1761201 Win=65535 Len=0 Frame 5989: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1761201, Len: 0 No. Time Source Destination Protocol Length Info 5990 61.066057 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5990: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1761201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5991 61.066231 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5991: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1762601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5992 61.066275 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1764001 Win=65535 Len=0 Frame 5992: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1764001, Len: 0 No. Time Source Destination Protocol Length Info 5993 61.066345 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5993: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1764001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5994 61.066405 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5994: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1765401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5995 61.066479 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1766801 Win=65535 Len=0 Frame 5995: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1766801, Len: 0 No. Time Source Destination Protocol Length Info 5996 61.073098 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 5996: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2815, Ack: 195271, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 5997 61.073135 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=195271 Ack=2857 Win=46636 Len=0 Frame 5997: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 195271, Ack: 2857, Len: 0 No. Time Source Destination Protocol Length Info 5998 61.082382 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5998: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1766801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 5999 61.082477 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 5999: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1768201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6000 61.082572 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1769601 Win=65535 Len=0 Frame 6000: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1769601, Len: 0 No. Time Source Destination Protocol Length Info 6001 61.082604 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6001: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1769601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6002 61.082904 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6002: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1771001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6003 61.082944 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1772401 Win=65535 Len=0 Frame 6003: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1772401, Len: 0 No. Time Source Destination Protocol Length Info 6004 61.082974 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6004: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1772401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6005 61.083010 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6005: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1773801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6006 61.083058 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1775201 Win=65535 Len=0 Frame 6006: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1775201, Len: 0 No. Time Source Destination Protocol Length Info 6007 61.083091 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6007: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1775201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6008 61.083189 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6008: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1776601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6009 61.083231 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1778001 Win=65535 Len=0 Frame 6009: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1778001, Len: 0 No. Time Source Destination Protocol Length Info 6010 61.083312 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6010: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1778001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6011 61.083419 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6011: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1779401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6012 61.083505 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1780801 Win=65535 Len=0 Frame 6012: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1780801, Len: 0 No. Time Source Destination Protocol Length Info 6013 61.083582 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6013: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1780801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6014 61.084048 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6014: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1782201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6015 61.084103 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1783601 Win=65535 Len=0 Frame 6015: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1783601, Len: 0 No. Time Source Destination Protocol Length Info 6016 61.084137 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6016: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1783601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6017 61.084237 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6017: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1785001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6018 61.084321 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1786401 Win=65535 Len=0 Frame 6018: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1786401, Len: 0 No. Time Source Destination Protocol Length Info 6019 61.084404 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6019: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1786401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6020 61.084488 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6020: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1787801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6021 61.084529 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1789201 Win=65535 Len=0 Frame 6021: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1789201, Len: 0 No. Time Source Destination Protocol Length Info 6022 61.084616 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6022: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1789201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6023 61.084711 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6023: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1790601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6024 61.084774 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1792001 Win=65535 Len=0 Frame 6024: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1792001, Len: 0 No. Time Source Destination Protocol Length Info 6025 61.084835 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6025: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1792001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6026 61.121141 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6026: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1793401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6027 61.121177 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6027: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1794801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6028 61.121207 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6028: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1796201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6029 61.121244 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6029: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1797601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6030 61.121274 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6030: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1799001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6031 61.121324 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1794801 Win=65535 Len=0 Frame 6031: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1794801, Len: 0 No. Time Source Destination Protocol Length Info 6032 61.121361 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6032: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1800401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6033 61.121392 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6033: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1801801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6034 61.121430 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1797601 Win=65535 Len=0 Frame 6034: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1797601, Len: 0 No. Time Source Destination Protocol Length Info 6035 61.121461 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6035: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1803201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6036 61.121491 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6036: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1804601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6037 61.121527 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1800401 Win=65535 Len=0 Frame 6037: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1800401, Len: 0 No. Time Source Destination Protocol Length Info 6038 61.121556 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6038: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1806001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6039 61.121592 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1803201 Win=65535 Len=0 Frame 6039: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1803201, Len: 0 No. Time Source Destination Protocol Length Info 6040 61.121621 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6040: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1807401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6041 61.121657 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6041: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1808801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6042 61.121691 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6042: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1810201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6043 61.121728 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1806001 Win=62735 Len=0 Frame 6043: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1806001, Len: 0 No. Time Source Destination Protocol Length Info 6044 61.121778 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6044: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1811601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6045 61.121813 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6045: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1813001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6046 61.121853 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1808801 Win=59935 Len=0 Frame 6046: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1808801, Len: 0 No. Time Source Destination Protocol Length Info 6047 61.121882 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6047: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1814401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6048 61.121911 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6048: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1815801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6049 61.121946 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1811601 Win=57135 Len=0 Frame 6049: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1811601, Len: 0 No. Time Source Destination Protocol Length Info 6050 61.121975 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6050: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1817201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6051 61.122004 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6051: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1818601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6052 61.122041 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1814401 Win=54335 Len=0 Frame 6052: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1814401, Len: 0 No. Time Source Destination Protocol Length Info 6053 61.122070 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6053: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1820001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6054 61.122105 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6054: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1821401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6055 61.122146 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1817201 Win=51535 Len=0 Frame 6055: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1817201, Len: 0 No. Time Source Destination Protocol Length Info 6056 61.122175 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6056: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1822801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6057 61.122206 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6057: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1824201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6058 61.122244 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1820001 Win=48735 Len=0 Frame 6058: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1820001, Len: 0 No. Time Source Destination Protocol Length Info 6059 61.122278 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6059: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1825601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6060 61.122309 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6060: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1827001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6061 61.122346 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=1820001 Win=52495 Len=0 Frame 6061: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1820001, Len: 0 No. Time Source Destination Protocol Length Info 6062 61.122375 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6062: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1828401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6063 61.122411 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1822801 Win=65535 Len=0 Frame 6063: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1822801, Len: 0 No. Time Source Destination Protocol Length Info 6064 61.122440 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6064: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1829801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6065 61.122469 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6065: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1831201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6066 61.122498 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6066: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1832601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6067 61.122533 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6067: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1834001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6068 61.122573 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1828401 Win=59935 Len=0 Frame 6068: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1828401, Len: 0 No. Time Source Destination Protocol Length Info 6069 61.122603 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6069: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1835401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6070 61.122640 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1832601 Win=55735 Len=0 Frame 6070: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1832601, Len: 0 No. Time Source Destination Protocol Length Info 6071 61.122675 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6071: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1836801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6072 61.122705 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6072: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1838201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6073 61.122748 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1835401 Win=52935 Len=0 Frame 6073: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1835401, Len: 0 No. Time Source Destination Protocol Length Info 6074 61.122777 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6074: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1839601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6075 61.122806 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6075: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1841001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6076 61.122842 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1838201 Win=50135 Len=0 Frame 6076: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1838201, Len: 0 No. Time Source Destination Protocol Length Info 6077 61.122870 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6077: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1842401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6078 61.122900 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6078: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1843801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6079 61.122943 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1841001 Win=47335 Len=0 Frame 6079: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1841001, Len: 0 No. Time Source Destination Protocol Length Info 6080 61.122974 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6080: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1845201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6081 61.123005 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6081: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1846601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6082 61.123042 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1843801 Win=44535 Len=0 Frame 6082: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1843801, Len: 0 No. Time Source Destination Protocol Length Info 6083 61.123077 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1846601 Win=41735 Len=0 Frame 6083: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1846601, Len: 0 No. Time Source Destination Protocol Length Info 6084 61.123118 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1848001 Win=44095 Len=0 Frame 6084: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1848001, Len: 0 No. Time Source Destination Protocol Length Info 6085 61.123153 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=1848001 Win=65535 Len=0 Frame 6085: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1848001, Len: 0 No. Time Source Destination Protocol Length Info 6086 61.136584 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6086: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1848001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6087 61.136666 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6087: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1849401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6088 61.136716 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1850801 Win=65535 Len=0 Frame 6088: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1850801, Len: 0 No. Time Source Destination Protocol Length Info 6089 61.136945 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6089: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1850801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6090 61.137521 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6090: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1852201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6091 61.137581 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1853601 Win=65535 Len=0 Frame 6091: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1853601, Len: 0 No. Time Source Destination Protocol Length Info 6092 61.158438 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2611943680, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 6092: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6093 61.158461 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2611943680, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 6093: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6094 61.158474 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2611943680, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 6094: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6095 61.158487 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2611943680, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 6095: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6096 61.173252 Oracle_d0:a0:8b Broadcast ARP 60 Gratuitous ARP for 192.168.10.211 (Request) Frame 6096: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 6097 61.173279 Oracle_d0:a0:8b Broadcast ARP 60 Gratuitous ARP for 192.168.10.211 (Request) Frame 6097: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 6098 61.175655 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6098: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1853601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6099 61.175690 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6099: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1855001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6100 61.175727 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6100: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1856401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6101 61.175757 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6101: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1857801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6102 61.175786 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6102: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1859201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6103 61.175815 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6103: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1860601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6104 61.175865 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1856401 Win=65535 Len=0 Frame 6104: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1856401, Len: 0 No. Time Source Destination Protocol Length Info 6105 61.175905 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6105: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1862001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6106 61.175938 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6106: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1863401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6107 61.175980 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1859201 Win=65535 Len=0 Frame 6107: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1859201, Len: 0 No. Time Source Destination Protocol Length Info 6108 61.176013 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6108: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1864801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6109 61.176046 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6109: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1866201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6110 61.176087 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1862001 Win=65535 Len=0 Frame 6110: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1862001, Len: 0 No. Time Source Destination Protocol Length Info 6111 61.176118 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6111: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1867601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6112 61.176148 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6112: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1869001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6113 61.176190 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1864801 Win=65535 Len=0 Frame 6113: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1864801, Len: 0 No. Time Source Destination Protocol Length Info 6114 61.176227 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6114: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1870401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6115 61.176265 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1867601 Win=65535 Len=0 Frame 6115: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1867601, Len: 0 No. Time Source Destination Protocol Length Info 6116 61.176296 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6116: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1871801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6117 61.176336 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6117: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1873201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6118 61.176409 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1870401 Win=65535 Len=0 Frame 6118: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1870401, Len: 0 No. Time Source Destination Protocol Length Info 6119 61.176439 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6119: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1874601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6120 61.176477 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6120: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1876001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6121 61.176513 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1873201 Win=62735 Len=0 Frame 6121: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1873201, Len: 0 No. Time Source Destination Protocol Length Info 6122 61.176542 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6122: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1877401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6123 61.176574 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6123: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1878801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6124 61.176611 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6124: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1880201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6125 61.176648 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1877401 Win=58535 Len=0 Frame 6125: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1877401, Len: 0 No. Time Source Destination Protocol Length Info 6126 61.176678 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6126: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1881601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6127 61.176708 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6127: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1883001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6128 61.176744 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1880201 Win=55735 Len=0 Frame 6128: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1880201, Len: 0 No. Time Source Destination Protocol Length Info 6129 61.176773 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6129: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1884401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6130 61.176802 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6130: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1885801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6131 61.176838 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1883001 Win=56695 Len=0 Frame 6131: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1883001, Len: 0 No. Time Source Destination Protocol Length Info 6132 61.176866 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6132: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1887201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6133 61.176910 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1885801 Win=64135 Len=0 Frame 6133: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1885801, Len: 0 No. Time Source Destination Protocol Length Info 6134 61.176948 192.168.10.221 24.143.205.163 TCP 60 [TCP Dup ACK 6133#1] 4795 > http [ACK] Seq=3042 Ack=1885801 Win=64135 Len=0 Frame 6134: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1885801, Len: 0 No. Time Source Destination Protocol Length Info 6135 61.176978 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6135: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1888601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6136 61.177015 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1888601 Win=61335 Len=0 Frame 6136: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1888601, Len: 0 No. Time Source Destination Protocol Length Info 6137 61.177050 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1890001 Win=63695 Len=0 Frame 6137: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1890001, Len: 0 No. Time Source Destination Protocol Length Info 6138 61.177084 192.168.10.221 24.143.205.163 TCP 60 [TCP Dup ACK 6137#1] 4795 > http [ACK] Seq=3042 Ack=1890001 Win=63695 Len=0 Frame 6138: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1890001, Len: 0 No. Time Source Destination Protocol Length Info 6139 61.177113 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6139: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1890001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6140 61.177148 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=1890001 Win=65535 Len=0 Frame 6140: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1890001, Len: 0 No. Time Source Destination Protocol Length Info 6141 61.178947 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 186122496, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 6141: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6142 61.178968 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 186122496, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 6142: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6143 61.178980 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 186122496, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 6143: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6144 61.178992 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 186122496, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 6144: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6145 61.193913 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 6145: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 6146 61.194983 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6146: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1891401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6147 61.195046 91.193.253.129 192.168.10.207 TCP 60 silkp3 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 6147: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 91.193.253.129 (91.193.253.129), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: silkp3 (2831), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 6148 61.195084 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1892801 Win=65535 Len=0 Frame 6148: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1892801, Len: 0 No. Time Source Destination Protocol Length Info 6149 61.195113 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6149: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1892801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6150 61.195142 192.168.10.207 91.193.253.129 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:44:53 -0400 Frame 6150: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 91.193.253.129 (91.193.253.129) Transmission Control Protocol, Src Port: smtp (25), Dst Port: silkp3 (2831), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6151 61.195223 192.168.10.1 192.168.10.245 Syslog 204 LOCAL1.INFO: Oct 3 19:45:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 91.193.253.129 7x.x.x.3 2831 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 6151: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:45:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 91.193.253.129 7x.x.x.3 2831 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 6152 61.195262 91.193.253.129 192.168.10.207 TCP 60 silkp3 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 6152: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 91.193.253.129 (91.193.253.129), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: silkp3 (2831), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 6153 61.230489 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6153: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1894201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6154 61.230527 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6154: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1895601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6155 61.230567 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6155: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1897001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6156 61.230608 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6156: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1898401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6157 61.230641 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6157: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1899801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6158 61.230691 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1895601 Win=65535 Len=0 Frame 6158: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1895601, Len: 0 No. Time Source Destination Protocol Length Info 6159 61.230722 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6159: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1901201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6160 61.230753 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6160: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1902601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6161 61.230793 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1898401 Win=65535 Len=0 Frame 6161: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1898401, Len: 0 No. Time Source Destination Protocol Length Info 6162 61.230825 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6162: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1904001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6163 61.230865 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6163: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1905401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6164 61.230908 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1901201 Win=65535 Len=0 Frame 6164: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1901201, Len: 0 No. Time Source Destination Protocol Length Info 6165 61.230938 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6165: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1906801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6166 61.230969 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6166: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1908201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6167 61.231006 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1904001 Win=65535 Len=0 Frame 6167: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1904001, Len: 0 No. Time Source Destination Protocol Length Info 6168 61.231043 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1906801 Win=65535 Len=0 Frame 6168: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1906801, Len: 0 No. Time Source Destination Protocol Length Info 6169 61.231087 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1909601 Win=65535 Len=0 Frame 6169: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1909601, Len: 0 No. Time Source Destination Protocol Length Info 6170 61.242343 123.18.166.30 192.168.10.207 SMTP 60 C: QUIT Frame 6170: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 123.18.166.30 (123.18.166.30), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 28379 (28379), Dst Port: smtp (25), Seq: 65, Ack: 368, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6171 61.242420 192.168.10.207 123.18.166.30 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 6171: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 123.18.166.30 (123.18.166.30) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 28379 (28379), Seq: 368, Ack: 71, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6172 61.242460 123.18.166.30 192.168.10.207 TCP 60 28379 > smtp [ACK] Seq=71 Ack=437 Win=93004 Len=0 Frame 6172: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 123.18.166.30 (123.18.166.30), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 28379 (28379), Dst Port: smtp (25), Seq: 71, Ack: 437, Len: 0 No. Time Source Destination Protocol Length Info 6173 61.242490 192.168.10.207 123.18.166.30 TCP 60 smtp > 28379 [FIN, ACK] Seq=437 Ack=71 Win=65465 Len=0 Frame 6173: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 123.18.166.30 (123.18.166.30) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 28379 (28379), Seq: 437, Ack: 71, Len: 0 No. Time Source Destination Protocol Length Info 6174 61.242532 123.18.166.30 192.168.10.207 TCP 60 28379 > smtp [ACK] Seq=71 Ack=438 Win=93004 Len=0 Frame 6174: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 123.18.166.30 (123.18.166.30), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 28379 (28379), Dst Port: smtp (25), Seq: 71, Ack: 438, Len: 0 No. Time Source Destination Protocol Length Info 6175 61.249709 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6175: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1909601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6176 61.267664 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6176: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1911001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6177 61.267715 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1912401 Win=65535 Len=0 Frame 6177: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1912401, Len: 0 No. Time Source Destination Protocol Length Info 6178 61.285962 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6178: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1912401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6179 61.286000 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6179: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1913801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6180 61.286059 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1915201 Win=65535 Len=0 Frame 6180: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1915201, Len: 0 No. Time Source Destination Protocol Length Info 6181 61.304138 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6181: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1915201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6182 61.304176 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6182: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1916601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6183 61.304222 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1918001 Win=65535 Len=0 Frame 6183: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1918001, Len: 0 No. Time Source Destination Protocol Length Info 6184 61.304254 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6184: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1918001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6185 61.315282 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 6185: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 6186 61.322448 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6186: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1919401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6187 61.322498 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1920801 Win=65535 Len=0 Frame 6187: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1920801, Len: 0 No. Time Source Destination Protocol Length Info 6188 61.322532 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6188: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1920801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6189 61.322563 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6189: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1922201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6190 61.322649 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1923601 Win=65535 Len=0 Frame 6190: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1923601, Len: 0 No. Time Source Destination Protocol Length Info 6191 61.340653 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6191: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1923601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6192 61.340692 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6192: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1925001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6193 61.340748 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1926401 Win=65535 Len=0 Frame 6193: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1926401, Len: 0 No. Time Source Destination Protocol Length Info 6194 61.340780 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6194: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1926401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6195 61.340888 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6195: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1927801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6196 61.340934 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1929201 Win=65535 Len=0 Frame 6196: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1929201, Len: 0 No. Time Source Destination Protocol Length Info 6197 61.344238 192.168.10.203 91.207.181.14 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 6197: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 91.207.181.14 (91.207.181.14) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 6198 61.358955 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6198: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1929201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6199 61.358989 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6199: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1930601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6200 61.359040 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1932001 Win=65535 Len=0 Frame 6200: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1932001, Len: 0 No. Time Source Destination Protocol Length Info 6201 61.359082 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6201: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1932001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6202 61.359286 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6202: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1933401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6203 61.359326 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1934801 Win=65535 Len=0 Frame 6203: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1934801, Len: 0 No. Time Source Destination Protocol Length Info 6204 61.443602 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 6204: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 6205 61.487140 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6205: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1934801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6206 61.487177 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6206: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1936201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6207 61.487208 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6207: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1937601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6208 61.487246 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6208: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1939001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6209 61.487276 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6209: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1940401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6210 61.487305 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6210: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1941801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6211 61.487358 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1937601 Win=65535 Len=0 Frame 6211: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1937601, Len: 0 No. Time Source Destination Protocol Length Info 6212 61.487399 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6212: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1943201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6213 61.487433 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6213: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1944601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6214 61.487466 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6214: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1946001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6215 61.487510 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1940401 Win=65535 Len=0 Frame 6215: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1940401, Len: 0 No. Time Source Destination Protocol Length Info 6216 61.487543 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6216: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1947401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6217 61.487585 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1943201 Win=65535 Len=0 Frame 6217: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1943201, Len: 0 No. Time Source Destination Protocol Length Info 6218 61.487617 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6218: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1948801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6219 61.487651 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6219: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1950201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6220 61.487696 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1946001 Win=65535 Len=0 Frame 6220: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1946001, Len: 0 No. Time Source Destination Protocol Length Info 6221 61.487734 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6221: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1951601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6222 61.487766 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6222: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1953001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6223 61.487804 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1950201 Win=65535 Len=0 Frame 6223: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1950201, Len: 0 No. Time Source Destination Protocol Length Info 6224 61.487833 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6224: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1954401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6225 61.487863 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6225: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1955801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6226 61.487900 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1953001 Win=65535 Len=0 Frame 6226: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1953001, Len: 0 No. Time Source Destination Protocol Length Info 6227 61.487929 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6227: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1957201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6228 61.487958 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6228: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1958601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6229 61.488014 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1955801 Win=65535 Len=0 Frame 6229: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1955801, Len: 0 No. Time Source Destination Protocol Length Info 6230 61.488053 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6230: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1960001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6231 61.488083 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6231: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1961401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6232 61.488121 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1958601 Win=65535 Len=0 Frame 6232: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1958601, Len: 0 No. Time Source Destination Protocol Length Info 6233 61.488156 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1961401 Win=65535 Len=0 Frame 6233: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1961401, Len: 0 No. Time Source Destination Protocol Length Info 6234 61.505864 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 6234: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4873, Ack: 379314, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6235 61.505920 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6235: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1962801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6236 61.505954 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6236: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1964201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6237 61.505983 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6237: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1965601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6238 61.506016 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6238: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1967001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6239 61.506049 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6239: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1968401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6240 61.506105 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1964201 Win=65535 Len=0 Frame 6240: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1964201, Len: 0 No. Time Source Destination Protocol Length Info 6241 61.506139 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6241: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1969801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6242 61.506172 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6242: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1971201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6243 61.506212 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1968401 Win=65535 Len=0 Frame 6243: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1968401, Len: 0 No. Time Source Destination Protocol Length Info 6244 61.506252 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6244: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1972601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6245 61.506283 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6245: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1974001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6246 61.506323 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1971201 Win=65535 Len=0 Frame 6246: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1971201, Len: 0 No. Time Source Destination Protocol Length Info 6247 61.506353 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6247: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1975401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6248 61.506384 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6248: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1976801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6249 61.506424 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1974001 Win=65535 Len=0 Frame 6249: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1974001, Len: 0 No. Time Source Destination Protocol Length Info 6250 61.506455 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6250: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1978201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6251 61.506487 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6251: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1979601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6252 61.506535 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1976801 Win=65535 Len=0 Frame 6252: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1976801, Len: 0 No. Time Source Destination Protocol Length Info 6253 61.506571 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=379314 Ack=4915 Win=46615 Len=0 Frame 6253: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 379314, Ack: 4915, Len: 0 No. Time Source Destination Protocol Length Info 6254 61.506608 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1981001 Win=65535 Len=0 Frame 6254: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1981001, Len: 0 No. Time Source Destination Protocol Length Info 6255 61.524372 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6255: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1981001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6256 61.525239 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 6256: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 6257 61.525267 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 6257: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 6258 61.537627 123.18.166.30 192.168.10.207 TCP 60 28379 > smtp [RST, ACK] Seq=71 Ack=438 Win=93004 Len=0 Frame 6258: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 123.18.166.30 (123.18.166.30), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 28379 (28379), Dst Port: smtp (25), Seq: 71, Ack: 438, Len: 0 No. Time Source Destination Protocol Length Info 6259 61.538293 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=137030 Ack=2443 Win=1002 Len=1448 TSval=550633 TSecr=728012 Frame 6259: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 137030, Ack: 2443, Len: 1448 Data (1448 bytes) 0000 17 03 01 22 e0 dc 08 77 8f 64 f6 4b 65 03 f1 1d ..."...w.d.Ke... 0010 b1 d4 c5 80 12 84 87 97 19 22 59 04 99 f1 cf 5c ........."Y....\ 0020 b9 df de 08 00 ed 7c 4a 81 ab 7a 4d 5f 04 18 4f ......|J..zM_..O 0030 b2 30 ff e1 58 3b 93 3e 02 25 ac d8 e8 95 b7 13 .0..X;.>.%...... 0040 24 64 59 14 12 f2 6d fb ee 03 70 23 f0 a3 6f b3 $dY...m...p#..o. 0050 32 e8 1f 5e db a4 6a 93 24 2e ab 45 81 55 e1 83 2..^..j.$..E.U.. 0060 a2 8b d9 dc 86 b6 9d 77 7f 14 50 7a 4c 32 d3 69 .......w..PzL2.i 0070 7f c7 a6 68 4b f5 29 e1 26 75 1d b5 3d b5 73 0a ...hK.).&u..=.s. 0080 b0 cd 8f 2a 88 73 84 d2 c8 f2 2b 33 35 a6 fe ef ...*.s....+35... 0090 ca 45 b3 6c ca 44 d4 35 4f 2d 37 74 b8 66 af e1 .E.l.D.5O-7t.f.. 00a0 04 e5 22 8f a2 23 25 cf c9 8e 82 04 b6 0f 50 0d .."..#%.......P. 00b0 63 6e 70 8c 66 37 6f 41 3d 0f ad fb 3e 73 23 8e cnp.f7oA=...>s#. 00c0 2d 58 2f ae aa 27 69 a8 7e 01 b1 57 75 26 bb 4f -X/..'i.~..Wu&.O 00d0 22 39 2b 3e 04 29 83 f7 35 87 d8 ea 98 a9 77 5b "9+>.)..5.....w[ 00e0 7b 08 c8 b9 02 6d 5b ee fe 0b b7 88 87 23 d2 ec {....m[......#.. 00f0 c7 9b 7c be aa 33 b4 47 59 94 6e 33 fb 53 80 cb ..|..3.GY.n3.S.. 0100 0d 43 85 9f ea f1 ff 83 8e f1 ff d8 02 ac 94 23 .C.............# 0110 26 32 b8 4f e8 d2 f0 5a 13 f1 12 85 2b 2c 05 36 &2.O...Z....+,.6 0120 34 72 9f 2c 15 9c f1 9c c9 74 9c c5 ad 82 6b 96 4r.,.....t....k. 0130 01 ea c9 82 f4 48 80 a0 6d 5e a4 36 6e 56 a8 59 .....H..m^.6nV.Y 0140 4e 77 89 f5 69 a4 89 91 c7 ac 49 a3 ab 69 06 61 Nw..i.....I..i.a 0150 65 54 11 3b ad 7d 42 bd 57 c1 13 3c 09 f6 91 f1 eT.;.}B.W..<.... 0160 82 5a 17 e9 f9 c7 31 b9 2d 05 35 58 51 1e 17 9c .Z....1.-.5XQ... 0170 18 fc a8 c7 86 2b 92 bc 85 25 40 45 cb df 52 7c .....+...%@E..R| 0180 db 9d b4 76 ae 7c 09 4d 7f b0 92 d9 9d 3b 51 c0 ...v.|.M.....;Q. 0190 84 24 d4 c1 ad 6e 66 80 77 10 0f ec 4b fb 57 0b .$...nf.w...K.W. 01a0 0e ca bb 0d c7 cf 07 7a 2f 4d 46 2c 28 e6 5a 66 .......z/MF,(.Zf 01b0 ed 12 23 3f 81 23 d7 0e 93 bf 4f 0d 98 fe 53 d6 ..#?.#....O...S. 01c0 27 b5 68 9e d2 35 4c 43 f7 44 80 7b ac e1 b3 d8 '.h..5LC.D.{.... 01d0 5d 32 bc ce bb 52 88 f7 ff 19 50 e4 ab be cb b9 ]2...R....P..... 01e0 1a 99 a5 4b 8f ad a4 75 f8 a2 b5 1d ad 3a 93 58 ...K...u.....:.X 01f0 b4 a2 04 34 cf fb 85 ba f1 a0 01 04 a1 b7 62 94 ...4..........b. 0200 ab 63 0a ea ed 66 1f e6 73 7b 6a d0 fe fd 4e 77 .c...f..s{j...Nw 0210 12 c9 85 49 6f c9 c5 ff 98 cd 17 06 90 34 e9 67 ...Io........4.g 0220 1b c4 1b 08 e7 41 5b cc 92 6f 8b c9 90 fa e2 ae .....A[..o...... 0230 25 73 58 ea 72 fd eb 1d 61 06 6e 95 4c 02 8c 29 %sX.r...a.n.L..) 0240 2a 19 a4 fc cc 71 ef f4 39 bf 1d 73 60 fa e0 3b *....q..9..s`..; 0250 ce 63 d2 a8 f9 c8 1c 66 38 97 56 ab a9 f6 79 3a .c.....f8.V...y: 0260 fd 40 5a 7a bc 68 95 00 bb be 60 02 8a 6c 6e 73 [email protected]....`..lns 0270 43 ff be 56 02 4e 45 96 ad b2 21 58 bb 74 dc ae C..V.NE...!X.t.. 0280 8c f5 a0 eb 50 f8 20 09 e1 90 67 10 bb 3d d6 b9 ....P. ...g..=.. 0290 a2 6d 25 30 bf c8 5d 05 b1 9a 44 ea ea 3e ef bd .m%0..]...D..>.. 02a0 60 b4 c2 a0 b5 7d 69 6d bb e8 0d 91 86 1e 23 79 `....}im......#y 02b0 76 7d 5b eb a0 70 89 8d 8a 29 5c 24 6e 78 1d 87 v}[..p...)\$nx.. 02c0 e2 e1 04 e0 c7 eb 63 e1 bc 99 31 3a 68 3c 80 ee ......c...1:h<.. 02d0 97 cc f5 70 29 78 d8 9b a2 b7 7e 37 91 8b ad c2 ...p)x....~7.... 02e0 7e f1 d2 0e dc 49 52 84 38 2d 0b ac c9 42 84 c1 ~....IR.8-...B.. 02f0 ba 67 a5 a6 4c 0b a8 87 20 11 fb b1 16 9f 2e 39 .g..L... ......9 0300 90 27 03 fc 55 b2 12 d0 09 4d 22 15 6e 72 6c ee .'..U....M".nrl. 0310 b1 68 ac 12 58 2e 4e 10 d5 3a 72 e1 e9 3b 4b a7 .h..X.N..:r..;K. 0320 f0 49 64 ec 77 57 fe 98 a8 7f d1 4e 01 60 26 55 .Id.wW.....N.`&U 0330 bb 7a fc f3 69 b5 32 09 21 5b 0f 69 d3 12 c5 52 .z..i.2.![.i...R 0340 c2 5d 65 c4 d8 01 7b ec f9 ec 5c 16 45 3d 01 29 .]e...{...\.E=.) 0350 a1 f7 68 25 7f c7 8e 90 d6 63 d5 3c 7d a9 13 e2 ..h%.....c.<}... 0360 40 2a 8c 1c bc d5 38 30 f9 1b 33 0c 54 71 a1 74 @*....80..3.Tq.t 0370 7d a6 6a 2b 5a 1d 5d 0e 8e 54 52 93 fe 14 64 d3 }.j+Z.]..TR...d. 0380 be fd 5f 14 ee 67 ff c8 41 0b 64 9d c9 e1 77 d4 .._..g..A.d...w. 0390 bf f3 50 d1 71 dc 87 4b 0c a4 6a 52 ea 41 51 87 ..P.q..K..jR.AQ. 03a0 c9 a9 88 95 76 7b e3 1c a5 3f 79 1e ef b4 dd 58 ....v{...?y....X 03b0 f4 0a 33 1d 24 1b cf f6 f6 26 a7 3c e8 a3 55 7e ..3.$....&.<..U~ 03c0 38 02 a5 86 35 14 e7 4a 6b 2d ac 02 19 68 93 11 8...5..Jk-...h.. 03d0 21 bf 28 d8 45 40 6f af 5d 89 b0 6b 83 66 f3 67 !.(.E@o.]..k.f.g 03e0 dd cd 8a 42 08 93 07 a8 d7 74 d9 a6 21 b3 e2 85 ...B.....t..!... 03f0 18 af dc 9e b5 c1 f0 91 68 7a b8 ee 9c ec 5e 88 ........hz....^. 0400 ce b0 a0 da 5c 61 ed f3 f9 c5 80 c4 1d 38 f7 85 ....\a.......8.. 0410 af a8 a5 28 4d ce 9e d2 58 7b a4 7f 98 eb 18 3b ...(M...X{.....; 0420 10 70 92 0d 65 b9 ad b3 7c 9d 5e 86 f5 63 33 62 .p..e...|.^..c3b 0430 ee de f8 6d 59 3a b8 a7 74 7e 02 50 41 8b 66 bc ...mY:..t~.PA.f. 0440 00 dd 4f 7d 01 c2 0e 98 c4 42 1e 62 b5 11 c0 1d ..O}.....B.b.... 0450 f7 c9 81 9a 65 cb 05 f5 b0 ad 52 0d 08 93 3d f9 ....e.....R...=. 0460 bd e2 10 e6 f4 f3 43 0a 4b 73 1f b2 7e 99 8a c7 ......C.Ks..~... 0470 c9 c2 27 54 4f c2 9e 91 59 17 e1 ad 8d d5 11 a0 ..'TO...Y....... 0480 cd 8b be 0e e3 eb a8 2a 04 e9 ee f8 5e 7b 4e 18 .......*....^{N. 0490 32 a4 e7 e2 a3 9c ab 5c d1 e1 2b 0f 30 ea 69 8c 2......\..+.0.i. 04a0 82 1c 99 7b 45 2d d3 aa 80 f0 91 a9 48 58 ad 5e ...{E-......HX.^ 04b0 57 7d d5 cd 7a 5f 4e 5b 79 17 c8 d1 3d b8 85 2d W}..z_N[y...=..- 04c0 68 4e a4 a6 1a 99 37 27 41 96 1a b3 05 5e 95 b4 hN....7'A....^.. 04d0 2e 3a c2 1d c9 b2 45 5d fe 24 98 e1 43 e4 a3 28 .:....E].$..C..( 04e0 5f f4 8c 0c 7b 5d 65 d2 14 37 74 26 ff 52 cb 61 _...{]e..7t&.R.a 04f0 66 05 02 f3 ee 91 ab 39 2b b7 19 26 74 0b 38 eb f......9+..&t.8. 0500 bd b3 5c 27 7b 46 30 9e 03 20 e1 db bd a7 e2 97 ..\'{F0.. ...... 0510 e6 57 63 d8 51 68 af 12 04 f4 f9 5a 40 b8 4a fa [email protected]. 0520 f2 a5 2d 36 59 d7 fc 9f 30 27 e9 e0 b9 fd ff 08 ..-6Y...0'...... 0530 88 c2 b0 2c e7 5b bf a9 05 53 5c ae 5b 84 06 44 ...,.[...S\.[..D 0540 52 dd cc e5 97 e1 2f 4a d2 bd ce 57 9d d8 f6 7d R...../J...W...} 0550 1c 87 51 c5 d4 e9 f0 8a fa 2e f1 b1 03 4e 23 77 ..Q..........N#w 0560 8b ec 0b a3 53 8c f3 2b 3b fd c7 b5 24 67 21 6b ....S..+;...$g!k 0570 4d dc 88 b9 2c 04 2b 7d 05 5e f1 3a 53 ab c6 89 M...,.+}.^.:S... 0580 e0 1b 09 9e 8b 42 01 5f 47 49 cf 86 e3 58 db ef .....B._GI...X.. 0590 87 c7 a2 34 13 d9 52 32 a3 46 60 bd a3 7c ce cc ...4..R2.F`..|.. 05a0 85 c3 15 ca 8b 9c 8c 98 ........ No. Time Source Destination Protocol Length Info 6260 61.538379 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=138478 Ack=2443 Win=1002 Len=1448 TSval=550633 TSecr=728012 Frame 6260: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 138478, Ack: 2443, Len: 1448 Data (1448 bytes) 0000 25 99 c7 8b 4a dd 36 9e 16 f5 e8 ae d7 b3 ec ec %...J.6......... 0010 1a ef bd 68 72 7d 6c 1b 45 ba 50 cf 38 fd 28 96 ...hr}l.E.P.8.(. 0020 8c ed 02 31 69 86 97 35 22 79 5d cc 20 19 0a 3e ...1i..5"y]. ..> 0030 68 68 3a ff 1a 17 73 ca b4 74 bc 85 3b 2b 17 8c hh:...s..t..;+.. 0040 fe 7a 7b a3 bc d3 c1 49 39 c8 4e 32 ae 93 4d 12 .z{....I9.N2..M. 0050 b1 f8 3c c2 e8 f0 8b 53 cf ad 15 75 83 35 91 b0 ..<....S...u.5.. 0060 46 b2 28 d5 8a 0d 91 f6 8e 82 8d cf da 38 10 f7 F.(..........8.. 0070 f6 82 c0 8b d4 49 9f db b9 7c 13 b4 c7 08 6e db .....I...|....n. 0080 06 be a9 b4 d1 23 e2 6b d6 c7 83 42 b8 34 b3 69 .....#.k...B.4.i 0090 39 91 9a c3 e2 78 84 a5 89 ca 7c 73 66 a1 71 31 9....x....|sf.q1 00a0 5b ae ec 25 f9 68 d7 93 6a 14 ab 85 77 8d 9b 1b [..%.h..j...w... 00b0 97 e7 6d f2 63 81 9a 61 4e 22 ea f1 f2 29 ae 82 ..m.c..aN"...).. 00c0 02 f0 cd 8b 60 1c e5 0d ea b5 4e a6 4c ba 70 b0 ....`.....N.L.p. 00d0 f6 0c 97 69 8a 84 62 7e 20 2b ef 82 e7 f0 39 58 ...i..b~ +....9X 00e0 96 b7 fd 9b 4d cb cf 39 e0 41 a9 f5 38 0a 45 0d ....M..9.A..8.E. 00f0 b0 13 13 26 b8 55 11 b8 e2 17 51 db 1f 1c 12 01 ...&.U....Q..... 0100 58 f4 b4 0c f6 cb 02 28 00 ad 37 78 93 ae 7d a5 X......(..7x..}. 0110 92 52 74 c4 08 fc 1e 53 7d 97 1b c9 93 07 17 77 .Rt....S}......w 0120 1b af f3 34 d2 45 e7 99 e1 c5 2a 7e 44 31 11 78 ...4.E....*~D1.x 0130 00 cd f1 3c 02 13 39 09 e2 bc 8c 0e 9b cb c2 55 ...<..9........U 0140 b0 77 37 92 19 15 73 11 36 64 ca 68 b1 8b c5 46 .w7...s.6d.h...F 0150 db cb 26 5a b7 27 7a ca 81 99 2a 5a 36 ab 1f 18 ..&Z.'z...*Z6... 0160 93 4b b3 9d d7 a6 0c ab 9d fd c5 56 0a 12 53 e3 .K.........V..S. 0170 52 54 0b 3d 7b 7c a0 c1 77 17 6b e0 26 e0 84 ed RT.={|..w.k.&... 0180 4b e7 af 58 bc 34 52 be 40 1c 15 c0 c4 8f 59 1c [email protected]. 0190 02 f5 f7 dc 11 69 b5 3f cf 94 1a 71 45 69 b9 a6 .....i.?...qEi.. 01a0 1b 19 79 e3 71 0a 89 56 9a 59 0b 5b cd 5b b9 8f ..y.q..V.Y.[.[.. 01b0 0e 6c f3 fd 98 10 de 51 bc 69 e2 60 d0 fa 52 ef .l.....Q.i.`..R. 01c0 87 20 b6 b9 1d 38 eb fe 9f 02 f4 6f ca 6e 3a f3 . ...8.....o.n:. 01d0 dc 8b c1 53 50 97 01 6b b6 06 36 ae 99 2a 1e 01 ...SP..k..6..*.. 01e0 72 f5 67 63 ed 77 8f 22 a6 35 4b b1 49 56 6a d2 r.gc.w.".5K.IVj. 01f0 cb 49 4c 63 81 13 87 5d 96 b9 d4 a7 ff 69 ca 2e .ILc...].....i.. 0200 24 00 12 5f 36 70 5e b7 3e ec b7 d4 91 08 2d 86 $.._6p^.>.....-. 0210 39 80 a6 81 4b 79 9a eb 6f e6 33 74 e6 da 7f 91 9...Ky..o.3t.... 0220 b7 8d a0 d4 ed c1 99 3f 5a c7 39 7a 49 2b 21 4c .......?Z.9zI+!L 0230 54 15 1a c7 6c 4a 9a b2 12 22 d5 d4 69 3c 96 19 T...lJ..."..i<.. 0240 f7 a9 e4 5f 2b b7 8e 29 e8 c4 7f 6f 5c a1 a3 da ..._+..)...o\... 0250 eb 77 2d ed 82 ab 93 c8 ef 95 4e f0 1f f8 79 ce .w-.......N...y. 0260 6f b0 05 72 27 89 ed 75 fd 35 18 34 b8 f0 63 d4 o..r'..u.5.4..c. 0270 8e c9 ed 3a e2 0d 48 be 87 eb 84 99 d2 88 57 31 ...:..H.......W1 0280 6f ab 12 24 5c f4 ee 86 53 e0 3c 51 69 ef c1 bc o..$\...S.<Qi... 0290 ab c8 8d 6c 4f b6 d1 2d ef 66 36 8d c5 d9 98 95 ...lO..-.f6..... 02a0 a0 55 5d 0f a5 b4 2d 58 fe d9 5a 8b ce 9c 57 ee .U]...-X..Z...W. 02b0 21 36 2a 78 6c f0 96 e2 78 a0 99 bf 4a 82 fc 79 !6*xl...x...J..y 02c0 99 3e f5 bc af a2 3e 0b ac 76 d4 43 f8 94 4a 61 .>....>..v.C..Ja 02d0 b3 b4 20 25 31 23 e9 21 99 3f 86 f5 1d 84 95 46 .. %1#.!.?.....F 02e0 52 1b 24 99 bc 42 fe 91 2a 12 3d e0 03 4c 6f 20 R.$..B..*.=..Lo 02f0 21 41 65 80 a4 75 e9 87 39 33 1a 12 c1 87 17 99 !Ae..u..93...... 0300 11 ff e8 cc 17 0c b3 cb 8f 1a 9a 8e 7a 2a 33 9f ............z*3. 0310 cb 80 6d 77 b7 55 8e 71 7c d8 cc a8 44 dd 91 1a ..mw.U.q|...D... 0320 79 11 cd 7b 2e f6 db 80 9b 32 46 95 69 0f 8e 76 y..{.....2F.i..v 0330 a5 ea fe f3 52 08 e3 ae 0c f2 eb 47 33 48 4c cc ....R......G3HL. 0340 80 26 c1 3c a4 09 37 f6 b5 25 06 3b 83 9c 4b ec .&.<..7..%.;..K. 0350 59 8c a4 37 32 7e 29 2d c3 aa 70 7f 64 c9 49 ff Y..72~)-..p.d.I. 0360 f9 49 42 e5 af 7a f5 d7 63 bb 62 b8 10 32 e0 51 .IB..z..c.b..2.Q 0370 75 05 30 c6 f4 c6 0a 8f 2f a0 e3 1d 21 7b ca 6a u.0...../...!{.j 0380 c6 2c 8f 4b 18 2e f6 ec 1f 2f 09 02 b7 f7 37 e5 .,.K...../....7. 0390 22 ee ad c4 f7 19 37 29 50 2e 99 07 02 3a 7c 0a ".....7)P....:|. 03a0 09 27 4c fe f7 c7 6c 63 a7 cb 4c ab 59 a9 8f 21 .'L...lc..L.Y..! 03b0 b2 df 13 f3 0e 0f 60 cd f4 14 be a3 52 b8 60 12 ......`.....R.`. 03c0 a6 9e 0d f6 a2 b9 5f 11 eb 4f 5a c7 4c 7d 6d 97 ......_..OZ.L}m. 03d0 24 21 0d 5c dd 43 71 dd b7 7a a5 b4 4a 7c 6d 7a $!.\.Cq..z..J|mz 03e0 74 43 e8 30 f1 e3 41 c6 b0 be d7 48 f5 5e f3 d0 tC.0..A....H.^.. 03f0 f6 99 0d 9f 6a 30 a0 0d bb 97 49 1e fb 1b 14 41 ....j0....I....A 0400 24 9a 10 c8 72 61 35 1a 96 5e 64 6b 9e 7c 9e 57 $...ra5..^dk.|.W 0410 bc 16 fb 77 24 c3 31 29 51 b7 76 ca 23 71 81 2e ...w$.1)Q.v.#q.. 0420 14 dd cf dc c1 fc 92 31 85 51 ff 72 b1 a8 b0 48 .......1.Q.r...H 0430 77 fd 79 af 5d cb 5a 55 08 8c 3d 61 3c 7d 6f c0 w.y.].ZU..=a<}o. 0440 e0 ba 0f 9a fa a3 df f8 8e 0c 25 8d 51 49 d2 f7 ..........%.QI.. 0450 fa 1d 2c 34 ba 56 29 06 a3 46 57 4f 9b 2c d5 d2 ..,4.V)..FWO.,.. 0460 58 a6 f5 13 ec b9 b2 da 3d dd 81 87 34 ee c8 92 X.......=...4... 0470 da ed 4c 3a fb 52 38 e0 1a 7d 29 c7 70 55 af 17 ..L:.R8..}).pU.. 0480 45 4d 90 c5 6c fe 28 b3 b0 2c 34 29 92 4e e1 61 EM..l.(..,4).N.a 0490 f9 3d c9 95 bf 53 63 67 41 91 6b 1a e3 97 c4 75 .=...ScgA.k....u 04a0 8e d4 6c 20 88 37 c6 fb 1e ad 52 74 9b 3b 86 3b ..l .7....Rt.;.; 04b0 af 6d 8f 53 a2 c2 48 3c 73 f4 f2 ae ef 1b b4 ac .m.S..H<s....... 04c0 20 53 3d 58 cb 03 83 a3 5e cd 72 36 6a a7 57 a2 S=X....^.r6j.W. 04d0 2d 8d da 9a 5c 5d 56 a2 a1 60 e8 de 38 32 af cb -...\]V..`..82.. 04e0 cb d2 e0 e8 88 b0 44 14 0e 99 a4 87 6f c0 98 f2 ......D.....o... 04f0 2f 4b 1f 06 ff 75 cc 3b ba 1d 86 be a6 a2 8f 77 /K...u.;.......w 0500 a0 55 4b 07 20 be f4 60 46 43 6c 46 10 20 a2 25 .UK. ..`FClF. .% 0510 a8 b4 51 82 6a eb f4 ec 47 12 5b d4 1a 04 20 ed ..Q.j...G.[... . 0520 b1 ba 1c 60 77 df a6 3b 1d 6c 8a 55 3a 2e 6b ae ...`w..;.l.U:.k. 0530 97 09 4c 43 a1 5c e8 8a 15 c9 af 7a 36 1a c6 e0 ..LC.\.....z6... 0540 e8 4e 34 ab 3a 3e 00 70 d5 fd d9 97 6c 58 32 e8 .N4.:>.p....lX2. 0550 df 9f da 52 32 3a 29 8f ed 99 3e b0 05 2f 36 bd ...R2:)...>../6. 0560 74 63 06 8e b5 a8 fb 21 bf c4 ab 23 b4 4e 40 a4 tc.....!...#.N@. 0570 60 aa 25 46 c0 94 de 87 33 56 93 b7 0d 78 f2 5b `.%F....3V...x.[ 0580 72 a9 cf 48 fc a7 99 67 3d b1 4e a9 66 18 ef ad r..H...g=.N.f... 0590 68 1c 06 fd 3d 91 c9 c4 1f 33 f6 5d 2a 53 20 d6 h...=....3.]*S . 05a0 af 07 ec 40 ba 73 40 4f [email protected]@O No. Time Source Destination Protocol Length Info 6261 61.538468 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=139926 Ack=2443 Win=1002 Len=1448 TSval=550633 TSecr=728012 Frame 6261: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 139926, Ack: 2443, Len: 1448 Data (1448 bytes) 0000 ef a9 11 36 c5 02 d1 de 73 fe 41 cf b8 92 3c 43 ...6....s.A...<C 0010 ac a9 f5 9d 1d 6d d0 4d 20 97 a4 83 f5 81 0a ba .....m.M ....... 0020 31 4f 0d c0 72 c4 bd b8 3e 3e b7 7f 13 a6 34 70 1O..r...>>....4p 0030 f3 85 d8 d0 b8 6a c0 50 e8 f2 d3 09 a2 c1 4a 0a .....j.P......J. 0040 48 da d9 75 70 f1 72 a8 8c 88 d6 bb 2d af 3e 3f H..up.r.....-.>? 0050 aa d2 c5 d1 ae 9d ab a1 47 13 5a e8 e6 e5 c0 40 ........G.Z....@ 0060 d5 21 7a 86 1f 5e 4b 96 ad 18 b8 22 17 ba f6 ad .!z..^K....".... 0070 7c bf e0 08 4f a0 13 fb a0 89 b0 46 c6 9e af e1 |...O......F.... 0080 65 0b 8d 4d ea bd 1c 14 9f a0 91 4f 45 4c 8e 75 e..M.......OEL.u 0090 1d b7 b7 b0 88 bf 70 f0 5c 6d 7e db a9 b3 47 5b ......p.\m~...G[ 00a0 48 0f 38 b4 09 aa 0a 65 33 30 a7 6b d6 5f 68 1f H.8....e30.k._h. 00b0 4c e3 db 35 c4 12 85 6e 3c 12 92 81 58 6d f8 60 L..5...n<...Xm.` 00c0 8d cc 80 9b 8d 29 b4 fa 07 3b c0 8a 79 ee 29 2c .....)...;..y.), 00d0 45 94 54 2b 7e 33 4a 3a 34 90 55 80 93 e7 76 ad E.T+~3J:4.U...v. 00e0 27 ab 65 5d 00 da 1e 70 6a 76 34 3f ec 90 db de '.e]...pjv4?.... 00f0 00 4b e5 51 5e bf a1 27 da a3 ad 50 7e 6a 75 3a .K.Q^..'...P~ju: 0100 72 91 31 2d 9b 8e c4 22 01 ba 1b 64 f3 9b 60 ca r.1-..."...d..`. 0110 2d df 8e 8e da 86 4f 3a e5 89 6a 36 0d bc de 7e -.....O:..j6...~ 0120 b0 0c a8 2e a3 6f 0c 32 04 f7 90 75 54 bb 2c a5 .....o.2...uT.,. 0130 88 0c fe 42 eb 2b 18 be e2 66 96 b0 6d a0 3a ec ...B.+...f..m.:. 0140 de 42 9b f9 06 6c b7 1b 67 78 02 49 56 71 55 22 .B...l..gx.IVqU" 0150 af c2 c2 55 90 86 c4 0e 07 d3 ee 4f e8 52 81 61 ...U.......O.R.a 0160 8f 00 7f 7d cc 52 80 01 09 a2 bc 00 a5 b4 00 59 ...}.R.........Y 0170 86 bb b9 42 43 8b d6 a7 e0 33 57 6d 17 f6 34 a5 ...BC....3Wm..4. 0180 29 4b fd 45 2a 2f 1d 3b 45 b0 5f 12 c0 fc 58 a4 )K.E*/.;E._...X. 0190 5a 51 6f dc 22 67 ba bf 98 76 57 98 88 4f aa 87 ZQo."g...vW..O.. 01a0 0e 00 16 3f b0 66 94 e2 4d c8 95 28 b7 f9 af 25 ...?.f..M..(...% 01b0 76 ba d3 ab 78 e2 16 2d d1 8a 2e fd 31 9d 5e 1c v...x..-....1.^. 01c0 cf a3 cb db 29 3d 32 fd e8 c8 68 0a 04 0e 60 dd ....)=2...h...`. 01d0 2c f4 e8 2a 3a 3e a6 a6 0b 91 4b ca 13 7f db 5b ,..*:>....K....[ 01e0 cf 7c 17 ba 25 f3 52 7f 25 e2 82 4f b7 93 26 83 .|..%.R.%..O..&. 01f0 15 b3 92 6e b8 c4 32 e2 70 72 49 ab f9 95 c3 95 ...n..2.prI..... 0200 00 5e ed 54 f0 c5 1a 3d 12 c1 f5 4e 8e 9f d3 d2 .^.T...=...N.... 0210 58 cc a0 e7 d1 c9 e8 b7 18 e3 e1 c3 03 ed 01 05 X............... 0220 f1 a7 2c 91 46 30 00 4c 2c e8 fd c5 3e 74 e1 7b ..,.F0.L,...>t.{ 0230 58 18 86 50 3d 1e 5c 9d 39 4a d4 ae a7 60 6d 64 X..P=.\.9J...`md 0240 33 8a 2d 32 f8 3e 83 b1 31 a3 d4 53 18 2d 18 f3 3.-2.>..1..S.-.. 0250 4a 4a ab 63 b5 54 8f 3a 6c 6d a2 0f 47 28 a2 52 JJ.c.T.:lm..G(.R 0260 13 2a 87 b0 88 f4 48 32 6e 3b 94 a3 94 c0 a0 59 .*....H2n;.....Y 0270 56 32 33 31 e9 2a 16 e4 d2 1f 58 5b a0 c7 15 e6 V231.*....X[.... 0280 4b f8 4d 6f 96 47 cd 5c d0 ab f4 f2 49 98 23 39 K.Mo.G.\....I.#9 0290 93 d4 da 81 be f9 a4 b9 7d 81 23 33 0c 0f 81 5b ........}.#3...[ 02a0 68 0f bc 54 7c 20 34 94 11 4f 87 17 fe f3 2b 4a h..T| 4..O....+J 02b0 b4 cf 73 16 0c b2 d7 2c 80 02 f0 22 5b 68 51 82 ..s....,..."[hQ. 02c0 72 c7 eb be 24 a4 00 3d 00 4d a3 fd a1 01 96 aa r...$..=.M...... 02d0 9b a8 83 cb 82 68 69 5d 65 0b e9 97 4f 82 35 c8 .....hi]e...O.5. 02e0 9d af b6 b5 b9 d3 ac 92 71 ed e4 bf 6b a7 9e 68 ........q...k..h 02f0 6f a8 46 5a 8d 76 bf 33 be ee 7e d4 46 8c 54 e7 o.FZ.v.3..~.F.T. 0300 fd 51 f8 36 9a 5d b6 3d 05 af 94 2b d1 ce 95 18 .Q.6.].=...+.... 0310 97 cb 5f 04 c9 a5 0b 4a a2 28 c1 37 ea 41 9d 30 .._....J.(.7.A.0 0320 ad 62 0f e6 ba a4 52 37 70 cc 0a 55 e7 76 5c dd .b....R7p..U.v\. 0330 9f 9c b9 1f 28 d3 14 7e cf d4 d6 24 f5 bf b4 81 ....(..~...$.... 0340 26 de e1 3f 1e 44 60 0e 07 8d 50 64 fe ad 0f d3 &..?.D`...Pd.... 0350 90 0c a6 30 42 f8 f6 a6 a1 de f5 ef 66 7a 14 40 ...0B.......fz.@ 0360 55 df 86 33 e4 16 cf 69 84 95 80 e0 49 e7 9c 04 U..3...i....I... 0370 93 cb cf 61 90 2e b3 52 b7 10 7b 82 f9 70 61 ed ...a...R..{..pa. 0380 56 e8 ab f0 32 fd 4e c5 15 62 01 19 5c d7 88 b7 V...2.N..b..\... 0390 45 17 6f db a3 04 98 fc 8f 62 6d b6 29 c6 04 fe E.o......bm.)... 03a0 ed b5 8b 83 be f5 49 1d 86 6c 31 f1 94 bf 16 22 ......I..l1...." 03b0 d8 f6 e6 8b 48 d1 01 4b ee 5f d6 e7 3f f1 78 3c ....H..K._..?.x< 03c0 69 2c 39 b5 a2 ce 5a ea d6 68 18 b6 3d 44 8d ac i,9...Z..h..=D.. 03d0 a8 cc f1 8b 5a ed ea b6 bc 1a d5 0b 27 b4 04 36 ....Z.......'..6 03e0 df 1a 2b 03 c6 1e a4 1a 88 02 e4 b2 f2 81 ae e3 ..+............. 03f0 dc 0d ac 34 47 03 d2 92 fa 75 ca 1a bb c7 59 47 ...4G....u....YG 0400 cc 27 84 e2 f0 5b c2 0e 9d 22 c4 0b 48 dd 3b 63 .'...[..."..H.;c 0410 f4 e1 f8 88 6f 53 bf bf 45 35 28 fa bb d1 8b 29 ....oS..E5(....) 0420 c5 e5 a4 8a a3 af e1 14 58 69 e2 9f 94 7e f5 c2 ........Xi...~.. 0430 86 48 3e 6e 46 c8 45 6b 62 f0 1b d2 3d d9 8b a0 .H>nF.Ekb...=... 0440 92 66 a6 2f 3b 57 15 b4 f3 51 d2 d0 cb f3 f9 be .f./;W...Q...... 0450 3f a3 a4 85 e0 78 91 24 82 70 29 37 98 cf 8d 46 ?....x.$.p)7...F 0460 95 49 ab f3 ea 6b ed 5f d6 bc 48 2b 0f 22 d3 7f .I...k._..H+.".. 0470 ff 69 06 b7 e3 8c 34 c1 3c 15 49 40 1f 7c 6f 55 .i....4.<.I@.|oU 0480 e2 58 a8 c3 13 95 9c ed 65 b4 c9 8a c2 77 7c da .X......e....w|. 0490 cb 56 49 ba 1f 4b ac bb c8 8d 69 bc 2f b4 e1 cd .VI..K....i./... 04a0 3f 6e 79 42 a7 b0 2f 97 aa 21 2e cd 77 0a 89 3e ?nyB../..!..w..> 04b0 27 45 ac 43 26 f1 b7 3d a3 82 f2 26 ed e7 58 7c 'E.C&..=...&..X| 04c0 eb e2 0c c4 8f 2b 1c 4f 34 36 1a c5 79 c1 8f a5 .....+.O46..y... 04d0 17 32 53 66 30 54 ce c8 72 db 5c 21 34 13 be 4b .2Sf0T..r.\!4..K 04e0 51 f0 f4 92 3d 5e 1a 71 ec 00 a8 32 1c 98 25 a8 Q...=^.q...2..%. 04f0 84 5f 4a d9 b2 6c fc ab 39 78 63 04 93 d0 c4 e7 ._J..l..9xc..... 0500 50 88 d2 ce 81 ce 66 81 7c 94 7f fa 40 9f 1a 00 P.....f.|...@... 0510 c4 89 36 cf c6 fd 52 d9 f2 6a 78 c6 90 7d 4b 82 ..6...R..jx..}K. 0520 9c 70 11 50 d0 ac 48 31 b0 d1 f5 01 bd 6e 18 dd .p.P..H1.....n.. 0530 96 78 ef 73 5a dd 72 21 af 2b 8a cd 4c 8e b3 53 .x.sZ.r!.+..L..S 0540 25 a5 b7 e8 4f 3b 80 01 58 a5 30 63 a1 30 41 ac %...O;..X.0c.0A. 0550 89 a4 de 06 ed b9 35 17 36 60 03 a7 45 6d bf 4f ......5.6`..Em.O 0560 6c ab 02 73 bb 0d 71 ed fa 6a 8e 9e 86 2a fa a3 l..s..q..j...*.. 0570 89 dd f5 12 70 31 a0 97 a9 82 c1 ad 62 1b 22 56 ....p1......b."V 0580 a9 b9 0a c3 d1 2b a2 34 3a 8a 9b 00 5d 50 8d f2 .....+.4:...]P.. 0590 69 a7 10 b3 b2 e0 30 96 20 8c fa d8 7a 1e 2f b2 i.....0. ...z./. 05a0 71 76 1a 2e 69 25 d1 a9 qv..i%.. No. Time Source Destination Protocol Length Info 6262 61.538540 192.168.10.1 192.168.10.245 Syslog 202 LOCAL1.INFO: Oct 3 19:45:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 28379 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 6262: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:45:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 28379 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 6263 61.538592 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2443 Ack=139926 Win=65535 Len=0 TSval=728097 TSecr=550633 Frame 6263: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2443, Ack: 139926, Len: 0 No. Time Source Destination Protocol Length Info 6264 61.538676 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=141374 Ack=2443 Win=1002 Len=1448 TSval=550633 TSecr=728097 Frame 6264: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 141374, Ack: 2443, Len: 1448 Data (1448 bytes) 0000 2b 89 60 1e ee 1f 26 be 62 9c e4 12 4c f0 c1 75 +.`...&.b...L..u 0010 1e 65 0c c8 e3 16 40 2e e5 f2 cd b2 a6 91 96 69 [email protected] 0020 f5 a6 bc 8a a3 e8 0d 4b 43 a7 cd 03 41 e7 b0 a9 .......KC...A... 0030 e3 fa 19 35 9a fb e5 a1 d1 89 fd 53 53 35 c6 b8 ...5.......SS5.. 0040 c7 d9 1a 53 44 b3 67 76 3a 39 21 ed da 53 bf 30 ...SD.gv:9!..S.0 0050 e1 c6 ee a1 98 18 22 dc 86 d3 c0 6b 39 a1 94 36 ......"....k9..6 0060 d3 c7 76 18 f9 d6 3a db a6 23 df 45 a7 84 99 b5 ..v...:..#.E.... 0070 fc 66 e4 ee b7 cf 88 4a bb 46 90 d6 0e 8c 49 f3 .f.....J.F....I. 0080 e2 f3 bf aa cf 8c 9a ca 98 53 33 63 d4 d8 94 d6 .........S3c.... 0090 73 4f 18 64 02 f9 a5 d8 88 68 e6 2a 4e f3 4a 03 sO.d.....h.*N.J. 00a0 39 99 af e7 b0 f9 3c fc a5 3a 06 12 c5 b6 78 e1 9.....<..:....x. 00b0 98 a4 98 bc 30 be c2 0b 8b 8f 59 db b2 f6 c4 27 ....0.....Y....' 00c0 ba dd 41 98 b7 91 5a 4c d1 a7 63 f9 ba 3a c7 08 ..A...ZL..c..:.. 00d0 7e 2a f6 0d 55 5e 13 ed 5c e7 f7 2d 64 a2 1f 19 ~*..U^..\..-d... 00e0 f4 64 dc 4f 96 98 0d af b4 57 2d cc b9 6a 3c fa .d.O.....W-..j<. 00f0 59 a7 78 96 59 1e a6 a8 3c 79 94 21 53 d2 0b cf Y.x.Y...<y.!S... 0100 58 4d 8c 93 f3 70 e2 a9 cf 6c 53 a1 8c 18 28 a2 XM...p...lS...(. 0110 78 3d 12 65 41 fd 81 ca 8c 55 52 c9 b3 6c 33 53 x=.eA....UR..l3S 0120 15 ed 56 03 23 a0 3a bc 5d d3 ba 16 64 bb c0 04 ..V.#.:.]...d... 0130 1d ed ec c5 12 af f3 d0 f8 96 6d d6 54 df 51 23 ..........m.T.Q# 0140 99 89 14 20 b4 e3 7a f2 d4 cd 20 0d 4c 7d 1d 92 ... ..z... .L}.. 0150 97 f2 0c c7 5b 4d 2f b1 45 c6 b5 d4 20 24 61 61 ....[M/.E... $aa 0160 2e bd 71 bc c4 4b 81 5c 77 23 f6 f1 1c 4a e5 24 ..q..K.\w#...J.$ 0170 51 96 d9 50 c7 9b 67 7f e8 16 60 51 b2 88 95 28 Q..P..g...`Q...( 0180 60 72 e4 2c ae a1 bf 6e 19 47 d6 dd a8 54 5e ed `r.,...n.G...T^. 0190 13 49 e2 8d 8d 3e cb d2 ab 3b 50 c7 a9 23 ac b4 .I...>...;P..#.. 01a0 6f b9 41 7d 93 1d 71 15 dd 16 9d fd cc 22 cd bd o.A}..q......".. 01b0 db b0 62 17 52 a4 0c 4b 96 78 8c 14 cd 18 5b 6a ..b.R..K.x....[j 01c0 55 06 4e 90 96 d0 05 11 28 3a 5f 83 3a 20 1b 14 U.N.....(:_.: .. 01d0 4f e7 8f 6a 16 2c 3c ff 23 79 50 7f 24 9e 2e e1 O..j.,<.#yP.$... 01e0 e8 c9 fb e3 0f 9e d4 85 50 0f b2 18 42 a6 23 36 ........P...B.#6 01f0 1c c1 4d fb 4e 08 88 a7 a3 fb 6e 81 a0 00 1a 0d ..M.N.....n..... 0200 1d 0a d8 51 8a 88 9d 84 8d 9e 68 ff 8d c2 26 04 ...Q......h...&. 0210 43 83 61 3e a7 e6 5f 48 d2 12 60 f6 48 6a 64 46 C.a>.._H..`.HjdF 0220 f8 2b d1 89 20 48 65 71 43 e2 be bc 9b 05 d3 96 .+.. HeqC....... 0230 71 74 b0 e6 64 88 ce 5e 0b 88 c4 08 7a bd ee cc qt..d..^....z... 0240 fc f2 1b cd de 90 a0 3d 67 35 ac aa 8e 41 2b cd .......=g5...A+. 0250 d8 f5 ad 02 4c 47 1e 9b 88 be 69 48 79 cd cf 5a ....LG....iHy..Z 0260 c5 db 00 46 54 34 a4 ca 5a 51 b3 32 23 b4 01 97 ...FT4..ZQ.2#... 0270 8a e0 53 57 e3 cf f3 37 1a 33 5d e2 5a 21 ae 28 ..SW...7.3].Z!.( 0280 21 17 88 05 4e e9 6a a8 94 b2 19 4a a1 e5 10 87 !...N.j....J.... 0290 bc c3 63 ce e1 51 a9 81 a0 07 8d dc 6a a5 ac 44 ..c..Q......j..D 02a0 e4 eb 26 24 96 0d 39 52 30 72 68 d5 e7 99 ac 73 ..&$..9R0rh....s 02b0 69 4b 87 75 b9 f6 5a ff ee c2 11 4a 68 72 79 26 iK.u..Z....Jhry& 02c0 98 28 ea 16 32 06 0f c6 64 eb ce bf 55 1e 2e e9 .(..2...d...U... 02d0 d9 b0 54 82 aa e2 01 6a 96 ac 82 cc 6e 9b 27 1b ..T....j....n.'. 02e0 de 6d 42 40 48 d2 92 0e 6b d1 87 16 5b f8 9c 94 [email protected]...[... 02f0 9b 1b 75 ed 68 91 29 0f 50 c6 40 04 6c 55 64 04 ..u.h.)[email protected]. 0300 c5 de 41 09 69 0d fa 6c ec b0 54 98 04 4b f5 3f ..A.i..l..T..K.? 0310 f8 58 b3 10 87 fd 78 bf 50 ed b5 db db 22 55 0e .X....x.P...."U. 0320 87 94 e9 2c 98 5a e1 5f 11 11 ec 91 13 e6 ab c8 ...,.Z._........ 0330 7e 03 98 e3 84 da a8 f4 47 18 5a cd 50 ff af 9f ~.......G.Z.P... 0340 9d ef f9 a6 c6 f9 6e 7c b1 c3 41 a2 d3 a2 f9 b4 ......n|..A..... 0350 44 56 55 6c a3 a0 0a 1c ea 02 d5 19 7d 7c e0 e6 DVUl........}|.. 0360 90 a8 45 f9 f5 1c a9 21 d6 6c ad ed fe cf 50 ce ..E....!.l....P. 0370 aa 68 4e ca 5a 2a 13 e9 2c 34 ae ae fc e5 93 eb .hN.Z*..,4...... 0380 28 f4 0a 01 21 5f b8 f2 0f 72 37 24 7b c6 5e 7f (...!_...r7${.^. 0390 c2 63 4b f9 4f 16 e1 d8 0d b7 14 e1 63 0c ce 0a .cK.O.......c... 03a0 3b 91 f1 e4 46 ac e3 74 15 22 e5 16 b2 a4 35 3b ;...F..t."....5; 03b0 79 f9 0c 1f 34 f6 58 d5 17 89 df 45 f5 20 91 56 y...4.X....E. .V 03c0 ef 1d be e8 4b b8 bd 2b 9b 94 9b 48 72 c6 c3 90 ....K..+...Hr... 03d0 0f bd 29 a7 6e 95 67 05 24 59 c5 c3 44 9e a4 d2 ..).n.g.$Y..D... 03e0 b1 3e 7d bc 9d b8 89 8e 12 bb 85 7f c2 8e 55 fe .>}...........U. 03f0 7f 65 0e 9e 7d 2d 44 3b e1 e0 89 db 37 d5 78 e1 .e..}-D;....7.x. 0400 58 dc b3 b3 b0 f5 68 72 15 7e 95 ec 03 24 d6 4c X.....hr.~...$.L 0410 48 1d 57 a1 90 34 03 fb b2 45 e2 c6 e7 b9 30 d2 H.W..4...E....0. 0420 7a 3d 73 e2 f8 c5 90 00 85 5d fc e8 a9 77 08 01 z=s......]...w.. 0430 3d c6 e4 62 3f b0 6b d2 85 79 a3 aa a7 80 d4 d0 =..b?.k..y...... 0440 a9 c0 d0 bd 77 2f 06 38 5c e9 2a 46 6c c1 0a 6d ....w/.8\.*Fl..m 0450 4d ae 2e ef ae 05 7a 96 ff d4 8b 11 c2 e7 4b 53 M.....z.......KS 0460 b9 33 f8 e6 26 6a 8c 01 be a4 35 bb 56 00 de 12 .3..&j....5.V... 0470 53 19 11 91 6c 22 a7 fb d8 1d 24 3c a3 dc 43 44 S...l"....$<..CD 0480 f7 35 4b 22 e7 dd 72 33 4d 10 3e 6f 77 1b 7c 81 .5K"..r3M.>ow.|. 0490 2d 8d 2d bb 51 01 be 02 7f 89 24 df b5 6c 64 47 -.-.Q.....$..ldG 04a0 f9 bc 79 63 57 3e 60 c7 6b 27 dc 38 aa 5a 3a 3e ..ycW>`.k'.8.Z:> 04b0 e0 3d c7 f7 d3 da 7c a0 a5 67 41 a8 b1 04 f6 83 .=....|..gA..... 04c0 b3 8d 5d 84 ac 31 96 77 8f 9d 2c a1 94 b0 73 a2 ..]..1.w..,...s. 04d0 5e 3c 56 62 31 ce 07 5f 81 fc e5 cf af 06 fb ca ^<Vb1.._........ 04e0 08 6e 4b 1f 9f 96 95 7c 5e 27 27 fb 3f e6 79 6f .nK....|^''.?.yo 04f0 24 f1 c5 62 8b d0 cb 82 d6 e0 3e 7a 63 07 6f ab $..b......>zc.o. 0500 80 fa 61 79 1f 8a 29 a5 91 20 3e 1d b9 9b 45 f2 ..ay..).. >...E. 0510 4c 69 7c aa 5c 63 70 f9 88 0e d0 ff 7f 0b a7 0b Li|.\cp......... 0520 df 19 f9 9a 1c 28 2a fe 6e d6 7e 49 59 bb 71 7e .....(*.n.~IY.q~ 0530 a7 35 8e c1 01 d2 a4 80 9a bd e0 01 df 6f a9 05 .5...........o.. 0540 8b 9d 16 69 4b e4 f3 8f a0 5f ab 8d e4 bd ae 90 ...iK...._...... 0550 fc e4 57 14 01 04 d6 1d 50 a0 c2 03 dd ec bc 96 ..W.....P....... 0560 bf d4 c6 26 74 97 c9 c6 04 01 34 70 a1 16 be 7e ...&t.....4p...~ 0570 88 b5 81 c5 52 51 fd d0 6b 26 0a ee 01 ba 8d 0f ....RQ..k&...... 0580 17 a1 3f 2e e5 74 81 5b b9 b1 ac 40 1c b0 0b 4d ..?..t.[[email protected] 0590 57 8c fd 10 b0 8b 80 43 0d 24 44 32 ec bd 8b ea W......C.$D2.... 05a0 a9 ba e7 ad cf 75 60 6a .....u`j No. Time Source Destination Protocol Length Info 6265 61.538775 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=142822 Ack=2443 Win=1002 Len=1448 TSval=550633 TSecr=728097 Frame 6265: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 142822, Ack: 2443, Len: 1448 Data (1448 bytes) 0000 0f 02 01 43 9c ed 51 94 fb 28 25 b9 8a 22 9c ad ...C..Q..(%..".. 0010 5b e0 b9 b4 ab b9 5f 86 69 02 fb 2f f8 85 54 6f [....._.i../..To 0020 dd a7 49 b1 f4 13 12 38 b7 cc 67 1d 70 2f 84 f8 ..I....8..g.p/.. 0030 1b d2 3d d9 eb 29 28 f2 74 0a f8 c6 14 dc 0f 3d ..=..)(.t......= 0040 2e b5 71 2b 85 82 b7 24 e1 91 da 10 45 b4 6b 7c ..q+...$....E.k| 0050 aa 22 10 a8 77 39 62 49 2d 85 0c 1d 76 a7 79 80 ."..w9bI-...v.y. 0060 a6 37 93 91 20 2a d2 41 4b 1f 04 1a 96 88 1e 07 .7.. *.AK....... 0070 5b b4 d9 6c 8b ec 21 f0 1b 5a 49 fb d1 c4 4b 0e [..l..!..ZI...K. 0080 e9 8c 95 62 d2 8f 0c 80 10 1f dc cb 4c b8 b6 95 ...b........L... 0090 8b bf 3a d1 19 73 eb 2d e8 77 93 d6 79 7b 22 e5 ..:..s.-.w..y{". 00a0 f5 cb da d0 41 b1 f3 50 a6 ad 57 07 c0 fe 9e 77 ....A..P..W....w 00b0 90 31 f4 59 bc cb 3d 67 12 90 bd 5e 65 42 44 f7 .1.Y..=g...^eBD. 00c0 58 34 48 07 bc f2 d2 a8 9d 26 95 36 ad 49 ba 9e X4H......&.6.I.. 00d0 33 55 8a 4f 94 20 ac a2 dc 08 c4 23 96 89 63 10 3U.O. .....#..c. 00e0 00 4e 2b 60 67 c7 3d 09 70 3a 14 21 b6 0e 64 e3 .N+`g.=.p:.!..d. 00f0 73 18 1d 49 6e 26 84 3b 58 d2 e6 b7 d4 a1 8c 8f s..In&.;X....... 0100 97 ce 8e 8c dd cb 89 d6 26 c5 0f ff 07 34 16 a0 ........&....4.. 0110 eb 59 73 38 74 03 0e b2 5f b1 8a f9 5f 26 eb 5d .Ys8t..._..._&.] 0120 72 70 b1 64 8a 59 35 55 6f 46 0d 6e 41 f1 63 d3 rp.d.Y5UoF.nA.c. 0130 f3 e7 c2 e8 26 ca e2 51 68 f9 fb d1 f1 37 62 25 ....&..Qh....7b% 0140 51 37 83 92 d4 9a dd e9 28 d2 fc af 78 30 4d 1c Q7......(...x0M. 0150 ce 24 a4 a6 45 ec 0d f5 6b ce 11 ad 6b 73 b6 66 .$..E...k...ks.f 0160 c3 ae d9 c1 2e f7 41 f4 e2 dc 40 c3 ac a0 9f 4d [email protected] 0170 f0 a6 24 7e db a0 62 d6 d3 2f d6 84 4a a9 42 e6 ..$~..b../..J.B. 0180 72 92 ab 25 8e a5 61 35 57 1b b4 8d 25 83 c7 90 r..%..a5W...%... 0190 29 f3 61 e9 8e 82 34 a7 62 4d 30 bf 3e 1f 92 b1 ).a...4.bM0.>... 01a0 47 fa 0f a5 e6 31 83 58 c4 58 59 ba 5f ad fb ce G....1.X.XY._... 01b0 ec 31 eb ba 9a 46 1b 4c db 3e 44 99 d6 dd 01 07 .1...F.L.>D..... 01c0 e1 83 6e 34 82 e0 5c b8 c2 4c db 34 cf d5 33 70 ..n4..\..L.4..3p 01d0 29 51 be 58 db cd 08 bc dd 03 2f c0 bf 6a 7c 49 )Q.X....../..j|I 01e0 5d 55 8c 61 c5 85 2f e8 40 61 4b f1 d2 d2 b0 1c ]U.a../.@aK..... 01f0 54 7f 8e cb b6 2e d2 d2 19 13 56 c8 3e 4c b7 46 T.........V.>L.F 0200 45 ea 40 a1 31 ab 5f dd e5 e8 50 af 03 a8 6f 6b [email protected]._...P...ok 0210 5e b3 89 93 6c 25 98 cb 45 49 c9 d0 9f 85 ec 80 ^...l%..EI...... 0220 4b 5e 68 5f 34 ba 80 4b e1 20 4a 5c 5d 51 89 b0 K^h_4..K. J\]Q.. 0230 85 d2 6d e7 df 97 b6 bb cb 17 fd ee 76 33 dd a7 ..m.........v3.. 0240 d7 64 e1 c9 2f fd 99 43 1b a6 a6 9b 4c 6b 0a e9 .d../..C....Lk.. 0250 e3 d5 b8 a9 d8 56 c1 8a 1e bb 5a 61 dc c7 cf 1a .....V....Za.... 0260 fd 2c b8 5c d4 57 85 2e ae d5 e9 72 51 5b da 6b .,.\.W.....rQ[.k 0270 67 d3 17 50 f7 1d bb b2 71 e8 9a 3b 81 26 9e d5 g..P....q..;.&.. 0280 69 7b 60 95 fd 54 5b 54 2d db 0e 9b 0c a9 ff 37 i{`..T[T-......7 0290 d0 b2 c9 7d f9 d4 70 18 00 1f 77 53 41 ca 10 80 ...}..p...wSA... 02a0 82 27 ba c2 5d e3 e9 1e f2 9f 35 88 5a f7 c7 c8 .'..].....5.Z... 02b0 ad a4 8d 8f 8e 66 4d 27 c2 22 14 65 10 6f 33 17 .....fM'.".e.o3. 02c0 ff cb 4e a6 6e f4 ff 74 c4 b4 f5 f0 84 38 6f 8c ..N.n..t.....8o. 02d0 2d c4 9c 0b ea f8 cd 25 36 b0 93 ab e7 3b b4 ef -......%6....;.. 02e0 b2 36 35 35 28 f7 34 04 35 25 41 92 39 2d 93 32 .655(.4.5%A.9-.2 02f0 29 f2 bb d4 ac b1 51 c8 9f 06 94 0c ba 1e 9c 68 ).....Q........h 0300 38 57 09 aa b0 e8 64 bf 2a 82 01 c8 cf 87 ab 5e 8W....d.*......^ 0310 3e 0d c5 1f f6 4e 70 cd 40 b9 be ce b6 b3 c4 ce >....Np.@....... 0320 22 b2 2f 00 e1 ab e4 90 03 29 58 0b c3 8b c8 80 "./......)X..... 0330 0f 8c ea cc 3b e5 91 50 0d a8 61 cf fe ff 99 0d ....;..P..a..... 0340 c6 06 81 87 cf 89 27 fa 3c 23 f2 02 d9 12 35 d7 ......'.<#....5. 0350 7d 5e 18 de 71 4a ee 9a c7 4d 6f c8 b6 11 36 0d }^..qJ...Mo...6. 0360 a0 27 f1 3e 6f 24 52 d3 22 c5 0f 9f fe 91 b6 6c .'.>o$R."......l 0370 2a 4e 2d 48 da c8 00 13 2b ef 40 bc bf 80 a4 71 *[email protected] 0380 fd ed fc 63 fc 14 b3 82 05 4e 1f 62 6b ba e0 d9 ...c.....N.bk... 0390 2e 37 72 0f 01 a9 93 e3 ca ef b3 9b cb 26 c2 c6 .7r..........&.. 03a0 04 91 86 91 d0 7e ea d6 3b ec 0a dc 39 54 05 8f .....~..;...9T.. 03b0 74 85 dd ae 10 5c bd 64 42 84 c3 4b 37 77 bf 02 t....\.dB..K7w.. 03c0 b5 7d df f5 39 56 a6 3b 42 60 bf 5a 85 79 33 b6 .}..9V.;B`.Z.y3. 03d0 73 2d cf c3 6b a6 1f 54 04 0d 45 8c 2b f8 00 7b s-..k..T..E.+..{ 03e0 c9 1c 8f 15 fc 05 96 a1 f1 92 3b de 43 53 59 e4 ..........;.CSY. 03f0 8d db e9 d5 41 b0 de 19 04 b1 f2 b3 48 3d e4 b0 ....A.......H=.. 0400 28 f6 26 5f e9 12 2b 63 5e 41 85 1c 40 9b c5 fe (.&_..+c^A..@... 0410 40 99 9a 0f ad d7 7e 62 e8 8c e6 e0 55 2f 05 2a @.....~b....U/.* 0420 c1 9b 00 bf 04 a3 76 a0 93 14 22 d1 ec c3 02 17 ......v..."..... 0430 6b 5b 67 1e b8 57 3e 98 33 2e 93 c7 1c 7b 95 97 k[g..W>.3....{.. 0440 7d 7a 9b 1e 52 ff dd b0 1e fd 54 3f 7c fe 50 61 }z..R.....T?|.Pa 0450 a6 61 3a 0a 80 9a 0e bc 8c a3 00 1b 0c 1f 03 c8 .a:............. 0460 86 1f 96 b4 b2 4f 47 20 75 03 1d fa b2 71 ba 61 .....OG u....q.a 0470 e3 3d 03 90 50 62 c6 40 96 be b8 ec 9b e9 a5 b7 .=..Pb.@........ 0480 c2 33 67 27 15 d6 4c e3 5d 75 be c3 27 da 65 59 .3g'..L.]u..'.eY 0490 b3 fa 0a bf 39 c6 e5 26 74 3b cf fd 5a 97 74 ff ....9..&t;..Z.t. 04a0 06 94 27 26 73 ea 3b 21 fa 25 26 2c 65 15 82 8f ..'&s.;!.%&,e... 04b0 a8 e1 2b b6 05 98 a6 c2 6f 4a 39 fd 4a 7a ba 21 ..+.....oJ9.Jz.! 04c0 62 1d 4a 45 18 9e 69 32 db 58 93 f5 05 a3 41 4f b.JE..i2.X....AO 04d0 ae 0e 9f 35 02 f7 ce e3 63 f3 ed 06 e0 94 f0 10 ...5....c....... 04e0 41 01 de ce 1b 89 5e c8 8d 2d 73 3a de 81 f7 66 A.....^..-s:...f 04f0 d9 12 75 4b 17 48 33 e5 8c ec 02 a9 d1 69 23 ed ..uK.H3......i#. 0500 d0 fe 80 0d 01 29 ce ed aa 7f c1 df 3d de 5b 8f .....)......=.[. 0510 3b 23 da 88 56 4a 2f e7 f8 6e d8 a8 6c c2 d0 68 ;#..VJ/..n..l..h 0520 95 8b 2d 26 72 fa fe 08 df f0 90 19 a8 d0 22 85 ..-&r.........". 0530 e4 e3 40 de ba 52 98 b9 35 70 9c 19 a8 41 e4 6e [email protected] 0540 8d 1d a5 ac b6 df 9f 9b 7d 18 8d 41 4f 8a 06 00 ........}..AO... 0550 84 11 cc d3 87 49 4a 1f 26 39 84 50 d2 a3 eb 5f .....IJ.&9.P..._ 0560 1f ca 3b ea ce ad 4d 64 f9 0f f2 3b b8 8d 8b c8 ..;...Md...;.... 0570 52 16 c1 d6 1a 7f 2c 1a a4 1e 1a ef 1d 53 7e 03 R.....,......S~. 0580 0f 28 15 b7 ba 21 7d f6 62 ec 03 fa 71 af cb 88 .(...!}.b...q... 0590 28 3d 8d db 7f 39 d7 b2 cf 5b cf 75 fc 05 5e 00 (=...9...[.u..^. 05a0 28 0d ea c3 95 1a 0b 08 (....... No. Time Source Destination Protocol Length Info 6266 61.538857 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=144270 Ack=2443 Win=1002 Len=1448 TSval=550633 TSecr=728097 Frame 6266: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 144270, Ack: 2443, Len: 1448 Data (1448 bytes) 0000 55 72 35 2f 49 e8 39 9c d3 b2 eb 96 4d 61 e6 ff Ur5/I.9.....Ma.. 0010 a7 a9 8d b7 06 d5 a8 d1 c5 2b c5 c2 a9 9c c5 fe .........+...... 0020 20 b5 24 71 86 98 96 f6 57 28 10 d3 88 94 95 a4 .$q....W(...... 0030 f1 2c ad 16 0b fd 65 7f 0f 7e 13 21 95 a2 07 1c .,....e..~.!.... 0040 5d 7d 2e 22 b7 84 a8 d5 d5 91 40 d9 b6 68 ed 7e ]}."[email protected].~ 0050 20 2a 9b f4 f0 17 cf 8f b7 21 6a e0 25 3d 74 85 *.......!j.%=t. 0060 fd 35 44 4b 47 05 9e 41 8e 30 34 98 1b ee dc e3 .5DKG..A.04..... 0070 2b ee dd 83 22 c2 40 35 0b 73 42 7c 75 6c e8 df +..."[email protected]|ul.. 0080 68 8c 09 58 d8 db 8b 1d 18 bb dc 61 71 fb 84 c7 h..X.......aq... 0090 9e 0f 35 35 5e c4 9d 67 d8 69 89 f8 f4 e4 c9 f7 ..55^..g.i...... 00a0 90 e1 5a 74 12 50 55 f5 21 18 15 75 ab 01 d9 26 ..Zt.PU.!..u...& 00b0 cb 2d 24 7d 5c f6 5e 93 28 16 2c c3 b3 3f 6a 1b .-$}\.^.(.,..?j. 00c0 42 9a b2 3d 70 5c 11 6a d5 15 5c 72 4f b3 91 0c B..=p\.j..\rO... 00d0 90 cd 53 1f d9 4c 03 85 e0 1f 1b ff b9 bb cd bd ..S..L.......... 00e0 de 83 2d f5 0b ae d3 fb 6c 84 88 94 cc a4 f7 d3 ..-.....l....... 00f0 c3 16 c5 ab f5 22 24 a9 b6 fd 25 45 4c d8 0e a8 ....."$...%EL... 0100 04 9b a9 a8 81 16 6a 39 dd f9 ad 71 6b aa 7a 62 ......j9...qk.zb 0110 2a af c4 f4 94 b9 22 fe 15 83 ba c7 6d ce 0b 36 *.....".....m..6 0120 63 c6 1e 14 c5 f7 59 a0 b7 8d c1 8c 73 26 fe 8f c.....Y.....s&.. 0130 f6 df 71 11 e0 6e 03 36 33 70 5c 32 b2 e3 5f 53 ..q..n.63p\2.._S 0140 6a e0 35 91 fb 9b 9b 3e 93 2a d9 4b a7 f9 a5 da j.5....>.*.K.... 0150 77 35 d7 83 e3 ad 2f fb bd b1 0a 48 b4 12 2f f8 w5..../....H../. 0160 f5 75 a0 5d 27 b7 5f ec 83 81 92 97 ea 94 a3 61 .u.]'._........a 0170 e5 3b 7b c3 56 54 c6 8f 6a d2 4c 8f a9 ee 1e b2 .;{.VT..j.L..... 0180 be 84 d9 3c 64 69 3f de 54 4f 36 a6 00 02 92 dd ...<di?.TO6..... 0190 90 5c 3e 81 c5 c5 88 3a ed 21 00 85 ac f6 3e 8a .\>....:.!....>. 01a0 1b 32 6c b3 c3 3f 36 7c bf 43 fa a9 58 58 04 ec .2l..?6|.C..XX.. 01b0 aa db dc 0a c5 87 56 15 43 cf 18 7a 2c 7d a5 e7 ......V.C..z,}.. 01c0 db c9 7b 3d 9f 48 b6 04 2a b9 3c ee 74 16 24 06 ..{=.H..*.<.t.$. 01d0 d7 c2 ca 97 a8 23 a8 5b b9 a7 83 a8 5e 2e 5c 6b .....#.[....^.\k 01e0 69 4d b8 06 1a 99 4f df 7a 40 d8 b5 cc b2 64 7d [email protected]} 01f0 4c 1e ee a1 18 a4 fc be 3f fe 88 4b 0c ea 14 d5 L.......?..K.... 0200 32 f5 06 c9 18 98 96 27 fe c2 84 2c 36 ab 04 7d 2......'...,6..} 0210 a8 12 90 75 ae 35 86 07 08 8f e6 b0 c2 83 1e a2 ...u.5.......... 0220 4a d0 18 ff 06 20 fb 59 9f 54 1b be 58 a8 4c 2f J.... .Y.T..X.L/ 0230 66 02 5f 73 38 07 94 cc db 85 58 d1 8d 56 fe f3 f._s8.....X..V.. 0240 77 27 7e 58 1d 79 a5 27 c5 57 a6 0a 1c 13 d8 b9 w'~X.y.'.W...... 0250 7d 4a f4 a9 00 93 05 3a 2f d9 1e 68 2f 73 a5 5c }J.....:/..h/s.\ 0260 cc 8c 1f 4f ad 11 cb b0 95 7c 33 df 22 a6 9b 78 ...O.....|3."..x 0270 9b da fd a5 02 5d 37 67 36 ae 9c d6 e8 f8 b0 4c .....]7g6......L 0280 42 5d bf d5 8e b0 e8 33 ad 4e 6f 1a 0d cc 98 29 B].....3.No....) 0290 95 9b 9a 10 bc 8f 9c ed 35 ba 10 df 7b f3 4c f1 ........5...{.L. 02a0 40 d8 0a 29 bc cd 86 c6 96 9e 13 9a a8 15 b0 b2 @..)............ 02b0 15 18 c6 ea 5f 6d de cd 2c 04 3c 1e 42 4a 1b f0 ...._m..,.<.BJ.. 02c0 7c c8 79 00 79 ab 2e eb 0e 59 79 62 11 57 10 d1 |.y.y....Yyb.W.. 02d0 89 71 68 43 b4 83 fe 2c d4 07 0b 45 a8 f4 be 77 .qhC...,...E...w 02e0 cf 26 0d 94 d6 61 91 35 b7 e3 9a ea 32 49 0d 17 .&...a.5....2I.. 02f0 dc 6e cc 9b 21 76 9d 5a f7 14 cb b4 09 fb 16 48 .n..!v.Z.......H 0300 30 f7 27 b6 0b 22 58 13 99 a8 06 b2 f4 d7 7b e8 0.'.."X.......{. 0310 85 e6 d2 f4 72 9d e5 2a 84 58 e6 b2 89 eb a5 4a ....r..*.X.....J 0320 2a 27 20 34 2b 8d 4f ed 35 fa 4c 88 c1 36 d8 a1 *' 4+.O.5.L..6.. 0330 42 de cd 71 ab 6e ae d7 ce 85 bf c0 fa 76 d9 b7 B..q.n.......v.. 0340 4e 7a c7 d0 60 96 d9 ae 53 11 a4 ae 17 80 b6 b0 Nz..`...S....... 0350 47 56 aa 4d f0 07 04 2c d7 d7 e2 1d 9a 00 8f 12 GV.M...,........ 0360 9f 6f bb 4a d7 e8 93 e6 c4 de 13 63 9b 19 e6 e2 .o.J.......c.... 0370 64 a7 da c5 4d 6d 81 a0 f7 7a 4e d3 68 3d b4 b1 d...Mm...zN.h=.. 0380 0c 11 e2 3e de 4c f0 a8 2e f3 7b 23 64 9b 52 40 ...>.L....{#d.R@ 0390 88 ba ec 62 0b 8b fe 40 d0 b6 47 ef a1 5b 25 d0 [email protected]..[%. 03a0 ab 4f 7d ee 75 30 42 10 79 b8 7f bd 1a b7 fa 79 .O}.u0B.y......y 03b0 38 8c 75 96 8b ff d4 17 50 20 b3 2c 64 e3 8e af 8.u.....P .,d... 03c0 6a 5f ec 2b 89 43 07 1e 9b da 2a 9a 96 33 bc 35 j_.+.C....*..3.5 03d0 80 42 6b ac 92 02 3f 64 df 06 98 be d9 3d 92 fa .Bk...?d.....=.. 03e0 41 66 e2 ee ee b3 ae 87 90 f1 9f 74 93 28 36 77 Af.........t.(6w 03f0 7d 98 f3 78 60 24 00 3d 60 15 70 30 08 f9 df bb }..x`$.=`.p0.... 0400 6c 77 0c 44 7e 9d d9 06 31 90 fd bd 6e 68 11 54 lw.D~...1...nh.T 0410 14 5d a3 09 4e 98 7f 92 17 d0 19 de 59 d9 11 bd .]..N.......Y... 0420 8c 07 c4 2c ba 19 c0 94 c5 4e 04 20 77 01 4b 3b ...,.....N. w.K; 0430 c5 f4 61 73 3b b3 7f e2 1d 51 96 b9 c7 a1 cf 1f ..as;....Q...... 0440 b2 7e c5 c4 9f f1 9e 03 00 31 44 3a e7 a6 1c 1b .~.......1D:.... 0450 a0 69 08 e0 a9 d6 7c e4 9f 67 5d 4d 99 05 1e 72 .i....|..g]M...r 0460 82 00 59 ee b3 64 90 b8 18 2e 79 8f d6 82 60 73 ..Y..d....y...`s 0470 5e e8 4e de 35 97 58 8e 3c 0d 12 f0 3a 1b 64 e7 ^.N.5.X.<...:.d. 0480 b3 57 f3 60 8e 8c 8b db ce 3b b7 e3 8f 59 e0 5a .W.`.....;...Y.Z 0490 db 7b a4 58 51 db b7 fc 29 06 fd 82 1c 89 93 70 .{.XQ...)......p 04a0 c2 53 2c 25 3d 99 15 c9 f8 92 98 46 f5 60 88 7d .S,%=......F.`.} 04b0 00 76 b2 06 ff af 39 c5 6a a4 6e 36 2c 2c 57 b5 .v....9.j.n6,,W. 04c0 13 97 e2 c6 20 5a 0a 20 28 b2 71 ca cf 0d cd 9e .... Z. (.q..... 04d0 df 8a a5 35 db 46 a6 aa 3d 5d be 28 14 7c b6 28 ...5.F..=].(.|.( 04e0 1a 3b f9 ae ff 11 e1 d2 66 45 ab b5 e0 f5 e2 f3 .;......fE...... 04f0 3b 74 6f b8 85 49 c4 28 7c 22 3e ef 84 df 5c db ;to..I.(|">...\. 0500 c9 b9 39 7c ff dd ab 0c e8 91 7b 70 0c 35 5b 95 ..9|......{p.5[. 0510 bb ad 4b a9 3f 97 f3 7f 9f 44 3a 28 e4 5d c3 38 ..K.?....D:(.].8 0520 de ce 8b 81 e5 13 22 76 1c 07 98 99 a7 87 31 f9 ......"v......1. 0530 69 e6 84 15 a1 34 c0 56 65 c3 77 12 40 9d 2c 48 i....4.Ve.w.@.,H 0540 78 08 8c 94 6d 84 39 83 7c 6f e8 aa 7a d0 af a4 x...m.9.|o..z... 0550 a3 f4 d5 29 56 d9 80 e5 6d be 74 86 d3 b1 0e 0d ...)V...m.t..... 0560 2c 59 34 85 1b 28 ab 64 7c 68 e5 bc 9b 71 19 5b ,Y4..(.d|h...q.[ 0570 08 d6 7f 91 75 4a ec 11 6b 38 d9 4c 34 68 2e 7b ....uJ..k8.L4h.{ 0580 f5 ff 73 ed 38 9d f6 69 44 e1 de ce e2 d9 a6 68 ..s.8..iD......h 0590 95 b1 ac ba b9 1e b2 d4 80 16 db 30 54 11 de 26 ...........0T..& 05a0 6e 9d 1e 6a 17 85 d1 e6 n..j.... No. Time Source Destination Protocol Length Info 6267 61.538911 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2443 Ack=142822 Win=65535 Len=0 TSval=728097 TSecr=550633 Frame 6267: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2443, Ack: 142822, Len: 0 No. Time Source Destination Protocol Length Info 6268 61.538961 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2443 Ack=145718 Win=65535 Len=0 TSval=728097 TSecr=550633 Frame 6268: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2443, Ack: 145718, Len: 0 No. Time Source Destination Protocol Length Info 6269 61.539014 192.168.10.1 192.168.10.203 TCP 311 34433 > cds [PSH, ACK] Seq=145718 Ack=2443 Win=1002 Len=245 TSval=550633 TSecr=728097 Frame 6269: 311 bytes on wire (2488 bits), 311 bytes captured (2488 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 145718, Ack: 2443, Len: 245 Data (245 bytes) 0000 e6 a0 ff 5d e2 35 96 7c df 6e 65 a5 9d 29 a6 2d ...].5.|.ne..).- 0010 ae 0a a3 54 6d e1 3e 03 a6 88 4c 77 f1 2d 5d f9 ...Tm.>...Lw.-]. 0020 04 ea ad bb 59 b8 78 ad 91 38 e0 cc 79 1c d0 f5 ....Y.x..8..y... 0030 7f 8f 0c ad ff 0e 74 5e 7b f2 a4 61 5a c8 17 40 ......t^{..aZ..@ 0040 a8 b5 0f 70 86 9b 10 56 bd 38 86 cf 3f 4b a6 57 ...p...V.8..?K.W 0050 cf 37 ae b0 fd 67 ea a3 20 b3 02 91 25 08 b9 29 .7...g.. ...%..) 0060 b7 0f af fb c9 5a 62 5d a2 9a 1a 0c 2d e9 6b c3 .....Zb]....-.k. 0070 13 30 f2 24 63 9c 09 51 34 b8 75 19 fe 5f 60 25 .0.$c..Q4.u.._`% 0080 88 87 b5 7b 78 c5 9f a2 21 0a f8 cd 57 d3 16 3e ...{x...!...W..> 0090 d6 cb f9 c6 0a 19 d3 df 29 75 d5 91 53 13 e1 f3 ........)u..S... 00a0 5e 40 b8 94 de 5f 30 99 b8 2a 04 fb b7 fd 26 01 ^@..._0..*....&. 00b0 11 ba a8 30 3a 75 d3 e9 6a 84 e2 a1 00 43 d9 0a ...0:u..j....C.. 00c0 c7 8a a9 e4 b5 1c 3e b0 40 55 ab b9 03 65 c2 7a ......>[email protected] 00d0 1e 31 00 60 ff 30 bd 3f cb e7 80 61 6d 42 65 1d .1.`.0.?...amBe. 00e0 ae aa 16 10 08 4d ac 22 26 ba 4d 82 2f aa 6a b7 .....M."&.M./.j. 00f0 34 e4 f5 c7 5c 4...\ No. Time Source Destination Protocol Length Info 6270 61.542210 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6270: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1982401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6271 61.542255 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1983801 Win=65535 Len=0 Frame 6271: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1983801, Len: 0 No. Time Source Destination Protocol Length Info 6272 61.542287 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6272: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1983801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6273 61.565924 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 6273: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 6274 61.657719 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2443 Ack=145963 Win=65290 Len=0 TSval=728099 TSecr=550633 Frame 6274: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2443, Ack: 145963, Len: 0 No. Time Source Destination Protocol Length Info 6275 61.688633 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=2443 Ack=145963 Win=65290 Len=74 TSval=728099 TSecr=550633 Frame 6275: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2443, Ack: 145963, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 0b ce 98 90 0c af ee 5b a9 1d b6 .... .......[... 0010 e5 de 47 66 8b 11 a3 15 03 cb fe 15 d0 33 b3 05 ..Gf.........3.. 0020 73 cc 7f da 56 17 03 01 00 20 a0 05 6c 49 95 81 s...V.... ..lI.. 0030 30 1e 2c 88 82 65 df 53 e6 58 81 39 f6 e3 34 b2 0.,..e.S.X.9..4. 0040 d4 7e 96 57 f4 f8 a0 5f 6f 42 .~.W..._oB No. Time Source Destination Protocol Length Info 6276 61.688673 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=145963 Ack=2517 Win=1002 Len=0 TSval=550670 TSecr=728099 Frame 6276: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 145963, Ack: 2517, Len: 0 No. Time Source Destination Protocol Length Info 6277 61.742765 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1985201 Win=65535 Len=0 Frame 6277: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1985201, Len: 0 No. Time Source Destination Protocol Length Info 6278 61.789057 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6278: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1985201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6279 61.789077 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6279: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1986601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6280 61.789094 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6280: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1988001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6281 61.789111 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6281: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1989401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6282 61.789138 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1988001 Win=65535 Len=0 Frame 6282: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1988001, Len: 0 No. Time Source Destination Protocol Length Info 6283 61.789159 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1990801 Win=65535 Len=0 Frame 6283: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1990801, Len: 0 No. Time Source Destination Protocol Length Info 6284 61.807766 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6284: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1990801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6285 61.807801 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6285: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1992201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6286 61.807832 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6286: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1993601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6287 61.807862 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6287: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1995001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6288 61.807891 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6288: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1996401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6289 61.807921 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6289: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1997801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6290 61.807958 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1993601 Win=65535 Len=0 Frame 6290: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1993601, Len: 0 No. Time Source Destination Protocol Length Info 6291 61.807987 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6291: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1999201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6292 61.808023 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6292: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2000601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6293 61.808060 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1996401 Win=65535 Len=0 Frame 6293: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1996401, Len: 0 No. Time Source Destination Protocol Length Info 6294 61.808089 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6294: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2002001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6295 61.808119 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6295: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2003401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6296 61.808156 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=1999201 Win=65535 Len=0 Frame 6296: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 1999201, Len: 0 No. Time Source Destination Protocol Length Info 6297 61.808185 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6297: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2004801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6298 61.808220 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6298: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2006201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6299 61.808241 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2002001 Win=65535 Len=0 Frame 6299: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2002001, Len: 0 No. Time Source Destination Protocol Length Info 6300 61.808258 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6300: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2007601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6301 61.808275 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6301: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2009001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6302 61.808303 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2006201 Win=65535 Len=0 Frame 6302: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2006201, Len: 0 No. Time Source Destination Protocol Length Info 6303 61.808319 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6303: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2010401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6304 61.808336 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6304: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2011801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6305 61.808353 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6305: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2013201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6306 61.808374 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2009001 Win=65535 Len=0 Frame 6306: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2009001, Len: 0 No. Time Source Destination Protocol Length Info 6307 61.808390 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6307: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2014601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6308 61.808407 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6308: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2016001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6309 61.808456 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2011801 Win=65535 Len=0 Frame 6309: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2011801, Len: 0 No. Time Source Destination Protocol Length Info 6310 61.808476 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6310: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2017401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6311 61.808493 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6311: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2018801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6312 61.808514 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2014601 Win=65535 Len=0 Frame 6312: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2014601, Len: 0 No. Time Source Destination Protocol Length Info 6313 61.808530 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6313: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2020201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6314 61.808551 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2017401 Win=65535 Len=0 Frame 6314: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2017401, Len: 0 No. Time Source Destination Protocol Length Info 6315 61.808568 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6315: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2021601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6316 61.808585 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6316: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2023001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6317 61.808605 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2020201 Win=65535 Len=0 Frame 6317: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2020201, Len: 0 No. Time Source Destination Protocol Length Info 6318 61.808622 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6318: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2024401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6319 61.808642 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2023001 Win=65535 Len=0 Frame 6319: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2023001, Len: 0 No. Time Source Destination Protocol Length Info 6320 61.808662 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2025801 Win=65535 Len=0 Frame 6320: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2025801, Len: 0 No. Time Source Destination Protocol Length Info 6321 61.828856 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6321: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2025801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6322 61.828913 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6322: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2027201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6323 61.829001 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2028601 Win=65535 Len=0 Frame 6323: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2028601, Len: 0 No. Time Source Destination Protocol Length Info 6324 61.829088 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6324: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2028601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6325 61.829163 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6325: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2030001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6326 61.829203 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2031401 Win=65535 Len=0 Frame 6326: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2031401, Len: 0 No. Time Source Destination Protocol Length Info 6327 61.829293 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6327: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2031401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6328 61.846622 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6328: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2032801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6329 61.846673 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2034201 Win=65535 Len=0 Frame 6329: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2034201, Len: 0 No. Time Source Destination Protocol Length Info 6330 61.846855 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6330: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2034201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6331 61.846961 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6331: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2035601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6332 61.847022 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2037001 Win=65535 Len=0 Frame 6332: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2037001, Len: 0 No. Time Source Destination Protocol Length Info 6333 61.847087 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6333: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2037001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6334 61.847234 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6334: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2038401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6335 61.847270 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2039801 Win=65535 Len=0 Frame 6335: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2039801, Len: 0 No. Time Source Destination Protocol Length Info 6336 61.865322 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6336: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2039801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6337 61.865396 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6337: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2041201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6338 61.865459 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2042601 Win=65535 Len=0 Frame 6338: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2042601, Len: 0 No. Time Source Destination Protocol Length Info 6339 61.865521 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6339: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2042601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6340 61.865628 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6340: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2044001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6341 61.865686 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2045401 Win=65535 Len=0 Frame 6341: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2045401, Len: 0 No. Time Source Destination Protocol Length Info 6342 61.865925 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6342: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2045401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6343 61.865994 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6343: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2046801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6344 61.866044 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2048201 Win=65535 Len=0 Frame 6344: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2048201, Len: 0 No. Time Source Destination Protocol Length Info 6345 61.866127 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6345: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2048201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6346 61.883543 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6346: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2049601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6347 61.883584 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2051001 Win=65535 Len=0 Frame 6347: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2051001, Len: 0 No. Time Source Destination Protocol Length Info 6348 61.883671 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6348: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2051001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6349 61.883739 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6349: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2052401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6350 61.883801 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2053801 Win=65535 Len=0 Frame 6350: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2053801, Len: 0 No. Time Source Destination Protocol Length Info 6351 61.884211 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6351: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2053801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6352 61.884329 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6352: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2055201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6353 61.884412 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2056601 Win=65535 Len=0 Frame 6353: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2056601, Len: 0 No. Time Source Destination Protocol Length Info 6354 61.884501 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6354: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2056601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6355 61.884559 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6355: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2058001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6356 61.884617 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2059401 Win=65535 Len=0 Frame 6356: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2059401, Len: 0 No. Time Source Destination Protocol Length Info 6357 61.901942 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6357: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2059401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6358 61.901973 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6358: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2060801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6359 61.902016 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2062201 Win=65535 Len=0 Frame 6359: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2062201, Len: 0 No. Time Source Destination Protocol Length Info 6360 61.902416 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6360: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2062201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6361 61.902526 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6361: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2063601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6362 61.902550 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2065001 Win=65535 Len=0 Frame 6362: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2065001, Len: 0 No. Time Source Destination Protocol Length Info 6363 61.902632 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6363: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2065001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6364 61.902768 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6364: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2066401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6365 61.902790 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2067801 Win=65535 Len=0 Frame 6365: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2067801, Len: 0 No. Time Source Destination Protocol Length Info 6366 61.902863 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6366: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2067801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6367 61.903000 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6367: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2069201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6368 61.903029 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2070601 Win=65535 Len=0 Frame 6368: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2070601, Len: 0 No. Time Source Destination Protocol Length Info 6369 61.920222 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6369: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2070601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6370 61.920255 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6370: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2072001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6371 61.920331 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2073401 Win=65535 Len=0 Frame 6371: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2073401, Len: 0 No. Time Source Destination Protocol Length Info 6372 61.920698 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6372: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2073401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6373 61.939391 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6373: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2074801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6374 61.939421 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6374: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2076201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6375 61.939450 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6375: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2077601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6376 61.939482 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6376: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2079001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6377 61.939520 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6377: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2080401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6378 61.939543 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2076201 Win=65535 Len=0 Frame 6378: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2076201, Len: 0 No. Time Source Destination Protocol Length Info 6379 61.939560 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6379: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2081801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6380 61.939577 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6380: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2083201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6381 61.939599 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2079001 Win=65535 Len=0 Frame 6381: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2079001, Len: 0 No. Time Source Destination Protocol Length Info 6382 61.939617 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6382: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2084601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6383 61.939638 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2081801 Win=65535 Len=0 Frame 6383: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2081801, Len: 0 No. Time Source Destination Protocol Length Info 6384 61.939654 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6384: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2086001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6385 61.939672 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6385: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2087401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6386 61.939696 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2084601 Win=65535 Len=0 Frame 6386: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2084601, Len: 0 No. Time Source Destination Protocol Length Info 6387 61.939713 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6387: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2088801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6388 61.939737 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2087401 Win=65535 Len=0 Frame 6388: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2087401, Len: 0 No. Time Source Destination Protocol Length Info 6389 61.939762 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2090201 Win=65535 Len=0 Frame 6389: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2090201, Len: 0 No. Time Source Destination Protocol Length Info 6390 61.939779 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6390: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2090201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6391 61.939800 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2091601 Win=65535 Len=0 Frame 6391: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2091601, Len: 0 No. Time Source Destination Protocol Length Info 6392 61.956849 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6392: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2091601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6393 61.956941 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6393: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2093001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6394 61.956982 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2094401 Win=65535 Len=0 Frame 6394: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2094401, Len: 0 No. Time Source Destination Protocol Length Info 6395 61.957689 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6395: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2094401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6396 61.957729 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6396: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2095801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6397 61.957765 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2097201 Win=65535 Len=0 Frame 6397: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2097201, Len: 0 No. Time Source Destination Protocol Length Info 6398 62.011510 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6398: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2097201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6399 62.011533 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6399: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2098601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6400 62.011555 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6400: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2100001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6401 62.011575 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6401: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2101401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6402 62.011601 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2100001 Win=65535 Len=0 Frame 6402: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2100001, Len: 0 No. Time Source Destination Protocol Length Info 6403 62.011624 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2102801 Win=65535 Len=0 Frame 6403: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2102801, Len: 0 No. Time Source Destination Protocol Length Info 6404 62.025479 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 6404: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 6405 62.025505 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 6405: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 6406 62.027166 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 6406: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4915, Ack: 379314, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6407 62.027184 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=379314 Ack=4957 Win=46594 Len=0 Frame 6407: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 379314, Ack: 4957, Len: 0 No. Time Source Destination Protocol Length Info 6408 62.033802 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 6408: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2857, Ack: 195271, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6409 62.033820 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=195271 Ack=2899 Win=46615 Len=0 Frame 6409: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 195271, Ack: 2899, Len: 0 No. Time Source Destination Protocol Length Info 6410 62.173879 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2628720896, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 6410: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6411 62.173897 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2628720896, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 6411: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6412 62.173905 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2628720896, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 6412: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6413 62.173913 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2628720896, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 6413: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6414 62.194557 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 202899712, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 6414: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6415 62.194580 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 202899712, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 6415: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6416 62.194594 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 202899712, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 6416: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6417 62.194606 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 202899712, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 6417: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6418 62.256059 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6418: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2102801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6419 62.399044 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2104201 Win=65535 Len=0 Frame 6419: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2104201, Len: 0 No. Time Source Destination Protocol Length Info 6420 62.539580 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 6420: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4957, Ack: 379314, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6421 62.539615 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=379314 Ack=4999 Win=46573 Len=0 Frame 6421: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 379314, Ack: 4999, Len: 0 No. Time Source Destination Protocol Length Info 6422 62.844098 192.168.10.203 91.207.181.14 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 6422: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 91.207.181.14 (91.207.181.14) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 6423 62.999387 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 6423: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2899, Ack: 195271, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6424 62.999424 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=195271 Ack=2941 Win=46594 Len=0 Frame 6424: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 195271, Ack: 2941, Len: 0 No. Time Source Destination Protocol Length Info 6425 63.069199 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 6425: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 4999, Ack: 379314, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6426 63.069251 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=379314 Ack=5041 Win=46552 Len=0 Frame 6426: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 379314, Ack: 5041, Len: 0 No. Time Source Destination Protocol Length Info 6427 63.135202 192.168.10.202 192.168.10.255 BROWSER 243 Host Announcement ICARUS, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server Frame 6427: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: WwPcbaTe_67:48:f0 (00:0f:1f:67:48:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.202 (192.168.10.202), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 6428 63.135404 192.168.10.202 192.168.10.255 BROWSER 243 Host Announcement ICARUS, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server Frame 6428: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: WwPcbaTe_67:48:f0 (00:0f:1f:67:48:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.202 (192.168.10.202), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 6429 63.189682 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2645498112, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 6429: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6430 63.189706 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2645498112, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 6430: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6431 63.189719 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2645498112, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 6431: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6432 63.189732 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2645498112, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 6432: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6433 63.193952 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 6433: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 6434 63.210338 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 219676928, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 6434: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6435 63.210360 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 219676928, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 6435: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6436 63.210373 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 219676928, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 6436: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6437 63.210385 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 219676928, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 6437: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6438 63.315238 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 6438: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 6439 63.353049 192.168.10.30 192.168.10.255 UDP 764 Source port: 34427 Destination port: apc-3052 Frame 6439: 764 bytes on wire (6112 bits), 764 bytes captured (6112 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (722 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 34 3a 35 38 0a 53 52 3d 31 42 0a =18:44:58.SR=1B. 0060 53 55 3d 37 42 31 33 30 34 35 30 0a 52 44 3d 38 SU=7B130450.RD=8 0070 32 31 42 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 21B.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 =08.7E=00.3E=001 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 .4C=207.3.50=040 00c0 2e 30 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 .0.43=025.2.78=0 00d0 37 2f 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 7/25/06.6A=0023: 00e0 0a 34 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 .47=S.63=BAI_UPS 00f0 20 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f .66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 =00.38=00.6E=NS0 0120 36 33 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 631005398 .6D=0 0130 37 2f 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 7/25/06.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 52 4d -UPS RT 10000 RM 0150 20 58 4c 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d XL.46=60.00.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 207.3.4E=204.4.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 =000.42=218.1.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e .5C=034.0.2F=16. 01d0 37 34 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 74.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 000.09=60.00;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 .E9=0.I0=2.I1=26 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a .I5=0.I6=0.I7=1. 0250 49 38 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 I8=Device 1.I9=0 0260 0a 49 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d .IA=Device 2.IB= 0270 30 0a 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 0.IC=Relay 1.ID= 0280 30 0a 53 48 3d 32 30 35 46 43 30 44 35 39 41 34 0.SH=205FC0D59A4 0290 35 44 38 43 31 30 38 43 43 42 34 32 42 39 37 43 5D8C108CCB42B97C 02a0 35 43 35 39 31 0a 4d 44 3d 35 33 33 35 30 34 32 5C591.MD=5335042 02b0 31 31 65 39 65 38 64 64 62 64 63 61 35 63 37 37 11e9e8ddbdca5c77 02c0 63 36 33 39 62 61 64 38 32 0a 3c 2f 42 4f 44 59 c639bad82.</BODY 02d0 3e 0a >. No. Time Source Destination Protocol Length Info 6440 63.353192 192.168.10.30 192.168.10.255 UDP 764 Source port: 34427 Destination port: apc-3052 Frame 6440: 764 bytes on wire (6112 bits), 764 bytes captured (6112 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (722 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 34 3a 35 38 0a 53 52 3d 31 42 0a =18:44:58.SR=1B. 0060 53 55 3d 37 42 31 33 30 34 35 30 0a 52 44 3d 38 SU=7B130450.RD=8 0070 32 31 42 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 21B.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 =08.7E=00.3E=001 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 .4C=207.3.50=040 00c0 2e 30 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 .0.43=025.2.78=0 00d0 37 2f 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 7/25/06.6A=0023: 00e0 0a 34 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 .47=S.63=BAI_UPS 00f0 20 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f .66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 =00.38=00.6E=NS0 0120 36 33 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 631005398 .6D=0 0130 37 2f 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 7/25/06.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 52 4d -UPS RT 10000 RM 0150 20 58 4c 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d XL.46=60.00.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 207.3.4E=204.4.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 =000.42=218.1.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e .5C=034.0.2F=16. 01d0 37 34 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 74.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 000.09=60.00;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 .E9=0.I0=2.I1=26 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a .I5=0.I6=0.I7=1. 0250 49 38 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 I8=Device 1.I9=0 0260 0a 49 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d .IA=Device 2.IB= 0270 30 0a 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 0.IC=Relay 1.ID= 0280 30 0a 53 48 3d 32 30 35 46 43 30 44 35 39 41 34 0.SH=205FC0D59A4 0290 35 44 38 43 31 30 38 43 43 42 34 32 42 39 37 43 5D8C108CCB42B97C 02a0 35 43 35 39 31 0a 4d 44 3d 35 33 33 35 30 34 32 5C591.MD=5335042 02b0 31 31 65 39 65 38 64 64 62 64 63 61 35 63 37 37 11e9e8ddbdca5c77 02c0 63 36 33 39 62 61 64 38 32 0a 3c 2f 42 4f 44 59 c639bad82.</BODY 02d0 3e 0a >. No. Time Source Destination Protocol Length Info 6441 63.443620 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 6441: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 6442 63.516118 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 6442: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 6443 63.516150 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 6443: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 6444 63.565932 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 6444: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 6445 63.584999 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 6445: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5041, Ack: 379314, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6446 63.585038 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=379314 Ack=5083 Win=46531 Len=0 Frame 6446: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 379314, Ack: 5083, Len: 0 No. Time Source Destination Protocol Length Info 6447 63.635944 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6447: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2104201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6448 63.672730 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6448: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2105601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6449 63.672766 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6449: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2107001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6450 63.672797 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6450: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2108401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6451 63.672842 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2107001 Win=65535 Len=0 Frame 6451: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2107001, Len: 0 No. Time Source Destination Protocol Length Info 6452 63.672879 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2109801 Win=65535 Len=0 Frame 6452: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2109801, Len: 0 No. Time Source Destination Protocol Length Info 6453 63.690419 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6453: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2109801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6454 63.690458 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6454: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2111201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6455 63.690488 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6455: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2112601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6456 63.690530 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2112601 Win=65535 Len=0 Frame 6456: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2112601, Len: 0 No. Time Source Destination Protocol Length Info 6457 63.740767 192.168.10.67 192.168.10.204 TCP 60 sai-sentlm > http [RST, ACK] Seq=1508 Ack=1488 Win=0 Len=0 Frame 6457: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_39:6b:43 (00:18:8b:39:6b:43) Internet Protocol Version 4, Src: 192.168.10.67 (192.168.10.67), Dst: 192.168.10.204 (192.168.10.204) Transmission Control Protocol, Src Port: sai-sentlm (2640), Dst Port: http (80), Seq: 1508, Ack: 1488, Len: 0 No. Time Source Destination Protocol Length Info 6458 63.821068 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2114001 Win=65535 Len=0 Frame 6458: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2114001, Len: 0 No. Time Source Destination Protocol Length Info 6459 63.913490 Dell_7d:f1:27 Broadcast ARP 60 Who has 192.168.10.208? Tell 192.168.10.219 Frame 6459: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_7d:f1:27 (00:22:19:7d:f1:27), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6460 63.913521 Dell_7d:f1:27 Broadcast ARP 60 Who has 192.168.10.208? Tell 192.168.10.219 Frame 6460: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_7d:f1:27 (00:22:19:7d:f1:27), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6461 63.955092 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 6461: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2941, Ack: 195271, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6462 63.955128 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=195271 Ack=2983 Win=46573 Len=0 Frame 6462: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 195271, Ack: 2983, Len: 0 No. Time Source Destination Protocol Length Info 6463 64.031207 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 6463: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 6464 64.031238 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 6464: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 6465 64.095236 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 6465: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5083, Ack: 379314, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6466 64.095270 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=379314 Ack=5125 Win=46510 Len=0 Frame 6466: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 379314, Ack: 5125, Len: 0 No. Time Source Destination Protocol Length Info 6467 64.205306 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2662275328, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 6467: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6468 64.205330 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2662275328, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 6468: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6469 64.205343 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2662275328, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 6469: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6470 64.205355 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2662275328, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 6470: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6471 64.225949 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 236454144, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 6471: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6472 64.225971 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 236454144, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 6472: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6473 64.225983 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 236454144, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 6473: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6474 64.225995 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 236454144, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 6474: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6475 64.363506 91.193.253.129 192.168.10.207 SMTP 94 C: HELO as42959-91-193-253-129.mol.net.ua Frame 6475: 94 bytes on wire (752 bits), 94 bytes captured (752 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 91.193.253.129 (91.193.253.129), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: silkp3 (2831), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 40 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6476 64.363589 192.168.10.207 91.193.253.129 SMTP 103 S: 250 mail.mydomain.com Hello [91.193.253.129] Frame 6476: 103 bytes on wire (824 bits), 103 bytes captured (824 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 91.193.253.129 (91.193.253.129) Transmission Control Protocol, Src Port: smtp (25), Dst Port: silkp3 (2831), Seq: 122, Ack: 41, Len: 49 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6477 64.363676 91.193.253.129 192.168.10.207 TCP 60 silkp3 > smtp [ACK] Seq=41 Ack=171 Win=93270 Len=0 Frame 6477: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 91.193.253.129 (91.193.253.129), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: silkp3 (2831), Dst Port: smtp (25), Seq: 41, Ack: 171, Len: 0 No. Time Source Destination Protocol Length Info 6478 64.441059 192.168.10.220 208.67.222.222 DNS 86 Standard query PTR 93.19.154.119.in-addr.arpa Frame 6478: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 53812 (53812), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 6479 64.531684 91.193.253.129 192.168.10.207 SMTP 99 C: MAIL FROM: <ebzbattlefield@xxxxxxxxxxxx> Frame 6479: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 91.193.253.129 (91.193.253.129), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: silkp3 (2831), Dst Port: smtp (25), Seq: 41, Ack: 171, Len: 45 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6480 64.531941 192.168.10.207 91.193.253.129 SMTP 109 S: 250 2.1.0 [email protected] OK Frame 6480: 109 bytes on wire (872 bits), 109 bytes captured (872 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 91.193.253.129 (91.193.253.129) Transmission Control Protocol, Src Port: smtp (25), Dst Port: silkp3 (2831), Seq: 171, Ack: 86, Len: 55 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6481 64.531988 91.193.253.129 192.168.10.207 TCP 60 silkp3 > smtp [ACK] Seq=86 Ack=226 Win=93214 Len=0 Frame 6481: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 91.193.253.129 (91.193.253.129), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: silkp3 (2831), Dst Port: smtp (25), Seq: 86, Ack: 226, Len: 0 No. Time Source Destination Protocol Length Info 6482 64.596897 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 6482: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5125, Ack: 379314, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6483 64.596930 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=379314 Ack=5167 Win=46489 Len=0 Frame 6483: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 379314, Ack: 5167, Len: 0 No. Time Source Destination Protocol Length Info 6484 64.638356 DellComp_f0:68:fd Broadcast ARP 60 Who has 192.168.10.182? Tell 192.168.10.15 Frame 6484: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: DellComp_f0:68:fd (00:b0:d0:f0:68:fd), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6485 64.638387 DellComp_f0:68:fd Broadcast ARP 60 Who has 192.168.10.182? Tell 192.168.10.15 Frame 6485: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: DellComp_f0:68:fd (00:b0:d0:f0:68:fd), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6486 64.701201 192.168.10.1 192.168.10.245 Syslog 313 LOCAL1.INFO: Oct 3 19:45:22 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 91.193.253.129 7x.x.x.3 2831 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="ebzbattlefield@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 6486: 313 bytes on wire (2504 bits), 313 bytes captured (2504 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:22 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 91.193.253.129 7x.x.x.3 2831 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default No. Time Source Destination Protocol Length Info 6487 64.828196 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-10.geo.kaspersky.com Frame 6487: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 51522 (51522), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 6488 64.926127 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 6488: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 2983, Ack: 195271, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6489 64.926161 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=195271 Ack=3025 Win=46552 Len=0 Frame 6489: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 195271, Ack: 3025, Len: 0 No. Time Source Destination Protocol Length Info 6490 65.122705 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 6490: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5167, Ack: 379314, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6491 65.122751 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=379314 Ack=5209 Win=46468 Len=0 Frame 6491: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 379314, Ack: 5209, Len: 0 No. Time Source Destination Protocol Length Info 6492 65.193963 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 6492: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 6493 65.220923 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2679052544, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 6493: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6494 65.220946 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2679052544, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 6494: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6495 65.220959 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2679052544, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 6495: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6496 65.220971 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2679052544, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 6496: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6497 65.241562 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 253231360, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 6497: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6498 65.241585 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 253231360, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 6498: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6499 65.241597 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 253231360, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 6499: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6500 65.241609 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 253231360, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 6500: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6501 65.315257 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 6501: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 6502 65.391296 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.86? Tell 192.168.10.220 Frame 6502: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6503 65.391328 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.86? Tell 192.168.10.220 Frame 6503: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6504 65.391343 Dell_ad:25:f8 Intel_38:8d:0a ARP 64 Who has 192.168.10.66? Tell 192.168.10.220 Frame 6504: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6505 65.391354 Dell_ad:25:f8 Intel_89:5e:11 ARP 64 Who has 192.168.10.65? Tell 192.168.10.220 Frame 6505: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6506 65.391364 Intel_38:8d:0a Dell_ad:25:f6 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 6506: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6507 65.391374 Intel_89:5e:11 Dell_ad:25:f8 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 6507: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6508 65.391389 Dell_ad:25:f8 Intel_a5:f5:5b ARP 64 Who has 192.168.10.131? Tell 192.168.10.220 Frame 6508: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6509 65.391399 Dell_ad:25:f8 Intel_38:8c:64 ARP 64 Who has 192.168.10.67? Tell 192.168.10.220 Frame 6509: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6510 65.391409 Dell_ad:25:f8 Intel_02:0e:6d ARP 64 Who has 192.168.10.128? Tell 192.168.10.220 Frame 6510: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6511 65.391419 Dell_ad:25:f8 IntelCor_d3:4e:80 ARP 64 Who has 192.168.10.70? Tell 192.168.10.220 Frame 6511: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6512 65.391429 Intel_a5:f5:5b Dell_ad:25:f8 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 6512: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6513 65.391439 Intel_38:8c:64 Dell_ad:25:f6 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 6513: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6514 65.391450 Intel_02:0e:6d Dell_ad:25:f6 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 6514: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6515 65.391460 Dell_ad:25:f8 Intel_d0:7a:8f ARP 64 Who has 192.168.10.68? Tell 192.168.10.220 Frame 6515: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6516 65.391470 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.233? Tell 192.168.10.220 Frame 6516: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6517 65.391484 IntelCor_d3:4e:80 Dell_ad:25:f8 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 6517: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6518 65.391494 Dell_ad:25:f8 Intel_56:83:a5 ARP 64 Who has 192.168.10.59? Tell 192.168.10.220 Frame 6518: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6519 65.391504 Dell_ad:25:f8 Intel_38:8c:b1 ARP 64 Who has 192.168.10.138? Tell 192.168.10.220 Frame 6519: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6520 65.391514 Intel_d0:7a:8f Dell_ad:25:f8 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 6520: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6521 65.391525 Dell_ad:25:f8 Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.220 Frame 6521: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6522 65.391535 Intel_56:83:a5 Dell_ad:25:f6 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 6522: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6523 65.391545 Intel_38:8c:b1 Dell_ad:25:f6 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 6523: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6524 65.391558 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 6524: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6525 65.391568 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 6525: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6526 65.441110 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 93.19.154.119.in-addr.arpa Frame 6526: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 57379 (57379), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 6527 65.443595 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 6527: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 6528 65.514257 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 6528: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 6529 65.514288 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 6529: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 6530 65.524137 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6530: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2114001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6531 65.524173 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6531: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2115401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6532 65.524202 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6532: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2116801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6533 65.524232 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6533: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2118201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6534 65.524279 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2116801 Win=65535 Len=0 Frame 6534: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2116801, Len: 0 No. Time Source Destination Protocol Length Info 6535 65.524316 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2119601 Win=65535 Len=0 Frame 6535: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2119601, Len: 0 No. Time Source Destination Protocol Length Info 6536 65.541821 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6536: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2119601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6537 65.541888 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6537: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2121001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6538 65.541938 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2122401 Win=65535 Len=0 Frame 6538: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2122401, Len: 0 No. Time Source Destination Protocol Length Info 6539 65.542249 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6539: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2122401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6540 65.560536 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6540: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2123801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6541 65.560589 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2125201 Win=65535 Len=0 Frame 6541: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2125201, Len: 0 No. Time Source Destination Protocol Length Info 6542 65.560623 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6542: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2125201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6543 65.560654 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6543: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2126601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6544 65.560779 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2128001 Win=65535 Len=0 Frame 6544: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2128001, Len: 0 No. Time Source Destination Protocol Length Info 6545 65.566050 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 6545: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 6546 65.578469 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6546: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2128001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6547 65.578508 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6547: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2129401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6548 65.578557 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2130801 Win=65535 Len=0 Frame 6548: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2130801, Len: 0 No. Time Source Destination Protocol Length Info 6549 65.578815 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6549: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2130801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6550 65.578885 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6550: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2132201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6551 65.578971 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2133601 Win=65535 Len=0 Frame 6551: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2133601, Len: 0 No. Time Source Destination Protocol Length Info 6552 65.597069 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6552: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2133601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6553 65.597103 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6553: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2135001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6554 65.597189 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2136401 Win=65535 Len=0 Frame 6554: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2136401, Len: 0 No. Time Source Destination Protocol Length Info 6555 65.597220 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6555: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2136401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6556 65.597250 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6556: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2137801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6557 65.597292 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2139201 Win=65535 Len=0 Frame 6557: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2139201, Len: 0 No. Time Source Destination Protocol Length Info 6558 65.615187 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6558: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2139201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6559 65.615220 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6559: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2140601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6560 65.615266 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2142001 Win=65535 Len=0 Frame 6560: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2142001, Len: 0 No. Time Source Destination Protocol Length Info 6561 65.615295 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6561: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2142001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6562 65.615329 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6562: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2143401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6563 65.615369 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2144801 Win=65535 Len=0 Frame 6563: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2144801, Len: 0 No. Time Source Destination Protocol Length Info 6564 65.638590 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 6564: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5209, Ack: 379314, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6565 65.638623 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=379314 Ack=5251 Win=46447 Len=0 Frame 6565: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 379314, Ack: 5251, Len: 0 No. Time Source Destination Protocol Length Info 6566 65.651571 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6566: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2144801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6567 65.651604 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6567: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2146201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6568 65.651640 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6568: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2147601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6569 65.651670 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6569: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2149001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6570 65.651699 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6570: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2150401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6571 65.651746 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2147601 Win=65535 Len=0 Frame 6571: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2147601, Len: 0 No. Time Source Destination Protocol Length Info 6572 65.651783 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2150401 Win=65535 Len=0 Frame 6572: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2150401, Len: 0 No. Time Source Destination Protocol Length Info 6573 65.702940 192.168.10.205 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 6573: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_52:2e:6b (00:13:72:52:2e:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.205 (192.168.10.205), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 6574 65.703127 192.168.10.205 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 6574: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_52:2e:6b (00:13:72:52:2e:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.205 (192.168.10.205), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 6575 65.789740 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2151801 Win=65535 Len=0 Frame 6575: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2151801, Len: 0 No. Time Source Destination Protocol Length Info 6576 65.828186 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-10.geo.kaspersky.com Frame 6576: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 51522 (51522), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 6577 65.890133 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 6577: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3025, Ack: 195271, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6578 65.890170 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=195271 Ack=3067 Win=46531 Len=0 Frame 6578: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 195271, Ack: 3067, Len: 0 No. Time Source Destination Protocol Length Info 6579 66.021962 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 6579: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 6580 66.021994 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 6580: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 6581 66.168510 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 6581: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5251, Ack: 379314, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6582 66.168544 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=379314 Ack=5293 Win=46426 Len=0 Frame 6582: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 379314, Ack: 5293, Len: 0 No. Time Source Destination Protocol Length Info 6583 66.236542 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2695829760, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 6583: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6584 66.236567 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2695829760, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 6584: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6585 66.236579 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2695829760, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 6585: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6586 66.236592 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2695829760, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 6586: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6587 66.257005 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 270008576, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 6587: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6588 66.257026 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 270008576, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 6588: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6589 66.257039 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 270008576, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 6589: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6590 66.257052 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 270008576, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 6590: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6591 66.272983 Dell_f6:3f:45 Broadcast ARP 60 Who has 192.168.10.208? Tell 192.168.10.206 Frame 6591: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6592 66.273019 Dell_f6:3f:45 Broadcast ARP 60 Who has 192.168.10.208? Tell 192.168.10.206 Frame 6592: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6593 66.565128 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6593: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2151801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6594 66.565164 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6594: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2153201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6595 66.565194 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6595: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2154601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6596 66.565224 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6596: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2156001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6597 66.565253 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6597: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2157401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6598 66.565282 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6598: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2158801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6599 66.565333 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2154601 Win=65535 Len=0 Frame 6599: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2154601, Len: 0 No. Time Source Destination Protocol Length Info 6600 66.565372 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2157401 Win=65535 Len=0 Frame 6600: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2157401, Len: 0 No. Time Source Destination Protocol Length Info 6601 66.565410 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2160201 Win=65535 Len=0 Frame 6601: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2160201, Len: 0 No. Time Source Destination Protocol Length Info 6602 66.583227 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6602: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2160201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6603 66.583297 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6603: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2161601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6604 66.583344 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2163001 Win=65535 Len=0 Frame 6604: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2163001, Len: 0 No. Time Source Destination Protocol Length Info 6605 66.780787 192.168.10.226 192.168.10.65 ICMP 60 Echo (ping) request id=0x0400, seq=51440/61640, ttl=128 Frame 6605: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.65 (192.168.10.65) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6606 66.780843 192.168.10.226 192.168.10.59 ICMP 60 Echo (ping) request id=0x0400, seq=51952/61642, ttl=128 Frame 6606: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.59 (192.168.10.59) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6607 66.780896 192.168.10.65 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=51440/61640, ttl=128 Frame 6607: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.65 (192.168.10.65), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6608 66.780953 192.168.10.226 192.168.10.32 ICMP 60 Echo (ping) request id=0x0400, seq=52720/61645, ttl=128 Frame 6608: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: American_ca:aa:ae (00:c0:b7:ca:aa:ae) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.32 (192.168.10.32) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6609 66.781000 192.168.10.226 192.168.10.32 ICMP 60 Echo (ping) request id=0x0400, seq=52720/61645, ttl=128 Frame 6609: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: American_ca:aa:ae (00:c0:b7:ca:aa:ae) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.32 (192.168.10.32) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6610 66.781046 192.168.10.59 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=51952/61642, ttl=128 Frame 6610: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Internet Protocol Version 4, Src: 192.168.10.59 (192.168.10.59), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6611 66.781135 192.168.10.226 192.168.10.70 ICMP 60 Echo (ping) request id=0x0400, seq=55536/61656, ttl=128 Frame 6611: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.70 (192.168.10.70) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6612 66.781184 192.168.10.70 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=55536/61656, ttl=128 Frame 6612: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Internet Protocol Version 4, Src: 192.168.10.70 (192.168.10.70), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6613 66.781201 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 6613: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6614 66.781228 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 6614: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6615 66.781285 192.168.10.226 192.168.10.65 ICMP 60 Echo (ping) request id=0x0400, seq=56560/61660, ttl=128 Frame 6615: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.65 (192.168.10.65) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6616 66.781296 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 6616: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6617 66.781311 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 6617: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6618 66.781362 192.168.10.226 192.168.10.59 ICMP 60 Echo (ping) request id=0x0400, seq=57072/61662, ttl=128 Frame 6618: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.59 (192.168.10.59) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6619 66.781415 192.168.10.65 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=56560/61660, ttl=128 Frame 6619: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.65 (192.168.10.65), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6620 66.781463 192.168.10.226 192.168.10.32 ICMP 60 Echo (ping) request id=0x0400, seq=57840/61665, ttl=128 Frame 6620: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: American_ca:aa:ae (00:c0:b7:ca:aa:ae) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.32 (192.168.10.32) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6621 66.781508 192.168.10.59 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=57072/61662, ttl=128 Frame 6621: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.59 (192.168.10.59), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6622 66.781555 192.168.10.226 192.168.10.32 ICMP 60 Echo (ping) request id=0x0400, seq=57840/61665, ttl=128 Frame 6622: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: American_ca:aa:ae (00:c0:b7:ca:aa:ae) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.32 (192.168.10.32) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6623 66.781566 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 6623: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6624 66.781576 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 6624: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6625 66.781587 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 6625: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6626 66.781597 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 6626: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6627 66.781607 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 6627: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6628 66.781617 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 6628: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6629 66.781627 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 6629: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6630 66.781645 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 6630: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6631 66.781655 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 6631: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6632 66.781671 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 6632: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6633 66.781703 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 6633: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6634 66.781714 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 6634: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6635 66.781723 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 6635: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6636 66.781746 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 6636: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6637 66.781757 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 6637: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6638 66.781767 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 6638: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6639 66.781777 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 6639: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6640 66.781788 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 6640: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6641 66.781798 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 6641: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6642 66.781808 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 6642: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6643 66.781818 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 6643: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6644 66.781828 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 6644: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6645 66.781838 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 6645: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6646 66.781853 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 6646: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6647 66.781867 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 6647: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6648 66.781877 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 6648: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6649 66.781898 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 6649: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6650 66.781912 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 6650: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6651 66.781922 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 6651: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6652 66.781935 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 6652: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6653 66.781949 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 6653: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6654 66.781959 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 6654: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6655 66.781969 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 6655: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6656 66.782020 192.168.10.226 192.168.10.70 ICMP 60 Echo (ping) request id=0x0400, seq=60656/61676, ttl=128 Frame 6656: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.70 (192.168.10.70) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6657 66.782031 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 6657: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6658 66.782045 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 6658: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6659 66.782096 192.168.10.70 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=60656/61676, ttl=128 Frame 6659: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Internet Protocol Version 4, Src: 192.168.10.70 (192.168.10.70), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6660 66.782106 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 6660: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6661 66.782169 192.168.10.226 192.168.10.65 ICMP 60 Echo (ping) request id=0x0400, seq=61680/61680, ttl=128 Frame 6661: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.65 (192.168.10.65) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6662 66.782216 192.168.10.226 192.168.10.59 ICMP 60 Echo (ping) request id=0x0400, seq=62192/61682, ttl=128 Frame 6662: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.59 (192.168.10.59) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6663 66.782262 192.168.10.65 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=61680/61680, ttl=128 Frame 6663: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.65 (192.168.10.65), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6664 66.782273 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 6664: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6665 66.782285 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 6665: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6666 66.782295 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 6666: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6667 66.782341 192.168.10.59 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=62192/61682, ttl=128 Frame 6667: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.59 (192.168.10.59), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6668 66.782353 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 6668: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6669 66.782400 192.168.10.226 192.168.10.32 ICMP 60 Echo (ping) request id=0x0400, seq=62960/61685, ttl=128 Frame 6669: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: American_ca:aa:ae (00:c0:b7:ca:aa:ae) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.32 (192.168.10.32) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6670 66.782411 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 6670: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6671 66.782457 192.168.10.226 192.168.10.32 ICMP 60 Echo (ping) request id=0x0400, seq=62960/61685, ttl=128 Frame 6671: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: American_ca:aa:ae (00:c0:b7:ca:aa:ae) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.32 (192.168.10.32) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6672 66.782469 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 6672: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6673 66.782480 Dell_52:f0:f1 American_ca:aa:ae ARP 60 Who has 192.168.10.32? Tell 192.168.10.226 Frame 6673: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: American_ca:aa:ae (00:c0:b7:ca:aa:ae) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6674 66.782490 Dell_52:f0:f1 American_ca:aa:ae ARP 60 Who has 192.168.10.32? Tell 192.168.10.226 Frame 6674: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: American_ca:aa:ae (00:c0:b7:ca:aa:ae) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6675 66.782501 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 6675: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6676 66.782511 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 6676: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6677 66.782521 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 6677: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6678 66.782532 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 6678: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6679 66.782542 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 6679: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6680 66.782552 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 6680: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6681 66.782600 192.168.10.226 192.168.10.70 ICMP 60 Echo (ping) request id=0x0400, seq=241/61696, ttl=128 Frame 6681: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.70 (192.168.10.70) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6682 66.782645 192.168.10.70 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=241/61696, ttl=128 Frame 6682: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Internet Protocol Version 4, Src: 192.168.10.70 (192.168.10.70), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 6683 66.782660 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 6683: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6684 66.782670 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 6684: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6685 66.828013 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-10.geo.kaspersky.com Frame 6685: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 51522 (51522), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 6686 66.975402 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 6686: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3067, Ack: 195271, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6687 66.975439 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=195271 Ack=3109 Win=46510 Len=0 Frame 6687: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 195271, Ack: 3109, Len: 0 No. Time Source Destination Protocol Length Info 6688 66.993673 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 6688: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6689 66.993703 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 6689: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6690 67.010481 192.168.10.216 64.74.103.131 TLSv1 91 Application Data Frame 6690: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.216 (192.168.10.216), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: ovrimosdbman (2956), Dst Port: https (443), Seq: 75, Ack: 75, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 6691 67.010551 64.74.103.131 192.168.10.216 TCP 60 https > ovrimosdbman [ACK] Seq=75 Ack=112 Win=65535 Len=0 Frame 6691: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.216 (192.168.10.216) Transmission Control Protocol, Src Port: https (443), Dst Port: ovrimosdbman (2956), Seq: 75, Ack: 112, Len: 0 No. Time Source Destination Protocol Length Info 6692 67.013272 Watchgua_3c:4c:d8 IntelCor_36:19:60 ARP 60 Who has 192.168.10.216? Tell 192.168.10.1 Frame 6692: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6693 67.013290 IntelCor_36:19:60 Watchgua_3c:4c:d8 ARP 60 192.168.10.216 is at 00:13:20:36:19:60 Frame 6693: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6694 67.023854 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 6694: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5293, Ack: 379314, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6695 67.023887 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=379314 Ack=5335 Win=46405 Len=0 Frame 6695: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 379314, Ack: 5335, Len: 0 No. Time Source Destination Protocol Length Info 6696 67.035625 208.67.222.222 192.168.10.220 DNS 86 Standard query response, No such name Frame 6696: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 53812 (53812) Domain Name System (response) No. Time Source Destination Protocol Length Info 6697 67.036233 192.168.10.203 119.154.19.93 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 6697: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 119.154.19.93 (119.154.19.93) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 6698 67.037348 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 Who has 192.168.10.220? Tell 192.168.10.1 Frame 6698: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6699 67.037362 Dell_ad:25:f6 Watchgua_3c:4c:d8 ARP 60 192.168.10.220 is at 00:22:19:ad:25:f6 Frame 6699: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6700 67.058227 64.74.103.131 192.168.10.216 TLSv1 91 Application Data Frame 6700: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.216 (192.168.10.216) Transmission Control Protocol, Src Port: https (443), Dst Port: ovrimosdbman (2956), Seq: 75, Ack: 112, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 6701 67.193904 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 6701: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 6702 67.213375 192.168.10.216 64.74.103.131 TCP 60 ovrimosdbman > https [ACK] Seq=112 Ack=112 Win=64203 Len=0 Frame 6702: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.216 (192.168.10.216), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: ovrimosdbman (2956), Dst Port: https (443), Seq: 112, Ack: 112, Len: 0 No. Time Source Destination Protocol Length Info 6703 67.252066 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2712606976, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 6703: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6704 67.252090 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2712606976, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 6704: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6705 67.252103 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2712606976, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 6705: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6706 67.252115 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2712606976, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 6706: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6707 67.272791 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 286785792, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 6707: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6708 67.272814 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 286785792, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 6708: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6709 67.272826 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 286785792, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 6709: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6710 67.272838 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 286785792, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 6710: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6711 67.315384 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 6711: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 6712 67.396879 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.250? Tell 192.168.10.246 Frame 6712: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6713 67.396912 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.250? Tell 192.168.10.246 Frame 6713: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6714 67.443564 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 6714: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 6715 67.484350 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 3 Port 42 TTL = 120 Frame 6715: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 6716 67.520156 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 6716: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 6717 67.520197 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 6717: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 6718 67.542888 Oracle_86:77:68 Broadcast ARP 60 Gratuitous ARP for 192.168.10.212 (Request) Frame 6718: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 6719 67.542919 Oracle_86:77:68 Broadcast ARP 60 Gratuitous ARP for 192.168.10.212 (Request) Frame 6719: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 6720 67.548723 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 6720: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5335, Ack: 379314, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6721 67.548758 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=379314 Ack=5377 Win=46384 Len=0 Frame 6721: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 379314, Ack: 5377, Len: 0 No. Time Source Destination Protocol Length Info 6722 67.566051 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 6722: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 6723 67.957342 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 6723: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3109, Ack: 195271, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6724 67.957377 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=195271 Ack=3151 Win=46489 Len=0 Frame 6724: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 195271, Ack: 3151, Len: 0 No. Time Source Destination Protocol Length Info 6725 68.020156 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 6725: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 6726 68.020196 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 6726: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 6727 68.095961 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 6727: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5377, Ack: 379314, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6728 68.095994 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=379314 Ack=5419 Win=46363 Len=0 Frame 6728: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 379314, Ack: 5419, Len: 0 No. Time Source Destination Protocol Length Info 6729 68.096027 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=5419 Ack=379314 Win=13828 Len=0 Frame 6729: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5419, Ack: 379314, Len: 0 No. Time Source Destination Protocol Length Info 6730 68.096054 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 6729#1] smtp > 23308 [ACK] Seq=5419 Ack=379314 Win=13828 Len=0 Frame 6730: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5419, Ack: 379314, Len: 0 No. Time Source Destination Protocol Length Info 6731 68.096135 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 6731: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 379314, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6732 68.096174 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 6732: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 380694, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6733 68.096193 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 6733: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 382074, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6734 68.096210 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 6734: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 383454, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6735 68.096227 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 6735: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 384834, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6736 68.096243 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 6736: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 386214, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6737 68.096261 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 6737: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 387594, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6738 68.096278 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 6738: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 388974, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6739 68.096294 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 6739: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 390354, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6740 68.096313 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 6740: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 391734, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6741 68.096330 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 6741: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 393114, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6742 68.096354 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=5419 Ack=386214 Win=6928 Len=0 Frame 6742: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5419, Ack: 386214, Len: 0 No. Time Source Destination Protocol Length Info 6743 68.096369 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=5419 Ack=393142 Win=0 Len=0 Frame 6743: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5419, Ack: 393142, Len: 0 No. Time Source Destination Protocol Length Info 6744 68.240516 192.168.10.226 192.168.10.32 TCP 62 a14 > http [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM=1 Frame 6744: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: American_ca:aa:ae (00:c0:b7:ca:aa:ae) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.32 (192.168.10.32) Transmission Control Protocol, Src Port: a14 (3597), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 6745 68.240594 192.168.10.226 192.168.10.32 TCP 62 a14 > http [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM=1 Frame 6745: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: American_ca:aa:ae (00:c0:b7:ca:aa:ae) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.32 (192.168.10.32) Transmission Control Protocol, Src Port: a14 (3597), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 6746 68.267605 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2729384192, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 6746: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6747 68.267624 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2729384192, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 6747: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6748 68.267631 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2729384192, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 6748: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6749 68.267639 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2729384192, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 6749: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6750 68.284885 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6750: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2163001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6751 68.288207 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 303563008, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 6751: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6752 68.288222 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 303563008, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 6752: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6753 68.288230 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 303563008, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 6753: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6754 68.288237 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 303563008, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 6754: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6755 68.321570 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6755: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2164401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6756 68.321597 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6756: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2165801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6757 68.321635 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2165801 Win=65535 Len=0 Frame 6757: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2165801, Len: 0 No. Time Source Destination Protocol Length Info 6758 68.321706 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6758: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2167201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6759 68.321728 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6759: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2168601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6760 68.321757 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2168601 Win=65535 Len=0 Frame 6760: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2168601, Len: 0 No. Time Source Destination Protocol Length Info 6761 68.339934 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6761: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2170001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6762 68.339989 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2171401 Win=65535 Len=0 Frame 6762: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2171401, Len: 0 No. Time Source Destination Protocol Length Info 6763 68.340019 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6763: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2171401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6764 68.340080 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6764: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2172801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6765 68.340129 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2174201 Win=65535 Len=0 Frame 6765: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2174201, Len: 0 No. Time Source Destination Protocol Length Info 6766 68.357838 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6766: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2174201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6767 68.357939 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6767: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2175601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6768 68.358002 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2177001 Win=65535 Len=0 Frame 6768: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2177001, Len: 0 No. Time Source Destination Protocol Length Info 6769 68.358188 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6769: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2177001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6770 68.376328 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6770: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2178401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6771 68.376413 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2179801 Win=65535 Len=0 Frame 6771: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2179801, Len: 0 No. Time Source Destination Protocol Length Info 6772 68.376445 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6772: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2179801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6773 68.376555 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6773: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2181201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6774 68.376616 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2182601 Win=65535 Len=0 Frame 6774: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2182601, Len: 0 No. Time Source Destination Protocol Length Info 6775 68.376684 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6775: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2182601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6776 68.394416 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6776: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2184001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6777 68.394502 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2185401 Win=65535 Len=0 Frame 6777: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2185401, Len: 0 No. Time Source Destination Protocol Length Info 6778 68.394520 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6778: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2185401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6779 68.394685 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6779: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2186801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6780 68.394727 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2188201 Win=65535 Len=0 Frame 6780: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2188201, Len: 0 No. Time Source Destination Protocol Length Info 6781 68.394809 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6781: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2188201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6782 68.412399 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6782: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2189601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6783 68.412443 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2191001 Win=65535 Len=0 Frame 6783: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2191001, Len: 0 No. Time Source Destination Protocol Length Info 6784 68.412475 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6784: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2191001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6785 68.412626 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6785: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2192401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6786 68.412673 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2193801 Win=65535 Len=0 Frame 6786: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2193801, Len: 0 No. Time Source Destination Protocol Length Info 6787 68.412773 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6787: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2193801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6788 68.412824 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6788: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2195201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6789 68.412908 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2196601 Win=65535 Len=0 Frame 6789: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2196601, Len: 0 No. Time Source Destination Protocol Length Info 6790 68.412998 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6790: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2196601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6791 68.431437 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6791: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2198001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6792 68.431478 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2199401 Win=65535 Len=0 Frame 6792: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2199401, Len: 0 No. Time Source Destination Protocol Length Info 6793 68.431507 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6793: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2199401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6794 68.431537 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6794: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2200801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6795 68.431576 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2202201 Win=65535 Len=0 Frame 6795: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2202201, Len: 0 No. Time Source Destination Protocol Length Info 6796 68.431607 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6796: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2202201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6797 68.431679 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6797: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2203601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6798 68.431701 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2205001 Win=65535 Len=0 Frame 6798: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2205001, Len: 0 No. Time Source Destination Protocol Length Info 6799 68.431785 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6799: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2205001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6800 68.431972 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6800: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2206401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6801 68.432010 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2207801 Win=65535 Len=0 Frame 6801: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2207801, Len: 0 No. Time Source Destination Protocol Length Info 6802 68.450113 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6802: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2207801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6803 68.450144 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6803: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2209201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6804 68.450182 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2210601 Win=65535 Len=0 Frame 6804: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2210601, Len: 0 No. Time Source Destination Protocol Length Info 6805 68.450212 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6805: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2210601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6806 68.450240 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6806: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2212001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6807 68.450282 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2213401 Win=65535 Len=0 Frame 6807: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2213401, Len: 0 No. Time Source Destination Protocol Length Info 6808 68.450300 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6808: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2213401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6809 68.450320 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6809: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2214801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6810 68.450343 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2216201 Win=65535 Len=0 Frame 6810: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2216201, Len: 0 No. Time Source Destination Protocol Length Info 6811 68.486110 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6811: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2216201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6812 68.486141 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6812: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2217601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6813 68.486171 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6813: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2219001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6814 68.486204 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6814: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2220401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6815 68.486235 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6815: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2221801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6816 68.486275 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2219001 Win=65535 Len=0 Frame 6816: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2219001, Len: 0 No. Time Source Destination Protocol Length Info 6817 68.486305 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6817: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2223201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6818 68.486334 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6818: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2224601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6819 68.486369 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2221801 Win=65535 Len=0 Frame 6819: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2221801, Len: 0 No. Time Source Destination Protocol Length Info 6820 68.486386 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6820: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2226001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6821 68.486403 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6821: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2227401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6822 68.486423 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2224601 Win=65535 Len=0 Frame 6822: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2224601, Len: 0 No. Time Source Destination Protocol Length Info 6823 68.486440 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6823: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2228801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6824 68.486461 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2227401 Win=65535 Len=0 Frame 6824: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2227401, Len: 0 No. Time Source Destination Protocol Length Info 6825 68.486483 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2230201 Win=65535 Len=0 Frame 6825: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2230201, Len: 0 No. Time Source Destination Protocol Length Info 6826 68.486500 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6826: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2230201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6827 68.503710 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6827: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2231601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6828 68.503751 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2233001 Win=65535 Len=0 Frame 6828: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2233001, Len: 0 No. Time Source Destination Protocol Length Info 6829 68.503920 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6829: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2233001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6830 68.521790 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6830: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2234401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6831 68.521831 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2235801 Win=65535 Len=0 Frame 6831: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2235801, Len: 0 No. Time Source Destination Protocol Length Info 6832 68.521897 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6832: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2235801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6833 68.522042 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6833: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2237201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6834 68.522066 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2238601 Win=65535 Len=0 Frame 6834: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2238601, Len: 0 No. Time Source Destination Protocol Length Info 6835 68.522221 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6835: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2238601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6836 68.522242 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6836: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2240001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6837 68.522308 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2241401 Win=65535 Len=0 Frame 6837: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2241401, Len: 0 No. Time Source Destination Protocol Length Info 6838 68.535552 192.168.10.203 119.154.19.93 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 6838: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 119.154.19.93 (119.154.19.93) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 6839 68.540185 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6839: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2241401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6840 68.540215 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6840: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2242801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6841 68.540254 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2244201 Win=65535 Len=0 Frame 6841: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2244201, Len: 0 No. Time Source Destination Protocol Length Info 6842 68.540285 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6842: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2244201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6843 68.540353 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6843: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2245601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6844 68.540390 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2247001 Win=65535 Len=0 Frame 6844: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2247001, Len: 0 No. Time Source Destination Protocol Length Info 6845 68.558185 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6845: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2247001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6846 68.558215 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6846: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2248401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6847 68.558261 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2249801 Win=65535 Len=0 Frame 6847: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2249801, Len: 0 No. Time Source Destination Protocol Length Info 6848 68.558290 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6848: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2249801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6849 68.558321 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6849: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2251201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6850 68.558357 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2252601 Win=65535 Len=0 Frame 6850: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2252601, Len: 0 No. Time Source Destination Protocol Length Info 6851 68.558472 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6851: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2252601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6852 68.558571 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6852: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2254001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6853 68.558627 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2255401 Win=65535 Len=0 Frame 6853: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2255401, Len: 0 No. Time Source Destination Protocol Length Info 6854 68.576031 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6854: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2255401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6855 68.576123 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6855: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2256801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6856 68.576164 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2258201 Win=65535 Len=0 Frame 6856: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2258201, Len: 0 No. Time Source Destination Protocol Length Info 6857 68.576231 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6857: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2258201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6858 68.576370 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6858: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2259601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6859 68.576397 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2261001 Win=65535 Len=0 Frame 6859: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2261001, Len: 0 No. Time Source Destination Protocol Length Info 6860 68.576473 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6860: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2261001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6861 68.576607 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6861: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2262401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6862 68.576630 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2263801 Win=65535 Len=0 Frame 6862: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2263801, Len: 0 No. Time Source Destination Protocol Length Info 6863 68.576735 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6863: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2263801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6864 68.595190 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6864: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2265201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6865 68.595230 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2266601 Win=65535 Len=0 Frame 6865: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2266601, Len: 0 No. Time Source Destination Protocol Length Info 6866 68.595260 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6866: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2266601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6867 68.595293 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6867: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2268001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6868 68.595330 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2269401 Win=65535 Len=0 Frame 6868: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2269401, Len: 0 No. Time Source Destination Protocol Length Info 6869 68.595369 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6869: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2269401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6870 68.595460 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6870: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2270801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6871 68.595500 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2272201 Win=65535 Len=0 Frame 6871: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2272201, Len: 0 No. Time Source Destination Protocol Length Info 6872 68.595568 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6872: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2272201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6873 68.614136 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6873: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2273601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6874 68.614176 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2275001 Win=65535 Len=0 Frame 6874: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2275001, Len: 0 No. Time Source Destination Protocol Length Info 6875 68.614205 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6875: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2275001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6876 68.614234 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6876: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2276401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6877 68.614267 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2277801 Win=65535 Len=0 Frame 6877: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2277801, Len: 0 No. Time Source Destination Protocol Length Info 6878 68.614284 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6878: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2277801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6879 68.614301 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6879: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2279201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6880 68.614322 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2280601 Win=65535 Len=0 Frame 6880: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2280601, Len: 0 No. Time Source Destination Protocol Length Info 6881 68.614339 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6881: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2280601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6882 68.622841 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 6882: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5419, Ack: 393142, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6883 68.622873 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=394494 Ack=5461 Win=46342 Len=0 Frame 6883: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 394494, Ack: 5461, Len: 0 No. Time Source Destination Protocol Length Info 6884 68.623039 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=5461 Ack=393142 Win=0 Len=0 Frame 6884: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5461, Ack: 393142, Len: 0 No. Time Source Destination Protocol Length Info 6885 68.651264 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6885: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2282001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6886 68.651297 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6886: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2283401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6887 68.651326 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6887: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2284801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6888 68.651360 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6888: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2286201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6889 68.651376 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6889: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2287601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6890 68.651401 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2283401 Win=65535 Len=0 Frame 6890: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2283401, Len: 0 No. Time Source Destination Protocol Length Info 6891 68.651417 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6891: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2289001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6892 68.651436 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6892: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2290401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6893 68.651461 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2286201 Win=65535 Len=0 Frame 6893: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2286201, Len: 0 No. Time Source Destination Protocol Length Info 6894 68.651478 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6894: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2291801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6895 68.651496 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6895: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2293201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6896 68.651513 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6896: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2294601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6897 68.651534 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2290401 Win=65535 Len=0 Frame 6897: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2290401, Len: 0 No. Time Source Destination Protocol Length Info 6898 68.651551 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6898: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2296001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6899 68.651569 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6899: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2297401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6900 68.651590 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2293201 Win=65535 Len=0 Frame 6900: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2293201, Len: 0 No. Time Source Destination Protocol Length Info 6901 68.651606 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6901: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2298801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6902 68.651631 192.168.10.221 207.46.19.254 TCP 60 4791 > https [RST, ACK] Seq=46426 Ack=27675 Win=0 Len=0 Frame 6902: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 46426, Ack: 27675, Len: 0 No. Time Source Destination Protocol Length Info 6903 68.651649 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6903: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2300201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6904 68.651670 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2296001 Win=65535 Len=0 Frame 6904: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2296001, Len: 0 No. Time Source Destination Protocol Length Info 6905 68.651687 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6905: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2301601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6906 68.651708 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2298801 Win=65535 Len=0 Frame 6906: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2298801, Len: 0 No. Time Source Destination Protocol Length Info 6907 68.651728 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2303001 Win=61335 Len=0 Frame 6907: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2303001, Len: 0 No. Time Source Destination Protocol Length Info 6908 68.651748 192.168.10.221 207.46.19.254 TCP 60 4793 > https [RST, ACK] Seq=3579 Ack=1605 Win=0 Len=0 Frame 6908: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4793 (4793), Dst Port: https (443), Seq: 3579, Ack: 1605, Len: 0 No. Time Source Destination Protocol Length Info 6909 68.651768 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=2303001 Win=65095 Len=0 Frame 6909: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2303001, Len: 0 No. Time Source Destination Protocol Length Info 6910 68.651788 192.168.10.221 24.143.205.163 TCP 60 [TCP Dup ACK 6909#1] 4795 > http [ACK] Seq=3042 Ack=2303001 Win=65095 Len=0 Frame 6910: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2303001, Len: 0 No. Time Source Destination Protocol Length Info 6911 68.828060 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-10.geo.kaspersky.com Frame 6911: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 51522 (51522), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 6912 68.828182 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-10.geo.kaspersky.com Frame 6912: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 51522 (51522), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 6913 68.834011 192.168.10.31 192.168.20.3 UDP 663 Source port: 50764 Destination port: apc-3052 Frame 6913: 663 bytes on wire (5304 bits), 663 bytes captured (5304 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (621 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 44 54 3d 31 30 .168.10.31.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 31 39 3a 34 /03/2011.TM=19:4 0040 39 3a 33 30 0a 53 52 3d 31 30 37 43 0a 53 55 3d 9:30.SR=107C.SU= 0050 32 44 38 32 44 30 45 39 0a 52 44 3d 43 32 42 42 2D82D0E9.RD=C2BB 0060 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 30 2e 33 .TA=192.168.20.3 0070 0a 50 54 3d 33 30 35 32 0a 43 4c 3d 43 30 41 38 .PT=3052.CL=C0A8 0080 30 41 44 39 0a 43 4c 3d 43 30 41 38 30 41 43 44 0AD9.CL=C0A80ACD 0090 0a 43 4c 3d 43 30 41 38 30 41 44 38 0a 43 4c 3d .CL=C0A80AD8.CL= 00a0 43 30 41 38 30 41 44 42 0a 43 4c 3d 43 30 41 38 C0A80ADB.CL=C0A8 00b0 30 41 44 30 0a 43 4c 3d 43 30 41 38 30 41 43 42 0AD0.CL=C0A80ACB 00c0 0a 43 4c 3d 43 30 41 38 30 41 43 43 0a 43 4c 3d .CL=C0A80ACC.CL= 00d0 43 30 41 38 30 41 43 45 0a 43 4c 3d 43 30 41 38 C0A80ACE.CL=C0A8 00e0 30 41 44 43 0a 43 4c 3d 43 30 41 38 30 41 43 46 0ADC.CL=C0A80ACF 00f0 0a 43 4c 3d 43 30 41 38 30 41 46 30 0a 43 4c 3d .CL=C0A80AF0.CL= 0100 43 30 41 38 30 41 43 39 0a 43 4c 3d 43 30 41 38 C0A80AC9.CL=C0A8 0110 30 41 31 30 0a 43 4c 3d 43 30 41 38 30 41 30 44 0A10.CL=C0A80A0D 0120 0a 43 4c 3d 43 30 41 38 30 41 30 46 0a 43 4c 3d .CL=C0A80A0F.CL= 0130 43 30 41 38 30 41 30 43 0a 43 4c 3d 43 30 41 38 C0A80A0C.CL=C0A8 0140 30 41 44 31 0a 43 4c 3d 43 30 41 38 30 41 43 41 0AD1.CL=C0A80ACA 0150 0a 43 4c 3d 43 30 41 38 30 41 46 41 0a 43 4c 3d .CL=C0A80AFA.CL= 0160 43 30 41 38 30 41 32 37 0a 43 4c 3d 43 30 41 38 C0A80A27.CL=C0A8 0170 30 41 44 33 0a 43 4c 3d 43 30 41 38 30 41 44 32 0AD3.CL=C0A80AD2 0180 0a 43 4c 3d 43 30 41 38 30 41 45 32 0a 43 4c 3d .CL=C0A80AE2.CL= 0190 43 30 41 38 30 41 45 33 0a 43 4c 3d 43 30 41 38 C0A80AE3.CL=C0A8 01a0 30 41 44 45 0a 43 4c 3d 43 30 41 38 31 34 30 33 0ADE.CL=C0A81403 01b0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01c0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 01d0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01e0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01f0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0200 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0210 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0220 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0230 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0240 0a 4d 44 3d 36 37 31 39 62 36 35 33 31 33 63 61 .MD=6719b65313ca 0250 64 37 36 63 38 38 34 36 30 63 33 65 66 35 62 33 d76c88460c3ef5b3 0260 63 31 37 33 0a 3c 2f 42 4f 44 59 3e 0a c173.</BODY>. No. Time Source Destination Protocol Length Info 6914 68.834061 192.168.10.31 192.168.20.3 UDP 663 Source port: 50764 Destination port: apc-3052 Frame 6914: 663 bytes on wire (5304 bits), 663 bytes captured (5304 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (621 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 44 54 3d 31 30 .168.10.31.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 31 39 3a 34 /03/2011.TM=19:4 0040 39 3a 33 30 0a 53 52 3d 31 30 37 43 0a 53 55 3d 9:30.SR=107C.SU= 0050 32 44 38 32 44 30 45 39 0a 52 44 3d 43 32 42 42 2D82D0E9.RD=C2BB 0060 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 30 2e 33 .TA=192.168.20.3 0070 0a 50 54 3d 33 30 35 32 0a 43 4c 3d 43 30 41 38 .PT=3052.CL=C0A8 0080 30 41 44 39 0a 43 4c 3d 43 30 41 38 30 41 43 44 0AD9.CL=C0A80ACD 0090 0a 43 4c 3d 43 30 41 38 30 41 44 38 0a 43 4c 3d .CL=C0A80AD8.CL= 00a0 43 30 41 38 30 41 44 42 0a 43 4c 3d 43 30 41 38 C0A80ADB.CL=C0A8 00b0 30 41 44 30 0a 43 4c 3d 43 30 41 38 30 41 43 42 0AD0.CL=C0A80ACB 00c0 0a 43 4c 3d 43 30 41 38 30 41 43 43 0a 43 4c 3d .CL=C0A80ACC.CL= 00d0 43 30 41 38 30 41 43 45 0a 43 4c 3d 43 30 41 38 C0A80ACE.CL=C0A8 00e0 30 41 44 43 0a 43 4c 3d 43 30 41 38 30 41 43 46 0ADC.CL=C0A80ACF 00f0 0a 43 4c 3d 43 30 41 38 30 41 46 30 0a 43 4c 3d .CL=C0A80AF0.CL= 0100 43 30 41 38 30 41 43 39 0a 43 4c 3d 43 30 41 38 C0A80AC9.CL=C0A8 0110 30 41 31 30 0a 43 4c 3d 43 30 41 38 30 41 30 44 0A10.CL=C0A80A0D 0120 0a 43 4c 3d 43 30 41 38 30 41 30 46 0a 43 4c 3d .CL=C0A80A0F.CL= 0130 43 30 41 38 30 41 30 43 0a 43 4c 3d 43 30 41 38 C0A80A0C.CL=C0A8 0140 30 41 44 31 0a 43 4c 3d 43 30 41 38 30 41 43 41 0AD1.CL=C0A80ACA 0150 0a 43 4c 3d 43 30 41 38 30 41 46 41 0a 43 4c 3d .CL=C0A80AFA.CL= 0160 43 30 41 38 30 41 32 37 0a 43 4c 3d 43 30 41 38 C0A80A27.CL=C0A8 0170 30 41 44 33 0a 43 4c 3d 43 30 41 38 30 41 44 32 0AD3.CL=C0A80AD2 0180 0a 43 4c 3d 43 30 41 38 30 41 45 32 0a 43 4c 3d .CL=C0A80AE2.CL= 0190 43 30 41 38 30 41 45 33 0a 43 4c 3d 43 30 41 38 C0A80AE3.CL=C0A8 01a0 30 41 44 45 0a 43 4c 3d 43 30 41 38 31 34 30 33 0ADE.CL=C0A81403 01b0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01c0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 01d0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01e0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01f0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0200 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0210 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0220 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0230 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0240 0a 4d 44 3d 36 37 31 39 62 36 35 33 31 33 63 61 .MD=6719b65313ca 0250 64 37 36 63 38 38 34 36 30 63 33 65 66 35 62 33 d76c88460c3ef5b3 0260 63 31 37 33 0a 3c 2f 42 4f 44 59 3e 0a c173.</BODY>. No. Time Source Destination Protocol Length Info 6915 68.834107 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:16:09 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS2/50764 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 6915: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:16:09 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS2/50764 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 6916 68.837388 Watchgua_3c:4c:d8 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.1 Frame 6916: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 6917 68.837402 Cisco_bb:96:6d Watchgua_3c:4c:d8 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 6917: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 6918 68.889737 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 6918: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5419, Ack: 393142, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6919 68.889769 206.225.164.186 192.168.10.207 TCP 60 [TCP Dup ACK 6883#1] 23308 > smtp [ACK] Seq=394494 Ack=5461 Win=46342 Len=0 Frame 6919: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 394494, Ack: 5461, Len: 0 No. Time Source Destination Protocol Length Info 6920 68.889800 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=5461 Ack=393142 Win=0 Len=0 Frame 6920: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5461, Ack: 393142, Len: 0 No. Time Source Destination Protocol Length Info 6921 68.905051 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 6921: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3151, Ack: 195271, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 6922 68.905084 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=195271 Ack=3193 Win=46468 Len=0 Frame 6922: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 195271, Ack: 3193, Len: 0 No. Time Source Destination Protocol Length Info 6923 68.925923 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6923: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2303001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6924 68.925955 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6924: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2304401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6925 68.925984 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6925: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2305801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6926 68.926031 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2305801 Win=65535 Len=0 Frame 6926: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2305801, Len: 0 No. Time Source Destination Protocol Length Info 6927 69.071132 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2307201 Win=65535 Len=0 Frame 6927: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2307201, Len: 0 No. Time Source Destination Protocol Length Info 6928 69.193910 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 6928: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 6929 69.275078 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6929: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2307201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6930 69.275100 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6930: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2308601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6931 69.275122 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6931: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2310001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6932 69.275140 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6932: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2311401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6933 69.275156 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6933: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2312801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6934 69.275173 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6934: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2314201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6935 69.275208 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2310001 Win=65535 Len=0 Frame 6935: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2310001, Len: 0 No. Time Source Destination Protocol Length Info 6936 69.275229 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6936: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2315601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6937 69.275257 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2312801 Win=65535 Len=0 Frame 6937: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2312801, Len: 0 No. Time Source Destination Protocol Length Info 6938 69.275281 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2317001 Win=65535 Len=0 Frame 6938: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2317001, Len: 0 No. Time Source Destination Protocol Length Info 6939 69.283395 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2746161408, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 6939: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6940 69.283418 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2746161408, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 6940: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6941 69.283431 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2746161408, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 6941: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6942 69.283443 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2746161408, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 6942: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6943 69.293090 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6943: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2317001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6944 69.293163 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6944: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2318401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6945 69.293225 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2319801 Win=65535 Len=0 Frame 6945: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2319801, Len: 0 No. Time Source Destination Protocol Length Info 6946 69.303904 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 320340224, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 6946: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6947 69.303924 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 320340224, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 6947: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6948 69.303937 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 320340224, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 6948: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6949 69.303949 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 320340224, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 6949: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 6950 69.311391 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6950: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2319801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6951 69.311423 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6951: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2321201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6952 69.311491 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2322601 Win=65535 Len=0 Frame 6952: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2322601, Len: 0 No. Time Source Destination Protocol Length Info 6953 69.311640 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6953: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2322601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6954 69.315358 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 6954: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 6955 69.329523 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6955: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2324001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6956 69.329567 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2325401 Win=65535 Len=0 Frame 6956: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2325401, Len: 0 No. Time Source Destination Protocol Length Info 6957 69.329626 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6957: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2325401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6958 69.329695 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6958: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2326801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6959 69.330007 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2328201 Win=65535 Len=0 Frame 6959: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2328201, Len: 0 No. Time Source Destination Protocol Length Info 6960 69.330037 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6960: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2328201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6961 69.348220 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6961: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2329601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6962 69.348262 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2331001 Win=65535 Len=0 Frame 6962: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2331001, Len: 0 No. Time Source Destination Protocol Length Info 6963 69.348299 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6963: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2331001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6964 69.348333 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6964: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2332401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6965 69.348373 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2333801 Win=65535 Len=0 Frame 6965: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2333801, Len: 0 No. Time Source Destination Protocol Length Info 6966 69.348469 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6966: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2333801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6967 69.367094 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6967: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2335201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6968 69.367132 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2336601 Win=65535 Len=0 Frame 6968: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2336601, Len: 0 No. Time Source Destination Protocol Length Info 6969 69.367161 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6969: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2336601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6970 69.367191 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6970: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2338001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6971 69.367226 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2339401 Win=65535 Len=0 Frame 6971: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2339401, Len: 0 No. Time Source Destination Protocol Length Info 6972 69.367260 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6972: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2339401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6973 69.367279 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6973: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2340801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6974 69.367300 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2342201 Win=65535 Len=0 Frame 6974: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2342201, Len: 0 No. Time Source Destination Protocol Length Info 6975 69.384859 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6975: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2342201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6976 69.384983 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6976: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2343601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6977 69.385009 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2345001 Win=65535 Len=0 Frame 6977: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2345001, Len: 0 No. Time Source Destination Protocol Length Info 6978 69.385066 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6978: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2345001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6979 69.385212 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6979: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2346401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6980 69.385239 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2347801 Win=65535 Len=0 Frame 6980: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2347801, Len: 0 No. Time Source Destination Protocol Length Info 6981 69.385298 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6981: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2347801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6982 69.385414 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6982: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2349201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6983 69.385478 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2350601 Win=65535 Len=0 Frame 6983: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2350601, Len: 0 No. Time Source Destination Protocol Length Info 6984 69.403166 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6984: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2350601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6985 69.403262 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6985: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2352001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6986 69.403302 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2353401 Win=65535 Len=0 Frame 6986: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2353401, Len: 0 No. Time Source Destination Protocol Length Info 6987 69.403355 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6987: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2353401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6988 69.403461 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6988: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2354801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6989 69.403516 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2356201 Win=65535 Len=0 Frame 6989: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2356201, Len: 0 No. Time Source Destination Protocol Length Info 6990 69.404077 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6990: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2356201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6991 69.404110 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6991: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2357601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6992 69.404147 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2359001 Win=65535 Len=0 Frame 6992: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2359001, Len: 0 No. Time Source Destination Protocol Length Info 6993 69.404176 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6993: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2359001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6994 69.421627 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6994: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2360401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6995 69.421676 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2361801 Win=65535 Len=0 Frame 6995: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2361801, Len: 0 No. Time Source Destination Protocol Length Info 6996 69.421705 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6996: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2361801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6997 69.421735 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6997: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2363201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 6998 69.421771 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2364601 Win=65535 Len=0 Frame 6998: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2364601, Len: 0 No. Time Source Destination Protocol Length Info 6999 69.421800 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 6999: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2364601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7000 69.421832 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7000: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2366001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7001 69.421870 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2367401 Win=65535 Len=0 Frame 7001: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2367401, Len: 0 No. Time Source Destination Protocol Length Info 7002 69.421886 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7002: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2367401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7003 69.439395 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7003: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2368801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7004 69.439441 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2370201 Win=65535 Len=0 Frame 7004: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2370201, Len: 0 No. Time Source Destination Protocol Length Info 7005 69.439513 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7005: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2370201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7006 69.439584 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7006: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2371601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7007 69.439632 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2373001 Win=65535 Len=0 Frame 7007: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2373001, Len: 0 No. Time Source Destination Protocol Length Info 7008 69.439705 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7008: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2373001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7009 69.440148 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7009: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2374401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7010 69.440186 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2375801 Win=65535 Len=0 Frame 7010: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2375801, Len: 0 No. Time Source Destination Protocol Length Info 7011 69.440215 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7011: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2375801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7012 69.443598 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 7012: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 7013 69.444075 Qualstar_00:09:5a Broadcast ARP 60 Who has 192.168.10.202? Tell 192.168.10.10 Frame 7013: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Qualstar_00:09:5a (00:08:4f:00:09:5a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 7014 69.444102 Qualstar_00:09:5a Broadcast ARP 60 Who has 192.168.10.202? Tell 192.168.10.10 Frame 7014: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Qualstar_00:09:5a (00:08:4f:00:09:5a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 7015 69.457248 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7015: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2377201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7016 69.457293 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2378601 Win=65535 Len=0 Frame 7016: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2378601, Len: 0 No. Time Source Destination Protocol Length Info 7017 69.457364 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7017: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2378601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7018 69.457734 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7018: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2380001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7019 69.457770 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2381401 Win=65535 Len=0 Frame 7019: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2381401, Len: 0 No. Time Source Destination Protocol Length Info 7020 69.458147 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7020: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2381401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7021 69.458176 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7021: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2382801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7022 69.458214 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2384201 Win=65535 Len=0 Frame 7022: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2384201, Len: 0 No. Time Source Destination Protocol Length Info 7023 69.458272 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7023: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2384201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7024 69.458389 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7024: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2385601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7025 69.458426 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2387001 Win=65535 Len=0 Frame 7025: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2387001, Len: 0 No. Time Source Destination Protocol Length Info 7026 69.493265 192.168.10.207 206.225.164.186 SMTP 138 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 7026: 138 bytes on wire (1104 bits), 138 bytes captured (1104 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5419, Ack: 393142, Len: 84 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7027 69.493285 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=394494 Ack=5503 Win=46321 Len=0 Frame 7027: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 394494, Ack: 5503, Len: 0 No. Time Source Destination Protocol Length Info 7028 69.493353 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=5503 Ack=393142 Win=0 Len=0 Frame 7028: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5503, Ack: 393142, Len: 0 No. Time Source Destination Protocol Length Info 7029 69.510816 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 7029: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 7030 69.510844 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 7030: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 7031 69.512442 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7031: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2387001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7032 69.512472 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7032: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2388401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7033 69.512502 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7033: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2389801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7034 69.512536 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7034: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2391201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7035 69.512566 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7035: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2392601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7036 69.512596 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7036: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2394001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7037 69.512636 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2389801 Win=65535 Len=0 Frame 7037: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2389801, Len: 0 No. Time Source Destination Protocol Length Info 7038 69.512669 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7038: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2395401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7039 69.512686 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7039: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2396801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7040 69.512703 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7040: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2398201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7041 69.512724 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2392601 Win=65535 Len=0 Frame 7041: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2392601, Len: 0 No. Time Source Destination Protocol Length Info 7042 69.512741 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7042: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2399601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7043 69.512758 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7043: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2401001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7044 69.512779 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2396801 Win=65535 Len=0 Frame 7044: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2396801, Len: 0 No. Time Source Destination Protocol Length Info 7045 69.512795 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7045: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2402401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7046 69.512812 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7046: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2403801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7047 69.512833 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2399601 Win=65535 Len=0 Frame 7047: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2399601, Len: 0 No. Time Source Destination Protocol Length Info 7048 69.512850 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7048: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2405201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7049 69.512872 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2402401 Win=65535 Len=0 Frame 7049: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2402401, Len: 0 No. Time Source Destination Protocol Length Info 7050 69.512889 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7050: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2406601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7051 69.512909 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7051: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2408001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7052 69.512930 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2405201 Win=65535 Len=0 Frame 7052: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2405201, Len: 0 No. Time Source Destination Protocol Length Info 7053 69.512947 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7053: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2409401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7054 69.512964 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7054: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2410801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7055 69.512985 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2408001 Win=65535 Len=0 Frame 7055: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2408001, Len: 0 No. Time Source Destination Protocol Length Info 7056 69.513001 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7056: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2412201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7057 69.513018 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7057: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2413601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7058 69.513038 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2410801 Win=65535 Len=0 Frame 7058: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2410801, Len: 0 No. Time Source Destination Protocol Length Info 7059 69.513059 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2413601 Win=62735 Len=0 Frame 7059: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2413601, Len: 0 No. Time Source Destination Protocol Length Info 7060 69.513075 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7060: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2415001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7061 69.513092 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7061: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2416401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7062 69.513114 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2416401 Win=59935 Len=0 Frame 7062: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2416401, Len: 0 No. Time Source Destination Protocol Length Info 7063 69.513134 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=2416401 Win=65535 Len=0 Frame 7063: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2416401, Len: 0 No. Time Source Destination Protocol Length Info 7064 69.513151 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7064: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2417801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7065 69.513173 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2419201 Win=65535 Len=0 Frame 7065: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2419201, Len: 0 No. Time Source Destination Protocol Length Info 7066 69.531151 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7066: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2419201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7067 69.531420 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7067: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2420601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7068 69.531465 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2422001 Win=65535 Len=0 Frame 7068: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2422001, Len: 0 No. Time Source Destination Protocol Length Info 7069 69.531497 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7069: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2422001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7070 69.549210 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7070: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2423401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7071 69.549250 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2424801 Win=65535 Len=0 Frame 7071: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2424801, Len: 0 No. Time Source Destination Protocol Length Info 7072 69.549279 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7072: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2424801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7073 69.549308 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7073: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2426201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7074 69.549346 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2427601 Win=65535 Len=0 Frame 7074: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2427601, Len: 0 No. Time Source Destination Protocol Length Info 7075 69.549378 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7075: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2427601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7076 69.549408 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7076: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2429001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7077 69.549446 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2430401 Win=65535 Len=0 Frame 7077: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2430401, Len: 0 No. Time Source Destination Protocol Length Info 7078 69.549486 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7078: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2430401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7079 69.549583 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7079: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2431801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7080 69.549627 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2433201 Win=65535 Len=0 Frame 7080: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2433201, Len: 0 No. Time Source Destination Protocol Length Info 7081 69.566035 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 7081: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 7082 69.622190 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7082: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2433201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7083 69.622223 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7083: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2434601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7084 69.622253 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7084: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2436001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7085 69.622289 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7085: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2437401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7086 69.622318 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7086: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2438801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7087 69.622348 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7087: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2440201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7088 69.622377 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7088: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2441601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7089 69.622407 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7089: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2443001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7090 69.622446 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2437401 Win=65535 Len=0 Frame 7090: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2437401, Len: 0 No. Time Source Destination Protocol Length Info 7091 69.622463 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7091: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2444401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7092 69.622479 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7092: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2445801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7093 69.622500 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2441601 Win=65535 Len=0 Frame 7093: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2441601, Len: 0 No. Time Source Destination Protocol Length Info 7094 69.622517 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7094: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2447201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7095 69.622534 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7095: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2448601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7096 69.622554 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2444401 Win=65535 Len=0 Frame 7096: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2444401, Len: 0 No. Time Source Destination Protocol Length Info 7097 69.622571 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7097: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2450001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7098 69.622587 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7098: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2451401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7099 69.622608 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2447201 Win=64135 Len=0 Frame 7099: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2447201, Len: 0 No. Time Source Destination Protocol Length Info 7100 69.622624 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7100: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2452801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7101 69.622641 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7101: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2454201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7102 69.622661 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2450001 Win=61335 Len=0 Frame 7102: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2450001, Len: 0 No. Time Source Destination Protocol Length Info 7103 69.622677 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7103: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2455601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7104 69.622701 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7104: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2457001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7105 69.622722 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2452801 Win=58535 Len=0 Frame 7105: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2452801, Len: 0 No. Time Source Destination Protocol Length Info 7106 69.622738 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7106: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2458401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7107 69.622759 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2455601 Win=55735 Len=0 Frame 7107: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2455601, Len: 0 No. Time Source Destination Protocol Length Info 7108 69.622779 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7108: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2459801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7109 69.622795 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7109: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2461201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7110 69.622816 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2458401 Win=52935 Len=0 Frame 7110: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2458401, Len: 0 No. Time Source Destination Protocol Length Info 7111 69.622836 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2461201 Win=50135 Len=0 Frame 7111: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2461201, Len: 0 No. Time Source Destination Protocol Length Info 7112 69.622856 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2462601 Win=52495 Len=0 Frame 7112: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2462601, Len: 0 No. Time Source Destination Protocol Length Info 7113 69.622876 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=2462601 Win=65535 Len=0 Frame 7113: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2462601, Len: 0 No. Time Source Destination Protocol Length Info 7114 69.622892 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7114: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2462601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7115 69.641256 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7115: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2464001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7116 69.641302 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2465401 Win=65535 Len=0 Frame 7116: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2465401, Len: 0 No. Time Source Destination Protocol Length Info 7117 69.641332 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7117: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2465401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7118 69.658175 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7118: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2466801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7119 69.658224 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2468201 Win=65535 Len=0 Frame 7119: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2468201, Len: 0 No. Time Source Destination Protocol Length Info 7120 69.658286 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7120: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2468201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7121 69.658964 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7121: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2469601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7122 69.659001 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2471001 Win=65535 Len=0 Frame 7122: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2471001, Len: 0 No. Time Source Destination Protocol Length Info 7123 69.659034 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7123: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2471001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7124 69.659064 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7124: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2472401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7125 69.659102 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2473801 Win=65535 Len=0 Frame 7125: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2473801, Len: 0 No. Time Source Destination Protocol Length Info 7126 69.659132 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7126: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2473801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7127 69.659161 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7127: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2475201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7128 69.659197 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2476601 Win=65535 Len=0 Frame 7128: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2476601, Len: 0 No. Time Source Destination Protocol Length Info 7129 69.659229 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7129: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2476601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7130 69.677182 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7130: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2478001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7131 69.677222 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2479401 Win=65535 Len=0 Frame 7131: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2479401, Len: 0 No. Time Source Destination Protocol Length Info 7132 69.677251 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7132: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2479401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7133 69.677283 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7133: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2480801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7134 69.677318 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2482201 Win=65535 Len=0 Frame 7134: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2482201, Len: 0 No. Time Source Destination Protocol Length Info 7135 69.677347 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7135: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2482201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7136 69.694759 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7136: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2483601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7137 69.694797 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2485001 Win=65535 Len=0 Frame 7137: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2485001, Len: 0 No. Time Source Destination Protocol Length Info 7138 69.694869 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7138: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2485001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7139 69.694921 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7139: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2486401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7140 69.694992 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2487801 Win=65535 Len=0 Frame 7140: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2487801, Len: 0 No. Time Source Destination Protocol Length Info 7141 69.695120 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7141: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2487801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7142 69.695143 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7142: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2489201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7143 69.695210 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2490601 Win=65535 Len=0 Frame 7143: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2490601, Len: 0 No. Time Source Destination Protocol Length Info 7144 69.695270 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7144: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2490601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7145 69.712258 192.168.10.115 64.74.103.129 TLSv1 91 Application Data Frame 7145: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.115 (192.168.10.115), Dst: 64.74.103.129 (64.74.103.129) Transmission Control Protocol, Src Port: cogsys-lm (3377), Dst Port: https (443), Seq: 75, Ack: 75, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 7146 69.712317 64.74.103.129 192.168.10.115 TCP 60 https > cogsys-lm [ACK] Seq=75 Ack=112 Win=65535 Len=0 Frame 7146: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Internet Protocol Version 4, Src: 64.74.103.129 (64.74.103.129), Dst: 192.168.10.115 (192.168.10.115) Transmission Control Protocol, Src Port: https (443), Dst Port: cogsys-lm (3377), Seq: 75, Ack: 112, Len: 0 No. Time Source Destination Protocol Length Info 7147 69.713642 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7147: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2492001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7148 69.713684 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2493401 Win=65535 Len=0 Frame 7148: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2493401, Len: 0 No. Time Source Destination Protocol Length Info 7149 69.713696 Watchgua_3c:4c:d8 IntelCor_ed:1a:c9 ARP 60 Who has 192.168.10.115? Tell 192.168.10.1 Frame 7149: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 7150 69.713707 IntelCor_ed:1a:c9 Watchgua_3c:4c:d8 ARP 60 192.168.10.115 is at 00:13:20:ed:1a:c9 Frame 7150: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 7151 69.713736 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7151: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2493401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7152 69.713765 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7152: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2494801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7153 69.713801 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2496201 Win=65535 Len=0 Frame 7153: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2496201, Len: 0 No. Time Source Destination Protocol Length Info 7154 69.713830 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7154: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2496201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7155 69.713865 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7155: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2497601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7156 69.713906 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2499001 Win=65535 Len=0 Frame 7156: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2499001, Len: 0 No. Time Source Destination Protocol Length Info 7157 69.713925 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7157: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2499001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7158 69.713983 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7158: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2500401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7159 69.714006 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2501801 Win=65535 Len=0 Frame 7159: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2501801, Len: 0 No. Time Source Destination Protocol Length Info 7160 69.731804 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7160: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2501801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7161 69.732177 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7161: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2503201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7162 69.732252 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2504601 Win=65535 Len=0 Frame 7162: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2504601, Len: 0 No. Time Source Destination Protocol Length Info 7163 69.732281 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7163: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2504601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7164 69.732310 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7164: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2506001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7165 69.732347 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2507401 Win=65535 Len=0 Frame 7165: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2507401, Len: 0 No. Time Source Destination Protocol Length Info 7166 69.732379 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7166: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2507401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7167 69.732409 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7167: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2508801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7168 69.732445 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2510201 Win=65535 Len=0 Frame 7168: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2510201, Len: 0 No. Time Source Destination Protocol Length Info 7169 69.749902 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7169: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2510201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7170 69.749933 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7170: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2511601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7171 69.749972 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2513001 Win=65535 Len=0 Frame 7171: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2513001, Len: 0 No. Time Source Destination Protocol Length Info 7172 69.750003 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7172: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2513001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7173 69.750065 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7173: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2514401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7174 69.750107 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2515801 Win=65535 Len=0 Frame 7174: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2515801, Len: 0 No. Time Source Destination Protocol Length Info 7175 69.750199 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7175: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2515801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7176 69.750718 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7176: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2517201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7177 69.750757 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2518601 Win=65535 Len=0 Frame 7177: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2518601, Len: 0 No. Time Source Destination Protocol Length Info 7178 69.750786 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7178: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2518601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7179 69.750818 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7179: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2520001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7180 69.750855 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2521401 Win=65535 Len=0 Frame 7180: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2521401, Len: 0 No. Time Source Destination Protocol Length Info 7181 69.760160 64.74.103.129 192.168.10.115 TLSv1 91 Application Data Frame 7181: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Internet Protocol Version 4, Src: 64.74.103.129 (64.74.103.129), Dst: 192.168.10.115 (192.168.10.115) Transmission Control Protocol, Src Port: https (443), Dst Port: cogsys-lm (3377), Seq: 75, Ack: 112, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 7182 69.767883 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7182: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2521401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7183 69.767971 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7183: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2522801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7184 69.768019 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2524201 Win=65535 Len=0 Frame 7184: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2524201, Len: 0 No. Time Source Destination Protocol Length Info 7185 69.768079 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7185: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2524201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7186 69.768242 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7186: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2525601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7187 69.768264 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2527001 Win=65535 Len=0 Frame 7187: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2527001, Len: 0 No. Time Source Destination Protocol Length Info 7188 69.768342 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7188: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2527001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7189 69.768468 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7189: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2528401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7190 69.768489 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2529801 Win=65535 Len=0 Frame 7190: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2529801, Len: 0 No. Time Source Destination Protocol Length Info 7191 69.768553 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7191: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2529801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7192 69.786222 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7192: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2531201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7193 69.786267 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2532601 Win=65535 Len=0 Frame 7193: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2532601, Len: 0 No. Time Source Destination Protocol Length Info 7194 69.787008 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7194: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2532601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7195 69.787039 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7195: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2534001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7196 69.787076 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2535401 Win=65535 Len=0 Frame 7196: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2535401, Len: 0 No. Time Source Destination Protocol Length Info 7197 69.787105 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7197: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2535401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7198 69.787134 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7198: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2536801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7199 69.787172 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2538201 Win=65535 Len=0 Frame 7199: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2538201, Len: 0 No. Time Source Destination Protocol Length Info 7200 69.787201 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7200: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2538201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7201 69.787231 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7201: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2539601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7202 69.787267 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2541001 Win=65535 Len=0 Frame 7202: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2541001, Len: 0 No. Time Source Destination Protocol Length Info 7203 69.787299 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7203: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2541001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7204 69.787328 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7204: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2542401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7205 69.787365 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2543801 Win=65535 Len=0 Frame 7205: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2543801, Len: 0 No. Time Source Destination Protocol Length Info 7206 69.787382 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7206: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2543801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7207 69.805197 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7207: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2545201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7208 69.805241 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2546601 Win=65535 Len=0 Frame 7208: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2546601, Len: 0 No. Time Source Destination Protocol Length Info 7209 69.805270 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7209: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2546601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7210 69.805299 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7210: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2548001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7211 69.805344 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2549401 Win=65535 Len=0 Frame 7211: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2549401, Len: 0 No. Time Source Destination Protocol Length Info 7212 69.805373 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7212: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2549401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7213 69.805402 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7213: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2550801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7214 69.805446 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2552201 Win=65535 Len=0 Frame 7214: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2552201, Len: 0 No. Time Source Destination Protocol Length Info 7215 69.805464 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7215: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2552201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7216 69.805482 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7216: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2553601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7217 69.805502 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2555001 Win=65535 Len=0 Frame 7217: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2555001, Len: 0 No. Time Source Destination Protocol Length Info 7218 69.805519 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7218: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2555001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7219 69.822812 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7219: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2556401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7220 69.822839 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2557801 Win=65535 Len=0 Frame 7220: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2557801, Len: 0 No. Time Source Destination Protocol Length Info 7221 69.822910 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7221: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2557801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7222 69.823169 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7222: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2559201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7223 69.823208 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2560601 Win=65535 Len=0 Frame 7223: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2560601, Len: 0 No. Time Source Destination Protocol Length Info 7224 69.823236 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7224: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2560601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7225 69.823310 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7225: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2562001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7226 69.823346 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2563401 Win=65535 Len=0 Frame 7226: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2563401, Len: 0 No. Time Source Destination Protocol Length Info 7227 69.823975 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7227: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2563401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7228 69.824011 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7228: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2564801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7229 69.824054 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2566201 Win=65535 Len=0 Frame 7229: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2566201, Len: 0 No. Time Source Destination Protocol Length Info 7230 69.824085 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7230: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2566201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7231 69.840943 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7231: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2567601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7232 69.840975 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2569001 Win=65535 Len=0 Frame 7232: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2569001, Len: 0 No. Time Source Destination Protocol Length Info 7233 69.841019 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7233: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2569001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7234 69.841155 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7234: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2570401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7235 69.841179 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2571801 Win=65535 Len=0 Frame 7235: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2571801, Len: 0 No. Time Source Destination Protocol Length Info 7236 69.841253 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7236: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2571801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7237 69.841410 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7237: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2573201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7238 69.841437 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2574601 Win=65535 Len=0 Frame 7238: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2574601, Len: 0 No. Time Source Destination Protocol Length Info 7239 69.841484 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7239: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2574601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7240 69.841629 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7240: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2576001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7241 69.841655 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2577401 Win=65535 Len=0 Frame 7241: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2577401, Len: 0 No. Time Source Destination Protocol Length Info 7242 69.841720 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7242: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2577401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7243 69.841877 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7243: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2578801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7244 69.841900 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2580201 Win=65535 Len=0 Frame 7244: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2580201, Len: 0 No. Time Source Destination Protocol Length Info 7245 69.841961 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7245: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2580201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7246 69.842226 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7246: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2581601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7247 69.842266 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2583001 Win=65535 Len=0 Frame 7247: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2583001, Len: 0 No. Time Source Destination Protocol Length Info 7248 69.842296 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7248: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2583001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7249 69.860103 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7249: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2584401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7250 69.860148 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2585801 Win=65535 Len=0 Frame 7250: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2585801, Len: 0 No. Time Source Destination Protocol Length Info 7251 69.860176 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7251: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2585801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7252 69.860206 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7252: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2587201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7253 69.860241 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2588601 Win=65535 Len=0 Frame 7253: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2588601, Len: 0 No. Time Source Destination Protocol Length Info 7254 69.860270 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7254: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2588601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7255 69.860299 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7255: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2590001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7256 69.860336 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2591401 Win=65535 Len=0 Frame 7256: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2591401, Len: 0 No. Time Source Destination Protocol Length Info 7257 69.860366 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7257: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2591401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7258 69.860383 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7258: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2592801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7259 69.860405 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2594201 Win=65535 Len=0 Frame 7259: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2594201, Len: 0 No. Time Source Destination Protocol Length Info 7260 69.860422 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7260: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2594201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7261 69.860441 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7261: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2595601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7262 69.860463 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2597001 Win=65535 Len=0 Frame 7262: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2597001, Len: 0 No. Time Source Destination Protocol Length Info 7263 69.877825 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7263: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2597001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7264 69.878204 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7264: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2598401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7265 69.878242 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2599801 Win=65535 Len=0 Frame 7265: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2599801, Len: 0 No. Time Source Destination Protocol Length Info 7266 69.878270 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7266: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2599801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7267 69.878300 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7267: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2601201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7268 69.878336 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2602601 Win=65535 Len=0 Frame 7268: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2602601, Len: 0 No. Time Source Destination Protocol Length Info 7269 69.878367 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7269: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2602601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7270 69.878398 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7270: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2604001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7271 69.878435 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2605401 Win=65535 Len=0 Frame 7271: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2605401, Len: 0 No. Time Source Destination Protocol Length Info 7272 69.878507 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7272: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2605401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7273 69.878670 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7273: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2606801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7274 69.878692 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2608201 Win=65535 Len=0 Frame 7274: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2608201, Len: 0 No. Time Source Destination Protocol Length Info 7275 69.878710 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7275: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2608201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7276 69.879215 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7276: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2609601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7277 69.879253 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2611001 Win=65535 Len=0 Frame 7277: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2611001, Len: 0 No. Time Source Destination Protocol Length Info 7278 69.879282 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7278: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2611001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7279 69.879311 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7279: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2612401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7280 69.879347 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2613801 Win=65535 Len=0 Frame 7280: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2613801, Len: 0 No. Time Source Destination Protocol Length Info 7281 69.884036 192.168.10.115 64.74.103.129 TCP 60 cogsys-lm > https [ACK] Seq=112 Ack=112 Win=65498 Len=0 Frame 7281: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.115 (192.168.10.115), Dst: 64.74.103.129 (64.74.103.129) Transmission Control Protocol, Src Port: cogsys-lm (3377), Dst Port: https (443), Seq: 112, Ack: 112, Len: 0 No. Time Source Destination Protocol Length Info 7282 69.895062 123.18.166.30 192.168.10.207 TCP 62 29139 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 7282: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 123.18.166.30 (123.18.166.30), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 29139 (29139), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 7283 69.895119 192.168.10.207 123.18.166.30 TCP 62 smtp > 29139 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 7283: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 123.18.166.30 (123.18.166.30) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 29139 (29139), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 7284 69.925390 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 7284: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3193, Ack: 195271, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7285 69.925421 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=195271 Ack=3235 Win=46447 Len=0 Frame 7285: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 195271, Ack: 3235, Len: 0 No. Time Source Destination Protocol Length Info 7286 69.933016 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7286: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2613801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7287 69.933042 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7287: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2615201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7288 69.933059 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7288: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2616601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7289 69.933077 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7289: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2618001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7290 69.933093 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7290: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2619401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7291 69.933113 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7291: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2620801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7292 69.933144 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2616601 Win=65535 Len=0 Frame 7292: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2616601, Len: 0 No. Time Source Destination Protocol Length Info 7293 69.933161 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7293: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2622201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7294 69.933178 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7294: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2623601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7295 69.933201 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2619401 Win=65535 Len=0 Frame 7295: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2619401, Len: 0 No. Time Source Destination Protocol Length Info 7296 69.933218 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7296: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2625001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7297 69.933247 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2622201 Win=65535 Len=0 Frame 7297: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2622201, Len: 0 No. Time Source Destination Protocol Length Info 7298 69.933268 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7298: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2626401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7299 69.933286 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7299: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2627801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7300 69.933303 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7300: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2629201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7301 69.933325 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2625001 Win=65535 Len=0 Frame 7301: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2625001, Len: 0 No. Time Source Destination Protocol Length Info 7302 69.933342 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7302: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2630601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7303 69.933361 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7303: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2632001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7304 69.933387 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2627801 Win=65535 Len=0 Frame 7304: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2627801, Len: 0 No. Time Source Destination Protocol Length Info 7305 69.933405 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7305: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2633401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7306 69.933423 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7306: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2634801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7307 69.933446 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2630601 Win=65535 Len=0 Frame 7307: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2630601, Len: 0 No. Time Source Destination Protocol Length Info 7308 69.933463 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7308: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2636201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7309 69.933487 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2633401 Win=62735 Len=0 Frame 7309: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2633401, Len: 0 No. Time Source Destination Protocol Length Info 7310 69.933504 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7310: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2637601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7311 69.933526 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7311: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2639001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7312 69.933548 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2636201 Win=59935 Len=0 Frame 7312: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2636201, Len: 0 No. Time Source Destination Protocol Length Info 7313 69.933565 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7313: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2640401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7314 69.933584 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7314: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2641801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7315 69.933605 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7315: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2643201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7316 69.933627 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2640401 Win=55735 Len=0 Frame 7316: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2640401, Len: 0 No. Time Source Destination Protocol Length Info 7317 69.933644 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7317: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2644601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7318 69.933661 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7318: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2646001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7319 69.933679 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7319: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2647401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7320 69.933701 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2643201 Win=52935 Len=0 Frame 7320: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2643201, Len: 0 No. Time Source Destination Protocol Length Info 7321 69.933718 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7321: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2648801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7322 69.933735 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7322: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2650201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7323 69.933756 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2646001 Win=53895 Len=0 Frame 7323: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2646001, Len: 0 No. Time Source Destination Protocol Length Info 7324 69.933774 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7324: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2651601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7325 69.933791 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7325: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2653001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7326 69.933813 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2647401 Win=65535 Len=0 Frame 7326: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2647401, Len: 0 No. Time Source Destination Protocol Length Info 7327 69.933834 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2650201 Win=62735 Len=0 Frame 7327: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2650201, Len: 0 No. Time Source Destination Protocol Length Info 7328 69.933850 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7328: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2654401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7329 69.933868 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7329: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2655801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7330 69.933889 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2653001 Win=59935 Len=0 Frame 7330: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2653001, Len: 0 No. Time Source Destination Protocol Length Info 7331 69.933910 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7331: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2657201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7332 69.933931 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7332: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2658601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7333 69.933955 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2655801 Win=57135 Len=0 Frame 7333: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2655801, Len: 0 No. Time Source Destination Protocol Length Info 7334 69.933973 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7334: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2660001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7335 69.933994 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2660001 Win=52935 Len=0 Frame 7335: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2660001, Len: 0 No. Time Source Destination Protocol Length Info 7336 69.934016 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2661401 Win=55295 Len=0 Frame 7336: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2661401, Len: 0 No. Time Source Destination Protocol Length Info 7337 69.934036 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=2661401 Win=65535 Len=0 Frame 7337: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2661401, Len: 0 No. Time Source Destination Protocol Length Info 7338 69.950497 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7338: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2661401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7339 69.950533 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7339: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2662801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7340 69.950597 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2664201 Win=65535 Len=0 Frame 7340: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2664201, Len: 0 No. Time Source Destination Protocol Length Info 7341 69.950703 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7341: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2664201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7342 69.951049 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7342: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2665601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7343 69.951075 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2667001 Win=65535 Len=0 Frame 7343: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2667001, Len: 0 No. Time Source Destination Protocol Length Info 7344 69.951142 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7344: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2667001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7345 69.968917 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7345: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2668401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7346 69.968970 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2669801 Win=65535 Len=0 Frame 7346: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2669801, Len: 0 No. Time Source Destination Protocol Length Info 7347 69.969447 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7347: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2669801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7348 69.969567 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7348: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2671201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7349 69.969593 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2672601 Win=65535 Len=0 Frame 7349: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2672601, Len: 0 No. Time Source Destination Protocol Length Info 7350 69.969654 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7350: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2672601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7351 69.969801 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7351: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2674001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7352 69.969826 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2675401 Win=65535 Len=0 Frame 7352: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2675401, Len: 0 No. Time Source Destination Protocol Length Info 7353 69.969899 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7353: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2675401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7354 69.970035 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7354: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2676801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7355 69.970064 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2678201 Win=65535 Len=0 Frame 7355: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2678201, Len: 0 No. Time Source Destination Protocol Length Info 7356 69.970135 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7356: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2678201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7357 69.970271 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7357: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2679601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7358 69.970295 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2681001 Win=65535 Len=0 Frame 7358: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2681001, Len: 0 No. Time Source Destination Protocol Length Info 7359 69.970373 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7359: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2681001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7360 69.970512 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7360: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2682401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7361 69.970537 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2683801 Win=65535 Len=0 Frame 7361: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2683801, Len: 0 No. Time Source Destination Protocol Length Info 7362 69.970595 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7362: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2683801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7363 69.970744 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7363: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2685201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7364 69.970774 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2686601 Win=65535 Len=0 Frame 7364: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2686601, Len: 0 No. Time Source Destination Protocol Length Info 7365 69.970843 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7365: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2686601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7366 69.970979 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7366: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2688001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7367 69.971003 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2689401 Win=65535 Len=0 Frame 7367: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2689401, Len: 0 No. Time Source Destination Protocol Length Info 7368 69.971118 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7368: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2689401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7369 69.989063 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7369: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2690801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7370 69.989111 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2692201 Win=65535 Len=0 Frame 7370: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2692201, Len: 0 No. Time Source Destination Protocol Length Info 7371 69.989146 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7371: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2692201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7372 69.989176 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7372: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2693601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7373 69.989214 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2695001 Win=65535 Len=0 Frame 7373: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2695001, Len: 0 No. Time Source Destination Protocol Length Info 7374 69.989244 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7374: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2695001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7375 69.989274 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7375: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2696401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7376 69.989321 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2697801 Win=65535 Len=0 Frame 7376: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2697801, Len: 0 No. Time Source Destination Protocol Length Info 7377 69.989337 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7377: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2697801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7378 69.989355 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7378: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2699201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7379 69.989375 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2700601 Win=65535 Len=0 Frame 7379: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2700601, Len: 0 No. Time Source Destination Protocol Length Info 7380 69.989393 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7380: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2700601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7381 69.989410 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7381: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2702001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7382 69.989431 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2703401 Win=65535 Len=0 Frame 7382: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2703401, Len: 0 No. Time Source Destination Protocol Length Info 7383 70.006573 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7383: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2703401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7384 70.006647 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7384: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2704801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7385 70.006688 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2706201 Win=65535 Len=0 Frame 7385: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2706201, Len: 0 No. Time Source Destination Protocol Length Info 7386 70.006782 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7386: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2706201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7387 70.006879 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7387: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2707601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7388 70.006937 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2709001 Win=65535 Len=0 Frame 7388: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2709001, Len: 0 No. Time Source Destination Protocol Length Info 7389 70.007024 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7389: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2709001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7390 70.007154 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7390: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2710401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7391 70.007191 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2711801 Win=65535 Len=0 Frame 7391: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2711801, Len: 0 No. Time Source Destination Protocol Length Info 7392 70.007242 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7392: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2711801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7393 70.007393 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7393: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2713201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7394 70.007432 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2714601 Win=65535 Len=0 Frame 7394: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2714601, Len: 0 No. Time Source Destination Protocol Length Info 7395 70.007475 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7395: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2714601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7396 70.007634 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7396: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2716001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7397 70.007671 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2717401 Win=65535 Len=0 Frame 7397: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2717401, Len: 0 No. Time Source Destination Protocol Length Info 7398 70.024805 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7398: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2717401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7399 70.024865 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7399: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2718801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7400 70.024952 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2720201 Win=65535 Len=0 Frame 7400: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2720201, Len: 0 No. Time Source Destination Protocol Length Info 7401 70.025044 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7401: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2720201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7402 70.025094 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7402: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2721601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7403 70.025142 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2723001 Win=65535 Len=0 Frame 7403: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2723001, Len: 0 No. Time Source Destination Protocol Length Info 7404 70.025307 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7404: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2723001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7405 70.025424 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7405: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2724401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7406 70.025463 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2725801 Win=65535 Len=0 Frame 7406: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2725801, Len: 0 No. Time Source Destination Protocol Length Info 7407 70.025522 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 7407: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 7408 70.025549 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 7408: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 7409 70.025585 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7409: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2725801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7410 70.025661 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7410: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2727201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7411 70.025722 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2728601 Win=65535 Len=0 Frame 7411: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2728601, Len: 0 No. Time Source Destination Protocol Length Info 7412 70.035380 192.168.10.203 119.154.19.93 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 7412: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 119.154.19.93 (119.154.19.93) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 7413 70.043146 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7413: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2728601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7414 70.043291 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7414: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2730001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7415 70.043332 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2731401 Win=65535 Len=0 Frame 7415: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2731401, Len: 0 No. Time Source Destination Protocol Length Info 7416 70.043370 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7416: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2731401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7417 70.043519 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7417: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2732801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7418 70.043559 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2734201 Win=65535 Len=0 Frame 7418: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2734201, Len: 0 No. Time Source Destination Protocol Length Info 7419 70.043648 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7419: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2734201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7420 70.043722 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7420: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2735601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7421 70.043819 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2737001 Win=65535 Len=0 Frame 7421: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2737001, Len: 0 No. Time Source Destination Protocol Length Info 7422 70.043838 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7422: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2737001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7423 70.043976 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7423: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2738401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7424 70.043998 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2739801 Win=65535 Len=0 Frame 7424: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2739801, Len: 0 No. Time Source Destination Protocol Length Info 7425 70.044075 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7425: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2739801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7426 70.044215 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7426: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2741201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7427 70.044239 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2742601 Win=65535 Len=0 Frame 7427: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2742601, Len: 0 No. Time Source Destination Protocol Length Info 7428 70.044312 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7428: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2742601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7429 70.044448 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7429: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2744001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7430 70.044469 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2745401 Win=65535 Len=0 Frame 7430: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2745401, Len: 0 No. Time Source Destination Protocol Length Info 7431 70.061361 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7431: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2745401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7432 70.061695 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7432: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2746801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7433 70.061781 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2748201 Win=65535 Len=0 Frame 7433: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2748201, Len: 0 No. Time Source Destination Protocol Length Info 7434 70.061812 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7434: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2748201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7435 70.061843 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7435: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2749601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7436 70.061907 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2751001 Win=65535 Len=0 Frame 7436: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2751001, Len: 0 No. Time Source Destination Protocol Length Info 7437 70.061939 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7437: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2751001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7438 70.062002 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7438: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2752401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7439 70.062062 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2753801 Win=65535 Len=0 Frame 7439: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2753801, Len: 0 No. Time Source Destination Protocol Length Info 7440 70.062092 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7440: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2753801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7441 70.062261 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7441: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2755201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7442 70.062283 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2756601 Win=65535 Len=0 Frame 7442: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2756601, Len: 0 No. Time Source Destination Protocol Length Info 7443 70.062301 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7443: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2756601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7444 70.079434 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7444: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2758001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7445 70.079481 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2759401 Win=65535 Len=0 Frame 7445: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2759401, Len: 0 No. Time Source Destination Protocol Length Info 7446 70.079550 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7446: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2759401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7447 70.079690 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7447: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2760801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7448 70.079713 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2762201 Win=65535 Len=0 Frame 7448: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2762201, Len: 0 No. Time Source Destination Protocol Length Info 7449 70.079771 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7449: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2762201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7450 70.079930 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7450: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2763601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7451 70.079970 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2765001 Win=65535 Len=0 Frame 7451: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2765001, Len: 0 No. Time Source Destination Protocol Length Info 7452 70.080024 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7452: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2765001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7453 70.080128 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7453: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2766401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7454 70.080167 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2767801 Win=65535 Len=0 Frame 7454: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2767801, Len: 0 No. Time Source Destination Protocol Length Info 7455 70.080258 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7455: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2767801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7456 70.080364 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7456: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2769201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7457 70.080408 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2770601 Win=65535 Len=0 Frame 7457: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2770601, Len: 0 No. Time Source Destination Protocol Length Info 7458 70.080516 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7458: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2770601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7459 70.098191 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7459: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2772001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7460 70.098232 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2773401 Win=65535 Len=0 Frame 7460: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2773401, Len: 0 No. Time Source Destination Protocol Length Info 7461 70.098261 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7461: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2773401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7462 70.098328 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7462: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2774801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7463 70.098365 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2776201 Win=65535 Len=0 Frame 7463: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2776201, Len: 0 No. Time Source Destination Protocol Length Info 7464 70.099185 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7464: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2776201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7465 70.099215 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7465: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2777601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7466 70.099252 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2779001 Win=65535 Len=0 Frame 7466: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2779001, Len: 0 No. Time Source Destination Protocol Length Info 7467 70.099290 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7467: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2779001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7468 70.099322 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7468: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2780401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7469 70.099359 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2781801 Win=65535 Len=0 Frame 7469: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2781801, Len: 0 No. Time Source Destination Protocol Length Info 7470 70.099387 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7470: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2781801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7471 70.099416 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7471: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2783201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7472 70.099452 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2784601 Win=65535 Len=0 Frame 7472: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2784601, Len: 0 No. Time Source Destination Protocol Length Info 7473 70.099481 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7473: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2784601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7474 70.099510 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7474: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2786001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7475 70.099546 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2787401 Win=65535 Len=0 Frame 7475: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2787401, Len: 0 No. Time Source Destination Protocol Length Info 7476 70.099577 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7476: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2787401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7477 70.099606 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7477: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2788801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7478 70.099643 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2790201 Win=65535 Len=0 Frame 7478: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2790201, Len: 0 No. Time Source Destination Protocol Length Info 7479 70.099674 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7479: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2790201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7480 70.116914 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7480: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2791601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7481 70.116952 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2793001 Win=65535 Len=0 Frame 7481: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2793001, Len: 0 No. Time Source Destination Protocol Length Info 7482 70.116981 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7482: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2793001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7483 70.117014 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7483: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2794401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7484 70.117049 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2795801 Win=65535 Len=0 Frame 7484: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2795801, Len: 0 No. Time Source Destination Protocol Length Info 7485 70.117078 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7485: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2795801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7486 70.117107 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7486: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2797201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7487 70.117142 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2798601 Win=65535 Len=0 Frame 7487: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2798601, Len: 0 No. Time Source Destination Protocol Length Info 7488 70.117176 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7488: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2798601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7489 70.117238 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7489: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2800001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7490 70.117294 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2801401 Win=65535 Len=0 Frame 7490: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2801401, Len: 0 No. Time Source Destination Protocol Length Info 7491 70.117919 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7491: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2801401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7492 70.117954 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7492: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2802801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7493 70.117993 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2804201 Win=65535 Len=0 Frame 7493: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2804201, Len: 0 No. Time Source Destination Protocol Length Info 7494 70.118023 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7494: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2804201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7495 70.118053 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7495: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2805601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7496 70.118091 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2807001 Win=65535 Len=0 Frame 7496: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2807001, Len: 0 No. Time Source Destination Protocol Length Info 7497 70.118121 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7497: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2807001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7498 70.118163 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7498: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2808401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7499 70.118186 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2809801 Win=65535 Len=0 Frame 7499: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2809801, Len: 0 No. Time Source Destination Protocol Length Info 7500 70.118204 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7500: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2809801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7501 70.118224 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7501: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2811201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7502 70.118272 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2812601 Win=65535 Len=0 Frame 7502: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2812601, Len: 0 No. Time Source Destination Protocol Length Info 7503 70.135211 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7503: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2812601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7504 70.135246 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7504: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2814001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7505 70.135288 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2815401 Win=65535 Len=0 Frame 7505: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2815401, Len: 0 No. Time Source Destination Protocol Length Info 7506 70.135316 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7506: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2815401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7507 70.135346 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7507: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2816801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7508 70.135381 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2818201 Win=65535 Len=0 Frame 7508: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2818201, Len: 0 No. Time Source Destination Protocol Length Info 7509 70.135555 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7509: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2818201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7510 70.135588 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7510: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2819601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7511 70.135626 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2821001 Win=65535 Len=0 Frame 7511: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2821001, Len: 0 No. Time Source Destination Protocol Length Info 7512 70.135656 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7512: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2821001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7513 70.135738 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7513: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2822401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7514 70.135777 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2823801 Win=65535 Len=0 Frame 7514: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2823801, Len: 0 No. Time Source Destination Protocol Length Info 7515 70.135864 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7515: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2823801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7516 70.135927 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7516: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2825201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7517 70.135973 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2826601 Win=65535 Len=0 Frame 7517: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2826601, Len: 0 No. Time Source Destination Protocol Length Info 7518 70.136137 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7518: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2826601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7519 70.136460 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7519: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2828001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7520 70.136498 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2829401 Win=65535 Len=0 Frame 7520: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2829401, Len: 0 No. Time Source Destination Protocol Length Info 7521 70.136526 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7521: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2829401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7522 70.136555 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7522: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2830801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7523 70.136595 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2832201 Win=65535 Len=0 Frame 7523: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2832201, Len: 0 No. Time Source Destination Protocol Length Info 7524 70.136625 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7524: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2832201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7525 70.136695 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7525: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2833601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7526 70.136778 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2835001 Win=65535 Len=0 Frame 7526: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2835001, Len: 0 No. Time Source Destination Protocol Length Info 7527 70.154214 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7527: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2835001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7528 70.154247 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7528: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2836401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7529 70.154288 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2837801 Win=65535 Len=0 Frame 7529: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2837801, Len: 0 No. Time Source Destination Protocol Length Info 7530 70.154316 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7530: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2837801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7531 70.154333 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7531: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2839201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7532 70.154354 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2840601 Win=65535 Len=0 Frame 7532: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2840601, Len: 0 No. Time Source Destination Protocol Length Info 7533 70.154371 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7533: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2840601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7534 70.154387 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7534: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2842001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7535 70.154409 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2843401 Win=65535 Len=0 Frame 7535: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2843401, Len: 0 No. Time Source Destination Protocol Length Info 7536 70.154433 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7536: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2843401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7537 70.154450 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7537: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2844801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7538 70.154473 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2846201 Win=65535 Len=0 Frame 7538: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2846201, Len: 0 No. Time Source Destination Protocol Length Info 7539 70.154492 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7539: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2846201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7540 70.154599 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7540: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2847601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7541 70.154623 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2849001 Win=65535 Len=0 Frame 7541: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2849001, Len: 0 No. Time Source Destination Protocol Length Info 7542 70.154694 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7542: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2849001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7543 70.154839 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7543: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2850401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7544 70.154862 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2851801 Win=65535 Len=0 Frame 7544: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2851801, Len: 0 No. Time Source Destination Protocol Length Info 7545 70.154936 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7545: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2851801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7546 70.171789 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7546: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2853201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7547 70.171816 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2854601 Win=65535 Len=0 Frame 7547: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2854601, Len: 0 No. Time Source Destination Protocol Length Info 7548 70.171873 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7548: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2854601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7549 70.172009 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7549: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2856001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7550 70.172031 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2857401 Win=65535 Len=0 Frame 7550: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2857401, Len: 0 No. Time Source Destination Protocol Length Info 7551 70.172145 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7551: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2857401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7552 70.172209 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7552: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2858801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7553 70.172309 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2860201 Win=65535 Len=0 Frame 7553: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2860201, Len: 0 No. Time Source Destination Protocol Length Info 7554 70.172335 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7554: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2860201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7555 70.172482 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7555: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2861601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7556 70.172511 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2863001 Win=65535 Len=0 Frame 7556: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2863001, Len: 0 No. Time Source Destination Protocol Length Info 7557 70.172580 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7557: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2863001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7558 70.172716 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7558: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2864401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7559 70.172738 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2865801 Win=65535 Len=0 Frame 7559: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2865801, Len: 0 No. Time Source Destination Protocol Length Info 7560 70.172849 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7560: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2865801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7561 70.172923 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7561: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2867201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7562 70.172972 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2868601 Win=65535 Len=0 Frame 7562: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2868601, Len: 0 No. Time Source Destination Protocol Length Info 7563 70.173050 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7563: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2868601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7564 70.173196 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7564: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2870001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7565 70.173218 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2871401 Win=65535 Len=0 Frame 7565: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2871401, Len: 0 No. Time Source Destination Protocol Length Info 7566 70.173288 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7566: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2871401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7567 70.173444 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7567: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2872801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7568 70.173467 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2874201 Win=65535 Len=0 Frame 7568: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2874201, Len: 0 No. Time Source Destination Protocol Length Info 7569 70.173513 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7569: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2874201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7570 70.173659 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7570: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2875601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7571 70.173687 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2877001 Win=65535 Len=0 Frame 7571: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2877001, Len: 0 No. Time Source Destination Protocol Length Info 7572 70.180207 123.18.166.30 192.168.10.207 TCP 60 29139 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 7572: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 123.18.166.30 (123.18.166.30), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 29139 (29139), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 7573 70.180520 192.168.10.1 192.168.10.245 Syslog 204 LOCAL1.INFO: Oct 3 19:45:28 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 29139 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 7573: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:45:28 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 29139 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 7574 70.180537 192.168.10.207 123.18.166.30 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:45:02 -0400 Frame 7574: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 123.18.166.30 (123.18.166.30) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 29139 (29139), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7575 70.180601 123.18.166.30 192.168.10.207 TCP 60 29139 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 7575: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 123.18.166.30 (123.18.166.30), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 29139 (29139), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 7576 70.183821 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=5503 Ack=393142 Win=51707 Len=0 Frame 7576: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5503, Ack: 393142, Len: 0 No. Time Source Destination Protocol Length Info 7577 70.183849 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 7576#1] smtp > 23308 [ACK] Seq=5503 Ack=393142 Win=51707 Len=0 Frame 7577: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5503, Ack: 393142, Len: 0 No. Time Source Destination Protocol Length Info 7578 70.183881 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7578: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 394494, Ack: 5503, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7579 70.183910 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7579: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 395874, Ack: 5503, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7580 70.183939 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7580: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 397254, Ack: 5503, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7581 70.183968 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7581: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 398634, Ack: 5503, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7582 70.184002 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7582: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 400014, Ack: 5503, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7583 70.184032 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7583: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 401394, Ack: 5503, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7584 70.184061 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7584: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 402774, Ack: 5503, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7585 70.184096 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7585: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 404154, Ack: 5503, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7586 70.184113 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 7576#2] smtp > 23308 [ACK] Seq=5503 Ack=393142 Win=51707 Len=0 Frame 7586: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5503, Ack: 393142, Len: 0 No. Time Source Destination Protocol Length Info 7587 70.184129 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7587: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 405534, Ack: 5503, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7588 70.184146 206.225.164.186 192.168.10.207 SMTP 387 C: DATA fragment, 333 bytes Frame 7588: 387 bytes on wire (3096 bits), 387 bytes captured (3096 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 406914, Ack: 5503, Len: 333 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7589 70.184162 192.168.10.207 206.225.164.186 SMTP 138 S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 7589: 138 bytes on wire (1104 bits), 138 bytes captured (1104 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5503, Ack: 393142, Len: 84 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7590 70.184179 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7590: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 407247, Ack: 5503, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7591 70.184198 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=408627 Ack=5587 Win=46279 Len=0 Frame 7591: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 408627, Ack: 5587, Len: 0 No. Time Source Destination Protocol Length Info 7592 70.184220 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 7589#1] smtp > 23308 [ACK] Seq=5587 Ack=393142 Win=51707 Len=0 Frame 7592: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 393142, Len: 0 No. Time Source Destination Protocol Length Info 7593 70.184236 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 7589#2] smtp > 23308 [ACK] Seq=5587 Ack=393142 Win=51707 Len=0 Frame 7593: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 393142, Len: 0 No. Time Source Destination Protocol Length Info 7594 70.184252 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 7589#3] smtp > 23308 [ACK] Seq=5587 Ack=393142 Win=51707 Len=0 Frame 7594: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 393142, Len: 0 No. Time Source Destination Protocol Length Info 7595 70.184268 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 7589#4] smtp > 23308 [ACK] Seq=5587 Ack=393142 Win=51707 Len=0 Frame 7595: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 393142, Len: 0 No. Time Source Destination Protocol Length Info 7596 70.184284 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 7589#5] smtp > 23308 [ACK] Seq=5587 Ack=393142 Win=51707 Len=0 Frame 7596: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 393142, Len: 0 No. Time Source Destination Protocol Length Info 7597 70.184299 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 7589#6] smtp > 23308 [ACK] Seq=5587 Ack=393142 Win=51707 Len=0 Frame 7597: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 393142, Len: 0 No. Time Source Destination Protocol Length Info 7598 70.184316 206.225.164.186 192.168.10.207 SMTP 1406 [TCP Fast Retransmission] C: DATA fragment, 1352 bytes Frame 7598: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 393142, Ack: 5587, Len: 1352 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7599 70.184332 206.225.164.186 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 7599: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 394494, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7600 70.184349 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 7589#7] smtp > 23308 [ACK] Seq=5587 Ack=393142 Win=51707 Len=0 Frame 7600: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 393142, Len: 0 No. Time Source Destination Protocol Length Info 7601 70.184367 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 7589#8] smtp > 23308 [ACK] Seq=5587 Ack=393142 Win=51707 Len=0 Frame 7601: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 393142, Len: 0 No. Time Source Destination Protocol Length Info 7602 70.184382 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 7589#9] smtp > 23308 [ACK] Seq=5587 Ack=393142 Win=51707 Len=0 Frame 7602: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 393142, Len: 0 No. Time Source Destination Protocol Length Info 7603 70.184398 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7603: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 408627, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7604 70.184414 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 7589#10] smtp > 23308 [ACK] Seq=5587 Ack=393142 Win=51707 Len=0 Frame 7604: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 393142, Len: 0 No. Time Source Destination Protocol Length Info 7605 70.184430 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7605: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 410007, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7606 70.184449 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7606: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 411387, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7607 70.184465 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=5587 Ack=408627 Win=36222 Len=0 Frame 7607: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 408627, Len: 0 No. Time Source Destination Protocol Length Info 7608 70.184481 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7608: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 412767, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7609 70.184498 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7609: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 414147, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7610 70.184515 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=5587 Ack=411387 Win=33462 Len=0 Frame 7610: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 411387, Len: 0 No. Time Source Destination Protocol Length Info 7611 70.184532 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=5587 Ack=414147 Win=30702 Len=0 Frame 7611: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 414147, Len: 0 No. Time Source Destination Protocol Length Info 7612 70.184549 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7612: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 415527, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7613 70.184565 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7613: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 416907, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7614 70.184581 206.225.164.186 192.168.10.207 SMTP 368 C: DATA fragment, 314 bytes Frame 7614: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 418287, Ack: 5587, Len: 314 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7615 70.184600 206.225.164.186 192.168.10.207 SMTP 1120 C: DATA fragment, 1066 bytes Frame 7615: 1120 bytes on wire (8960 bits), 1120 bytes captured (8960 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 418601, Ack: 5587, Len: 1066 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7616 70.184616 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7616: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 419667, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7617 70.184633 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7617: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 421047, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7618 70.184650 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=5587 Ack=416907 Win=27942 Len=0 Frame 7618: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 416907, Len: 0 No. Time Source Destination Protocol Length Info 7619 70.184667 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7619: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 422427, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7620 70.184683 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=5587 Ack=419667 Win=25182 Len=0 Frame 7620: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 419667, Len: 0 No. Time Source Destination Protocol Length Info 7621 70.184699 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7621: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 423807, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7622 70.184717 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7622: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 425187, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7623 70.184734 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=5587 Ack=423807 Win=21042 Len=0 Frame 7623: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 423807, Len: 0 No. Time Source Destination Protocol Length Info 7624 70.184752 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7624: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 426567, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7625 70.184769 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7625: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 427947, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7626 70.184786 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=5587 Ack=426567 Win=18282 Len=0 Frame 7626: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 426567, Len: 0 No. Time Source Destination Protocol Length Info 7627 70.184802 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7627: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 429327, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7628 70.184821 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7628: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 430707, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7629 70.184837 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7629: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 432087, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7630 70.184853 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=5587 Ack=429327 Win=15522 Len=0 Frame 7630: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 429327, Len: 0 No. Time Source Destination Protocol Length Info 7631 70.184871 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7631: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 433467, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7632 70.184887 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=5587 Ack=432087 Win=12762 Len=0 Frame 7632: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 432087, Len: 0 No. Time Source Destination Protocol Length Info 7633 70.184904 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7633: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 434847, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7634 70.184922 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7634: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 436227, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7635 70.184940 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7635: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 437607, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7636 70.184956 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=5587 Ack=434847 Win=10002 Len=0 Frame 7636: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 434847, Len: 0 No. Time Source Destination Protocol Length Info 7637 70.184974 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7637: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 438987, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7638 70.184991 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7638: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 440367, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7639 70.185009 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7639: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 441747, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7640 70.185026 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=5587 Ack=437607 Win=7242 Len=0 Frame 7640: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 437607, Len: 0 No. Time Source Destination Protocol Length Info 7641 70.185042 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7641: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 443127, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7642 70.185061 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7642: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 444507, Ack: 5587, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7643 70.185077 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=5587 Ack=440367 Win=4482 Len=0 Frame 7643: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 440367, Len: 0 No. Time Source Destination Protocol Length Info 7644 70.185093 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=5587 Ack=443127 Win=1722 Len=0 Frame 7644: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 443127, Len: 0 No. Time Source Destination Protocol Length Info 7645 70.185140 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=5587 Ack=444849 Win=0 Len=0 Frame 7645: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 444849, Len: 0 No. Time Source Destination Protocol Length Info 7646 70.190233 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7646: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2877001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7647 70.190952 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7647: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2878401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7648 70.190995 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2879801 Win=65535 Len=0 Frame 7648: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2879801, Len: 0 No. Time Source Destination Protocol Length Info 7649 70.191024 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7649: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2879801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7650 70.191060 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7650: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2881201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7651 70.191096 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2882601 Win=65535 Len=0 Frame 7651: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2882601, Len: 0 No. Time Source Destination Protocol Length Info 7652 70.191125 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7652: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2882601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7653 70.191155 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7653: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2884001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7654 70.191191 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2885401 Win=65535 Len=0 Frame 7654: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2885401, Len: 0 No. Time Source Destination Protocol Length Info 7655 70.191224 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7655: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2885401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7656 70.191253 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7656: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2886801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7657 70.191291 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2888201 Win=65535 Len=0 Frame 7657: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2888201, Len: 0 No. Time Source Destination Protocol Length Info 7658 70.191321 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7658: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2888201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7659 70.191339 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7659: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2889601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7660 70.191359 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2891001 Win=65535 Len=0 Frame 7660: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2891001, Len: 0 No. Time Source Destination Protocol Length Info 7661 70.191462 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7661: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2891001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7662 70.191510 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7662: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2892401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7663 70.191544 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2893801 Win=65535 Len=0 Frame 7663: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2893801, Len: 0 No. Time Source Destination Protocol Length Info 7664 70.191636 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7664: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2893801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7665 70.191742 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7665: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2895201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7666 70.191786 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2896601 Win=65535 Len=0 Frame 7666: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2896601, Len: 0 No. Time Source Destination Protocol Length Info 7667 70.192125 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7667: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2896601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7668 70.192155 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7668: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2898001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7669 70.192192 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2899401 Win=65535 Len=0 Frame 7669: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2899401, Len: 0 No. Time Source Destination Protocol Length Info 7670 70.208331 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7670: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2899401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7671 70.208769 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7671: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2900801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7672 70.208810 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2902201 Win=65535 Len=0 Frame 7672: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2902201, Len: 0 No. Time Source Destination Protocol Length Info 7673 70.208840 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7673: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2902201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7674 70.246014 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7674: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2903601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7675 70.246047 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7675: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2905001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7676 70.246076 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7676: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2906401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7677 70.246112 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7677: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2907801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7678 70.246138 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2905001 Win=65535 Len=0 Frame 7678: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2905001, Len: 0 No. Time Source Destination Protocol Length Info 7679 70.246154 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7679: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2909201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7680 70.246171 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7680: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2910601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7681 70.246189 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7681: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2912001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7682 70.246210 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2907801 Win=65535 Len=0 Frame 7682: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2907801, Len: 0 No. Time Source Destination Protocol Length Info 7683 70.246227 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7683: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2913401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7684 70.246244 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7684: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2914801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7685 70.246265 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2912001 Win=65535 Len=0 Frame 7685: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2912001, Len: 0 No. Time Source Destination Protocol Length Info 7686 70.246287 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7686: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2916201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7687 70.246303 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7687: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2917601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7688 70.246324 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2914801 Win=65535 Len=0 Frame 7688: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2914801, Len: 0 No. Time Source Destination Protocol Length Info 7689 70.246341 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7689: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2919001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7690 70.246358 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7690: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2920401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7691 70.246379 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2917601 Win=65535 Len=0 Frame 7691: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2917601, Len: 0 No. Time Source Destination Protocol Length Info 7692 70.246395 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7692: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2921801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7693 70.246412 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7693: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2923201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7694 70.246428 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7694: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2924601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7695 70.246448 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2920401 Win=65535 Len=0 Frame 7695: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2920401, Len: 0 No. Time Source Destination Protocol Length Info 7696 70.246466 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7696: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2926001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7697 70.246486 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2923201 Win=65535 Len=0 Frame 7697: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2923201, Len: 0 No. Time Source Destination Protocol Length Info 7698 70.246503 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7698: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2927401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7699 70.246520 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7699: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2928801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7700 70.246540 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2926001 Win=62735 Len=0 Frame 7700: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2926001, Len: 0 No. Time Source Destination Protocol Length Info 7701 70.246557 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7701: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2930201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7702 70.246575 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7702: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2931601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7703 70.246595 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2928801 Win=59935 Len=0 Frame 7703: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2928801, Len: 0 No. Time Source Destination Protocol Length Info 7704 70.246612 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7704: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2933001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7705 70.246629 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7705: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2934401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7706 70.246649 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2931601 Win=57135 Len=0 Frame 7706: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2931601, Len: 0 No. Time Source Destination Protocol Length Info 7707 70.246666 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7707: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2935801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7708 70.246683 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7708: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2937201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7709 70.246706 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7709: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2938601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7710 70.246734 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2934401 Win=54335 Len=0 Frame 7710: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2934401, Len: 0 No. Time Source Destination Protocol Length Info 7711 70.246751 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7711: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2940001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7712 70.246767 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7712: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2941401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7713 70.246789 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2935801 Win=56695 Len=0 Frame 7713: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2935801, Len: 0 No. Time Source Destination Protocol Length Info 7714 70.246805 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7714: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2942801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7715 70.246826 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2938601 Win=64135 Len=0 Frame 7715: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2938601, Len: 0 No. Time Source Destination Protocol Length Info 7716 70.246843 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7716: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2944201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7717 70.246863 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2940001 Win=62735 Len=0 Frame 7717: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2940001, Len: 0 No. Time Source Destination Protocol Length Info 7718 70.246880 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7718: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2945601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7719 70.246928 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2942801 Win=59935 Len=0 Frame 7719: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2942801, Len: 0 No. Time Source Destination Protocol Length Info 7720 70.246944 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7720: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2947001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7721 70.246961 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7721: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2948401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7722 70.246981 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2945601 Win=57135 Len=0 Frame 7722: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2945601, Len: 0 No. Time Source Destination Protocol Length Info 7723 70.246998 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7723: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2949801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7724 70.247019 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=2945601 Win=60895 Len=0 Frame 7724: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2945601, Len: 0 No. Time Source Destination Protocol Length Info 7725 70.247035 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7725: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2951201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7726 70.247052 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7726: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2952601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7727 70.247072 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2948401 Win=58095 Len=0 Frame 7727: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2948401, Len: 0 No. Time Source Destination Protocol Length Info 7728 70.247092 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=2948401 Win=65535 Len=0 Frame 7728: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2948401, Len: 0 No. Time Source Destination Protocol Length Info 7729 70.247108 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7729: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2954001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7730 70.247125 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7730: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2955401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7731 70.247142 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7731: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2956801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7732 70.247162 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2952601 Win=61335 Len=0 Frame 7732: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2952601, Len: 0 No. Time Source Destination Protocol Length Info 7733 70.247182 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=2952601 Win=65095 Len=0 Frame 7733: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2952601, Len: 0 No. Time Source Destination Protocol Length Info 7734 70.247198 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7734: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2958201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7735 70.247215 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7735: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2959601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7736 70.247235 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2955401 Win=65535 Len=0 Frame 7736: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2955401, Len: 0 No. Time Source Destination Protocol Length Info 7737 70.247252 24.143.205.163 192.168.10.221 TCP 1054 [TCP segment of a reassembled PDU] Frame 7737: 1054 bytes on wire (8432 bits), 1054 bytes captured (8432 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2961001, Ack: 3042, Len: 1000 No. Time Source Destination Protocol Length Info 7738 70.247268 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7738: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2962001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7739 70.247289 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2958201 Win=65535 Len=0 Frame 7739: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2958201, Len: 0 No. Time Source Destination Protocol Length Info 7740 70.247305 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7740: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2963401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7741 70.247321 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7741: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2964801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7742 70.247342 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2961001 Win=65535 Len=0 Frame 7742: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2961001, Len: 0 No. Time Source Destination Protocol Length Info 7743 70.247358 24.143.205.163 192.168.10.221 TCP 454 [TCP segment of a reassembled PDU] Frame 7743: 454 bytes on wire (3632 bits), 454 bytes captured (3632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2966201, Ack: 3042, Len: 400 No. Time Source Destination Protocol Length Info 7744 70.247378 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2963401 Win=65535 Len=0 Frame 7744: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2963401, Len: 0 No. Time Source Destination Protocol Length Info 7745 70.247400 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2966601 Win=65535 Len=0 Frame 7745: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2966601, Len: 0 No. Time Source Destination Protocol Length Info 7746 70.262839 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7746: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2966601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7747 70.262871 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7747: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2968001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7748 70.262914 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2969401 Win=65535 Len=0 Frame 7748: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2969401, Len: 0 No. Time Source Destination Protocol Length Info 7749 70.262987 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7749: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2969401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7750 70.263587 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7750: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2970801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7751 70.263624 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2972201 Win=65535 Len=0 Frame 7751: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2972201, Len: 0 No. Time Source Destination Protocol Length Info 7752 70.263653 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7752: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2972201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7753 70.263692 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7753: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2973601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7754 70.263715 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2975001 Win=65535 Len=0 Frame 7754: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2975001, Len: 0 No. Time Source Destination Protocol Length Info 7755 70.263883 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7755: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2975001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7756 70.281021 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7756: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2976401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7757 70.281067 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2977801 Win=65535 Len=0 Frame 7757: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2977801, Len: 0 No. Time Source Destination Protocol Length Info 7758 70.281099 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7758: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2977801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7759 70.281222 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7759: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2979201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7760 70.281396 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2980601 Win=65535 Len=0 Frame 7760: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2980601, Len: 0 No. Time Source Destination Protocol Length Info 7761 70.281427 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7761: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2980601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7762 70.281941 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7762: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2982001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7763 70.281979 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2983401 Win=65535 Len=0 Frame 7763: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2983401, Len: 0 No. Time Source Destination Protocol Length Info 7764 70.282008 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7764: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2983401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7765 70.282038 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7765: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2984801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7766 70.282076 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2986201 Win=65535 Len=0 Frame 7766: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2986201, Len: 0 No. Time Source Destination Protocol Length Info 7767 70.282105 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7767: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2986201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7768 70.282136 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7768: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2987601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7769 70.282173 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2989001 Win=65535 Len=0 Frame 7769: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2989001, Len: 0 No. Time Source Destination Protocol Length Info 7770 70.282243 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7770: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2989001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7771 70.282316 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7771: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2990401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7772 70.282363 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2991801 Win=65535 Len=0 Frame 7772: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2991801, Len: 0 No. Time Source Destination Protocol Length Info 7773 70.282444 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7773: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2991801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7774 70.282634 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7774: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2993201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7775 70.282674 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2994601 Win=65535 Len=0 Frame 7775: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2994601, Len: 0 No. Time Source Destination Protocol Length Info 7776 70.282753 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7776: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2994601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7777 70.282811 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7777: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2996001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7778 70.282858 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2997401 Win=65535 Len=0 Frame 7778: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2997401, Len: 0 No. Time Source Destination Protocol Length Info 7779 70.283059 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7779: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2997401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7780 70.283089 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7780: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2998801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7781 70.283127 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3000201 Win=65535 Len=0 Frame 7781: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3000201, Len: 0 No. Time Source Destination Protocol Length Info 7782 70.283179 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7782: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3000201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7783 70.283292 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7783: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3001601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7784 70.283314 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3003001 Win=65535 Len=0 Frame 7784: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3003001, Len: 0 No. Time Source Destination Protocol Length Info 7785 70.283423 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7785: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3003001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7786 70.283497 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7786: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3004401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7787 70.283543 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3005801 Win=65535 Len=0 Frame 7787: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3005801, Len: 0 No. Time Source Destination Protocol Length Info 7788 70.283623 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7788: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3005801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7789 70.284103 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7789: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3007201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7790 70.284125 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3008601 Win=65535 Len=0 Frame 7790: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3008601, Len: 0 No. Time Source Destination Protocol Length Info 7791 70.298999 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2762938624, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 7791: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7792 70.299019 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2762938624, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 7792: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7793 70.299034 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2762938624, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 7793: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7794 70.299046 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2762938624, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 7794: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7795 70.301248 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7795: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3008601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7796 70.301279 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7796: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3010001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7797 70.301324 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3011401 Win=65535 Len=0 Frame 7797: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3011401, Len: 0 No. Time Source Destination Protocol Length Info 7798 70.301418 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7798: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3011401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7799 70.301482 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7799: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3012801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7800 70.301548 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3014201 Win=65535 Len=0 Frame 7800: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3014201, Len: 0 No. Time Source Destination Protocol Length Info 7801 70.301581 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7801: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3014201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7802 70.301698 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7802: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3015601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7803 70.301743 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3017001 Win=65535 Len=0 Frame 7803: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3017001, Len: 0 No. Time Source Destination Protocol Length Info 7804 70.301872 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7804: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3017001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7805 70.302227 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7805: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3018401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7806 70.302266 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3019801 Win=65535 Len=0 Frame 7806: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3019801, Len: 0 No. Time Source Destination Protocol Length Info 7807 70.302573 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7807: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3019801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7808 70.302606 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7808: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3021201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7809 70.302644 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3022601 Win=65535 Len=0 Frame 7809: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3022601, Len: 0 No. Time Source Destination Protocol Length Info 7810 70.302721 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7810: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3022601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7811 70.303466 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7811: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3024001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7812 70.303503 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3025401 Win=65535 Len=0 Frame 7812: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3025401, Len: 0 No. Time Source Destination Protocol Length Info 7813 70.320046 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7813: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3025401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7814 70.320058 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 337117440, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 7814: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7815 70.320072 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 337117440, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 7815: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7816 70.320084 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 337117440, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 7816: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7817 70.320101 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 337117440, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 7817: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7818 70.320132 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7818: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3026801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7819 70.320171 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3028201 Win=65535 Len=0 Frame 7819: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3028201, Len: 0 No. Time Source Destination Protocol Length Info 7820 70.320201 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7820: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3028201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7821 70.320230 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7821: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3029601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7822 70.320268 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3031001 Win=65535 Len=0 Frame 7822: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3031001, Len: 0 No. Time Source Destination Protocol Length Info 7823 70.320303 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7823: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3031001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7824 70.320319 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7824: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3032401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7825 70.320340 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3033801 Win=65535 Len=0 Frame 7825: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3033801, Len: 0 No. Time Source Destination Protocol Length Info 7826 70.320358 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7826: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3033801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7827 70.321009 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7827: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3035201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7828 70.321047 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3036601 Win=65535 Len=0 Frame 7828: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3036601, Len: 0 No. Time Source Destination Protocol Length Info 7829 70.321076 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7829: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3036601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7830 70.321105 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7830: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3038001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7831 70.321143 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3039401 Win=65535 Len=0 Frame 7831: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3039401, Len: 0 No. Time Source Destination Protocol Length Info 7832 70.321173 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7832: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3039401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7833 70.429281 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7833: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3040801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7834 70.429303 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7834: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3042201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7835 70.429324 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7835: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3043601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7836 70.429369 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3042201 Win=65535 Len=0 Frame 7836: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3042201, Len: 0 No. Time Source Destination Protocol Length Info 7837 70.429395 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3045001 Win=65535 Len=0 Frame 7837: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3045001, Len: 0 No. Time Source Destination Protocol Length Info 7838 70.447539 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7838: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3045001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7839 70.447561 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7839: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3046401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7840 70.447580 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7840: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3047801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7841 70.447597 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7841: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3049201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7842 70.447615 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7842: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3050601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7843 70.447648 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3047801 Win=65535 Len=0 Frame 7843: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3047801, Len: 0 No. Time Source Destination Protocol Length Info 7844 70.447670 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3050601 Win=65535 Len=0 Frame 7844: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3050601, Len: 0 No. Time Source Destination Protocol Length Info 7845 70.465520 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7845: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3052001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7846 70.465549 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7846: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3053401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7847 70.465570 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7847: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3054801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7848 70.465592 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7848: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3056201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7849 70.465611 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7849: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3057601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7850 70.465642 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3053401 Win=65535 Len=0 Frame 7850: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3053401, Len: 0 No. Time Source Destination Protocol Length Info 7851 70.465664 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3056201 Win=65535 Len=0 Frame 7851: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3056201, Len: 0 No. Time Source Destination Protocol Length Info 7852 70.465686 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3059001 Win=65535 Len=0 Frame 7852: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3059001, Len: 0 No. Time Source Destination Protocol Length Info 7853 70.483815 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7853: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3059001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7854 70.483837 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7854: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3060401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7855 70.483860 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7855: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3061801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7856 70.483878 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7856: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3063201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7857 70.483897 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7857: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3064601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7858 70.483916 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7858: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3066001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7859 70.483957 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3061801 Win=65535 Len=0 Frame 7859: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3061801, Len: 0 No. Time Source Destination Protocol Length Info 7860 70.483976 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7860: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3067401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7861 70.483998 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7861: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3068801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7862 70.484032 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3064601 Win=65535 Len=0 Frame 7862: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3064601, Len: 0 No. Time Source Destination Protocol Length Info 7863 70.484053 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3067401 Win=65535 Len=0 Frame 7863: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3067401, Len: 0 No. Time Source Destination Protocol Length Info 7864 70.484074 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3070201 Win=65535 Len=0 Frame 7864: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3070201, Len: 0 No. Time Source Destination Protocol Length Info 7865 70.502282 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7865: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3070201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7866 70.502317 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7866: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3071601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7867 70.502369 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3073001 Win=65535 Len=0 Frame 7867: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3073001, Len: 0 No. Time Source Destination Protocol Length Info 7868 70.520318 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7868: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3073001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7869 70.520340 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7869: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3074401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7870 70.520359 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7870: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3075801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7871 70.520382 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7871: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3077201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7872 70.520403 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7872: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3078601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7873 70.520430 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3075801 Win=65535 Len=0 Frame 7873: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3075801, Len: 0 No. Time Source Destination Protocol Length Info 7874 70.520453 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3078601 Win=65535 Len=0 Frame 7874: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3078601, Len: 0 No. Time Source Destination Protocol Length Info 7875 70.711759 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3080001 Win=65535 Len=0 Frame 7875: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3080001, Len: 0 No. Time Source Destination Protocol Length Info 7876 70.994159 192.168.10.246 65.32.1.70 DNS 86 Standard query PTR 93.19.154.119.in-addr.arpa Frame 7876: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.70 (65.32.1.70) User Datagram Protocol, Src Port: 57379 (57379), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 7877 71.034156 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 7877: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3235, Ack: 195271, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7878 71.034234 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=195271 Ack=3277 Win=46426 Len=0 Frame 7878: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 195271, Ack: 3277, Len: 0 No. Time Source Destination Protocol Length Info 7879 71.045362 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 7879: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 444849, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7880 71.045437 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=445887 Ack=5629 Win=46258 Len=0 Frame 7880: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 445887, Ack: 5629, Len: 0 No. Time Source Destination Protocol Length Info 7881 71.045512 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=5629 Ack=444849 Win=0 Len=0 Frame 7881: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5629, Ack: 444849, Len: 0 No. Time Source Destination Protocol Length Info 7882 71.098218 IntelCor_ed:1c:1c Broadcast ARP 60 Who has 192.168.10.208? Tell 192.168.10.225 Frame 7882: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1c:1c (00:13:20:ed:1c:1c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 7883 71.098247 IntelCor_ed:1c:1c Broadcast ARP 60 Who has 192.168.10.208? Tell 192.168.10.225 Frame 7883: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1c:1c (00:13:20:ed:1c:1c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 7884 71.193947 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 7884: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 7885 71.218962 192.168.10.226 192.168.10.32 TCP 62 a14 > http [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM=1 Frame 7885: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: American_ca:aa:ae (00:c0:b7:ca:aa:ae) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.32 (192.168.10.32) Transmission Control Protocol, Src Port: a14 (3597), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 7886 71.219012 192.168.10.226 192.168.10.32 TCP 62 a14 > http [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM=1 Frame 7886: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: American_ca:aa:ae (00:c0:b7:ca:aa:ae) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.32 (192.168.10.32) Transmission Control Protocol, Src Port: a14 (3597), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 7887 71.279285 65.32.1.70 192.168.10.246 DNS 150 Standard query response, No such name Frame 7887: 150 bytes on wire (1200 bits), 150 bytes captured (1200 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.70 (65.32.1.70), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 57379 (57379) Domain Name System (response) No. Time Source Destination Protocol Length Info 7888 71.281451 Watchgua_3c:4c:d8 Dell_44:d0:9e ARP 60 Who has 192.168.10.246? Tell 192.168.10.1 Frame 7888: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 7889 71.281464 Dell_44:d0:9e Watchgua_3c:4c:d8 ARP 60 192.168.10.246 is at 84:2b:2b:44:d0:9e Frame 7889: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 7890 71.314517 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2779715840, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 7890: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7891 71.314539 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2779715840, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 7891: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7892 71.314552 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2779715840, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 7892: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7893 71.314564 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2779715840, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 7893: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7894 71.315735 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 7894: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 7895 71.335225 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 353894656, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 7895: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7896 71.335240 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 353894656, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 7896: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7897 71.335255 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 353894656, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 7897: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7898 71.335267 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 353894656, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 7898: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7899 71.353714 192.168.10.217 4.2.2.2 DNS 77 Standard query TXT _nfsv4idmapdomain Frame 7899: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.217 (192.168.10.217), Dst: 4.2.2.2 (4.2.2.2) User Datagram Protocol, Src Port: 51153 (51153), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 7900 71.371784 4.2.2.2 192.168.10.217 DNS 152 Standard query response, No such name Frame 7900: 152 bytes on wire (1216 bits), 152 bytes captured (1216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Oracle_86:77:66 (00:14:4f:86:77:66) Internet Protocol Version 4, Src: 4.2.2.2 (4.2.2.2), Dst: 192.168.10.217 (192.168.10.217) User Datagram Protocol, Src Port: domain (53), Dst Port: 51153 (51153) Domain Name System (response) No. Time Source Destination Protocol Length Info 7901 71.373465 Watchgua_3c:4c:d8 Oracle_86:77:66 ARP 60 Who has 192.168.10.217? Tell 192.168.10.1 Frame 7901: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Oracle_86:77:66 (00:14:4f:86:77:66) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 7902 71.373479 Oracle_86:77:66 Watchgua_3c:4c:d8 ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 7902: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 7903 71.402314 91.193.253.129 192.168.10.207 TCP 60 silkp3 > smtp [FIN, ACK] Seq=86 Ack=226 Win=93214 Len=0 Frame 7903: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 91.193.253.129 (91.193.253.129), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: silkp3 (2831), Dst Port: smtp (25), Seq: 86, Ack: 226, Len: 0 No. Time Source Destination Protocol Length Info 7904 71.402356 192.168.10.207 91.193.253.129 TCP 60 smtp > silkp3 [ACK] Seq=226 Ack=87 Win=65450 Len=0 Frame 7904: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 91.193.253.129 (91.193.253.129) Transmission Control Protocol, Src Port: smtp (25), Dst Port: silkp3 (2831), Seq: 226, Ack: 87, Len: 0 No. Time Source Destination Protocol Length Info 7905 71.402372 192.168.10.207 91.193.253.129 TCP 60 smtp > silkp3 [FIN, ACK] Seq=226 Ack=87 Win=65450 Len=0 Frame 7905: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 91.193.253.129 (91.193.253.129) Transmission Control Protocol, Src Port: smtp (25), Dst Port: silkp3 (2831), Seq: 226, Ack: 87, Len: 0 No. Time Source Destination Protocol Length Info 7906 71.402393 91.193.253.129 192.168.10.207 TCP 60 silkp3 > smtp [ACK] Seq=87 Ack=227 Win=93214 Len=0 Frame 7906: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 91.193.253.129 (91.193.253.129), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: silkp3 (2831), Dst Port: smtp (25), Seq: 87, Ack: 227, Len: 0 No. Time Source Destination Protocol Length Info 7907 71.402793 192.168.10.1 192.168.10.245 Syslog 202 LOCAL1.INFO: Oct 3 19:45:29 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 91.193.253.129 7x.x.x.3 2831 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 7907: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:45:29 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 91.193.253.129 7x.x.x.3 2831 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 7908 71.443559 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 7908: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 7909 71.508978 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 7909: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 7910 71.509009 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 7910: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 7911 71.561407 192.168.10.220 208.67.222.222 DNS 86 Standard query PTR 225.111.85.93.in-addr.arpa Frame 7911: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 53310 (53310), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 7912 71.565258 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7912: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3080001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7913 71.565293 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7913: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3081401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7914 71.565323 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7914: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3082801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7915 71.565368 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3082801 Win=65535 Len=0 Frame 7915: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3082801, Len: 0 No. Time Source Destination Protocol Length Info 7916 71.565986 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 7916: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 7917 71.653910 208.67.222.222 192.168.10.220 DNS 86 Standard query response, No such name Frame 7917: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 53310 (53310) Domain Name System (response) No. Time Source Destination Protocol Length Info 7918 71.654344 192.168.10.203 93.85.111.225 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 7918: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 93.85.111.225 (93.85.111.225) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 7919 71.696052 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3084201 Win=65535 Len=0 Frame 7919: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3084201, Len: 0 No. Time Source Destination Protocol Length Info 7920 71.980843 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 7920: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3277, Ack: 195271, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7921 71.980879 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=195271 Ack=3319 Win=46405 Len=0 Frame 7921: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 195271, Ack: 3319, Len: 0 No. Time Source Destination Protocol Length Info 7922 71.981472 Watchgua_3c:4c:d8 Dell_39:5d:dd ARP 60 Who has 192.168.10.207? Tell 192.168.10.1 Frame 7922: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 7923 71.981487 Dell_39:5d:dd Watchgua_3c:4c:d8 ARP 60 192.168.10.207 is at 00:18:8b:39:5d:dd Frame 7923: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 7924 72.007998 192.168.10.207 206.225.164.186 SMTP 138 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 7924: 138 bytes on wire (1104 bits), 138 bytes captured (1104 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 444849, Len: 84 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7925 72.008033 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=445887 Ack=5671 Win=46237 Len=0 Frame 7925: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 445887, Ack: 5671, Len: 0 No. Time Source Destination Protocol Length Info 7926 72.008079 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=5671 Ack=444849 Win=0 Len=0 Frame 7926: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5671, Ack: 444849, Len: 0 No. Time Source Destination Protocol Length Info 7927 72.016518 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 7927: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 7928 72.016549 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 7928: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 7929 72.330081 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2796493056, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 7929: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7930 72.330106 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2796493056, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 7930: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7931 72.330119 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2796493056, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 7931: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7932 72.330131 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2796493056, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 7932: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7933 72.350692 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 370671872, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 7933: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7934 72.350715 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 370671872, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 7934: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7935 72.350727 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 370671872, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 7935: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7936 72.350739 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 370671872, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 7936: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7937 72.361163 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 7937: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 7938 72.361193 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 7938: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 7939 72.515964 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.201? Tell 192.168.10.32 Frame 7939: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 7940 72.515995 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.201? Tell 192.168.10.32 Frame 7940: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 7941 72.526588 Dell_98:1d:d9 Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.5 Frame 7941: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:d9 (00:19:b9:98:1d:d9), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 7942 72.527015 Dell_98:1d:d9 Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.5 Frame 7942: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:d9 (00:19:b9:98:1d:d9), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 7943 72.828064 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-10.geo.kaspersky.com Frame 7943: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 51522 (51522), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 7944 72.828238 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-10.geo.kaspersky.com Frame 7944: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 51522 (51522), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 7945 72.834865 192.168.10.16 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 7945: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: DellEsgP_e2:92:68 (00:0b:db:e2:92:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.16 (192.168.10.16), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 7946 72.835083 192.168.10.16 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 7946: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: DellEsgP_e2:92:68 (00:0b:db:e2:92:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.16 (192.168.10.16), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 7947 73.011672 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 7947: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3319, Ack: 195271, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7948 73.011707 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=195271 Ack=3361 Win=46384 Len=0 Frame 7948: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 195271, Ack: 3361, Len: 0 No. Time Source Destination Protocol Length Info 7949 73.011736 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=3361 Ack=195271 Win=16792 Len=0 Frame 7949: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3361, Ack: 195271, Len: 0 No. Time Source Destination Protocol Length Info 7950 73.011763 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 7949#1] smtp > 9428 [ACK] Seq=3361 Ack=195271 Win=16792 Len=0 Frame 7950: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3361, Ack: 195271, Len: 0 No. Time Source Destination Protocol Length Info 7951 73.011798 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7951: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 195271, Ack: 3361, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7952 73.011827 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7952: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 196651, Ack: 3361, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7953 73.011856 206.225.164.188 192.168.10.207 SMTP 473 C: DATA fragment, 419 bytes Frame 7953: 473 bytes on wire (3784 bits), 473 bytes captured (3784 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 198031, Ack: 3361, Len: 419 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7954 73.011884 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7954: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 198450, Ack: 3361, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7955 73.011913 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7955: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 199830, Ack: 3361, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7956 73.011942 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7956: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 201210, Ack: 3361, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7957 73.011973 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7957: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 202590, Ack: 3361, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7958 73.012002 206.225.164.188 192.168.10.207 SMTP 852 C: DATA fragment, 798 bytes Frame 7958: 852 bytes on wire (6816 bits), 852 bytes captured (6816 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 203970, Ack: 3361, Len: 798 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7959 73.012031 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7959: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 204768, Ack: 3361, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7960 73.012064 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=3361 Ack=201210 Win=10853 Len=0 Frame 7960: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3361, Ack: 201210, Len: 0 No. Time Source Destination Protocol Length Info 7961 73.012092 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=3361 Ack=206148 Win=5915 Len=0 Frame 7961: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3361, Ack: 206148, Len: 0 No. Time Source Destination Protocol Length Info 7962 73.012120 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7962: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 206148, Ack: 3361, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7963 73.012150 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7963: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 207528, Ack: 3361, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7964 73.012180 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7964: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 208908, Ack: 3361, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7965 73.012208 206.225.164.188 192.168.10.207 SMTP 107 C: DATA fragment, 53 bytes Frame 7965: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 210288, Ack: 3361, Len: 53 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7966 73.012237 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 7966: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 210341, Ack: 3361, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7967 73.012267 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=3361 Ack=211721 Win=342 Len=0 Frame 7967: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3361, Ack: 211721, Len: 0 No. Time Source Destination Protocol Length Info 7968 73.132991 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7968: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3084201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7969 73.133027 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7969: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3085601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7970 73.133057 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7970: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3087001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7971 73.133087 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 7971: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3088401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 7972 73.133138 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3088401 Win=65535 Len=0 Frame 7972: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3088401, Len: 0 No. Time Source Destination Protocol Length Info 7973 73.153605 192.168.10.203 93.85.111.225 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 7973: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 93.85.111.225 (93.85.111.225) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 7974 73.193862 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 7974: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 7975 73.277214 192.168.10.190 64.74.103.148 TLSv1 91 Application Data Frame 7975: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.190 (192.168.10.190), Dst: 64.74.103.148 (64.74.103.148) Transmission Control Protocol, Src Port: wsmlb (3806), Dst Port: https (443), Seq: 75, Ack: 75, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 7976 73.277282 64.74.103.148 192.168.10.190 TCP 60 https > wsmlb [ACK] Seq=75 Ack=112 Win=65535 Len=0 Frame 7976: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Internet Protocol Version 4, Src: 64.74.103.148 (64.74.103.148), Dst: 192.168.10.190 (192.168.10.190) Transmission Control Protocol, Src Port: https (443), Dst Port: wsmlb (3806), Seq: 75, Ack: 112, Len: 0 No. Time Source Destination Protocol Length Info 7977 73.277464 Watchgua_3c:4c:d8 IntelCor_ed:1a:23 ARP 60 Who has 192.168.10.190? Tell 192.168.10.1 Frame 7977: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 7978 73.277478 IntelCor_ed:1a:23 Watchgua_3c:4c:d8 ARP 60 192.168.10.190 is at 00:13:20:ed:1a:23 Frame 7978: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 7979 73.317983 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 7979: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 7980 73.336747 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3089801 Win=65535 Len=0 Frame 7980: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3089801, Len: 0 No. Time Source Destination Protocol Length Info 7981 73.345655 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2813270272, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 7981: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7982 73.345678 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2813270272, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 7982: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7983 73.345691 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2813270272, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 7983: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7984 73.345703 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2813270272, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 7984: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7985 73.366323 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 387449088, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 7985: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7986 73.366345 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 387449088, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 7986: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7987 73.366356 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 387449088, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 7987: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7988 73.366369 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 387449088, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 7988: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 7989 73.443586 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 7989: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 7990 73.514636 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 7990: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 7991 73.514667 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 7991: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 7992 73.565953 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 7992: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 7993 73.609181 64.74.103.148 192.168.10.190 TLSv1 91 Application Data Frame 7993: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Internet Protocol Version 4, Src: 64.74.103.148 (64.74.103.148), Dst: 192.168.10.190 (192.168.10.190) Transmission Control Protocol, Src Port: https (443), Dst Port: wsmlb (3806), Seq: 75, Ack: 112, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 7994 73.756693 192.168.10.104 192.168.10.255 BROWSER 224 Become Backup Browser Frame 7994: 224 bytes on wire (1792 bits), 224 bytes captured (1792 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 7995 73.824110 192.168.10.190 64.74.103.148 TCP 60 wsmlb > https [ACK] Seq=112 Ack=112 Win=65535 Len=0 Frame 7995: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.190 (192.168.10.190), Dst: 64.74.103.148 (64.74.103.148) Transmission Control Protocol, Src Port: wsmlb (3806), Dst Port: https (443), Seq: 112, Ack: 112, Len: 0 No. Time Source Destination Protocol Length Info 7996 73.843814 192.168.10.86 192.168.10.255 BROWSER 243 Host Announcement ABURCHXP, Workstation, Server, NT Workstation, Potential Browser Frame 7996: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: SunrichT_19:cf:96 (00:0a:cd:19:cf:96), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.86 (192.168.10.86), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 7997 73.844019 192.168.10.86 192.168.10.255 BROWSER 243 Host Announcement ABURCHXP, Workstation, Server, NT Workstation, Potential Browser Frame 7997: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: SunrichT_19:cf:96 (00:0a:cd:19:cf:96), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.86 (192.168.10.86), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 7998 73.978431 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 7998: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3361, Ack: 211721, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 7999 73.978470 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=211721 Ack=3403 Win=46363 Len=0 Frame 7999: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 211721, Ack: 3403, Len: 0 No. Time Source Destination Protocol Length Info 8000 74.014702 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 8000: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8001 74.014734 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 8001: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8002 74.019754 192.168.10.207 206.225.164.186 SMTP 306 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 8002: 306 bytes on wire (2448 bits), 306 bytes captured (2448 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 444849, Len: 252 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8003 74.019789 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=445887 Ack=5839 Win=46153 Len=0 Frame 8003: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 445887, Ack: 5839, Len: 0 No. Time Source Destination Protocol Length Info 8004 74.019819 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=5839 Ack=444849 Win=0 Len=0 Frame 8004: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5839, Ack: 444849, Len: 0 No. Time Source Destination Protocol Length Info 8005 74.042039 Dell_39:5d:dd Broadcast ARP 60 Who has 192.168.10.12? Tell 192.168.10.207 Frame 8005: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8006 74.042074 Dell_39:5d:dd Broadcast ARP 60 Who has 192.168.10.12? Tell 192.168.10.207 Frame 8006: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8007 74.224131 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 8007: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2679, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8008 74.224169 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 4297#1] rfb > xrl [ACK] Seq=32763 Ack=2652 Win=65427 Len=0 SLE=2679 SRE=2706 Frame 8008: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2652, Len: 0 No. Time Source Destination Protocol Length Info 8009 74.242154 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8009: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2706, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8010 74.242190 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 4297#2] rfb > xrl [ACK] Seq=32763 Ack=2652 Win=65427 Len=0 SLE=2679 SRE=2733 Frame 8010: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2652, Len: 0 No. Time Source Destination Protocol Length Info 8011 74.254073 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8011: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2733, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8012 74.254108 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 4297#3] rfb > xrl [ACK] Seq=32763 Ack=2652 Win=65427 Len=0 SLE=2679 SRE=2760 Frame 8012: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2652, Len: 0 No. Time Source Destination Protocol Length Info 8013 74.264176 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 8013: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2652, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8014 74.264209 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=32763 Ack=2760 Win=65319 Len=0 Frame 8014: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2760, Len: 0 No. Time Source Destination Protocol Length Info 8015 74.361341 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2830047488, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8015: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8016 74.361366 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2830047488, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8016: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8017 74.361378 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2830047488, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8017: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8018 74.361390 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2830047488, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8018: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8019 74.381958 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 404226304, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8019: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8020 74.381978 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 404226304, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8020: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8021 74.381990 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 404226304, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8021: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8022 74.382002 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 404226304, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8022: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8023 74.564411 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8023: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2760, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8024 74.580144 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8024: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2787, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8025 74.580180 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=32763 Ack=2814 Win=65265 Len=0 Frame 8025: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2814, Len: 0 No. Time Source Destination Protocol Length Info 8026 74.600121 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8026: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2814, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8027 74.616902 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8027: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2841, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8028 74.616939 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=32763 Ack=2868 Win=65211 Len=0 Frame 8028: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2868, Len: 0 No. Time Source Destination Protocol Length Info 8029 74.653556 192.168.10.203 93.85.111.225 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 8029: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 93.85.111.225 (93.85.111.225) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 8030 74.750264 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 8030: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8031 74.750297 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 8031: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8032 74.750347 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 8032: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8033 74.750360 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 8033: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8034 74.750386 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 8034: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8035 74.750399 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 8035: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8036 74.750409 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 8036: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8037 74.750421 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 8037: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8038 74.750434 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 8038: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8039 74.750576 192.168.10.46 192.168.10.245 Syslog 214 LOCAL4.WARNING: Oct 03 2011 19:16:15 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n Frame 8039: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:16:15 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n No. Time Source Destination Protocol Length Info 8040 74.750594 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 8040: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8041 74.750614 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 8041: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8042 74.750625 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 8042: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8043 74.750642 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 8043: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8044 74.750674 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 8044: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8045 74.750685 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 8045: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8046 74.750694 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 8046: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8047 74.750721 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 8047: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8048 74.750732 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 8048: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8049 74.750742 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 8049: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8050 74.750753 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 8050: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8051 74.750763 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 8051: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8052 74.750774 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 8052: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8053 74.750784 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 8053: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8054 74.750795 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 8054: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8055 74.750806 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 8055: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8056 74.750821 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 8056: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8057 74.750845 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 8057: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8058 74.750856 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 8058: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8059 74.750867 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 8059: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8060 74.750877 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 8060: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8061 74.750888 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 8061: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8062 74.750898 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 8062: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8063 74.750909 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 8063: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8064 74.750919 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 8064: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8065 74.750929 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 8065: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8066 74.750939 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 8066: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8067 74.750950 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 8067: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8068 74.750960 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 8068: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8069 74.750970 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 8069: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8070 74.750981 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 8070: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8071 74.750991 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 8071: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8072 74.751001 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 8072: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8073 74.751011 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 8073: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8074 74.751021 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 8074: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8075 74.751032 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 8075: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8076 74.751044 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 8076: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8077 74.840922 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 8077: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8078 74.840955 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 8078: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8079 74.894221 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 8079: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2895, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8080 74.894255 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 8028#1] rfb > xrl [ACK] Seq=32763 Ack=2868 Win=65211 Len=0 SLE=2895 SRE=2922 Frame 8080: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2868, Len: 0 No. Time Source Destination Protocol Length Info 8081 74.924059 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 8081: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2949, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8082 74.924091 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 8028#2] rfb > xrl [ACK] Seq=32763 Ack=2868 Win=65211 Len=0 SLE=2949 SRE=2976 SLE=2895 SRE=2922 Frame 8082: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2868, Len: 0 No. Time Source Destination Protocol Length Info 8083 74.947550 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 8083: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3403, Ack: 211721, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8084 74.947580 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=211721 Ack=3445 Win=46342 Len=0 Frame 8084: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 211721, Ack: 3445, Len: 0 No. Time Source Destination Protocol Length Info 8085 74.948387 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 8085: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2868, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8086 74.948420 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=32763 Ack=2922 Win=65157 Len=0 SLE=2949 SRE=2976 Frame 8086: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2922, Len: 0 No. Time Source Destination Protocol Length Info 8087 74.952303 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 8087: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2922, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8088 74.952332 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=32763 Ack=2976 Win=65103 Len=0 Frame 8088: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 2976, Len: 0 No. Time Source Destination Protocol Length Info 8089 75.162726 192.168.10.219 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 8089: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_7d:f1:25 (00:22:19:7d:f1:25), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.219 (192.168.10.219), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 8090 75.162943 192.168.10.219 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 8090: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_7d:f1:25 (00:22:19:7d:f1:25), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.219 (192.168.10.219), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 8091 75.193995 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 8091: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8092 75.262319 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8092: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 2976, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8093 75.278427 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8093: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3003, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8094 75.278463 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=32763 Ack=3030 Win=65049 Len=0 Frame 8094: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 3030, Len: 0 No. Time Source Destination Protocol Length Info 8095 75.296855 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8095: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3030, Ack: 32763, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8096 75.315403 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 8096: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8097 75.377112 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2846824704, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8097: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8098 75.377136 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2846824704, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8098: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8099 75.377149 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2846824704, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8099: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8100 75.377161 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2846824704, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8100: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8101 75.397615 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 421003520, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8101: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8102 75.397636 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 421003520, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8102: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8103 75.397648 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 421003520, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8103: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8104 75.397661 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 421003520, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8104: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8105 75.446101 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 8105: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8106 75.505524 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 8106: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8107 75.505557 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 8107: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8108 75.512231 American_ca:aa:ae Broadcast ARP 60 Gratuitous ARP for 192.168.10.32 (Request) Frame 8108: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8109 75.512259 American_ca:aa:ae Broadcast ARP 60 Gratuitous ARP for 192.168.10.32 (Request) Frame 8109: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8110 75.537067 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=32763 Ack=3057 Win=65022 Len=0 Frame 8110: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 3057, Len: 0 No. Time Source Destination Protocol Length Info 8111 75.566095 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 8111: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8112 75.991005 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 8112: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3445, Ack: 211721, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8113 75.991043 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=211721 Ack=3487 Win=46321 Len=0 Frame 8113: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 211721, Ack: 3487, Len: 0 No. Time Source Destination Protocol Length Info 8114 75.993635 206.225.164.186 192.168.10.207 TCP 60 [TCP Dup ACK 8003#1] 23308 > smtp [ACK] Seq=445887 Ack=5839 Win=46153 Len=0 Frame 8114: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 445887, Ack: 5839, Len: 0 No. Time Source Destination Protocol Length Info 8115 75.993667 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=5839 Ack=444849 Win=0 Len=0 Frame 8115: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5839, Ack: 444849, Len: 0 No. Time Source Destination Protocol Length Info 8116 76.012917 American_ca:aa:ae Broadcast ARP 60 Gratuitous ARP for 192.168.10.32 (Request) Frame 8116: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8117 76.012948 American_ca:aa:ae Broadcast ARP 60 Gratuitous ARP for 192.168.10.32 (Request) Frame 8117: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8118 76.020432 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 8118: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8119 76.020463 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 8119: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8120 76.179849 192.168.10.220 208.67.222.222 DNS 86 Standard query PTR 215.248.1.190.in-addr.arpa Frame 8120: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 52831 (52831), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 8121 76.255837 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 8121: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8122 76.255877 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 8122: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8123 76.286014 208.67.222.222 192.168.10.220 DNS 138 Standard query response PTR dsl-emcali-190.1.248.215.emcali.net.co Frame 8123: 138 bytes on wire (1104 bits), 138 bytes captured (1104 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 52831 (52831) Domain Name System (response) No. Time Source Destination Protocol Length Info 8124 76.376166 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 8124: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8125 76.376196 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 8125: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8126 76.392730 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2863601920, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8126: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8127 76.392753 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2863601920, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8127: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8128 76.392765 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2863601920, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8128: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8129 76.392778 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2863601920, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8129: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8130 76.406465 192.168.10.220 208.67.222.222 DNS 86 Standard query PTR 166.76.58.188.in-addr.arpa Frame 8130: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 57139 (57139), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 8131 76.413323 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 437780736, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8131: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8132 76.413346 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 437780736, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8132: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8133 76.413359 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 437780736, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8133: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8134 76.413371 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 437780736, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8134: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8135 76.499959 208.67.222.222 192.168.10.220 DNS 86 Standard query response, No such name Frame 8135: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 57139 (57139) Domain Name System (response) No. Time Source Destination Protocol Length Info 8136 76.500397 192.168.10.203 188.58.76.166 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 8136: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 188.58.76.166 (188.58.76.166) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 8137 76.821885 192.168.10.30 192.168.20.3 UDP 762 Source port: 34427 Destination port: apc-3052 Frame 8137: 762 bytes on wire (6096 bits), 762 bytes captured (6096 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (720 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 35 3a 31 32 0a 53 52 3d 31 42 0a =18:45:12.SR=1B. 0060 53 55 3d 37 42 31 33 30 39 39 33 0a 52 44 3d 33 SU=7B130993.RD=3 0070 33 32 31 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 321.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 0a 34 8.7E=00.3E=001.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 2e 30 C=207.3.50=040.0 00c0 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 37 2f .43=025.2.78=07/ 00d0 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 0a 34 25/06.6A=0023:.4 00e0 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 20 0a 7=S.63=BAI_UPS . 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 36 33 0.38=00.6E=NS063 0120 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 37 2f 1005398 .6D=07/ 0130 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 2d 55 25/06.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 52 4d 20 58 PS RT 10000 RM X 0150 4c 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d 32 30 L.46=60.00.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 35 3d 7.3.4E=204.4.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 3d 31 00.42=218.1.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 33 2e 30 0a 32 46 3d 31 36 2e 33 33 C=033.0.2F=16.33 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 36 30 2e 30 31 3b 32 30 37 2e 33 0.09=60.01;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 0a 49 9=0.I0=2.I1=26.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a 49 38 5=0.I6=0.I7=1.I8 0250 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 0a 49 =Device 1.I9=0.I 0260 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d 30 0a A=Device 2.IB=0. 0270 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 30 0a IC=Relay 1.ID=0. 0280 53 48 3d 31 37 38 43 37 39 35 43 36 43 43 43 35 SH=178C795C6CCC5 0290 41 30 30 34 46 43 45 33 43 36 31 43 35 31 41 43 A004FCE3C61C51AC 02a0 31 33 42 0a 4d 44 3d 35 37 64 63 37 65 63 39 61 13B.MD=57dc7ec9a 02b0 63 36 31 65 62 33 36 66 66 66 62 34 34 34 31 65 c61eb36fffb4441e 02c0 30 30 62 32 34 65 65 0a 3c 2f 42 4f 44 59 3e 0a 00b24ee.</BODY>. No. Time Source Destination Protocol Length Info 8138 76.821964 192.168.10.30 192.168.20.3 UDP 762 Source port: 34427 Destination port: apc-3052 Frame 8138: 762 bytes on wire (6096 bits), 762 bytes captured (6096 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (720 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 35 3a 31 32 0a 53 52 3d 31 42 0a =18:45:12.SR=1B. 0060 53 55 3d 37 42 31 33 30 39 39 33 0a 52 44 3d 33 SU=7B130993.RD=3 0070 33 32 31 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 321.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 0a 34 8.7E=00.3E=001.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 2e 30 C=207.3.50=040.0 00c0 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 37 2f .43=025.2.78=07/ 00d0 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 0a 34 25/06.6A=0023:.4 00e0 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 20 0a 7=S.63=BAI_UPS . 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 36 33 0.38=00.6E=NS063 0120 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 37 2f 1005398 .6D=07/ 0130 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 2d 55 25/06.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 52 4d 20 58 PS RT 10000 RM X 0150 4c 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d 32 30 L.46=60.00.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 35 3d 7.3.4E=204.4.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 3d 31 00.42=218.1.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 33 2e 30 0a 32 46 3d 31 36 2e 33 33 C=033.0.2F=16.33 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 36 30 2e 30 31 3b 32 30 37 2e 33 0.09=60.01;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 0a 49 9=0.I0=2.I1=26.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a 49 38 5=0.I6=0.I7=1.I8 0250 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 0a 49 =Device 1.I9=0.I 0260 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d 30 0a A=Device 2.IB=0. 0270 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 30 0a IC=Relay 1.ID=0. 0280 53 48 3d 31 37 38 43 37 39 35 43 36 43 43 43 35 SH=178C795C6CCC5 0290 41 30 30 34 46 43 45 33 43 36 31 43 35 31 41 43 A004FCE3C61C51AC 02a0 31 33 42 0a 4d 44 3d 35 37 64 63 37 65 63 39 61 13B.MD=57dc7ec9a 02b0 63 36 31 65 62 33 36 66 66 66 62 34 34 34 31 65 c61eb36fffb4441e 02c0 30 30 62 32 34 65 65 0a 3c 2f 42 4f 44 59 3e 0a 00b24ee.</BODY>. No. Time Source Destination Protocol Length Info 8139 76.822213 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:16:17 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS1/34427 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 8139: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:16:17 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS1/34427 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 8140 76.936430 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 8140: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3487, Ack: 211721, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8141 76.936469 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=211721 Ack=3529 Win=46300 Len=0 Frame 8141: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 211721, Ack: 3529, Len: 0 No. Time Source Destination Protocol Length Info 8142 77.012981 American_ca:aa:ae Broadcast ARP 60 Gratuitous ARP for 192.168.10.32 (Request) Frame 8142: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8143 77.013014 American_ca:aa:ae Broadcast ARP 60 Gratuitous ARP for 192.168.10.32 (Request) Frame 8143: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8144 77.194004 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 8144: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8145 77.225933 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 8145: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3089801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 8146 77.225967 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 8146: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3091201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 8147 77.226016 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3092601 Win=65535 Len=0 Frame 8147: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3092601, Len: 0 No. Time Source Destination Protocol Length Info 8148 77.226057 192.168.10.221 207.46.19.254 TCP 60 4792 > https [RST, ACK] Seq=3570 Ack=3537 Win=0 Len=0 Frame 8148: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254) Transmission Control Protocol, Src Port: 4792 (4792), Dst Port: https (443), Seq: 3570, Ack: 3537, Len: 0 No. Time Source Destination Protocol Length Info 8149 77.315371 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 8149: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8150 77.408349 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2880379136, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8150: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8151 77.408373 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2880379136, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8151: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8152 77.408386 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2880379136, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8152: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8153 77.408398 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2880379136, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8153: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8154 77.428933 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 454557952, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8154: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8155 77.428953 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 454557952, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8155: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8156 77.428965 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 454557952, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8156: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8157 77.428977 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 454557952, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8157: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8158 77.443592 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 8158: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8159 77.503790 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 8159: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8160 77.503820 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 8160: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8161 77.566032 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 8161: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8162 77.619034 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8162: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3057, Ack: 32763, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8163 77.622670 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8163: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3086, Ack: 32763, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8164 77.622704 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=32763 Ack=3115 Win=64964 Len=0 Frame 8164: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 3115, Len: 0 No. Time Source Destination Protocol Length Info 8165 77.623036 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8165: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3115, Ack: 32763, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8166 77.623079 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8166: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3144, Ack: 32763, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8167 77.623109 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=32763 Ack=3173 Win=64906 Len=0 Frame 8167: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 3173, Len: 0 No. Time Source Destination Protocol Length Info 8168 77.623154 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8168: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3173, Ack: 32763, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8169 77.626482 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8169: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3202, Ack: 32763, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8170 77.626513 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=32763 Ack=3231 Win=64848 Len=0 Frame 8170: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 3231, Len: 0 No. Time Source Destination Protocol Length Info 8171 77.681329 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8171: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 32763, Ack: 3231, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8172 77.681369 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8172: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 34023, Ack: 3231, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8173 77.681399 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8173: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 35283, Ack: 3231, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8174 77.681427 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 8174: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 36543, Ack: 3231, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 8175 77.706362 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=3231 Ack=35283 Win=64240 Len=0 Frame 8175: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3231, Ack: 35283, Len: 0 No. Time Source Destination Protocol Length Info 8176 77.706450 192.168.10.185 192.168.10.142 VNC 685 Authentication result Frame 8176: 685 bytes on wire (5480 bits), 685 bytes captured (5480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 36859, Ack: 3231, Len: 631 Virtual Network Computing No. Time Source Destination Protocol Length Info 8177 77.706894 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 4 Port 45 TTL = 120 Frame 8177: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 8178 77.710754 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=3231 Ack=36543 Win=64240 Len=0 Frame 8178: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3231, Ack: 36543, Len: 0 No. Time Source Destination Protocol Length Info 8179 77.736716 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 8179: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3231, Ack: 37490, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 8180 77.943272 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=37490 Ack=3263 Win=64816 Len=0 Frame 8180: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37490, Ack: 3263, Len: 0 No. Time Source Destination Protocol Length Info 8181 78.000188 192.168.10.203 188.58.76.166 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 8181: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 188.58.76.166 (188.58.76.166) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 8182 78.011255 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 8182: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8183 78.011280 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 8183: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8184 78.043315 192.168.10.207 206.225.164.186 SMTP 558 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 8184: 558 bytes on wire (4464 bits), 558 bytes captured (4464 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 5587, Ack: 444849, Len: 504 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8185 78.043350 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=445887 Ack=6091 Win=46720 Len=0 Frame 8185: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 445887, Ack: 6091, Len: 0 No. Time Source Destination Protocol Length Info 8186 78.043380 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=6091 Ack=444849 Win=0 Len=0 Frame 8186: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6091, Ack: 444849, Len: 0 No. Time Source Destination Protocol Length Info 8187 78.059386 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 8187: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3529, Ack: 211721, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8188 78.059423 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=211721 Ack=3571 Win=46279 Len=0 Frame 8188: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 211721, Ack: 3571, Len: 0 No. Time Source Destination Protocol Length Info 8189 78.059631 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=3571 Ack=211721 Win=49085 Len=0 Frame 8189: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3571, Ack: 211721, Len: 0 No. Time Source Destination Protocol Length Info 8190 78.059659 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 8189#1] smtp > 9428 [ACK] Seq=3571 Ack=211721 Win=49085 Len=0 Frame 8190: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3571, Ack: 211721, Len: 0 No. Time Source Destination Protocol Length Info 8191 78.059691 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8191: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 211721, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8192 78.059720 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8192: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 213101, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8193 78.059749 206.225.164.188 192.168.10.207 SMTP 469 C: DATA fragment, 415 bytes Frame 8193: 469 bytes on wire (3752 bits), 469 bytes captured (3752 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 214481, Ack: 3571, Len: 415 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8194 78.059781 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8194: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 214896, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8195 78.059810 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8195: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 216276, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8196 78.059839 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8196: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 217656, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8197 78.059870 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8197: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 219036, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8198 78.059900 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8198: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 220416, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8199 78.059928 206.225.164.188 192.168.10.207 SMTP 697 C: DATA fragment, 643 bytes Frame 8199: 697 bytes on wire (5576 bits), 697 bytes captured (5576 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 221796, Ack: 3571, Len: 643 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8200 78.059960 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=3571 Ack=219036 Win=41770 Len=0 Frame 8200: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3571, Ack: 219036, Len: 0 No. Time Source Destination Protocol Length Info 8201 78.059988 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=3571 Ack=222439 Win=38367 Len=0 Frame 8201: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3571, Ack: 222439, Len: 0 No. Time Source Destination Protocol Length Info 8202 78.060016 206.225.164.188 192.168.10.207 SMTP 856 C: DATA fragment, 802 bytes Frame 8202: 856 bytes on wire (6848 bits), 856 bytes captured (6848 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 222439, Ack: 3571, Len: 802 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8203 78.060045 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8203: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 223241, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8204 78.060075 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8204: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 224621, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8205 78.060105 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8205: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 226001, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8206 78.060139 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8206: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 227381, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8207 78.060177 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8207: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 228761, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8208 78.060206 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=3571 Ack=224621 Win=36185 Len=0 Frame 8208: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3571, Ack: 224621, Len: 0 No. Time Source Destination Protocol Length Info 8209 78.060235 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8209: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 230141, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8210 78.060263 206.225.164.188 192.168.10.207 SMTP 1072 C: DATA fragment, 1018 bytes Frame 8210: 1072 bytes on wire (8576 bits), 1072 bytes captured (8576 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 231521, Ack: 3571, Len: 1018 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8211 78.060292 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8211: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 232539, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8212 78.060321 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=3571 Ack=227381 Win=33425 Len=0 Frame 8212: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3571, Ack: 227381, Len: 0 No. Time Source Destination Protocol Length Info 8213 78.060350 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8213: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 233919, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8214 78.060379 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8214: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 235299, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8215 78.060408 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=3571 Ack=232539 Win=28267 Len=0 Frame 8215: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3571, Ack: 232539, Len: 0 No. Time Source Destination Protocol Length Info 8216 78.060436 206.225.164.188 192.168.10.207 SMTP 583 C: DATA fragment, 529 bytes Frame 8216: 583 bytes on wire (4664 bits), 583 bytes captured (4664 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 236679, Ack: 3571, Len: 529 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8217 78.060465 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8217: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 237208, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8218 78.060501 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=3571 Ack=237208 Win=23598 Len=0 Frame 8218: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3571, Ack: 237208, Len: 0 No. Time Source Destination Protocol Length Info 8219 78.060529 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8219: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 238588, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8220 78.060559 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8220: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 239968, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8221 78.060588 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8221: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 241348, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8222 78.060617 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8222: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 242728, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8223 78.060646 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8223: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 244108, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8224 78.060675 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=3571 Ack=239968 Win=20838 Len=0 Frame 8224: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3571, Ack: 239968, Len: 0 No. Time Source Destination Protocol Length Info 8225 78.060703 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8225: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 245488, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8226 78.060733 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8226: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 246868, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8227 78.060762 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8227: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 248248, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8228 78.060790 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=3571 Ack=244108 Win=16698 Len=0 Frame 8228: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3571, Ack: 244108, Len: 0 No. Time Source Destination Protocol Length Info 8229 78.060818 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8229: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 249628, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8230 78.060848 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8230: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 251008, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8231 78.060877 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=3571 Ack=246868 Win=13938 Len=0 Frame 8231: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3571, Ack: 246868, Len: 0 No. Time Source Destination Protocol Length Info 8232 78.060904 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=3571 Ack=249628 Win=11178 Len=0 Frame 8232: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3571, Ack: 249628, Len: 0 No. Time Source Destination Protocol Length Info 8233 78.060933 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8233: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 252388, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8234 78.060963 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8234: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 253768, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8235 78.060991 206.225.164.188 192.168.10.207 SMTP 192 C: DATA fragment, 138 bytes Frame 8235: 192 bytes on wire (1536 bits), 192 bytes captured (1536 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 255148, Ack: 3571, Len: 138 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8236 78.061018 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=3571 Ack=252388 Win=8418 Len=0 Frame 8236: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3571, Ack: 252388, Len: 0 No. Time Source Destination Protocol Length Info 8237 78.061047 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8237: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 255286, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8238 78.061077 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8238: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 256666, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8239 78.061105 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8239: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 258046, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8240 78.061142 206.225.164.188 192.168.10.207 SMTP 445 C: DATA fragment, 391 bytes Frame 8240: 445 bytes on wire (3560 bits), 445 bytes captured (3560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 259426, Ack: 3571, Len: 391 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8241 78.061174 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8241: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 259817, Ack: 3571, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8242 78.061203 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=3571 Ack=255286 Win=5520 Len=0 Frame 8242: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3571, Ack: 255286, Len: 0 No. Time Source Destination Protocol Length Info 8243 78.061231 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=3571 Ack=258046 Win=2760 Len=0 Frame 8243: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3571, Ack: 258046, Len: 0 No. Time Source Destination Protocol Length Info 8244 78.061258 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=3571 Ack=260806 Win=0 Len=0 Frame 8244: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3571, Ack: 260806, Len: 0 No. Time Source Destination Protocol Length Info 8245 78.423966 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2897156352, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8245: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8246 78.423989 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2897156352, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8246: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8247 78.424002 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2897156352, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8247: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8248 78.424014 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2897156352, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8248: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8249 78.444438 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 471335168, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8249: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8250 78.444456 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 471335168, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8250: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8251 78.444468 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 471335168, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8251: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8252 78.444480 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 471335168, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8252: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8253 78.453839 24.143.205.27 192.168.10.221 TCP 60 http > 4794 [FIN, ACK] Seq=431 Ack=3035 Win=65535 Len=0 Frame 8253: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.27 (24.143.205.27), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4794 (4794), Seq: 431, Ack: 3035, Len: 0 No. Time Source Destination Protocol Length Info 8254 78.453888 192.168.10.221 24.143.205.27 TCP 60 4794 > http [ACK] Seq=3035 Ack=432 Win=65105 Len=0 Frame 8254: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.27 (24.143.205.27) Transmission Control Protocol, Src Port: 4794 (4794), Dst Port: http (80), Seq: 3035, Ack: 432, Len: 0 No. Time Source Destination Protocol Length Info 8255 78.457634 Watchgua_3c:4c:d8 Dell_80:27:ab ARP 60 Who has 192.168.10.221? Tell 192.168.10.1 Frame 8255: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8256 78.457647 Dell_80:27:ab Watchgua_3c:4c:d8 ARP 60 192.168.10.221 is at 00:22:19:80:27:ab Frame 8256: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) [Duplicate IP address detected for 192.168.10.221 (00:22:19:80:27:ab) - also in use by 00:22:19:80:27:ad (frame 195)] Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8257 78.485949 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8257: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3263, Ack: 37490, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8258 78.496969 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8258: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3290, Ack: 37490, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8259 78.496999 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=37490 Ack=3317 Win=64762 Len=0 Frame 8259: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37490, Ack: 3317, Len: 0 No. Time Source Destination Protocol Length Info 8260 78.512550 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8260: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3317, Ack: 37490, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8261 78.528553 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8261: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3344, Ack: 37490, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8262 78.528583 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=37490 Ack=3371 Win=64708 Len=0 Frame 8262: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37490, Ack: 3371, Len: 0 No. Time Source Destination Protocol Length Info 8263 78.560492 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8263: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3371, Ack: 37490, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8264 78.564529 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8264: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3398, Ack: 37490, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8265 78.564561 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=37490 Ack=3425 Win=64654 Len=0 Frame 8265: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37490, Ack: 3425, Len: 0 No. Time Source Destination Protocol Length Info 8266 78.582872 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8266: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3425, Ack: 37490, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8267 78.594628 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8267: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3452, Ack: 37490, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8268 78.594660 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=37490 Ack=3479 Win=64600 Len=0 Frame 8268: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37490, Ack: 3479, Len: 0 No. Time Source Destination Protocol Length Info 8269 78.610805 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8269: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3479, Ack: 37490, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8270 78.630654 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8270: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3506, Ack: 37490, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8271 78.630686 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=37490 Ack=3533 Win=64546 Len=0 Frame 8271: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37490, Ack: 3533, Len: 0 No. Time Source Destination Protocol Length Info 8272 78.710851 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8272: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3533, Ack: 37490, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8273 78.725840 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8273: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3560, Ack: 37490, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8274 78.725874 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=37490 Ack=3587 Win=64492 Len=0 Frame 8274: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37490, Ack: 3587, Len: 0 No. Time Source Destination Protocol Length Info 8275 78.748747 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8275: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3587, Ack: 37490, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8276 78.762620 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8276: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3614, Ack: 37490, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8277 78.762654 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=37490 Ack=3641 Win=64438 Len=0 Frame 8277: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37490, Ack: 3641, Len: 0 No. Time Source Destination Protocol Length Info 8278 78.782077 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8278: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3641, Ack: 37490, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8279 78.791443 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8279: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3668, Ack: 37490, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8280 78.791476 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=37490 Ack=3695 Win=64384 Len=0 Frame 8280: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37490, Ack: 3695, Len: 0 No. Time Source Destination Protocol Length Info 8281 78.804778 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8281: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3695, Ack: 37490, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8282 78.822745 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 8282: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3722, Ack: 37490, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 8283 78.822783 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=37490 Ack=3749 Win=64330 Len=0 Frame 8283: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37490, Ack: 3749, Len: 0 No. Time Source Destination Protocol Length Info 8284 79.024537 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 8284: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3571, Ack: 260806, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8285 79.024572 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=261197 Ack=3613 Win=46258 Len=0 Frame 8285: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 261197, Ack: 3613, Len: 0 No. Time Source Destination Protocol Length Info 8286 79.024604 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=3613 Ack=260806 Win=0 Len=0 Frame 8286: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3613, Ack: 260806, Len: 0 No. Time Source Destination Protocol Length Info 8287 79.193839 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 8287: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8288 79.234940 188.58.76.166 192.168.10.203 ICMP 70 Destination unreachable (Port unreachable) Frame 8288: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 188.58.76.166 (188.58.76.166), Dst: 192.168.10.203 (192.168.10.203) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 8289 79.235003 188.58.76.166 192.168.10.203 ICMP 70 Destination unreachable (Port unreachable) Frame 8289: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 188.58.76.166 (188.58.76.166), Dst: 192.168.10.203 (192.168.10.203) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 8290 79.315284 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 8290: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8291 79.439380 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2913933568, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8291: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8292 79.439397 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2913933568, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8292: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8293 79.439405 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2913933568, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8293: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8294 79.439413 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2913933568, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8294: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8295 79.443536 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 8295: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8296 79.459943 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 488112384, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8296: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8297 79.459959 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 488112384, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8297: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8298 79.459972 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 488112384, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8298: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8299 79.459985 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 488112384, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8299: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8300 79.468454 64.74.103.131 192.168.10.240 TLSv1 107 Application Data Frame 8300: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.240 (192.168.10.240) Transmission Control Protocol, Src Port: https (443), Dst Port: mentaserver (2118), Seq: 107, Ack: 107, Len: 53 Secure Sockets Layer No. Time Source Destination Protocol Length Info 8301 79.468547 192.168.10.240 64.74.103.131 TLSv1 107 Application Data Frame 8301: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.240 (192.168.10.240), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: mentaserver (2118), Dst Port: https (443), Seq: 107, Ack: 160, Len: 53 Secure Sockets Layer No. Time Source Destination Protocol Length Info 8302 79.468614 64.74.103.131 192.168.10.240 TCP 60 https > mentaserver [ACK] Seq=160 Ack=160 Win=65535 Len=0 Frame 8302: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.240 (192.168.10.240) Transmission Control Protocol, Src Port: https (443), Dst Port: mentaserver (2118), Seq: 160, Ack: 160, Len: 0 No. Time Source Destination Protocol Length Info 8303 79.469563 Watchgua_3c:4c:d8 Dell_ba:b4:3c ARP 60 Who has 192.168.10.240? Tell 192.168.10.1 Frame 8303: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8304 79.469601 Dell_ba:b4:3c Watchgua_3c:4c:d8 ARP 60 192.168.10.240 is at 00:1e:c9:ba:b4:3c Frame 8304: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8305 79.500112 192.168.10.203 188.58.76.166 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 8305: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 188.58.76.166 (188.58.76.166) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 8306 79.500683 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8306: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3749, Ack: 37490, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8307 79.509245 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 8307: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8308 79.509269 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 8308: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8309 79.566064 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 8309: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8310 79.622938 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 3 Port 47 TTL = 120 Frame 8310: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 8311 79.693268 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=37490 Ack=3778 Win=64301 Len=0 Frame 8311: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37490, Ack: 3778, Len: 0 No. Time Source Destination Protocol Length Info 8312 79.754782 188.58.76.166 192.168.10.203 ICMP 70 Destination unreachable (Port unreachable) Frame 8312: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 188.58.76.166 (188.58.76.166), Dst: 192.168.10.203 (192.168.10.203) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 8313 79.761085 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 8313: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3571, Ack: 260806, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8314 79.761115 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 8285#1] 9428 > smtp [ACK] Seq=261197 Ack=3613 Win=46258 Len=0 Frame 8314: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 261197, Ack: 3613, Len: 0 No. Time Source Destination Protocol Length Info 8315 79.761161 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=3613 Ack=260806 Win=0 Len=0 Frame 8315: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3613, Ack: 260806, Len: 0 No. Time Source Destination Protocol Length Info 8316 79.781112 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8316: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3778, Ack: 37490, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8317 79.802648 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=37490 Ack=3807 Win=65535 Len=0 Frame 8317: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37490, Ack: 3807, Len: 0 No. Time Source Destination Protocol Length Info 8318 79.830445 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-11.geo.kaspersky.com Frame 8318: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 65416 (65416), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 8319 79.834446 192.168.10.185 192.168.10.142 VNC 116 Authentication result Frame 8319: 116 bytes on wire (928 bits), 116 bytes captured (928 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37490, Ack: 3807, Len: 62 Virtual Network Computing No. Time Source Destination Protocol Length Info 8320 79.861055 192.168.10.142 192.168.10.185 VNC 83 [TCP Previous segment lost] Authentication result Frame 8320: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3868, Ack: 37552, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8321 79.861088 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 8319#1] rfb > xrl [ACK] Seq=37552 Ack=3807 Win=65535 Len=0 SLE=3868 SRE=3897 Frame 8321: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37552, Ack: 3807, Len: 0 No. Time Source Destination Protocol Length Info 8322 80.009493 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 8322: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8323 80.009525 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 8323: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8324 80.058981 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8324: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3897, Ack: 37552, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8325 80.059017 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 8319#2] rfb > xrl [ACK] Seq=37552 Ack=3807 Win=65535 Len=0 SLE=3868 SRE=3926 Frame 8325: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37552, Ack: 3807, Len: 0 No. Time Source Destination Protocol Length Info 8326 80.080889 192.168.10.142 192.168.10.185 VNC 83 [TCP Retransmission] Authentication result Frame 8326: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3807, Ack: 37552, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8327 80.182918 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8327: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3926, Ack: 37552, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8328 80.182954 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=37552 Ack=3836 Win=65506 Len=0 SLE=3868 SRE=3955 Frame 8328: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37552, Ack: 3836, Len: 0 No. Time Source Destination Protocol Length Info 8329 80.194927 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8329: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3955, Ack: 37552, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8330 80.194961 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 8328#1] rfb > xrl [ACK] Seq=37552 Ack=3836 Win=65506 Len=0 SLE=3868 SRE=3984 Frame 8330: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37552, Ack: 3836, Len: 0 No. Time Source Destination Protocol Length Info 8331 80.346540 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8331: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3984, Ack: 37552, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8332 80.346575 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 8328#2] rfb > xrl [ACK] Seq=37552 Ack=3836 Win=65506 Len=0 SLE=3868 SRE=4013 Frame 8332: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37552, Ack: 3836, Len: 0 No. Time Source Destination Protocol Length Info 8333 80.372037 192.168.10.142 192.168.10.185 VNC 86 [TCP Retransmission] Authentication result Frame 8333: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 3836, Ack: 37552, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 8334 80.372073 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=37552 Ack=4013 Win=65329 Len=0 Frame 8334: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37552, Ack: 4013, Len: 0 No. Time Source Destination Protocol Length Info 8335 80.375604 192.168.10.185 192.168.10.142 VNC 122 Authentication result Frame 8335: 122 bytes on wire (976 bits), 122 bytes captured (976 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37552, Ack: 4013, Len: 68 Virtual Network Computing No. Time Source Destination Protocol Length Info 8336 80.403252 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 8336: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4013, Ack: 37620, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 8337 80.411043 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8337: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4045, Ack: 37620, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8338 80.411077 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=37620 Ack=4074 Win=65268 Len=0 Frame 8338: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37620, Ack: 4074, Len: 0 No. Time Source Destination Protocol Length Info 8339 80.455038 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2930710784, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8339: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8340 80.455062 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2930710784, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8340: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8341 80.455076 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2930710784, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8341: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8342 80.455088 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2930710784, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8342: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8343 80.475575 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 504889600, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8343: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8344 80.475598 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 504889600, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8344: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8345 80.475611 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 504889600, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8345: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8346 80.475622 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 504889600, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8346: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8347 80.829960 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-11.geo.kaspersky.com Frame 8347: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 65416 (65416), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 8348 80.951104 192.168.10.142 192.168.10.185 VNC 83 [TCP Previous segment lost] Authentication result Frame 8348: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4103, Ack: 37620, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8349 80.951140 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 8338#1] rfb > xrl [ACK] Seq=37620 Ack=4074 Win=65268 Len=0 SLE=4103 SRE=4132 Frame 8349: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37620, Ack: 4074, Len: 0 No. Time Source Destination Protocol Length Info 8350 80.967659 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=6091 Ack=444849 Win=13828 Len=0 Frame 8350: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6091, Ack: 444849, Len: 0 No. Time Source Destination Protocol Length Info 8351 80.967690 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 8350#1] smtp > 23308 [ACK] Seq=6091 Ack=444849 Win=13828 Len=0 Frame 8351: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6091, Ack: 444849, Len: 0 No. Time Source Destination Protocol Length Info 8352 80.967723 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8352: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 445887, Ack: 6091, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8353 80.967752 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8353: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 447267, Ack: 6091, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8354 80.967782 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8354: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 448647, Ack: 6091, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8355 80.967811 206.225.164.186 192.168.10.207 SMTP 363 C: DATA fragment, 309 bytes Frame 8355: 363 bytes on wire (2904 bits), 363 bytes captured (2904 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 450027, Ack: 6091, Len: 309 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8356 80.967838 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8356: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 450336, Ack: 6091, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8357 80.967867 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8357: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 451716, Ack: 6091, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8358 80.967898 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8358: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 453096, Ack: 6091, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8359 80.967927 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8359: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 454476, Ack: 6091, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8360 80.967955 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 8350#2] smtp > 23308 [ACK] Seq=6091 Ack=444849 Win=13828 Len=0 Frame 8360: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6091, Ack: 444849, Len: 0 No. Time Source Destination Protocol Length Info 8361 80.967986 192.168.10.207 206.225.164.186 SMTP 306 S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 8361: 306 bytes on wire (2448 bits), 306 bytes captured (2448 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6091, Ack: 444849, Len: 252 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8362 80.968014 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=455856 Ack=6343 Win=46594 Len=0 Frame 8362: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 455856, Ack: 6343, Len: 0 No. Time Source Destination Protocol Length Info 8363 80.968042 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 8361#1] smtp > 23308 [ACK] Seq=6343 Ack=444849 Win=13828 Len=0 Frame 8363: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6343, Ack: 444849, Len: 0 No. Time Source Destination Protocol Length Info 8364 80.968070 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 8361#2] smtp > 23308 [ACK] Seq=6343 Ack=444849 Win=13828 Len=0 Frame 8364: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6343, Ack: 444849, Len: 0 No. Time Source Destination Protocol Length Info 8365 80.968098 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 8361#3] smtp > 23308 [ACK] Seq=6343 Ack=444849 Win=13828 Len=0 Frame 8365: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6343, Ack: 444849, Len: 0 No. Time Source Destination Protocol Length Info 8366 80.968128 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 8361#4] smtp > 23308 [ACK] Seq=6343 Ack=444849 Win=13828 Len=0 Frame 8366: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6343, Ack: 444849, Len: 0 No. Time Source Destination Protocol Length Info 8367 80.968156 206.225.164.186 192.168.10.207 SMTP 1092 [TCP Fast Retransmission] C: DATA fragment, 1038 bytes Frame 8367: 1092 bytes on wire (8736 bits), 1092 bytes captured (8736 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 444849, Ack: 6343, Len: 1038 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8368 80.968184 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 8361#5] smtp > 23308 [ACK] Seq=6343 Ack=444849 Win=13828 Len=0 Frame 8368: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6343, Ack: 444849, Len: 0 No. Time Source Destination Protocol Length Info 8369 80.968211 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 8361#6] smtp > 23308 [ACK] Seq=6343 Ack=444849 Win=13828 Len=0 Frame 8369: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6343, Ack: 444849, Len: 0 No. Time Source Destination Protocol Length Info 8370 80.968240 206.225.164.186 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 8370: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 445887, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8371 80.968268 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 8361#7] smtp > 23308 [ACK] Seq=6343 Ack=444849 Win=13828 Len=0 Frame 8371: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6343, Ack: 444849, Len: 0 No. Time Source Destination Protocol Length Info 8372 80.968299 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8372: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 455856, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8373 80.968329 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8373: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 457236, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8374 80.968365 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=6343 Ack=455856 Win=2821 Len=0 Frame 8374: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6343, Ack: 455856, Len: 0 No. Time Source Destination Protocol Length Info 8375 80.968392 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=6343 Ack=458616 Win=61 Len=0 Frame 8375: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6343, Ack: 458616, Len: 0 No. Time Source Destination Protocol Length Info 8376 81.004256 192.168.10.220 208.67.222.222 DNS 87 Standard query PTR 246.215.222.94.in-addr.arpa Frame 8376: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 50799 (50799), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 8377 81.011532 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8377: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4132, Ack: 37620, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8378 81.011571 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 8338#2] rfb > xrl [ACK] Seq=37620 Ack=4074 Win=65268 Len=0 SLE=4103 SRE=4161 Frame 8378: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37620, Ack: 4074, Len: 0 No. Time Source Destination Protocol Length Info 8379 81.033144 192.168.10.142 192.168.10.185 VNC 83 [TCP Retransmission] Authentication result Frame 8379: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4074, Ack: 37620, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8380 81.033179 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=37620 Ack=4161 Win=65181 Len=0 Frame 8380: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37620, Ack: 4161, Len: 0 No. Time Source Destination Protocol Length Info 8381 81.084415 192.168.10.185 192.168.10.142 VNC 112 Authentication result Frame 8381: 112 bytes on wire (896 bits), 112 bytes captured (896 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37620, Ack: 4161, Len: 58 Virtual Network Computing No. Time Source Destination Protocol Length Info 8382 81.109386 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 8382: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4161, Ack: 37678, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 8383 81.174404 208.67.222.222 192.168.10.220 DNS 140 Standard query response PTR dslb-094-222-215-246.pools.arcor-ip.net Frame 8383: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 50799 (50799) Domain Name System (response) No. Time Source Destination Protocol Length Info 8384 81.180291 Dell_44:d0:a0 Broadcast ARP 60 Gratuitous ARP for 192.168.0.120 (Reply) Frame 8384: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:a0 (84:2b:2b:44:d0:a0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply/gratuitous ARP) No. Time Source Destination Protocol Length Info 8385 81.180322 Dell_44:d0:a0 Broadcast ARP 60 Gratuitous ARP for 192.168.0.120 (Reply) Frame 8385: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:a0 (84:2b:2b:44:d0:a0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply/gratuitous ARP) No. Time Source Destination Protocol Length Info 8386 81.184987 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8386: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4193, Ack: 37678, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8387 81.185022 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=37678 Ack=4222 Win=65120 Len=0 Frame 8387: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37678, Ack: 4222, Len: 0 No. Time Source Destination Protocol Length Info 8388 81.193868 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 8388: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8389 81.196292 192.168.10.220 208.67.222.222 DNS 85 Standard query PTR 91.88.228.84.in-addr.arpa Frame 8389: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 55511 (55511), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 8390 81.235032 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8390: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4222, Ack: 37678, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8391 81.240563 192.168.10.185 192.168.10.142 VNC 114 Authentication result Frame 8391: 114 bytes on wire (912 bits), 114 bytes captured (912 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37678, Ack: 4251, Len: 60 Virtual Network Computing No. Time Source Destination Protocol Length Info 8392 81.256297 190.246.5.130 192.168.10.207 TCP 62 fcip-port > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 8392: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.246.5.130 (190.246.5.130), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: fcip-port (3225), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 8393 81.256361 192.168.10.207 190.246.5.130 TCP 62 smtp > fcip-port [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 8393: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.246.5.130 (190.246.5.130) Transmission Control Protocol, Src Port: smtp (25), Dst Port: fcip-port (3225), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 8394 81.262968 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 8394: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4251, Ack: 37738, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 8395 81.265404 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 8395: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8396 81.265436 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 8396: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8397 81.265477 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 8397: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8398 81.265487 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 8398: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8399 81.265501 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 8399: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8400 81.265511 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 8400: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8401 81.265521 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 8401: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8402 81.265532 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 8402: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8403 81.265544 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 8403: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8404 81.265554 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 8404: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8405 81.265596 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 8405: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8406 81.265610 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 8406: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8407 81.265627 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 8407: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8408 81.265661 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 8408: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8409 81.265672 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 8409: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8410 81.265681 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 8410: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8411 81.265708 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 8411: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8412 81.265718 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 8412: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8413 81.265737 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 8413: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8414 81.265747 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 8414: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8415 81.265757 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 8415: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8416 81.265767 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 8416: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8417 81.265777 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 8417: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8418 81.265787 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 8418: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8419 81.265797 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 8419: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8420 81.265807 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 8420: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8421 81.265817 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 8421: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8422 81.265827 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 8422: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8423 81.265838 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 8423: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8424 81.265848 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 8424: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8425 81.265858 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 8425: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8426 81.265868 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 8426: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8427 81.265882 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 8427: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8428 81.265896 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 8428: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8429 81.265906 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 8429: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8430 81.265916 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 8430: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8431 81.265926 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 8431: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8432 81.265937 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 8432: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8433 81.265951 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 8433: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8434 81.265961 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 8434: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8435 81.265971 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 8435: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8436 81.265981 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 8436: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8437 81.265991 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 8437: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8438 81.266002 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 8438: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8439 81.266012 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 8439: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8440 81.266022 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 8440: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8441 81.266035 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 8441: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8442 81.266050 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 8442: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8443 81.315318 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 8443: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8444 81.370516 192.168.10.207 206.225.164.188 SMTP 180 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 8444: 180 bytes on wire (1440 bits), 180 bytes captured (1440 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3571, Ack: 260806, Len: 126 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8445 81.370553 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=261197 Ack=3697 Win=46216 Len=0 Frame 8445: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 261197, Ack: 3697, Len: 0 No. Time Source Destination Protocol Length Info 8446 81.370584 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=3697 Ack=260806 Win=0 Len=0 Frame 8446: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3697, Ack: 260806, Len: 0 No. Time Source Destination Protocol Length Info 8447 81.399351 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8447: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4283, Ack: 37738, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8448 81.399387 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=37738 Ack=4312 Win=65030 Len=0 Frame 8448: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37738, Ack: 4312, Len: 0 No. Time Source Destination Protocol Length Info 8449 81.403950 208.67.222.222 192.168.10.220 DNS 129 Standard query response PTR IGLD-84-228-88-91.inter.net.il Frame 8449: 129 bytes on wire (1032 bits), 129 bytes captured (1032 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 55511 (55511) Domain Name System (response) No. Time Source Destination Protocol Length Info 8450 81.443571 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 8450: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8451 81.459631 192.168.10.185 192.168.10.142 VNC 117 Authentication result Frame 8451: 117 bytes on wire (936 bits), 117 bytes captured (936 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37738, Ack: 4312, Len: 63 Virtual Network Computing No. Time Source Destination Protocol Length Info 8452 81.467690 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8452: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4312, Ack: 37738, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8453 81.470656 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2947488000, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8453: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8454 81.470678 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2947488000, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8454: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8455 81.470691 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2947488000, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8455: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8456 81.470703 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2947488000, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8456: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8457 81.477303 190.246.5.130 192.168.10.207 TCP 60 fcip-port > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 8457: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.246.5.130 (190.246.5.130), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: fcip-port (3225), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 8458 81.477588 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:45:39 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.246.5.130 7x.x.x.3 3225 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 8458: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:45:39 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.246.5.130 7x.x.x.3 3225 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 8459 81.477622 192.168.10.207 190.246.5.130 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:45:14 -0400 Frame 8459: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.246.5.130 (190.246.5.130) Transmission Control Protocol, Src Port: smtp (25), Dst Port: fcip-port (3225), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8460 81.477667 190.246.5.130 192.168.10.207 TCP 60 fcip-port > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 8460: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.246.5.130 (190.246.5.130), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: fcip-port (3225), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 8461 81.477679 Watchgua_3c:4c:d8 SunrichT_19:cf:97 ARP 60 Who has 192.168.10.245? Tell 192.168.10.1 Frame 8461: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8462 81.477690 SunrichT_19:cf:97 Watchgua_3c:4c:d8 ARP 60 192.168.10.245 is at 00:0a:cd:19:cf:97 Frame 8462: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:97 (00:0a:cd:19:cf:97), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8463 81.480975 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 8463: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4341, Ack: 37801, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 8464 81.481007 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=37801 Ack=4373 Win=64969 Len=0 Frame 8464: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37801, Ack: 4373, Len: 0 No. Time Source Destination Protocol Length Info 8465 81.491216 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 521666816, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8465: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8466 81.491240 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 521666816, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8466: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8467 81.491252 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 521666816, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8467: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8468 81.491264 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 521666816, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8468: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8469 81.498192 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 8469: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6343, Ack: 458616, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8470 81.498225 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=458616 Ack=6385 Win=46573 Len=0 Frame 8470: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 458616, Ack: 6385, Len: 0 No. Time Source Destination Protocol Length Info 8471 81.500373 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 8471: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8472 81.500400 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 8472: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8473 81.533689 192.168.10.220 208.67.222.222 DNS 85 Standard query PTR 22.0.163.122.in-addr.arpa Frame 8473: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 55953 (55953), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 8474 81.565958 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 8474: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8475 81.655195 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8475: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4373, Ack: 37801, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8476 81.680519 192.168.10.31 192.168.10.255 UDP 778 Source port: 50764 Destination port: apc-3052 Frame 8476: 778 bytes on wire (6224 bits), 778 bytes captured (6224 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (736 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 34 39 3a 34 33 0a 53 52 3d 31 30 37 =19:49:43.SR=107 0060 43 0a 53 55 3d 32 44 38 32 44 35 44 31 0a 52 44 C.SU=2D82D5D1.RD 0070 3d 31 42 30 31 0a 54 41 3d 31 39 32 2e 31 36 38 =1B01.TA=192.168 0080 2e 31 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d .10.255.UC=1.SD= 0090 30 0a 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 0.SM=2.4F=208.2. 00a0 35 31 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 51=08.7E=00.3E=0 00b0 30 32 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 02.4C=207.3.50=0 00c0 33 35 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 35.0.43=028.5.78 00d0 3d 31 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 =11/19/07.6A=005 00e0 37 3a 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 7:.47=S.63=UPS_I 00f0 44 45 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d DEN.66=100.0.58= 0100 4e 4f 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a NO.56=5YW.39=FF. 0110 32 37 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 27=00.38=00.6E=I 0120 53 30 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 S0746005443 .6D 0130 3d 31 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 =11/19/07.01=Sma 0140 72 74 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 rt-UPS RT 10000 0150 58 4c 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 XL .46=60.00.4 0160 44 3d 32 30 38 2e 38 0a 34 45 3d 32 30 37 2e 33 D=208.8.4E=207.3 0170 0a 34 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 .45=336.75=229.6 0180 43 3d 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 C=146.65=00.6F=2 0190 30 38 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 08.71=02.70=020. 01a0 37 32 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 72=000.42=217.0. 01b0 36 37 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 67=192.62=476.17 01c0 2e 57 0a 35 43 3d 30 32 39 2e 30 0a 32 46 3d 31 .W.5C=029.0.2F=1 01d0 33 2e 37 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 3.77.16=A.05=000 01e0 30 30 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 00000.09=60.00;2 01f0 30 37 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 07.3.6B=0.81E2=A 0200 55 54 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 UTO .MC=1.E0=0.E 0210 31 3d 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 1=0.E2=0.E3=0.E8 0220 3d 30 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d =0.E9=0.I0=2.I1= 0230 30 30 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 00.I2=01.I3=0.I4 0240 3d 30 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d =0.I5=0.I6=0.I7= 0250 30 0a 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 0.I8=Int Contact 0260 20 31 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 1.I9=0.IA=Int C 0270 6f 6e 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 ontact 2.IB=0.IC 0280 3d 49 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a =Int Relay.ID=0. 0290 53 48 3d 30 32 44 42 38 31 36 30 43 34 41 34 33 SH=02DB8160C4A43 02a0 30 30 39 42 38 41 46 34 42 39 36 31 43 36 43 36 009B8AF4B961C6C6 02b0 43 36 45 0a 4d 44 3d 34 32 34 38 32 36 33 36 37 C6E.MD=424826367 02c0 37 35 66 62 36 65 38 31 36 39 33 33 36 62 63 36 75fb6e8169336bc6 02d0 38 62 62 63 38 64 32 0a 3c 2f 42 4f 44 59 3e 0a 8bbc8d2.</BODY>. No. Time Source Destination Protocol Length Info 8477 81.680669 192.168.10.31 192.168.10.255 UDP 778 Source port: 50764 Destination port: apc-3052 Frame 8477: 778 bytes on wire (6224 bits), 778 bytes captured (6224 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (736 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 34 39 3a 34 33 0a 53 52 3d 31 30 37 =19:49:43.SR=107 0060 43 0a 53 55 3d 32 44 38 32 44 35 44 31 0a 52 44 C.SU=2D82D5D1.RD 0070 3d 31 42 30 31 0a 54 41 3d 31 39 32 2e 31 36 38 =1B01.TA=192.168 0080 2e 31 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d .10.255.UC=1.SD= 0090 30 0a 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 0.SM=2.4F=208.2. 00a0 35 31 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 51=08.7E=00.3E=0 00b0 30 32 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 02.4C=207.3.50=0 00c0 33 35 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 35.0.43=028.5.78 00d0 3d 31 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 =11/19/07.6A=005 00e0 37 3a 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 7:.47=S.63=UPS_I 00f0 44 45 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d DEN.66=100.0.58= 0100 4e 4f 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a NO.56=5YW.39=FF. 0110 32 37 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 27=00.38=00.6E=I 0120 53 30 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 S0746005443 .6D 0130 3d 31 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 =11/19/07.01=Sma 0140 72 74 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 rt-UPS RT 10000 0150 58 4c 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 XL .46=60.00.4 0160 44 3d 32 30 38 2e 38 0a 34 45 3d 32 30 37 2e 33 D=208.8.4E=207.3 0170 0a 34 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 .45=336.75=229.6 0180 43 3d 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 C=146.65=00.6F=2 0190 30 38 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 08.71=02.70=020. 01a0 37 32 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 72=000.42=217.0. 01b0 36 37 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 67=192.62=476.17 01c0 2e 57 0a 35 43 3d 30 32 39 2e 30 0a 32 46 3d 31 .W.5C=029.0.2F=1 01d0 33 2e 37 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 3.77.16=A.05=000 01e0 30 30 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 00000.09=60.00;2 01f0 30 37 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 07.3.6B=0.81E2=A 0200 55 54 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 UTO .MC=1.E0=0.E 0210 31 3d 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 1=0.E2=0.E3=0.E8 0220 3d 30 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d =0.E9=0.I0=2.I1= 0230 30 30 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 00.I2=01.I3=0.I4 0240 3d 30 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d =0.I5=0.I6=0.I7= 0250 30 0a 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 0.I8=Int Contact 0260 20 31 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 1.I9=0.IA=Int C 0270 6f 6e 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 ontact 2.IB=0.IC 0280 3d 49 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a =Int Relay.ID=0. 0290 53 48 3d 30 32 44 42 38 31 36 30 43 34 41 34 33 SH=02DB8160C4A43 02a0 30 30 39 42 38 41 46 34 42 39 36 31 43 36 43 36 009B8AF4B961C6C6 02b0 43 36 45 0a 4d 44 3d 34 32 34 38 32 36 33 36 37 C6E.MD=424826367 02c0 37 35 66 62 36 65 38 31 36 39 33 33 36 62 63 36 75fb6e8169336bc6 02d0 38 62 62 63 38 64 32 0a 3c 2f 42 4f 44 59 3e 0a 8bbc8d2.</BODY>. No. Time Source Destination Protocol Length Info 8478 81.709373 192.168.10.185 192.168.10.142 VNC 114 Authentication result Frame 8478: 114 bytes on wire (912 bits), 114 bytes captured (912 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37801, Ack: 4402, Len: 60 Virtual Network Computing No. Time Source Destination Protocol Length Info 8479 81.717152 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8479: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4402, Ack: 37801, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8480 81.734133 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 8480: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4431, Ack: 37861, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 8481 81.734169 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=37861 Ack=4463 Win=64879 Len=0 Frame 8481: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37861, Ack: 4463, Len: 0 No. Time Source Destination Protocol Length Info 8482 81.829313 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8482: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4463, Ack: 37861, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8483 81.829954 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-11.geo.kaspersky.com Frame 8483: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 65416 (65416), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 8484 81.882575 192.168.10.185 192.168.10.142 VNC 117 Authentication result Frame 8484: 117 bytes on wire (936 bits), 117 bytes captured (936 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37861, Ack: 4492, Len: 63 Virtual Network Computing No. Time Source Destination Protocol Length Info 8485 81.901043 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8485: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4492, Ack: 37861, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8486 81.907534 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 8486: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4521, Ack: 37924, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 8487 81.907567 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=37924 Ack=4553 Win=64789 Len=0 Frame 8487: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37924, Ack: 4553, Len: 0 No. Time Source Destination Protocol Length Info 8488 82.015079 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 8488: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8489 82.015113 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 8489: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8490 82.030514 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 8490: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6385, Ack: 458616, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8491 82.030552 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=458616 Ack=6427 Win=46552 Len=0 Frame 8491: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 458616, Ack: 6427, Len: 0 No. Time Source Destination Protocol Length Info 8492 82.486314 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2964265216, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8492: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8493 82.486339 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2964265216, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8493: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8494 82.486352 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2964265216, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8494: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8495 82.486364 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2964265216, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8495: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8496 82.506883 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 538444032, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8496: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8497 82.506903 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 538444032, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8497: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8498 82.506915 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 538444032, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8498: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8499 82.506927 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 538444032, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8499: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8500 82.533753 192.168.10.246 65.32.1.65 DNS 85 Standard query PTR 22.0.163.122.in-addr.arpa Frame 8500: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 63455 (63455), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 8501 82.566612 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 8501: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6427, Ack: 458616, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8502 82.566646 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=458616 Ack=6469 Win=46531 Len=0 Frame 8502: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 458616, Ack: 6469, Len: 0 No. Time Source Destination Protocol Length Info 8503 82.676981 208.67.222.222 192.168.10.220 DNS 150 Standard query response PTR ABTS-North-Dynamic-022.0.163.122.airtelbroadband.in Frame 8503: 150 bytes on wire (1200 bits), 150 bytes captured (1200 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 55953 (55953) Domain Name System (response) No. Time Source Destination Protocol Length Info 8504 82.808611 192.168.10.220 208.67.222.222 DNS 86 Standard query PTR 243.179.98.94.in-addr.arpa Frame 8504: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 51039 (51039), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 8505 82.959306 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8505: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4553, Ack: 37924, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8506 83.008950 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 8506: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8507 83.008983 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 8507: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8508 83.022015 192.168.10.185 192.168.10.142 VNC 113 Authentication result Frame 8508: 113 bytes on wire (904 bits), 113 bytes captured (904 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37924, Ack: 4582, Len: 59 Virtual Network Computing No. Time Source Destination Protocol Length Info 8509 83.030622 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8509: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4582, Ack: 37924, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8510 83.043328 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 8510: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4611, Ack: 37983, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 8511 83.043363 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=37983 Ack=4643 Win=64699 Len=0 Frame 8511: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37983, Ack: 4643, Len: 0 No. Time Source Destination Protocol Length Info 8512 83.043532 208.67.222.222 192.168.10.220 DNS 86 Standard query response, No such name Frame 8512: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 51039 (51039) Domain Name System (response) No. Time Source Destination Protocol Length Info 8513 83.044153 192.168.10.203 94.98.179.243 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 8513: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 94.98.179.243 (94.98.179.243) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 8514 83.085452 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8514: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4643, Ack: 37983, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8515 83.093518 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 8515: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6469, Ack: 458616, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8516 83.093554 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=458616 Ack=6511 Win=46510 Len=0 Frame 8516: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 458616, Ack: 6511, Len: 0 No. Time Source Destination Protocol Length Info 8517 83.093830 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=6511 Ack=458616 Win=51768 Len=0 Frame 8517: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6511, Ack: 458616, Len: 0 No. Time Source Destination Protocol Length Info 8518 83.093862 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 8517#1] smtp > 23308 [ACK] Seq=6511 Ack=458616 Win=51768 Len=0 Frame 8518: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6511, Ack: 458616, Len: 0 No. Time Source Destination Protocol Length Info 8519 83.093891 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8519: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 458616, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8520 83.093924 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8520: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 459996, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8521 83.093953 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8521: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 461376, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8522 83.093982 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8522: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 462756, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8523 83.094012 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8523: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 464136, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8524 83.094046 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=6511 Ack=464136 Win=46248 Len=0 Frame 8524: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6511, Ack: 464136, Len: 0 No. Time Source Destination Protocol Length Info 8525 83.094094 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8525: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 465516, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8526 83.094127 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8526: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 466896, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8527 83.094157 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8527: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 468276, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8528 83.094187 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8528: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 469656, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8529 83.094216 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=6511 Ack=466896 Win=43488 Len=0 Frame 8529: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6511, Ack: 466896, Len: 0 No. Time Source Destination Protocol Length Info 8530 83.094246 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=6511 Ack=469656 Win=40728 Len=0 Frame 8530: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6511, Ack: 469656, Len: 0 No. Time Source Destination Protocol Length Info 8531 83.094274 206.225.164.186 192.168.10.207 SMTP 392 C: DATA fragment, 338 bytes Frame 8531: 392 bytes on wire (3136 bits), 392 bytes captured (3136 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 471036, Ack: 6511, Len: 338 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8532 83.094313 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8532: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 471374, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8533 83.094343 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8533: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 472754, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8534 83.094376 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8534: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 474134, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8535 83.094405 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8535: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 475514, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8536 83.094434 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=6511 Ack=471374 Win=39010 Len=0 Frame 8536: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6511, Ack: 471374, Len: 0 No. Time Source Destination Protocol Length Info 8537 83.094464 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=6511 Ack=475514 Win=34870 Len=0 Frame 8537: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6511, Ack: 475514, Len: 0 No. Time Source Destination Protocol Length Info 8538 83.094493 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8538: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 476894, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8539 83.094521 206.225.164.186 192.168.10.207 SMTP 583 C: DATA fragment, 529 bytes Frame 8539: 583 bytes on wire (4664 bits), 583 bytes captured (4664 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 478274, Ack: 6511, Len: 529 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8540 83.094553 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8540: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 478803, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8541 83.094583 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8541: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 480183, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8542 83.094612 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=6511 Ack=478803 Win=31581 Len=0 Frame 8542: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6511, Ack: 478803, Len: 0 No. Time Source Destination Protocol Length Info 8543 83.094641 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8543: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 481563, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8544 83.094670 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8544: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 482943, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8545 83.094703 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8545: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 484323, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8546 83.094731 206.225.164.186 192.168.10.207 SMTP 933 C: DATA fragment, 879 bytes Frame 8546: 933 bytes on wire (7464 bits), 933 bytes captured (7464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 485703, Ack: 6511, Len: 879 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8547 83.094760 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=6511 Ack=481563 Win=28821 Len=0 Frame 8547: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6511, Ack: 481563, Len: 0 No. Time Source Destination Protocol Length Info 8548 83.094788 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8548: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 486582, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8549 83.094816 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=6511 Ack=485703 Win=24681 Len=0 Frame 8549: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6511, Ack: 485703, Len: 0 No. Time Source Destination Protocol Length Info 8550 83.094845 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8550: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 487962, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8551 83.094878 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8551: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 489342, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8552 83.094907 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8552: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 490722, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8553 83.094936 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=6511 Ack=489342 Win=21042 Len=0 Frame 8553: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6511, Ack: 489342, Len: 0 No. Time Source Destination Protocol Length Info 8554 83.094965 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8554: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 492102, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8555 83.094995 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8555: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 493482, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8556 83.095024 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8556: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 494862, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8557 83.095054 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8557: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 496242, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8558 83.095083 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=6511 Ack=493482 Win=16902 Len=0 Frame 8558: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6511, Ack: 493482, Len: 0 No. Time Source Destination Protocol Length Info 8559 83.095114 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8559: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 497622, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8560 83.095143 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8560: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 499002, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8561 83.095173 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8561: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 500382, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8562 83.095202 206.225.164.186 192.168.10.207 SMTP 359 C: DATA fragment, 305 bytes Frame 8562: 359 bytes on wire (2872 bits), 359 bytes captured (2872 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 501762, Ack: 6511, Len: 305 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8563 83.095230 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=6511 Ack=496242 Win=14142 Len=0 Frame 8563: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6511, Ack: 496242, Len: 0 No. Time Source Destination Protocol Length Info 8564 83.095259 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8564: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 502067, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8565 83.095296 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8565: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 503447, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8566 83.095325 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=6511 Ack=502067 Win=8317 Len=0 Frame 8566: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6511, Ack: 502067, Len: 0 No. Time Source Destination Protocol Length Info 8567 83.095357 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8567: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 504827, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8568 83.095386 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8568: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 506207, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8569 83.095415 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=6511 Ack=504827 Win=5557 Len=0 Frame 8569: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6511, Ack: 504827, Len: 0 No. Time Source Destination Protocol Length Info 8570 83.095443 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8570: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 507587, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8571 83.095472 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8571: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 508967, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8572 83.095502 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 8572: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 510347, Ack: 6511, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8573 83.095530 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=6511 Ack=508967 Win=1417 Len=0 Frame 8573: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6511, Ack: 508967, Len: 0 No. Time Source Destination Protocol Length Info 8574 83.095557 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=6511 Ack=510384 Win=0 Len=0 Frame 8574: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6511, Ack: 510384, Len: 0 No. Time Source Destination Protocol Length Info 8575 83.141318 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8575: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4672, Ack: 37983, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8576 83.141354 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=37983 Ack=4701 Win=64641 Len=0 Frame 8576: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37983, Ack: 4701, Len: 0 No. Time Source Destination Protocol Length Info 8577 83.146910 192.168.10.185 192.168.10.142 VNC 116 Authentication result Frame 8577: 116 bytes on wire (928 bits), 116 bytes captured (928 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 37983, Ack: 4701, Len: 62 Virtual Network Computing No. Time Source Destination Protocol Length Info 8578 83.171945 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 8578: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4701, Ack: 38045, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 8579 83.196473 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 8579: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8580 83.218413 65.32.1.65 192.168.10.246 DNS 150 Standard query response PTR ABTS-North-Dynamic-022.0.163.122.airtelbroadband.in Frame 8580: 150 bytes on wire (1200 bits), 150 bytes captured (1200 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 63455 (63455) Domain Name System (response) No. Time Source Destination Protocol Length Info 8581 83.302631 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=38045 Ack=4733 Win=64609 Len=0 Frame 8581: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 38045, Ack: 4733, Len: 0 No. Time Source Destination Protocol Length Info 8582 83.315320 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 8582: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8583 83.399577 WwPcbaTe_6d:76:3c Broadcast ARP 60 Who has 192.168.10.21? Tell 192.168.10.201 Frame 8583: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8584 83.399608 WwPcbaTe_6d:76:3c Broadcast ARP 60 Who has 192.168.10.21? Tell 192.168.10.201 Frame 8584: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8585 83.399624 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 8585: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8586 83.399639 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 8586: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8587 83.399656 WwPcbaTe_6d:76:3c Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.201 Frame 8587: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8588 83.399723 Watchgua_3c:4c:d8 WwPcbaTe_6d:76:3c ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 8588: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8589 83.443601 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 8589: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8590 83.495365 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8590: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4733, Ack: 38045, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8591 83.498648 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 8591: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8592 83.498677 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 8592: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8593 83.502050 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2981042432, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8593: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8594 83.502069 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2981042432, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8594: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8595 83.502082 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2981042432, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8595: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8596 83.502094 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2981042432, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8596: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8597 83.522537 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 555221248, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8597: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8598 83.522560 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 555221248, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8598: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8599 83.522573 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 555221248, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8599: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8600 83.522586 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 555221248, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8600: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8601 83.543338 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 8601: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4762, Ack: 38045, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 8602 83.543376 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=38045 Ack=4791 Win=64551 Len=0 Frame 8602: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 38045, Ack: 4791, Len: 0 No. Time Source Destination Protocol Length Info 8603 83.551488 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8603: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 38045, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8604 83.551523 192.168.10.185 192.168.10.142 VNC 117 Authentication result Frame 8604: 117 bytes on wire (936 bits), 117 bytes captured (936 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 39305, Ack: 4791, Len: 63 Virtual Network Computing No. Time Source Destination Protocol Length Info 8605 83.566246 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 8605: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8606 83.575301 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4791 Ack=39368 Win=64240 Len=0 Frame 8606: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4791, Ack: 39368, Len: 0 No. Time Source Destination Protocol Length Info 8607 83.589592 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8607: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 39368, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8608 83.589627 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8608: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 40628, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8609 83.589657 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8609: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 41888, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8610 83.589686 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 8610: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 43148, Ack: 4791, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 8611 83.589714 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8611: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 43464, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8612 83.589747 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8612: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 44724, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8613 83.589784 192.168.10.185 192.168.10.142 VNC 60 Authentication result[Malformed Packet] Frame 8613: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 45984, Ack: 4791, Len: 2 Virtual Network Computing [Malformed Packet: VNC] No. Time Source Destination Protocol Length Info 8614 83.589823 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8614: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 45986, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8615 83.589855 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8615: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 47246, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8616 83.589885 192.168.10.185 192.168.10.142 VNC 609 Authentication result Frame 8616: 609 bytes on wire (4872 bits), 609 bytes captured (4872 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 48506, Ack: 4791, Len: 555 Virtual Network Computing No. Time Source Destination Protocol Length Info 8617 83.618434 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4791 Ack=41888 Win=64240 Len=0 Frame 8617: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4791, Ack: 41888, Len: 0 No. Time Source Destination Protocol Length Info 8618 83.621529 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4791 Ack=43148 Win=64240 Len=0 Frame 8618: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4791, Ack: 43148, Len: 0 No. Time Source Destination Protocol Length Info 8619 83.621605 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4791 Ack=44724 Win=64240 Len=0 Frame 8619: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4791, Ack: 44724, Len: 0 No. Time Source Destination Protocol Length Info 8620 83.621652 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4791 Ack=45986 Win=64240 Len=0 Frame 8620: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4791, Ack: 45986, Len: 0 No. Time Source Destination Protocol Length Info 8621 83.621723 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4791 Ack=48506 Win=64240 Len=0 Frame 8621: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4791, Ack: 48506, Len: 0 No. Time Source Destination Protocol Length Info 8622 83.623672 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 8622: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6511, Ack: 510384, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8623 83.623704 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=511727 Ack=6553 Win=46489 Len=0 Frame 8623: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 511727, Ack: 6553, Len: 0 No. Time Source Destination Protocol Length Info 8624 83.623734 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=6553 Ack=510384 Win=0 Len=0 Frame 8624: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6553, Ack: 510384, Len: 0 No. Time Source Destination Protocol Length Info 8625 83.662847 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8625: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 49061, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8626 83.662881 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8626: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 50321, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8627 83.662911 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8627: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 51581, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8628 83.662943 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 8628: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 52841, Ack: 4791, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 8629 83.662972 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8629: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 53157, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8630 83.663002 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8630: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 54417, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8631 83.663031 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8631: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 55677, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8632 83.663060 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 8632: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 56937, Ack: 4791, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 8633 83.692345 192.168.10.185 192.168.10.255 NBNS 92 Name query NB ZEUS<20> Frame 8633: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 8634 83.692557 192.168.10.185 192.168.10.255 NBNS 92 Name query NB ZEUS<20> Frame 8634: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 8635 83.692663 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.222? Tell 192.168.10.185 Frame 8635: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8636 83.692680 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.222? Tell 192.168.10.185 Frame 8636: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8637 83.692693 Dell_55:3b:5b Broadcast ARP 60 Who has 192.168.10.1? Tell 192.168.10.222 Frame 8637: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_55:3b:5b (00:24:e8:55:3b:5b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8638 83.692709 Dell_55:3b:5b Broadcast ARP 60 Who has 192.168.10.1? Tell 192.168.10.222 Frame 8638: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_55:3b:5b (00:24:e8:55:3b:5b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8639 83.692722 Dell_55:3b:5b Cisco_bb:96:6d ARP 64 Who has 192.168.10.46? Tell 192.168.10.222 Frame 8639: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_55:3b:5b (00:24:e8:55:3b:5b), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8640 83.692736 Watchgua_3c:4c:d8 Dell_55:3b:5b ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 8640: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_55:3b:5b (00:24:e8:55:3b:5b) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8641 83.692747 Dell_55:3b:5b Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.222 Frame 8641: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_55:3b:5b (00:24:e8:55:3b:5b), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8642 83.692757 Watchgua_3c:4c:d8 Dell_55:3b:59 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 8642: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_55:3b:59 (00:24:e8:55:3b:59) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8643 83.692836 192.168.10.222 192.168.80.1 TCP 62 netbios-ssn > ccmad [SYN, ACK] Seq=0 Ack=0 Win=16384 Len=0 MSS=1460 SACK_PERM=1 Frame 8643: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_55:3b:5b (00:24:e8:55:3b:5b), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.222 (192.168.10.222), Dst: 192.168.80.1 (192.168.80.1) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ccmad (3114), Seq: 0, Ack: 0, Len: 0 No. Time Source Destination Protocol Length Info 8644 83.692852 Cisco_bb:96:6d Dell_55:3b:59 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 8644: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_55:3b:59 (00:24:e8:55:3b:59) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8645 83.692863 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 8645: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8646 83.692880 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 8646: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8647 83.698707 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4791 Ack=50321 Win=64240 Len=0 Frame 8647: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4791, Ack: 50321, Len: 0 No. Time Source Destination Protocol Length Info 8648 83.707272 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4791 Ack=52841 Win=64240 Len=0 Frame 8648: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4791, Ack: 52841, Len: 0 No. Time Source Destination Protocol Length Info 8649 83.711563 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4791 Ack=56937 Win=64240 Len=0 Frame 8649: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4791, Ack: 56937, Len: 0 No. Time Source Destination Protocol Length Info 8650 83.711663 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8650: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 57253, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8651 83.711694 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8651: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 58513, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8652 83.711724 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8652: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 59773, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8653 83.711755 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 8653: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 61033, Ack: 4791, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 8654 83.735749 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4791 Ack=58513 Win=64240 Len=0 Frame 8654: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4791, Ack: 58513, Len: 0 No. Time Source Destination Protocol Length Info 8655 83.735818 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8655: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 61349, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8656 83.735853 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8656: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 62609, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8657 83.735887 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8657: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 63869, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8658 83.735933 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 8658: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 65129, Ack: 4791, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 8659 83.741275 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4791 Ack=61033 Win=64240 Len=0 Frame 8659: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4791, Ack: 61033, Len: 0 No. Time Source Destination Protocol Length Info 8660 83.761261 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4791 Ack=62609 Win=64240 Len=0 Frame 8660: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4791, Ack: 62609, Len: 0 No. Time Source Destination Protocol Length Info 8661 83.761326 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8661: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 65445, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8662 83.761360 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8662: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 66705, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8663 83.761390 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8663: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 67965, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8664 83.761419 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 8664: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 69225, Ack: 4791, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 8665 83.765186 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4791 Ack=65129 Win=64240 Len=0 Frame 8665: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4791, Ack: 65129, Len: 0 No. Time Source Destination Protocol Length Info 8666 83.785699 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4791 Ack=66705 Win=64240 Len=0 Frame 8666: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4791, Ack: 66705, Len: 0 No. Time Source Destination Protocol Length Info 8667 83.785780 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8667: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 69541, Ack: 4791, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8668 83.785811 192.168.10.185 192.168.10.142 VNC 785 Authentication result Frame 8668: 785 bytes on wire (6280 bits), 785 bytes captured (6280 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 70801, Ack: 4791, Len: 731 Virtual Network Computing No. Time Source Destination Protocol Length Info 8669 83.792875 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4791 Ack=69225 Win=64240 Len=0 Frame 8669: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4791, Ack: 69225, Len: 0 No. Time Source Destination Protocol Length Info 8670 83.817304 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4791 Ack=70801 Win=64240 Len=0 Frame 8670: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4791, Ack: 70801, Len: 0 No. Time Source Destination Protocol Length Info 8671 83.821616 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 8671: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4791, Ack: 71532, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 8672 83.822184 192.168.10.185 192.168.10.142 VNC 386 Authentication result Frame 8672: 386 bytes on wire (3088 bits), 386 bytes captured (3088 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 71532, Ack: 4823, Len: 332 Virtual Network Computing No. Time Source Destination Protocol Length Info 8673 83.829940 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-11.geo.kaspersky.com Frame 8673: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 65416 (65416), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 8674 83.830116 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-11.geo.kaspersky.com Frame 8674: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 65416 (65416), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 8675 83.845594 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 8675: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4823, Ack: 71864, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 8676 83.868688 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8676: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 71864, Ack: 4855, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8677 83.868727 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8677: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 73124, Ack: 4855, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8678 83.868762 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8678: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 74384, Ack: 4855, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8679 83.868790 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 8679: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 75644, Ack: 4855, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 8680 83.868818 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8680: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 75960, Ack: 4855, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8681 83.868848 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8681: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 77220, Ack: 4855, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8682 83.868876 192.168.10.185 192.168.10.142 VNC 60 Authentication result[Malformed Packet] Frame 8682: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 78480, Ack: 4855, Len: 2 Virtual Network Computing [Malformed Packet: VNC] No. Time Source Destination Protocol Length Info 8683 83.872232 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8683: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 78482, Ack: 4855, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8684 83.872269 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8684: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 79742, Ack: 4855, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8685 83.872299 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8685: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 81002, Ack: 4855, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8686 83.872328 192.168.10.185 192.168.10.142 VNC 593 Authentication result Frame 8686: 593 bytes on wire (4744 bits), 593 bytes captured (4744 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 82262, Ack: 4855, Len: 539 Virtual Network Computing No. Time Source Destination Protocol Length Info 8687 83.895216 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4855 Ack=74384 Win=64240 Len=0 Frame 8687: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4855, Ack: 74384, Len: 0 No. Time Source Destination Protocol Length Info 8688 83.907168 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4855 Ack=75644 Win=64240 Len=0 Frame 8688: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4855, Ack: 75644, Len: 0 No. Time Source Destination Protocol Length Info 8689 83.911510 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4855 Ack=77220 Win=64240 Len=0 Frame 8689: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4855, Ack: 77220, Len: 0 No. Time Source Destination Protocol Length Info 8690 83.911610 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8690: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 82801, Ack: 4855, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8691 83.911640 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8691: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 84061, Ack: 4855, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8692 83.911669 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8692: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 85321, Ack: 4855, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8693 83.911706 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 8693: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 86581, Ack: 4855, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 8694 83.911745 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4855 Ack=78482 Win=64240 Len=0 Frame 8694: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4855, Ack: 78482, Len: 0 No. Time Source Destination Protocol Length Info 8695 83.911780 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4855 Ack=81002 Win=64240 Len=0 Frame 8695: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4855, Ack: 81002, Len: 0 No. Time Source Destination Protocol Length Info 8696 83.912116 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4855 Ack=82801 Win=64240 Len=0 Frame 8696: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4855, Ack: 82801, Len: 0 No. Time Source Destination Protocol Length Info 8697 83.912207 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8697: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 86897, Ack: 4855, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8698 83.912239 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8698: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 88157, Ack: 4855, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8699 83.912268 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8699: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 89417, Ack: 4855, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8700 83.912297 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 8700: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 90677, Ack: 4855, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 8701 83.943261 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4855 Ack=85321 Win=64240 Len=0 Frame 8701: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4855, Ack: 85321, Len: 0 No. Time Source Destination Protocol Length Info 8702 83.947402 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4855 Ack=86581 Win=64240 Len=0 Frame 8702: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4855, Ack: 86581, Len: 0 No. Time Source Destination Protocol Length Info 8703 83.947527 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4855 Ack=88157 Win=64240 Len=0 Frame 8703: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4855, Ack: 88157, Len: 0 No. Time Source Destination Protocol Length Info 8704 83.947566 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4855 Ack=90677 Win=64240 Len=0 Frame 8704: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4855, Ack: 90677, Len: 0 No. Time Source Destination Protocol Length Info 8705 83.947631 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8705: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 90993, Ack: 4855, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8706 83.947662 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8706: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 92253, Ack: 4855, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8707 83.947691 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8707: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 93513, Ack: 4855, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8708 83.947719 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 8708: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 94773, Ack: 4855, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 8709 83.973409 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4855 Ack=92253 Win=64240 Len=0 Frame 8709: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4855, Ack: 92253, Len: 0 No. Time Source Destination Protocol Length Info 8710 83.973499 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8710: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 95089, Ack: 4855, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8711 83.973531 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8711: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 96349, Ack: 4855, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8712 83.973560 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8712: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 97609, Ack: 4855, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8713 83.973591 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 8713: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 98869, Ack: 4855, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 8714 83.981397 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4855 Ack=94773 Win=64240 Len=0 Frame 8714: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4855, Ack: 94773, Len: 0 No. Time Source Destination Protocol Length Info 8715 83.993838 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 8445#1] 9428 > smtp [ACK] Seq=261197 Ack=3697 Win=46216 Len=0 Frame 8715: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 261197, Ack: 3697, Len: 0 No. Time Source Destination Protocol Length Info 8716 83.993870 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=3697 Ack=260806 Win=0 Len=0 Frame 8716: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3697, Ack: 260806, Len: 0 No. Time Source Destination Protocol Length Info 8717 84.005979 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 8717: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8718 84.006010 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 8718: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8719 84.009506 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4855 Ack=96349 Win=64240 Len=0 Frame 8719: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4855, Ack: 96349, Len: 0 No. Time Source Destination Protocol Length Info 8720 84.009541 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8720: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 99185, Ack: 4855, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8721 84.009574 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8721: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 100445, Ack: 4855, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8722 84.009603 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8722: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 101705, Ack: 4855, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8723 84.009631 192.168.10.185 192.168.10.142 VNC 201 Authentication result Frame 8723: 201 bytes on wire (1608 bits), 201 bytes captured (1608 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 102965, Ack: 4855, Len: 147 Virtual Network Computing No. Time Source Destination Protocol Length Info 8724 84.033329 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4855 Ack=100445 Win=64240 Len=0 Frame 8724: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4855, Ack: 100445, Len: 0 No. Time Source Destination Protocol Length Info 8725 84.042169 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4855 Ack=102965 Win=64240 Len=0 Frame 8725: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4855, Ack: 102965, Len: 0 No. Time Source Destination Protocol Length Info 8726 84.045578 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 8726: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4855, Ack: 103112, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 8727 84.126822 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 8727: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 103112, Ack: 4887, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 8728 84.126858 192.168.10.185 192.168.10.142 VNC 407 Authentication result Frame 8728: 407 bytes on wire (3256 bits), 407 bytes captured (3256 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 104372, Ack: 4887, Len: 353 Virtual Network Computing No. Time Source Destination Protocol Length Info 8729 84.149783 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=4887 Ack=104725 Win=64240 Len=0 Frame 8729: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4887, Ack: 104725, Len: 0 No. Time Source Destination Protocol Length Info 8730 84.153302 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 8730: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4887, Ack: 104725, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 8731 84.287044 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=104725 Ack=4919 Win=64423 Len=0 Frame 8731: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 104725, Ack: 4919, Len: 0 No. Time Source Destination Protocol Length Info 8732 84.417925 WwPcbaTe_6d:76:3c Broadcast ARP 60 Who has 192.168.10.26? Tell 192.168.10.201 Frame 8732: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8733 84.417957 WwPcbaTe_6d:76:3c Broadcast ARP 60 Who has 192.168.10.26? Tell 192.168.10.201 Frame 8733: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8734 84.418161 WwPcbaTe_6d:76:3c Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.201 Frame 8734: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8735 84.418171 Watchgua_3c:4c:d8 WwPcbaTe_6d:76:3c ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 8735: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8736 84.423978 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 4 Port 48 TTL = 120 Frame 8736: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 8737 84.495925 192.168.10.207 206.225.164.188 SMTP 306 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 8737: 306 bytes on wire (2448 bits), 306 bytes captured (2448 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3571, Ack: 260806, Len: 252 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8738 84.495960 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=261197 Ack=3823 Win=46153 Len=0 Frame 8738: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 261197, Ack: 3823, Len: 0 No. Time Source Destination Protocol Length Info 8739 84.495988 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=3823 Ack=260806 Win=0 Len=0 Frame 8739: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3823, Ack: 260806, Len: 0 No. Time Source Destination Protocol Length Info 8740 84.517677 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2997819648, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8740: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8741 84.517700 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 2997819648, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8741: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8742 84.517713 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2997819648, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8742: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8743 84.517725 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 2997819648, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8743: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8744 84.538137 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 571998464, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8744: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8745 84.538155 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 571998464, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8745: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8746 84.538167 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 571998464, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8746: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8747 84.538182 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 571998464, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8747: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8748 84.544208 192.168.10.203 94.98.179.243 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 8748: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 94.98.179.243 (94.98.179.243) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 8749 84.648494 190.246.5.130 192.168.10.207 SMTP 68 C: HELO desktop Frame 8749: 68 bytes on wire (544 bits), 68 bytes captured (544 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.246.5.130 (190.246.5.130), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: fcip-port (3225), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 14 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8750 84.648569 192.168.10.207 190.246.5.130 SMTP 102 S: 250 mail.mydomain.com Hello [190.246.5.130] Frame 8750: 102 bytes on wire (816 bits), 102 bytes captured (816 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.246.5.130 (190.246.5.130) Transmission Control Protocol, Src Port: smtp (25), Dst Port: fcip-port (3225), Seq: 122, Ack: 15, Len: 48 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8751 84.648610 190.246.5.130 192.168.10.207 TCP 60 fcip-port > smtp [ACK] Seq=15 Ack=170 Win=93270 Len=0 Frame 8751: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.246.5.130 (190.246.5.130), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: fcip-port (3225), Dst Port: smtp (25), Seq: 15, Ack: 170, Len: 0 No. Time Source Destination Protocol Length Info 8752 84.856435 190.246.5.130 192.168.10.207 SMTP 96 C: MAIL FROM: <vamorbidity@xxxxxxxxxxxx> Frame 8752: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.246.5.130 (190.246.5.130), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: fcip-port (3225), Dst Port: smtp (25), Seq: 15, Ack: 170, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8753 84.856709 192.168.10.207 190.246.5.130 SMTP 106 S: 250 2.1.0 [email protected] OK Frame 8753: 106 bytes on wire (848 bits), 106 bytes captured (848 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.246.5.130 (190.246.5.130) Transmission Control Protocol, Src Port: smtp (25), Dst Port: fcip-port (3225), Seq: 170, Ack: 57, Len: 52 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8754 84.856759 190.246.5.130 192.168.10.207 TCP 60 fcip-port > smtp [ACK] Seq=57 Ack=222 Win=93218 Len=0 Frame 8754: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.246.5.130 (190.246.5.130), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: fcip-port (3225), Dst Port: smtp (25), Seq: 57, Ack: 222, Len: 0 No. Time Source Destination Protocol Length Info 8755 85.051727 192.168.10.1 192.168.10.245 Syslog 309 LOCAL1.INFO: Oct 3 19:45:43 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.246.5.130 7x.x.x.3 3225 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="vamorbidity@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 8755: 309 bytes on wire (2472 bits), 309 bytes captured (2472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:43 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.246.5.130 7x.x.x.3 3225 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" No. Time Source Destination Protocol Length Info 8756 85.193945 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 8756: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8757 85.262548 190.246.5.130 192.168.10.207 TCP 60 fcip-port > smtp [FIN, ACK] Seq=57 Ack=222 Win=93218 Len=0 Frame 8757: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.246.5.130 (190.246.5.130), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: fcip-port (3225), Dst Port: smtp (25), Seq: 57, Ack: 222, Len: 0 No. Time Source Destination Protocol Length Info 8758 85.262627 192.168.10.207 190.246.5.130 TCP 60 smtp > fcip-port [ACK] Seq=222 Ack=58 Win=65479 Len=0 Frame 8758: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.246.5.130 (190.246.5.130) Transmission Control Protocol, Src Port: smtp (25), Dst Port: fcip-port (3225), Seq: 222, Ack: 58, Len: 0 No. Time Source Destination Protocol Length Info 8759 85.262752 192.168.10.207 190.246.5.130 TCP 60 smtp > fcip-port [FIN, ACK] Seq=222 Ack=58 Win=65479 Len=0 Frame 8759: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.246.5.130 (190.246.5.130) Transmission Control Protocol, Src Port: smtp (25), Dst Port: fcip-port (3225), Seq: 222, Ack: 58, Len: 0 No. Time Source Destination Protocol Length Info 8760 85.262790 190.246.5.130 192.168.10.207 TCP 60 fcip-port > smtp [ACK] Seq=58 Ack=223 Win=93218 Len=0 Frame 8760: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.246.5.130 (190.246.5.130), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: fcip-port (3225), Dst Port: smtp (25), Seq: 58, Ack: 223, Len: 0 No. Time Source Destination Protocol Length Info 8761 85.263008 192.168.10.1 192.168.10.245 Syslog 201 LOCAL1.INFO: Oct 3 19:45:43 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.246.5.130 7x.x.x.3 3225 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 8761: 201 bytes on wire (1608 bits), 201 bytes captured (1608 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:45:43 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.246.5.130 7x.x.x.3 3225 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 8762 85.315310 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 8762: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8763 85.396943 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 8763: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3092601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 8764 85.396978 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 8764: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3094001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 8765 85.397008 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 8765: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3095401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 8766 85.397045 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 8766: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3096801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 8767 85.397094 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3096801 Win=65535 Len=0 Frame 8767: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3096801, Len: 0 No. Time Source Destination Protocol Length Info 8768 85.427593 192.168.10.207 206.51.26.33 TCP 65 embrace-dp-c > hp-pxpib [PSH, ACK] Seq=12 Ack=12 Win=65023 Len=11 Frame 8768: 65 bytes on wire (520 bits), 65 bytes captured (520 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.51.26.33 (206.51.26.33) Transmission Control Protocol, Src Port: embrace-dp-c (3198), Dst Port: hp-pxpib (3101), Seq: 12, Ack: 12, Len: 11 Data (11 bytes) 0000 01 fc 00 00 00 05 49 00 00 12 38 ......I...8 No. Time Source Destination Protocol Length Info 8769 85.443516 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 8769: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8770 85.505412 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 8770: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8771 85.505453 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 8771: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8772 85.509970 206.51.26.33 192.168.10.207 TCP 65 hp-pxpib > embrace-dp-c [PSH, ACK] Seq=12 Ack=23 Win=64715 Len=11 Frame 8772: 65 bytes on wire (520 bits), 65 bytes captured (520 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.51.26.33 (206.51.26.33), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: hp-pxpib (3101), Dst Port: embrace-dp-c (3198), Seq: 12, Ack: 23, Len: 11 Data (11 bytes) 0000 02 fd 00 00 00 05 49 00 00 12 38 ......I...8 No. Time Source Destination Protocol Length Info 8773 85.533306 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3014596864, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8773: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8774 85.533329 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3014596864, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8774: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8775 85.533342 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3014596864, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8775: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8776 85.533354 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3014596864, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8776: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8777 85.553686 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 588775680, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8777: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8778 85.553707 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 588775680, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8778: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8779 85.553719 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 588775680, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8779: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8780 85.553731 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 588775680, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8780: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8781 85.566040 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 8781: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8782 85.587004 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3098201 Win=65535 Len=0 Frame 8782: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3098201, Len: 0 No. Time Source Destination Protocol Length Info 8783 85.758377 192.168.10.207 206.51.26.33 TCP 60 embrace-dp-c > hp-pxpib [ACK] Seq=23 Ack=23 Win=65012 Len=0 Frame 8783: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.51.26.33 (206.51.26.33) Transmission Control Protocol, Src Port: embrace-dp-c (3198), Dst Port: hp-pxpib (3101), Seq: 23, Ack: 23, Len: 0 No. Time Source Destination Protocol Length Info 8784 85.788642 192.168.10.207 206.225.164.186 SMTP 222 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 8784: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6511, Ack: 510384, Len: 168 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8785 85.788680 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=511727 Ack=6679 Win=46426 Len=0 Frame 8785: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 511727, Ack: 6679, Len: 0 No. Time Source Destination Protocol Length Info 8786 85.788710 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=6679 Ack=510384 Win=0 Len=0 Frame 8786: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6679, Ack: 510384, Len: 0 No. Time Source Destination Protocol Length Info 8787 85.868495 Intel_a5:f5:44 Broadcast ARP 60 Who has 192.168.10.16? Tell 192.168.10.34 Frame 8787: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:44 (00:16:76:a5:f5:44), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8788 85.868529 Intel_a5:f5:44 Broadcast ARP 60 Who has 192.168.10.16? Tell 192.168.10.34 Frame 8788: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:44 (00:16:76:a5:f5:44), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8789 85.978292 Dell_36:5d:e6 Broadcast ARP 60 Who has 192.168.10.204? Tell 192.168.10.192 Frame 8789: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_36:5d:e6 (00:21:9b:36:5d:e6), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8790 85.978322 Dell_36:5d:e6 Broadcast ARP 60 Who has 192.168.10.204? Tell 192.168.10.192 Frame 8790: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_36:5d:e6 (00:21:9b:36:5d:e6), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8791 86.004474 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 8791: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8792 86.004503 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 8792: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8793 86.044173 192.168.10.203 94.98.179.243 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 8793: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 94.98.179.243 (94.98.179.243) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 8794 86.548750 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3031374080, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8794: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8795 86.548774 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3031374080, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8795: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8796 86.548787 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3031374080, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8796: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8797 86.548799 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3031374080, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8797: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8798 86.569288 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 605552896, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8798: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8799 86.569310 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 605552896, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8799: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8800 86.569323 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 605552896, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8800: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8801 86.569335 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 605552896, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8801: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8802 86.658029 192.168.10.222 192.168.80.1 TCP 62 netbios-ssn > ccmad [SYN, ACK] Seq=0 Ack=0 Win=16384 Len=0 MSS=1460 SACK_PERM=1 Frame 8802: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_55:3b:5b (00:24:e8:55:3b:5b), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.222 (192.168.10.222), Dst: 192.168.80.1 (192.168.80.1) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ccmad (3114), Seq: 0, Ack: 0, Len: 0 No. Time Source Destination Protocol Length Info 8803 86.739043 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:16:27 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 8803: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:16:27 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 8804 87.193949 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 8804: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8805 87.315349 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 8805: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8806 87.443572 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 8806: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8807 87.494860 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 8807: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8808 87.494892 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 8808: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8809 87.564543 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3048151296, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8809: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8810 87.564566 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3048151296, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8810: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8811 87.564579 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3048151296, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8811: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8812 87.564591 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3048151296, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8812: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8813 87.566706 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 8813: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8814 87.585081 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 622330112, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8814: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8815 87.585104 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 622330112, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8815: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8816 87.585117 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 622330112, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8816: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8817 87.585129 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 622330112, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8817: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8818 87.667916 192.168.10.220 208.67.222.222 DNS 86 Standard query PTR 162.172.81.94.in-addr.arpa Frame 8818: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 51273 (51273), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 8819 87.768257 192.168.10.104 192.168.10.220 NBNS 110 Refresh NB BAIMOBILEPC2<20> Frame 8819: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 8820 87.781201 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 8820: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8821 87.781234 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 8821: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8822 87.781249 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 8822: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8823 87.781259 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 8823: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8824 87.781274 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 8824: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8825 87.781285 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 8825: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8826 87.781295 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 8826: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8827 87.781305 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 8827: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8828 87.781315 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 8828: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8829 87.781441 192.168.10.46 192.168.10.245 Syslog 214 LOCAL4.WARNING: Oct 03 2011 19:16:28 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n Frame 8829: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:16:28 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n No. Time Source Destination Protocol Length Info 8830 87.781453 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 8830: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8831 87.781463 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 8831: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8832 87.781479 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 8832: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8833 87.781520 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 8833: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8834 87.781530 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 8834: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8835 87.781540 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 8835: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8836 87.781563 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 8836: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8837 87.781574 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 8837: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8838 87.781585 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 8838: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8839 87.781595 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 8839: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8840 87.781605 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 8840: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8841 87.781616 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 8841: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8842 87.781626 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 8842: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8843 87.781636 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 8843: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8844 87.781646 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 8844: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8845 87.781656 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 8845: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8846 87.781667 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 8846: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8847 87.781677 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 8847: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8848 87.781687 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 8848: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8849 87.781697 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 8849: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8850 87.781707 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 8850: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8851 87.781717 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 8851: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8852 87.781727 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 8852: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8853 87.781737 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 8853: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8854 87.781747 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 8854: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8855 87.781757 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 8855: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8856 87.781767 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 8856: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8857 87.781787 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 8857: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8858 87.781797 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 8858: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8859 87.781808 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 8859: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8860 87.781818 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 8860: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8861 87.781833 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 8861: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8862 87.781847 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 8862: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8863 87.781860 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 8863: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8864 87.781882 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 8864: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8865 87.781893 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 8865: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8866 87.781903 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 8866: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8867 87.781913 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 8867: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8868 87.781923 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 8868: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8869 87.829927 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-11.geo.kaspersky.com Frame 8869: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 65416 (65416), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 8870 87.830118 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-11.geo.kaspersky.com Frame 8870: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 65416 (65416), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 8871 87.921714 208.67.222.222 192.168.10.220 DNS 152 Standard query response PTR host162-172-static.81-94-b.business.telecomitalia.it Frame 8871: 152 bytes on wire (1216 bits), 152 bytes captured (1216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 51273 (51273) Domain Name System (response) No. Time Source Destination Protocol Length Info 8872 87.921800 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 Who has 192.168.10.220? Tell 192.168.10.1 Frame 8872: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8873 87.921813 Dell_ad:25:f6 Watchgua_3c:4c:d8 ARP 60 192.168.10.220 is at 00:22:19:ad:25:f6 Frame 8873: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8874 88.009798 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 8874: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8875 88.009830 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 8875: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8876 88.041340 192.168.10.220 208.67.222.222 DNS 86 Standard query PTR 98.18.111.109.in-addr.arpa Frame 8876: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 64940 (64940), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 8877 88.056622 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.56? Tell 192.168.10.220 Frame 8877: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8878 88.056654 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.56? Tell 192.168.10.220 Frame 8878: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8879 88.056669 Dell_ad:25:f8 Intel_38:8d:0a ARP 64 Who has 192.168.10.66? Tell 192.168.10.220 Frame 8879: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8880 88.056680 Dell_ad:25:f8 Intel_89:5e:11 ARP 64 Who has 192.168.10.65? Tell 192.168.10.220 Frame 8880: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8881 88.056696 Intel_38:8d:0a Dell_ad:25:f6 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 8881: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8882 88.056707 Intel_89:5e:11 Dell_ad:25:f8 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 8882: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8883 88.056717 Dell_ad:25:f8 Intel_a5:f5:5b ARP 64 Who has 192.168.10.131? Tell 192.168.10.220 Frame 8883: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8884 88.056727 Dell_ad:25:f8 Intel_38:8c:64 ARP 64 Who has 192.168.10.67? Tell 192.168.10.220 Frame 8884: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8885 88.056737 Intel_a5:f5:5b Dell_ad:25:f8 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 8885: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8886 88.056747 Dell_ad:25:f8 Intel_02:0e:6d ARP 64 Who has 192.168.10.128? Tell 192.168.10.220 Frame 8886: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8887 88.056757 Dell_ad:25:f8 IntelCor_d3:4e:80 ARP 64 Who has 192.168.10.70? Tell 192.168.10.220 Frame 8887: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8888 88.056767 Intel_38:8c:64 Dell_ad:25:f6 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 8888: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8889 88.056777 Dell_ad:25:f8 Intel_d0:7a:8f ARP 64 Who has 192.168.10.68? Tell 192.168.10.220 Frame 8889: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8890 88.056788 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.233? Tell 192.168.10.220 Frame 8890: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8891 88.056798 Intel_02:0e:6d Dell_ad:25:f6 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 8891: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8892 88.056808 Dell_ad:25:f8 Intel_56:83:a5 ARP 64 Who has 192.168.10.59? Tell 192.168.10.220 Frame 8892: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8893 88.056818 IntelCor_d3:4e:80 Dell_ad:25:f8 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 8893: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8894 88.056829 Dell_ad:25:f8 Intel_38:8c:b1 ARP 64 Who has 192.168.10.138? Tell 192.168.10.220 Frame 8894: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8895 88.056842 Intel_d0:7a:8f Dell_ad:25:f8 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 8895: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8896 88.056852 Intel_56:83:a5 Dell_ad:25:f6 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 8896: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8897 88.056862 Dell_ad:25:f8 Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.220 Frame 8897: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8898 88.056872 Intel_38:8c:b1 Dell_ad:25:f6 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 8898: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8899 88.056882 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 8899: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8900 88.056893 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 8900: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8901 88.134206 208.67.222.222 192.168.10.220 DNS 86 Standard query response, No such name Frame 8901: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 64940 (64940) Domain Name System (response) No. Time Source Destination Protocol Length Info 8902 88.134710 192.168.10.203 109.111.18.98 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 8902: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 109.111.18.98 (109.111.18.98) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 8903 88.237617 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:16:28 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 8903: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:16:28 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 8904 88.376433 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 8904: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8905 88.376464 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 8905: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8906 88.579974 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3064928512, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8906: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8907 88.579998 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3064928512, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8907: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8908 88.580011 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3064928512, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8908: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8909 88.580023 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3064928512, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8909: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8910 88.600553 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 639107328, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8910: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8911 88.600573 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 639107328, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8911: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8912 88.600585 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 639107328, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8912: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8913 88.600597 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 639107328, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8913: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8914 88.993881 206.225.164.186 192.168.10.207 TCP 60 [TCP Dup ACK 8785#1] 23308 > smtp [ACK] Seq=511727 Ack=6679 Win=46426 Len=0 Frame 8914: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 511727, Ack: 6679, Len: 0 No. Time Source Destination Protocol Length Info 8915 88.993920 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=6679 Ack=510384 Win=0 Len=0 Frame 8915: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6679, Ack: 510384, Len: 0 No. Time Source Destination Protocol Length Info 8916 89.194040 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 8916: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8917 89.268281 192.168.10.104 192.168.10.220 NBNS 110 Refresh NB BAIMOBILEPC2<20> Frame 8917: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 8918 89.315327 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 8918: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8919 89.443687 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 8919: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8920 89.493296 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 8920: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8921 89.493327 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 8921: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8922 89.497671 192.168.10.71 192.168.10.255 BROWSER 243 Host Announcement KKEENEXP, Workstation, Server, NT Workstation, Potential Browser Frame 8922: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: IntelCor_ed:1a:0c (00:13:20:ed:1a:0c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.71 (192.168.10.71), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 8923 89.497910 192.168.10.71 192.168.10.255 BROWSER 243 Host Announcement KKEENEXP, Workstation, Server, NT Workstation, Potential Browser Frame 8923: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: IntelCor_ed:1a:0c (00:13:20:ed:1a:0c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.71 (192.168.10.71), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 8924 89.566121 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 8924: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8925 89.595686 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3081705728, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8925: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8926 89.595711 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3081705728, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8926: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8927 89.595723 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3081705728, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8927: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8928 89.595735 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3081705728, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8928: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8929 89.616115 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 655884544, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8929: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8930 89.616138 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 655884544, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8930: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8931 89.616151 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 655884544, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8931: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8932 89.616164 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 655884544, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8932: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8933 89.633902 192.168.10.203 109.111.18.98 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 8933: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 109.111.18.98 (109.111.18.98) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 8934 89.682752 192.168.10.30 192.168.10.255 UDP 764 Source port: 34427 Destination port: apc-3052 Frame 8934: 764 bytes on wire (6112 bits), 764 bytes captured (6112 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (722 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 35 3a 32 35 0a 53 52 3d 31 42 0a =18:45:25.SR=1B. 0060 53 55 3d 37 42 31 33 30 45 39 39 0a 52 44 3d 41 SU=7B130E99.RD=A 0070 41 44 33 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 AD3.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 =08.7E=00.3E=001 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 .4C=207.3.50=040 00c0 2e 30 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 .0.43=025.2.78=0 00d0 37 2f 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 7/25/06.6A=0023: 00e0 0a 34 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 .47=S.63=BAI_UPS 00f0 20 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f .66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 =00.38=00.6E=NS0 0120 36 33 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 631005398 .6D=0 0130 37 2f 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 7/25/06.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 52 4d -UPS RT 10000 RM 0150 20 58 4c 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d XL.46=60.00.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 207.3.4E=204.4.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 =000.42=218.1.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 35 2e 30 0a 32 46 3d 31 36 2e .5C=035.0.2F=16. 01d0 30 36 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 06.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 000.09=59.99;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 .E9=0.I0=2.I1=26 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a .I5=0.I6=0.I7=1. 0250 49 38 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 I8=Device 1.I9=0 0260 0a 49 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d .IA=Device 2.IB= 0270 30 0a 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 0.IC=Relay 1.ID= 0280 30 0a 53 48 3d 38 33 46 45 32 36 41 44 39 39 41 0.SH=83FE26AD99A 0290 45 44 44 33 38 45 38 32 30 31 32 45 43 31 36 31 EDD38E82012EC161 02a0 36 45 45 36 32 0a 4d 44 3d 33 30 63 39 30 34 64 6EE62.MD=30c904d 02b0 63 61 36 35 36 36 37 61 31 65 30 30 33 31 37 37 ca65667a1e003177 02c0 30 65 32 35 30 32 61 30 32 0a 3c 2f 42 4f 44 59 0e2502a02.</BODY 02d0 3e 0a >. No. Time Source Destination Protocol Length Info 8935 89.682873 192.168.10.30 192.168.10.255 UDP 764 Source port: 34427 Destination port: apc-3052 Frame 8935: 764 bytes on wire (6112 bits), 764 bytes captured (6112 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (722 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 35 3a 32 35 0a 53 52 3d 31 42 0a =18:45:25.SR=1B. 0060 53 55 3d 37 42 31 33 30 45 39 39 0a 52 44 3d 41 SU=7B130E99.RD=A 0070 41 44 33 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 AD3.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 =08.7E=00.3E=001 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 .4C=207.3.50=040 00c0 2e 30 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 .0.43=025.2.78=0 00d0 37 2f 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 7/25/06.6A=0023: 00e0 0a 34 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 .47=S.63=BAI_UPS 00f0 20 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f .66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 =00.38=00.6E=NS0 0120 36 33 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 631005398 .6D=0 0130 37 2f 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 7/25/06.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 52 4d -UPS RT 10000 RM 0150 20 58 4c 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d XL.46=60.00.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 207.3.4E=204.4.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 =000.42=218.1.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 35 2e 30 0a 32 46 3d 31 36 2e .5C=035.0.2F=16. 01d0 30 36 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 06.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 000.09=59.99;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 .E9=0.I0=2.I1=26 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a .I5=0.I6=0.I7=1. 0250 49 38 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 I8=Device 1.I9=0 0260 0a 49 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d .IA=Device 2.IB= 0270 30 0a 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 0.IC=Relay 1.ID= 0280 30 0a 53 48 3d 38 33 46 45 32 36 41 44 39 39 41 0.SH=83FE26AD99A 0290 45 44 44 33 38 45 38 32 30 31 32 45 43 31 36 31 EDD38E82012EC161 02a0 36 45 45 36 32 0a 4d 44 3d 33 30 63 39 30 34 64 6EE62.MD=30c904d 02b0 63 61 36 35 36 36 37 61 31 65 30 30 33 31 37 37 ca65667a1e003177 02c0 30 65 32 35 30 32 61 30 32 0a 3c 2f 42 4f 44 59 0e2502a02.</BODY 02d0 3e 0a >. No. Time Source Destination Protocol Length Info 8936 89.737665 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:16:30 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 8936: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:16:30 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 8937 89.993869 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 8738#1] 9428 > smtp [ACK] Seq=261197 Ack=3823 Win=46153 Len=0 Frame 8937: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 261197, Ack: 3823, Len: 0 No. Time Source Destination Protocol Length Info 8938 89.993975 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=3823 Ack=260806 Win=0 Len=0 Frame 8938: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3823, Ack: 260806, Len: 0 No. Time Source Destination Protocol Length Info 8939 90.000660 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 8939: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8940 90.000690 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 8940: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8941 90.214723 192.168.10.207 206.225.164.186 SMTP 558 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 8941: 558 bytes on wire (4464 bits), 558 bytes captured (4464 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 6511, Ack: 510384, Len: 504 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8942 90.214760 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=511727 Ack=7015 Win=46258 Len=0 Frame 8942: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 511727, Ack: 7015, Len: 0 No. Time Source Destination Protocol Length Info 8943 90.214788 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=7015 Ack=510384 Win=0 Len=0 Frame 8943: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7015, Ack: 510384, Len: 0 No. Time Source Destination Protocol Length Info 8944 90.611399 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3098482944, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8944: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8945 90.611423 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3098482944, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8945: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8946 90.611436 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3098482944, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8946: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8947 90.611448 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3098482944, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8947: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8948 90.631793 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 672661760, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8948: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8949 90.631816 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 672661760, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8949: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8950 90.631829 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 672661760, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8950: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8951 90.631842 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 672661760, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8951: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8952 90.768184 192.168.10.104 192.168.10.220 NBNS 110 Refresh NB BAIMOBILEPC2<20> Frame 8952: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 8953 90.783232 192.168.10.39 192.168.10.255 BROWSER 243 Host Announcement IPCAMPC, Workstation, Server, SQL Server, NT Workstation, Potential Browser Frame 8953: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Intel_02:0b:ff (00:16:76:02:0b:ff), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.39 (192.168.10.39), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 8954 90.783472 192.168.10.39 192.168.10.255 BROWSER 243 Host Announcement IPCAMPC, Workstation, Server, SQL Server, NT Workstation, Potential Browser Frame 8954: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Intel_02:0b:ff (00:16:76:02:0b:ff), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.39 (192.168.10.39), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 8955 90.855941 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 8955: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8956 90.855971 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 8956: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8957 91.019406 192.168.10.207 206.225.164.188 SMTP 558 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 8957: 558 bytes on wire (4464 bits), 558 bytes captured (4464 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 3571, Ack: 260806, Len: 504 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8958 91.019442 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=261197 Ack=4075 Win=46720 Len=0 Frame 8958: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 261197, Ack: 4075, Len: 0 No. Time Source Destination Protocol Length Info 8959 91.019471 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=4075 Ack=260806 Win=0 Len=0 Frame 8959: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4075, Ack: 260806, Len: 0 No. Time Source Destination Protocol Length Info 8960 91.133814 192.168.10.203 109.111.18.98 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 8960: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 109.111.18.98 (109.111.18.98) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 8961 91.193985 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 8961: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8962 91.237887 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:16:31 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 8962: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:16:31 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 8963 91.315390 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 8963: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8964 91.421244 123.18.166.30 192.168.10.207 SMTP 73 C: EHLO tqdijlra.com Frame 8964: 73 bytes on wire (584 bits), 73 bytes captured (584 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 123.18.166.30 (123.18.166.30), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 29139 (29139), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 19 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8965 91.421345 192.168.10.207 123.18.166.30 SMTP 244 S: 250-mail.mydomain.com Hello [123.18.166.30] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 8965: 244 bytes on wire (1952 bits), 244 bytes captured (1952 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 123.18.166.30 (123.18.166.30) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 29139 (29139), Seq: 122, Ack: 20, Len: 190 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 8966 91.421388 123.18.166.30 192.168.10.207 TCP 60 29139 > smtp [ACK] Seq=20 Ack=312 Win=93128 Len=0 Frame 8966: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 123.18.166.30 (123.18.166.30), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 29139 (29139), Dst Port: smtp (25), Seq: 20, Ack: 312, Len: 0 No. Time Source Destination Protocol Length Info 8967 91.421798 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:45:49 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 29139 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 8967: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:49 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 29139 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" No. Time Source Destination Protocol Length Info 8968 91.421876 192.168.10.1 192.168.10.245 Syslog 277 LOCAL1.INFO: Oct 3 19:45:49 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 29139 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 8968: 277 bytes on wire (2216 bits), 277 bytes captured (2216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:49 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 29139 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPEL No. Time Source Destination Protocol Length Info 8969 91.422030 192.168.10.1 192.168.10.245 Syslog 270 LOCAL1.INFO: Oct 3 19:45:49 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 29139 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 8969: 270 bytes on wire (2160 bits), 270 bytes captured (2160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:49 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 29139 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 8970 91.422110 192.168.10.1 192.168.10.245 Syslog 286 LOCAL1.INFO: Oct 3 19:45:49 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 29139 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 8970: 286 bytes on wire (2288 bits), 286 bytes captured (2288 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:49 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 29139 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHAN No. Time Source Destination Protocol Length Info 8971 91.422312 192.168.10.1 192.168.10.245 Syslog 277 LOCAL1.INFO: Oct 3 19:45:49 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 29139 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 8971: 277 bytes on wire (2216 bits), 277 bytes captured (2216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:49 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 29139 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINAR No. Time Source Destination Protocol Length Info 8972 91.422430 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:45:49 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 29139 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 8972: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:45:49 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 29139 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" No. Time Source Destination Protocol Length Info 8973 91.443692 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 8973: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8974 91.498689 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 8974: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8975 91.498721 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 8975: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8976 91.566110 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 8976: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 8977 91.626824 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3115260160, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8977: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8978 91.626848 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3115260160, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 8978: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8979 91.626861 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3115260160, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8979: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8980 91.626873 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3115260160, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 8980: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8981 91.647406 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 689438976, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8981: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8982 91.647429 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 689438976, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 8982: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8983 91.647441 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 689438976, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8983: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8984 91.647453 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 689438976, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 8984: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 8985 91.666071 192.168.10.142 192.168.10.255 BROWSER 255 Domain/Workgroup Announcement WORKGROUP, NT Workstation, Domain Enum Frame 8985: 255 bytes on wire (2040 bits), 255 bytes captured (2040 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 8986 91.666314 192.168.10.142 192.168.10.255 BROWSER 255 Domain/Workgroup Announcement WORKGROUP, NT Workstation, Domain Enum Frame 8986: 255 bytes on wire (2040 bits), 255 bytes captured (2040 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 8987 91.998961 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 8987: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8988 91.998994 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 8988: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 8989 92.153415 166.137.8.201 192.168.10.206 TCP 62 46151 > https [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 8989: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 166.137.8.201 (166.137.8.201), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 46151 (46151), Dst Port: https (443), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 8990 92.153479 192.168.10.206 166.137.8.201 TCP 62 https > 46151 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 8990: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.206 (192.168.10.206), Dst: 166.137.8.201 (166.137.8.201) Transmission Control Protocol, Src Port: https (443), Dst Port: 46151 (46151), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 8991 92.153891 Watchgua_3c:4c:d8 Dell_f6:3f:45 ARP 60 Who has 192.168.10.206? Tell 192.168.10.1 Frame 8991: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8992 92.153903 Dell_f6:3f:45 Watchgua_3c:4c:d8 ARP 60 192.168.10.206 is at 00:13:72:f6:3f:45 Frame 8992: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 8993 92.268281 192.168.10.104 192.168.10.220 NBNS 110 Refresh NB BAIMOBILEPC2<00> Frame 8993: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 8994 92.293172 166.137.8.201 192.168.10.206 TCP 60 46151 > https [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 8994: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 166.137.8.201 (166.137.8.201), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 46151 (46151), Dst Port: https (443), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 8995 92.302723 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 8995: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8996 92.302752 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 8996: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 8997 92.333080 166.137.8.201 192.168.10.206 TLSv1 209 Client Hello Frame 8997: 209 bytes on wire (1672 bits), 209 bytes captured (1672 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 166.137.8.201 (166.137.8.201), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 46151 (46151), Dst Port: https (443), Seq: 1, Ack: 1, Len: 155 Secure Sockets Layer No. Time Source Destination Protocol Length Info 8998 92.333291 192.168.10.206 166.137.8.201 TCP 1454 [TCP segment of a reassembled PDU] Frame 8998: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.206 (192.168.10.206), Dst: 166.137.8.201 (166.137.8.201) Transmission Control Protocol, Src Port: https (443), Dst Port: 46151 (46151), Seq: 1, Ack: 156, Len: 1400 No. Time Source Destination Protocol Length Info 8999 92.333322 192.168.10.206 166.137.8.201 TLSv1 329 Server Hello, Certificate, Server Hello Done Frame 8999: 329 bytes on wire (2632 bits), 329 bytes captured (2632 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.206 (192.168.10.206), Dst: 166.137.8.201 (166.137.8.201) Transmission Control Protocol, Src Port: https (443), Dst Port: 46151 (46151), Seq: 1401, Ack: 156, Len: 275 [2 Reassembled TCP Segments (1675 bytes): #8998(1400), #8999(275)] Secure Sockets Layer No. Time Source Destination Protocol Length Info 9000 92.333361 166.137.8.201 192.168.10.206 TCP 60 46151 > https [ACK] Seq=156 Ack=1676 Win=91764 Len=0 Frame 9000: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 166.137.8.201 (166.137.8.201), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 46151 (46151), Dst Port: https (443), Seq: 156, Ack: 1676, Len: 0 No. Time Source Destination Protocol Length Info 9001 92.333400 166.137.8.201 192.168.10.206 TCP 60 [TCP Window Update] 46151 > https [ACK] Seq=156 Ack=1676 Win=93440 Len=0 Frame 9001: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 166.137.8.201 (166.137.8.201), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 46151 (46151), Dst Port: https (443), Seq: 156, Ack: 1676, Len: 0 No. Time Source Destination Protocol Length Info 9002 92.375927 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 9002: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9003 92.375960 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 9003: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9004 92.422705 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=145963 Ack=2517 Win=1002 Len=1448 TSval=558354 TSecr=728099 Frame 9004: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 145963, Ack: 2517, Len: 1448 Data (1448 bytes) 0000 17 03 01 1d d0 f6 8c 1f 5d ce 6b 82 05 84 12 06 ........].k..... 0010 d8 a1 53 56 85 8c 1a 1c 4f 61 e4 65 74 fe 2e 82 ..SV....Oa.et... 0020 ef 84 f8 80 e4 7e 15 4c 7a d1 61 2f e6 44 89 8e .....~.Lz.a/.D.. 0030 ba df 02 4b 11 91 44 95 a3 77 38 e6 d1 7d 22 7b ...K..D..w8..}"{ 0040 7e 9c 2c 40 b9 85 30 48 de 18 79 d0 f1 df 39 2a ~.,@..0H..y...9* 0050 e6 3d 69 69 e3 58 0d 8b 8d 73 9d e6 35 6c 35 36 .=ii.X...s..5l56 0060 5f 64 b9 d3 a4 15 f6 ed 72 5d 2e f9 0b 09 d6 e7 _d......r]...... 0070 6c 6d f0 00 1a e3 9f a3 e9 fd b1 1b 09 aa b5 de lm.............. 0080 02 83 87 eb 60 3d 29 28 7f fc 74 72 0f c8 20 14 ....`=)(..tr.. . 0090 84 b4 4f 6a 50 03 dc 3a 59 d7 1a 4c c2 9e 8b 58 ..OjP..:Y..L...X 00a0 ef cd aa f3 63 33 6a de d9 05 d4 b2 6e e5 b6 72 ....c3j.....n..r 00b0 f4 e1 6f ef 7f 23 e3 57 d9 31 99 ee 7b aa f5 d9 ..o..#.W.1..{... 00c0 e2 fe 17 4d e1 12 9e c1 8a ff a3 70 56 42 dc 0e ...M.......pVB.. 00d0 a9 5b d4 f3 44 2c 24 e3 aa 5d e3 eb 15 b4 6d b9 .[..D,$..]....m. 00e0 65 be 74 d3 64 c7 88 e6 6a 6c ed 37 1c c2 cf a6 e.t.d...jl.7.... 00f0 d7 94 be 1a 81 80 c9 8b ee 43 16 5a b3 cd 64 8a .........C.Z..d. 0100 71 05 0d f2 42 71 d5 50 3f 9d 50 88 c7 22 88 ce q...Bq.P?.P..".. 0110 66 f1 1e 93 ce 10 4c 86 26 3e d3 66 4f 94 13 25 f.....L.&>.fO..% 0120 4a e5 42 6a 6f 31 da 1c a6 03 df 57 47 45 5e 71 J.Bjo1.....WGE^q 0130 c2 04 ac 3e 3c bb dc 9e 70 93 87 1f 74 b0 53 a8 ...><...p...t.S. 0140 3d 5c 6e 16 b6 32 7e 8e 2d bc e6 98 e0 75 0a 46 =\n..2~.-....u.F 0150 52 57 f1 f4 46 1e eb be 78 8c 3a b0 20 a2 90 fc RW..F...x.:. ... 0160 f6 a5 60 a9 5e 10 38 5c 1b b7 90 5f 13 b3 2e 54 ..`.^.8\..._...T 0170 c3 62 1f 86 10 32 41 7a 2c 17 13 eb 57 86 42 5d .b...2Az,...W.B] 0180 b5 95 d4 44 bb 53 8e b6 51 f3 fc 47 06 19 90 23 ...D.S..Q..G...# 0190 5f ce 47 b8 31 a0 79 35 af f8 dc 1b 3a 8a c8 f4 _.G.1.y5....:... 01a0 c6 46 48 ab 14 1f 59 11 8c be 7c e3 53 a2 72 9c .FH...Y...|.S.r. 01b0 7a f8 57 ea 63 70 67 e4 94 56 d6 cc 87 09 12 5b z.W.cpg..V.....[ 01c0 a9 01 5e e2 15 b8 69 6a 59 5f 7c 13 02 0e f9 1c ..^...ijY_|..... 01d0 d4 66 e1 e2 40 43 14 6e ec d7 fe b4 0f c9 91 da [email protected]........ 01e0 e6 7d 8f b0 a6 ae 1c 9c 96 4c 87 f0 7d 6e 8a 67 .}.......L..}n.g 01f0 e0 97 cc 99 be 64 f5 24 53 aa 7c ff f8 b1 e4 14 .....d.$S.|..... 0200 01 ce 45 3d c6 d3 f7 4f 7d b4 63 d2 f0 21 2c 9b ..E=...O}.c..!,. 0210 f0 bc 93 48 1b a9 1a db b3 f5 62 4c f5 b8 8e fd ...H......bL.... 0220 de 1e 5d 18 b8 1c bf 04 5b 0c cd b5 eb c1 cf 2b ..].....[......+ 0230 e0 88 64 86 4d 3e 98 4b 43 1c 40 6f 3c a8 34 36 ..d.M>.KC.@o<.46 0240 b9 29 2d 7b 74 93 93 ef e3 0a 5c 21 86 0a c5 c5 .)-{t.....\!.... 0250 d1 2c ef 14 83 bd bb 46 64 0e f3 66 a3 c2 e7 b2 .,.....Fd..f.... 0260 5a c9 9e 70 08 12 dd db 8b 8f 4b 4a 60 20 41 7b Z..p......KJ` A{ 0270 b1 82 00 f8 2d 7c 25 7e 48 83 5a 14 e7 3e 49 7d ....-|%~H.Z..>I} 0280 4b 6b e0 ff 55 f0 1c 0f f6 e1 f9 88 ce fa 08 9c Kk..U........... 0290 c1 c9 d0 26 27 91 e4 85 a3 a8 2f b3 f2 2d 3a 58 ...&'...../..-:X 02a0 81 a2 4a e5 10 9f 13 80 af 11 dc cd fa f6 3c 08 ..J...........<. 02b0 e8 5a 01 9a 77 b2 e3 ac d8 98 dd 95 d9 80 76 e1 .Z..w.........v. 02c0 7f 0c c2 da b0 69 d8 c8 c2 7d dd 34 39 a7 29 44 .....i...}.49.)D 02d0 78 c7 80 cb ac 1c 03 78 a4 5b 94 74 fe 1c 40 28 x......x.[.t..@( 02e0 d3 f2 17 7f 3e ab 9b e3 59 80 b2 7d 40 d8 16 c1 ....>...Y..}@... 02f0 bf 07 29 2e 93 5f 9b a8 3a ef f4 8a 00 0b 39 c9 ..).._..:.....9. 0300 8b ee fc ee 78 2f 5f 20 85 7d 20 24 97 f2 fc f0 ....x/_ .} $.... 0310 2a ea 1c 8f 74 47 4c 99 7f 16 7f a2 11 d4 2d a9 *...tGL.......-. 0320 5a 33 9d 02 49 44 c0 d2 d9 11 82 76 a5 3b dd 87 Z3..ID.....v.;.. 0330 a8 89 fd c9 b6 42 e5 93 86 b9 3e 82 27 4f 7d c4 .....B....>.'O}. 0340 57 fe 03 2f ab 9d b2 76 1c c5 a8 d8 73 69 88 dc W../...v....si.. 0350 dd 34 49 69 eb ef f7 26 c4 45 ee 53 23 87 97 1b .4Ii...&.E.S#... 0360 20 4c d4 3f 8b 0f 2f 9b 78 6a ea 3c ad f6 f8 d5 L.?../.xj.<.... 0370 4f bb a3 fb 50 99 d8 03 60 60 80 d0 6b 84 5a 04 O...P...``..k.Z. 0380 1c 3d 3f af d4 16 71 69 66 54 75 70 d5 e4 8b 29 .=?...qifTup...) 0390 ef 62 08 f8 24 8e 6a 71 2b ac 59 e7 e2 2a 11 2f .b..$.jq+.Y..*./ 03a0 88 51 09 ae af 5f e5 8c e3 45 0f ed e3 7c b4 91 .Q..._...E...|.. 03b0 b8 bd 67 f5 b6 f3 d7 bf f7 50 55 df 8a 6d 4b 96 ..g......PU..mK. 03c0 c2 c1 19 2f a5 07 f5 ad 94 c9 9e 6e 90 ae da 09 .../.......n.... 03d0 cf c0 ac e5 b6 ed c9 07 83 a0 7c f1 65 3b c2 95 ..........|.e;.. 03e0 e4 d8 07 95 99 bd 0f dc 98 e3 89 7e f3 05 5d f7 ...........~..]. 03f0 86 59 dd b5 53 76 8f a2 19 a2 71 29 42 c2 1f 9a .Y..Sv....q)B... 0400 c3 fe c7 4e c3 79 97 2a 79 97 89 58 4a 72 fb 41 ...N.y.*y..XJr.A 0410 f7 13 cf 5e 54 48 c3 e9 c2 3b 49 67 c6 f5 55 c1 ...^TH...;Ig..U. 0420 a0 77 d4 f8 1b c3 e0 70 cd 40 88 6d 14 81 33 ef [email protected]. 0430 44 2c 05 ec 68 f8 d7 15 ba 70 b4 80 2f a1 03 c8 D,..h....p../... 0440 47 8f 53 95 cc 4b 32 34 16 52 a9 cf 11 7b 80 ff G.S..K24.R...{.. 0450 0b 5f 3f 84 79 79 71 94 09 23 3c cf d8 9a e2 a1 ._?.yyq..#<..... 0460 47 a2 fb 3a 3d 61 04 6e a5 a0 4f 7a c1 09 96 ac G..:=a.n..Oz.... 0470 55 43 bf a6 58 47 b8 55 ab c0 75 fe b9 54 37 77 UC..XG.U..u..T7w 0480 99 e3 43 ae 4a ee 36 81 f1 fc 01 b8 9a f8 e4 ba ..C.J.6......... 0490 ce 5e d2 cc 3c 55 f1 6b 5d 3d 94 b0 27 58 d0 27 .^..<U.k]=..'X.' 04a0 80 bb c4 0a 99 0f b5 bd 92 88 b4 b9 ba b8 9b 35 ...............5 04b0 5e 28 15 ae 62 ed ee 1e 15 f1 08 d8 4a 07 4c 83 ^(..b.......J.L. 04c0 8c 00 cd 9a ae 58 0d dc a3 61 ef 16 77 fb 38 43 .....X...a..w.8C 04d0 61 8b 24 0d ee c2 41 5e 9e 58 97 64 f9 ff a2 88 a.$...A^.X.d.... 04e0 7d e6 14 3a a6 d3 67 ca 7c 79 cb 75 78 68 42 4d }..:..g.|y.uxhBM 04f0 96 20 27 2b 36 60 4b 78 c1 ce 20 db b1 39 3c 41 . '+6`Kx.. ..9<A 0500 a4 46 56 49 8e f9 04 02 71 29 42 25 fb 29 57 43 .FVI....q)B%.)WC 0510 7f 5b af d6 b9 0a e9 04 b8 9a e4 75 23 22 f8 77 .[.........u#".w 0520 8e 27 f5 d9 f9 b8 6a ed b2 19 38 e0 1d f3 7d bf .'....j...8...}. 0530 9d 7e 0e 5c 2e 59 30 ec 50 84 16 be 96 72 fc df .~.\.Y0.P....r.. 0540 b5 68 61 09 13 34 67 ea 0e d9 a5 bf d5 ae 6e 1c .ha..4g.......n. 0550 61 b2 06 2c 64 fc f6 09 49 e2 70 25 b6 e1 d4 47 a..,d...I.p%...G 0560 d5 71 5e f8 11 f4 fb 8b fc fd 45 a0 fc d3 6d 8f .q^.......E...m. 0570 51 00 a3 10 52 92 d0 eb 0f dd 1a 87 6f 16 36 75 Q...R.......o.6u 0580 ba ad f9 55 86 62 63 37 76 e4 4d 90 89 63 53 a1 ...U.bc7v.M..cS. 0590 8a 39 c1 ef e6 df 05 ac 22 65 46 38 18 e5 75 f8 .9......"eF8..u. 05a0 87 9c 5a 89 a4 d0 02 de ..Z..... No. Time Source Destination Protocol Length Info 9005 92.422823 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=147411 Ack=2517 Win=1002 Len=1448 TSval=558354 TSecr=728099 Frame 9005: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 147411, Ack: 2517, Len: 1448 Data (1448 bytes) 0000 51 17 dc a0 b2 55 c8 9d a4 41 79 3c 52 c5 71 d6 Q....U...Ay<R.q. 0010 f3 99 cc 23 1e 04 43 85 ac 3d 9d 63 d2 b1 3f 24 ...#..C..=.c..?$ 0020 7a 02 e4 22 d2 4f 71 5d 23 3d bf ba 4c c0 b4 58 z..".Oq]#=..L..X 0030 25 a6 76 c7 61 65 2c 27 e1 2a a5 bf 48 b1 b7 4b %.v.ae,'.*..H..K 0040 a8 ce f4 f0 6e 1b 73 f0 11 b4 07 8d f3 19 2c 6a ....n.s.......,j 0050 b5 29 90 62 4e 7c b7 ba d7 d6 12 9e 55 2d 59 c8 .).bN|......U-Y. 0060 5a 86 2e 4f c7 0c 26 90 e4 1d 1a 09 99 be 00 1d Z..O..&......... 0070 ef 05 f2 bb a2 3f 63 7d 24 73 a9 0a 5e 02 73 e0 .....?c}$s..^.s. 0080 bf b3 45 63 20 c7 24 1f bb c3 9e b8 6b c0 2d d3 ..Ec .$.....k.-. 0090 84 6a 03 85 30 74 33 ae c9 99 2d b2 fd fe 5b 0a .j..0t3...-...[. 00a0 19 3e 13 51 3b 3f d0 e9 ef 55 fd 87 dc 32 80 fb .>.Q;?...U...2.. 00b0 04 0b 5e e4 91 b5 ee aa fb ff 09 8e af 89 95 eb ..^............. 00c0 60 6e 56 b9 42 9e db 7a 0d 45 bc 9a 60 a2 73 21 `nV.B..z.E..`.s! 00d0 d1 ca 07 39 73 62 6b 1c 0b b1 a1 69 bb b7 3a 14 ...9sbk....i..:. 00e0 3b 31 70 8d 98 a0 4a d3 a6 10 c1 fd c0 73 b4 21 ;1p...J......s.! 00f0 96 00 cc 4d 4d 55 70 17 4f c5 6a e5 06 16 d4 19 ...MMUp.O.j..... 0100 17 da 66 76 e4 66 31 e6 26 b6 08 b3 58 7b 5c 0d ..fv.f1.&...X{\. 0110 35 87 4d 51 d3 bf 49 ec 03 61 c1 57 ad 30 64 6f 5.MQ..I..a.W.0do 0120 22 71 12 04 a8 74 92 a6 da d1 53 9a 9c be ff 54 "q...t....S....T 0130 e6 cb d5 bb fc 8b 56 38 71 b3 46 3d 47 bb ed ad ......V8q.F=G... 0140 06 2a cd 89 5c e1 18 4b 92 ea 03 a2 e0 0d 4a 45 .*..\..K......JE 0150 83 a0 3e c5 0e 99 92 d9 1b 03 74 2b 90 d0 60 30 ..>.......t+..`0 0160 8d d7 af cd 3f af 94 5f 39 7b df d7 4b 41 2e 8a ....?.._9{..KA.. 0170 a1 81 8c 19 1e 7e 1b bb ae 2c 07 51 33 c9 2e d0 .....~...,.Q3... 0180 33 38 d5 15 77 8a 0f 3e 32 d1 ef d0 78 8c 80 f3 38..w..>2...x... 0190 d6 e2 fb d2 82 39 10 96 1b fb 99 08 43 a2 42 c6 .....9......C.B. 01a0 67 ee 6f bf 40 ee 41 f4 6a 5e 10 ed 56 d4 0c 1c [email protected]^..V... 01b0 31 0e 8e e5 41 77 2a c2 bb 10 67 bf 02 b5 4f 58 1...Aw*...g...OX 01c0 1e 8a 96 15 8c 32 db 67 f2 d9 97 41 51 ce 7e 75 .....2.g...AQ.~u 01d0 96 53 eb d8 28 3a ff df af dc 0c 81 ee ec 57 63 .S..(:........Wc 01e0 59 71 fd 46 c3 6a 82 76 92 76 08 d5 af 13 23 95 Yq.F.j.v.v....#. 01f0 ae f7 78 91 5b dc 6e 98 5c 97 a9 13 17 d4 1e aa ..x.[.n.\....... 0200 5e bb f7 a0 16 93 9f a6 9e a2 87 36 f6 b9 c5 e3 ^..........6.... 0210 5b a0 97 86 ee c9 8d 37 91 b6 76 a2 04 d7 c6 5a [......7..v....Z 0220 52 2c 28 96 07 bb 6a 34 b2 5a 51 bc da 34 46 fe R,(...j4.ZQ..4F. 0230 fc 1a cd f2 b8 44 85 91 c0 7a e3 c4 82 04 a7 86 .....D...z...... 0240 c3 3c 9d 1e c2 3e 70 38 c7 e7 95 7d 5f 89 e7 86 .<...>p8...}_... 0250 c9 ec 21 9e 62 0c 1a c3 c9 3b ef 8c 7d b2 d7 10 ..!.b....;..}... 0260 29 5c ba 48 9e 1b db 8e 79 ad 7a c9 1e de c0 3c )\.H....y.z....< 0270 97 09 d9 d0 21 7a 3e 67 34 38 96 cd da 4c a8 ac ....!z>g48...L.. 0280 68 37 78 23 35 68 17 b5 15 6d 59 6f 39 22 50 57 h7x#5h...mYo9"PW 0290 c4 69 0c 1b 0d 23 2c 5f c1 75 51 a4 1b 9d 30 84 .i...#,_.uQ...0. 02a0 f6 a4 03 47 9f 02 e0 d3 61 58 2d b1 16 71 13 f2 ...G....aX-..q.. 02b0 b6 92 e2 0d 17 d9 c8 75 23 41 20 66 0c f2 bc df .......u#A f.... 02c0 62 e1 fa 4f b2 98 82 c4 07 86 41 06 02 6a e6 fb b..O......A..j.. 02d0 69 9d 3d 66 c6 fe ea a9 08 c5 2b e7 a4 b0 3c 89 i.=f......+...<. 02e0 ad 3b b9 fc 82 71 7e a2 1f ec 23 fb 44 6a e2 1c .;...q~...#.Dj.. 02f0 34 68 7c a0 75 0c 24 10 f3 37 1b 22 b8 21 e4 78 4h|.u.$..7.".!.x 0300 ca ab 9b 00 db d2 36 0b 7d 67 d6 10 27 c4 0a 75 ......6.}g..'..u 0310 bc f3 9e e7 bb b0 a6 05 23 c7 d6 59 51 ee e8 2d ........#..YQ..- 0320 2c 34 5e 24 75 13 bc 28 ee 5b 08 26 f4 bd fc 6b ,4^$u..(.[.&...k 0330 22 e6 e5 a5 39 fe 8c 77 15 c4 20 15 c0 41 5f b9 "...9..w.. ..A_. 0340 9e 91 5f 65 f5 a6 e5 93 9c 66 6e ea c0 7b d6 d4 .._e.....fn..{.. 0350 98 f3 82 37 34 33 62 1b 04 bd dc 71 b8 2c 52 a7 ...743b....q.,R. 0360 92 b1 29 ab c8 26 0f 4e 96 9a cb 36 16 90 30 01 ..)..&.N...6..0. 0370 12 a7 38 64 79 f1 ef ed c8 de 41 d1 b3 2a 1a 06 ..8dy.....A..*.. 0380 cd c7 11 19 8b 32 dc 3d 9f 63 dd e1 43 cb ab 46 .....2.=.c..C..F 0390 57 4d b2 62 f5 79 4f 65 72 fc 7c 8b 45 be ad 0a WM.b.yOer.|.E... 03a0 6a d5 05 40 8b ba c4 8c 6d f5 62 62 62 52 a1 80 j..@xxxxxxxxxx.. 03b0 0a 36 0b b8 d8 3e 54 a2 ae 21 af de 8d 4b 93 85 .6...>T..!...K.. 03c0 75 18 37 31 e4 d2 5a 10 e2 18 27 da ce b8 80 ff u.71..Z...'..... 03d0 7c 12 57 1e 25 27 99 f4 19 60 da 5a a6 47 15 a1 |.W.%'...`.Z.G.. 03e0 7c 3f 1a 74 25 4b b4 1b 02 b9 fa 9b 1d 8b 58 6b |?.t%K........Xk 03f0 17 ee d4 01 4d 98 5c 9e 55 8e 22 81 85 12 e8 bb ....M.\.U."..... 0400 4e c8 73 f4 81 c1 bd 70 b9 70 ee 97 2d 84 a6 c4 N.s....p.p..-... 0410 ed e8 7b eb 9f ab 43 27 75 7b 3c 9d 59 88 f5 72 ..{...C'u{<.Y..r 0420 b3 75 49 65 7f 79 ee 0d 8e 0c cf aa e7 27 4f a0 .uIe.y.......'O. 0430 7d 20 3c 38 b2 9f 82 96 0c 73 26 76 0c 9e cd 57 } <8.....s&v...W 0440 9c bd 06 a8 a1 37 38 45 e0 d9 07 35 91 2f 45 79 .....78E...5./Ey 0450 d3 20 8c 8c 8a 0c 89 0a 17 18 2a a5 bb da 34 a1 . ........*...4. 0460 e1 77 d8 8c e2 7c 3a 38 73 1c 35 e6 d1 4c ee ee .w...|:8s.5..L.. 0470 d1 aa 46 38 85 5f 72 72 a0 11 b7 95 df 80 0c ca ..F8._rr........ 0480 9b ba 3d 05 6a 64 fd 79 e5 90 9a cf 8d 7d d7 fe ..=.jd.y.....}.. 0490 e2 8d a3 17 19 b7 41 87 3b 93 62 0c c8 ee 0a 05 ......A.;.b..... 04a0 16 be 38 15 b2 23 05 19 1a d6 6b 70 2d 5e d9 09 ..8..#....kp-^.. 04b0 88 b1 83 0b 80 d6 38 52 68 eb 3c d5 4d 4f f5 37 ......8Rh.<.MO.7 04c0 16 06 e2 9c ef 69 44 cd 66 2b 91 86 53 7f e9 07 .....iD.f+..S... 04d0 13 92 d2 f3 a7 62 d5 18 f5 31 c1 2e aa 1d 7d a3 .....b...1....}. 04e0 08 04 ce 60 4c 49 ba 03 bc 62 f3 b3 db fa 56 bf ...`LI...b....V. 04f0 87 20 03 67 39 06 2a d2 77 26 52 b0 2e 82 ad ec . .g9.*.w&R..... 0500 c0 82 04 ec c0 ff 16 01 c1 75 3f 8d 08 6b 55 1b .........u?..kU. 0510 68 42 3c e4 83 31 37 df 99 02 72 1e 3a a7 4f 83 hB<..17...r.:.O. 0520 61 e7 82 02 ff 4e b2 0c e0 f3 8e 7f 24 2a 76 2c a....N......$*v, 0530 00 a0 d1 99 c4 f7 51 44 04 45 15 e0 1f 4e 5d 08 ......QD.E...N]. 0540 3a 37 2a 36 04 00 15 d9 20 16 4f a7 f8 dc a0 25 :7*6.... .O....% 0550 34 f9 7d 35 67 70 c3 a6 f7 a2 f4 c2 7b 06 c2 f0 4.}5gp......{... 0560 d6 2c 8e d8 e2 04 03 ef 19 8e 3e b0 ab 4a 6a c6 .,........>..Jj. 0570 3d 12 52 88 0e fc 10 7e 7a 05 91 8a 41 78 17 cb =.R....~z...Ax.. 0580 c1 f5 b1 75 b3 2d 49 6e 4b b5 b3 b2 2a bc 84 96 ...u.-InK...*... 0590 4b bb f9 76 8d ef bb 74 21 9d e2 15 82 d1 d4 fe K..v...t!....... 05a0 5a fb a7 8f db 5f 5c 9a Z...._\. No. Time Source Destination Protocol Length Info 9006 92.422931 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=148859 Ack=2517 Win=1002 Len=1448 TSval=558354 TSecr=728099 Frame 9006: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 148859, Ack: 2517, Len: 1448 Data (1448 bytes) 0000 d0 09 5c 47 cc ad 68 07 d8 5e e8 58 7d 33 8b 5f ..\G..h..^.X}3._ 0010 a9 c8 23 34 34 e6 e0 0b 14 6e db 54 02 4e 75 36 ..#44....n.T.Nu6 0020 80 5e fb c8 1d 80 68 2c 76 f0 47 84 e0 5f ef 87 .^....h,v.G.._.. 0030 44 a9 f4 46 60 1b 65 39 3e 60 bb 2a 90 bf 7b 65 D..F`.e9>`.*..{e 0040 1a e1 e5 4b 57 02 f8 5b 89 e5 cf 6f ca d1 af 9c ...KW..[...o.... 0050 37 c1 8d 46 12 6e 3d 25 76 11 4e ef 56 7b e6 a2 7..F.n=%v.N.V{.. 0060 3c a3 96 3f 2f 03 bf 43 5c 1e 38 12 ff de ca 90 <..?/..C\.8..... 0070 46 87 3f f7 45 c7 07 12 37 62 68 52 82 98 ea 00 F.?.E...7bhR.... 0080 02 02 09 6a 2d f1 dc bc 56 2b 43 29 6a 65 dd 1f ...j-...V+C)je.. 0090 2d 08 ab f3 7b c5 30 8f b2 13 6c 51 1a de 33 e7 -...{.0...lQ..3. 00a0 1c c0 4a 0c 1c 39 d9 a1 e6 85 26 b0 6d 72 55 f2 ..J..9....&.mrU. 00b0 05 0b 1c 6e f9 52 84 6c d0 f0 79 3c 2b 83 b6 45 ...n.R.l..y<+..E 00c0 8b 88 c4 6c f8 22 0e b9 35 20 48 00 bc 6a 77 6f ...l."..5 H..jwo 00d0 a2 4f e4 61 54 ee b7 00 05 49 0a aa 16 b9 26 e5 .O.aT....I....&. 00e0 af 88 66 64 9e 3b b0 06 85 e9 e4 19 54 88 95 62 ..fd.;......T..b 00f0 1e a4 4d 6c f6 b7 75 26 c0 92 d6 04 e4 27 af df ..Ml..u&.....'.. 0100 55 b5 a9 71 67 ab e4 b2 50 48 42 b9 8d 31 44 d8 U..qg...PHB..1D. 0110 90 29 a1 1c 8c 27 7d ca 13 7c f3 6e 20 e8 72 44 .)...'}..|.n .rD 0120 13 a1 b0 67 9c 04 2b 10 00 83 07 37 73 86 36 b9 ...g..+....7s.6. 0130 42 02 36 86 94 10 5b 02 9d 22 80 78 2b 9b 7a ba B.6...[..".x+.z. 0140 e3 67 18 50 0e d6 97 e6 2e b4 a8 2c a6 59 c0 e1 .g.P.......,.Y.. 0150 08 47 32 ea 46 32 ee 87 fd ed df 75 42 18 29 42 .G2.F2.....uB.)B 0160 fc c9 ee ad 3a 7e 4d e6 99 27 b5 a4 59 e4 ac 9f ....:~M..'..Y... 0170 ab 59 e1 31 e1 7d a6 f9 62 43 f1 3f fe f3 72 7f .Y.1.}..bC.?..r. 0180 93 7c 3b c7 fa 79 7f 58 d0 8c 52 55 26 14 5a fd .|;..y.X..RU&.Z. 0190 01 e6 60 65 71 0e 4f 6a 2e d9 01 7f a0 2a 95 3e ..`eq.Oj.....*.> 01a0 01 17 98 bd b3 6e 20 de e7 a2 8a 79 77 1e 56 52 .....n ....yw.VR 01b0 42 f9 d7 5a 9d 59 c3 de ad 1d df 2c 5d 46 80 88 B..Z.Y.....,]F.. 01c0 dd 01 0b 68 47 46 30 f1 85 97 41 95 5c d8 de ec ...hGF0...A.\... 01d0 3c 9d d3 51 9c e2 a6 66 3b 0f 5e ff 95 a4 7b 6c <..Q...f;.^...{l 01e0 24 22 d9 cf 82 23 19 7e 99 68 87 14 b7 63 51 d8 $"...#.~.h...cQ. 01f0 2b 46 a0 73 48 61 3c 24 a4 ed ba 88 c7 6c de bb +F.sHa<$.....l.. 0200 fb b4 e2 96 92 5e 67 27 3a 56 5c 59 f6 d0 54 cb .....^g':V\Y..T. 0210 f9 0a 48 18 42 a0 9c 26 74 ee 6c 12 c4 93 cc d7 ..H.B..&t.l..... 0220 a5 f9 71 d8 72 65 b8 09 45 96 67 df 09 18 08 64 ..q.re..E.g....d 0230 a4 8b b8 0c 99 10 0a 37 e5 c3 02 b3 f2 15 76 16 .......7......v. 0240 06 88 5b a8 a6 63 b4 32 e4 4a 7a 85 2e 4c bd 0f ..[..c.2.Jz..L.. 0250 e4 40 b0 f3 55 1e 59 26 e8 8f c0 72 53 17 a7 c6 [email protected]&...rS... 0260 d6 e6 c6 04 d1 a2 24 25 fd 4b f9 23 c7 1a 76 dd ......$%.K.#..v. 0270 16 dc fe 5c f3 e1 a4 af 0b 4d db dd 69 22 13 51 ...\.....M..i".Q 0280 53 65 2e 59 b7 58 ef 76 69 bc 58 2a 4a ba da 1c Se.Y.X.vi.X*J... 0290 b0 9d 64 8f 29 e0 89 1c cc 27 0b 5b 8a 1c 2b 4d ..d.)....'.[..+M 02a0 db 00 43 99 59 51 a1 bf 18 3d bf 07 8b a5 46 a5 ..C.YQ...=....F. 02b0 10 b6 de e7 b2 f7 80 72 99 74 0d d9 a2 bd 22 c7 .......r.t....". 02c0 02 80 b8 f5 b1 e9 4d e3 07 fe d1 b3 63 7f d3 93 ......M.....c... 02d0 8a 8e 43 5f 9d 51 d0 2a 60 42 30 03 02 14 36 26 ..C_.Q.*`B0...6& 02e0 c1 a9 2f d3 54 9b 7a 7c 38 41 2d e3 ae f2 58 87 ../.T.z|8A-...X. 02f0 ae f5 d4 0c 08 ae 5c 45 54 db 96 38 b1 5a b7 ff ......\ET..8.Z.. 0300 db 7a 0d a1 89 5c 60 56 26 fd 65 4d 6f 8b b3 a8 .z...\`V&.eMo... 0310 5a f8 ab d5 12 df 10 0f 79 88 39 60 56 bd 6a ae Z.......y.9`V.j. 0320 67 bc d0 5d 95 43 55 dd 75 13 d7 a1 e8 f3 ad 8e g..].CU.u....... 0330 f2 26 67 d6 71 05 f0 fa 7f cb 29 ae 81 b6 28 f2 .&g.q.....)...(. 0340 10 20 d2 16 1e 68 95 93 64 b5 eb de c3 5f 1b 02 . ...h..d...._.. 0350 ff 20 0a ce 24 f8 da 3c 3e 4e 91 a6 66 a6 20 13 . ..$..<>N..f. . 0360 ac 53 27 de f0 d5 50 9b 9d e2 ab 80 e0 79 63 0e .S'...P......yc. 0370 7c 73 c3 05 76 cd 67 47 dd 8d 48 06 00 ae 53 3d |s..v.gG..H...S= 0380 81 46 ff 2f 93 d6 38 2d 78 80 8c f9 2d 53 8c 87 .F./..8-x...-S.. 0390 87 4e ef f1 88 df ce 4d d1 95 8d e6 db 48 e4 29 .N.....M.....H.) 03a0 7b ec 17 14 47 88 04 7c 03 46 25 da 12 3e bb ab {...G..|.F%..>.. 03b0 9b a6 ef 4f 72 bf 14 8b 63 0c 8a c8 65 7f 99 10 ...Or...c...e... 03c0 0f f3 b8 89 7a fe 47 80 de a5 21 9d 71 85 61 07 ....z.G...!.q.a. 03d0 ce cd 15 09 b5 23 cf 0d d1 71 75 05 37 a9 b9 d9 .....#...qu.7... 03e0 c6 85 b1 18 f0 8b 1d d6 f5 1b d7 6b d9 da 5b fc ...........k..[. 03f0 9f fe fe 7d b4 6b ff 2a eb 81 e6 b1 ba 33 e2 79 ...}.k.*.....3.y 0400 75 0f 17 23 4e 80 2d d4 02 e0 bf 85 a8 f8 01 b1 u..#N.-......... 0410 b6 89 6a c0 d1 b4 1e 0a 2e 70 74 dd 2d 8b 29 ae ..j......pt.-.). 0420 f2 71 49 77 5e e4 13 ce c2 97 11 d7 a9 b5 b7 29 .qIw^..........) 0430 7f 1d 0e 7f 1f ad de 1c f3 d1 72 ac a5 85 84 76 ..........r....v 0440 dc a5 cf 55 c1 35 b8 3e 0b af 22 c7 63 c6 68 f9 ...U.5.>..".c.h. 0450 90 93 67 b8 bb e8 3b 4e d1 b3 6e 1e bf 12 38 37 ..g...;N..n...87 0460 a2 9a 2c 84 2b 12 e1 49 cf 3d 77 3c d2 85 a0 27 ..,.+..I.=w<...' 0470 b9 18 50 bc 87 f8 03 52 8d 5b 77 3f d2 ed 14 e4 ..P....R.[w?.... 0480 36 2a e9 6d e7 1c 3d 24 91 4a 11 af d5 8e 16 9f 6*.m..=$.J...... 0490 a7 66 d6 eb 06 b4 05 46 73 93 08 4f f7 71 9d 71 .f.....Fs..O.q.q 04a0 e9 37 c0 5a 35 52 ad 7e fc 54 5c 8f de 84 50 00 .7.Z5R.~.T\...P. 04b0 d1 d3 8f 2d 37 e1 17 4a 1f 3d 5c 28 5f 64 89 df ...-7..J.=\(_d.. 04c0 4c 0a c0 24 7f 2f 93 2f e2 3f eb e0 6f a7 89 d1 L..$././.?..o... 04d0 aa e4 f7 44 2e 66 f3 2c f4 35 f5 3d 90 37 17 b2 ...D.f.,.5.=.7.. 04e0 5f 2b 3b c2 ab 44 d7 8a 58 97 51 9e 28 ba 32 cd _+;..D..X.Q.(.2. 04f0 14 e6 64 26 62 a1 4c 6b 56 ff 38 0e 78 3e e2 51 ..d&b.LkV.8.x>.Q 0500 e2 1a 44 f3 04 29 23 03 fb f0 dd c7 ab 1a cc 04 ..D..)#......... 0510 81 22 7b 9e 65 8e 9d b1 79 fd 9c da bd 9c ea 82 ."{.e...y....... 0520 2b 81 64 70 31 ba aa 90 3d cb 59 55 cc 88 a8 49 +.dp1...=.YU...I 0530 a5 f3 33 b7 df 03 18 92 1d c1 a0 b9 00 1f f0 f0 ..3............. 0540 a4 7f 14 bf f0 94 01 84 2a 1c fc db 7b ad 2b fc ........*...{.+. 0550 c1 d1 65 64 2e 84 e7 33 a6 85 10 69 ef 8e 7b 1f ..ed...3...i..{. 0560 b1 84 3d 9f 59 3a 24 3b 63 2d cf cc 03 42 06 99 ..=.Y:$;c-...B.. 0570 2c cb 5c 70 cf 68 93 eb 6c 04 aa c7 e0 2a 10 69 ,.\p.h..l....*.i 0580 30 25 ef 77 06 7a 0a 01 4f 77 fe 17 dd 27 54 4e 0%.w.z..Ow...'TN 0590 b0 f0 67 cf 37 8a f1 da df 7a 23 23 a4 bd be 46 ..g.7....z##...F 05a0 77 22 d9 e7 10 91 5f 0a w"...._. No. Time Source Destination Protocol Length Info 9007 92.422992 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2517 Ack=150307 Win=65535 Len=0 TSval=728406 TSecr=558354 Frame 9007: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2517, Ack: 150307, Len: 0 No. Time Source Destination Protocol Length Info 9008 92.423105 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=150307 Ack=2517 Win=1002 Len=1448 TSval=558354 TSecr=728406 Frame 9008: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 150307, Ack: 2517, Len: 1448 Data (1448 bytes) 0000 ce 91 b4 b5 d2 8c 5a 51 8a df 9a d6 d9 1a 90 0e ......ZQ........ 0010 fa da c5 17 45 f1 37 7c 53 62 73 83 fd 61 2b 52 ....E.7|Sbs..a+R 0020 37 d1 79 45 32 34 7a c9 12 22 fe 1f ff 36 6e e1 7.yE24z.."...6n. 0030 32 f3 b7 f9 c2 13 df 77 a2 ac 82 7b c7 40 16 81 2......w...{.@.. 0040 f5 e8 a7 9f e2 f4 17 f2 67 e5 a5 f7 8c da 94 50 ........g......P 0050 68 63 d6 93 59 1c be fd 66 4d f2 26 81 22 66 d1 hc..Y...fM.&."f. 0060 c2 0f 7a f6 78 92 a4 2b e7 fc 36 b9 41 b3 61 91 ..z.x..+..6.A.a. 0070 d3 c2 3b 85 72 78 73 be fb cf a0 b8 bd 61 c6 7a ..;.rxs......a.z 0080 0b 58 05 21 6e 82 68 68 44 98 bf 31 97 be ae 97 .X.!n.hhD..1.... 0090 9a 3e 2a 82 b5 53 21 df e0 c2 d9 a9 ec 15 6f cd .>*..S!.......o. 00a0 93 0f ff bb eb 8f 51 b8 0d 63 39 71 2e f1 2c c4 ......Q..c9q..,. 00b0 58 07 e8 9f 08 6d 25 dc 5f 86 53 a8 2b f2 ff e2 X....m%._.S.+... 00c0 51 f5 3d 60 60 a7 1d 3a 24 5b 20 d6 28 9a e2 a2 Q.=``..:$[ .(... 00d0 92 2b e0 8a f7 5d c1 88 ea 9b 4b 03 26 25 ed 2e .+...]....K.&%.. 00e0 b0 8f cd 23 08 ab 9c 00 be 47 76 42 cb 60 4d e1 ...#.....GvB.`M. 00f0 21 9b 87 01 cb 4d 6c 91 42 3b ca d1 34 41 13 8c !....Ml.B;..4A.. 0100 38 ed 8e 67 fa 60 0b 75 96 00 86 81 db e7 ae 47 8..g.`.u.......G 0110 48 e1 73 a2 1a c7 ea af dd 92 8b 53 a2 59 09 ce H.s........S.Y.. 0120 29 f6 f2 37 27 06 9c 31 f9 fb 2e 3f a4 57 59 1e )..7'..1...?.WY. 0130 d6 48 bb af 3e 6b a6 e5 9d 7d d0 3e e4 c1 2d 5c .H..>k...}.>..-\ 0140 a2 5d 50 ab 94 a6 1d 3a a0 9c 0c 0b c4 5c b7 28 .]P....:.....\.( 0150 b7 85 6c 09 bc ea 88 bc 90 fb 4c 87 d0 12 58 63 ..l.......L...Xc 0160 a7 c4 67 47 fd 0a a8 01 3b 0d a8 0b 8c f3 ad cc ..gG....;....... 0170 83 33 24 1a bf 15 d7 bf c7 f6 b2 aa a1 e8 55 1f .3$...........U. 0180 ef 42 86 b1 93 5e ed 09 a3 9d cf 0a 94 8c 99 c7 .B...^.......... 0190 bc 7d f0 d7 df 1a 93 f0 e4 88 92 03 1c 0b f4 e0 .}.............. 01a0 b7 aa 50 37 ad 6d 54 c6 4b 3a f5 51 c1 d1 c9 97 ..P7.mT.K:.Q.... 01b0 1c 04 4e 37 86 58 41 ab 0d 55 0d 80 53 4b 03 51 ..N7.XA..U..SK.Q 01c0 91 88 ce 85 0d 33 6b 7b d3 2c 80 d0 26 b4 01 50 .....3k{.,..&..P 01d0 35 aa 29 3f 5e 33 5a f7 83 cd c1 82 b1 8e 5c 9c 5.)?^3Z.......\. 01e0 d2 5b 9b a8 b9 1f 19 3a 26 5a f3 6b ac 25 34 09 .[.....:&Z.k.%4. 01f0 3a 05 44 78 58 5f 5a 03 a2 93 d9 33 60 0d bc 84 :.DxX_Z....3`... 0200 0b 30 4f 7a 98 62 ef e0 a8 6f f4 bc 7e ba b4 0a .0Oz.b...o..~... 0210 89 5b b8 65 24 83 82 ee 97 77 be 6b 9d 49 31 07 .[.e$....w.k.I1. 0220 b9 58 88 4c b7 82 21 7b 02 ec ef f2 48 e2 9c f8 .X.L..!{....H... 0230 48 7b 7f 62 90 46 a6 90 e8 16 bf 01 d0 ee 06 ee H{.b.F.......... 0240 d3 9c 5c f0 3d 55 60 16 b0 d1 0b 8f 38 12 4e fa ..\.=U`.....8.N. 0250 13 c0 8b d4 cc e3 a5 02 c0 55 22 a0 3f e6 7e b9 .........U".?.~. 0260 01 b3 1d 23 dd 9b 8e 91 67 a7 1c e1 0d 5f 6b fd ...#....g...._k. 0270 1e b3 5c b8 da 9b f5 ff 2d f0 f1 15 2a 1d ba 6b ..\.....-...*..k 0280 a8 7f 6d 54 ae dc cf 0a 23 f6 53 49 0c c6 0c 73 ..mT....#.SI...s 0290 2d 91 cf 5f 56 f8 74 f4 38 ff 0d b4 ba 9b c2 0d -.._V.t.8....... 02a0 9d d5 ec a2 6f 3f 7e 68 83 68 93 76 1d 73 70 53 ....o?~h.h.v.spS 02b0 a2 2f 9b 1a 1c ca 2b 5e 96 b5 76 1c 76 c2 75 b2 ./....+^..v.v.u. 02c0 e0 52 d3 d2 46 bb ec 0e fa 30 fe e4 fc 88 70 93 .R..F....0....p. 02d0 56 d6 43 af 00 11 45 d4 57 09 01 f3 01 99 e1 01 V.C...E.W....... 02e0 32 0a 9c 3a 36 e1 2a 22 39 10 21 52 80 54 ed 7e 2..:6.*"9.!R.T.~ 02f0 94 58 5b 32 94 88 e7 eb c5 41 ee 7f 2d dd 5c b4 .X[2.....A..-.\. 0300 bd d8 fd 44 a7 db 26 b5 2b 49 e3 b6 0d f1 60 46 ...D..&.+I....`F 0310 43 e4 b6 df df 52 a3 13 e4 cf 3e 56 84 b7 d3 3b C....R....>V...; 0320 ab 1e 52 2b dd dc f3 49 dd f4 c6 47 27 13 6e 6f ..R+...I...G'.no 0330 f0 3f 16 12 53 75 44 29 80 c5 21 07 e0 41 8c 54 .?..SuD)..!..A.T 0340 e4 8b 7d 83 e1 ac aa fb 6b dd d8 98 59 f0 45 48 ..}.....k...Y.EH 0350 6b 07 00 0d 32 1b a2 64 15 89 86 68 3e 36 78 fc k...2..d...h>6x. 0360 d4 90 1b 15 a1 fd 63 40 da cb 0f d1 77 d8 d6 02 [email protected]... 0370 a1 52 e6 cb ef 97 01 d5 13 b4 9b 21 9a 59 5a 5e .R.........!.YZ^ 0380 a8 9a 72 cb d9 c9 67 02 00 2f 10 c7 a6 31 91 58 ..r...g../...1.X 0390 26 80 75 38 0e ad 01 46 92 91 a2 75 d3 63 96 5d &.u8...F...u.c.] 03a0 86 71 cb c6 63 f9 20 f9 9f d0 f8 d9 bc da b4 d2 .q..c. ......... 03b0 9a bf d8 ab 22 f4 6d 25 8d 2c 0c 3d 4a ef 5f 41 ....".m%.,.=J._A 03c0 64 cc c5 f3 63 b5 37 3c 58 3a ff 7b 17 1d 3a c6 d...c.7<X:.{..:. 03d0 07 87 6c 67 08 6c ca 61 3b 3c ba 40 4e 17 ad a3 ..lg.l.a;<.@N... 03e0 28 68 53 6b 7b 64 d3 ac d5 1c c7 c4 16 c3 dc 4c (hSk{d.........L 03f0 3a 31 ba 19 19 85 1e 8c ee c1 cc 3f 9b 2e 75 3c :1.........?..u< 0400 dc 6e 27 f8 59 8d ae cc fd 26 c4 82 0d 00 57 ce .n'.Y....&....W. 0410 25 3e ad 6f 46 d3 92 41 c6 f4 d0 9e 54 17 53 5f %>.oF..A....T.S_ 0420 fa 24 97 33 c7 c3 e4 9b d4 d2 5a 8c db 2a 15 27 .$.3......Z..*.' 0430 ff 09 93 91 30 70 da 2c 23 de 07 cf 1c 9a 06 33 ....0p.,#......3 0440 4b 67 a8 10 bd 2f 9e 87 35 6a e1 bd 3d 1c 6f b1 Kg.../..5j..=.o. 0450 5b 4a 1d 69 8e 77 96 a7 63 73 35 8d 46 92 6c 89 [J.i.w..cs5.F.l. 0460 b2 f1 b7 27 32 24 cf 00 43 fd 2c 53 27 9c e4 7c ...'2$..C.,S'..| 0470 cc 15 17 7c c6 ce 98 de 92 ca 7c da e6 4e 0c 36 ...|......|..N.6 0480 c3 a3 2f 12 93 f9 45 a7 9e 1d 2d de 24 94 d3 54 ../...E...-.$..T 0490 43 13 f7 e8 9b 72 e2 50 3b 25 6c ed c2 60 2f 6d C....r.P;%l..`/m 04a0 56 49 68 33 48 60 5d 49 68 bc bd 56 5b 57 95 25 VIh3H`]Ih..V[W.% 04b0 69 c1 62 e5 2e 57 57 0a 09 92 f7 04 af 74 09 0a i.b..WW......t.. 04c0 76 98 a8 a6 c0 6e 2f e5 fa 0c 05 b7 65 5c cd 57 v....n/.....e\.W 04d0 7e 1f 52 a2 ce 4a 83 52 9f cb e1 17 a9 41 89 bc ~.R..J.R.....A.. 04e0 31 69 a0 90 47 eb bc aa f0 8a 31 0f 06 f8 4b ca 1i..G.....1...K. 04f0 62 41 74 8e 49 23 16 7d c4 82 bc ca 5a 7b 2f 52 bAt.I#.}....Z{/R 0500 38 fd 72 10 54 30 9b 19 81 f4 93 e1 c5 d5 d5 47 8.r.T0.........G 0510 f5 f1 e5 8b 2b 37 7e 0b 39 79 f7 2e 09 ff 76 41 ....+7~.9y....vA 0520 74 8f 08 6c 5e ee 1a 8e e5 76 a6 f1 1d 7f b2 5c t..l^....v.....\ 0530 7d 55 21 45 ae 03 09 b4 dd ec 0a 6d 90 e1 37 e9 }U!E.......m..7. 0540 ca 0c 98 ac fa bb ae 20 d3 33 b1 06 91 bc 24 8b ....... .3....$. 0550 f9 6f 43 84 0b 35 cb 1e 71 df 0c 6e ca 35 8e 31 .oC..5..q..n.5.1 0560 d4 ac 5d cd 0a 7d 4e da 2e a6 be c9 90 34 a6 05 ..]..}N......4.. 0570 9d e8 04 8d 2c fa 6f b5 2f 68 24 bc 2e fd 46 69 ....,.o./h$...Fi 0580 86 7a 81 a8 30 a9 6f 8e 5c 7f 96 3a 29 42 e6 89 .z..0.o.\..:)B.. 0590 69 0d e8 5c e8 ba e3 56 4d f9 d5 0d 61 a4 8e b9 i..\...VM...a... 05a0 7d 95 9e 60 da 7b 70 36 }..`.{p6 No. Time Source Destination Protocol Length Info 9009 92.423212 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=151755 Ack=2517 Win=1002 Len=1448 TSval=558354 TSecr=728406 Frame 9009: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 151755, Ack: 2517, Len: 1448 Data (1448 bytes) 0000 4e 42 3e 59 ee 16 7e 93 7a 1c fc 05 5e 36 7a cd NB>Y..~.z...^6z. 0010 12 13 67 5e cb 9f f6 c0 e6 cf 1a 81 dc 4b 27 98 ..g^.........K'. 0020 f4 c0 02 35 79 01 5b 5a b5 63 25 5e 6a 5c 25 c5 ...5y.[Z.c%^j\%. 0030 76 a4 26 83 b9 7d 4f d4 e1 87 23 66 aa 2f ad 15 v.&..}O...#f./.. 0040 74 a0 85 08 63 77 23 45 6f 13 e3 87 2d b9 36 1f t...cw#Eo...-.6. 0050 fb 2e de 90 12 41 e6 5f ee de 3d fc 56 fd 14 61 .....A._..=.V..a 0060 87 ae c6 23 2a 9f 18 c1 74 e0 de e4 27 24 9d de ...#*...t...'$.. 0070 5e c9 91 6c 88 1c 93 61 49 20 e1 e9 13 bb 0c d1 ^..l...aI ...... 0080 37 07 60 87 6f ee 88 6f 9e 3f 07 f1 bb 03 ca 0f 7.`.o..o.?...... 0090 86 a9 f4 57 56 8e 5f c4 d3 bc c8 3d 4b 7b 8f 84 ...WV._....=K{.. 00a0 2b 85 60 45 53 32 95 4d ac 40 01 85 42 51 50 aa +.`ES2.M.@xxxxx. 00b0 71 c6 44 c3 d7 8d 65 f9 d2 ad 03 ee 3b 58 43 a3 q.D...e.....;XC. 00c0 45 34 27 6d e5 52 aa da 81 9c 58 34 2f 43 81 e7 E4'm.R....X4/C.. 00d0 17 8d 80 80 4a 7d a7 76 ac 14 5d 17 04 01 c1 6e ....J}.v..]....n 00e0 32 cb 88 31 a6 d7 a2 22 31 65 c4 15 67 04 85 66 2..1..."1e..g..f 00f0 6b 04 ae a3 f3 ab 99 06 2c f4 ee 69 5c 24 f5 11 k.......,..i\$.. 0100 ca 9d 61 88 28 fb 5a 60 c8 55 32 24 e8 cf 7d 9d ..a.(.Z`.U2$..}. 0110 46 bd e4 65 6c f8 7f cb 99 7c 58 95 ce e0 d9 16 F..el....|X..... 0120 7e 48 c6 3c 0e b8 69 9c 32 fe ff 87 6c 6b 02 6e ~H.<..i.2...lk.n 0130 98 73 28 22 24 86 db b9 1a 8b 9e fa 37 b8 df 40 .s("$.......7..@ 0140 8b b2 7a 27 e0 c5 57 53 59 72 a6 84 e5 dc a4 c4 ..z'..WSYr...... 0150 d6 43 60 7e 6c e4 10 57 a4 d0 12 9e b3 dc 33 86 .C`~l..W......3. 0160 9a 78 20 bb 0a fe 5c cc 28 9d 70 cf 88 23 53 7e .x ...\.(.p..#S~ 0170 c2 8e 7c ac 02 ac ef 8c 25 34 0c 97 61 5e 3b eb ..|.....%4..a^;. 0180 69 31 68 36 e5 93 88 15 4e 98 f1 91 c9 f9 bd 36 i1h6....N......6 0190 19 e5 ee 74 e6 2c 80 6d 76 80 ef 33 41 06 e4 3b ...t.,.mv..3A..; 01a0 86 f3 fb e4 71 99 5f 4f 9f 4d 74 cc ab 07 4c 90 ....q._O.Mt...L. 01b0 bb 29 d3 3d 29 bd ac d9 e8 04 d7 15 d1 e5 c0 b6 .).=)........... 01c0 6f 87 80 ab 7d 99 fb b7 f1 71 3b 76 4a 28 57 4c o...}....q;vJ(WL 01d0 46 6d 56 31 0f 08 45 19 c3 d2 34 b2 b6 30 b4 a4 FmV1..E...4..0.. 01e0 c8 c7 77 ee 83 53 4e c9 ea 47 8a 60 b5 18 cf b9 ..w..SN..G.`.... 01f0 9a 47 b5 c6 20 37 b4 6c ec 78 6f 71 5b 26 53 f7 .G.. 7.l.xoq[&S. 0200 20 f4 35 22 02 1c c1 d0 c7 c6 07 76 71 cb c0 aa .5".......vq... 0210 d5 84 af 24 7c 6b b1 1b 76 41 19 f7 29 29 d5 cf ...$|k..vA..)).. 0220 26 dd 92 d7 7b 2e 21 60 d5 dd 1a 26 40 ca 81 2f &...{.!`...&@../ 0230 fe f8 19 e3 79 66 b2 81 e0 1b 7f 53 98 9e 09 3b ....yf.....S...; 0240 27 ad f6 bd 22 ad e4 17 1b e7 29 78 4b cc 44 4c '...".....)xK.DL 0250 35 01 f7 64 26 ff d3 75 7e 3e 25 ac 19 e2 0d 94 5..d&..u~>%..... 0260 6f 6b a5 0a 48 3a 1b 91 a2 a8 d7 02 d7 e3 ac ee ok..H:.......... 0270 4f ff 03 e3 d8 3f e8 ee 00 06 6f 60 b5 1a 18 36 O....?....o`...6 0280 82 5a 06 31 0b 32 0c 21 e9 b8 38 ec cf 86 1d c0 .Z.1.2.!..8..... 0290 0c e8 28 52 4e fa d8 82 c1 92 c6 85 7a 48 e4 70 ..(RN.......zH.p 02a0 b5 73 8f de 5d 66 78 fe f6 21 20 32 f7 7a 73 20 .s..]fx..! 2.zs 02b0 a5 ef 91 6a 9b 3a 7f a9 0d 99 ac 84 7c 2f 0d 20 ...j.:......|/. 02c0 5e 1e 07 19 7f d4 ba 25 5a 15 2d de 7a e5 6f 34 ^......%Z.-.z.o4 02d0 6f 7d 59 ba 34 cf ad 01 f0 43 80 f2 1e 6e 16 64 o}Y.4....C...n.d 02e0 91 58 7e b0 6f 8b 86 e0 40 c3 b6 2a 06 90 84 62 .X~.o...@..*...b 02f0 46 de e1 0a fe a4 ef 11 e3 2f 5f b0 a7 5d 26 36 F......../_..]&6 0300 3d 02 6c d6 95 63 63 91 e2 be 3f 62 01 a2 ee a1 =.l..cc...?b.... 0310 ff cb c5 6a b0 b3 9a 36 78 26 a4 18 e8 75 18 ef ...j...6x&...u.. 0320 86 ee de 8f d2 8b e3 f9 dc 1e d9 5a f0 2a 8c c2 ...........Z.*.. 0330 8e 55 f6 8a 15 08 ac 35 14 2f 9c 2b 85 8f 56 4c .U.....5./.+..VL 0340 53 c3 b0 15 1e cb 80 b5 e4 0b b0 22 83 8d 79 51 S.........."..yQ 0350 a4 d0 f0 ba a5 e3 75 f4 6d a6 9d e3 83 74 51 ee ......u.m....tQ. 0360 41 fe ef 58 29 5f fa a9 d6 66 f3 d7 59 0e 59 d1 A..X)_...f..Y.Y. 0370 c1 d6 85 92 e3 86 cc d9 1b 90 98 a7 99 56 ec 2d .............V.- 0380 9a 0a e8 e6 a1 db fd 04 72 53 85 23 5d 54 a8 5f ........rS.#]T._ 0390 70 5b 9e 88 cb 9d c5 fd 7a 15 56 ba 82 81 2e ab p[......z.V..... 03a0 e2 e5 ca 7d 55 ac 5e da cc b4 a2 de ec 11 33 35 ...}U.^.......35 03b0 36 8c 1b 52 77 26 08 96 0e 3e ac 57 33 97 59 8e 6..Rw&...>.W3.Y. 03c0 bd f9 13 e6 b0 73 22 8a 96 35 4f 97 39 12 75 2c .....s"..5O.9.u, 03d0 54 61 03 bd e8 8a 3c 67 29 3e 7e 07 73 82 91 e4 Ta....<g)>~.s... 03e0 67 1d 4a 49 91 e5 c5 eb 87 c9 36 b5 58 7c cf 1e g.JI......6.X|.. 03f0 0a 60 27 a4 35 3b 3c 03 a6 9f c4 e5 e7 09 52 22 .`'.5;<.......R" 0400 80 50 29 1c 9f 8a 7b 5a 71 56 62 67 cc 29 46 30 .P)...{ZqVbg.)F0 0410 b5 39 cd f8 89 cc 46 f6 b0 e9 ad 24 9e 72 2f 7a .9....F....$.r/z 0420 25 68 5f 7a 49 cc 50 64 c0 52 d2 68 a5 13 0a 8d %h_zI.Pd.R.h.... 0430 24 fa bd de 79 5f ca b4 91 e2 ac d0 7a e5 33 3b $...y_......z.3; 0440 64 13 25 0e 52 a7 a6 70 88 35 9d 3b a8 37 f0 96 d.%.R..p.5.;.7.. 0450 1d 86 b7 10 9a af af 71 2b e9 d9 5e c2 eb 36 57 .......q+..^..6W 0460 3c 67 09 a0 61 88 f4 80 aa 62 00 e3 23 41 3a 9b <g..a....b..#A:. 0470 25 5e 10 fe 92 6c c8 27 26 60 3a 74 96 dd ad 34 %^...l.'&`:t...4 0480 96 b5 2d 49 5e 54 21 83 5d 34 19 6d d6 1c 00 8a ..-I^T!.]4.m.... 0490 c8 a3 1d 52 f4 90 96 7d 42 49 be 3d af 4d ce 16 ...R...}BI.=.M.. 04a0 ab d4 9d fe 69 6e 0a e1 9c 16 5d 8e 36 84 73 c1 ....in....].6.s. 04b0 59 19 dc fa 27 25 21 b7 02 60 7e c0 9e c1 34 1d Y...'%!..`~...4. 04c0 94 de c1 48 9c 52 6b 31 82 f4 e8 d8 34 cc 23 07 ...H.Rk1....4.#. 04d0 ba e2 8f a7 00 52 ca 3b 53 8b b2 fe 74 1b cc ea .....R.;S...t... 04e0 b5 ac 13 8c 9a 68 30 2e bf 09 cf 9c ab dc f0 18 .....h0......... 04f0 fa a0 45 b2 fd e4 db cc 0a e0 2f 82 40 68 94 55 ..E......./[email protected] 0500 f1 aa dd 43 2c 84 eb c4 5f 60 08 a7 ac 5e 00 4a ...C,..._`...^.J 0510 ad 77 66 3d fd 1a 3b ec ff 6f db 9d 98 54 58 89 .wf=..;..o...TX. 0520 60 4f e7 6c 66 76 4e 74 79 d9 92 27 42 39 ef 38 `O.lfvNty..'B9.8 0530 e6 b2 9d a6 1d f8 43 0e 85 cb 09 6a f5 02 28 88 ......C....j..(. 0540 1b 9e 22 b2 ec a0 49 89 65 16 a2 d1 f7 e0 b5 67 .."...I.e......g 0550 44 f6 fe 7b 72 8f 7d d0 4e d8 46 64 d4 31 0c 90 D..{r.}.N.Fd.1.. 0560 b2 ed b1 f2 9c b2 7e 31 22 fe 0a 55 44 43 95 16 ......~1"..UDC.. 0570 73 bc 95 fd bd 34 e5 08 c1 70 8d e1 7d 50 ad 3f s....4...p..}P.? 0580 bb fa dc 7b 21 68 c2 e1 e1 93 ba 06 21 e6 3f 89 ...{!h......!.?. 0590 12 3a 22 bb 85 46 28 19 70 25 aa 99 99 ac c1 26 .:"..F(.p%.....& 05a0 19 c7 16 1d 24 6f 75 31 ....$ou1 No. Time Source Destination Protocol Length Info 9010 92.423288 192.168.10.1 192.168.10.203 TCP 463 34433 > cds [PSH, ACK] Seq=153203 Ack=2517 Win=1002 Len=397 TSval=558354 TSecr=728406 Frame 9010: 463 bytes on wire (3704 bits), 463 bytes captured (3704 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 153203, Ack: 2517, Len: 397 Data (397 bytes) 0000 45 76 91 bd 60 78 a4 1f aa a6 0d a8 26 6f 22 a8 Ev..`x......&o". 0010 ac 86 fe a8 21 44 2c da 62 4c 90 08 e3 31 4c 7f ....!D,.bL...1L. 0020 42 88 7d 1a d7 70 35 17 18 7d 67 d4 bb 0c 22 fd B.}..p5..}g...". 0030 dc 20 03 ca 62 1d ca 0b aa 0a 2d 76 34 e8 5d cc . ..b.....-v4.]. 0040 84 98 69 6f 63 bb 41 97 78 14 b4 36 91 d3 46 da ..ioc.A.x..6..F. 0050 81 69 e9 f4 71 75 b2 f7 e8 52 e6 30 04 90 37 01 .i..qu...R.0..7. 0060 06 74 4c 3c 55 fc 9e 83 ad a5 8a e1 62 7c 8c 53 .tL<U.......b|.S 0070 3b dc ed ee 01 39 96 52 31 cb 33 9e af 4a 2f 35 ;....9.R1.3..J/5 0080 5b 30 13 54 fc 7f 81 95 79 12 70 04 61 48 b5 6e [0.T....y.p.aH.n 0090 14 36 2f fa b6 a5 99 ca 2a c1 ba 43 f6 ef 2a 8d .6/.....*..C..*. 00a0 c3 77 ae 1f 27 8d 5e b1 d4 b3 7f 17 d0 69 5c 15 .w..'.^......i\. 00b0 01 8c 4e 82 8d 8a 01 28 c5 f9 7e 77 ed 66 6d 00 ..N....(..~w.fm. 00c0 ce 64 25 df 61 5f e3 66 34 af 36 f4 cb a5 ec ff .d%.a_.f4.6..... 00d0 02 99 92 36 c0 f2 f8 6d ec 12 54 0d 44 81 16 74 ...6...m..T.D..t 00e0 2d 06 2a 6f 5e 1d ef e4 1c b5 64 f2 48 93 4b df -.*o^.....d.H.K. 00f0 f3 3b 4a 9e 13 d2 b3 da 93 64 2b b8 96 ba 10 fe .;J......d+..... 0100 de b2 9c 45 8e 4f 21 f5 00 06 85 0c 26 d7 b3 08 ...E.O!.....&... 0110 c6 0d 1c 30 7a da a2 7a 95 b2 16 5f fb 2c 46 9e ...0z..z..._.,F. 0120 4c 98 ec 01 00 91 92 99 95 03 8a 48 0c f5 72 03 L..........H..r. 0130 c3 72 3d 68 75 55 02 b6 a2 fc 38 77 c0 9d 4e 1b .r=huU....8w..N. 0140 88 92 02 fd 58 cb 69 7f ae 30 48 6d d7 01 ce 82 ....X.i..0Hm.... 0150 7c f2 12 2a 5f cb 60 c7 c6 e6 1b f5 7f 47 a7 62 |..*_.`......G.b 0160 42 ab de 3b b0 e9 d5 c8 c7 1a 85 db 4e f0 88 09 B..;........N... 0170 1d 20 be 60 21 9a cd 7d 9e 96 a2 8c c8 86 7c f6 . .`!..}......|. 0180 8d d3 fc 3b 9c 38 d0 6d c9 3c 1c 71 73 ...;.8.m.<.qs No. Time Source Destination Protocol Length Info 9011 92.423367 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2517 Ack=153600 Win=65535 Len=0 TSval=728406 TSecr=558354 Frame 9011: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2517, Ack: 153600, Len: 0 No. Time Source Destination Protocol Length Info 9012 92.425924 Watchgua_3c:4c:d8 Dell_5e:a8:82 ARP 60 Who has 192.168.10.203? Tell 192.168.10.1 Frame 9012: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9013 92.425939 Dell_5e:a8:82 Watchgua_3c:4c:d8 ARP 106 192.168.10.203 is at 00:13:72:5e:a8:82 Frame 9013: 106 bytes on wire (848 bits), 106 bytes captured (848 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9014 92.478327 192.168.10.83 192.168.10.255 BROWSER 243 Host Announcement SCAN3, Workstation, Server, NT Workstation, Potential Browser Frame 9014: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Cisco-Li_0b:3f:ff (00:18:f8:0b:3f:ff), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.83 (192.168.10.83), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 9015 92.478567 192.168.10.83 192.168.10.255 BROWSER 243 Host Announcement SCAN3, Workstation, Server, NT Workstation, Potential Browser Frame 9015: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Cisco-Li_0b:3f:ff (00:18:f8:0b:3f:ff), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.83 (192.168.10.83), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 9016 92.549520 192.168.10.206 166.137.8.201 TCP 60 [TCP Dup ACK 8999#1] https > 46151 [ACK] Seq=1676 Ack=156 Win=65380 Len=0 Frame 9016: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.206 (192.168.10.206), Dst: 166.137.8.201 (166.137.8.201) Transmission Control Protocol, Src Port: https (443), Dst Port: 46151 (46151), Seq: 1676, Ack: 156, Len: 0 No. Time Source Destination Protocol Length Info 9017 92.642428 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3132037376, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9017: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9018 92.642453 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3132037376, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9018: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9019 92.642465 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3132037376, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9019: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9020 92.642477 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3132037376, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9020: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9021 92.663070 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 706216192, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9021: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9022 92.663093 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 706216192, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9022: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9023 92.663107 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 706216192, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9023: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9024 92.663122 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 706216192, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9024: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9025 92.663206 166.137.8.201 192.168.10.206 TLSv1 199 Client Key Exchange, Change Cipher Spec Frame 9025: 199 bytes on wire (1592 bits), 199 bytes captured (1592 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 166.137.8.201 (166.137.8.201), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 46151 (46151), Dst Port: https (443), Seq: 156, Ack: 1676, Len: 145 Secure Sockets Layer No. Time Source Destination Protocol Length Info 9026 92.663256 166.137.8.201 192.168.10.206 TLSv1 91 Encrypted Handshake Message Frame 9026: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 166.137.8.201 (166.137.8.201), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 46151 (46151), Dst Port: https (443), Seq: 301, Ack: 1676, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 9027 92.663286 192.168.10.206 166.137.8.201 TCP 60 https > 46151 [ACK] Seq=1676 Ack=338 Win=65198 Len=0 Frame 9027: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.206 (192.168.10.206), Dst: 166.137.8.201 (166.137.8.201) Transmission Control Protocol, Src Port: https (443), Dst Port: 46151 (46151), Seq: 1676, Ack: 338, Len: 0 No. Time Source Destination Protocol Length Info 9028 92.666509 192.168.10.206 166.137.8.201 TLSv1 97 Change Cipher Spec, Encrypted Handshake Message Frame 9028: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.206 (192.168.10.206), Dst: 166.137.8.201 (166.137.8.201) Transmission Control Protocol, Src Port: https (443), Dst Port: 46151 (46151), Seq: 1676, Ack: 338, Len: 43 Secure Sockets Layer No. Time Source Destination Protocol Length Info 9029 92.666569 166.137.8.201 192.168.10.206 TCP 60 46151 > https [ACK] Seq=338 Ack=1719 Win=93396 Len=0 Frame 9029: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 166.137.8.201 (166.137.8.201), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 46151 (46151), Dst Port: https (443), Seq: 338, Ack: 1719, Len: 0 No. Time Source Destination Protocol Length Info 9030 92.668644 192.168.10.220 208.67.222.222 DNS 86 Standard query PTR 66.177.203.62.in-addr.arpa Frame 9030: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 51017 (51017), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 9031 92.699901 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=2517 Ack=153600 Win=65535 Len=74 TSval=728409 TSecr=558354 Frame 9031: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2517, Ack: 153600, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 31 fc b4 b6 89 97 2e 7f d0 8d 02 .... 1.......... 0010 36 d9 1f 1d 7b 00 65 52 8c f0 93 6f fb 7c 20 12 6...{.eR...o.| . 0020 bc 7f ab 9e a7 17 03 01 00 20 1d 40 dc c8 fc 33 ......... [email protected] 0030 6c 05 ee 02 04 ac da ed ee 9d ba 32 d1 b5 14 dc l..........2.... 0040 4f 3b 4a 3b 05 99 9e 9e 0f 3a O;J;.....: No. Time Source Destination Protocol Length Info 9032 92.699962 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=153600 Ack=2591 Win=1002 Len=0 TSval=558423 TSecr=728409 Frame 9032: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 153600, Ack: 2591, Len: 0 No. Time Source Destination Protocol Length Info 9033 92.737565 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:16:33 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 9033: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:16:33 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 9034 92.833732 166.137.8.201 192.168.10.206 TLSv1 520 Application Data Frame 9034: 520 bytes on wire (4160 bits), 520 bytes captured (4160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 166.137.8.201 (166.137.8.201), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 46151 (46151), Dst Port: https (443), Seq: 338, Ack: 1719, Len: 466 Secure Sockets Layer No. Time Source Destination Protocol Length Info 9035 92.833978 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=7015 Ack=510384 Win=13767 Len=0 Frame 9035: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7015, Ack: 510384, Len: 0 No. Time Source Destination Protocol Length Info 9036 92.834010 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 9035#1] smtp > 23308 [ACK] Seq=7015 Ack=510384 Win=13767 Len=0 Frame 9036: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7015, Ack: 510384, Len: 0 No. Time Source Destination Protocol Length Info 9037 92.834044 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9037: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 511727, Ack: 7015, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9038 92.834074 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9038: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 513107, Ack: 7015, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9039 92.834103 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9039: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 514487, Ack: 7015, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9040 92.834132 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9040: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 515867, Ack: 7015, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9041 92.834162 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9041: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 517247, Ack: 7015, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9042 92.834196 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9042: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 518627, Ack: 7015, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9043 92.834229 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 9035#2] smtp > 23308 [ACK] Seq=7015 Ack=510384 Win=13767 Len=0 Frame 9043: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7015, Ack: 510384, Len: 0 No. Time Source Destination Protocol Length Info 9044 92.834258 192.168.10.207 206.225.164.186 SMTP 264 S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 9044: 264 bytes on wire (2112 bits), 264 bytes captured (2112 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7015, Ack: 510384, Len: 210 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9045 92.834286 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 9044#1] smtp > 23308 [ACK] Seq=7225 Ack=510384 Win=13767 Len=0 Frame 9045: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7225, Ack: 510384, Len: 0 No. Time Source Destination Protocol Length Info 9046 92.834313 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 9044#2] smtp > 23308 [ACK] Seq=7225 Ack=510384 Win=13767 Len=0 Frame 9046: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7225, Ack: 510384, Len: 0 No. Time Source Destination Protocol Length Info 9047 92.834341 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 9044#3] smtp > 23308 [ACK] Seq=7225 Ack=510384 Win=13767 Len=0 Frame 9047: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7225, Ack: 510384, Len: 0 No. Time Source Destination Protocol Length Info 9048 92.834368 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=520007 Ack=7225 Win=46153 Len=0 Frame 9048: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 520007, Ack: 7225, Len: 0 No. Time Source Destination Protocol Length Info 9049 92.834396 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 9044#4] smtp > 23308 [ACK] Seq=7225 Ack=510384 Win=13767 Len=0 Frame 9049: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7225, Ack: 510384, Len: 0 No. Time Source Destination Protocol Length Info 9050 92.834423 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 9044#5] smtp > 23308 [ACK] Seq=7225 Ack=510384 Win=13767 Len=0 Frame 9050: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7225, Ack: 510384, Len: 0 No. Time Source Destination Protocol Length Info 9051 92.834455 206.225.164.186 192.168.10.207 SMTP 1397 [TCP Fast Retransmission] C: DATA fragment, 1343 bytes Frame 9051: 1397 bytes on wire (11176 bits), 1397 bytes captured (11176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 510384, Ack: 7225, Len: 1343 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9052 92.834494 206.225.164.186 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 9052: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 511727, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9053 92.834523 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9053: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 520007, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9054 92.834553 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9054: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 521387, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9055 92.834582 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=7225 Ack=520007 Win=4144 Len=0 Frame 9055: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7225, Ack: 520007, Len: 0 No. Time Source Destination Protocol Length Info 9056 92.834613 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9056: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 522767, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9057 92.834641 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 9055#1] smtp > 23308 [ACK] Seq=7225 Ack=520007 Win=4144 Len=0 Frame 9057: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7225, Ack: 520007, Len: 0 No. Time Source Destination Protocol Length Info 9058 92.834669 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=7225 Ack=522767 Win=1384 Len=0 Frame 9058: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7225, Ack: 522767, Len: 0 No. Time Source Destination Protocol Length Info 9059 92.837953 Watchgua_3c:4c:d8 Dell_39:5d:dd ARP 60 Who has 192.168.10.207? Tell 192.168.10.1 Frame 9059: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9060 92.837968 Dell_39:5d:dd Watchgua_3c:4c:d8 ARP 60 192.168.10.207 is at 00:18:8b:39:5d:dd Frame 9060: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9061 92.883544 166.137.8.201 192.168.10.206 TLSv1 257 Application Data Frame 9061: 257 bytes on wire (2056 bits), 257 bytes captured (2056 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 166.137.8.201 (166.137.8.201), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 46151 (46151), Dst Port: https (443), Seq: 804, Ack: 1719, Len: 203 Secure Sockets Layer No. Time Source Destination Protocol Length Info 9062 92.883583 192.168.10.206 166.137.8.201 TCP 60 https > 46151 [ACK] Seq=1719 Ack=1007 Win=64529 Len=0 Frame 9062: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.206 (192.168.10.206), Dst: 166.137.8.201 (166.137.8.201) Transmission Control Protocol, Src Port: https (443), Dst Port: 46151 (46151), Seq: 1719, Ack: 1007, Len: 0 No. Time Source Destination Protocol Length Info 9063 92.890776 192.168.10.206 166.137.8.201 TLSv1 293 Application Data Frame 9063: 293 bytes on wire (2344 bits), 293 bytes captured (2344 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.206 (192.168.10.206), Dst: 166.137.8.201 (166.137.8.201) Transmission Control Protocol, Src Port: https (443), Dst Port: 46151 (46151), Seq: 1719, Ack: 1007, Len: 239 Secure Sockets Layer No. Time Source Destination Protocol Length Info 9064 92.890826 166.137.8.201 192.168.10.206 TCP 60 46151 > https [ACK] Seq=1007 Ack=1958 Win=93158 Len=0 Frame 9064: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 166.137.8.201 (166.137.8.201), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 46151 (46151), Dst Port: https (443), Seq: 1007, Ack: 1958, Len: 0 No. Time Source Destination Protocol Length Info 9065 92.890858 192.168.10.206 166.137.8.201 TLSv1 119 Application Data Frame 9065: 119 bytes on wire (952 bits), 119 bytes captured (952 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.206 (192.168.10.206), Dst: 166.137.8.201 (166.137.8.201) Transmission Control Protocol, Src Port: https (443), Dst Port: 46151 (46151), Seq: 1958, Ack: 1007, Len: 65 Secure Sockets Layer No. Time Source Destination Protocol Length Info 9066 92.890894 166.137.8.201 192.168.10.206 TCP 60 46151 > https [ACK] Seq=1007 Ack=2023 Win=93092 Len=0 Frame 9066: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 166.137.8.201 (166.137.8.201), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 46151 (46151), Dst Port: https (443), Seq: 1007, Ack: 2023, Len: 0 No. Time Source Destination Protocol Length Info 9067 93.010489 208.67.222.222 192.168.10.220 DNS 129 Standard query response PTR 66-177.203-62.cust.bluewin.ch Frame 9067: 129 bytes on wire (1032 bits), 129 bytes captured (1032 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 51017 (51017) Domain Name System (response) No. Time Source Destination Protocol Length Info 9068 93.031020 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=7225 Ack=524147 Win=4 Len=0 Frame 9068: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7225, Ack: 524147, Len: 0 No. Time Source Destination Protocol Length Info 9069 93.083248 166.137.8.201 192.168.10.206 TLSv1 77 Encrypted Alert Frame 9069: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 166.137.8.201 (166.137.8.201), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 46151 (46151), Dst Port: https (443), Seq: 1007, Ack: 2023, Len: 23 Secure Sockets Layer No. Time Source Destination Protocol Length Info 9070 93.083298 166.137.8.201 192.168.10.206 TCP 60 46151 > https [FIN, ACK] Seq=1030 Ack=2023 Win=93092 Len=0 Frame 9070: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 166.137.8.201 (166.137.8.201), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 46151 (46151), Dst Port: https (443), Seq: 1030, Ack: 2023, Len: 0 No. Time Source Destination Protocol Length Info 9071 93.083327 192.168.10.206 166.137.8.201 TCP 60 https > 46151 [ACK] Seq=2023 Ack=1031 Win=64506 Len=0 Frame 9071: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.206 (192.168.10.206), Dst: 166.137.8.201 (166.137.8.201) Transmission Control Protocol, Src Port: https (443), Dst Port: 46151 (46151), Seq: 2023, Ack: 1031, Len: 0 No. Time Source Destination Protocol Length Info 9072 93.083357 192.168.10.206 166.137.8.201 TCP 60 https > 46151 [FIN, ACK] Seq=2023 Ack=1031 Win=64506 Len=0 Frame 9072: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.206 (192.168.10.206), Dst: 166.137.8.201 (166.137.8.201) Transmission Control Protocol, Src Port: https (443), Dst Port: 46151 (46151), Seq: 2023, Ack: 1031, Len: 0 No. Time Source Destination Protocol Length Info 9073 93.083394 166.137.8.201 192.168.10.206 TCP 60 46151 > https [ACK] Seq=1031 Ack=2024 Win=93092 Len=0 Frame 9073: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_f6:3f:45 (00:13:72:f6:3f:45) Internet Protocol Version 4, Src: 166.137.8.201 (166.137.8.201), Dst: 192.168.10.206 (192.168.10.206) Transmission Control Protocol, Src Port: 46151 (46151), Dst Port: https (443), Seq: 1031, Ack: 2024, Len: 0 No. Time Source Destination Protocol Length Info 9074 93.120258 192.168.10.220 208.67.222.222 DNS 85 Standard query PTR 242.15.16.83.in-addr.arpa Frame 9074: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 59354 (59354), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 9075 93.193959 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 9075: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9076 93.315359 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 9076: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9077 93.371643 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 9077: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7225, Ack: 524147, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9078 93.371680 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=524147 Ack=7267 Win=46132 Len=0 Frame 9078: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 524147, Ack: 7267, Len: 0 No. Time Source Destination Protocol Length Info 9079 93.443558 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 9079: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9080 93.476154 208.67.222.222 192.168.10.220 DNS 126 Standard query response PTR aap242.internetdsl.tpnet.pl Frame 9080: 126 bytes on wire (1008 bits), 126 bytes captured (1008 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 59354 (59354) Domain Name System (response) No. Time Source Destination Protocol Length Info 9081 93.489539 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 9081: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9082 93.489565 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 9082: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9083 93.566010 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 9083: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9084 93.600324 192.168.10.220 208.67.222.222 DNS 86 Standard query PTR 122.48.108.95.in-addr.arpa Frame 9084: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 64922 (64922), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 9085 93.658121 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3148814592, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9085: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9086 93.658145 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3148814592, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9086: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9087 93.658158 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3148814592, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9087: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9088 93.658170 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3148814592, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9088: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9089 93.678767 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 722993408, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9089: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9090 93.678789 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 722993408, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9090: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9091 93.678801 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 722993408, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9091: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9092 93.678813 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 722993408, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9092: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9093 93.693533 208.67.222.222 192.168.10.220 DNS 86 Standard query response, No such name Frame 9093: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 64922 (64922) Domain Name System (response) No. Time Source Destination Protocol Length Info 9094 93.693991 192.168.10.203 95.108.48.122 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 9094: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 95.108.48.122 (95.108.48.122) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 9095 93.768165 192.168.10.104 192.168.10.220 NBNS 110 Refresh NB BAIMOBILEPC2<00> Frame 9095: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 9096 93.827673 Dell_f6:3f:45 Broadcast ARP 60 Who has 192.168.10.192? Tell 192.168.10.206 Frame 9096: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9097 93.827704 Dell_f6:3f:45 Broadcast ARP 60 Who has 192.168.10.192? Tell 192.168.10.206 Frame 9097: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9098 93.876979 192.168.10.222 192.168.80.1 TCP 62 netbios-ssn > ccmad [SYN, ACK] Seq=0 Ack=0 Win=16384 Len=0 MSS=1460 SACK_PERM=1 Frame 9098: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_55:3b:5b (00:24:e8:55:3b:5b), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.222 (192.168.10.222), Dst: 192.168.80.1 (192.168.80.1) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: ccmad (3114), Seq: 0, Ack: 0, Len: 0 No. Time Source Destination Protocol Length Info 9099 93.912973 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 9099: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7267, Ack: 524147, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9100 93.913011 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=524147 Ack=7309 Win=46111 Len=0 Frame 9100: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 524147, Ack: 7309, Len: 0 No. Time Source Destination Protocol Length Info 9101 94.004630 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 9101: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9102 94.004668 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 9102: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9103 94.008552 202.1.166.13 192.168.10.207 TCP 62 gbmt-stars > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 9103: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gbmt-stars (3912), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 9104 94.008615 192.168.10.207 202.1.166.13 TCP 62 smtp > gbmt-stars [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 9104: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 202.1.166.13 (202.1.166.13) Transmission Control Protocol, Src Port: smtp (25), Dst Port: gbmt-stars (3912), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 9105 94.237856 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:16:34 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 9105: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:16:34 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 9106 94.296710 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 9106: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9107 94.296743 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 9107: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9108 94.296934 192.168.10.226 192.168.10.66 ICMP 60 Echo (ping) request id=0x0400, seq=4081/61711, ttl=128 Frame 9108: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.66 (192.168.10.66) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 9109 94.296949 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 9109: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9110 94.296960 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 9110: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9111 94.296976 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 9111: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9112 94.296986 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 9112: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9113 94.297047 192.168.10.66 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=4081/61711, ttl=128 Frame 9113: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Internet Protocol Version 4, Src: 192.168.10.66 (192.168.10.66), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 9114 94.297059 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 9114: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9115 94.297069 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 9115: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9116 94.297079 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 9116: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9117 94.297090 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 9117: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9118 94.297100 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 9118: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9119 94.297122 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 9119: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9120 94.297159 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 9120: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9121 94.297169 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 9121: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9122 94.297179 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 9122: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9123 94.297191 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 9123: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9124 94.297214 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 9124: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9125 94.297225 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 9125: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9126 94.297235 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 9126: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9127 94.297246 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 9127: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9128 94.297256 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 9128: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9129 94.297279 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 9129: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9130 94.297290 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 9130: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9131 94.297300 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 9131: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9132 94.297310 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 9132: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9133 94.297320 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 9133: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9134 94.297330 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 9134: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9135 94.297340 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 9135: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9136 94.297350 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 9136: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9137 94.297361 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 9137: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9138 94.297381 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 9138: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9139 94.297390 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 9139: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9140 94.297401 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 9140: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9141 94.297411 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 9141: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9142 94.297421 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 9142: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9143 94.297432 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 9143: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9144 94.297442 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 9144: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9145 94.297545 192.168.10.233 192.168.10.245 Syslog 178 LOCAL4.WARNING: :Oct 03 19:37:39 EDT: %PIX-session-4-405001: Received ARP request collision from 192.168.10.226/0026.b952.f0f3 on interface Inside\n Frame 9145: 178 bytes on wire (1424 bits), 178 bytes captured (1424 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.233 (192.168.10.233), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: :Oct 03 19:37:39 EDT: %PIX-session-4-405001: Received ARP request collision from 192.168.10.226/0026.b952.f0f3 on interface Inside\n No. Time Source Destination Protocol Length Info 9146 94.297556 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 9146: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9147 94.297567 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 9147: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9148 94.297577 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 9148: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9149 94.297594 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 9149: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9150 94.297608 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 9150: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9151 94.297618 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 9151: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9152 94.297680 192.168.10.226 192.168.10.66 ICMP 60 Echo (ping) request id=0x0400, seq=9201/61731, ttl=128 Frame 9152: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.66 (192.168.10.66) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 9153 94.297691 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 9153: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9154 94.297701 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 9154: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9155 94.297748 192.168.10.66 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=9201/61731, ttl=128 Frame 9155: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.66 (192.168.10.66), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 9156 94.297759 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 9156: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9157 94.297975 192.168.10.226 192.168.10.66 ICMP 60 Echo (ping) request id=0x0400, seq=14321/61751, ttl=128 Frame 9157: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.66 (192.168.10.66) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 9158 94.298021 192.168.10.66 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=14321/61751, ttl=128 Frame 9158: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.66 (192.168.10.66), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 9159 94.457695 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 9159: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7309, Ack: 524147, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9160 94.457731 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=524147 Ack=7351 Win=46090 Len=0 Frame 9160: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 524147, Ack: 7351, Len: 0 No. Time Source Destination Protocol Length Info 9161 94.673740 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3165591808, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9161: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9162 94.673764 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3165591808, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9162: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9163 94.673778 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3165591808, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9163: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9164 94.673790 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3165591808, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9164: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9165 94.694374 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 739770624, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9165: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9166 94.694393 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 739770624, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9166: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9167 94.694405 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 739770624, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9167: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9168 94.694417 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 739770624, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9168: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9169 94.834087 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-12.geo.kaspersky.com Frame 9169: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 56945 (56945), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 9170 95.009824 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 9170: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7351, Ack: 524147, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9171 95.009863 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=524147 Ack=7393 Win=46069 Len=0 Frame 9171: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 524147, Ack: 7393, Len: 0 No. Time Source Destination Protocol Length Info 9172 95.019115 192.168.10.31 192.168.20.3 UDP 776 Source port: 50764 Destination port: apc-3052 Frame 9172: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 34 39 3a 35 36 0a 53 52 3d 31 30 37 =19:49:56.SR=107 0060 43 0a 53 55 3d 32 44 38 32 44 42 30 37 0a 52 44 C.SU=2D82DB07.RD 0070 3d 37 34 37 33 0a 54 41 3d 31 39 32 2e 31 36 38 =7473.TA=192.168 0080 2e 32 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a .20.3.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 35 .4C=207.3.50=035 00c0 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 3d 31 .0.43=029.1.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 39 3a 1/19/07.6A=0059: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 3d 31 746005443 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d .46=60.00.4D= 0160 32 30 38 2e 38 0a 34 45 3d 32 30 37 2e 33 0a 34 208.8.4E=207.3.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 33 2e .5C=028.0.2F=13. 01d0 37 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 77.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 35 39 2e 39 37 3b 32 30 37 000.09=59.97;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 41 46 38 38 45 36 44 30 34 42 46 33 42 35 46 =AF88E6D04BF3B5F 02a0 35 42 35 42 33 39 34 30 30 39 45 30 34 44 30 43 5B5B394009E04D0C 02b0 30 0a 4d 44 3d 31 32 62 63 34 30 31 63 65 61 37 0.MD=12bc401cea7 02c0 39 36 36 64 35 62 62 65 61 32 64 66 39 61 61 35 966d5bbea2df9aa5 02d0 65 61 33 36 64 0a 3c 2f 42 4f 44 59 3e 0a ea36d.</BODY>. No. Time Source Destination Protocol Length Info 9173 95.019199 192.168.10.31 192.168.20.3 UDP 776 Source port: 50764 Destination port: apc-3052 Frame 9173: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 34 39 3a 35 36 0a 53 52 3d 31 30 37 =19:49:56.SR=107 0060 43 0a 53 55 3d 32 44 38 32 44 42 30 37 0a 52 44 C.SU=2D82DB07.RD 0070 3d 37 34 37 33 0a 54 41 3d 31 39 32 2e 31 36 38 =7473.TA=192.168 0080 2e 32 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a .20.3.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 35 .4C=207.3.50=035 00c0 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 3d 31 .0.43=029.1.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 39 3a 1/19/07.6A=0059: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 3d 31 746005443 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d .46=60.00.4D= 0160 32 30 38 2e 38 0a 34 45 3d 32 30 37 2e 33 0a 34 208.8.4E=207.3.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 33 2e .5C=028.0.2F=13. 01d0 37 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 77.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 35 39 2e 39 37 3b 32 30 37 000.09=59.97;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 41 46 38 38 45 36 44 30 34 42 46 33 42 35 46 =AF88E6D04BF3B5F 02a0 35 42 35 42 33 39 34 30 30 39 45 30 34 44 30 43 5B5B394009E04D0C 02b0 30 0a 4d 44 3d 31 32 62 63 34 30 31 63 65 61 37 0.MD=12bc401cea7 02c0 39 36 36 64 35 62 62 65 61 32 64 66 39 61 61 35 966d5bbea2df9aa5 02d0 65 61 33 36 64 0a 3c 2f 42 4f 44 59 3e 0a ea36d.</BODY>. No. Time Source Destination Protocol Length Info 9174 95.019284 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:16:35 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS2/50764 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 9174: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:16:35 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS2/50764 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 9175 95.022037 Watchgua_3c:4c:d8 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.1 Frame 9175: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9176 95.022051 Cisco_bb:96:6d Watchgua_3c:4c:d8 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 9176: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9177 95.080351 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.111? Tell 192.168.10.220 Frame 9177: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9178 95.080382 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.111? Tell 192.168.10.220 Frame 9178: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9179 95.080397 Dell_ad:25:f8 Intel_38:8d:0a ARP 64 Who has 192.168.10.66? Tell 192.168.10.220 Frame 9179: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9180 95.080408 Dell_ad:25:f8 Intel_89:5e:11 ARP 64 Who has 192.168.10.65? Tell 192.168.10.220 Frame 9180: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9181 95.080418 Intel_38:8d:0a Dell_ad:25:f6 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 9181: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9182 95.080435 Intel_89:5e:11 Dell_ad:25:f8 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 9182: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9183 95.080445 Dell_ad:25:f8 Intel_a5:f5:5b ARP 64 Who has 192.168.10.131? Tell 192.168.10.220 Frame 9183: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9184 95.080456 Dell_ad:25:f8 Intel_38:8c:64 ARP 64 Who has 192.168.10.67? Tell 192.168.10.220 Frame 9184: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9185 95.080466 Dell_ad:25:f8 Intel_02:0e:6d ARP 64 Who has 192.168.10.128? Tell 192.168.10.220 Frame 9185: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9186 95.080476 Intel_a5:f5:5b Dell_ad:25:f8 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 9186: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9187 95.080485 Dell_ad:25:f8 IntelCor_d3:4e:80 ARP 64 Who has 192.168.10.70? Tell 192.168.10.220 Frame 9187: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9188 95.080496 Intel_38:8c:64 Dell_ad:25:f6 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 9188: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9189 95.080506 Intel_02:0e:6d Dell_ad:25:f6 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 9189: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9190 95.080516 Dell_ad:25:f8 Intel_d0:7a:8f ARP 64 Who has 192.168.10.68? Tell 192.168.10.220 Frame 9190: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9191 95.080526 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.233? Tell 192.168.10.220 Frame 9191: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9192 95.080536 IntelCor_d3:4e:80 Dell_ad:25:f8 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 9192: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9193 95.080546 Dell_ad:25:f8 Intel_56:83:a5 ARP 64 Who has 192.168.10.59? Tell 192.168.10.220 Frame 9193: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9194 95.080556 Dell_ad:25:f8 Intel_38:8c:b1 ARP 64 Who has 192.168.10.138? Tell 192.168.10.220 Frame 9194: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9195 95.080566 Intel_d0:7a:8f Dell_ad:25:f8 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 9195: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9196 95.080585 Dell_ad:25:f8 Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.220 Frame 9196: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9197 95.080596 Intel_56:83:a5 Dell_ad:25:f6 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 9197: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9198 95.080606 Intel_38:8c:b1 Dell_ad:25:f6 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 9198: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9199 95.080616 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 9199: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9200 95.080626 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 9200: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9201 95.147740 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=4075 Ack=260806 Win=16450 Len=0 Frame 9201: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4075, Ack: 260806, Len: 0 No. Time Source Destination Protocol Length Info 9202 95.147775 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 9201#1] smtp > 9428 [ACK] Seq=4075 Ack=260806 Win=16450 Len=0 Frame 9202: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4075, Ack: 260806, Len: 0 No. Time Source Destination Protocol Length Info 9203 95.147805 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9203: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 261197, Ack: 4075, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9204 95.147840 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9204: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 262577, Ack: 4075, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9205 95.147869 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9205: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 263957, Ack: 4075, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9206 95.147899 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9206: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 265337, Ack: 4075, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9207 95.147928 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9207: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 266717, Ack: 4075, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9208 95.147967 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9208: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 268097, Ack: 4075, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9209 95.147999 206.225.164.188 192.168.10.207 SMTP 880 C: DATA fragment, 826 bytes Frame 9209: 880 bytes on wire (7040 bits), 880 bytes captured (7040 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 269477, Ack: 4075, Len: 826 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9210 95.148028 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9210: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 270303, Ack: 4075, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9211 95.148057 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9211: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 271683, Ack: 4075, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9212 95.148087 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9212: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 273063, Ack: 4075, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9213 95.148116 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 9201#2] smtp > 9428 [ACK] Seq=4075 Ack=260806 Win=16450 Len=0 Frame 9213: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4075, Ack: 260806, Len: 0 No. Time Source Destination Protocol Length Info 9214 95.148151 192.168.10.207 206.225.164.188 SMTP 264 S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 9214: 264 bytes on wire (2112 bits), 264 bytes captured (2112 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4075, Ack: 260806, Len: 210 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9215 95.148179 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=274443 Ack=4285 Win=46615 Len=0 Frame 9215: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 274443, Ack: 4285, Len: 0 No. Time Source Destination Protocol Length Info 9216 95.148207 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 9214#1] smtp > 9428 [ACK] Seq=4285 Ack=260806 Win=16450 Len=0 Frame 9216: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4285, Ack: 260806, Len: 0 No. Time Source Destination Protocol Length Info 9217 95.148235 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 9214#2] smtp > 9428 [ACK] Seq=4285 Ack=260806 Win=16450 Len=0 Frame 9217: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4285, Ack: 260806, Len: 0 No. Time Source Destination Protocol Length Info 9218 95.148263 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 9214#3] smtp > 9428 [ACK] Seq=4285 Ack=260806 Win=16450 Len=0 Frame 9218: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4285, Ack: 260806, Len: 0 No. Time Source Destination Protocol Length Info 9219 95.148290 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 9214#4] smtp > 9428 [ACK] Seq=4285 Ack=260806 Win=16450 Len=0 Frame 9219: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4285, Ack: 260806, Len: 0 No. Time Source Destination Protocol Length Info 9220 95.148318 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 9214#5] smtp > 9428 [ACK] Seq=4285 Ack=260806 Win=16450 Len=0 Frame 9220: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4285, Ack: 260806, Len: 0 No. Time Source Destination Protocol Length Info 9221 95.148346 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 9214#6] smtp > 9428 [ACK] Seq=4285 Ack=260806 Win=16450 Len=0 Frame 9221: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4285, Ack: 260806, Len: 0 No. Time Source Destination Protocol Length Info 9222 95.148373 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 9214#7] smtp > 9428 [ACK] Seq=4285 Ack=260806 Win=16450 Len=0 Frame 9222: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4285, Ack: 260806, Len: 0 No. Time Source Destination Protocol Length Info 9223 95.148401 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 9214#8] smtp > 9428 [ACK] Seq=4285 Ack=260806 Win=16450 Len=0 Frame 9223: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4285, Ack: 260806, Len: 0 No. Time Source Destination Protocol Length Info 9224 95.148429 206.225.164.188 192.168.10.207 SMTP 445 [TCP Fast Retransmission] C: DATA fragment, 391 bytes Frame 9224: 445 bytes on wire (3560 bits), 445 bytes captured (3560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 260806, Ack: 4285, Len: 391 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9225 95.148457 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 9214#9] smtp > 9428 [ACK] Seq=4285 Ack=260806 Win=16450 Len=0 Frame 9225: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4285, Ack: 260806, Len: 0 No. Time Source Destination Protocol Length Info 9226 95.148485 206.225.164.188 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 9226: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 261197, Ack: 4285, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9227 95.148514 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9227: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 274443, Ack: 4285, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9228 95.148544 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9228: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 275823, Ack: 4285, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9229 95.148572 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=4285 Ack=274443 Win=2813 Len=0 Frame 9229: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4285, Ack: 274443, Len: 0 No. Time Source Destination Protocol Length Info 9230 95.148603 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=4285 Ack=277203 Win=53 Len=0 Frame 9230: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4285, Ack: 277203, Len: 0 No. Time Source Destination Protocol Length Info 9231 95.193539 192.168.10.203 95.108.48.122 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 9231: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 95.108.48.122 (95.108.48.122) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 9232 95.194009 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 9232: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9233 95.268152 192.168.10.104 192.168.10.220 NBNS 110 Refresh NB BAIMOBILEPC2<00> Frame 9233: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 9234 95.315334 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 9234: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9235 95.443641 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 9235: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9236 95.488063 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 9236: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9237 95.488094 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 9237: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9238 95.540562 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 9238: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7393, Ack: 524147, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9239 95.540596 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=524147 Ack=7435 Win=46048 Len=0 Frame 9239: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 524147, Ack: 7435, Len: 0 No. Time Source Destination Protocol Length Info 9240 95.540696 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=7435 Ack=524147 Win=51772 Len=0 Frame 9240: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7435, Ack: 524147, Len: 0 No. Time Source Destination Protocol Length Info 9241 95.540726 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 9240#1] smtp > 23308 [ACK] Seq=7435 Ack=524147 Win=51772 Len=0 Frame 9241: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7435, Ack: 524147, Len: 0 No. Time Source Destination Protocol Length Info 9242 95.540757 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9242: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 524147, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9243 95.540787 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9243: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 525527, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9244 95.540818 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9244: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 526907, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9245 95.540847 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9245: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 528287, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9246 95.540877 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9246: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 529667, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9247 95.540945 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=7435 Ack=531047 Win=44872 Len=0 Frame 9247: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7435, Ack: 531047, Len: 0 No. Time Source Destination Protocol Length Info 9248 95.541061 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9248: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 531047, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9249 95.541093 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9249: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 532427, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9250 95.541122 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9250: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 533807, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9251 95.541151 206.225.164.186 192.168.10.207 SMTP 897 C: DATA fragment, 843 bytes Frame 9251: 897 bytes on wire (7176 bits), 897 bytes captured (7176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 535187, Ack: 7435, Len: 843 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9252 95.541179 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9252: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 536030, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9253 95.541211 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=7435 Ack=533807 Win=42112 Len=0 Frame 9253: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7435, Ack: 533807, Len: 0 No. Time Source Destination Protocol Length Info 9254 95.541239 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=7435 Ack=537410 Win=38509 Len=0 Frame 9254: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7435, Ack: 537410, Len: 0 No. Time Source Destination Protocol Length Info 9255 95.541267 206.225.164.186 192.168.10.207 SMTP 933 C: DATA fragment, 879 bytes Frame 9255: 933 bytes on wire (7464 bits), 933 bytes captured (7464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 537410, Ack: 7435, Len: 879 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9256 95.541296 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9256: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 538289, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9257 95.541325 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9257: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 539669, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9258 95.541358 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9258: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 541049, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9259 95.541387 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9259: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 542429, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9260 95.541417 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9260: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 543809, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9261 95.541445 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=7435 Ack=539669 Win=36250 Len=0 Frame 9261: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7435, Ack: 539669, Len: 0 No. Time Source Destination Protocol Length Info 9262 95.541472 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=7435 Ack=543809 Win=32110 Len=0 Frame 9262: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7435, Ack: 543809, Len: 0 No. Time Source Destination Protocol Length Info 9263 95.541500 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9263: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 545189, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9264 95.541549 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9264: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 546569, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9265 95.541579 206.225.164.186 192.168.10.207 SMTP 1401 C: DATA fragment, 1347 bytes Frame 9265: 1401 bytes on wire (11208 bits), 1401 bytes captured (11208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 547949, Ack: 7435, Len: 1347 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9266 95.541608 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9266: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 549296, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9267 95.541637 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=7435 Ack=546569 Win=29350 Len=0 Frame 9267: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7435, Ack: 546569, Len: 0 No. Time Source Destination Protocol Length Info 9268 95.541665 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9268: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 550676, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9269 95.541694 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=7435 Ack=549296 Win=26623 Len=0 Frame 9269: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7435, Ack: 549296, Len: 0 No. Time Source Destination Protocol Length Info 9270 95.541723 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9270: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 552056, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9271 95.541752 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9271: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 553436, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9272 95.541780 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=7435 Ack=552056 Win=23863 Len=0 Frame 9272: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7435, Ack: 552056, Len: 0 No. Time Source Destination Protocol Length Info 9273 95.541814 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9273: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 554816, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9274 95.541844 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9274: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 556196, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9275 95.541872 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=7435 Ack=554816 Win=21103 Len=0 Frame 9275: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7435, Ack: 554816, Len: 0 No. Time Source Destination Protocol Length Info 9276 95.541901 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9276: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 557576, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9277 95.541930 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9277: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 558956, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9278 95.541959 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=7435 Ack=557576 Win=18343 Len=0 Frame 9278: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7435, Ack: 557576, Len: 0 No. Time Source Destination Protocol Length Info 9279 95.541987 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9279: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 560336, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9280 95.542017 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9280: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 561716, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9281 95.542047 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9281: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 563096, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9282 95.542075 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=7435 Ack=560336 Win=15583 Len=0 Frame 9282: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7435, Ack: 560336, Len: 0 No. Time Source Destination Protocol Length Info 9283 95.542103 206.225.164.186 192.168.10.207 SMTP 392 C: DATA fragment, 338 bytes Frame 9283: 392 bytes on wire (3136 bits), 392 bytes captured (3136 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 564476, Ack: 7435, Len: 338 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9284 95.542132 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9284: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 564814, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9285 95.542160 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=7435 Ack=563096 Win=12823 Len=0 Frame 9285: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7435, Ack: 563096, Len: 0 No. Time Source Destination Protocol Length Info 9286 95.542189 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9286: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 566194, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9287 95.542218 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9287: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 567574, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9288 95.542247 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=7435 Ack=564814 Win=11105 Len=0 Frame 9288: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7435, Ack: 564814, Len: 0 No. Time Source Destination Protocol Length Info 9289 95.542279 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9289: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 568954, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9290 95.542309 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9290: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 570334, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9291 95.542337 206.225.164.186 192.168.10.207 SMTP 583 C: DATA fragment, 529 bytes Frame 9291: 583 bytes on wire (4664 bits), 583 bytes captured (4664 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 571714, Ack: 7435, Len: 529 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9292 95.542365 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=7435 Ack=568954 Win=6965 Len=0 Frame 9292: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7435, Ack: 568954, Len: 0 No. Time Source Destination Protocol Length Info 9293 95.542394 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9293: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 572243, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9294 95.542423 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9294: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 573623, Ack: 7435, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9295 95.542451 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=7435 Ack=571714 Win=4205 Len=0 Frame 9295: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7435, Ack: 571714, Len: 0 No. Time Source Destination Protocol Length Info 9296 95.542487 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=7435 Ack=573623 Win=2296 Len=0 Frame 9296: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7435, Ack: 573623, Len: 0 No. Time Source Destination Protocol Length Info 9297 95.566080 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 9297: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9298 95.646343 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=7435 Ack=575003 Win=916 Len=0 Frame 9298: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7435, Ack: 575003, Len: 0 No. Time Source Destination Protocol Length Info 9299 95.689325 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3182369024, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9299: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9300 95.689349 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3182369024, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9300: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9301 95.689362 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3182369024, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9301: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9302 95.689375 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3182369024, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9302: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9303 95.709865 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 756547840, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9303: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9304 95.709888 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 756547840, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9304: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9305 95.709901 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 756547840, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9305: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9306 95.709913 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 756547840, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9306: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9307 95.740565 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 9307: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9308 95.740593 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 9308: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9309 95.740612 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 9309: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9310 95.740622 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 9310: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9311 95.740635 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 9311: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9312 95.740645 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 9312: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9313 95.740656 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 9313: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9314 95.740667 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 9314: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9315 95.740706 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 9315: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9316 95.740755 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 9316: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9317 95.740766 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 9317: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9318 95.740782 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 9318: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9319 95.740816 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 9319: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9320 95.740826 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 9320: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9321 95.740836 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 9321: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9322 95.740870 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 9322: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9323 95.740881 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 9323: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9324 95.740891 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 9324: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9325 95.740901 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 9325: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9326 95.740912 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 9326: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9327 95.740922 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 9327: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9328 95.740932 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 9328: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9329 95.740942 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 9329: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9330 95.740952 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 9330: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9331 95.740962 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 9331: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9332 95.740973 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 9332: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9333 95.740983 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 9333: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9334 95.740993 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 9334: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9335 95.741003 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 9335: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9336 95.741013 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 9336: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9337 95.741024 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 9337: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9338 95.741034 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 9338: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9339 95.741043 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 9339: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9340 95.741054 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 9340: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9341 95.741064 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 9341: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9342 95.741080 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 9342: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9343 95.741090 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 9343: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9344 95.741101 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 9344: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9345 95.741110 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 9345: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9346 95.741121 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 9346: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9347 95.741131 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 9347: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9348 95.741141 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 9348: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9349 95.741151 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 9349: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9350 95.741306 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 9350: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9351 95.833788 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-12.geo.kaspersky.com Frame 9351: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 56945 (56945), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 9352 95.944993 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 3 Port 42 TTL = 120 Frame 9352: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 9353 95.995459 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 9353: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9354 95.995491 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 9354: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9355 96.158498 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 9355: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7435, Ack: 575003, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9356 96.158534 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=575003 Ack=7477 Win=46720 Len=0 Frame 9356: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 575003, Ack: 7477, Len: 0 No. Time Source Destination Protocol Length Info 9357 96.194607 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 9357: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4285, Ack: 277203, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9358 96.194641 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=277203 Ack=4327 Win=46594 Len=0 Frame 9358: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 277203, Ack: 4327, Len: 0 No. Time Source Destination Protocol Length Info 9359 96.693457 192.168.10.203 95.108.48.122 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 9359: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 95.108.48.122 (95.108.48.122) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 9360 96.701994 Watchgua_3c:4c:d8 Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.1 Frame 9360: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9361 96.702024 Watchgua_3c:4c:d8 Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.1 Frame 9361: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9362 96.702042 Dell_52:2e:6b Watchgua_3c:4c:d8 ARP 106 192.168.10.205 is at 00:13:72:52:2e:6b Frame 9362: 106 bytes on wire (848 bits), 106 bytes captured (848 bits) Ethernet II, Src: Dell_52:2e:6b (00:13:72:52:2e:6b), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9363 96.702181 192.168.10.1 192.168.10.205 TCP 74 45431 > cds [SYN] Seq=0 Win=5840 Len=0 MSS=1400 SACK_PERM=1 TSval=559423 TSecr=0 WS=64 Frame 9363: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:2e:6b (00:13:72:52:2e:6b) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.205 (192.168.10.205) Transmission Control Protocol, Src Port: 45431 (45431), Dst Port: cds (4115), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 9364 96.702240 192.168.10.205 192.168.10.1 TCP 60 cds > 45431 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 Frame 9364: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:2e:6b (00:13:72:52:2e:6b), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.205 (192.168.10.205), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 45431 (45431), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 9365 96.704976 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3199146240, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9365: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9366 96.704998 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3199146240, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9366: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9367 96.705010 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3199146240, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9367: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9368 96.705022 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3199146240, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9368: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9369 96.725431 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 773325056, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9369: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9370 96.725454 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 773325056, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9370: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9371 96.725466 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 773325056, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9371: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9372 96.725478 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 773325056, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9372: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9373 96.768182 192.168.10.104 192.168.10.220 NBNS 110 Refresh NB <01><02>__MSBROWSE__<02><01> Frame 9373: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 9374 96.833736 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-12.geo.kaspersky.com Frame 9374: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 56945 (56945), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 9375 96.949424 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 9375: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7477, Ack: 575003, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9376 96.949466 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=575003 Ack=7519 Win=46699 Len=0 Frame 9376: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 575003, Ack: 7519, Len: 0 No. Time Source Destination Protocol Length Info 9377 97.057050 192.168.10.216 64.74.103.131 TLSv1 91 Application Data Frame 9377: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.216 (192.168.10.216), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: ovrimosdbman (2956), Dst Port: https (443), Seq: 112, Ack: 112, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 9378 97.057115 64.74.103.131 192.168.10.216 TCP 60 https > ovrimosdbman [ACK] Seq=112 Ack=149 Win=65535 Len=0 Frame 9378: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.216 (192.168.10.216) Transmission Control Protocol, Src Port: https (443), Dst Port: ovrimosdbman (2956), Seq: 112, Ack: 149, Len: 0 No. Time Source Destination Protocol Length Info 9379 97.058040 Watchgua_3c:4c:d8 IntelCor_36:19:60 ARP 60 Who has 192.168.10.216? Tell 192.168.10.1 Frame 9379: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9380 97.058051 IntelCor_36:19:60 Watchgua_3c:4c:d8 ARP 60 192.168.10.216 is at 00:13:20:36:19:60 Frame 9380: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9381 97.105323 64.74.103.131 192.168.10.216 TLSv1 91 Application Data Frame 9381: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.216 (192.168.10.216) Transmission Control Protocol, Src Port: https (443), Dst Port: ovrimosdbman (2956), Seq: 112, Ack: 149, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 9382 97.156566 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 9382: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4327, Ack: 277203, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9383 97.156601 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=277203 Ack=4369 Win=46573 Len=0 Frame 9383: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 277203, Ack: 4369, Len: 0 No. Time Source Destination Protocol Length Info 9384 97.194005 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 9384: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9385 97.225565 192.168.10.207 202.1.166.13 TCP 62 smtp > gbmt-stars [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 9385: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 202.1.166.13 (202.1.166.13) Transmission Control Protocol, Src Port: smtp (25), Dst Port: gbmt-stars (3912), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 9386 97.291436 192.168.10.216 64.74.103.131 TCP 60 ovrimosdbman > https [ACK] Seq=149 Ack=149 Win=64166 Len=0 Frame 9386: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.216 (192.168.10.216), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: ovrimosdbman (2956), Dst Port: https (443), Seq: 149, Ack: 149, Len: 0 No. Time Source Destination Protocol Length Info 9387 97.315485 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 9387: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9388 97.443632 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 9388: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9389 97.491087 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 9389: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7519, Ack: 575003, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9390 97.491126 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=575003 Ack=7561 Win=46678 Len=0 Frame 9390: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 575003, Ack: 7561, Len: 0 No. Time Source Destination Protocol Length Info 9391 97.493385 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 9391: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9392 97.493416 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 9392: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9393 97.565972 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 9393: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9394 97.720531 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3215923456, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9394: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9395 97.720555 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3215923456, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9395: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9396 97.720567 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3215923456, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9396: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9397 97.720579 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3215923456, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9397: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9398 97.741093 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 790102272, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9398: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9399 97.741117 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 790102272, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9399: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9400 97.741129 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 790102272, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9400: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9401 97.741142 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 790102272, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9401: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9402 97.993698 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 9402: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9403 97.993730 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 9403: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9404 97.994312 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:45:56 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 117.213.34.168 7x.x.x.3 48669 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 9404: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:45:56 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 117.213.34.168 7x.x.x.3 48669 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 9405 98.039548 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 9405: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7561, Ack: 575003, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9406 98.039573 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=575003 Ack=7603 Win=46657 Len=0 Frame 9406: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 575003, Ack: 7603, Len: 0 No. Time Source Destination Protocol Length Info 9407 98.124714 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 9407: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4369, Ack: 277203, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9408 98.124737 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=277203 Ack=4411 Win=46552 Len=0 Frame 9408: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 277203, Ack: 4411, Len: 0 No. Time Source Destination Protocol Length Info 9409 98.214548 192.168.10.220 208.67.222.222 DNS 87 Standard query PTR 217.219.72.116.in-addr.arpa Frame 9409: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 55946 (55946), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 9410 98.268117 192.168.10.104 192.168.10.220 NBNS 110 Refresh NB <01><02>__MSBROWSE__<02><01> Frame 9410: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 9411 98.434216 208.67.222.222 192.168.10.220 DNS 87 Standard query response, No such name Frame 9411: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 55946 (55946) Domain Name System (response) No. Time Source Destination Protocol Length Info 9412 98.434772 192.168.10.203 116.72.219.217 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 9412: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 116.72.219.217 (116.72.219.217) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 9413 98.438009 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 Who has 192.168.10.220? Tell 192.168.10.1 Frame 9413: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9414 98.438061 Dell_ad:25:f6 Watchgua_3c:4c:d8 ARP 60 192.168.10.220 is at 00:22:19:ad:25:f6 Frame 9414: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9415 98.573797 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 9415: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7603, Ack: 575003, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9416 98.573829 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=575003 Ack=7645 Win=46636 Len=0 Frame 9416: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 575003, Ack: 7645, Len: 0 No. Time Source Destination Protocol Length Info 9417 98.736203 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3232700672, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9417: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9418 98.736231 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3232700672, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9418: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9419 98.736239 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3232700672, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9419: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9420 98.736247 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3232700672, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9420: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9421 98.756771 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 806879488, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9421: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9422 98.756780 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 806879488, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9422: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9423 98.756788 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 806879488, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9423: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9424 98.756795 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 806879488, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9424: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9425 98.780871 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 9425: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9426 98.780898 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 9426: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9427 98.780913 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 9427: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9428 98.780923 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 9428: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9429 98.780938 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 9429: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9430 98.780949 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 9430: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9431 98.780959 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 9431: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9432 98.780969 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 9432: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9433 98.780980 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 9433: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9434 98.780990 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 9434: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9435 98.781000 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 9435: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9436 98.781015 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 9436: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9437 98.781047 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 9437: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9438 98.781057 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 9438: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9439 98.781089 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 9439: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9440 98.781100 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 9440: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9441 98.781118 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 9441: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9442 98.781124 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 9442: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9443 98.781130 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 9443: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9444 98.781137 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 9444: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9445 98.781146 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 9445: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9446 98.781154 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 9446: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9447 98.781161 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 9447: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9448 98.781167 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 9448: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9449 98.781173 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 9449: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9450 98.781179 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 9450: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9451 98.781185 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 9451: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9452 98.781192 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 9452: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9453 98.781200 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 9453: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9454 98.781213 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 9454: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9455 98.781219 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 9455: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9456 98.781226 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 9456: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9457 98.781232 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 9457: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9458 98.781238 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 9458: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9459 98.781244 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 9459: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9460 98.781251 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 9460: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9461 98.781257 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 9461: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9462 98.781263 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 9462: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9463 98.781269 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 9463: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9464 98.781276 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 9464: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9465 98.781282 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 9465: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9466 98.781289 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 9466: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9467 98.781297 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 9467: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9468 98.781305 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 9468: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9469 98.781313 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 9469: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9470 98.781321 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 9470: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9471 98.781330 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 9471: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9472 98.781336 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 9472: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9473 98.781342 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 9473: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9474 98.781348 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 9474: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9475 98.781354 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 9475: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9476 98.781612 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 9476: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9477 98.833743 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-12.geo.kaspersky.com Frame 9477: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 56945 (56945), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 9478 98.833881 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-12.geo.kaspersky.com Frame 9478: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 56945 (56945), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 9479 99.024066 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 9479: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9480 99.024099 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 9480: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9481 99.074675 202.1.166.13 192.168.10.207 TCP 60 gbmt-stars > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 9481: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gbmt-stars (3912), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 9482 99.074802 192.168.10.1 192.168.10.245 Syslog 202 LOCAL1.INFO: Oct 3 19:45:57 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 202.1.166.13 7x.x.x.3 3912 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 9482: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:45:57 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 202.1.166.13 7x.x.x.3 3912 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 9483 99.074879 192.168.10.207 202.1.166.13 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:45:31 -0400 Frame 9483: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 202.1.166.13 (202.1.166.13) Transmission Control Protocol, Src Port: smtp (25), Dst Port: gbmt-stars (3912), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9484 99.074959 202.1.166.13 192.168.10.207 TCP 60 gbmt-stars > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 9484: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gbmt-stars (3912), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 9485 99.087741 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 9485: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4411, Ack: 277203, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9486 99.087777 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=277203 Ack=4453 Win=46531 Len=0 Frame 9486: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 277203, Ack: 4453, Len: 0 No. Time Source Destination Protocol Length Info 9487 99.120182 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 9487: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7645, Ack: 575003, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9488 99.120217 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=575003 Ack=7687 Win=46615 Len=0 Frame 9488: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 575003, Ack: 7687, Len: 0 No. Time Source Destination Protocol Length Info 9489 99.193969 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 9489: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9490 99.315463 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 9490: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9491 99.443601 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 9491: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9492 99.484337 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 9492: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9493 99.484368 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 9493: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9494 99.566018 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 9494: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9495 99.618210 Intel_a5:f5:44 Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.34 Frame 9495: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:44 (00:16:76:a5:f5:44), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9496 99.618245 Intel_a5:f5:44 Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.34 Frame 9496: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:44 (00:16:76:a5:f5:44), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9497 99.651216 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 9497: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7687, Ack: 575003, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9498 99.651250 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=575003 Ack=7729 Win=46594 Len=0 Frame 9498: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 575003, Ack: 7729, Len: 0 No. Time Source Destination Protocol Length Info 9499 99.751770 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3249477888, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9499: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9500 99.751795 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3249477888, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9500: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9501 99.751808 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3249477888, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9501: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9502 99.751820 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3249477888, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9502: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9503 99.758747 192.168.10.115 64.74.103.129 TLSv1 91 Application Data Frame 9503: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.115 (192.168.10.115), Dst: 64.74.103.129 (64.74.103.129) Transmission Control Protocol, Src Port: cogsys-lm (3377), Dst Port: https (443), Seq: 112, Ack: 112, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 9504 99.758814 64.74.103.129 192.168.10.115 TCP 60 https > cogsys-lm [ACK] Seq=112 Ack=149 Win=65535 Len=0 Frame 9504: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Internet Protocol Version 4, Src: 64.74.103.129 (64.74.103.129), Dst: 192.168.10.115 (192.168.10.115) Transmission Control Protocol, Src Port: https (443), Dst Port: cogsys-lm (3377), Seq: 112, Ack: 149, Len: 0 No. Time Source Destination Protocol Length Info 9505 99.762158 Watchgua_3c:4c:d8 IntelCor_ed:1a:c9 ARP 60 Who has 192.168.10.115? Tell 192.168.10.1 Frame 9505: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9506 99.762172 IntelCor_ed:1a:c9 Watchgua_3c:4c:d8 ARP 60 192.168.10.115 is at 00:13:20:ed:1a:c9 Frame 9506: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9507 99.768135 192.168.10.104 192.168.10.220 NBNS 110 Refresh NB <01><02>__MSBROWSE__<02><01> Frame 9507: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 9508 99.772254 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 823656704, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9508: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9509 99.772271 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 823656704, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9509: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9510 99.772283 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 823656704, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9510: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9511 99.772295 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 823656704, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9511: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9512 99.806743 64.74.103.129 192.168.10.115 TLSv1 91 Application Data Frame 9512: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Internet Protocol Version 4, Src: 64.74.103.129 (64.74.103.129), Dst: 192.168.10.115 (192.168.10.115) Transmission Control Protocol, Src Port: https (443), Dst Port: cogsys-lm (3377), Seq: 112, Ack: 149, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 9513 99.860516 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.102? Tell 192.168.10.220 Frame 9513: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9514 99.860547 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.102? Tell 192.168.10.220 Frame 9514: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9515 99.860562 Dell_ad:25:f8 Intel_38:8d:0a ARP 64 Who has 192.168.10.66? Tell 192.168.10.220 Frame 9515: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9516 99.860577 Dell_ad:25:f8 Intel_89:5e:11 ARP 64 Who has 192.168.10.65? Tell 192.168.10.220 Frame 9516: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9517 99.860587 Intel_38:8d:0a Dell_ad:25:f6 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 9517: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9518 99.860598 Intel_89:5e:11 Dell_ad:25:f8 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 9518: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9519 99.860608 Dell_ad:25:f8 Intel_a5:f5:5b ARP 64 Who has 192.168.10.131? Tell 192.168.10.220 Frame 9519: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9520 99.860618 Dell_ad:25:f8 Intel_38:8c:64 ARP 64 Who has 192.168.10.67? Tell 192.168.10.220 Frame 9520: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9521 99.860628 Intel_a5:f5:5b Dell_ad:25:f8 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 9521: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9522 99.860638 Dell_ad:25:f8 Intel_02:0e:6d ARP 64 Who has 192.168.10.128? Tell 192.168.10.220 Frame 9522: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9523 99.860649 Intel_38:8c:64 Dell_ad:25:f6 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 9523: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9524 99.860659 Dell_ad:25:f8 IntelCor_d3:4e:80 ARP 64 Who has 192.168.10.70? Tell 192.168.10.220 Frame 9524: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9525 99.860673 Dell_ad:25:f8 Intel_d0:7a:8f ARP 64 Who has 192.168.10.68? Tell 192.168.10.220 Frame 9525: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9526 99.860683 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.233? Tell 192.168.10.220 Frame 9526: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9527 99.860693 Intel_02:0e:6d Dell_ad:25:f6 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 9527: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9528 99.860703 Dell_ad:25:f8 Intel_56:83:a5 ARP 64 Who has 192.168.10.59? Tell 192.168.10.220 Frame 9528: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9529 99.860714 IntelCor_d3:4e:80 Dell_ad:25:f8 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 9529: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9530 99.860724 Dell_ad:25:f8 Intel_38:8c:b1 ARP 64 Who has 192.168.10.138? Tell 192.168.10.220 Frame 9530: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9531 99.860734 Intel_d0:7a:8f Dell_ad:25:f8 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 9531: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9532 99.860744 Intel_56:83:a5 Dell_ad:25:f6 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 9532: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9533 99.860756 Intel_38:8c:b1 Dell_ad:25:f6 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 9533: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9534 99.860766 Dell_ad:25:f8 Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.220 Frame 9534: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9535 99.860776 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 9535: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9536 99.860788 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 9536: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9537 99.860854 Dell_ad:25:f8 IntelCor_d3:4e:80 ARP 64 Who has 192.168.10.70? Tell 192.168.10.220 Frame 9537: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9538 99.860865 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.233? Tell 192.168.10.220 Frame 9538: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9539 99.860903 IntelCor_d3:4e:80 Dell_ad:25:f8 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 9539: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9540 99.860941 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 9540: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9541 99.861533 IntelCor_1b:d9:8c Broadcast ARP 60 Who has 192.168.10.17? Tell 192.168.10.102 Frame 9541: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_1b:d9:8c (00:13:20:1b:d9:8c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9542 99.861550 IntelCor_1b:d9:8c Broadcast ARP 60 Who has 192.168.10.17? Tell 192.168.10.102 Frame 9542: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_1b:d9:8c (00:13:20:1b:d9:8c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9543 99.934616 192.168.10.203 116.72.219.217 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 9543: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 116.72.219.217 (116.72.219.217) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 9544 99.961806 192.168.10.115 64.74.103.129 TCP 60 cogsys-lm > https [ACK] Seq=149 Ack=149 Win=65461 Len=0 Frame 9544: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.115 (192.168.10.115), Dst: 64.74.103.129 (64.74.103.129) Transmission Control Protocol, Src Port: cogsys-lm (3377), Dst Port: https (443), Seq: 149, Ack: 149, Len: 0 No. Time Source Destination Protocol Length Info 9545 99.999468 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 9545: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9546 99.999510 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 9546: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9547 100.055693 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 9547: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4453, Ack: 277203, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9548 100.055728 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=277203 Ack=4495 Win=46510 Len=0 Frame 9548: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 277203, Ack: 4495, Len: 0 No. Time Source Destination Protocol Length Info 9549 100.055837 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=4495 Ack=277203 Win=49138 Len=0 Frame 9549: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4495, Ack: 277203, Len: 0 No. Time Source Destination Protocol Length Info 9550 100.055866 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 9549#1] smtp > 9428 [ACK] Seq=4495 Ack=277203 Win=49138 Len=0 Frame 9550: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4495, Ack: 277203, Len: 0 No. Time Source Destination Protocol Length Info 9551 100.055899 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9551: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 277203, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9552 100.055928 206.225.164.188 192.168.10.207 SMTP 1137 C: DATA fragment, 1083 bytes Frame 9552: 1137 bytes on wire (9096 bits), 1137 bytes captured (9096 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 278583, Ack: 4495, Len: 1083 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9553 100.055957 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9553: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 279666, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9554 100.055989 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9554: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 281046, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9555 100.056021 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9555: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 282426, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9556 100.056050 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9556: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 283806, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9557 100.056105 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=4495 Ack=285186 Win=41155 Len=0 Frame 9557: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4495, Ack: 285186, Len: 0 No. Time Source Destination Protocol Length Info 9558 100.056326 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9558: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 285186, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9559 100.056357 206.225.164.188 192.168.10.207 SMTP 819 C: DATA fragment, 765 bytes Frame 9559: 819 bytes on wire (6552 bits), 819 bytes captured (6552 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 286566, Ack: 4495, Len: 765 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9560 100.056386 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9560: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 287331, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9561 100.056415 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9561: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 288711, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9562 100.056445 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9562: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 290091, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9563 100.056474 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9563: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 291471, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9564 100.056503 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=4495 Ack=287331 Win=39010 Len=0 Frame 9564: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4495, Ack: 287331, Len: 0 No. Time Source Destination Protocol Length Info 9565 100.056531 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=4495 Ack=290091 Win=36250 Len=0 Frame 9565: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4495, Ack: 290091, Len: 0 No. Time Source Destination Protocol Length Info 9566 100.056564 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9566: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 292851, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9567 100.056593 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=4495 Ack=292851 Win=33490 Len=0 Frame 9567: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4495, Ack: 292851, Len: 0 No. Time Source Destination Protocol Length Info 9568 100.056622 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9568: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 294231, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9569 100.056651 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9569: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 295611, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9570 100.056681 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9570: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 296991, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9571 100.056710 206.225.164.188 192.168.10.207 SMTP 1271 C: DATA fragment, 1217 bytes Frame 9571: 1271 bytes on wire (10168 bits), 1271 bytes captured (10168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 298371, Ack: 4495, Len: 1217 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9572 100.056739 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9572: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 299588, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9573 100.056768 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=4495 Ack=298371 Win=27970 Len=0 Frame 9573: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4495, Ack: 298371, Len: 0 No. Time Source Destination Protocol Length Info 9574 100.056796 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=4495 Ack=300968 Win=25373 Len=0 Frame 9574: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4495, Ack: 300968, Len: 0 No. Time Source Destination Protocol Length Info 9575 100.056830 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9575: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 300968, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9576 100.056860 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9576: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 302348, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9577 100.056889 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9577: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 303728, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9578 100.056918 206.225.164.188 192.168.10.207 SMTP 107 C: DATA fragment, 53 bytes Frame 9578: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 305108, Ack: 4495, Len: 53 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9579 100.056946 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9579: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 305161, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9580 100.056976 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9580: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 306541, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9581 100.057005 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9581: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 307921, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9582 100.057037 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=4495 Ack=303728 Win=22613 Len=0 Frame 9582: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4495, Ack: 303728, Len: 0 No. Time Source Destination Protocol Length Info 9583 100.057065 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=4495 Ack=305161 Win=21180 Len=0 Frame 9583: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4495, Ack: 305161, Len: 0 No. Time Source Destination Protocol Length Info 9584 100.057093 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9584: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 309301, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9585 100.057131 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9585: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 310681, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9586 100.057160 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9586: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 312061, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9587 100.057189 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=4495 Ack=309301 Win=17040 Len=0 Frame 9587: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4495, Ack: 309301, Len: 0 No. Time Source Destination Protocol Length Info 9588 100.057266 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=4495 Ack=312061 Win=14280 Len=0 Frame 9588: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4495, Ack: 312061, Len: 0 No. Time Source Destination Protocol Length Info 9589 100.057295 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9589: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 313441, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9590 100.057324 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9590: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 314821, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9591 100.057354 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9591: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 316201, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9592 100.057383 206.225.164.188 192.168.10.207 SMTP 534 C: DATA fragment, 480 bytes Frame 9592: 534 bytes on wire (4272 bits), 534 bytes captured (4272 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 317581, Ack: 4495, Len: 480 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9593 100.057412 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9593: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 318061, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9594 100.057440 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=4495 Ack=314821 Win=11520 Len=0 Frame 9594: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4495, Ack: 314821, Len: 0 No. Time Source Destination Protocol Length Info 9595 100.057469 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9595: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 319441, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9596 100.057497 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9596: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 320821, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9597 100.057526 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=4495 Ack=319441 Win=6900 Len=0 Frame 9597: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4495, Ack: 319441, Len: 0 No. Time Source Destination Protocol Length Info 9598 100.057554 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9598: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 322201, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9599 100.057583 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9599: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 323581, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9600 100.057612 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=4495 Ack=322201 Win=4140 Len=0 Frame 9600: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4495, Ack: 322201, Len: 0 No. Time Source Destination Protocol Length Info 9601 100.057640 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9601: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 324961, Ack: 4495, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9602 100.057669 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=4495 Ack=324961 Win=1380 Len=0 Frame 9602: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4495, Ack: 324961, Len: 0 No. Time Source Destination Protocol Length Info 9603 100.197302 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 9603: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7729, Ack: 575003, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9604 100.197337 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=575003 Ack=7771 Win=46573 Len=0 Frame 9604: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 575003, Ack: 7771, Len: 0 No. Time Source Destination Protocol Length Info 9605 100.273506 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=4495 Ack=326341 Win=0 Len=0 Frame 9605: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4495, Ack: 326341, Len: 0 No. Time Source Destination Protocol Length Info 9606 100.303012 192.168.10.16 192.168.10.255 BROWSER 256 Host Announcement KRONOS, Workstation, Server, SQL Server, NT Workstation, NT Server, DFS server Frame 9606: 256 bytes on wire (2048 bits), 256 bytes captured (2048 bits) Ethernet II, Src: DellEsgP_e2:92:68 (00:0b:db:e2:92:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.16 (192.168.10.16), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 9607 100.303247 192.168.10.16 192.168.10.255 BROWSER 256 Host Announcement KRONOS, Workstation, Server, SQL Server, NT Workstation, NT Server, DFS server Frame 9607: 256 bytes on wire (2048 bits), 256 bytes captured (2048 bits) Ethernet II, Src: DellEsgP_e2:92:68 (00:0b:db:e2:92:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.16 (192.168.10.16), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 9608 100.767380 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3266255104, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9608: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9609 100.767405 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3266255104, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9609: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9610 100.767417 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3266255104, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9610: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9611 100.767429 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3266255104, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9611: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9612 100.787938 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 840433920, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9612: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9613 100.787961 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 840433920, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9613: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9614 100.787974 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 840433920, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9614: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9615 100.787986 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 840433920, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9615: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9616 100.918446 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 9616: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7771, Ack: 575003, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9617 100.918480 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=575003 Ack=7813 Win=46552 Len=0 Frame 9617: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 575003, Ack: 7813, Len: 0 No. Time Source Destination Protocol Length Info 9618 101.022157 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 9618: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4495, Ack: 326341, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9619 101.022196 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=326341 Ack=4537 Win=46489 Len=0 Frame 9619: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 326341, Ack: 4537, Len: 0 No. Time Source Destination Protocol Length Info 9620 101.118144 Intel_a5:f5:44 Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.34 Frame 9620: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:44 (00:16:76:a5:f5:44), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9621 101.118179 Intel_a5:f5:44 Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.34 Frame 9621: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:44 (00:16:76:a5:f5:44), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9622 101.194615 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 9622: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9623 101.268238 192.168.10.104 192.168.10.220 NBNS 110 Refresh NB WORKGROUP<1d> Frame 9623: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 9624 101.315500 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 9624: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9625 101.376298 192.168.10.217 4.2.2.2 DNS 77 Standard query TXT _nfsv4idmapdomain Frame 9625: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.217 (192.168.10.217), Dst: 4.2.2.2 (4.2.2.2) User Datagram Protocol, Src Port: 51156 (51156), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 9626 101.394972 4.2.2.2 192.168.10.217 DNS 152 Standard query response, No such name Frame 9626: 152 bytes on wire (1216 bits), 152 bytes captured (1216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Oracle_86:77:66 (00:14:4f:86:77:66) Internet Protocol Version 4, Src: 4.2.2.2 (4.2.2.2), Dst: 192.168.10.217 (192.168.10.217) User Datagram Protocol, Src Port: domain (53), Dst Port: 51156 (51156) Domain Name System (response) No. Time Source Destination Protocol Length Info 9627 101.398240 Watchgua_3c:4c:d8 Oracle_86:77:66 ARP 60 Who has 192.168.10.217? Tell 192.168.10.1 Frame 9627: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Oracle_86:77:66 (00:14:4f:86:77:66) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9628 101.398253 Oracle_86:77:66 Watchgua_3c:4c:d8 ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 9628: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9629 101.434579 192.168.10.203 116.72.219.217 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 9629: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 116.72.219.217 (116.72.219.217) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 9630 101.443571 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 9630: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9631 101.482546 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 9631: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9632 101.482578 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 9632: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9633 101.523816 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 9633: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7813, Ack: 575003, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9634 101.523851 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=575003 Ack=7855 Win=46531 Len=0 Frame 9634: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 575003, Ack: 7855, Len: 0 No. Time Source Destination Protocol Length Info 9635 101.566048 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 9635: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9636 101.783029 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3283032320, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9636: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9637 101.783052 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3283032320, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9637: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9638 101.783065 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3283032320, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9638: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9639 101.783077 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3283032320, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9639: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9640 101.803498 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 857211136, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9640: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9641 101.803520 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 857211136, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9641: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9642 101.803532 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 857211136, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9642: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9643 101.803544 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 857211136, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9643: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9644 101.820256 Dell_49:f2:ec Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.36 Frame 9644: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_49:f2:ec (00:14:22:49:f2:ec), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9645 101.820285 Dell_49:f2:ec Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.36 Frame 9645: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_49:f2:ec (00:14:22:49:f2:ec), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9646 101.990239 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 9646: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9647 101.990271 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 9647: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9648 102.047041 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 9648: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4537, Ack: 326341, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9649 102.047079 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=326341 Ack=4579 Win=46468 Len=0 Frame 9649: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 326341, Ack: 4579, Len: 0 No. Time Source Destination Protocol Length Info 9650 102.064891 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 9650: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7855, Ack: 575003, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9651 102.064935 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=575003 Ack=7897 Win=46510 Len=0 Frame 9651: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 575003, Ack: 7897, Len: 0 No. Time Source Destination Protocol Length Info 9652 102.249827 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.96? Tell 192.168.10.226 Frame 9652: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9653 102.249861 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.96? Tell 192.168.10.226 Frame 9653: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9654 102.249881 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 9654: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9655 102.249892 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 9655: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9656 102.249902 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 9656: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9657 102.249912 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 9657: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9658 102.249924 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 9658: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9659 102.249935 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 9659: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9660 102.249945 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 9660: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9661 102.249957 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 9661: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9662 102.250084 192.168.10.46 192.168.10.245 Syslog 214 LOCAL4.WARNING: Oct 03 2011 19:16:42 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n Frame 9662: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:16:42 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n No. Time Source Destination Protocol Length Info 9663 102.250103 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 9663: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9664 102.250114 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 9664: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9665 102.250124 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 9665: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9666 102.250143 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 9666: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9667 102.250177 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 9667: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9668 102.250188 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 9668: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9669 102.250215 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 9669: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9670 102.250226 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 9670: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9671 102.250237 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 9671: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9672 102.250247 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 9672: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9673 102.250257 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 9673: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9674 102.250267 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 9674: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9675 102.250278 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 9675: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9676 102.250288 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 9676: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9677 102.250298 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 9677: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9678 102.250308 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 9678: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9679 102.250318 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 9679: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9680 102.250328 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 9680: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9681 102.250338 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 9681: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9682 102.250353 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 9682: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9683 102.250363 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 9683: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9684 102.250373 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 9684: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9685 102.250383 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 9685: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9686 102.250393 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 9686: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9687 102.250403 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 9687: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9688 102.250413 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 9688: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9689 102.250424 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 9689: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9690 102.250434 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 9690: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9691 102.250444 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 9691: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9692 102.250470 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 9692: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9693 102.250480 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 9693: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9694 102.250521 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 9694: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9695 102.250748 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 9695: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9696 102.250761 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 9696: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9697 102.250771 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.48? Tell 192.168.10.226 Frame 9697: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9698 102.250786 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.48? Tell 192.168.10.226 Frame 9698: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9699 102.250846 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 9699: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9700 102.250857 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 9700: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9701 102.250869 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 9701: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9702 102.250879 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 9702: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9703 102.250891 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 9703: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9704 102.250901 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 9704: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9705 102.250913 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 9705: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9706 102.250969 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 9706: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9707 102.250979 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 9707: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9708 102.250991 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 9708: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9709 102.251001 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 9709: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9710 102.251024 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 9710: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9711 102.251035 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 9711: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9712 102.251044 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 9712: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9713 102.251072 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 9713: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9714 102.251083 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 9714: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9715 102.251093 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 9715: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9716 102.251103 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 9716: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9717 102.251113 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 9717: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9718 102.251123 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 9718: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9719 102.251133 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 9719: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9720 102.251143 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 9720: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9721 102.251154 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 9721: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9722 102.251164 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 9722: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9723 102.251181 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 9723: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9724 102.251191 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 9724: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9725 102.251201 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 9725: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9726 102.251211 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 9726: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9727 102.251221 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 9727: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9728 102.251231 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 9728: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9729 102.251242 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 9729: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9730 102.251252 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 9730: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9731 102.251262 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 9731: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9732 102.251272 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 9732: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9733 102.251282 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 9733: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9734 102.251292 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 9734: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9735 102.251303 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 9735: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9736 102.251313 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 9736: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9737 102.251323 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 9737: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9738 102.251336 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 9738: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9739 102.251346 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 9739: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9740 102.251721 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 9740: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9741 102.613288 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 9741: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7897, Ack: 575003, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9742 102.613326 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=575003 Ack=7939 Win=46489 Len=0 Frame 9742: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 575003, Ack: 7939, Len: 0 No. Time Source Destination Protocol Length Info 9743 102.618117 Intel_a5:f5:44 Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.34 Frame 9743: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:44 (00:16:76:a5:f5:44), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9744 102.618145 Intel_a5:f5:44 Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.34 Frame 9744: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:44 (00:16:76:a5:f5:44), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9745 102.756502 202.1.166.13 192.168.10.207 SMTP 92 C: HELO hon-adsl-166-013.telekom.net.sb Frame 9745: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gbmt-stars (3912), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 38 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9746 102.756538 192.168.10.207 202.1.166.13 SMTP 101 S: 250 mail.mydomain.com Hello [202.1.166.13] Frame 9746: 101 bytes on wire (808 bits), 101 bytes captured (808 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 202.1.166.13 (202.1.166.13) Transmission Control Protocol, Src Port: smtp (25), Dst Port: gbmt-stars (3912), Seq: 122, Ack: 39, Len: 47 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9747 102.756575 202.1.166.13 192.168.10.207 TCP 60 gbmt-stars > smtp [ACK] Seq=39 Ack=169 Win=93272 Len=0 Frame 9747: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gbmt-stars (3912), Dst Port: smtp (25), Seq: 39, Ack: 169, Len: 0 No. Time Source Destination Protocol Length Info 9748 102.768162 192.168.10.104 192.168.10.220 NBNS 110 Refresh NB WORKGROUP<1d> Frame 9748: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 9749 102.798673 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3299809536, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9749: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9750 102.798697 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3299809536, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9750: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9751 102.798710 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3299809536, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9751: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9752 102.798723 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3299809536, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9752: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9753 102.819165 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 873988352, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9753: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9754 102.819186 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 873988352, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9754: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9755 102.819198 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 873988352, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9755: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9756 102.819210 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 873988352, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9756: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9757 102.833750 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-12.geo.kaspersky.com Frame 9757: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 56945 (56945), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 9758 102.833938 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-12.geo.kaspersky.com Frame 9758: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 56945 (56945), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 9759 103.021143 192.168.10.30 192.168.20.3 UDP 762 Source port: 34427 Destination port: apc-3052 Frame 9759: 762 bytes on wire (6096 bits), 762 bytes captured (6096 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (720 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 35 3a 33 38 0a 53 52 3d 31 42 0a =18:45:38.SR=1B. 0060 53 55 3d 37 42 31 33 31 33 43 46 0a 52 44 3d 32 SU=7B1313CF.RD=2 0070 35 43 39 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 5C9.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 0a 34 8.7E=00.3E=001.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 2e 30 C=207.3.50=040.0 00c0 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 37 2f .43=025.2.78=07/ 00d0 32 35 2f 30 36 0a 36 41 3d 30 30 32 34 3a 0a 34 25/06.6A=0024:.4 00e0 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 20 0a 7=S.63=BAI_UPS . 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 36 33 0.38=00.6E=NS063 0120 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 37 2f 1005398 .6D=07/ 0130 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 2d 55 25/06.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 52 4d 20 58 PS RT 10000 RM X 0150 4c 0a 34 36 3d 35 39 2e 39 39 0a 34 44 3d 32 30 L.46=59.99.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 35 3d 7.3.4E=204.4.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 3d 31 00.42=218.1.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e 36 30 C=034.0.2F=16.60 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 35 39 2e 39 38 3b 32 30 37 2e 33 0.09=59.98;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 0a 49 9=0.I0=2.I1=26.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a 49 38 5=0.I6=0.I7=1.I8 0250 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 0a 49 =Device 1.I9=0.I 0260 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d 30 0a A=Device 2.IB=0. 0270 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 30 0a IC=Relay 1.ID=0. 0280 53 48 3d 33 35 34 45 42 35 36 38 45 41 41 38 44 SH=354EB568EAA8D 0290 30 43 43 33 42 46 30 39 34 46 38 37 37 42 35 36 0CC3BF094F877B56 02a0 34 42 44 0a 4d 44 3d 63 36 33 32 37 63 66 63 64 4BD.MD=c6327cfcd 02b0 62 37 34 65 63 63 38 65 62 30 35 33 39 39 35 62 b74ecc8eb053995b 02c0 37 38 63 62 62 64 35 0a 3c 2f 42 4f 44 59 3e 0a 78cbbd5.</BODY>. No. Time Source Destination Protocol Length Info 9760 103.021222 192.168.10.30 192.168.20.3 UDP 762 Source port: 34427 Destination port: apc-3052 Frame 9760: 762 bytes on wire (6096 bits), 762 bytes captured (6096 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (720 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 35 3a 33 38 0a 53 52 3d 31 42 0a =18:45:38.SR=1B. 0060 53 55 3d 37 42 31 33 31 33 43 46 0a 52 44 3d 32 SU=7B1313CF.RD=2 0070 35 43 39 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 5C9.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 0a 34 8.7E=00.3E=001.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 2e 30 C=207.3.50=040.0 00c0 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 37 2f .43=025.2.78=07/ 00d0 32 35 2f 30 36 0a 36 41 3d 30 30 32 34 3a 0a 34 25/06.6A=0024:.4 00e0 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 20 0a 7=S.63=BAI_UPS . 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 36 33 0.38=00.6E=NS063 0120 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 37 2f 1005398 .6D=07/ 0130 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 2d 55 25/06.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 52 4d 20 58 PS RT 10000 RM X 0150 4c 0a 34 36 3d 35 39 2e 39 39 0a 34 44 3d 32 30 L.46=59.99.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 35 3d 7.3.4E=204.4.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 3d 31 00.42=218.1.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e 36 30 C=034.0.2F=16.60 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 35 39 2e 39 38 3b 32 30 37 2e 33 0.09=59.98;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 0a 49 9=0.I0=2.I1=26.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a 49 38 5=0.I6=0.I7=1.I8 0250 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 0a 49 =Device 1.I9=0.I 0260 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d 30 0a A=Device 2.IB=0. 0270 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 30 0a IC=Relay 1.ID=0. 0280 53 48 3d 33 35 34 45 42 35 36 38 45 41 41 38 44 SH=354EB568EAA8D 0290 30 43 43 33 42 46 30 39 34 46 38 37 37 42 35 36 0CC3BF094F877B56 02a0 34 42 44 0a 4d 44 3d 63 36 33 32 37 63 66 63 64 4BD.MD=c6327cfcd 02b0 62 37 34 65 63 63 38 65 62 30 35 33 39 39 35 62 b74ecc8eb053995b 02c0 37 38 63 62 62 64 35 0a 3c 2f 42 4f 44 59 3e 0a 78cbbd5.</BODY>. No. Time Source Destination Protocol Length Info 9761 103.021311 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:16:43 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS1/34427 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 9761: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:16:43 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS1/34427 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 9762 103.028280 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 9762: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4579, Ack: 326341, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9763 103.028312 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=326341 Ack=4621 Win=46447 Len=0 Frame 9763: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 326341, Ack: 4621, Len: 0 No. Time Source Destination Protocol Length Info 9764 103.046412 192.168.10.220 208.67.222.222 DNS 87 Standard query PTR 124.191.135.95.in-addr.arpa Frame 9764: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 65080 (65080), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 9765 103.170821 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 9765: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7939, Ack: 575003, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9766 103.170856 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=575003 Ack=7981 Win=46468 Len=0 Frame 9766: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 575003, Ack: 7981, Len: 0 No. Time Source Destination Protocol Length Info 9767 103.193965 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 9767: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9768 103.264757 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.32 Frame 9768: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9769 103.264790 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.32 Frame 9769: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9770 103.315326 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 9770: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9771 103.320214 Dell_49:f2:ec Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.36 Frame 9771: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_49:f2:ec (00:14:22:49:f2:ec), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9772 103.320242 Dell_49:f2:ec Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.36 Frame 9772: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_49:f2:ec (00:14:22:49:f2:ec), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9773 103.333319 208.67.222.222 192.168.10.220 DNS 131 Standard query response PTR 124-191-135-95.pool.ukrtel.net Frame 9773: 131 bytes on wire (1048 bits), 131 bytes captured (1048 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 65080 (65080) Domain Name System (response) No. Time Source Destination Protocol Length Info 9774 103.334167 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 Who has 192.168.10.220? Tell 192.168.10.1 Frame 9774: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9775 103.334180 Dell_ad:25:f6 Watchgua_3c:4c:d8 ARP 60 192.168.10.220 is at 00:22:19:ad:25:f6 Frame 9775: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9776 103.348646 192.168.10.220 208.67.222.222 DNS 86 Standard query PTR 104.35.91.178.in-addr.arpa Frame 9776: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 53048 (53048), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 9777 103.390761 192.168.10.208 192.168.10.255 NBNS 92 Name query NB POLLUX<20> Frame 9777: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.208 (192.168.10.208), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 9778 103.390946 192.168.10.208 192.168.10.255 NBNS 92 Name query NB POLLUX<20> Frame 9778: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.208 (192.168.10.208), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 9779 103.443727 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 9779: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9780 103.488027 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 9780: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9781 103.488058 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 9781: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9782 103.568649 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 9782: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9783 103.604797 192.168.10.190 64.74.103.148 TLSv1 91 Application Data Frame 9783: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.190 (192.168.10.190), Dst: 64.74.103.148 (64.74.103.148) Transmission Control Protocol, Src Port: wsmlb (3806), Dst Port: https (443), Seq: 112, Ack: 112, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 9784 103.604866 64.74.103.148 192.168.10.190 TCP 60 https > wsmlb [ACK] Seq=112 Ack=149 Win=65535 Len=0 Frame 9784: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Internet Protocol Version 4, Src: 64.74.103.148 (64.74.103.148), Dst: 192.168.10.190 (192.168.10.190) Transmission Control Protocol, Src Port: https (443), Dst Port: wsmlb (3806), Seq: 112, Ack: 149, Len: 0 No. Time Source Destination Protocol Length Info 9785 103.606239 Watchgua_3c:4c:d8 IntelCor_ed:1a:23 ARP 60 Who has 192.168.10.190? Tell 192.168.10.1 Frame 9785: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9786 103.606253 IntelCor_ed:1a:23 Watchgua_3c:4c:d8 ARP 60 192.168.10.190 is at 00:13:20:ed:1a:23 Frame 9786: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9787 103.652596 64.74.103.148 192.168.10.190 TLSv1 91 Application Data Frame 9787: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Internet Protocol Version 4, Src: 64.74.103.148 (64.74.103.148), Dst: 192.168.10.190 (192.168.10.190) Transmission Control Protocol, Src Port: https (443), Dst Port: wsmlb (3806), Seq: 112, Ack: 149, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 9788 103.740595 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.96? Tell 192.168.10.226 Frame 9788: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9789 103.740629 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.96? Tell 192.168.10.226 Frame 9789: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9790 103.740645 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 9790: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9791 103.740655 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 9791: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9792 103.740666 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 9792: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9793 103.740691 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 9793: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9794 103.740702 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 9794: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9795 103.740712 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 9795: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9796 103.740722 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 9796: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9797 103.740732 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 9797: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9798 103.740742 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 9798: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9799 103.740758 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 9799: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9800 103.740793 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 9800: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9801 103.740803 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 9801: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9802 103.740831 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 9802: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9803 103.740841 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 9803: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9804 103.740852 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 9804: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9805 103.740862 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 9805: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9806 103.740871 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 9806: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9807 103.740882 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 9807: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9808 103.740892 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 9808: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9809 103.740902 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 9809: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9810 103.740913 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 9810: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9811 103.740923 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 9811: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9812 103.740933 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 9812: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9813 103.740952 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 9813: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9814 103.740968 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 9814: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9815 103.740983 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 9815: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9816 103.740993 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 9816: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9817 103.741002 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 9817: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9818 103.741012 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 9818: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9819 103.741022 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 9819: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9820 103.741033 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 9820: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9821 103.741043 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 9821: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9822 103.741053 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 9822: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9823 103.741063 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 9823: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9824 103.741073 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 9824: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9825 103.741083 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 9825: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9826 103.741093 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 9826: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9827 103.741103 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 9827: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9828 103.741113 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 9828: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9829 103.741123 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 9829: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9830 103.741133 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 9830: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9831 103.741143 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 9831: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9832 103.741153 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 9832: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9833 103.741166 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 9833: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9834 103.741262 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 9834: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9835 103.741276 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 9835: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9836 103.756522 192.168.10.104 192.168.10.255 BROWSER 224 Become Backup Browser Frame 9836: 224 bytes on wire (1792 bits), 224 bytes captured (1792 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 9837 103.792093 192.168.10.190 64.74.103.148 TCP 60 wsmlb > https [ACK] Seq=149 Ack=149 Win=65498 Len=0 Frame 9837: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.190 (192.168.10.190), Dst: 64.74.103.148 (64.74.103.148) Transmission Control Protocol, Src Port: wsmlb (3806), Dst Port: https (443), Seq: 149, Ack: 149, Len: 0 No. Time Source Destination Protocol Length Info 9838 103.814299 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3316586752, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9838: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9839 103.814322 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3316586752, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9839: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9840 103.814335 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3316586752, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9840: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9841 103.814347 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3316586752, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9841: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9842 103.834910 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 890765568, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9842: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9843 103.834933 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 890765568, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9843: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9844 103.834946 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 890765568, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9844: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9845 103.834958 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 890765568, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9845: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9846 103.986380 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 9846: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4621, Ack: 326341, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9847 103.986418 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=326341 Ack=4663 Win=46426 Len=0 Frame 9847: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 326341, Ack: 4663, Len: 0 No. Time Source Destination Protocol Length Info 9848 103.988428 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 9848: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9849 103.988459 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 9849: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9850 103.999725 202.1.166.13 192.168.10.207 SMTP 91 C: MAIL FROM: <ebspot@xxxxxxxxxxxx> Frame 9850: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gbmt-stars (3912), Dst Port: smtp (25), Seq: 39, Ack: 169, Len: 37 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9851 103.999896 192.168.10.207 202.1.166.13 SMTP 101 S: 250 2.1.0 [email protected] OK Frame 9851: 101 bytes on wire (808 bits), 101 bytes captured (808 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 202.1.166.13 (202.1.166.13) Transmission Control Protocol, Src Port: smtp (25), Dst Port: gbmt-stars (3912), Seq: 169, Ack: 76, Len: 47 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9852 103.999939 202.1.166.13 192.168.10.207 TCP 60 gbmt-stars > smtp [ACK] Seq=76 Ack=216 Win=93224 Len=0 Frame 9852: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: gbmt-stars (3912), Dst Port: smtp (25), Seq: 76, Ack: 216, Len: 0 No. Time Source Destination Protocol Length Info 9853 104.027399 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 9853: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 7981, Ack: 575003, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9854 104.027437 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=575003 Ack=8023 Win=46447 Len=0 Frame 9854: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 575003, Ack: 8023, Len: 0 No. Time Source Destination Protocol Length Info 9855 104.268132 192.168.10.104 192.168.10.220 NBNS 110 Refresh NB WORKGROUP<1d> Frame 9855: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 9856 104.348994 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 104.35.91.178.in-addr.arpa Frame 9856: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 59558 (59558), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 9857 104.391869 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 9857: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9858 104.391900 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 9858: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9859 104.579128 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 9859: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8023, Ack: 575003, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9860 104.579163 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=575003 Ack=8065 Win=46426 Len=0 Frame 9860: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 575003, Ack: 8065, Len: 0 No. Time Source Destination Protocol Length Info 9861 104.820316 Dell_49:f2:ec Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.36 Frame 9861: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_49:f2:ec (00:14:22:49:f2:ec), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9862 104.820348 Dell_49:f2:ec Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.36 Frame 9862: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_49:f2:ec (00:14:22:49:f2:ec), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9863 104.830065 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3333363968, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9863: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9864 104.830088 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3333363968, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9864: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9865 104.830101 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3333363968, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9865: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9866 104.830113 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3333363968, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9866: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9867 104.850374 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 907542784, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9867: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9868 104.850397 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 907542784, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9868: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9869 104.850410 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 907542784, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9869: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9870 104.850422 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 907542784, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9870: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9871 105.029155 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 9871: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4663, Ack: 326341, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9872 105.029189 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=326341 Ack=4705 Win=46405 Len=0 Frame 9872: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 326341, Ack: 4705, Len: 0 No. Time Source Destination Protocol Length Info 9873 105.121279 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 9873: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8065, Ack: 575003, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9874 105.121316 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=575003 Ack=8107 Win=46405 Len=0 Frame 9874: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 575003, Ack: 8107, Len: 0 No. Time Source Destination Protocol Length Info 9875 105.193927 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 9875: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9876 105.315349 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 9876: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9877 105.443595 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 9877: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9878 105.478945 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 9878: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9879 105.478986 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 9879: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9880 105.565953 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 9880: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9881 105.768176 192.168.10.104 192.168.10.220 NBNS 110 Refresh NB WORKGROUP<1e> Frame 9881: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 9882 105.845681 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3350141184, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9882: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9883 105.845705 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3350141184, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9883: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9884 105.845719 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3350141184, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9884: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9885 105.845731 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3350141184, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9885: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9886 105.863053 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 9886: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8107, Ack: 575003, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9887 105.863086 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=575003 Ack=8149 Win=46384 Len=0 Frame 9887: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 575003, Ack: 8149, Len: 0 No. Time Source Destination Protocol Length Info 9888 105.863179 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=8149 Ack=575003 Win=14679 Len=0 Frame 9888: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8149, Ack: 575003, Len: 0 No. Time Source Destination Protocol Length Info 9889 105.863208 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 9888#1] smtp > 23308 [ACK] Seq=8149 Ack=575003 Win=14679 Len=0 Frame 9889: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8149, Ack: 575003, Len: 0 No. Time Source Destination Protocol Length Info 9890 105.863241 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9890: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 575003, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9891 105.863270 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9891: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 576383, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9892 105.863299 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9892: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 577763, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9893 105.863332 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9893: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 579143, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9894 105.863362 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9894: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 580523, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9895 105.863393 206.225.164.186 192.168.10.207 SMTP 933 C: DATA fragment, 879 bytes Frame 9895: 933 bytes on wire (7464 bits), 933 bytes captured (7464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 581903, Ack: 8149, Len: 879 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9896 105.863422 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9896: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 582782, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9897 105.863452 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9897: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 584162, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9898 105.863484 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=8149 Ack=579143 Win=10539 Len=0 Frame 9898: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8149, Ack: 579143, Len: 0 No. Time Source Destination Protocol Length Info 9899 105.863555 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9899: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 585542, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9900 105.863586 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9900: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 586922, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9901 105.863615 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9901: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 588302, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9902 105.863645 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=8149 Ack=585542 Win=4140 Len=0 Frame 9902: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8149, Ack: 585542, Len: 0 No. Time Source Destination Protocol Length Info 9903 105.863676 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=8149 Ack=589682 Win=0 Len=0 Frame 9903: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8149, Ack: 589682, Len: 0 No. Time Source Destination Protocol Length Info 9904 105.866134 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 924320000, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9904: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9905 105.866156 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 924320000, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9905: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9906 105.866169 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 924320000, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9906: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9907 105.866181 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 924320000, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9907: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9908 105.994186 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 9908: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9909 105.994220 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 9909: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9910 105.994279 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 9872#1] 9428 > smtp [ACK] Seq=326341 Ack=4705 Win=46405 Len=0 Frame 9910: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 326341, Ack: 4705, Len: 0 No. Time Source Destination Protocol Length Info 9911 106.203144 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 9911: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4705, Ack: 326341, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9912 106.203179 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=326341 Ack=4747 Win=46384 Len=0 Frame 9912: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 326341, Ack: 4747, Len: 0 No. Time Source Destination Protocol Length Info 9913 106.414419 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 9913: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8149, Ack: 589682, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9914 106.414454 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=589682 Ack=8191 Win=46363 Len=0 Frame 9914: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 589682, Ack: 8191, Len: 0 No. Time Source Destination Protocol Length Info 9915 106.505645 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 4 Port 45 TTL = 120 Frame 9915: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 9916 106.518797 64.74.103.131 192.168.10.240 TLSv1 107 Application Data Frame 9916: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.240 (192.168.10.240) Transmission Control Protocol, Src Port: https (443), Dst Port: mentaserver (2118), Seq: 160, Ack: 160, Len: 53 Secure Sockets Layer No. Time Source Destination Protocol Length Info 9917 106.518879 192.168.10.240 64.74.103.131 TLSv1 107 Application Data Frame 9917: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.240 (192.168.10.240), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: mentaserver (2118), Dst Port: https (443), Seq: 160, Ack: 213, Len: 53 Secure Sockets Layer No. Time Source Destination Protocol Length Info 9918 106.518941 64.74.103.131 192.168.10.240 TCP 60 https > mentaserver [ACK] Seq=213 Ack=213 Win=65535 Len=0 Frame 9918: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.240 (192.168.10.240) Transmission Control Protocol, Src Port: https (443), Dst Port: mentaserver (2118), Seq: 213, Ack: 213, Len: 0 No. Time Source Destination Protocol Length Info 9919 106.522351 Watchgua_3c:4c:d8 Dell_ba:b4:3c ARP 60 Who has 192.168.10.240? Tell 192.168.10.1 Frame 9919: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9920 106.522364 Dell_ba:b4:3c Watchgua_3c:4c:d8 ARP 60 192.168.10.240 is at 00:1e:c9:ba:b4:3c Frame 9920: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9921 106.861170 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3366918400, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9921: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9922 106.861194 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3366918400, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9922: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9923 106.861206 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3366918400, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9923: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9924 106.861219 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3366918400, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9924: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9925 106.871238 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 9925: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9926 106.871267 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 9926: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9927 106.881581 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 941097216, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9927: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9928 106.881602 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 941097216, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9928: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9929 106.881613 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 941097216, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9929: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9930 106.881626 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 941097216, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9930: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9931 106.961014 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 9931: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8191, Ack: 589682, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9932 106.961051 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=589682 Ack=8233 Win=46342 Len=0 Frame 9932: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 589682, Ack: 8233, Len: 0 No. Time Source Destination Protocol Length Info 9933 107.161428 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 9933: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4747, Ack: 326341, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9934 107.161463 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=326341 Ack=4789 Win=46363 Len=0 Frame 9934: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 326341, Ack: 4789, Len: 0 No. Time Source Destination Protocol Length Info 9935 107.193964 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 9935: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9936 107.268177 192.168.10.104 192.168.10.220 NBNS 110 Refresh NB WORKGROUP<1e> Frame 9936: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 9937 107.315440 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 9937: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9938 107.389732 192.168.10.32 192.168.10.255 UDP 647 Source port: 38302 Destination port: apc-3052 Frame 9938: 647 bytes on wire (5176 bits), 647 bytes captured (5176 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (605 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 37 3a 34 39 0a 53 52 3d 30 31 31 =20:57:49.SR=011 0060 35 45 37 0a 53 55 3d 31 31 33 43 0a 52 44 3d 42 5E7.SU=113C.RD=B 0070 41 37 42 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 A7B.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 38 .4C=207.3.50=038 00c0 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 .0.43=028.5.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 31 3a 1/19/07.6A=0051: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 746005481 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 35 39 2e 39 39 0a 34 44 3d .46=59.99.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 207.3.4E=205.9.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 30 2e 30 0a 32 46 3d 31 34 2e .5C=030.0.2F=14. 01d0 39 38 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 98.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 000.09=59.99;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 30 0a 49 30 3d 30 0a 53 48 3d O .MC=0.I0=0.SH= 0210 46 37 31 37 37 44 43 32 38 36 43 38 32 45 45 35 F7177DC286C82EE5 0220 44 39 34 30 33 30 45 41 35 36 42 43 46 43 35 34 D94030EA56BCFC54 0230 0a 4d 44 3d 37 33 62 32 35 33 31 38 61 61 36 33 .MD=73b25318aa63 0240 36 34 39 61 62 33 38 38 30 66 30 62 65 61 34 37 649ab3880f0bea47 0250 36 35 31 66 0a 3c 2f 42 4f 44 59 3e 0a 651f.</BODY>. No. Time Source Destination Protocol Length Info 9939 107.389845 192.168.10.32 192.168.10.255 UDP 647 Source port: 38302 Destination port: apc-3052 Frame 9939: 647 bytes on wire (5176 bits), 647 bytes captured (5176 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (605 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 37 3a 34 39 0a 53 52 3d 30 31 31 =20:57:49.SR=011 0060 35 45 37 0a 53 55 3d 31 31 33 43 0a 52 44 3d 42 5E7.SU=113C.RD=B 0070 41 37 42 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 A7B.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 38 .4C=207.3.50=038 00c0 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 .0.43=028.5.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 31 3a 1/19/07.6A=0051: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 746005481 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 35 39 2e 39 39 0a 34 44 3d .46=59.99.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 207.3.4E=205.9.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 30 2e 30 0a 32 46 3d 31 34 2e .5C=030.0.2F=14. 01d0 39 38 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 98.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 000.09=59.99;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 30 0a 49 30 3d 30 0a 53 48 3d O .MC=0.I0=0.SH= 0210 46 37 31 37 37 44 43 32 38 36 43 38 32 45 45 35 F7177DC286C82EE5 0220 44 39 34 30 33 30 45 41 35 36 42 43 46 43 35 34 D94030EA56BCFC54 0230 0a 4d 44 3d 37 33 62 32 35 33 31 38 61 61 36 33 .MD=73b25318aa63 0240 36 34 39 61 62 33 38 38 30 66 30 62 65 61 34 37 649ab3880f0bea47 0250 36 35 31 66 0a 3c 2f 42 4f 44 59 3e 0a 651f.</BODY>. No. Time Source Destination Protocol Length Info 9940 107.399355 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.183? Tell 192.168.10.220 Frame 9940: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9941 107.399382 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.183? Tell 192.168.10.220 Frame 9941: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9942 107.399396 Dell_ad:25:f8 Intel_38:8d:0a ARP 64 Who has 192.168.10.66? Tell 192.168.10.220 Frame 9942: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9943 107.399407 Dell_ad:25:f8 Intel_89:5e:11 ARP 64 Who has 192.168.10.65? Tell 192.168.10.220 Frame 9943: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9944 107.399423 Intel_38:8d:0a Dell_ad:25:f6 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 9944: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9945 107.399434 Intel_89:5e:11 Dell_ad:25:f8 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 9945: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9946 107.399445 Dell_ad:25:f8 Intel_a5:f5:5b ARP 64 Who has 192.168.10.131? Tell 192.168.10.220 Frame 9946: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9947 107.399455 Dell_ad:25:f8 Intel_38:8c:64 ARP 64 Who has 192.168.10.67? Tell 192.168.10.220 Frame 9947: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9948 107.399465 Dell_ad:25:f8 Intel_02:0e:6d ARP 64 Who has 192.168.10.128? Tell 192.168.10.220 Frame 9948: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9949 107.399475 Intel_a5:f5:5b Dell_ad:25:f8 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 9949: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9950 107.399486 Dell_ad:25:f8 IntelCor_d3:4e:80 ARP 64 Who has 192.168.10.70? Tell 192.168.10.220 Frame 9950: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9951 107.399496 Intel_38:8c:64 Dell_ad:25:f6 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 9951: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9952 107.399507 Dell_ad:25:f8 Intel_d0:7a:8f ARP 64 Who has 192.168.10.68? Tell 192.168.10.220 Frame 9952: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9953 107.399517 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.233? Tell 192.168.10.220 Frame 9953: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9954 107.399527 Intel_02:0e:6d Dell_ad:25:f6 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 9954: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9955 107.399537 Dell_ad:25:f8 Intel_56:83:a5 ARP 64 Who has 192.168.10.59? Tell 192.168.10.220 Frame 9955: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9956 107.399547 IntelCor_d3:4e:80 Dell_ad:25:f8 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 9956: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9957 107.399558 Dell_ad:25:f8 Intel_38:8c:b1 ARP 64 Who has 192.168.10.138? Tell 192.168.10.220 Frame 9957: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9958 107.399568 Intel_d0:7a:8f Dell_ad:25:f8 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 9958: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9959 107.399578 Dell_ad:25:f8 Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.220 Frame 9959: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9960 107.399588 Intel_56:83:a5 Dell_ad:25:f6 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 9960: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9961 107.399598 Intel_38:8c:b1 Dell_ad:25:f6 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 9961: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9962 107.399610 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 9962: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9963 107.399620 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 9963: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 9964 107.443703 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 9964: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9965 107.477445 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 9965: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9966 107.477476 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 9966: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9967 107.518609 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 9967: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8233, Ack: 589682, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9968 107.518644 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=589682 Ack=8275 Win=46321 Len=0 Frame 9968: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 589682, Ack: 8275, Len: 0 No. Time Source Destination Protocol Length Info 9969 107.566165 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 9969: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 9970 107.876918 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3383695616, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9970: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9971 107.876943 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3383695616, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 9971: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9972 107.876957 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3383695616, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9972: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9973 107.876969 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3383695616, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 9973: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9974 107.897196 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 957874432, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9974: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9975 107.897219 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 957874432, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 9975: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9976 107.897232 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 957874432, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9976: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9977 107.897244 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 957874432, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 9977: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 9978 107.928472 192.168.10.31 192.168.10.255 UDP 778 Source port: 50764 Destination port: apc-3052 Frame 9978: 778 bytes on wire (6224 bits), 778 bytes captured (6224 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (736 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 35 30 3a 30 39 0a 53 52 3d 31 30 37 =19:50:09.SR=107 0060 43 0a 53 55 3d 32 44 38 32 45 30 31 32 0a 52 44 C.SU=2D82E012.RD 0070 3d 39 38 41 39 0a 54 41 3d 31 39 32 2e 31 36 38 =98A9.TA=192.168 0080 2e 31 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d .10.255.UC=1.SD= 0090 30 0a 53 4d 3d 32 0a 34 46 3d 32 30 37 2e 30 0a 0.SM=2.4F=207.0. 00a0 35 31 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 51=08.7E=00.3E=0 00b0 30 32 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 02.4C=207.3.50=0 00c0 33 34 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 34.0.43=029.1.78 00d0 3d 31 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 =11/19/07.6A=005 00e0 39 3a 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 9:.47=S.63=UPS_I 00f0 44 45 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d DEN.66=100.0.58= 0100 4e 4f 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a NO.56=5YW.39=FF. 0110 32 37 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 27=00.38=00.6E=I 0120 53 30 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 S0746005443 .6D 0130 3d 31 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 =11/19/07.01=Sma 0140 72 74 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 rt-UPS RT 10000 0150 58 4c 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 XL .46=60.00.4 0160 44 3d 32 30 38 2e 38 0a 34 45 3d 32 30 37 2e 33 D=208.8.4E=207.3 0170 0a 34 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 .45=336.75=229.6 0180 43 3d 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 C=146.65=00.6F=2 0190 30 38 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 08.71=02.70=020. 01a0 37 32 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 72=000.42=217.0. 01b0 36 37 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 67=192.62=476.17 01c0 2e 57 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 .W.5C=028.0.2F=1 01d0 33 2e 39 30 0a 31 36 3d 41 0a 30 35 3d 30 30 30 3.90.16=A.05=000 01e0 30 30 30 30 30 0a 30 39 3d 35 39 2e 39 36 3b 32 00000.09=59.96;2 01f0 30 37 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 07.3.6B=0.81E2=A 0200 55 54 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 UTO .MC=1.E0=0.E 0210 31 3d 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 1=0.E2=0.E3=0.E8 0220 3d 30 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d =0.E9=0.I0=2.I1= 0230 30 30 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 00.I2=01.I3=0.I4 0240 3d 30 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d =0.I5=0.I6=0.I7= 0250 30 0a 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 0.I8=Int Contact 0260 20 31 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 1.I9=0.IA=Int C 0270 6f 6e 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 ontact 2.IB=0.IC 0280 3d 49 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a =Int Relay.ID=0. 0290 53 48 3d 39 35 35 36 42 42 32 36 34 35 44 34 34 SH=9556BB2645D44 02a0 30 38 33 31 44 44 36 46 43 32 41 42 41 41 45 39 0831DD6FC2ABAAE9 02b0 44 44 34 0a 4d 44 3d 61 38 62 62 30 32 61 36 36 DD4.MD=a8bb02a66 02c0 32 65 34 35 31 38 39 64 35 64 34 37 63 34 31 32 2e45189d5d47c412 02d0 64 66 36 36 37 37 36 0a 3c 2f 42 4f 44 59 3e 0a df66776.</BODY>. No. Time Source Destination Protocol Length Info 9979 107.928623 192.168.10.31 192.168.10.255 UDP 778 Source port: 50764 Destination port: apc-3052 Frame 9979: 778 bytes on wire (6224 bits), 778 bytes captured (6224 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (736 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 35 30 3a 30 39 0a 53 52 3d 31 30 37 =19:50:09.SR=107 0060 43 0a 53 55 3d 32 44 38 32 45 30 31 32 0a 52 44 C.SU=2D82E012.RD 0070 3d 39 38 41 39 0a 54 41 3d 31 39 32 2e 31 36 38 =98A9.TA=192.168 0080 2e 31 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d .10.255.UC=1.SD= 0090 30 0a 53 4d 3d 32 0a 34 46 3d 32 30 37 2e 30 0a 0.SM=2.4F=207.0. 00a0 35 31 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 51=08.7E=00.3E=0 00b0 30 32 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 02.4C=207.3.50=0 00c0 33 34 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 34.0.43=029.1.78 00d0 3d 31 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 =11/19/07.6A=005 00e0 39 3a 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 9:.47=S.63=UPS_I 00f0 44 45 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d DEN.66=100.0.58= 0100 4e 4f 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a NO.56=5YW.39=FF. 0110 32 37 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 27=00.38=00.6E=I 0120 53 30 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 S0746005443 .6D 0130 3d 31 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 =11/19/07.01=Sma 0140 72 74 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 rt-UPS RT 10000 0150 58 4c 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 XL .46=60.00.4 0160 44 3d 32 30 38 2e 38 0a 34 45 3d 32 30 37 2e 33 D=208.8.4E=207.3 0170 0a 34 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 .45=336.75=229.6 0180 43 3d 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 C=146.65=00.6F=2 0190 30 38 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 08.71=02.70=020. 01a0 37 32 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 72=000.42=217.0. 01b0 36 37 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 67=192.62=476.17 01c0 2e 57 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 .W.5C=028.0.2F=1 01d0 33 2e 39 30 0a 31 36 3d 41 0a 30 35 3d 30 30 30 3.90.16=A.05=000 01e0 30 30 30 30 30 0a 30 39 3d 35 39 2e 39 36 3b 32 00000.09=59.96;2 01f0 30 37 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 07.3.6B=0.81E2=A 0200 55 54 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 UTO .MC=1.E0=0.E 0210 31 3d 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 1=0.E2=0.E3=0.E8 0220 3d 30 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d =0.E9=0.I0=2.I1= 0230 30 30 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 00.I2=01.I3=0.I4 0240 3d 30 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d =0.I5=0.I6=0.I7= 0250 30 0a 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 0.I8=Int Contact 0260 20 31 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 1.I9=0.IA=Int C 0270 6f 6e 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 ontact 2.IB=0.IC 0280 3d 49 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a =Int Relay.ID=0. 0290 53 48 3d 39 35 35 36 42 42 32 36 34 35 44 34 34 SH=9556BB2645D44 02a0 30 38 33 31 44 44 36 46 43 32 41 42 41 41 45 39 0831DD6FC2ABAAE9 02b0 44 44 34 0a 4d 44 3d 61 38 62 62 30 32 61 36 36 DD4.MD=a8bb02a66 02c0 32 65 34 35 31 38 39 64 35 64 34 37 63 34 31 32 2e45189d5d47c412 02d0 64 66 36 36 37 37 36 0a 3c 2f 42 4f 44 59 3e 0a df66776.</BODY>. No. Time Source Destination Protocol Length Info 9980 107.984928 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 9980: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9981 107.984959 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 9981: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 9982 108.075875 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 9982: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8275, Ack: 589682, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9983 108.075909 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=589682 Ack=8317 Win=46300 Len=0 Frame 9983: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 589682, Ack: 8317, Len: 0 No. Time Source Destination Protocol Length Info 9984 108.163835 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 9984: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4789, Ack: 326341, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9985 108.163870 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=326341 Ack=4831 Win=46342 Len=0 Frame 9985: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 326341, Ack: 4831, Len: 0 No. Time Source Destination Protocol Length Info 9986 108.349584 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 9986: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9987 108.349617 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 9987: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9988 108.391418 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 9988: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9989 108.391449 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 9989: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 9990 108.422856 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 3 Port 47 TTL = 120 Frame 9990: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 9991 108.627514 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 9991: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8317, Ack: 589682, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9992 108.627550 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=589682 Ack=8359 Win=46279 Len=0 Frame 9992: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 589682, Ack: 8359, Len: 0 No. Time Source Destination Protocol Length Info 9993 108.627661 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=8359 Ack=589682 Win=50856 Len=0 Frame 9993: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8359, Ack: 589682, Len: 0 No. Time Source Destination Protocol Length Info 9994 108.627692 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 9993#1] smtp > 23308 [ACK] Seq=8359 Ack=589682 Win=50856 Len=0 Frame 9994: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8359, Ack: 589682, Len: 0 No. Time Source Destination Protocol Length Info 9995 108.627724 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9995: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 589682, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9996 108.627753 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9996: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 591062, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9997 108.627785 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9997: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 592442, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9998 108.627814 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 9998: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 593822, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 9999 108.627843 206.225.164.186 192.168.10.207 SMTP 1084 C: DATA fragment, 1030 bytes Frame 9999: 1084 bytes on wire (8672 bits), 1084 bytes captured (8672 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 595202, Ack: 8359, Len: 1030 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10000 108.627872 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10000: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 596232, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10001 108.627907 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10001: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 597612, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10002 108.627936 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10002: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 598992, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10003 108.627966 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10003: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 600372, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10004 108.627995 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=8359 Ack=595202 Win=45336 Len=0 Frame 10004: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8359, Ack: 595202, Len: 0 No. Time Source Destination Protocol Length Info 10005 108.628027 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=8359 Ack=600372 Win=40166 Len=0 Frame 10005: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8359, Ack: 600372, Len: 0 No. Time Source Destination Protocol Length Info 10006 108.628056 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10006: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 601752, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10007 108.628085 206.225.164.186 192.168.10.207 SMTP 746 C: DATA fragment, 692 bytes Frame 10007: 746 bytes on wire (5968 bits), 746 bytes captured (5968 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 603132, Ack: 8359, Len: 692 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10008 108.628114 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10008: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 603824, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10009 108.628143 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10009: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 605204, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10010 108.628173 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10010: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 606584, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10011 108.628202 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10011: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 607964, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10012 108.628232 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10012: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 609344, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10013 108.628265 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10013: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 610724, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10014 108.628294 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=8359 Ack=603824 Win=36714 Len=0 Frame 10014: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8359, Ack: 603824, Len: 0 No. Time Source Destination Protocol Length Info 10015 108.628323 206.225.164.186 192.168.10.207 SMTP 1397 C: DATA fragment, 1343 bytes Frame 10015: 1397 bytes on wire (11176 bits), 1397 bytes captured (11176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 612104, Ack: 8359, Len: 1343 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10016 108.628362 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10016: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 613447, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10017 108.628392 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10017: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 614827, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10018 108.628420 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=8359 Ack=612104 Win=28434 Len=0 Frame 10018: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8359, Ack: 612104, Len: 0 No. Time Source Destination Protocol Length Info 10019 108.628454 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10019: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 616207, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10020 108.628483 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10020: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 617587, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10021 108.628512 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=8359 Ack=616207 Win=24331 Len=0 Frame 10021: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8359, Ack: 616207, Len: 0 No. Time Source Destination Protocol Length Info 10022 108.628540 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10022: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 618967, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10023 108.628569 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10023: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 620347, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10024 108.628598 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10024: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 621727, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10025 108.628628 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10025: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 623107, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10026 108.628656 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=8359 Ack=618967 Win=21571 Len=0 Frame 10026: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8359, Ack: 618967, Len: 0 No. Time Source Destination Protocol Length Info 10027 108.628684 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10027: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 624487, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10028 108.628714 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10028: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 625867, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10029 108.628742 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10029: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 627247, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10030 108.628771 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=8359 Ack=621727 Win=18811 Len=0 Frame 10030: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8359, Ack: 621727, Len: 0 No. Time Source Destination Protocol Length Info 10031 108.628804 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10031: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 628627, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10032 108.628835 206.225.164.186 192.168.10.207 SMTP 897 C: DATA fragment, 843 bytes Frame 10032: 897 bytes on wire (7176 bits), 897 bytes captured (7176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 630007, Ack: 8359, Len: 843 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10033 108.628863 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=8359 Ack=624487 Win=16051 Len=0 Frame 10033: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8359, Ack: 624487, Len: 0 No. Time Source Destination Protocol Length Info 10034 108.628891 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10034: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 630850, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10035 108.628921 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10035: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 632230, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10036 108.628950 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=8359 Ack=628627 Win=11911 Len=0 Frame 10036: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8359, Ack: 628627, Len: 0 No. Time Source Destination Protocol Length Info 10037 108.628978 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10037: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 633610, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10038 108.629007 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10038: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 634990, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10039 108.629036 206.225.164.186 192.168.10.207 SMTP 933 C: DATA fragment, 879 bytes Frame 10039: 933 bytes on wire (7464 bits), 933 bytes captured (7464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 636370, Ack: 8359, Len: 879 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10040 108.629064 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=8359 Ack=632230 Win=8308 Len=0 Frame 10040: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8359, Ack: 632230, Len: 0 No. Time Source Destination Protocol Length Info 10041 108.629092 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10041: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 637249, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10042 108.629121 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10042: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 638629, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10043 108.629149 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=8359 Ack=634990 Win=5548 Len=0 Frame 10043: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8359, Ack: 634990, Len: 0 No. Time Source Destination Protocol Length Info 10044 108.629177 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10044: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 640009, Ack: 8359, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10045 108.629205 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=8359 Ack=637249 Win=3289 Len=0 Frame 10045: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8359, Ack: 637249, Len: 0 No. Time Source Destination Protocol Length Info 10046 108.629232 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=8359 Ack=640538 Win=0 Len=0 Frame 10046: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8359, Ack: 640538, Len: 0 No. Time Source Destination Protocol Length Info 10047 108.642600 192.168.10.220 208.67.220.220 DNS 86 Standard query PTR 104.35.91.178.in-addr.arpa Frame 10047: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.220.220 (208.67.220.220) User Datagram Protocol, Src Port: 53048 (53048), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10048 108.690778 208.67.220.220 192.168.10.220 DNS 86 Standard query response, No such name Frame 10048: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.220.220 (208.67.220.220), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 53048 (53048) Domain Name System (response) No. Time Source Destination Protocol Length Info 10049 108.691432 192.168.10.203 178.91.35.104 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 10049: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 178.91.35.104 (178.91.35.104) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10050 108.694417 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 Who has 192.168.10.220? Tell 192.168.10.1 Frame 10050: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10051 108.694432 Dell_ad:25:f6 Watchgua_3c:4c:d8 ARP 60 192.168.10.220 is at 00:22:19:ad:25:f6 Frame 10051: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10052 108.768236 192.168.10.104 192.168.10.220 NBNS 110 Refresh NB WORKGROUP<1e> Frame 10052: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10053 108.892361 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3400472832, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10053: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10054 108.892384 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3400472832, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10054: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10055 108.892398 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3400472832, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10055: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10056 108.892410 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3400472832, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10056: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10057 108.912811 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 974651648, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10057: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10058 108.912834 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 974651648, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10058: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10059 108.912846 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 974651648, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10059: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10060 108.912858 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 974651648, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10060: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10061 108.994642 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:46:07 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.27 4794 80 msg="Conn End" (HTTP-proxy.endusers-00) Frame 10061: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:46:07 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.27 4794 80 msg="Conn End" (HTTP-proxy.endusers-00) No. Time Source Destination Protocol Length Info 10062 108.998318 Watchgua_3c:4c:d8 SunrichT_19:cf:97 ARP 60 Who has 192.168.10.245? Tell 192.168.10.1 Frame 10062: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10063 108.998331 SunrichT_19:cf:97 Watchgua_3c:4c:d8 ARP 60 192.168.10.245 is at 00:0a:cd:19:cf:97 Frame 10063: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:97 (00:0a:cd:19:cf:97), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10064 109.150798 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 10064: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4831, Ack: 326341, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10065 109.150844 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=326341 Ack=4873 Win=46321 Len=0 Frame 10065: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 326341, Ack: 4873, Len: 0 No. Time Source Destination Protocol Length Info 10066 109.190525 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 10066: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8359, Ack: 640538, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10067 109.190560 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=641389 Ack=8401 Win=46258 Len=0 Frame 10067: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 641389, Ack: 8401, Len: 0 No. Time Source Destination Protocol Length Info 10068 109.190592 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=8401 Ack=640538 Win=0 Len=0 Frame 10068: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8401, Ack: 640538, Len: 0 No. Time Source Destination Protocol Length Info 10069 109.193951 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 10069: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10070 109.315435 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 10070: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10071 109.426946 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 10071: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8359, Ack: 640538, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10072 109.426981 206.225.164.186 192.168.10.207 TCP 60 [TCP Dup ACK 10067#1] 23308 > smtp [ACK] Seq=641389 Ack=8401 Win=46258 Len=0 Frame 10072: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 641389, Ack: 8401, Len: 0 No. Time Source Destination Protocol Length Info 10073 109.427013 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=8401 Ack=640538 Win=0 Len=0 Frame 10073: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8401, Ack: 640538, Len: 0 No. Time Source Destination Protocol Length Info 10074 109.443677 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 10074: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10075 109.482813 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10075: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10076 109.482854 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10076: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10077 109.522361 192.168.10.185 192.168.10.142 VNC 164 Authentication result Frame 10077: 164 bytes on wire (1312 bits), 164 bytes captured (1312 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 104725, Ack: 4919, Len: 110 Virtual Network Computing No. Time Source Destination Protocol Length Info 10078 109.551874 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 10078: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4919, Ack: 104835, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 10079 109.566044 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 10079: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10080 109.771510 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=104835 Ack=4951 Win=64391 Len=0 Frame 10080: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 104835, Ack: 4951, Len: 0 No. Time Source Destination Protocol Length Info 10081 109.837798 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-13.geo.kaspersky.com Frame 10081: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 61421 (61421), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10082 109.907985 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3417250048, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10082: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10083 109.908007 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3417250048, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10083: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10084 109.908020 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3417250048, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10084: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10085 109.908032 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3417250048, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10085: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10086 109.928430 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 991428864, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10086: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10087 109.928454 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 991428864, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10087: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10088 109.928466 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 991428864, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10088: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10089 109.928478 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 991428864, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10089: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10090 109.983188 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10090: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10091 109.983218 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10091: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10092 109.993664 192.168.10.246 65.32.1.70 DNS 86 Standard query PTR 104.35.91.178.in-addr.arpa Frame 10092: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.70 (65.32.1.70) User Datagram Protocol, Src Port: 59558 (59558), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10093 110.030447 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 10093: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8359, Ack: 640538, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10094 110.030481 206.225.164.186 192.168.10.207 TCP 60 [TCP Dup ACK 10067#2] 23308 > smtp [ACK] Seq=641389 Ack=8401 Win=46258 Len=0 Frame 10094: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 641389, Ack: 8401, Len: 0 No. Time Source Destination Protocol Length Info 10095 110.030513 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=8401 Ack=640538 Win=0 Len=0 Frame 10095: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8401, Ack: 640538, Len: 0 No. Time Source Destination Protocol Length Info 10096 110.150701 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 10096: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4873, Ack: 326341, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10097 110.150737 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=326341 Ack=4915 Win=46300 Len=0 Frame 10097: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 326341, Ack: 4915, Len: 0 No. Time Source Destination Protocol Length Info 10098 110.191435 192.168.10.203 178.91.35.104 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 10098: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 178.91.35.104 (178.91.35.104) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10099 110.245320 65.32.1.70 192.168.10.246 DNS 146 Standard query response, No such name Frame 10099: 146 bytes on wire (1168 bits), 146 bytes captured (1168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.70 (65.32.1.70), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 59558 (59558) Domain Name System (response) No. Time Source Destination Protocol Length Info 10100 110.246442 Watchgua_3c:4c:d8 Dell_44:d0:9e ARP 60 Who has 192.168.10.246? Tell 192.168.10.1 Frame 10100: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10101 110.246455 Dell_44:d0:9e Watchgua_3c:4c:d8 ARP 60 192.168.10.246 is at 84:2b:2b:44:d0:9e Frame 10101: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10102 110.250188 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.48? Tell 192.168.10.226 Frame 10102: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10103 110.250218 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.48? Tell 192.168.10.226 Frame 10103: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10104 110.250233 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 10104: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10105 110.250243 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 10105: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10106 110.250254 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 10106: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10107 110.250269 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 10107: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10108 110.250279 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 10108: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10109 110.250289 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 10109: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10110 110.250299 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 10110: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10111 110.250309 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 10111: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10112 110.250320 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 10112: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10113 110.250330 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 10113: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10114 110.250346 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 10114: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10115 110.250381 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 10115: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10116 110.250391 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 10116: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10117 110.250401 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 10117: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10118 110.250439 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 10118: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10119 110.250457 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 10119: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10120 110.250467 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 10120: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10121 110.250477 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 10121: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10122 110.250488 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 10122: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10123 110.250498 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 10123: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10124 110.250509 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 10124: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10125 110.250519 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 10125: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10126 110.250529 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 10126: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10127 110.250539 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 10127: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10128 110.250549 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 10128: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10129 110.250559 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 10129: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10130 110.250569 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 10130: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10131 110.250580 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 10131: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10132 110.250590 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 10132: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10133 110.250600 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 10133: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10134 110.250610 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 10134: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10135 110.250620 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 10135: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10136 110.250630 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 10136: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10137 110.250640 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 10137: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10138 110.250656 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 10138: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10139 110.250671 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 10139: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10140 110.250681 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 10140: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10141 110.250691 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 10141: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10142 110.250701 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 10142: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10143 110.250711 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 10143: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10144 110.250727 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 10144: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10145 110.250738 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 10145: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10146 110.250748 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 10146: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10147 110.250758 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 10147: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10148 110.268351 192.168.10.104 192.168.10.220 NBNS 110 Refresh NB WORKGROUP<00> Frame 10148: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10149 110.776690 190.162.6.183 192.168.10.207 TCP 62 19952 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 10149: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.162.6.183 (190.162.6.183), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 19952 (19952), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 10150 110.776761 192.168.10.207 190.162.6.183 TCP 62 smtp > 19952 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 10150: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.162.6.183 (190.162.6.183) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 19952 (19952), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 10151 110.837644 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-13.geo.kaspersky.com Frame 10151: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 61421 (61421), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10152 110.923687 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3434027264, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10152: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10153 110.923712 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3434027264, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10153: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10154 110.923724 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3434027264, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10154: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10155 110.923737 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3434027264, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10155: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10156 110.944202 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1008206080, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10156: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10157 110.944220 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1008206080, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10157: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10158 110.944233 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1008206080, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10158: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10159 110.944245 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1008206080, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10159: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10160 111.193921 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 10160: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10161 111.237468 192.168.10.207 206.225.164.186 SMTP 180 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 10161: 180 bytes on wire (1440 bits), 180 bytes captured (1440 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8359, Ack: 640538, Len: 126 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10162 111.237503 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=641389 Ack=8485 Win=46216 Len=0 Frame 10162: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 641389, Ack: 8485, Len: 0 No. Time Source Destination Protocol Length Info 10163 111.237590 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=8485 Ack=640538 Win=0 Len=0 Frame 10163: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8485, Ack: 640538, Len: 0 No. Time Source Destination Protocol Length Info 10164 111.266997 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 10164: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4915, Ack: 326341, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10165 111.267040 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=326341 Ack=4957 Win=46279 Len=0 Frame 10165: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 326341, Ack: 4957, Len: 0 No. Time Source Destination Protocol Length Info 10166 111.318370 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 10166: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10167 111.343291 190.162.6.183 192.168.10.207 TCP 60 19952 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 10167: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.162.6.183 (190.162.6.183), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 19952 (19952), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 10168 111.343377 192.168.10.1 192.168.10.245 Syslog 204 LOCAL1.INFO: Oct 3 19:46:09 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.162.6.183 7x.x.x.3 19952 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 10168: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:46:09 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.162.6.183 7x.x.x.3 19952 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 10169 111.343410 192.168.10.207 190.162.6.183 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:45:44 -0400 Frame 10169: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.162.6.183 (190.162.6.183) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 19952 (19952), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10170 111.343450 190.162.6.183 192.168.10.207 TCP 60 19952 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 10170: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.162.6.183 (190.162.6.183), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 19952 (19952), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 10171 111.443742 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 10171: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10172 111.473622 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10172: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10173 111.473653 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10173: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10174 111.560276 Dell_44:d0:a0 Broadcast ARP 60 Gratuitous ARP for 192.168.0.120 (Reply) Frame 10174: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:a0 (84:2b:2b:44:d0:a0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply/gratuitous ARP) No. Time Source Destination Protocol Length Info 10175 111.560308 Dell_44:d0:a0 Broadcast ARP 60 Gratuitous ARP for 192.168.0.120 (Reply) Frame 10175: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:a0 (84:2b:2b:44:d0:a0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply/gratuitous ARP) No. Time Source Destination Protocol Length Info 10176 111.566004 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 10176: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10177 111.691225 192.168.10.203 178.91.35.104 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 10177: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 178.91.35.104 (178.91.35.104) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10178 111.768105 192.168.10.104 192.168.10.220 NBNS 110 Refresh NB WORKGROUP<00> Frame 10178: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10179 111.837542 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-13.geo.kaspersky.com Frame 10179: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 61421 (61421), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10180 111.939222 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3450804480, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10180: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10181 111.939245 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3450804480, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10181: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10182 111.939258 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3450804480, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10182: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10183 111.939271 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3450804480, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10183: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10184 111.959615 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1024983296, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10184: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10185 111.959635 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1024983296, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10185: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10186 111.959648 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1024983296, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10186: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10187 111.959660 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1024983296, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10187: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10188 111.988696 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10188: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10189 111.988718 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10189: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10190 111.994426 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 10165#1] 9428 > smtp [ACK] Seq=326341 Ack=4957 Win=46279 Len=0 Frame 10190: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 326341, Ack: 4957, Len: 0 No. Time Source Destination Protocol Length Info 10191 112.250567 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 10191: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4957, Ack: 326341, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10192 112.250602 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=326341 Ack=4999 Win=46258 Len=0 Frame 10192: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 326341, Ack: 4999, Len: 0 No. Time Source Destination Protocol Length Info 10193 112.642514 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.23? Tell 192.168.10.220 Frame 10193: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10194 112.642547 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.95? Tell 192.168.10.220 Frame 10194: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10195 112.642561 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.23? Tell 192.168.10.220 Frame 10195: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10196 112.642575 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.95? Tell 192.168.10.220 Frame 10196: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10197 112.642589 Dell_ad:25:f8 Intel_38:8d:0a ARP 64 Who has 192.168.10.66? Tell 192.168.10.220 Frame 10197: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10198 112.642604 Dell_ad:25:f8 Intel_89:5e:11 ARP 64 Who has 192.168.10.65? Tell 192.168.10.220 Frame 10198: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10199 112.642614 Intel_89:5e:11 Dell_ad:25:f8 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 10199: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10200 112.642625 Intel_38:8d:0a Dell_ad:25:f6 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 10200: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10201 112.642635 Dell_ad:25:f8 Intel_a5:f5:5b ARP 64 Who has 192.168.10.131? Tell 192.168.10.220 Frame 10201: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10202 112.642645 Dell_ad:25:f8 Intel_38:8c:64 ARP 64 Who has 192.168.10.67? Tell 192.168.10.220 Frame 10202: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10203 112.642655 Dell_ad:25:f8 Intel_02:0e:6d ARP 64 Who has 192.168.10.128? Tell 192.168.10.220 Frame 10203: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10204 112.642668 Intel_a5:f5:5b Dell_ad:25:f8 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 10204: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10205 112.642678 Dell_ad:25:f8 IntelCor_d3:4e:80 ARP 64 Who has 192.168.10.70? Tell 192.168.10.220 Frame 10205: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10206 112.642688 Intel_38:8c:64 Dell_ad:25:f6 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 10206: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10207 112.642699 Dell_ad:25:f8 Intel_d0:7a:8f ARP 64 Who has 192.168.10.68? Tell 192.168.10.220 Frame 10207: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10208 112.642709 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.233? Tell 192.168.10.220 Frame 10208: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10209 112.642719 Intel_02:0e:6d Dell_ad:25:f6 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 10209: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10210 112.642731 IntelCor_d3:4e:80 Dell_ad:25:f8 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 10210: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10211 112.642741 Dell_ad:25:f8 Intel_56:83:a5 ARP 64 Who has 192.168.10.59? Tell 192.168.10.220 Frame 10211: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10212 112.642751 Dell_ad:25:f8 Intel_38:8c:b1 ARP 64 Who has 192.168.10.138? Tell 192.168.10.220 Frame 10212: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10213 112.642761 Intel_d0:7a:8f Dell_ad:25:f8 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 10213: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10214 112.642773 Dell_ad:25:f8 Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.220 Frame 10214: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10215 112.642784 Intel_56:83:a5 Dell_ad:25:f6 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 10215: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10216 112.642794 Intel_38:8c:b1 Dell_ad:25:f6 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 10216: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10217 112.642806 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 10217: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10218 112.643029 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 10218: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10219 112.955993 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3467581696, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10219: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10220 112.956017 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3467581696, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10220: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10221 112.956030 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3467581696, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10221: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10222 112.956042 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3467581696, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10222: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10223 112.975447 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1041760512, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10223: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10224 112.975467 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1041760512, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10224: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10225 112.975479 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1041760512, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10225: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10226 112.975491 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1041760512, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10226: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10227 113.045271 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.190? Tell 192.168.10.220 Frame 10227: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10228 113.045303 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.190? Tell 192.168.10.220 Frame 10228: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10229 113.045326 Dell_ad:25:f8 Intel_38:8d:0a ARP 64 Who has 192.168.10.66? Tell 192.168.10.220 Frame 10229: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10230 113.045337 Dell_ad:25:f8 Intel_89:5e:11 ARP 64 Who has 192.168.10.65? Tell 192.168.10.220 Frame 10230: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10231 113.045352 Intel_38:8d:0a Dell_ad:25:f6 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 10231: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10232 113.045363 Intel_89:5e:11 Dell_ad:25:f8 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 10232: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10233 113.045373 Dell_ad:25:f8 Intel_a5:f5:5b ARP 64 Who has 192.168.10.131? Tell 192.168.10.220 Frame 10233: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10234 113.045384 Dell_ad:25:f8 Intel_38:8c:64 ARP 64 Who has 192.168.10.67? Tell 192.168.10.220 Frame 10234: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10235 113.045394 Intel_a5:f5:5b Dell_ad:25:f8 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 10235: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10236 113.045404 Dell_ad:25:f8 Intel_02:0e:6d ARP 64 Who has 192.168.10.128? Tell 192.168.10.220 Frame 10236: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10237 113.045417 Dell_ad:25:f8 IntelCor_d3:4e:80 ARP 64 Who has 192.168.10.70? Tell 192.168.10.220 Frame 10237: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10238 113.045428 Intel_38:8c:64 Dell_ad:25:f6 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 10238: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10239 113.045439 Dell_ad:25:f8 Intel_d0:7a:8f ARP 64 Who has 192.168.10.68? Tell 192.168.10.220 Frame 10239: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10240 113.045449 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.233? Tell 192.168.10.220 Frame 10240: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10241 113.045460 Intel_02:0e:6d Dell_ad:25:f6 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 10241: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10242 113.045472 Dell_ad:25:f8 Intel_56:83:a5 ARP 64 Who has 192.168.10.59? Tell 192.168.10.220 Frame 10242: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10243 113.045483 IntelCor_d3:4e:80 Dell_ad:25:f8 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 10243: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10244 113.045493 Dell_ad:25:f8 Intel_38:8c:b1 ARP 64 Who has 192.168.10.138? Tell 192.168.10.220 Frame 10244: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10245 113.045503 Intel_d0:7a:8f Dell_ad:25:f8 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 10245: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10246 113.045515 Dell_ad:25:f8 Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.220 Frame 10246: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10247 113.045526 Intel_56:83:a5 Dell_ad:25:f6 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 10247: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10248 113.045536 Intel_38:8c:b1 Dell_ad:25:f6 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 10248: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10249 113.045546 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 10249: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10250 113.045557 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 10250: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10251 113.045762 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.190? Tell 192.168.10.246 Frame 10251: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10252 113.045777 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.190? Tell 192.168.10.246 Frame 10252: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10253 113.193954 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 10253: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10254 113.202532 192.168.10.220 208.67.222.222 DNS 86 Standard query PTR 140.243.78.84.in-addr.arpa Frame 10254: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 57524 (57524), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10255 113.208024 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 10255: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4999, Ack: 326341, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10256 113.208056 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=326341 Ack=5041 Win=46237 Len=0 Frame 10256: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 326341, Ack: 5041, Len: 0 No. Time Source Destination Protocol Length Info 10257 113.210518 Watchgua_3c:4c:d8 Dell_39:5d:dd ARP 60 Who has 192.168.10.207? Tell 192.168.10.1 Frame 10257: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10258 113.210532 Dell_39:5d:dd Watchgua_3c:4c:d8 ARP 60 192.168.10.207 is at 00:18:8b:39:5d:dd Frame 10258: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10259 113.224304 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 4 Port 48 TTL = 120 Frame 10259: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 10260 113.268065 192.168.10.104 192.168.10.220 NBNS 110 Refresh NB WORKGROUP<00> Frame 10260: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10261 113.315398 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 10261: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10262 113.328875 208.67.222.222 192.168.10.220 DNS 86 Standard query response, No such name Frame 10262: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 57524 (57524) Domain Name System (response) No. Time Source Destination Protocol Length Info 10263 113.329433 192.168.10.203 84.78.243.140 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 10263: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 84.78.243.140 (84.78.243.140) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10264 113.330417 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 Who has 192.168.10.220? Tell 192.168.10.1 Frame 10264: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10265 113.330429 Dell_ad:25:f6 Watchgua_3c:4c:d8 ARP 60 192.168.10.220 is at 00:22:19:ad:25:f6 Frame 10265: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10266 113.365792 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.48? Tell 192.168.10.226 Frame 10266: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10267 113.365827 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.48? Tell 192.168.10.226 Frame 10267: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10268 113.365879 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 10268: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10269 113.365890 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 10269: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10270 113.365902 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 10270: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10271 113.365914 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 10271: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10272 113.365924 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 10272: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10273 113.365936 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 10273: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10274 113.366061 192.168.10.46 192.168.10.245 Syslog 214 LOCAL4.WARNING: Oct 03 2011 19:16:53 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n Frame 10274: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:16:53 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n No. Time Source Destination Protocol Length Info 10275 113.366073 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 10275: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10276 113.366088 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 10276: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10277 113.366098 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 10277: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10278 113.366114 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 10278: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10279 113.366146 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 10279: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10280 113.366156 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 10280: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10281 113.366182 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 10281: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10282 113.366192 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 10282: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10283 113.366202 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 10283: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10284 113.366212 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 10284: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10285 113.366222 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 10285: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10286 113.366232 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 10286: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10287 113.366242 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 10287: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10288 113.366253 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 10288: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10289 113.366263 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 10289: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10290 113.366273 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 10290: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10291 113.366291 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 10291: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10292 113.366301 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 10292: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10293 113.366311 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 10293: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10294 113.366322 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 10294: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10295 113.366332 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 10295: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10296 113.366343 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 10296: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10297 113.366353 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 10297: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10298 113.366363 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 10298: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10299 113.366373 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 10299: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10300 113.366383 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 10300: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10301 113.366393 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 10301: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10302 113.366403 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 10302: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10303 113.366413 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 10303: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10304 113.366423 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 10304: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10305 113.366433 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 10305: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10306 113.366443 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 10306: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10307 113.366453 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 10307: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10308 113.366463 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 10308: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10309 113.366473 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 10309: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10310 113.366534 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 10310: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10311 113.443570 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 10311: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10312 113.472143 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10312: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10313 113.472174 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10313: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10314 113.566167 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 10314: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10315 113.651722 192.168.10.207 206.225.164.186 SMTP 390 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 10315: 390 bytes on wire (3120 bits), 390 bytes captured (3120 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8359, Ack: 640538, Len: 336 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10316 113.651768 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=641389 Ack=8695 Win=46111 Len=0 Frame 10316: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 641389, Ack: 8695, Len: 0 No. Time Source Destination Protocol Length Info 10317 113.651801 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=8695 Ack=640538 Win=0 Len=0 Frame 10317: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8695, Ack: 640538, Len: 0 No. Time Source Destination Protocol Length Info 10318 113.837606 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-13.geo.kaspersky.com Frame 10318: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 61421 (61421), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10319 113.837783 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-13.geo.kaspersky.com Frame 10319: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 61421 (61421), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10320 113.971437 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3484358912, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10320: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10321 113.971460 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3484358912, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10321: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10322 113.971473 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3484358912, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10322: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10323 113.971485 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3484358912, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10323: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10324 113.979663 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10324: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10325 113.979701 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10325: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10326 113.990839 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1058537728, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10326: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10327 113.990857 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1058537728, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10327: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10328 113.990870 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1058537728, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10328: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10329 113.990882 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1058537728, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10329: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10330 113.994499 206.225.164.186 192.168.10.207 TCP 60 [TCP Dup ACK 10316#1] 23308 > smtp [ACK] Seq=641389 Ack=8695 Win=46111 Len=0 Frame 10330: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 641389, Ack: 8695, Len: 0 No. Time Source Destination Protocol Length Info 10331 113.994543 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=8695 Ack=640538 Win=0 Len=0 Frame 10331: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8695, Ack: 640538, Len: 0 No. Time Source Destination Protocol Length Info 10332 114.320175 192.168.10.68 192.168.10.255 BROWSER 243 Host Announcement TRAININGPC10, Workstation, Server, NT Workstation, Potential Browser Frame 10332: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.68 (192.168.10.68), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 10333 114.320413 192.168.10.68 192.168.10.255 BROWSER 243 Host Announcement TRAININGPC10, Workstation, Server, NT Workstation, Potential Browser Frame 10333: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.68 (192.168.10.68), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 10334 114.361475 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 10334: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5041, Ack: 326341, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10335 114.361509 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=326341 Ack=5083 Win=46216 Len=0 Frame 10335: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 326341, Ack: 5083, Len: 0 No. Time Source Destination Protocol Length Info 10336 114.828942 192.168.10.203 84.78.243.140 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 10336: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 84.78.243.140 (84.78.243.140) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10337 114.883940 190.162.6.183 192.168.10.207 SMTP 88 C: HELO pc-183-6-162-190.cm.vtr.net Frame 10337: 88 bytes on wire (704 bits), 88 bytes captured (704 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.162.6.183 (190.162.6.183), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 19952 (19952), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 34 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10338 114.884040 192.168.10.207 190.162.6.183 SMTP 102 S: 250 mail.mydomain.com Hello [190.162.6.183] Frame 10338: 102 bytes on wire (816 bits), 102 bytes captured (816 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.162.6.183 (190.162.6.183) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 19952 (19952), Seq: 122, Ack: 35, Len: 48 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10339 114.884100 190.162.6.183 192.168.10.207 TCP 60 19952 > smtp [ACK] Seq=35 Ack=170 Win=93270 Len=0 Frame 10339: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.162.6.183 (190.162.6.183), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 19952 (19952), Dst Port: smtp (25), Seq: 35, Ack: 170, Len: 0 No. Time Source Destination Protocol Length Info 10340 114.987229 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3501136128, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10340: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10341 114.987254 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3501136128, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10341: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10342 114.987266 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3501136128, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10342: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10343 114.987278 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3501136128, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10343: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10344 115.006653 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1075314944, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10344: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10345 115.006672 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1075314944, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10345: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10346 115.006684 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1075314944, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10346: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10347 115.006696 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1075314944, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10347: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10348 115.039572 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 10348: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10349 115.039605 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 10349: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10350 115.194062 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 10350: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10351 115.315467 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 10351: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10352 115.351287 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 10352: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5083, Ack: 326341, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10353 115.351331 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=326341 Ack=5125 Win=46195 Len=0 Frame 10353: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 326341, Ack: 5125, Len: 0 No. Time Source Destination Protocol Length Info 10354 115.443606 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 10354: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10355 115.478627 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10355: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10356 115.478660 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10356: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10357 115.566105 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 10357: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10358 115.664766 190.162.6.183 192.168.10.207 SMTP 93 C: MAIL FROM: <ebonanno@xxxxxxxxxxxx> Frame 10358: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.162.6.183 (190.162.6.183), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 19952 (19952), Dst Port: smtp (25), Seq: 35, Ack: 170, Len: 39 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10359 115.665144 192.168.10.207 190.162.6.183 SMTP 103 S: 250 2.1.0 [email protected] OK Frame 10359: 103 bytes on wire (824 bits), 103 bytes captured (824 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.162.6.183 (190.162.6.183) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 19952 (19952), Seq: 170, Ack: 74, Len: 49 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10360 115.665193 190.162.6.183 192.168.10.207 TCP 60 19952 > smtp [ACK] Seq=74 Ack=219 Win=93222 Len=0 Frame 10360: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.162.6.183 (190.162.6.183), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 19952 (19952), Dst Port: smtp (25), Seq: 74, Ack: 219, Len: 0 No. Time Source Destination Protocol Length Info 10361 115.873745 192.168.10.30 192.168.10.255 UDP 764 Source port: 34427 Destination port: apc-3052 Frame 10361: 764 bytes on wire (6112 bits), 764 bytes captured (6112 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (722 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 35 3a 35 31 0a 53 52 3d 31 42 0a =18:45:51.SR=1B. 0060 53 55 3d 37 42 31 33 31 38 44 34 0a 52 44 3d 32 SU=7B1318D4.RD=2 0070 34 34 42 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 44B.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 =08.7E=00.3E=001 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 .4C=207.3.50=040 00c0 2e 30 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 .0.43=025.2.78=0 00d0 37 2f 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 7/25/06.6A=0023: 00e0 0a 34 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 .47=S.63=BAI_UPS 00f0 20 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f .66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 =00.38=00.6E=NS0 0120 36 33 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 631005398 .6D=0 0130 37 2f 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 7/25/06.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 52 4d -UPS RT 10000 RM 0150 20 58 4c 0a 34 36 3d 35 39 2e 39 39 0a 34 44 3d XL.46=59.99.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 207.3.4E=204.4.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 =000.42=218.1.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e .5C=034.0.2F=16. 01d0 36 30 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 60.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 000.09=59.99;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 .E9=0.I0=2.I1=26 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a .I5=0.I6=0.I7=1. 0250 49 38 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 I8=Device 1.I9=0 0260 0a 49 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d .IA=Device 2.IB= 0270 30 0a 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 0.IC=Relay 1.ID= 0280 30 0a 53 48 3d 31 45 36 30 42 44 41 41 44 41 46 0.SH=1E60BDAADAF 0290 42 37 35 45 37 41 36 39 30 36 37 36 35 42 41 37 B75E7A6906765BA7 02a0 38 38 33 32 30 0a 4d 44 3d 35 38 38 39 36 39 39 88320.MD=5889699 02b0 35 34 66 32 30 34 36 39 34 32 37 34 30 63 38 34 54f2046942740c84 02c0 66 37 37 38 36 33 65 65 65 0a 3c 2f 42 4f 44 59 f77863eee.</BODY 02d0 3e 0a >. No. Time Source Destination Protocol Length Info 10362 115.873888 192.168.10.30 192.168.10.255 UDP 764 Source port: 34427 Destination port: apc-3052 Frame 10362: 764 bytes on wire (6112 bits), 764 bytes captured (6112 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (722 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 35 3a 35 31 0a 53 52 3d 31 42 0a =18:45:51.SR=1B. 0060 53 55 3d 37 42 31 33 31 38 44 34 0a 52 44 3d 32 SU=7B1318D4.RD=2 0070 34 34 42 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 44B.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 =08.7E=00.3E=001 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 .4C=207.3.50=040 00c0 2e 30 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 .0.43=025.2.78=0 00d0 37 2f 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 7/25/06.6A=0023: 00e0 0a 34 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 .47=S.63=BAI_UPS 00f0 20 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f .66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 =00.38=00.6E=NS0 0120 36 33 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 631005398 .6D=0 0130 37 2f 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 7/25/06.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 52 4d -UPS RT 10000 RM 0150 20 58 4c 0a 34 36 3d 35 39 2e 39 39 0a 34 44 3d XL.46=59.99.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 207.3.4E=204.4.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 =000.42=218.1.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e .5C=034.0.2F=16. 01d0 36 30 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 60.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 000.09=59.99;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 .E9=0.I0=2.I1=26 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a .I5=0.I6=0.I7=1. 0250 49 38 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 I8=Device 1.I9=0 0260 0a 49 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d .IA=Device 2.IB= 0270 30 0a 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 0.IC=Relay 1.ID= 0280 30 0a 53 48 3d 31 45 36 30 42 44 41 41 44 41 46 0.SH=1E60BDAADAF 0290 42 37 35 45 37 41 36 39 30 36 37 36 35 42 41 37 B75E7A6906765BA7 02a0 38 38 33 32 30 0a 4d 44 3d 35 38 38 39 36 39 39 88320.MD=5889699 02b0 35 34 66 32 30 34 36 39 34 32 37 34 30 63 38 34 54f2046942740c84 02c0 66 37 37 38 36 33 65 65 65 0a 3c 2f 42 4f 44 59 f77863eee.</BODY 02d0 3e 0a >. No. Time Source Destination Protocol Length Info 10363 115.978011 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10363: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10364 115.978043 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10364: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10365 116.002693 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3517913344, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10365: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10366 116.002716 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3517913344, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10366: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10367 116.002728 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3517913344, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10367: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10368 116.002740 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3517913344, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10368: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10369 116.022287 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1092092160, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10369: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10370 116.022310 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1092092160, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10370: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10371 116.022322 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1092092160, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10371: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10372 116.022335 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1092092160, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10372: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10373 116.328885 192.168.10.203 84.78.243.140 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 10373: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 84.78.243.140 (84.78.243.140) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10374 116.333732 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 10374: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5125, Ack: 326341, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10375 116.333765 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=326341 Ack=5167 Win=46174 Len=0 Frame 10375: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 326341, Ack: 5167, Len: 0 No. Time Source Destination Protocol Length Info 10376 116.333932 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=5167 Ack=326341 Win=16397 Len=0 Frame 10376: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5167, Ack: 326341, Len: 0 No. Time Source Destination Protocol Length Info 10377 116.333960 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 10376#1] smtp > 9428 [ACK] Seq=5167 Ack=326341 Win=16397 Len=0 Frame 10377: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5167, Ack: 326341, Len: 0 No. Time Source Destination Protocol Length Info 10378 116.334038 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10378: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 326341, Ack: 5167, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10379 116.334068 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10379: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 327721, Ack: 5167, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10380 116.334097 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10380: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 329101, Ack: 5167, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10381 116.334129 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10381: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 330481, Ack: 5167, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10382 116.334158 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10382: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 331861, Ack: 5167, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10383 116.334188 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10383: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 333241, Ack: 5167, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10384 116.334220 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10384: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 334621, Ack: 5167, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10385 116.334257 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10385: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 336001, Ack: 5167, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10386 116.334287 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=5167 Ack=330481 Win=12257 Len=0 Frame 10386: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5167, Ack: 330481, Len: 0 No. Time Source Destination Protocol Length Info 10387 116.334320 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10387: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 337381, Ack: 5167, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10388 116.334350 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=5167 Ack=336001 Win=6737 Len=0 Frame 10388: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5167, Ack: 336001, Len: 0 No. Time Source Destination Protocol Length Info 10389 116.334389 206.225.164.188 192.168.10.207 SMTP 1161 C: DATA fragment, 1107 bytes Frame 10389: 1161 bytes on wire (9288 bits), 1161 bytes captured (9288 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 338761, Ack: 5167, Len: 1107 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10390 116.334419 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10390: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 339868, Ack: 5167, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10391 116.334450 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10391: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 341248, Ack: 5167, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10392 116.334481 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10392: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 342628, Ack: 5167, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10393 116.334515 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=5167 Ack=339868 Win=2870 Len=0 Frame 10393: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5167, Ack: 339868, Len: 0 No. Time Source Destination Protocol Length Info 10394 116.334552 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=5167 Ack=342738 Win=0 Len=0 Frame 10394: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5167, Ack: 342738, Len: 0 No. Time Source Destination Protocol Length Info 10395 117.018267 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3534690560, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10395: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10396 117.018291 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3534690560, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10396: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10397 117.018304 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3534690560, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10397: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10398 117.018316 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3534690560, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10398: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10399 117.037695 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1108869376, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10399: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10400 117.037709 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1108869376, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10400: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10401 117.037721 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1108869376, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10401: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10402 117.037733 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1108869376, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10402: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10403 117.194088 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 10403: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10404 117.313749 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 10404: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5167, Ack: 342738, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10405 117.313785 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=344008 Ack=5209 Win=46153 Len=0 Frame 10405: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 344008, Ack: 5209, Len: 0 No. Time Source Destination Protocol Length Info 10406 117.313903 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=5209 Ack=342738 Win=0 Len=0 Frame 10406: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5209, Ack: 342738, Len: 0 No. Time Source Destination Protocol Length Info 10407 117.315376 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 10407: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10408 117.408523 192.168.10.208 192.168.10.255 BROWSER 243 Host Announcement POSEIDON, Workstation, Server, SQL Server, NT Workstation, NT Server, Backup Browser, DFS server Frame 10408: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.208 (192.168.10.208), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 10409 117.408761 192.168.10.208 192.168.10.255 BROWSER 243 Host Announcement POSEIDON, Workstation, Server, SQL Server, NT Workstation, NT Server, Backup Browser, DFS server Frame 10409: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.208 (192.168.10.208), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 10410 117.443695 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 10410: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10411 117.468437 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10411: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10412 117.468469 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10412: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10413 117.566100 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 10413: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10414 117.675185 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 10414: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5167, Ack: 342738, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10415 117.675224 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 10405#1] 9428 > smtp [ACK] Seq=344008 Ack=5209 Win=46153 Len=0 Frame 10415: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 344008, Ack: 5209, Len: 0 No. Time Source Destination Protocol Length Info 10416 117.675252 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=5209 Ack=342738 Win=0 Len=0 Frame 10416: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5209, Ack: 342738, Len: 0 No. Time Source Destination Protocol Length Info 10417 117.837491 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-13.geo.kaspersky.com Frame 10417: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 61421 (61421), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10418 117.837640 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-13.geo.kaspersky.com Frame 10418: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 61421 (61421), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10419 117.920305 192.168.10.220 208.67.222.222 DNS 87 Standard query PTR 214.248.243.77.in-addr.arpa Frame 10419: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 50212 (50212), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10420 117.983555 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10420: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10421 117.983578 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10421: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10422 118.033871 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3551467776, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10422: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10423 118.033889 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3551467776, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10423: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10424 118.033897 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3551467776, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10424: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10425 118.033905 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3551467776, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10425: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10426 118.053320 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1125646592, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10426: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10427 118.053333 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1125646592, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10427: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10428 118.053341 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1125646592, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10428: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10429 118.053349 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1125646592, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10429: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10430 118.258626 208.67.222.222 192.168.10.220 DNS 130 Standard query response PTR 214.248.pool.kuban.skylink.ru Frame 10430: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 50212 (50212) Domain Name System (response) No. Time Source Destination Protocol Length Info 10431 118.278860 192.168.10.220 208.67.222.222 DNS 86 Standard query PTR 148.40.54.188.in-addr.arpa Frame 10431: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 49297 (49297), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10432 118.293271 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 10432: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5167, Ack: 342738, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10433 118.293288 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 10405#2] 9428 > smtp [ACK] Seq=344008 Ack=5209 Win=46153 Len=0 Frame 10433: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 344008, Ack: 5209, Len: 0 No. Time Source Destination Protocol Length Info 10434 118.293354 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=5209 Ack=342738 Win=0 Len=0 Frame 10434: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5209, Ack: 342738, Len: 0 No. Time Source Destination Protocol Length Info 10435 118.379298 192.168.10.207 206.225.164.186 SMTP 590 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 304 Frame 10435: 590 bytes on wire (4720 bits), 590 bytes captured (4720 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8359, Ack: 640538, Len: 536 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10436 118.379350 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=641389 Ack=8895 Win=46720 Len=0 Frame 10436: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 641389, Ack: 8895, Len: 0 No. Time Source Destination Protocol Length Info 10437 118.379396 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=8895 Ack=640538 Win=0 Len=0 Frame 10437: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8895, Ack: 640538, Len: 0 No. Time Source Destination Protocol Length Info 10438 118.406740 208.67.222.222 192.168.10.220 DNS 86 Standard query response, No such name Frame 10438: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 49297 (49297) Domain Name System (response) No. Time Source Destination Protocol Length Info 10439 118.407347 192.168.10.203 188.54.40.148 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 10439: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 188.54.40.148 (188.54.40.148) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10440 118.769079 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=8895 Ack=640538 Win=14679 Len=0 Frame 10440: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8895, Ack: 640538, Len: 0 No. Time Source Destination Protocol Length Info 10441 118.769100 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 10440#1] smtp > 23308 [ACK] Seq=8895 Ack=640538 Win=14679 Len=0 Frame 10441: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8895, Ack: 640538, Len: 0 No. Time Source Destination Protocol Length Info 10442 118.769120 206.225.164.186 192.168.10.207 SMTP 1401 C: DATA fragment, 1347 bytes Frame 10442: 1401 bytes on wire (11208 bits), 1401 bytes captured (11208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 641389, Ack: 8895, Len: 1347 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10443 118.769138 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10443: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 642736, Ack: 8895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10444 118.769155 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10444: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 644116, Ack: 8895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10445 118.769171 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10445: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 645496, Ack: 8895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10446 118.769190 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10446: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 646876, Ack: 8895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10447 118.769208 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10447: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 648256, Ack: 8895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10448 118.769226 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10448: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 649636, Ack: 8895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10449 118.769243 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10449: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 651016, Ack: 8895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10450 118.769260 206.225.164.186 192.168.10.207 SMTP 1117 C: DATA fragment, 1063 bytes Frame 10450: 1117 bytes on wire (8936 bits), 1117 bytes captured (8936 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 652396, Ack: 8895, Len: 1063 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10451 118.769276 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 10440#2] smtp > 23308 [ACK] Seq=8895 Ack=640538 Win=14679 Len=0 Frame 10451: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8895, Ack: 640538, Len: 0 No. Time Source Destination Protocol Length Info 10452 118.769293 192.168.10.207 206.225.164.186 SMTP 232 S: 2 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 10452: 232 bytes on wire (1856 bits), 232 bytes captured (1856 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 8895, Ack: 640538, Len: 178 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10453 118.769316 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=653459 Ack=9073 Win=46631 Len=0 Frame 10453: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 653459, Ack: 9073, Len: 0 No. Time Source Destination Protocol Length Info 10454 118.769435 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 10452#1] smtp > 23308 [ACK] Seq=9073 Ack=640538 Win=14679 Len=0 Frame 10454: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9073, Ack: 640538, Len: 0 No. Time Source Destination Protocol Length Info 10455 118.769452 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 10452#2] smtp > 23308 [ACK] Seq=9073 Ack=640538 Win=14679 Len=0 Frame 10455: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9073, Ack: 640538, Len: 0 No. Time Source Destination Protocol Length Info 10456 118.769468 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 10452#3] smtp > 23308 [ACK] Seq=9073 Ack=640538 Win=14679 Len=0 Frame 10456: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9073, Ack: 640538, Len: 0 No. Time Source Destination Protocol Length Info 10457 118.769485 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 10452#4] smtp > 23308 [ACK] Seq=9073 Ack=640538 Win=14679 Len=0 Frame 10457: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9073, Ack: 640538, Len: 0 No. Time Source Destination Protocol Length Info 10458 118.769503 206.225.164.186 192.168.10.207 SMTP 905 [TCP Fast Retransmission] C: DATA fragment, 851 bytes Frame 10458: 905 bytes on wire (7240 bits), 905 bytes captured (7240 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 640538, Ack: 9073, Len: 851 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10459 118.769519 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 10452#5] smtp > 23308 [ACK] Seq=9073 Ack=640538 Win=14679 Len=0 Frame 10459: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9073, Ack: 640538, Len: 0 No. Time Source Destination Protocol Length Info 10460 118.769537 206.225.164.186 192.168.10.207 SMTP 1401 [TCP Out-Of-Order] C: DATA fragment, 1347 bytes Frame 10460: 1401 bytes on wire (11208 bits), 1401 bytes captured (11208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 641389, Ack: 9073, Len: 1347 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10461 118.769553 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 10452#6] smtp > 23308 [ACK] Seq=9073 Ack=640538 Win=14679 Len=0 Frame 10461: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9073, Ack: 640538, Len: 0 No. Time Source Destination Protocol Length Info 10462 118.769570 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 10452#7] smtp > 23308 [ACK] Seq=9073 Ack=640538 Win=14679 Len=0 Frame 10462: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9073, Ack: 640538, Len: 0 No. Time Source Destination Protocol Length Info 10463 118.769615 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 10452#8] smtp > 23308 [ACK] Seq=9073 Ack=640538 Win=14679 Len=0 Frame 10463: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9073, Ack: 640538, Len: 0 No. Time Source Destination Protocol Length Info 10464 118.769658 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10464: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 653459, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10465 118.769677 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10465: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 654839, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10466 118.769713 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=9073 Ack=653459 Win=1758 Len=0 Frame 10466: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9073, Ack: 653459, Len: 0 No. Time Source Destination Protocol Length Info 10467 118.769905 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=9073 Ack=655217 Win=0 Len=0 Frame 10467: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9073, Ack: 655217, Len: 0 No. Time Source Destination Protocol Length Info 10468 119.049705 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3568244992, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10468: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10469 119.049729 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3568244992, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10469: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10470 119.049742 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3568244992, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10470: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10471 119.049755 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3568244992, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10471: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10472 119.069127 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1142423808, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10472: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10473 119.069151 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1142423808, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10473: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10474 119.069164 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1142423808, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10474: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10475 119.069176 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1142423808, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10475: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10476 119.194093 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 10476: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10477 119.315403 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 10477: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10478 119.345318 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 10478: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9073, Ack: 655217, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10479 119.345353 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=656219 Ack=9115 Win=46610 Len=0 Frame 10479: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 656219, Ack: 9115, Len: 0 No. Time Source Destination Protocol Length Info 10480 119.345385 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=9115 Ack=655217 Win=0 Len=0 Frame 10480: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9115, Ack: 655217, Len: 0 No. Time Source Destination Protocol Length Info 10481 119.443823 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 10481: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10482 119.466603 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10482: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10483 119.466635 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10483: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10484 119.566112 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 10484: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10485 119.586438 192.168.10.207 206.225.164.188 SMTP 180 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 10485: 180 bytes on wire (1440 bits), 180 bytes captured (1440 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5167, Ack: 342738, Len: 126 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10486 119.586473 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=344008 Ack=5293 Win=46111 Len=0 Frame 10486: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 344008, Ack: 5293, Len: 0 No. Time Source Destination Protocol Length Info 10487 119.586502 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=5293 Ack=342738 Win=0 Len=0 Frame 10487: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5293, Ack: 342738, Len: 0 No. Time Source Destination Protocol Length Info 10488 119.809850 192.168.10.1 192.168.10.245 Syslog 307 LOCAL1.INFO: Oct 3 19:46:17 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.162.6.183 7x.x.x.3 19952 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="ebonanno@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 10488: 307 bytes on wire (2456 bits), 307 bytes captured (2456 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:46:17 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.162.6.183 7x.x.x.3 19952 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default No. Time Source Destination Protocol Length Info 10489 119.907146 192.168.10.203 188.54.40.148 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 10489: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 188.54.40.148 (188.54.40.148) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10490 119.974374 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10490: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10491 119.974406 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10491: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10492 120.049591 Oracle_86:77:67 Broadcast ARP 60 Gratuitous ARP for 192.168.10.215 (Request) Frame 10492: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10493 120.049626 Oracle_86:77:67 Broadcast ARP 60 Gratuitous ARP for 192.168.10.215 (Request) Frame 10493: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10494 120.065236 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3585022208, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10494: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10495 120.065260 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3585022208, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10495: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10496 120.065272 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3585022208, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10496: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10497 120.065284 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3585022208, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10497: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10498 120.084740 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1159201024, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10498: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10499 120.084762 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1159201024, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10499: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10500 120.084775 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1159201024, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10500: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10501 120.084787 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1159201024, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10501: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10502 120.089286 192.168.10.207 206.225.164.186 SMTP 138 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 10502: 138 bytes on wire (1104 bits), 138 bytes captured (1104 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9073, Ack: 655217, Len: 84 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10503 120.089323 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=656219 Ack=9157 Win=46589 Len=0 Frame 10503: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 656219, Ack: 9157, Len: 0 No. Time Source Destination Protocol Length Info 10504 120.089353 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=9157 Ack=655217 Win=0 Len=0 Frame 10504: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9157, Ack: 655217, Len: 0 No. Time Source Destination Protocol Length Info 10505 120.384787 190.162.6.183 192.168.10.207 TCP 60 19952 > smtp [FIN, ACK] Seq=74 Ack=219 Win=93222 Len=0 Frame 10505: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.162.6.183 (190.162.6.183), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 19952 (19952), Dst Port: smtp (25), Seq: 74, Ack: 219, Len: 0 No. Time Source Destination Protocol Length Info 10506 120.384826 192.168.10.207 190.162.6.183 TCP 60 smtp > 19952 [ACK] Seq=219 Ack=75 Win=65462 Len=0 Frame 10506: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.162.6.183 (190.162.6.183) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 19952 (19952), Seq: 219, Ack: 75, Len: 0 No. Time Source Destination Protocol Length Info 10507 120.384919 192.168.10.207 190.162.6.183 TCP 60 smtp > 19952 [FIN, ACK] Seq=219 Ack=75 Win=65462 Len=0 Frame 10507: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.162.6.183 (190.162.6.183) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 19952 (19952), Seq: 219, Ack: 75, Len: 0 No. Time Source Destination Protocol Length Info 10508 120.384959 190.162.6.183 192.168.10.207 TCP 60 19952 > smtp [ACK] Seq=75 Ack=220 Win=93222 Len=0 Frame 10508: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.162.6.183 (190.162.6.183), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 19952 (19952), Dst Port: smtp (25), Seq: 75, Ack: 220, Len: 0 No. Time Source Destination Protocol Length Info 10509 120.385222 192.168.10.1 192.168.10.245 Syslog 202 LOCAL1.INFO: Oct 3 19:46:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.162.6.183 7x.x.x.3 19952 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 10509: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:46:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.162.6.183 7x.x.x.3 19952 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 10510 120.422679 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 10510: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10511 120.422710 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 10511: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10512 120.648458 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.1? Tell 192.168.10.32 Frame 10512: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10513 120.648490 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.1? Tell 192.168.10.32 Frame 10513: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10514 120.648505 Watchgua_3c:4c:d8 American_ca:aa:ae ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 10514: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: American_ca:aa:ae (00:c0:b7:ca:aa:ae) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10515 120.657866 192.168.10.32 192.168.20.3 UDP 645 Source port: 38302 Destination port: apc-3052 Frame 10515: 645 bytes on wire (5160 bits), 645 bytes captured (5160 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (603 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 38 3a 30 32 0a 53 52 3d 30 31 31 =20:58:02.SR=011 0060 35 45 37 0a 53 55 3d 31 36 36 41 0a 52 44 3d 41 5E7.SU=166A.RD=A 0070 36 34 31 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 641.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 0a 34 8.7E=00.3E=002.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 38 2e 30 C=207.3.50=038.0 00c0 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 31 2f .43=028.5.78=11/ 00d0 31 39 2f 30 37 0a 36 41 3d 30 30 35 30 3a 0a 34 19/07.6A=0050:.4 00e0 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 4e 0a 7=S.63=UPS_IDEN. 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 37 34 0.38=00.6E=IS074 0120 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 31 2f 6005481 .6D=11/ 0130 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 2d 55 19/07.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 58 4c 20 20 PS RT 10000 XL 0150 20 0a 34 36 3d 35 39 2e 39 39 0a 34 44 3d 32 30 .46=59.99.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 35 3d 7.3.4E=205.9.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 3d 31 00.42=217.0.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 30 2e 30 0a 32 46 3d 31 35 2e 31 32 C=030.0.2F=15.12 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 2e 33 0.09=59.99;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 30 0a 49 30 3d 30 0a 53 48 3d 44 34 .MC=0.I0=0.SH=D4 0210 43 41 43 38 31 43 46 34 33 39 44 31 44 46 32 30 CAC81CF439D1DF20 0220 35 31 37 34 36 41 31 46 37 33 31 36 46 35 0a 4d 51746A1F7316F5.M 0230 44 3d 62 31 38 33 65 38 65 30 66 33 34 61 38 39 D=b183e8e0f34a89 0240 37 37 34 61 39 32 32 35 38 38 32 31 32 62 36 35 774a922588212b65 0250 34 34 0a 3c 2f 42 4f 44 59 3e 0a 44.</BODY>. No. Time Source Destination Protocol Length Info 10516 120.657985 192.168.10.32 192.168.20.3 UDP 645 Source port: 38302 Destination port: apc-3052 Frame 10516: 645 bytes on wire (5160 bits), 645 bytes captured (5160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (603 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 38 3a 30 32 0a 53 52 3d 30 31 31 =20:58:02.SR=011 0060 35 45 37 0a 53 55 3d 31 36 36 41 0a 52 44 3d 41 5E7.SU=166A.RD=A 0070 36 34 31 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 641.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 0a 34 8.7E=00.3E=002.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 38 2e 30 C=207.3.50=038.0 00c0 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 31 2f .43=028.5.78=11/ 00d0 31 39 2f 30 37 0a 36 41 3d 30 30 35 30 3a 0a 34 19/07.6A=0050:.4 00e0 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 4e 0a 7=S.63=UPS_IDEN. 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 37 34 0.38=00.6E=IS074 0120 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 31 2f 6005481 .6D=11/ 0130 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 2d 55 19/07.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 58 4c 20 20 PS RT 10000 XL 0150 20 0a 34 36 3d 35 39 2e 39 39 0a 34 44 3d 32 30 .46=59.99.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 35 3d 7.3.4E=205.9.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 3d 31 00.42=217.0.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 30 2e 30 0a 32 46 3d 31 35 2e 31 32 C=030.0.2F=15.12 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 2e 33 0.09=59.99;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 30 0a 49 30 3d 30 0a 53 48 3d 44 34 .MC=0.I0=0.SH=D4 0210 43 41 43 38 31 43 46 34 33 39 44 31 44 46 32 30 CAC81CF439D1DF20 0220 35 31 37 34 36 41 31 46 37 33 31 36 46 35 0a 4d 51746A1F7316F5.M 0230 44 3d 62 31 38 33 65 38 65 30 66 33 34 61 38 39 D=b183e8e0f34a89 0240 37 37 34 61 39 32 32 35 38 38 32 31 32 62 36 35 774a922588212b65 0250 34 34 0a 3c 2f 42 4f 44 59 3e 0a 44.</BODY>. No. Time Source Destination Protocol Length Info 10517 120.658080 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:17:01 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS3/38302 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 10517: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:17:01 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS3/38302 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 10518 120.658672 Watchgua_3c:4c:d8 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.1 Frame 10518: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10519 120.658686 Cisco_bb:96:6d Watchgua_3c:4c:d8 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 10519: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10520 121.017643 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=9157 Ack=655217 Win=50856 Len=0 Frame 10520: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9157, Ack: 655217, Len: 0 No. Time Source Destination Protocol Length Info 10521 121.017678 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 10520#1] smtp > 23308 [ACK] Seq=9157 Ack=655217 Win=50856 Len=0 Frame 10521: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9157, Ack: 655217, Len: 0 No. Time Source Destination Protocol Length Info 10522 121.017707 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10522: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 656219, Ack: 9157, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10523 121.017742 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10523: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 657599, Ack: 9157, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10524 121.017771 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10524: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 658979, Ack: 9157, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10525 121.017800 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10525: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 660359, Ack: 9157, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10526 121.017829 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10526: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 661739, Ack: 9157, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10527 121.017858 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 10520#2] smtp > 23308 [ACK] Seq=9157 Ack=655217 Win=50856 Len=0 Frame 10527: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9157, Ack: 655217, Len: 0 No. Time Source Destination Protocol Length Info 10528 121.017890 192.168.10.207 206.225.164.186 SMTP 138 S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 10528: 138 bytes on wire (1104 bits), 138 bytes captured (1104 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9157, Ack: 655217, Len: 84 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10529 121.017918 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=663119 Ack=9241 Win=46547 Len=0 Frame 10529: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 663119, Ack: 9241, Len: 0 No. Time Source Destination Protocol Length Info 10530 121.017956 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 10528#1] smtp > 23308 [ACK] Seq=9241 Ack=655217 Win=50856 Len=0 Frame 10530: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9241, Ack: 655217, Len: 0 No. Time Source Destination Protocol Length Info 10531 121.017984 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 10528#2] smtp > 23308 [ACK] Seq=9241 Ack=655217 Win=50856 Len=0 Frame 10531: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9241, Ack: 655217, Len: 0 No. Time Source Destination Protocol Length Info 10532 121.018012 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 10528#3] smtp > 23308 [ACK] Seq=9241 Ack=655217 Win=50856 Len=0 Frame 10532: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9241, Ack: 655217, Len: 0 No. Time Source Destination Protocol Length Info 10533 121.018042 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 10528#4] smtp > 23308 [ACK] Seq=9241 Ack=655217 Win=50856 Len=0 Frame 10533: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9241, Ack: 655217, Len: 0 No. Time Source Destination Protocol Length Info 10534 121.018073 206.225.164.186 192.168.10.207 SMTP 1056 [TCP Fast Retransmission] C: DATA fragment, 1002 bytes Frame 10534: 1056 bytes on wire (8448 bits), 1056 bytes captured (8448 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 655217, Ack: 9241, Len: 1002 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10535 121.018102 206.225.164.186 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 10535: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 656219, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10536 121.018133 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=9241 Ack=663119 Win=42954 Len=0 Frame 10536: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9241, Ack: 663119, Len: 0 No. Time Source Destination Protocol Length Info 10537 121.018163 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10537: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 663119, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10538 121.018204 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10538: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 664499, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10539 121.018283 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=9241 Ack=665879 Win=40194 Len=0 Frame 10539: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9241, Ack: 665879, Len: 0 No. Time Source Destination Protocol Length Info 10540 121.018382 206.225.164.186 192.168.10.207 SMTP 1238 C: DATA fragment, 1184 bytes Frame 10540: 1238 bytes on wire (9904 bits), 1238 bytes captured (9904 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 665879, Ack: 9241, Len: 1184 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10541 121.018412 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10541: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 667063, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10542 121.018441 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10542: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 668443, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10543 121.018472 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=9241 Ack=668443 Win=37630 Len=0 Frame 10543: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9241, Ack: 668443, Len: 0 No. Time Source Destination Protocol Length Info 10544 121.018516 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10544: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 669823, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10545 121.018548 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10545: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 671203, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10546 121.018592 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=9241 Ack=671203 Win=34870 Len=0 Frame 10546: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9241, Ack: 671203, Len: 0 No. Time Source Destination Protocol Length Info 10547 121.018723 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10547: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 672583, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10548 121.018754 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10548: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 673963, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10549 121.018784 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10549: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 675343, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10550 121.018815 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=9241 Ack=673963 Win=32110 Len=0 Frame 10550: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9241, Ack: 673963, Len: 0 No. Time Source Destination Protocol Length Info 10551 121.018846 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10551: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 676723, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10552 121.018876 206.225.164.186 192.168.10.207 SMTP 933 C: DATA fragment, 879 bytes Frame 10552: 933 bytes on wire (7464 bits), 933 bytes captured (7464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 678103, Ack: 9241, Len: 879 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10553 121.018915 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=9241 Ack=676723 Win=29350 Len=0 Frame 10553: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9241, Ack: 676723, Len: 0 No. Time Source Destination Protocol Length Info 10554 121.018985 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=9241 Ack=678982 Win=27091 Len=0 Frame 10554: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9241, Ack: 678982, Len: 0 No. Time Source Destination Protocol Length Info 10555 121.019017 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10555: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 678982, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10556 121.019047 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10556: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 680362, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10557 121.019077 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10557: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 681742, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10558 121.019109 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10558: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 683122, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10559 121.019138 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10559: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 684502, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10560 121.019170 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=9241 Ack=685882 Win=20191 Len=0 Frame 10560: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9241, Ack: 685882, Len: 0 No. Time Source Destination Protocol Length Info 10561 121.019219 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10561: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 685882, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10562 121.019250 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10562: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 687262, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10563 121.019280 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10563: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 688642, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10564 121.019311 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10564: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 690022, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10565 121.019341 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10565: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 691402, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10566 121.019372 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=9241 Ack=690022 Win=16051 Len=0 Frame 10566: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9241, Ack: 690022, Len: 0 No. Time Source Destination Protocol Length Info 10567 121.019406 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=9241 Ack=692782 Win=13291 Len=0 Frame 10567: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9241, Ack: 692782, Len: 0 No. Time Source Destination Protocol Length Info 10568 121.019437 206.225.164.186 192.168.10.207 SMTP 1084 C: DATA fragment, 1030 bytes Frame 10568: 1084 bytes on wire (8672 bits), 1084 bytes captured (8672 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 692782, Ack: 9241, Len: 1030 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10569 121.019467 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10569: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 693812, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10570 121.019500 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10570: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 695192, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10571 121.019529 206.225.164.186 192.168.10.207 SMTP 746 C: DATA fragment, 692 bytes Frame 10571: 746 bytes on wire (5968 bits), 746 bytes captured (5968 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 696572, Ack: 9241, Len: 692 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10572 121.019558 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10572: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 697264, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10573 121.019587 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10573: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 698644, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10574 121.019618 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=9241 Ack=696572 Win=9501 Len=0 Frame 10574: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9241, Ack: 696572, Len: 0 No. Time Source Destination Protocol Length Info 10575 121.019646 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=9241 Ack=698644 Win=7429 Len=0 Frame 10575: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9241, Ack: 698644, Len: 0 No. Time Source Destination Protocol Length Info 10576 121.019675 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10576: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 700024, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10577 121.019704 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10577: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 701404, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10578 121.019737 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10578: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 702784, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10579 121.019766 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10579: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 704164, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10580 121.019796 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10580: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 705544, Ack: 9241, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10581 121.019824 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=9241 Ack=701404 Win=4669 Len=0 Frame 10581: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9241, Ack: 701404, Len: 0 No. Time Source Destination Protocol Length Info 10582 121.019854 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=9241 Ack=704164 Win=1909 Len=0 Frame 10582: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9241, Ack: 704164, Len: 0 No. Time Source Destination Protocol Length Info 10583 121.019890 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=9241 Ack=706073 Win=0 Len=0 Frame 10583: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9241, Ack: 706073, Len: 0 No. Time Source Destination Protocol Length Info 10584 121.080808 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3601799424, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10584: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10585 121.080832 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3601799424, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10585: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10586 121.080845 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3601799424, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10586: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10587 121.080858 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3601799424, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10587: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10588 121.100253 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1175978240, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10588: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10589 121.100272 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1175978240, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10589: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10590 121.100284 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1175978240, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10590: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10591 121.100299 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1175978240, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10591: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10592 121.196609 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 10592: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10593 121.265507 192.168.10.31 192.168.20.3 UDP 776 Source port: 50764 Destination port: apc-3052 Frame 10593: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 35 30 3a 32 32 0a 53 52 3d 31 30 37 =19:50:22.SR=107 0060 43 0a 53 55 3d 32 44 38 32 45 35 34 38 0a 52 44 C.SU=2D82E548.RD 0070 3d 35 45 45 42 0a 54 41 3d 31 39 32 2e 31 36 38 =5EEB.TA=192.168 0080 2e 32 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a .20.3.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 37 2e 30 0a 35 31 SM=2.4F=207.0.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 34 .4C=207.3.50=034 00c0 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 3d 31 .0.43=029.1.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 39 3a 1/19/07.6A=0059: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 3d 31 746005443 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d .46=60.00.4D= 0160 32 30 38 2e 38 0a 34 45 3d 32 30 37 2e 33 0a 34 208.8.4E=207.3.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 33 2e .5C=028.0.2F=13. 01d0 37 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 77.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 35 39 2e 39 38 3b 32 30 37 000.09=59.98;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 41 34 45 45 34 39 38 42 33 41 45 42 41 33 44 =A4EE498B3AEBA3D 02a0 45 42 31 31 43 41 30 34 35 43 44 42 38 42 30 38 EB11CA045CDB8B08 02b0 38 0a 4d 44 3d 34 38 32 63 37 32 65 31 34 35 34 8.MD=482c72e1454 02c0 38 34 63 31 64 65 31 66 31 38 39 36 37 32 30 63 84c1de1f1896720c 02d0 36 61 64 34 37 0a 3c 2f 42 4f 44 59 3e 0a 6ad47.</BODY>. No. Time Source Destination Protocol Length Info 10594 121.265601 192.168.10.31 192.168.20.3 UDP 776 Source port: 50764 Destination port: apc-3052 Frame 10594: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 35 30 3a 32 32 0a 53 52 3d 31 30 37 =19:50:22.SR=107 0060 43 0a 53 55 3d 32 44 38 32 45 35 34 38 0a 52 44 C.SU=2D82E548.RD 0070 3d 35 45 45 42 0a 54 41 3d 31 39 32 2e 31 36 38 =5EEB.TA=192.168 0080 2e 32 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a .20.3.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 37 2e 30 0a 35 31 SM=2.4F=207.0.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 34 .4C=207.3.50=034 00c0 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 3d 31 .0.43=029.1.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 39 3a 1/19/07.6A=0059: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 3d 31 746005443 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d .46=60.00.4D= 0160 32 30 38 2e 38 0a 34 45 3d 32 30 37 2e 33 0a 34 208.8.4E=207.3.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 33 2e .5C=028.0.2F=13. 01d0 37 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 77.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 35 39 2e 39 38 3b 32 30 37 000.09=59.98;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 41 34 45 45 34 39 38 42 33 41 45 42 41 33 44 =A4EE498B3AEBA3D 02a0 45 42 31 31 43 41 30 34 35 43 44 42 38 42 30 38 EB11CA045CDB8B08 02b0 38 0a 4d 44 3d 34 38 32 63 37 32 65 31 34 35 34 8.MD=482c72e1454 02c0 38 34 63 31 64 65 31 66 31 38 39 36 37 32 30 63 84c1de1f1896720c 02d0 36 61 64 34 37 0a 3c 2f 42 4f 44 59 3e 0a 6ad47.</BODY>. No. Time Source Destination Protocol Length Info 10595 121.265676 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:17:01 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS2/50764 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 10595: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:17:01 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS2/50764 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 10596 121.315598 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 10596: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10597 121.406965 192.168.10.203 188.54.40.148 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 10597: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 188.54.40.148 (188.54.40.148) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10598 121.443858 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 10598: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10599 121.472067 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10599: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10600 121.472100 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10600: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10601 121.566058 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 10601: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10602 121.585094 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 10602: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9241, Ack: 706073, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10603 121.585129 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=706924 Ack=9283 Win=46526 Len=0 Frame 10603: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 706924, Ack: 9283, Len: 0 No. Time Source Destination Protocol Length Info 10604 121.585159 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=9283 Ack=706073 Win=0 Len=0 Frame 10604: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9283, Ack: 706073, Len: 0 No. Time Source Destination Protocol Length Info 10605 121.972839 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10605: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10606 121.972872 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10606: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10607 121.994789 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 10486#1] 9428 > smtp [ACK] Seq=344008 Ack=5293 Win=46111 Len=0 Frame 10607: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 344008, Ack: 5293, Len: 0 No. Time Source Destination Protocol Length Info 10608 121.994823 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=5293 Ack=342738 Win=0 Len=0 Frame 10608: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5293, Ack: 342738, Len: 0 No. Time Source Destination Protocol Length Info 10609 122.096560 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3618576640, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10609: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10610 122.096584 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3618576640, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10610: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10611 122.096597 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3618576640, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10611: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10612 122.096609 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3618576640, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10612: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10613 122.105945 192.168.10.207 206.225.164.188 SMTP 264 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 10613: 264 bytes on wire (2112 bits), 264 bytes captured (2112 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5167, Ack: 342738, Len: 210 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10614 122.105978 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=344008 Ack=5377 Win=46069 Len=0 Frame 10614: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 344008, Ack: 5377, Len: 0 No. Time Source Destination Protocol Length Info 10615 122.106042 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=5377 Ack=342738 Win=0 Len=0 Frame 10615: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5377, Ack: 342738, Len: 0 No. Time Source Destination Protocol Length Info 10616 122.115902 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1192755456, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10616: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10617 122.115922 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1192755456, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10617: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10618 122.115935 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1192755456, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10618: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10619 122.115948 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1192755456, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10619: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10620 122.361063 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=5377 Ack=342738 Win=49138 Len=0 Frame 10620: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5377, Ack: 342738, Len: 0 No. Time Source Destination Protocol Length Info 10621 122.361098 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 10620#1] smtp > 9428 [ACK] Seq=5377 Ack=342738 Win=49138 Len=0 Frame 10621: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5377, Ack: 342738, Len: 0 No. Time Source Destination Protocol Length Info 10622 122.361133 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10622: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 344008, Ack: 5377, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10623 122.361162 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10623: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 345388, Ack: 5377, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10624 122.361192 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10624: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 346768, Ack: 5377, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10625 122.361221 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10625: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 348148, Ack: 5377, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10626 122.361250 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10626: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 349528, Ack: 5377, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10627 122.361279 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10627: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 350908, Ack: 5377, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10628 122.361317 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10628: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 352288, Ack: 5377, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10629 122.361346 206.225.164.188 192.168.10.207 SMTP 632 C: DATA fragment, 578 bytes Frame 10629: 632 bytes on wire (5056 bits), 632 bytes captured (5056 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 353668, Ack: 5377, Len: 578 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10630 122.361375 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 10620#2] smtp > 9428 [ACK] Seq=5377 Ack=342738 Win=49138 Len=0 Frame 10630: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5377, Ack: 342738, Len: 0 No. Time Source Destination Protocol Length Info 10631 122.361402 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 10631: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5377, Ack: 342738, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10632 122.361430 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=354246 Ack=5419 Win=46048 Len=0 Frame 10632: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 354246, Ack: 5419, Len: 0 No. Time Source Destination Protocol Length Info 10633 122.361458 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 10631#1] smtp > 9428 [ACK] Seq=5419 Ack=342738 Win=49138 Len=0 Frame 10633: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 342738, Len: 0 No. Time Source Destination Protocol Length Info 10634 122.361486 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 10631#2] smtp > 9428 [ACK] Seq=5419 Ack=342738 Win=49138 Len=0 Frame 10634: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 342738, Len: 0 No. Time Source Destination Protocol Length Info 10635 122.361513 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 10631#3] smtp > 9428 [ACK] Seq=5419 Ack=342738 Win=49138 Len=0 Frame 10635: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 342738, Len: 0 No. Time Source Destination Protocol Length Info 10636 122.361541 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 10631#4] smtp > 9428 [ACK] Seq=5419 Ack=342738 Win=49138 Len=0 Frame 10636: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 342738, Len: 0 No. Time Source Destination Protocol Length Info 10637 122.361569 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 10631#5] smtp > 9428 [ACK] Seq=5419 Ack=342738 Win=49138 Len=0 Frame 10637: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 342738, Len: 0 No. Time Source Destination Protocol Length Info 10638 122.361601 206.225.164.188 192.168.10.207 SMTP 1324 [TCP Fast Retransmission] C: DATA fragment, 1270 bytes Frame 10638: 1324 bytes on wire (10592 bits), 1324 bytes captured (10592 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 342738, Ack: 5419, Len: 1270 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10639 122.361631 206.225.164.188 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 10639: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 344008, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10640 122.361661 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 10631#6] smtp > 9428 [ACK] Seq=5419 Ack=342738 Win=49138 Len=0 Frame 10640: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 342738, Len: 0 No. Time Source Destination Protocol Length Info 10641 122.361697 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 10631#7] smtp > 9428 [ACK] Seq=5419 Ack=342738 Win=49138 Len=0 Frame 10641: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 342738, Len: 0 No. Time Source Destination Protocol Length Info 10642 122.361726 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10642: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 354246, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10643 122.361756 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10643: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 355626, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10644 122.361785 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=5419 Ack=354246 Win=37630 Len=0 Frame 10644: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 354246, Len: 0 No. Time Source Destination Protocol Length Info 10645 122.361815 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=5419 Ack=357006 Win=34870 Len=0 Frame 10645: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 357006, Len: 0 No. Time Source Destination Protocol Length Info 10646 122.361845 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10646: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 357006, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10647 122.361874 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10647: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 358386, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10648 122.361904 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10648: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 359766, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10649 122.361933 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10649: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 361146, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10650 122.361962 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=5419 Ack=359766 Win=32110 Len=0 Frame 10650: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 359766, Len: 0 No. Time Source Destination Protocol Length Info 10651 122.361990 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=5419 Ack=362526 Win=29350 Len=0 Frame 10651: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 362526, Len: 0 No. Time Source Destination Protocol Length Info 10652 122.362022 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10652: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 362526, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10653 122.362051 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10653: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 363906, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10654 122.362080 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10654: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 365286, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10655 122.362109 206.225.164.188 192.168.10.207 SMTP 1271 C: DATA fragment, 1217 bytes Frame 10655: 1271 bytes on wire (10168 bits), 1271 bytes captured (10168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 366666, Ack: 5419, Len: 1217 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10656 122.362139 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10656: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 367883, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10657 122.362170 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=5419 Ack=369263 Win=22613 Len=0 Frame 10657: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 369263, Len: 0 No. Time Source Destination Protocol Length Info 10658 122.362199 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10658: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 369263, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10659 122.362229 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10659: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 370643, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10660 122.362259 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10660: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 372023, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10661 122.362288 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10661: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 373403, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10662 122.362318 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10662: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 374783, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10663 122.362346 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=5419 Ack=373403 Win=18473 Len=0 Frame 10663: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 373403, Len: 0 No. Time Source Destination Protocol Length Info 10664 122.362378 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=5419 Ack=376163 Win=15713 Len=0 Frame 10664: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 376163, Len: 0 No. Time Source Destination Protocol Length Info 10665 122.362406 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10665: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 376163, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10666 122.362436 206.225.164.188 192.168.10.207 SMTP 1137 C: DATA fragment, 1083 bytes Frame 10666: 1137 bytes on wire (9096 bits), 1137 bytes captured (9096 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 377543, Ack: 5419, Len: 1083 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10667 122.362466 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10667: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 378626, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10668 122.362495 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10668: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 380006, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10669 122.362524 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10669: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 381386, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10670 122.362553 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10670: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 382766, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10671 122.362582 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=5419 Ack=378626 Win=13250 Len=0 Frame 10671: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 378626, Len: 0 No. Time Source Destination Protocol Length Info 10672 122.362613 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=5419 Ack=381386 Win=10490 Len=0 Frame 10672: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 381386, Len: 0 No. Time Source Destination Protocol Length Info 10673 122.362642 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10673: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 384146, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10674 122.362679 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=5419 Ack=384146 Win=7730 Len=0 Frame 10674: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 384146, Len: 0 No. Time Source Destination Protocol Length Info 10675 122.362707 206.225.164.188 192.168.10.207 SMTP 819 C: DATA fragment, 765 bytes Frame 10675: 819 bytes on wire (6552 bits), 819 bytes captured (6552 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 385526, Ack: 5419, Len: 765 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10676 122.362736 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10676: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 386291, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10677 122.362765 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10677: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 387671, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10678 122.362793 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=5419 Ack=386291 Win=5585 Len=0 Frame 10678: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 386291, Len: 0 No. Time Source Destination Protocol Length Info 10679 122.362822 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10679: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 389051, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10680 122.362852 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10680: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 390431, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10681 122.362881 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10681: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 391811, Ack: 5419, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10682 122.362909 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=5419 Ack=391811 Win=65 Len=0 Frame 10682: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 391811, Len: 0 No. Time Source Destination Protocol Length Info 10683 122.509453 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=5419 Ack=391876 Win=0 Len=0 Frame 10683: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 391876, Len: 0 No. Time Source Destination Protocol Length Info 10684 122.886175 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 10684: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10685 122.886207 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 10685: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10686 122.905824 192.168.10.207 206.225.164.186 SMTP 180 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 10686: 180 bytes on wire (1440 bits), 180 bytes captured (1440 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9241, Ack: 706073, Len: 126 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10687 122.905863 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=706924 Ack=9367 Win=46484 Len=0 Frame 10687: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 706924, Ack: 9367, Len: 0 No. Time Source Destination Protocol Length Info 10688 122.905893 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=9367 Ack=706073 Win=0 Len=0 Frame 10688: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9367, Ack: 706073, Len: 0 No. Time Source Destination Protocol Length Info 10689 123.017077 192.168.10.220 208.67.222.222 DNS 86 Standard query PTR 146.58.179.85.in-addr.arpa Frame 10689: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 62702 (62702), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10690 123.111972 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3635353856, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10690: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10691 123.111995 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3635353856, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10691: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10692 123.112010 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3635353856, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10692: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10693 123.112022 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3635353856, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10693: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10694 123.131467 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1209532672, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10694: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10695 123.131490 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1209532672, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10695: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10696 123.131503 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1209532672, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10696: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10697 123.131515 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1209532672, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10697: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10698 123.164943 208.67.222.222 192.168.10.220 DNS 127 Standard query response PTR e179058146.adsl.alicedsl.de Frame 10698: 127 bytes on wire (1016 bits), 127 bytes captured (1016 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 62702 (62702) Domain Name System (response) No. Time Source Destination Protocol Length Info 10699 123.194114 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 10699: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10700 123.207970 192.168.10.220 208.67.222.222 DNS 86 Standard query PTR 10.94.242.115.in-addr.arpa Frame 10700: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 54601 (54601), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10701 123.315523 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 10701: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10702 123.351849 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 10702: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 391876, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10703 123.351883 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=393191 Ack=5461 Win=46720 Len=0 Frame 10703: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 393191, Ack: 5461, Len: 0 No. Time Source Destination Protocol Length Info 10704 123.351925 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=5461 Ack=391876 Win=0 Len=0 Frame 10704: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5461, Ack: 391876, Len: 0 No. Time Source Destination Protocol Length Info 10705 123.383446 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=153600 Ack=2591 Win=1002 Len=1448 TSval=566094 TSecr=728409 Frame 10705: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 153600, Ack: 2591, Len: 1448 Data (1448 bytes) 0000 17 03 01 10 60 5e 4f 56 d3 5a 2e dc d4 fb 6a 28 ....`^OV.Z....j( 0010 ec a9 99 6f 7a 3f 30 8d ec ec ea b0 ab 9f 25 db ...oz?0.......%. 0020 85 f1 31 cc a7 43 cc 7b 7a 14 d4 27 40 ff 43 a8 ..1..C.{z..'@.C. 0030 72 4d f5 d2 e7 2a 97 c6 97 e4 fa ed 40 1f 1f 6c rM...*[email protected] 0040 05 fb 2d 43 87 0e be 09 72 b5 08 e7 69 3b 64 2f ..-C....r...i;d/ 0050 d3 ad 5d 05 1e 45 59 3e 65 29 45 5d 10 2a fd 82 ..]..EY>e)E].*.. 0060 e6 07 79 c1 7f 64 5b 69 fd 46 84 97 37 62 3a 46 ..y..d[i.F..7b:F 0070 39 b5 e1 16 03 c7 ed ae 6a 73 85 5f bc d9 9c b8 9.......js._.... 0080 75 4d 9a d6 8d 8c c5 af 0b 51 3f a0 fd 33 9b 69 uM.......Q?..3.i 0090 c4 d4 ea 40 9c b2 5f 03 77 50 35 46 4d d5 ba ec ...@.._.wP5FM... 00a0 71 27 4b 62 88 90 7d 6e 57 a1 f2 52 d1 eb f7 e2 q'Kb..}nW..R.... 00b0 e2 de c5 00 f0 cb 37 4f 86 c3 9f 3c 21 cb 07 37 ......7O...<!..7 00c0 5b a1 c6 95 52 8d 68 dc 06 79 d0 11 36 52 39 fe [...R.h..y..6R9. 00d0 34 cf d9 a4 b5 75 57 15 c4 d9 7b d1 b4 84 14 57 4....uW...{....W 00e0 00 c0 82 77 34 fc d6 f5 3c 59 f5 3b 8f cd 7a ca ...w4...<Y.;..z. 00f0 9d 34 08 11 c1 58 8e 3e 70 f1 11 2d 94 68 d0 3b .4...X.>p..-.h.; 0100 56 5a 2b 55 5f f7 28 eb a3 87 35 00 77 9a 8f 7c VZ+U_.(...5.w..| 0110 49 c7 8d ac 14 d1 4d cb 80 98 dd c5 3d eb b0 07 I.....M.....=... 0120 54 6a 74 21 28 ff eb 3a 3a 16 71 39 8b 2b d1 44 Tjt!(..::.q9.+.D 0130 0e ec 69 77 fe 87 e4 7c 2e 2f 50 c0 97 ca 89 d2 ..iw...|./P..... 0140 bc e2 76 74 e8 a9 c0 6c 31 72 46 fb 65 c4 c8 bb ..vt...l1rF.e... 0150 1f 36 7c 15 0a 7c db da b6 de da e4 ed 3f 36 67 .6|..|.......?6g 0160 53 d1 1f 71 14 f2 b9 6b ac 97 29 15 70 c7 4e 88 S..q...k..).p.N. 0170 df dd 6d c1 01 93 a4 6b 5c 8f 36 28 91 77 ac be ..m....k\.6(.w.. 0180 61 77 c0 08 8d 22 d6 6e 16 20 b9 83 ca 42 ed 2d aw...".n. ...B.- 0190 fc 41 97 d8 88 df 94 44 4d cc 12 30 98 64 05 b0 .A.....DM..0.d.. 01a0 84 0a fd 00 48 7a 43 21 a2 19 ff 86 6d c2 2a 83 ....HzC!....m.*. 01b0 82 e5 58 43 b1 49 fd 6f 47 51 72 16 eb ad 01 f9 ..XC.I.oGQr..... 01c0 a6 63 c0 88 3c 99 63 00 92 de 0f 28 84 b0 ab cd .c..<.c....(.... 01d0 e3 68 a0 c2 58 ca 6f 10 89 06 cf 94 2b 37 bb c4 .h..X.o.....+7.. 01e0 8e 51 0c 22 fd f3 a1 f5 ed b6 d5 3f 0e 9f b9 6d .Q.".......?...m 01f0 60 5c 64 81 60 09 c6 30 a1 f7 ef fa ff 47 54 2c `\d.`..0.....GT, 0200 d6 9d 59 e3 51 a9 05 79 6b 71 4a c7 8c 48 c3 b2 ..Y.Q..ykqJ..H.. 0210 78 14 53 39 67 0c 59 cf 7a 68 50 72 4f ec 3c 4c x.S9g.Y.zhPrO.<L 0220 86 8e ba 06 9f 10 54 68 a1 43 55 d3 25 2a 72 d1 ......Th.CU.%*r. 0230 29 d1 0d 80 3e f0 40 74 49 b8 22 fa e5 f9 25 a2 )...>.@tI."...%. 0240 fa 48 2a ed 2c bb 39 c5 32 c0 ae 0d 4a 89 6f 30 .H*.,.9.2...J.o0 0250 e7 09 9b 89 a5 96 2e 52 f5 ef d4 c0 ae 05 7c 92 .......R......|. 0260 a0 4c 3d 61 c2 be 1b d3 3d 21 a3 5e 72 a8 36 fc .L=a....=!.^r.6. 0270 2e 55 2a 3d 0b 4c d3 be 7c 88 26 67 6e 53 04 82 .U*=.L..|.&gnS.. 0280 72 d1 4b 3b 52 83 4a 76 17 5d 1b 6a c5 2e 5a fd r.K;R.Jv.].j..Z. 0290 c7 89 49 b0 70 1f 82 7d 1d 8c 4a 2b b6 c3 53 03 ..I.p..}..J+..S. 02a0 79 c7 90 5f af 84 6a 3a 58 e7 9a 13 94 74 37 f4 y.._..j:X....t7. 02b0 4b 0d e6 e6 f4 86 6a e7 99 b8 5a fd 15 25 3b 9a K.....j...Z..%;. 02c0 e4 c5 9b 05 0e e3 dd 6d 3a 00 bb 19 a8 05 92 00 .......m:....... 02d0 ed 90 b7 f7 96 ea f0 49 10 1f 86 44 92 0f d2 f6 .......I...D.... 02e0 3f 5b 1c c9 5c 2d 22 6b 2a b0 14 67 8e 01 77 90 ?[..\-"k*..g..w. 02f0 47 6d f1 a1 ba 0a 7b b3 d4 8e a6 e7 74 57 f5 68 Gm....{.....tW.h 0300 b2 5a fc e4 e9 b7 4e 0d 52 4f 85 7b 08 75 52 df .Z....N.RO.{.uR. 0310 7c 40 7f 12 56 3c e1 7d 2b b4 38 b1 64 be de 7d |@..V<.}+.8.d..} 0320 3a 6d 3d 81 7a 34 6a 98 f4 7b 16 4d 21 9f 9b c5 :m=.z4j..{.M!... 0330 63 0d 84 81 be 9c fa d3 e5 23 18 80 ea 69 25 a5 c........#...i%. 0340 d2 da 87 47 64 28 3a aa fd ea 97 ef 5c 1b 6b 27 ...Gd(:.....\.k' 0350 0e 8f 60 d0 23 09 fb 98 5f c4 7b c8 20 7d b4 e0 ..`.#..._.{. }.. 0360 f8 9c 74 b6 78 6f a4 06 d6 f6 94 e7 51 d7 e5 4e ..t.xo......Q..N 0370 3b fe 02 d3 3e a1 04 6a d3 ba 68 db 4f 20 85 12 ;...>..j..h.O .. 0380 85 26 d9 f8 33 ec 01 a9 08 75 7f ef ee 7f a0 31 .&..3....u.....1 0390 fb e1 18 ed a0 46 0c e0 fa 89 b3 84 f5 b9 7a 20 .....F........z 03a0 57 dc 84 a0 b2 60 17 f4 72 9d 80 dc 19 7c bd 58 W....`..r....|.X 03b0 01 f9 5c 0e f3 2c 65 8a af 68 ce 35 1f df a0 75 ..\..,e..h.5...u 03c0 b5 a4 65 c9 60 96 8b d3 7e 6b 18 8b b0 74 38 6b ..e.`...~k...t8k 03d0 b0 06 9e 32 e8 59 15 eb aa 7b 16 f5 66 52 32 d2 ...2.Y...{..fR2. 03e0 dd 78 58 ce 40 e6 a5 a2 26 e6 ba 58 3d 2c 38 4a .xX.@...&..X=,8J 03f0 1b 9a c7 26 e1 e7 c2 a1 6d ff a6 8b fc a8 26 8b ...&....m.....&. 0400 42 83 13 05 a2 dd d1 da 28 f1 9e 4f 33 a3 d9 be B.......(..O3... 0410 59 d0 0d 86 45 7a 89 d5 40 3f 2c ce 7b df b2 8b Y...Ez..@?,.{... 0420 cb 37 dd da b3 c8 b8 06 23 ee bc e8 e1 c0 81 cf .7......#....... 0430 b0 da 09 ab 7a 8e 14 94 a4 1e 96 7a 83 51 fc aa ....z......z.Q.. 0440 df 51 c4 f4 23 f7 46 3d b7 2a 4c 3b b9 ef 43 11 .Q..#.F=.*L;..C. 0450 44 40 07 77 bd d7 75 52 87 a5 fa e1 b9 2a 94 ed D@xxxxxx.....*.. 0460 42 28 01 bf de d3 1b 24 34 7f a1 7d fb b4 85 aa B(.....$4..}.... 0470 58 dc 4f 0c 67 e2 2f aa 60 fe 7d 53 0f ae 58 cb X.O.g./.`.}S..X. 0480 59 7b 58 77 d7 fa 39 88 bc 01 59 55 4c 9f 7f e8 Y{Xw..9...YUL... 0490 92 88 8f b1 2e eb 6e 26 da 10 d9 40 c8 e5 7a f8 ......n&[email protected]. 04a0 91 fc 7f 43 e2 3e 2f ea 29 e6 38 4a 49 5a 22 78 ...C.>/.).8JIZ"x 04b0 05 a3 53 ac 05 b1 1d c3 47 2d df 91 ac a7 71 4b ..S.....G-....qK 04c0 52 d2 5f 04 ef d6 87 00 54 16 e8 d5 20 61 a0 17 R._.....T... a.. 04d0 47 5d a3 d3 1e 88 5b 3b 1d 9e 1b be 23 0b ea 45 G]....[;....#..E 04e0 90 05 fe ea 01 e0 e5 d8 c5 43 44 2e f1 b6 9d 2c .........CD...., 04f0 0a 18 13 ef 9a 15 f8 4b 42 cd 7f 38 4e ec 06 43 .......KB..8N..C 0500 3d 24 37 cc 6b 62 d6 bc 7a 6e 8e 61 a7 97 77 7f =$7.kb..zn.a..w. 0510 fc 36 a3 88 d6 56 55 f1 c8 1a e0 2b 08 55 4f 62 .6...VU....+.UOb 0520 f5 27 3e b6 d6 3b bf 80 23 4c cb 93 48 96 25 76 .'>..;..#L..H.%v 0530 e7 16 78 bb 8a 5a a3 b8 33 d5 fc ba f0 d0 59 38 ..x..Z..3.....Y8 0540 ad 30 05 df fd 20 18 69 80 47 34 72 c0 b4 4f 1b .0... .i.G4r..O. 0550 aa 79 db 2d 2e cf 0e ec 9f 89 f7 56 cf 13 b3 a2 .y.-.......V.... 0560 09 1d ea 05 a3 40 25 26 0f 5b a3 22 6e cb 6e 2a .....@%&.[."n.n* 0570 2f 04 b2 f0 cf d6 42 59 ec fe 0c 2f 7e a1 71 d8 /.....BY.../~.q. 0580 e2 bf 7d aa 1a ad a4 b0 15 3d 9a 23 17 31 b1 35 ..}......=.#.1.5 0590 16 4b ac e7 03 a8 ef e9 db 39 26 dc 19 9f 43 a9 .K.......9&...C. 05a0 67 27 11 d9 0a 02 5e dc g'....^. No. Time Source Destination Protocol Length Info 10706 123.383561 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=155048 Ack=2591 Win=1002 Len=1448 TSval=566094 TSecr=728409 Frame 10706: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 155048, Ack: 2591, Len: 1448 Data (1448 bytes) 0000 2e cb fc 65 8a 0d 3a a5 ab 08 c1 6e 88 ea 61 9d ...e..:....n..a. 0010 6c 38 3c 4f c6 26 3e 71 e3 bd 0d e3 93 bb 66 41 l8<O.&>q......fA 0020 89 24 b2 b5 05 30 01 b3 5d 06 ac 18 26 d8 f5 81 .$...0..]...&... 0030 b7 d7 75 45 a2 2e b3 06 9b d4 1c 55 94 3e 94 ac ..uE.......U.>.. 0040 08 67 e6 fd ed bd 6f f0 b6 9b bc 9e 71 10 a5 11 .g....o.....q... 0050 f7 20 2a 37 e1 4f 22 58 35 45 72 f3 06 e7 ca 0c . *7.O"X5Er..... 0060 82 ce 97 f9 af 60 9a 67 da c9 4a 11 86 01 c7 fb .....`.g..J..... 0070 19 34 9e de 6b f9 81 9b 4a fc 76 c8 cb 40 37 75 .4..k...J.v..@7u 0080 2b 20 72 70 31 74 3a 39 d1 0b a1 4c 70 dc 59 bc + rp1t:9...Lp.Y. 0090 d7 16 53 35 b2 6b 7a c5 c6 2b 59 90 73 f9 2e 3f ..S5.kz..+Y.s..? 00a0 d6 c3 05 6a 12 29 b9 a2 94 34 ae 63 ba 07 ba 92 ...j.)...4.c.... 00b0 a4 28 d1 ea 65 77 9f be cf f3 a2 21 47 f8 f4 83 .(..ew.....!G... 00c0 87 f3 c5 bf 76 02 d4 c7 aa ee ca 4c af 24 dc ae ....v......L.$.. 00d0 d1 9f 9b fc 8d 39 a2 4a e2 a2 0b 19 df c6 90 40 .....9.J.......@ 00e0 47 eb ed fc cf cb 50 71 e8 22 65 a9 a7 4f 64 83 G.....Pq."e..Od. 00f0 47 5e 65 1a 71 00 c8 9c bc 2d 4d d6 cf 8e b6 7e G^e.q....-M....~ 0100 cd 71 2e 95 87 97 ca bd 3c 41 b9 b2 44 e0 ad ed .q......<A..D... 0110 3e 92 6f 06 50 9e a6 48 67 02 a5 d5 60 85 b9 18 >.o.P..Hg...`... 0120 6f 13 fc b1 33 26 72 ec 15 35 67 1d 15 b8 f2 9b o...3&r..5g..... 0130 32 18 ce d1 c5 45 ba b7 a5 90 f7 0a 2e cc b8 90 2....E.......... 0140 10 d9 eb c8 d7 cf f8 60 52 02 02 d9 26 65 e2 92 .......`R...&e.. 0150 d6 b6 e1 d2 4b cd 40 e0 01 36 60 a2 e0 7d dd f2 [email protected]`..}.. 0160 7b 42 bf 0e ba ad ae 89 4d ca 9d 3d 69 f8 f3 dc {B......M..=i... 0170 51 5a b3 02 71 30 f3 00 f0 97 83 95 2d c1 3b 0e QZ..q0......-.;. 0180 10 df 42 bb 73 ac 2d df 5e 66 bd ac bd 30 28 2c ..B.s.-.^f...0(, 0190 7c 46 c9 b9 25 10 ed 99 f3 5e 5b 6d f2 b0 21 1b |F..%....^[m..!. 01a0 8a 88 a1 0b 3e 45 d9 1d a3 a7 f1 b4 3c 4e 7b 88 ....>E......<N{. 01b0 a7 f1 2a 68 c9 ac df eb f2 f6 72 b1 c8 6e 25 cc ..*h......r..n%. 01c0 7d f8 77 16 d9 5b 5e 0f d6 c3 39 75 7c e7 9e 96 }.w..[^...9u|... 01d0 18 ae 81 4a f0 89 73 ad f5 80 29 a2 da fe 30 94 ...J..s...)...0. 01e0 50 65 0d d8 df c1 1c 51 00 4b f7 29 53 de 10 ed Pe.....Q.K.)S... 01f0 b4 b9 e6 e2 c5 f7 72 9e 91 65 17 46 61 3d 77 f9 ......r..e.Fa=w. 0200 99 43 35 89 31 3d 63 8f 24 4e fd 28 35 bb 86 9b .C5.1=c.$N.(5... 0210 d4 0c 89 e9 68 15 7c de c2 8d 69 40 ff 46 fd 08 ....h.|[email protected].. 0220 ef 13 c8 7d bc 10 29 95 d8 73 a2 92 4b 6a 47 0f ...}..)..s..KjG. 0230 f0 46 bb fe c6 e8 4a 8c bf 6c 93 f5 55 96 64 0e .F....J..l..U.d. 0240 00 8a 52 12 26 be ad 36 64 4f 76 b9 5a d0 df 27 ..R.&..6dOv.Z..' 0250 a1 7a 8f ef d3 5d 48 86 83 4c ce 55 a4 ca 19 21 .z...]H..L.U...! 0260 61 0d ee e8 3c fd fe f7 93 15 ba 0d 2f 7b 27 d6 a...<......./{'. 0270 50 19 76 33 c7 4c 48 d0 6e be 13 04 a3 24 50 32 P.v3.LH.n....$P2 0280 55 ee 20 52 dc ed e9 ec be 4f 7b 63 01 23 33 33 U. R.....O{c.#33 0290 6b 31 bd af 2b 96 a8 0b e0 1e 06 73 17 ae 8c 00 k1..+......s.... 02a0 7b 30 fc a0 9e e5 a8 85 27 36 a1 43 09 f2 1f 50 {0......'6.C...P 02b0 ec 5e ac 71 68 5b fc 28 b9 0d e4 81 dc a4 1a 20 .^.qh[.(....... 02c0 8e 7e 86 73 20 95 67 ff 79 c9 fe 2e d8 d3 a5 04 .~.s .g.y....... 02d0 01 66 ae 50 f3 e5 f2 b5 bc b4 3d b1 27 16 b5 ab .f.P......=.'... 02e0 7b c3 0f 57 5e 4c 1c 8a 47 bc 8c c5 f3 50 47 de {..W^L..G....PG. 02f0 61 1f 14 6d 88 c8 30 f8 eb 62 1c 1d 2b 6a ac 3e a..m..0..b..+j.> 0300 15 67 ea b7 60 12 03 30 55 39 87 be 38 a2 47 55 .g..`..0U9..8.GU 0310 30 49 8a 3b d2 e5 3a e3 08 52 ad 53 1b 2a 60 47 0I.;..:..R.S.*`G 0320 1e 89 a8 10 23 31 92 f6 a5 03 65 a8 cb 66 71 58 ....#1....e..fqX 0330 fd a4 e3 23 9d fb 5b 73 9a 19 01 d3 f5 39 18 9f ...#..[s.....9.. 0340 00 dc 46 73 ff 8a 4a 4b 5c e3 35 8c f0 68 2d be ..Fs..JK\.5..h-. 0350 56 cb 29 2b 49 81 07 57 f6 d4 1a f5 25 83 40 87 V.)+I..W....%.@. 0360 a7 a1 99 0c 64 01 66 57 7a c0 bd be 65 03 e2 8a ....d.fWz...e... 0370 a0 14 47 f2 17 4a 4f a2 58 12 f9 cc e1 c1 96 6a ..G..JO.X......j 0380 b5 16 a7 31 5a d1 4d 2e 89 e5 cb 87 90 bd 86 69 ...1Z.M........i 0390 67 c8 84 32 ac 0e 1b 0e 50 ff 08 a8 12 f0 d3 f7 g..2....P....... 03a0 aa 71 ae ec c4 07 b5 c8 23 2d b7 98 7e 36 01 b9 .q......#-..~6.. 03b0 56 a0 48 03 fc 85 30 07 55 4a 62 f0 3d 88 a2 da V.H...0.UJb.=... 03c0 99 7a 4f 5b 4f cc f7 e6 0f c1 d0 57 e1 b5 e6 66 .zO[O......W...f 03d0 1c 91 ef f8 fe 3a d6 78 c7 f6 11 47 95 f5 f3 40 .....:.x...G...@ 03e0 d8 8e 3b 15 13 7c 62 f1 a4 77 48 a3 c4 e3 12 39 ..;..|b..wH....9 03f0 f9 f4 85 73 bb 9a d7 f0 db 8a a6 e0 76 1f 34 e8 ...s........v.4. 0400 ea be 5e c6 b1 b9 76 a7 db f6 58 26 b5 1d 92 7a ..^...v...X&...z 0410 ff 49 23 d1 48 44 ce b1 c4 d1 c8 af 77 28 34 11 .I#.HD......w(4. 0420 1e 58 8f e3 3c aa 55 b5 fa e0 1e 10 c2 f2 52 99 .X..<.U.......R. 0430 b2 d9 68 88 cc 2a a7 6a d6 1a fd 4c a3 e9 d1 7f ..h..*.j...L.... 0440 64 d2 4c dd d5 bc 12 be e9 41 dd f7 c8 b2 a6 37 d.L......A.....7 0450 7e e0 4e eb bd 5a a3 66 ea 69 17 c0 00 0e c4 ac ~.N..Z.f.i...... 0460 dd e9 12 3a e9 1b e3 be 75 7a 3d 02 f5 21 d3 b6 ...:....uz=..!.. 0470 ab 9a 25 bd 6e 63 21 f8 61 c1 95 ab c9 78 5e ae ..%.nc!.a....x^. 0480 32 0e 31 92 cc a3 0a 72 a4 d1 23 ae 7f cc 8e b0 2.1....r..#..... 0490 a0 76 13 d1 5f 18 77 bb 90 16 48 f0 85 bc a6 36 .v.._.w...H....6 04a0 11 55 4f 9e 9c c3 08 ee d7 5e 9d d7 21 51 9e 5d .UO......^..!Q.] 04b0 fb ea f1 81 c9 ed 20 71 d6 48 c8 42 8d d5 07 dd ...... q.H.B.... 04c0 bf a2 47 99 3e 68 76 77 69 09 b9 a8 4a f3 79 b5 ..G.>hvwi...J.y. 04d0 09 6b b9 80 3f ee 62 7b 57 cb fe 1c 30 3b 35 26 .k..?.b{W...0;5& 04e0 ac 2d 14 aa d9 84 10 f3 1a a1 8b bd 85 70 03 29 .-...........p.) 04f0 67 eb 91 6b 44 bd c4 d0 da 89 5a 73 23 f5 01 77 g..kD.....Zs#..w 0500 d7 57 e5 71 d3 a9 54 6d d2 ff bd b0 38 8b ae 5d .W.q..Tm....8..] 0510 3d 2e 5c cb 67 87 2a 8f 9e a2 11 26 9d d3 04 dc =.\.g.*....&.... 0520 af 6b 2a 22 9c 78 6e e3 75 df 5f 00 c3 98 99 a6 .k*".xn.u._..... 0530 32 18 13 cc e0 aa 34 7e 48 97 e5 a3 df c1 27 0b 2.....4~H.....'. 0540 55 0d 50 76 3d 50 7b 9b d2 e0 68 e5 fd 34 4d 12 U.Pv=P{...h..4M. 0550 df 6f dd 64 4d 52 d3 88 4e 28 3a ee be 33 dc 26 .o.dMR..N(:..3.& 0560 8f 35 94 3c 15 ec 86 8b b7 5c 3f 06 09 f8 d5 27 .5.<.....\?....' 0570 7f 62 9c be ac 7a dc 51 cf e5 2d 76 e2 e4 76 5d .b...z.Q..-v..v] 0580 d1 e6 19 db dd 33 e8 23 65 72 9e de cd f6 81 23 .....3.#er.....# 0590 ef 87 92 0f 13 fa 40 17 fc 41 49 16 a8 b8 75 8d [email protected]. 05a0 4c 98 30 02 b0 3a e1 0f L.0..:.. No. Time Source Destination Protocol Length Info 10707 123.383660 192.168.10.1 192.168.10.203 TCP 1367 34433 > cds [PSH, ACK] Seq=156496 Ack=2591 Win=1002 Len=1301 TSval=566094 TSecr=728409 Frame 10707: 1367 bytes on wire (10936 bits), 1367 bytes captured (10936 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 156496, Ack: 2591, Len: 1301 Data (1301 bytes) 0000 c9 c0 19 8f 4e 10 be 66 13 e0 fc c8 9d 9d 6d 1f ....N..f......m. 0010 d5 ab 89 04 94 93 8d 1c b9 8f 22 54 96 c1 be 24 .........."T...$ 0020 05 02 49 82 b5 cb 74 6f ac 16 4e ea 39 ed a2 d7 ..I...to..N.9... 0030 ea f7 0c 47 62 4a 47 d2 63 d1 52 df 1e 5a f8 64 ...GbJG.c.R..Z.d 0040 bf 53 b9 c0 ee 5d 6f e0 d0 28 82 98 34 1a 82 f5 .S...]o..(..4... 0050 3b 9a 93 6f 7f 46 5f 01 d5 97 33 93 9f 35 0f c6 ;..o.F_...3..5.. 0060 54 66 7d 7f cc cf 4b 93 d4 06 c7 74 63 9a 2f f0 Tf}...K....tc./. 0070 a8 12 69 d3 9d cb 86 7e 7f 78 88 7f 93 b5 c2 8a ..i....~.x...... 0080 ff c7 ad 3f 60 77 ca 1f a7 3e c8 ea 6e 3e bc d3 ...?`w...>..n>.. 0090 63 63 0d 53 6b 2a 9d 33 f4 37 58 d9 0b 8e 35 d0 cc.Sk*.3.7X...5. 00a0 49 49 3f ec f4 20 07 1a ca e8 eb f4 ff 8f 06 62 II?.. .........b 00b0 ea 2a b4 41 96 38 c0 9d 4a b6 f9 25 80 d1 7e 83 .*.A.8..J..%..~. 00c0 25 33 ec da 4f 3d d3 7c 62 34 cf 58 48 3d a7 11 %3..O=.|b4.XH=.. 00d0 30 7b c9 60 90 24 46 d0 a4 ad b6 9d 9e 2c 33 69 0{.`.$F......,3i 00e0 d1 fe 42 19 1a e0 2d 8f 24 c8 3c cc 9b 9a 51 30 ..B...-.$.<...Q0 00f0 9c e2 dd 2f 03 27 66 be 5c 34 58 2e c5 93 ce 18 .../.'f.\4X..... 0100 08 69 38 14 c6 34 57 5b 91 66 9f 26 bf 50 45 54 .i8..4W[.f.&.PET 0110 51 a0 44 2a f3 9a b3 a5 5b 29 f8 c5 e6 39 70 ca Q.D*....[)...9p. 0120 8b 1e 04 6a 25 ca 5c 69 0e 83 03 67 68 d7 39 f1 ...j%.\i...gh.9. 0130 c1 f6 3e 2b 4f 1f e8 92 fb c8 17 34 b2 42 46 74 ..>+O......4.BFt 0140 a3 71 11 a6 a1 2e 93 82 24 8e 3d 0e d2 be e7 50 .q......$.=....P 0150 1e 85 cd 32 f6 89 82 e0 63 54 ba 15 0e d0 6a bc ...2....cT....j. 0160 e3 08 ec 73 70 93 73 a4 a8 6a f8 3f 1b bf 02 4d ...sp.s..j.?...M 0170 0f de 8c 59 d9 3f ba c1 a8 e9 09 e5 aa 9a 1c e8 ...Y.?.......... 0180 e3 38 d9 b0 b0 8e 21 84 e0 a6 9f 06 79 dd 62 15 .8....!.....y.b. 0190 3e 57 e2 b5 a8 80 15 50 36 bd 21 c3 16 ae d6 47 >W.....P6.!....G 01a0 65 ee ac 64 88 66 cf a9 51 d9 ed d2 d4 3a fd f7 e..d.f..Q....:.. 01b0 ef f6 1d 74 aa 86 0c 95 d4 a4 c6 37 51 55 89 0e ...t.......7QU.. 01c0 dd 6e 51 3f 3b f6 c9 5d ea 1b 60 9a 99 10 1b 60 .nQ?;..]..`....` 01d0 c4 39 31 e2 38 ce 83 9a 4c 12 02 21 b0 97 a1 f7 .91.8...L..!.... 01e0 de 56 65 1b 64 ba 37 fe ae fe 0a 58 14 bb f2 43 .Ve.d.7....X...C 01f0 03 d6 b5 1a 35 54 a9 8d c1 28 81 a2 15 49 90 a2 ....5T...(...I.. 0200 94 07 14 12 5b 0d 77 b6 fa 34 90 90 13 95 e8 9c ....[.w..4...... 0210 af f6 3d 54 f8 53 61 1e ee 32 da ca 5d 37 86 ac ..=T.Sa..2..]7.. 0220 ec f8 47 ff 3a a9 bd 5b ae f5 d2 6a b0 95 57 b2 ..G.:..[...j..W. 0230 d5 b7 a8 5b 23 36 1a d9 41 cc 4e 8d 1e b4 94 20 ...[#6..A.N.... 0240 04 87 36 05 da 3a f3 64 da 66 85 36 17 e5 07 0f ..6..:.d.f.6.... 0250 e6 11 8d bf c9 a7 23 3e 8b b3 87 01 73 30 71 23 ......#>....s0q# 0260 38 2e 6d 1c 3d 02 7d 07 b3 68 f8 73 c0 75 f1 20 8.m.=.}..h.s.u. 0270 69 3d e7 d5 d1 ca fa 19 ce 8f 7c a8 4a 04 3b 40 i=........|.J.;@ 0280 3a 62 35 4f f1 07 31 f8 c3 84 c3 7d af 18 73 ad :b5O..1....}..s. 0290 68 fd 61 e5 fa ae 69 c2 a8 c1 14 59 ce 80 81 8b h.a...i....Y.... 02a0 54 0d 14 73 1a 89 d8 a5 17 6d e0 4c fb 58 70 d5 T..s.....m.L.Xp. 02b0 da 78 1d 56 e4 a9 e6 65 47 7f cb 29 f3 56 0e e0 .x.V...eG..).V.. 02c0 a7 df 44 4f 77 22 e0 82 fe 21 80 6e 71 95 e2 74 ..DOw"...!.nq..t 02d0 31 c6 1c 91 8d 53 8f f1 26 42 c9 c9 26 86 bb 3b 1....S..&B..&..; 02e0 83 90 43 91 d1 51 9d ea 2c 92 00 86 9c 7d 28 04 ..C..Q..,....}(. 02f0 35 1f c2 15 3c 56 9d 73 b6 1c 56 a9 c8 bb 66 96 5...<V.s..V...f. 0300 29 9c 80 a0 56 86 90 3a 88 d4 39 f3 f5 86 63 e0 )...V..:..9...c. 0310 89 bc 63 21 3a 3b 71 9c e1 09 77 41 1a 0a 0f bb ..c!:;q...wA.... 0320 ee b2 6d 74 18 69 f8 97 a9 8a ac 38 11 d3 a1 bf ..mt.i.....8.... 0330 68 d8 02 79 fa dc 44 af e7 4b 41 d6 98 c7 75 39 h..y..D..KA...u9 0340 2f 1f e7 ec f5 2f b8 3c 00 18 b0 61 e0 f9 d9 b8 /..../.<...a.... 0350 a4 f8 e2 df 2a 03 40 81 be 90 35 fb a5 59 9b 2a ....*[email protected].* 0360 9b 8f f7 0f d6 1a e3 e4 8b d5 82 df 4e 66 77 fc ............Nfw. 0370 74 9a f4 8f d6 74 15 db 7c e2 4f b4 a2 ea ae 4a t....t..|.O....J 0380 6a 25 58 4b 4b fa 26 6c 4f ef 40 cc 87 8a 88 38 j%XKK.&[email protected] 0390 47 81 22 e4 04 e8 b7 3a 2a 79 68 ec 43 4f 06 0c G."....:*yh.CO.. 03a0 78 5d 9f b3 f2 cd b0 27 cd 80 c0 f9 81 9a 5c a1 x].....'......\. 03b0 ad b0 06 8f d4 ed 7d 91 1a cc c1 74 fe 41 88 f0 ......}....t.A.. 03c0 ad ab 1b 20 90 a7 1d b1 b0 9f 7e 22 f2 fd 32 ce ... ......~"..2. 03d0 58 29 7d c3 7b d1 21 52 c8 8a dc d4 8f 1e 7d 86 X)}.{.!R......}. 03e0 eb b7 d4 6f 07 96 11 f6 e2 6d 56 95 15 01 69 25 ...o.....mV...i% 03f0 03 bd cb 54 31 23 72 68 66 1a 4f 41 71 72 7c d5 ...T1#rhf.OAqr|. 0400 3b 86 c5 ed 1d d4 0c 70 70 56 21 e7 28 f6 ae d3 ;......ppV!.(... 0410 66 47 65 ee b9 7b 94 dd 46 42 fc 63 6e aa e9 8c fGe..{..FB.cn... 0420 6f 6c bb 67 c2 17 03 2d 2b 28 b8 30 1c b4 4a 2d ol.g...-+(.0..J- 0430 b8 a2 4b c0 54 6e c0 c7 b2 7a a7 fc 17 5e ae f4 ..K.Tn...z...^.. 0440 ec f7 50 7a 9d 65 08 54 d8 b5 bb 8d f0 f0 15 b7 ..Pz.e.T........ 0450 f2 1e db 63 67 79 1f 90 d1 57 72 b4 cb 51 cd 8f ...cgy...Wr..Q.. 0460 a3 b9 2f 18 4c 1b 0a 83 eb d2 92 b3 0f a7 66 dc ../.L.........f. 0470 94 4d 5f 69 19 c4 d1 74 58 df 2b cc e6 b3 10 70 .M_i...tX.+....p 0480 cb 0a 8c ff e5 0e 85 9f 3f a9 65 9a e8 f0 16 db ........?.e..... 0490 fe b1 3a ae 7e 47 f7 67 b7 89 b5 24 ef 58 60 8a ..:.~G.g...$.X`. 04a0 b3 11 11 87 b2 c3 ff 42 0a 32 fe 40 7a 6b 4a 5a .......B.2.@zkJZ 04b0 49 31 d6 f8 0d b7 75 81 41 ce 3b b5 d1 40 c3 6f I1....u.A.;[email protected] 04c0 35 0b 61 bf 3a 75 7e 25 4d 78 9e d3 f8 c3 e3 cc 5.a.:u~%Mx...... 04d0 b8 2c 4b db 38 85 f6 02 ee 26 e0 d5 c1 6e a4 52 .,K.8....&...n.R 04e0 2f e3 6e 4b 14 a9 1d 69 c9 ff 78 e4 ca e6 10 71 /.nK...i..x....q 04f0 b0 02 b4 a1 bf 5c 9d 1c 7e 7c a8 0e ee fe 1a f5 .....\..~|...... 0500 88 2f fb 43 84 9e 7e 24 1b 42 36 67 d1 e5 b2 95 ./.C..~$.B6g.... 0510 d2 a6 cf 4a 16 ...J. No. Time Source Destination Protocol Length Info 10708 123.383723 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2591 Ack=157797 Win=65535 Len=0 TSval=728716 TSecr=566094 Frame 10708: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2591, Ack: 157797, Len: 0 No. Time Source Destination Protocol Length Info 10709 123.386688 Watchgua_3c:4c:d8 Dell_5e:a8:82 ARP 60 Who has 192.168.10.203? Tell 192.168.10.1 Frame 10709: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10710 123.386703 Dell_5e:a8:82 Watchgua_3c:4c:d8 ARP 106 192.168.10.203 is at 00:13:72:5e:a8:82 Frame 10710: 106 bytes on wire (848 bits), 106 bytes captured (848 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10711 123.443772 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 10711: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10712 123.463158 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10712: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10713 123.463191 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10713: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10714 123.471376 208.67.222.222 192.168.10.220 DNS 86 Standard query response, No such name Frame 10714: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 54601 (54601) Domain Name System (response) No. Time Source Destination Protocol Length Info 10715 123.471921 192.168.10.203 115.242.94.10 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 10715: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 115.242.94.10 (115.242.94.10) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10716 123.566185 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 10716: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10717 123.610933 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=2591 Ack=157797 Win=65535 Len=74 TSval=728718 TSecr=566094 Frame 10717: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2591, Ack: 157797, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 07 a3 b4 2d f7 4b ca 9c 47 84 5e .... ...-.K..G.^ 0010 cc 24 94 f0 b8 f3 b1 5c 8a f5 19 d5 90 15 f9 04 .$.....\........ 0020 49 02 87 ed e6 17 03 01 00 20 b0 7a 1f 09 ec 1d I........ .z.... 0030 d9 76 c8 c8 02 04 34 9e 67 ce b6 58 5e f3 1c d7 .v....4.g..X^... 0040 40 73 99 a7 2e b0 a2 23 73 f8 @s.....#s. No. Time Source Destination Protocol Length Info 10718 123.611000 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=157797 Ack=2665 Win=1002 Len=0 TSval=566151 TSecr=728718 Frame 10718: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 157797, Ack: 2665, Len: 0 No. Time Source Destination Protocol Length Info 10719 123.979098 192.168.10.12 192.168.10.255 BROWSER 243 Host Announcement GEMINI, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server Frame 10719: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Cisco-Li_0b:3f:f3 (00:18:f8:0b:3f:f3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.12 (192.168.10.12), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 10720 123.979334 192.168.10.12 192.168.10.255 BROWSER 243 Host Announcement GEMINI, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server Frame 10720: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Cisco-Li_0b:3f:f3 (00:18:f8:0b:3f:f3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.12 (192.168.10.12), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 10721 123.979431 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10721: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10722 123.979449 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10722: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10723 124.021993 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 10723: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 391876, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10724 124.022029 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 10703#1] 9428 > smtp [ACK] Seq=393191 Ack=5461 Win=46720 Len=0 Frame 10724: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 393191, Ack: 5461, Len: 0 No. Time Source Destination Protocol Length Info 10725 124.022060 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=5461 Ack=391876 Win=0 Len=0 Frame 10725: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5461, Ack: 391876, Len: 0 No. Time Source Destination Protocol Length Info 10726 124.127672 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3652131072, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10726: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10727 124.127696 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3652131072, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10727: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10728 124.127709 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3652131072, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10728: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10729 124.127721 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3652131072, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10729: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10730 124.147024 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1226309888, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10730: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10731 124.147047 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1226309888, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10731: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10732 124.147060 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1226309888, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10732: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10733 124.147073 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1226309888, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10733: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10734 124.212951 192.168.10.220 192.168.223.1 NBNS 343 Name query response NBSTAT Frame 10734: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.223.1 (192.168.223.1) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10735 124.213271 192.168.10.220 192.168.32.1 NBNS 343 Name query response NBSTAT Frame 10735: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.32.1 (192.168.32.1) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10736 124.222540 7x.x.x.1 192.168.10.220 ICMP 70 Destination unreachable (Host unreachable) Frame 10736: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 7x.x.x.1 (7x.x.x.1), Dst: 192.168.10.220 (192.168.10.220) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 10737 124.391395 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 10737: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10738 124.391426 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 10738: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10739 124.396585 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 10739: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10740 124.396611 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 10740: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10741 124.744243 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 3 Port 42 TTL = 120 Frame 10741: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 10742 124.841293 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-14.geo.kaspersky.com Frame 10742: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 58535 (58535), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10743 124.971428 192.168.10.203 115.242.94.10 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 10743: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 115.242.94.10 (115.242.94.10) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10744 125.143326 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3668908288, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10744: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10745 125.143351 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3668908288, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10745: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10746 125.143364 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3668908288, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10746: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10747 125.143376 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3668908288, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10747: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10748 125.162798 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1243087104, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10748: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10749 125.162816 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1243087104, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10749: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10750 125.162828 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1243087104, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10750: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10751 125.162840 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1243087104, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10751: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10752 125.193995 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 10752: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10753 125.315372 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 10753: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10754 125.422036 192.168.10.207 206.225.164.188 SMTP 180 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 10754: 180 bytes on wire (1440 bits), 180 bytes captured (1440 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 391876, Len: 126 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10755 125.422074 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=393191 Ack=5545 Win=46678 Len=0 Frame 10755: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 393191, Ack: 5545, Len: 0 No. Time Source Destination Protocol Length Info 10756 125.422159 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=5545 Ack=391876 Win=0 Len=0 Frame 10756: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5545, Ack: 391876, Len: 0 No. Time Source Destination Protocol Length Info 10757 125.443801 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 10757: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10758 125.461392 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10758: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10759 125.461424 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10759: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10760 125.566185 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 10760: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10761 125.711883 192.168.10.220 192.168.223.1 NBNS 343 Name query response NBSTAT Frame 10761: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.223.1 (192.168.223.1) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10762 125.711972 192.168.10.220 192.168.32.1 NBNS 343 Name query response NBSTAT Frame 10762: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.32.1 (192.168.32.1) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10763 125.721121 7x.x.x.1 192.168.10.220 ICMP 70 Destination unreachable (Host unreachable) Frame 10763: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 7x.x.x.1 (7x.x.x.1), Dst: 192.168.10.220 (192.168.10.220) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 10764 125.722303 192.168.10.207 206.225.164.186 SMTP 348 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 10764: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9241, Ack: 706073, Len: 294 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10765 125.722335 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=706924 Ack=9535 Win=46400 Len=0 Frame 10765: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 706924, Ack: 9535, Len: 0 No. Time Source Destination Protocol Length Info 10766 125.722367 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=9535 Ack=706073 Win=0 Len=0 Frame 10766: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9535, Ack: 706073, Len: 0 No. Time Source Destination Protocol Length Info 10767 125.841898 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-14.geo.kaspersky.com Frame 10767: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 58535 (58535), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10768 125.969199 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10768: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10769 125.969232 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10769: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10770 126.158906 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3685685504, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10770: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10771 126.158930 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3685685504, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10771: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10772 126.158943 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3685685504, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10772: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10773 126.158955 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3685685504, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10773: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10774 126.178226 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1259864320, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10774: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10775 126.178248 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1259864320, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10775: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10776 126.178261 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1259864320, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10776: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10777 126.178272 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1259864320, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10777: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10778 126.471353 192.168.10.203 115.242.94.10 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 10778: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 115.242.94.10 (115.242.94.10) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10779 126.841588 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-14.geo.kaspersky.com Frame 10779: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 58535 (58535), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10780 126.994928 206.225.164.186 192.168.10.207 TCP 60 [TCP Dup ACK 10765#1] 23308 > smtp [ACK] Seq=706924 Ack=9535 Win=46400 Len=0 Frame 10780: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 706924, Ack: 9535, Len: 0 No. Time Source Destination Protocol Length Info 10781 126.994964 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=9535 Ack=706073 Win=0 Len=0 Frame 10781: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9535, Ack: 706073, Len: 0 No. Time Source Destination Protocol Length Info 10782 127.103804 192.168.10.216 64.74.103.131 TLSv1 91 Application Data Frame 10782: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.216 (192.168.10.216), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: ovrimosdbman (2956), Dst Port: https (443), Seq: 149, Ack: 149, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 10783 127.103885 64.74.103.131 192.168.10.216 TCP 60 https > ovrimosdbman [ACK] Seq=149 Ack=186 Win=65535 Len=0 Frame 10783: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.216 (192.168.10.216) Transmission Control Protocol, Src Port: https (443), Dst Port: ovrimosdbman (2956), Seq: 149, Ack: 186, Len: 0 No. Time Source Destination Protocol Length Info 10784 127.106801 Watchgua_3c:4c:d8 IntelCor_36:19:60 ARP 60 Who has 192.168.10.216? Tell 192.168.10.1 Frame 10784: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10785 127.106819 IntelCor_36:19:60 Watchgua_3c:4c:d8 ARP 60 192.168.10.216 is at 00:13:20:36:19:60 Frame 10785: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10786 127.151582 64.74.103.131 192.168.10.216 TLSv1 91 Application Data Frame 10786: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.216 (192.168.10.216) Transmission Control Protocol, Src Port: https (443), Dst Port: ovrimosdbman (2956), Seq: 149, Ack: 186, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 10787 127.174655 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3702462720, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10787: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10788 127.174680 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3702462720, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10788: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10789 127.174692 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3702462720, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10789: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10790 127.174704 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3702462720, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10790: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10791 127.193854 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1276641536, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10791: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10792 127.193875 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1276641536, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10792: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10793 127.193887 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1276641536, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10793: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10794 127.193900 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1276641536, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10794: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10795 127.194240 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 10795: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10796 127.211792 192.168.10.220 192.168.223.1 NBNS 343 Name query response NBSTAT Frame 10796: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.223.1 (192.168.223.1) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10797 127.211857 192.168.10.220 192.168.32.1 NBNS 343 Name query response NBSTAT Frame 10797: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.32.1 (192.168.32.1) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10798 127.221436 7x.x.x.1 192.168.10.220 ICMP 70 Destination unreachable (Host unreachable) Frame 10798: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 7x.x.x.1 (7x.x.x.1), Dst: 192.168.10.220 (192.168.10.220) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 10799 127.224670 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.140? Tell 192.168.10.220 Frame 10799: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10800 127.224701 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.140? Tell 192.168.10.220 Frame 10800: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10801 127.224716 Dell_ad:25:f8 Intel_38:8d:0a ARP 64 Who has 192.168.10.66? Tell 192.168.10.220 Frame 10801: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10802 127.224732 Dell_ad:25:f8 Intel_89:5e:11 ARP 64 Who has 192.168.10.65? Tell 192.168.10.220 Frame 10802: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10803 127.224742 Intel_38:8d:0a Dell_ad:25:f6 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 10803: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10804 127.224752 Intel_89:5e:11 Dell_ad:25:f8 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 10804: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10805 127.224762 Dell_ad:25:f8 Intel_a5:f5:5b ARP 64 Who has 192.168.10.131? Tell 192.168.10.220 Frame 10805: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10806 127.224773 Dell_ad:25:f8 Intel_38:8c:64 ARP 64 Who has 192.168.10.67? Tell 192.168.10.220 Frame 10806: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10807 127.224783 Dell_ad:25:f8 Intel_02:0e:6d ARP 64 Who has 192.168.10.128? Tell 192.168.10.220 Frame 10807: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10808 127.224793 Dell_ad:25:f8 IntelCor_d3:4e:80 ARP 64 Who has 192.168.10.70? Tell 192.168.10.220 Frame 10808: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10809 127.224803 Intel_a5:f5:5b Dell_ad:25:f8 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 10809: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10810 127.224814 Intel_38:8c:64 Dell_ad:25:f6 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 10810: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10811 127.224824 Dell_ad:25:f8 Intel_d0:7a:8f ARP 64 Who has 192.168.10.68? Tell 192.168.10.220 Frame 10811: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10812 127.224834 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.233? Tell 192.168.10.220 Frame 10812: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10813 127.224845 Intel_02:0e:6d Dell_ad:25:f6 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 10813: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10814 127.224855 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 10814: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10815 127.224869 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 10815: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10816 127.224884 Dell_ad:25:f8 Intel_56:83:a5 ARP 64 Who has 192.168.10.59? Tell 192.168.10.220 Frame 10816: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10817 127.224894 IntelCor_d3:4e:80 Dell_ad:25:f8 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 10817: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10818 127.224908 Dell_ad:25:f8 Intel_38:8c:b1 ARP 64 Who has 192.168.10.138? Tell 192.168.10.220 Frame 10818: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10819 127.224919 Intel_d0:7a:8f Dell_ad:25:f8 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 10819: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10820 127.224938 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 10820: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10821 127.224953 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 10821: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10822 127.224967 Intel_56:83:a5 Dell_ad:25:f6 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 10822: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10823 127.224977 Dell_ad:25:f8 Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.220 Frame 10823: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10824 127.224987 Intel_38:8c:b1 Dell_ad:25:f6 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 10824: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10825 127.224997 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 10825: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10826 127.225007 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 10826: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10827 127.225021 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 10827: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10828 127.225037 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 10828: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10829 127.315426 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 10829: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10830 127.369216 192.168.10.216 64.74.103.131 TCP 60 ovrimosdbman > https [ACK] Seq=186 Ack=186 Win=65535 Len=0 Frame 10830: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.216 (192.168.10.216), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: ovrimosdbman (2956), Dst Port: https (443), Seq: 186, Ack: 186, Len: 0 No. Time Source Destination Protocol Length Info 10831 127.385632 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.140? Tell 192.168.10.246 Frame 10831: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10832 127.385664 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.140? Tell 192.168.10.246 Frame 10832: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10833 127.443644 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 10833: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10834 127.466897 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10834: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10835 127.466920 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10835: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10836 127.566082 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 10836: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10837 127.967373 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10837: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10838 127.967405 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10838: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10839 127.994867 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 10755#1] 9428 > smtp [ACK] Seq=393191 Ack=5545 Win=46678 Len=0 Frame 10839: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 393191, Ack: 5545, Len: 0 No. Time Source Destination Protocol Length Info 10840 127.994905 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=5545 Ack=391876 Win=0 Len=0 Frame 10840: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5545, Ack: 391876, Len: 0 No. Time Source Destination Protocol Length Info 10841 128.080377 192.168.10.220 208.67.222.222 DNS 85 Standard query PTR 49.10.133.95.in-addr.arpa Frame 10841: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 64905 (64905), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10842 128.190104 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3719239936, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10842: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10843 128.190127 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3719239936, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10843: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10844 128.190140 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3719239936, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10844: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10845 128.190152 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3719239936, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10845: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10846 128.209438 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1293418752, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10846: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10847 128.209459 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1293418752, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10847: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10848 128.209471 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1293418752, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10848: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10849 128.209483 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1293418752, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10849: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10850 128.237757 Intel_86:1a:cf Broadcast ARP 60 Who has 192.168.10.206? Tell 192.168.10.250 Frame 10850: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_86:1a:cf (00:11:11:86:1a:cf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10851 128.237788 Intel_86:1a:cf Broadcast ARP 60 Who has 192.168.10.206? Tell 192.168.10.250 Frame 10851: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_86:1a:cf (00:11:11:86:1a:cf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10852 128.254014 208.67.222.222 192.168.10.220 DNS 127 Standard query response PTR 49-10-133-95.pool.ukrtel.net Frame 10852: 127 bytes on wire (1016 bits), 127 bytes captured (1016 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 64905 (64905) Domain Name System (response) No. Time Source Destination Protocol Length Info 10853 128.254896 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 Who has 192.168.10.220? Tell 192.168.10.1 Frame 10853: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10854 128.254910 Dell_ad:25:f6 Watchgua_3c:4c:d8 ARP 60 192.168.10.220 is at 00:22:19:ad:25:f6 Frame 10854: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10855 128.267647 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.201? Tell 192.168.10.32 Frame 10855: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10856 128.267677 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.201? Tell 192.168.10.32 Frame 10856: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10857 128.279396 192.168.10.220 208.67.222.222 DNS 85 Standard query PTR 51.110.94.77.in-addr.arpa Frame 10857: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 58934 (58934), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10858 128.338567 192.168.10.207 206.225.164.188 SMTP 264 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 10858: 264 bytes on wire (2112 bits), 264 bytes captured (2112 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 391876, Len: 210 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10859 128.338603 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=393191 Ack=5629 Win=46636 Len=0 Frame 10859: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 393191, Ack: 5629, Len: 0 No. Time Source Destination Protocol Length Info 10860 128.338634 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=5629 Ack=391876 Win=0 Len=0 Frame 10860: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5629, Ack: 391876, Len: 0 No. Time Source Destination Protocol Length Info 10861 128.841518 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-14.geo.kaspersky.com Frame 10861: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 58535 (58535), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10862 128.841663 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-14.geo.kaspersky.com Frame 10862: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 58535 (58535), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10863 128.911363 WwPcbaTe_67:48:f1 Broadcast ARP 60 Who has 192.168.10.206? Tell 192.168.10.202 Frame 10863: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_67:48:f1 (00:0f:1f:67:48:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10864 128.911394 WwPcbaTe_67:48:f1 Broadcast ARP 60 Who has 192.168.10.206? Tell 192.168.10.202 Frame 10864: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_67:48:f1 (00:0f:1f:67:48:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10865 128.911436 WwPcbaTe_67:48:f1 Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.202 Frame 10865: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: WwPcbaTe_67:48:f1 (00:0f:1f:67:48:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10866 128.911473 Watchgua_3c:4c:d8 WwPcbaTe_67:48:f1 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 10866: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: WwPcbaTe_67:48:f1 (00:0f:1f:67:48:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10867 128.911592 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 (duplicate use of 192.168.10.219 detected!) Frame 10867: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) [Duplicate IP address detected for 192.168.10.219 (00:0f:1f:67:48:f1) - also in use by 00:22:19:7d:f1:27 (frame 6460)] Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10868 128.911606 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 (duplicate use of 192.168.10.219 detected!) Frame 10868: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) [Duplicate IP address detected for 192.168.10.219 (00:0f:1f:67:48:f1) - also in use by 00:22:19:7d:f1:27 (frame 6460)] Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10869 128.911620 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 10869: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10870 128.911634 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 10870: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10871 128.911696 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 10871: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10872 128.911710 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 10872: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10873 129.194054 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 10873: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10874 129.205759 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3736017152, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10874: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10875 129.205783 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3736017152, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10875: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10876 129.205796 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3736017152, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10876: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10877 129.205808 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3736017152, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10877: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10878 129.225118 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1310195968, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10878: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10879 129.225139 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1310195968, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10879: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10880 129.225151 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1310195968, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10880: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10881 129.225163 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1310195968, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10881: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10882 129.279262 192.168.10.246 65.32.1.65 DNS 85 Standard query PTR 51.110.94.77.in-addr.arpa Frame 10882: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 53086 (53086), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10883 129.315514 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 10883: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10884 129.443794 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 10884: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10885 129.457738 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10885: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10886 129.457770 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10886: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10887 129.478449 65.32.1.65 192.168.10.246 DNS 127 Standard query response PTR h77-94-110-51.dyn.bashtel.ru Frame 10887: 127 bytes on wire (1016 bits), 127 bytes captured (1016 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 53086 (53086) Domain Name System (response) No. Time Source Destination Protocol Length Info 10888 129.486676 192.168.10.30 192.168.20.3 UDP 762 Source port: 34427 Destination port: apc-3052 Frame 10888: 762 bytes on wire (6096 bits), 762 bytes captured (6096 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (720 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 36 3a 30 34 0a 53 52 3d 31 42 0a =18:46:04.SR=1B. 0060 53 55 3d 37 42 31 33 31 45 30 41 0a 52 44 3d 39 SU=7B131E0A.RD=9 0070 45 42 31 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 EB1.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 0a 34 8.7E=00.3E=001.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 2e 30 C=207.3.50=040.0 00c0 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 37 2f .43=025.2.78=07/ 00d0 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 0a 34 25/06.6A=0023:.4 00e0 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 20 0a 7=S.63=BAI_UPS . 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 36 33 0.38=00.6E=NS063 0120 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 37 2f 1005398 .6D=07/ 0130 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 2d 55 25/06.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 52 4d 20 58 PS RT 10000 RM X 0150 4c 0a 34 36 3d 35 39 2e 39 39 0a 34 44 3d 32 30 L.46=59.99.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 35 3d 7.3.4E=204.4.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 3d 31 00.42=218.1.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e 34 37 C=034.0.2F=16.47 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 2e 33 0.09=59.99;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 0a 49 9=0.I0=2.I1=26.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a 49 38 5=0.I6=0.I7=1.I8 0250 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 0a 49 =Device 1.I9=0.I 0260 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d 30 0a A=Device 2.IB=0. 0270 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 30 0a IC=Relay 1.ID=0. 0280 53 48 3d 42 35 44 41 46 36 36 34 41 42 33 30 41 SH=B5DAF664AB30A 0290 41 44 42 38 44 42 34 43 37 44 35 36 34 44 39 39 ADB8DB4C7D564D99 02a0 32 43 42 0a 4d 44 3d 66 36 32 62 65 36 33 37 63 2CB.MD=f62be637c 02b0 65 65 64 64 63 66 35 65 31 35 63 63 34 66 38 33 eeddcf5e15cc4f83 02c0 32 63 32 66 64 35 34 0a 3c 2f 42 4f 44 59 3e 0a 2c2fd54.</BODY>. No. Time Source Destination Protocol Length Info 10889 129.486748 192.168.10.30 192.168.20.3 UDP 762 Source port: 34427 Destination port: apc-3052 Frame 10889: 762 bytes on wire (6096 bits), 762 bytes captured (6096 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (720 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 36 3a 30 34 0a 53 52 3d 31 42 0a =18:46:04.SR=1B. 0060 53 55 3d 37 42 31 33 31 45 30 41 0a 52 44 3d 39 SU=7B131E0A.RD=9 0070 45 42 31 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 EB1.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 0a 34 8.7E=00.3E=001.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 2e 30 C=207.3.50=040.0 00c0 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 37 2f .43=025.2.78=07/ 00d0 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 0a 34 25/06.6A=0023:.4 00e0 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 20 0a 7=S.63=BAI_UPS . 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 36 33 0.38=00.6E=NS063 0120 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 37 2f 1005398 .6D=07/ 0130 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 2d 55 25/06.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 52 4d 20 58 PS RT 10000 RM X 0150 4c 0a 34 36 3d 35 39 2e 39 39 0a 34 44 3d 32 30 L.46=59.99.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 35 3d 7.3.4E=204.4.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 3d 31 00.42=218.1.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e 34 37 C=034.0.2F=16.47 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 2e 33 0.09=59.99;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 0a 49 9=0.I0=2.I1=26.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a 49 38 5=0.I6=0.I7=1.I8 0250 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 0a 49 =Device 1.I9=0.I 0260 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d 30 0a A=Device 2.IB=0. 0270 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 30 0a IC=Relay 1.ID=0. 0280 53 48 3d 42 35 44 41 46 36 36 34 41 42 33 30 41 SH=B5DAF664AB30A 0290 41 44 42 38 44 42 34 43 37 44 35 36 34 44 39 39 ADB8DB4C7D564D99 02a0 32 43 42 0a 4d 44 3d 66 36 32 62 65 36 33 37 63 2CB.MD=f62be637c 02b0 65 65 64 64 63 66 35 65 31 35 63 63 34 66 38 33 eeddcf5e15cc4f83 02c0 32 63 32 66 64 35 34 0a 3c 2f 42 4f 44 59 3e 0a 2c2fd54.</BODY>. No. Time Source Destination Protocol Length Info 10890 129.486864 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:17:10 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS1/34427 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 10890: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:17:10 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS1/34427 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 10891 129.566000 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 10891: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10892 129.609023 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 164.19.113.84.in-addr.arpa Frame 10892: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 53636 (53636), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10893 129.805183 192.168.10.115 64.74.103.129 TLSv1 91 Application Data Frame 10893: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.115 (192.168.10.115), Dst: 64.74.103.129 (64.74.103.129) Transmission Control Protocol, Src Port: cogsys-lm (3377), Dst Port: https (443), Seq: 149, Ack: 149, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 10894 129.805252 64.74.103.129 192.168.10.115 TCP 60 https > cogsys-lm [ACK] Seq=149 Ack=186 Win=65535 Len=0 Frame 10894: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Internet Protocol Version 4, Src: 64.74.103.129 (64.74.103.129), Dst: 192.168.10.115 (192.168.10.115) Transmission Control Protocol, Src Port: https (443), Dst Port: cogsys-lm (3377), Seq: 149, Ack: 186, Len: 0 No. Time Source Destination Protocol Length Info 10895 129.806937 Watchgua_3c:4c:d8 IntelCor_ed:1a:c9 ARP 60 Who has 192.168.10.115? Tell 192.168.10.1 Frame 10895: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10896 129.806960 IntelCor_ed:1a:c9 Watchgua_3c:4c:d8 ARP 60 192.168.10.115 is at 00:13:20:ed:1a:c9 Frame 10896: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10897 129.973096 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10897: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10898 129.973128 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10898: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10899 129.995110 41.199.172.76 192.168.10.207 TCP 60 imagepump > smtp [RST, ACK] Seq=1 Ack=1 Win=46659 Len=0 Frame 10899: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 41.199.172.76 (41.199.172.76), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: imagepump (27345), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 10900 129.995215 192.168.10.1 192.168.10.245 Syslog 202 LOCAL1.INFO: Oct 3 19:46:28 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.199.172.76 7x.x.x.3 27345 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 10900: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:46:28 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.199.172.76 7x.x.x.3 27345 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 10901 129.998868 Watchgua_3c:4c:d8 SunrichT_19:cf:97 ARP 60 Who has 192.168.10.245? Tell 192.168.10.1 Frame 10901: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10902 129.998883 SunrichT_19:cf:97 Watchgua_3c:4c:d8 ARP 60 192.168.10.245 is at 00:0a:cd:19:cf:97 Frame 10902: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:97 (00:0a:cd:19:cf:97), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10903 130.221349 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3752794368, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10903: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10904 130.221373 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3752794368, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10904: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10905 130.221387 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3752794368, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10905: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10906 130.221399 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3752794368, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10906: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10907 130.240711 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1326973184, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10907: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10908 130.240735 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1326973184, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10908: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10909 130.240749 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1326973184, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10909: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10910 130.240761 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1326973184, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10910: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10911 130.444240 WwPcbaTe_6d:76:3c Broadcast ARP 60 Who has 192.168.10.22? Tell 192.168.10.201 Frame 10911: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10912 130.444272 WwPcbaTe_6d:76:3c Broadcast ARP 60 Who has 192.168.10.22? Tell 192.168.10.201 Frame 10912: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10913 130.444581 WwPcbaTe_6d:76:3c Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.201 Frame 10913: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10914 130.444595 Watchgua_3c:4c:d8 WwPcbaTe_6d:76:3c ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 10914: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10915 130.472922 WwPcbaTe_6d:76:3c Broadcast ARP 60 Who has 192.168.10.23? Tell 192.168.10.201 Frame 10915: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10916 130.472952 WwPcbaTe_6d:76:3c Broadcast ARP 60 Who has 192.168.10.23? Tell 192.168.10.201 Frame 10916: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10917 130.473097 WwPcbaTe_6d:76:3c Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.201 Frame 10917: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10918 130.473110 Watchgua_3c:4c:d8 WwPcbaTe_6d:76:3c ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 10918: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10919 130.501833 WwPcbaTe_6d:76:3c Broadcast ARP 60 Who has 192.168.10.62? Tell 192.168.10.201 Frame 10919: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10920 130.501857 WwPcbaTe_6d:76:3c Broadcast ARP 60 Who has 192.168.10.62? Tell 192.168.10.201 Frame 10920: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10921 130.501874 WwPcbaTe_6d:76:3c Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.201 Frame 10921: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10922 130.501918 Watchgua_3c:4c:d8 WwPcbaTe_6d:76:3c ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 10922: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10923 130.608308 192.168.10.220 208.67.222.222 DNS 86 Standard query PTR 164.19.113.84.in-addr.arpa Frame 10923: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 59478 (59478), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10924 130.684608 65.32.1.65 192.168.10.246 DNS 137 Standard query response PTR chello084113019164.6.12.vie.surfer.at Frame 10924: 137 bytes on wire (1096 bits), 137 bytes captured (1096 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 53636 (53636) Domain Name System (response) No. Time Source Destination Protocol Length Info 10925 130.686989 Watchgua_3c:4c:d8 Dell_44:d0:9e ARP 60 Who has 192.168.10.246? Tell 192.168.10.1 Frame 10925: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10926 130.687003 Dell_44:d0:9e Watchgua_3c:4c:d8 ARP 60 192.168.10.246 is at 84:2b:2b:44:d0:9e Frame 10926: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10927 130.796900 Oracle_86:77:66 Broadcast ARP 60 Gratuitous ARP for 192.168.10.217 (Request) Frame 10927: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10928 130.796932 Oracle_86:77:66 Broadcast ARP 60 Gratuitous ARP for 192.168.10.217 (Request) Frame 10928: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10929 130.800825 192.168.10.246 65.32.1.65 DNS 87 Standard query PTR 12.247.136.186.in-addr.arpa Frame 10929: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 60564 (60564), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10930 130.863843 208.67.222.222 192.168.10.220 DNS 137 Standard query response PTR chello084113019164.6.12.vie.surfer.at Frame 10930: 137 bytes on wire (1096 bits), 137 bytes captured (1096 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 59478 (59478) Domain Name System (response) No. Time Source Destination Protocol Length Info 10931 130.918057 64.74.103.129 192.168.10.115 TLSv1 91 Application Data Frame 10931: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Internet Protocol Version 4, Src: 64.74.103.129 (64.74.103.129), Dst: 192.168.10.115 (192.168.10.115) Transmission Control Protocol, Src Port: https (443), Dst Port: cogsys-lm (3377), Seq: 149, Ack: 186, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 10932 130.962665 192.168.10.220 192.168.223.1 NBNS 343 Name query response NBSTAT Frame 10932: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.223.1 (192.168.223.1) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10933 130.996388 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=9535 Ack=706073 Win=14679 Len=0 Frame 10933: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9535, Ack: 706073, Len: 0 No. Time Source Destination Protocol Length Info 10934 130.996433 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 10933#1] smtp > 23308 [ACK] Seq=9535 Ack=706073 Win=14679 Len=0 Frame 10934: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9535, Ack: 706073, Len: 0 No. Time Source Destination Protocol Length Info 10935 130.996470 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10935: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 706924, Ack: 9535, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10936 130.996501 206.225.164.186 192.168.10.207 SMTP 1397 C: DATA fragment, 1343 bytes Frame 10936: 1397 bytes on wire (11176 bits), 1397 bytes captured (11176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 708304, Ack: 9535, Len: 1343 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10937 130.996533 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10937: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 709647, Ack: 9535, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10938 130.996563 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10938: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 711027, Ack: 9535, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10939 130.996596 206.225.164.186 192.168.10.207 SMTP 1308 C: DATA fragment, 1254 bytes Frame 10939: 1308 bytes on wire (10464 bits), 1308 bytes captured (10464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 712407, Ack: 9535, Len: 1254 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10940 130.996627 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10940: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 713661, Ack: 9535, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10941 130.996665 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 10933#2] smtp > 23308 [ACK] Seq=9535 Ack=706073 Win=14679 Len=0 Frame 10941: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9535, Ack: 706073, Len: 0 No. Time Source Destination Protocol Length Info 10942 130.996696 192.168.10.207 206.225.164.186 SMTP 474 S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 10942: 474 bytes on wire (3792 bits), 474 bytes captured (3792 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9535, Ack: 706073, Len: 420 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10943 130.996727 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=715041 Ack=9955 Win=46190 Len=0 Frame 10943: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 715041, Ack: 9955, Len: 0 No. Time Source Destination Protocol Length Info 10944 130.996756 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 10942#1] smtp > 23308 [ACK] Seq=9955 Ack=706073 Win=14679 Len=0 Frame 10944: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9955, Ack: 706073, Len: 0 No. Time Source Destination Protocol Length Info 10945 130.996789 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 10942#2] smtp > 23308 [ACK] Seq=9955 Ack=706073 Win=14679 Len=0 Frame 10945: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9955, Ack: 706073, Len: 0 No. Time Source Destination Protocol Length Info 10946 130.996819 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 10942#3] smtp > 23308 [ACK] Seq=9955 Ack=706073 Win=14679 Len=0 Frame 10946: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9955, Ack: 706073, Len: 0 No. Time Source Destination Protocol Length Info 10947 130.996852 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 10942#4] smtp > 23308 [ACK] Seq=9955 Ack=706073 Win=14679 Len=0 Frame 10947: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9955, Ack: 706073, Len: 0 No. Time Source Destination Protocol Length Info 10948 130.996884 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 10942#5] smtp > 23308 [ACK] Seq=9955 Ack=706073 Win=14679 Len=0 Frame 10948: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9955, Ack: 706073, Len: 0 No. Time Source Destination Protocol Length Info 10949 130.996920 206.225.164.186 192.168.10.207 SMTP 905 [TCP Fast Retransmission] C: DATA fragment, 851 bytes Frame 10949: 905 bytes on wire (7240 bits), 905 bytes captured (7240 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 706073, Ack: 9955, Len: 851 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10950 130.996954 206.225.164.186 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 10950: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 706924, Ack: 9955, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10951 130.996985 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=9955 Ack=715041 Win=5711 Len=0 Frame 10951: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9955, Ack: 715041, Len: 0 No. Time Source Destination Protocol Length Info 10952 130.997021 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10952: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 715041, Ack: 9955, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10953 130.997054 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10953: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 716421, Ack: 9955, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10954 130.997131 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=9955 Ack=717801 Win=2951 Len=0 Frame 10954: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9955, Ack: 717801, Len: 0 No. Time Source Destination Protocol Length Info 10955 130.997221 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10955: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 717801, Ack: 9955, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10956 130.997253 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 10956: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 719181, Ack: 9955, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10957 130.997284 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=9955 Ack=720561 Win=191 Len=0 Frame 10957: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9955, Ack: 720561, Len: 0 No. Time Source Destination Protocol Length Info 10958 130.997689 65.32.1.65 192.168.10.246 DNS 131 Standard query response PTR 12-247-136-186.fibertel.com.ar Frame 10958: 131 bytes on wire (1048 bits), 131 bytes captured (1048 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 60564 (60564) Domain Name System (response) No. Time Source Destination Protocol Length Info 10959 131.054807 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 10959: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10960 131.054838 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 10960: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10961 131.133189 192.168.10.115 64.74.103.129 TCP 60 cogsys-lm > https [ACK] Seq=186 Ack=186 Win=65424 Len=0 Frame 10961: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.115 (192.168.10.115), Dst: 64.74.103.129 (64.74.103.129) Transmission Control Protocol, Src Port: cogsys-lm (3377), Dst Port: https (443), Seq: 186, Ack: 186, Len: 0 No. Time Source Destination Protocol Length Info 10962 131.135143 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 32.152.113.74.in-addr.arpa Frame 10962: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 51332 (51332), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10963 131.194115 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 10963: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10964 131.201886 Dell_52:2e:6b Broadcast ARP 106 Who has 192.168.10.25? Tell 192.168.10.205 Frame 10964: 106 bytes on wire (848 bits), 106 bytes captured (848 bits) Ethernet II, Src: Dell_52:2e:6b (00:13:72:52:2e:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10965 131.201917 Dell_52:2e:6b Broadcast ARP 106 Who has 192.168.10.25? Tell 192.168.10.205 Frame 10965: 106 bytes on wire (848 bits), 106 bytes captured (848 bits) Ethernet II, Src: Dell_52:2e:6b (00:13:72:52:2e:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10966 131.214540 65.32.1.65 192.168.10.246 DNS 121 Standard query response PTR www2p.istockphoto.com Frame 10966: 121 bytes on wire (968 bits), 121 bytes captured (968 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 51332 (51332) Domain Name System (response) No. Time Source Destination Protocol Length Info 10967 131.232393 192.168.10.246 65.32.1.65 DNS 87 Standard query PTR 75.225.206.117.in-addr.arpa Frame 10967: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 63263 (63263), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10968 131.237123 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3769571584, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10968: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10969 131.237146 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3769571584, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10969: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10970 131.237158 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3769571584, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10970: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10971 131.237170 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3769571584, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10971: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10972 131.256327 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1343750400, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10972: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10973 131.256349 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1343750400, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10973: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10974 131.256361 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1343750400, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10974: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10975 131.256373 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1343750400, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 10975: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10976 131.282183 65.32.1.65 192.168.10.246 DNS 176 Standard query response, No such name Frame 10976: 176 bytes on wire (1408 bits), 176 bytes captured (1408 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 63263 (63263) Domain Name System (response) No. Time Source Destination Protocol Length Info 10977 131.282801 192.168.10.203 117.206.225.75 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 10977: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 117.206.225.75 (117.206.225.75) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 10978 131.318106 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 10978: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10979 131.398663 192.168.10.217 4.2.2.2 DNS 77 Standard query TXT _nfsv4idmapdomain Frame 10979: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.217 (192.168.10.217), Dst: 4.2.2.2 (4.2.2.2) User Datagram Protocol, Src Port: 51159 (51159), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10980 131.416981 4.2.2.2 192.168.10.217 DNS 152 Standard query response, No such name Frame 10980: 152 bytes on wire (1216 bits), 152 bytes captured (1216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Oracle_86:77:66 (00:14:4f:86:77:66) Internet Protocol Version 4, Src: 4.2.2.2 (4.2.2.2), Dst: 192.168.10.217 (192.168.10.217) User Datagram Protocol, Src Port: domain (53), Dst Port: 51159 (51159) Domain Name System (response) No. Time Source Destination Protocol Length Info 10981 131.418970 Watchgua_3c:4c:d8 Oracle_86:77:66 ARP 60 Who has 192.168.10.217? Tell 192.168.10.1 Frame 10981: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Oracle_86:77:66 (00:14:4f:86:77:66) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 10982 131.418984 Oracle_86:77:66 Watchgua_3c:4c:d8 ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 10982: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 10983 131.443737 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 10983: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10984 131.456090 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10984: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10985 131.456121 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 10985: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10986 131.566132 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 10986: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 10987 131.568446 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 10987: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9955, Ack: 720561, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10988 131.568479 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=720561 Ack=9997 Win=46169 Len=0 Frame 10988: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 720561, Ack: 9997, Len: 0 No. Time Source Destination Protocol Length Info 10989 131.964107 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10989: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10990 131.964139 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 10990: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 10991 131.968802 192.168.10.217 4.2.2.2 DNS 77 Standard query TXT _nfsv4idmapdomain Frame 10991: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.217 (192.168.10.217), Dst: 4.2.2.2 (4.2.2.2) User Datagram Protocol, Src Port: 51162 (51162), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 10992 131.971061 192.168.10.220 129.6.15.29 NTP 90 NTP Version 3, client Frame 10992: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 129.6.15.29 (129.6.15.29) User Datagram Protocol, Src Port: ntp (123), Dst Port: ntp (123) Network Time Protocol No. Time Source Destination Protocol Length Info 10993 132.144182 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 10993: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 9997, Ack: 720561, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 10994 132.144218 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=720561 Ack=10039 Win=46148 Len=0 Frame 10994: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 720561, Ack: 10039, Len: 0 No. Time Source Destination Protocol Length Info 10995 132.253522 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3786348800, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10995: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10996 132.253546 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3786348800, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 10996: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10997 132.253559 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3786348800, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10997: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10998 132.253571 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3786348800, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 10998: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 10999 132.271958 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1360527616, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 10999: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11000 132.271980 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1360527616, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11000: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11001 132.271992 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1360527616, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11001: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11002 132.272005 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1360527616, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11002: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11003 132.459390 192.168.10.185 192.168.10.142 VNC 135 Authentication result Frame 11003: 135 bytes on wire (1080 bits), 135 bytes captured (1080 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 104835, Ack: 4951, Len: 81 Virtual Network Computing No. Time Source Destination Protocol Length Info 11004 132.461596 192.168.10.220 192.168.223.1 NBNS 343 Name query response NBSTAT Frame 11004: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.223.1 (192.168.223.1) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 11005 132.471331 7x.x.x.1 192.168.10.220 ICMP 70 Destination unreachable (Host unreachable) Frame 11005: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 7x.x.x.1 (7x.x.x.1), Dst: 192.168.10.220 (192.168.10.220) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 11006 132.482615 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 11006: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4951, Ack: 104916, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 11007 132.630788 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=104916 Ack=4983 Win=64359 Len=0 Frame 11007: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 104916, Ack: 4983, Len: 0 No. Time Source Destination Protocol Length Info 11008 132.711570 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 11008: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10039, Ack: 720561, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11009 132.711604 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=720561 Ack=10081 Win=46127 Len=0 Frame 11009: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 720561, Ack: 10081, Len: 0 No. Time Source Destination Protocol Length Info 11010 132.781880 192.168.10.203 117.206.225.75 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 11010: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 117.206.225.75 (117.206.225.75) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 11011 132.841480 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-14.geo.kaspersky.com Frame 11011: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 58535 (58535), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 11012 132.841619 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-14.geo.kaspersky.com Frame 11012: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 58535 (58535), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 11013 133.193967 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 11013: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11014 133.269171 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3803126016, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11014: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11015 133.269195 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3803126016, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11015: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11016 133.269208 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3803126016, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11016: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11017 133.269220 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3803126016, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11017: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11018 133.270345 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 11018: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10081, Ack: 720561, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11019 133.270378 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=720561 Ack=10123 Win=46106 Len=0 Frame 11019: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 720561, Ack: 10123, Len: 0 No. Time Source Destination Protocol Length Info 11020 133.270887 Watchgua_3c:4c:d8 Dell_39:5d:dd ARP 60 Who has 192.168.10.207? Tell 192.168.10.1 Frame 11020: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11021 133.270998 Dell_39:5d:dd Watchgua_3c:4c:d8 ARP 60 192.168.10.207 is at 00:18:8b:39:5d:dd Frame 11021: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11022 133.287527 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1377304832, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11022: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11023 133.287547 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1377304832, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11023: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11024 133.287560 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1377304832, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11024: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11025 133.287572 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1377304832, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11025: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11026 133.315372 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 11026: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11027 133.443665 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 11027: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11028 133.461701 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 11028: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11029 133.461732 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 11029: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11030 133.566143 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 11030: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11031 133.642854 192.168.10.220 208.67.220.220 DNS 85 Standard query PTR 51.110.94.77.in-addr.arpa Frame 11031: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.220.220 (208.67.220.220) User Datagram Protocol, Src Port: 58934 (58934), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 11032 133.651083 192.168.10.190 64.74.103.148 TLSv1 91 Application Data Frame 11032: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.190 (192.168.10.190), Dst: 64.74.103.148 (64.74.103.148) Transmission Control Protocol, Src Port: wsmlb (3806), Dst Port: https (443), Seq: 149, Ack: 149, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 11033 133.651151 64.74.103.148 192.168.10.190 TCP 60 https > wsmlb [ACK] Seq=149 Ack=186 Win=65535 Len=0 Frame 11033: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Internet Protocol Version 4, Src: 64.74.103.148 (64.74.103.148), Dst: 192.168.10.190 (192.168.10.190) Transmission Control Protocol, Src Port: https (443), Dst Port: wsmlb (3806), Seq: 149, Ack: 186, Len: 0 No. Time Source Destination Protocol Length Info 11034 133.654981 Watchgua_3c:4c:d8 IntelCor_ed:1a:23 ARP 60 Who has 192.168.10.190? Tell 192.168.10.1 Frame 11034: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11035 133.654995 IntelCor_ed:1a:23 Watchgua_3c:4c:d8 ARP 60 192.168.10.190 is at 00:13:20:ed:1a:23 Frame 11035: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11036 133.672285 192.168.10.32 192.168.10.255 UDP 647 Source port: 38302 Destination port: apc-3052 Frame 11036: 647 bytes on wire (5176 bits), 647 bytes captured (5176 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (605 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 38 3a 31 35 0a 53 52 3d 30 31 31 =20:58:15.SR=011 0060 35 45 37 0a 53 55 3d 31 42 38 30 0a 52 44 3d 43 5E7.SU=1B80.RD=C 0070 32 33 33 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 233.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 36 .4C=207.3.50=036 00c0 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 .0.43=028.5.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 30 3a 1/19/07.6A=0050: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 746005481 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 35 39 2e 39 39 0a 34 44 3d .46=59.99.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 207.3.4E=205.9.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 30 2e 30 0a 32 46 3d 31 35 2e .5C=030.0.2F=15. 01d0 31 32 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 12.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 000.09=59.99;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 30 0a 49 30 3d 30 0a 53 48 3d O .MC=0.I0=0.SH= 0210 36 36 36 43 33 34 39 37 43 36 37 43 34 32 37 37 666C3497C67C4277 0220 44 35 30 38 37 31 42 31 34 36 46 36 46 32 36 37 D50871B146F6F267 0230 0a 4d 44 3d 31 63 64 61 62 66 63 35 37 62 64 32 .MD=1cdabfc57bd2 0240 63 62 37 34 64 39 33 64 65 62 63 62 33 39 31 38 cb74d93debcb3918 0250 61 39 65 63 0a 3c 2f 42 4f 44 59 3e 0a a9ec.</BODY>. No. Time Source Destination Protocol Length Info 11037 133.672420 192.168.10.32 192.168.10.255 UDP 647 Source port: 38302 Destination port: apc-3052 Frame 11037: 647 bytes on wire (5176 bits), 647 bytes captured (5176 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (605 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 38 3a 31 35 0a 53 52 3d 30 31 31 =20:58:15.SR=011 0060 35 45 37 0a 53 55 3d 31 42 38 30 0a 52 44 3d 43 5E7.SU=1B80.RD=C 0070 32 33 33 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 233.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 36 .4C=207.3.50=036 00c0 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 .0.43=028.5.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 30 3a 1/19/07.6A=0050: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 746005481 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 35 39 2e 39 39 0a 34 44 3d .46=59.99.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 207.3.4E=205.9.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 30 2e 30 0a 32 46 3d 31 35 2e .5C=030.0.2F=15. 01d0 31 32 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 12.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 000.09=59.99;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 30 0a 49 30 3d 30 0a 53 48 3d O .MC=0.I0=0.SH= 0210 36 36 36 43 33 34 39 37 43 36 37 43 34 32 37 37 666C3497C67C4277 0220 44 35 30 38 37 31 42 31 34 36 46 36 46 32 36 37 D50871B146F6F267 0230 0a 4d 44 3d 31 63 64 61 62 66 63 35 37 62 64 32 .MD=1cdabfc57bd2 0240 63 62 37 34 64 39 33 64 65 62 63 62 33 39 31 38 cb74d93debcb3918 0250 61 39 65 63 0a 3c 2f 42 4f 44 59 3e 0a a9ec.</BODY>. No. Time Source Destination Protocol Length Info 11038 133.699123 64.74.103.148 192.168.10.190 TLSv1 91 Application Data Frame 11038: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Internet Protocol Version 4, Src: 64.74.103.148 (64.74.103.148), Dst: 192.168.10.190 (192.168.10.190) Transmission Control Protocol, Src Port: https (443), Dst Port: wsmlb (3806), Seq: 149, Ack: 186, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 11039 133.756173 192.168.10.104 192.168.10.255 BROWSER 224 Become Backup Browser Frame 11039: 224 bytes on wire (1792 bits), 224 bytes captured (1792 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 11040 133.844008 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 11040: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10123, Ack: 720561, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11041 133.844050 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=720561 Ack=10165 Win=46085 Len=0 Frame 11041: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 720561, Ack: 10165, Len: 0 No. Time Source Destination Protocol Length Info 11042 133.844191 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=10165 Ack=720561 Win=51047 Len=0 Frame 11042: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10165, Ack: 720561, Len: 0 No. Time Source Destination Protocol Length Info 11043 133.844221 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 11042#1] smtp > 23308 [ACK] Seq=10165 Ack=720561 Win=51047 Len=0 Frame 11043: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10165, Ack: 720561, Len: 0 No. Time Source Destination Protocol Length Info 11044 133.844302 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11044: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 720561, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11045 133.844332 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11045: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 721941, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11046 133.844361 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11046: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 723321, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11047 133.844390 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11047: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 724701, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11048 133.844449 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=10165 Ack=726081 Win=45527 Len=0 Frame 11048: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10165, Ack: 726081, Len: 0 No. Time Source Destination Protocol Length Info 11049 133.844480 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11049: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 726081, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11050 133.844511 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11050: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 727461, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11051 133.844542 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11051: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 728841, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11052 133.844574 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11052: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 730221, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11053 133.844604 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=10165 Ack=730221 Win=41387 Len=0 Frame 11053: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10165, Ack: 730221, Len: 0 No. Time Source Destination Protocol Length Info 11054 133.844658 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11054: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 731601, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11055 133.844690 206.225.164.186 192.168.10.207 SMTP 1051 C: DATA fragment, 997 bytes Frame 11055: 1051 bytes on wire (8408 bits), 1051 bytes captured (8408 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 732981, Ack: 10165, Len: 997 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11056 133.844720 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11056: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 733978, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11057 133.844795 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=10165 Ack=733978 Win=37630 Len=0 Frame 11057: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10165, Ack: 733978, Len: 0 No. Time Source Destination Protocol Length Info 11058 133.844832 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11058: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 735358, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11059 133.844864 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11059: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 736738, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11060 133.844894 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11060: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 738118, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11061 133.844925 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=10165 Ack=736738 Win=34870 Len=0 Frame 11061: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10165, Ack: 736738, Len: 0 No. Time Source Destination Protocol Length Info 11062 133.844954 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=10165 Ack=739498 Win=32110 Len=0 Frame 11062: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10165, Ack: 739498, Len: 0 No. Time Source Destination Protocol Length Info 11063 133.844984 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11063: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 739498, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11064 133.845025 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11064: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 740878, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11065 133.845057 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11065: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 742258, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11066 133.845087 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11066: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 743638, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11067 133.845116 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11067: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 745018, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11068 133.845147 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=10165 Ack=742258 Win=29350 Len=0 Frame 11068: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10165, Ack: 742258, Len: 0 No. Time Source Destination Protocol Length Info 11069 133.845175 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=10165 Ack=745018 Win=26590 Len=0 Frame 11069: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10165, Ack: 745018, Len: 0 No. Time Source Destination Protocol Length Info 11070 133.845202 206.225.164.186 192.168.10.207 SMTP 555 C: DATA fragment, 501 bytes Frame 11070: 555 bytes on wire (4440 bits), 555 bytes captured (4440 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 746398, Ack: 10165, Len: 501 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11071 133.845234 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11071: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 746899, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11072 133.845262 206.225.164.186 192.168.10.207 SMTP 432 C: DATA fragment, 378 bytes Frame 11072: 432 bytes on wire (3456 bits), 432 bytes captured (3456 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 748279, Ack: 10165, Len: 378 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11073 133.845291 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11073: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 748657, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11074 133.845320 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=10165 Ack=746899 Win=24709 Len=0 Frame 11074: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10165, Ack: 746899, Len: 0 No. Time Source Destination Protocol Length Info 11075 133.845349 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11075: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 750037, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11076 133.845381 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11076: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 751417, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11077 133.845410 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=10165 Ack=748657 Win=22951 Len=0 Frame 11077: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10165, Ack: 748657, Len: 0 No. Time Source Destination Protocol Length Info 11078 133.845438 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=10165 Ack=751417 Win=20191 Len=0 Frame 11078: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10165, Ack: 751417, Len: 0 No. Time Source Destination Protocol Length Info 11079 133.845467 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11079: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 752797, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11080 133.845496 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11080: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 754177, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11081 133.845525 206.225.164.186 192.168.10.207 SMTP 1056 C: DATA fragment, 1002 bytes Frame 11081: 1056 bytes on wire (8448 bits), 1056 bytes captured (8448 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 755557, Ack: 10165, Len: 1002 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11082 133.845554 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11082: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 756559, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11083 133.845588 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11083: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 757939, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11084 133.845617 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=10165 Ack=754177 Win=17431 Len=0 Frame 11084: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10165, Ack: 754177, Len: 0 No. Time Source Destination Protocol Length Info 11085 133.845644 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=10165 Ack=756559 Win=15049 Len=0 Frame 11085: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10165, Ack: 756559, Len: 0 No. Time Source Destination Protocol Length Info 11086 133.845673 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11086: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 759319, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11087 133.845703 206.225.164.186 192.168.10.207 SMTP 1238 C: DATA fragment, 1184 bytes Frame 11087: 1238 bytes on wire (9904 bits), 1238 bytes captured (9904 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 760699, Ack: 10165, Len: 1184 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11088 133.845731 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=10165 Ack=759319 Win=12289 Len=0 Frame 11088: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10165, Ack: 759319, Len: 0 No. Time Source Destination Protocol Length Info 11089 133.845760 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11089: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 761883, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11090 133.845789 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11090: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 763263, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11091 133.845818 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11091: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 764643, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11092 133.845846 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=10165 Ack=763263 Win=8345 Len=0 Frame 11092: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10165, Ack: 763263, Len: 0 No. Time Source Destination Protocol Length Info 11093 133.845875 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11093: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 766023, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11094 133.845908 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11094: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 767403, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11095 133.845938 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11095: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 768783, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11096 133.845966 206.225.164.186 192.168.10.207 SMTP 779 C: DATA fragment, 725 bytes Frame 11096: 779 bytes on wire (6232 bits), 779 bytes captured (6232 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 770163, Ack: 10165, Len: 725 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11097 133.846002 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=10165 Ack=767403 Win=4205 Len=0 Frame 11097: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10165, Ack: 767403, Len: 0 No. Time Source Destination Protocol Length Info 11098 133.846031 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11098: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 770888, Ack: 10165, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11099 133.846059 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=10165 Ack=770888 Win=720 Len=0 Frame 11099: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10165, Ack: 770888, Len: 0 No. Time Source Destination Protocol Length Info 11100 133.869751 192.168.10.190 64.74.103.148 TCP 60 wsmlb > https [ACK] Seq=186 Ack=186 Win=65461 Len=0 Frame 11100: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.190 (192.168.10.190), Dst: 64.74.103.148 (64.74.103.148) Transmission Control Protocol, Src Port: wsmlb (3806), Dst Port: https (443), Seq: 186, Ack: 186, Len: 0 No. Time Source Destination Protocol Length Info 11101 133.961605 192.168.10.220 192.168.223.1 NBNS 343 Name query response NBSTAT Frame 11101: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.223.1 (192.168.223.1) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 11102 133.962161 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 11102: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11103 133.962207 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 11103: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11104 133.970467 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=10165 Ack=771608 Win=0 Len=0 Frame 11104: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10165, Ack: 771608, Len: 0 No. Time Source Destination Protocol Length Info 11105 133.971124 7x.x.x.1 192.168.10.220 ICMP 70 Destination unreachable (Host unreachable) Frame 11105: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 7x.x.x.1 (7x.x.x.1), Dst: 192.168.10.220 (192.168.10.220) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 11106 133.981228 192.168.10.207 206.225.164.188 SMTP 516 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 11106: 516 bytes on wire (4128 bits), 516 bytes captured (4128 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5419, Ack: 391876, Len: 462 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11107 133.981260 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=393191 Ack=5881 Win=46510 Len=0 Frame 11107: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 393191, Ack: 5881, Len: 0 No. Time Source Destination Protocol Length Info 11108 133.981337 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=5881 Ack=391876 Win=0 Len=0 Frame 11108: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5881, Ack: 391876, Len: 0 No. Time Source Destination Protocol Length Info 11109 133.994988 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 11107#1] 9428 > smtp [ACK] Seq=393191 Ack=5881 Win=46510 Len=0 Frame 11109: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 393191, Ack: 5881, Len: 0 No. Time Source Destination Protocol Length Info 11110 133.995019 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=5881 Ack=391876 Win=0 Len=0 Frame 11110: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5881, Ack: 391876, Len: 0 No. Time Source Destination Protocol Length Info 11111 134.109084 192.168.10.31 192.168.10.255 UDP 778 Source port: 50764 Destination port: apc-3052 Frame 11111: 778 bytes on wire (6224 bits), 778 bytes captured (6224 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (736 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 35 30 3a 33 35 0a 53 52 3d 31 30 37 =19:50:35.SR=107 0060 43 0a 53 55 3d 32 44 38 32 45 41 34 43 0a 52 44 C.SU=2D82EA4C.RD 0070 3d 44 34 39 31 0a 54 41 3d 31 39 32 2e 31 36 38 =D491.TA=192.168 0080 2e 31 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d .10.255.UC=1.SD= 0090 30 0a 53 4d 3d 32 0a 34 46 3d 32 30 37 2e 30 0a 0.SM=2.4F=207.0. 00a0 35 31 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 51=08.7E=00.3E=0 00b0 30 32 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 02.4C=207.3.50=0 00c0 33 35 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 35.0.43=029.1.78 00d0 3d 31 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 =11/19/07.6A=005 00e0 37 3a 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 7:.47=S.63=UPS_I 00f0 44 45 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d DEN.66=100.0.58= 0100 4e 4f 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a NO.56=5YW.39=FF. 0110 32 37 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 27=00.38=00.6E=I 0120 53 30 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 S0746005443 .6D 0130 3d 31 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 =11/19/07.01=Sma 0140 72 74 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 rt-UPS RT 10000 0150 58 4c 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 XL .46=60.00.4 0160 44 3d 32 30 38 2e 38 0a 34 45 3d 32 30 37 2e 33 D=208.8.4E=207.3 0170 0a 34 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 .45=336.75=229.6 0180 43 3d 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 C=146.65=00.6F=2 0190 30 38 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 08.71=02.70=020. 01a0 37 32 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 72=000.42=217.0. 01b0 36 37 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 67=192.62=476.17 01c0 2e 57 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 .W.5C=028.0.2F=1 01d0 33 2e 37 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 3.77.16=A.05=000 01e0 30 30 30 30 30 0a 30 39 3d 35 39 2e 39 38 3b 32 00000.09=59.98;2 01f0 30 37 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 07.3.6B=0.81E2=A 0200 55 54 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 UTO .MC=1.E0=0.E 0210 31 3d 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 1=0.E2=0.E3=0.E8 0220 3d 30 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d =0.E9=0.I0=2.I1= 0230 30 30 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 00.I2=01.I3=0.I4 0240 3d 30 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d =0.I5=0.I6=0.I7= 0250 30 0a 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 0.I8=Int Contact 0260 20 31 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 1.I9=0.IA=Int C 0270 6f 6e 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 ontact 2.IB=0.IC 0280 3d 49 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a =Int Relay.ID=0. 0290 53 48 3d 45 42 46 30 42 33 37 38 39 32 45 45 36 SH=EBF0B37892EE6 02a0 33 38 35 34 41 36 32 35 41 36 37 41 41 35 41 39 3854A625A67AA5A9 02b0 43 39 39 0a 4d 44 3d 30 34 63 61 63 65 63 63 61 C99.MD=04cacecca 02c0 38 33 65 32 39 66 35 65 39 38 31 66 62 65 31 39 83e29f5e981fbe19 02d0 32 39 63 31 61 61 63 0a 3c 2f 42 4f 44 59 3e 0a 29c1aac.</BODY>. No. Time Source Destination Protocol Length Info 11112 134.109210 192.168.10.31 192.168.10.255 UDP 778 Source port: 50764 Destination port: apc-3052 Frame 11112: 778 bytes on wire (6224 bits), 778 bytes captured (6224 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (736 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 35 30 3a 33 35 0a 53 52 3d 31 30 37 =19:50:35.SR=107 0060 43 0a 53 55 3d 32 44 38 32 45 41 34 43 0a 52 44 C.SU=2D82EA4C.RD 0070 3d 44 34 39 31 0a 54 41 3d 31 39 32 2e 31 36 38 =D491.TA=192.168 0080 2e 31 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d .10.255.UC=1.SD= 0090 30 0a 53 4d 3d 32 0a 34 46 3d 32 30 37 2e 30 0a 0.SM=2.4F=207.0. 00a0 35 31 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 51=08.7E=00.3E=0 00b0 30 32 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 02.4C=207.3.50=0 00c0 33 35 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 35.0.43=029.1.78 00d0 3d 31 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 =11/19/07.6A=005 00e0 37 3a 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 7:.47=S.63=UPS_I 00f0 44 45 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d DEN.66=100.0.58= 0100 4e 4f 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a NO.56=5YW.39=FF. 0110 32 37 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 27=00.38=00.6E=I 0120 53 30 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 S0746005443 .6D 0130 3d 31 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 =11/19/07.01=Sma 0140 72 74 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 rt-UPS RT 10000 0150 58 4c 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 XL .46=60.00.4 0160 44 3d 32 30 38 2e 38 0a 34 45 3d 32 30 37 2e 33 D=208.8.4E=207.3 0170 0a 34 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 .45=336.75=229.6 0180 43 3d 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 C=146.65=00.6F=2 0190 30 38 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 08.71=02.70=020. 01a0 37 32 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 72=000.42=217.0. 01b0 36 37 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 67=192.62=476.17 01c0 2e 57 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 .W.5C=028.0.2F=1 01d0 33 2e 37 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 3.77.16=A.05=000 01e0 30 30 30 30 30 0a 30 39 3d 35 39 2e 39 38 3b 32 00000.09=59.98;2 01f0 30 37 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 07.3.6B=0.81E2=A 0200 55 54 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 UTO .MC=1.E0=0.E 0210 31 3d 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 1=0.E2=0.E3=0.E8 0220 3d 30 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d =0.E9=0.I0=2.I1= 0230 30 30 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 00.I2=01.I3=0.I4 0240 3d 30 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d =0.I5=0.I6=0.I7= 0250 30 0a 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 0.I8=Int Contact 0260 20 31 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 1.I9=0.IA=Int C 0270 6f 6e 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 ontact 2.IB=0.IC 0280 3d 49 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a =Int Relay.ID=0. 0290 53 48 3d 45 42 46 30 42 33 37 38 39 32 45 45 36 SH=EBF0B37892EE6 02a0 33 38 35 34 41 36 32 35 41 36 37 41 41 35 41 39 3854A625A67AA5A9 02b0 43 39 39 0a 4d 44 3d 30 34 63 61 63 65 63 63 61 C99.MD=04cacecca 02c0 38 33 65 32 39 66 35 65 39 38 31 66 62 65 31 39 83e29f5e981fbe19 02d0 32 39 63 31 61 61 63 0a 3c 2f 42 4f 44 59 3e 0a 29c1aac.</BODY>. No. Time Source Destination Protocol Length Info 11113 134.281836 192.168.10.203 117.206.225.75 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 11113: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 117.206.225.75 (117.206.225.75) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 11114 134.284773 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3819903232, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11114: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11115 134.284794 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3819903232, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11115: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11116 134.284807 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3819903232, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11116: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11117 134.284818 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3819903232, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11117: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11118 134.303185 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1394082048, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11118: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11119 134.303209 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1394082048, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11119: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11120 134.303222 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1394082048, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11120: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11121 134.303234 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1394082048, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11121: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11122 134.402074 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 11122: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10165, Ack: 771608, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11123 134.402122 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=772268 Ack=10207 Win=46064 Len=0 Frame 11123: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 772268, Ack: 10207, Len: 0 No. Time Source Destination Protocol Length Info 11124 134.402154 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=10207 Ack=771608 Win=0 Len=0 Frame 11124: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10207, Ack: 771608, Len: 0 No. Time Source Destination Protocol Length Info 11125 134.678451 192.168.10.220 192.168.80.1 NBNS 343 Name query response NBSTAT Frame 11125: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.80.1 (192.168.80.1) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 11126 134.688123 7x.x.x.1 192.168.10.220 ICMP 70 Destination unreachable (Host unreachable) Frame 11126: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 7x.x.x.1 (7x.x.x.1), Dst: 192.168.10.220 (192.168.10.220) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 11127 134.691383 64.74.103.131 192.168.10.240 TLSv1 107 Application Data Frame 11127: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.240 (192.168.10.240) Transmission Control Protocol, Src Port: https (443), Dst Port: mentaserver (2118), Seq: 213, Ack: 213, Len: 53 Secure Sockets Layer No. Time Source Destination Protocol Length Info 11128 134.691486 192.168.10.240 64.74.103.131 TLSv1 107 Application Data Frame 11128: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.240 (192.168.10.240), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: mentaserver (2118), Dst Port: https (443), Seq: 213, Ack: 266, Len: 53 Secure Sockets Layer No. Time Source Destination Protocol Length Info 11129 134.691553 64.74.103.131 192.168.10.240 TCP 60 https > mentaserver [ACK] Seq=266 Ack=266 Win=65535 Len=0 Frame 11129: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.240 (192.168.10.240) Transmission Control Protocol, Src Port: https (443), Dst Port: mentaserver (2118), Seq: 266, Ack: 266, Len: 0 No. Time Source Destination Protocol Length Info 11130 134.695065 Watchgua_3c:4c:d8 Dell_ba:b4:3c ARP 60 Who has 192.168.10.240? Tell 192.168.10.1 Frame 11130: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11131 134.695079 Dell_ba:b4:3c Watchgua_3c:4c:d8 ARP 60 192.168.10.240 is at 00:1e:c9:ba:b4:3c Frame 11131: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11132 135.028441 192.168.10.80 192.168.10.255 BROWSER 243 Host Announcement KRAMBOXP, Workstation, Server, NT Workstation, Potential Browser Frame 11132: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: SunrichT_19:cf:b1 (00:0a:cd:19:cf:b1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.80 (192.168.10.80), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 11133 135.028655 192.168.10.80 192.168.10.255 BROWSER 243 Host Announcement KRAMBOXP, Workstation, Server, NT Workstation, Potential Browser Frame 11133: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: SunrichT_19:cf:b1 (00:0a:cd:19:cf:b1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.80 (192.168.10.80), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 11134 135.194008 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 11134: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11135 135.300409 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3836680448, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11135: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11136 135.300433 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3836680448, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11136: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11137 135.300446 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3836680448, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11137: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11138 135.300458 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3836680448, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11138: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11139 135.305564 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 4 Port 45 TTL = 120 Frame 11139: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 11140 135.315380 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 11140: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11141 135.318760 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1410859264, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11141: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11142 135.318778 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1410859264, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11142: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11143 135.318791 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1410859264, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11143: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11144 135.318802 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1410859264, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11144: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11145 135.443970 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 11145: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11146 135.452570 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 11146: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11147 135.452602 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 11147: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11148 135.566122 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 11148: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11149 135.886536 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 127.108.78.95.in-addr.arpa Frame 11149: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 63100 (63100), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 11150 135.967957 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 11150: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11151 135.967989 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 11151: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11152 136.125647 65.32.1.65 192.168.10.246 DNS 149 Standard query response PTR dynamicip-108-78-95-127.pppoe.chelny.ertelecom.ru Frame 11152: 149 bytes on wire (1192 bits), 149 bytes captured (1192 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 63100 (63100) Domain Name System (response) No. Time Source Destination Protocol Length Info 11153 136.178041 192.168.10.220 192.168.80.1 NBNS 343 Name query response NBSTAT Frame 11153: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.80.1 (192.168.80.1) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 11154 136.187394 7x.x.x.1 192.168.10.220 ICMP 70 Destination unreachable (Host unreachable) Frame 11154: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 7x.x.x.1 (7x.x.x.1), Dst: 192.168.10.220 (192.168.10.220) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 11155 136.252030 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 212.218.93.59.in-addr.arpa Frame 11155: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 49568 (49568), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 11156 136.316199 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3853457664, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11156: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11157 136.316223 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3853457664, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11157: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11158 136.316236 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3853457664, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11158: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11159 136.316249 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3853457664, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11159: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11160 136.334408 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1427636480, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11160: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11161 136.334430 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1427636480, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11161: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11162 136.334443 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1427636480, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11162: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11163 136.334455 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1427636480, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11163: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11164 136.437835 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 11164: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11165 136.437867 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 11165: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11166 136.530290 65.32.1.65 192.168.10.246 DNS 145 Standard query response, No such name Frame 11166: 145 bytes on wire (1160 bits), 145 bytes captured (1160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 49568 (49568) Domain Name System (response) No. Time Source Destination Protocol Length Info 11167 136.530811 192.168.10.203 59.93.218.212 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 11167: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 59.93.218.212 (59.93.218.212) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 11168 137.194142 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 11168: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11169 137.199367 WwPcbaTe_6d:76:3c Broadcast ARP 60 Who has 192.168.10.62? Tell 192.168.10.201 Frame 11169: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11170 137.199397 WwPcbaTe_6d:76:3c Broadcast ARP 60 Who has 192.168.10.62? Tell 192.168.10.201 Frame 11170: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11171 137.199411 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 11171: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11172 137.199426 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 11172: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11173 137.199443 WwPcbaTe_6d:76:3c Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.201 Frame 11173: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11174 137.199454 Watchgua_3c:4c:d8 WwPcbaTe_6d:76:3c ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 11174: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11175 137.223084 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 3 Port 47 TTL = 120 Frame 11175: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 11176 137.315518 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 11176: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11177 137.331727 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3870234880, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11177: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11178 137.331750 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3870234880, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11178: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11179 137.331762 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3870234880, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11179: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11180 137.331777 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3870234880, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11180: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11181 137.350010 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1444413696, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11181: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11182 137.350033 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1444413696, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11182: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11183 137.350045 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1444413696, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11183: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11184 137.350057 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1444413696, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11184: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11185 137.414693 202.1.166.13 192.168.10.207 TCP 62 omasgport > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 11185: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: omasgport (4090), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 11186 137.414762 192.168.10.207 202.1.166.13 TCP 62 smtp > omasgport [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 11186: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 202.1.166.13 (202.1.166.13) Transmission Control Protocol, Src Port: smtp (25), Dst Port: omasgport (4090), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 11187 137.443989 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 11187: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11188 137.450671 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 11188: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11189 137.450702 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 11189: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11190 137.566085 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 11190: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11191 137.591735 192.168.10.207 206.225.164.186 SMTP 306 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 11191: 306 bytes on wire (2448 bits), 306 bytes captured (2448 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10165, Ack: 771608, Len: 252 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11192 137.591772 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=772268 Ack=10417 Win=46720 Len=0 Frame 11192: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 772268, Ack: 10417, Len: 0 No. Time Source Destination Protocol Length Info 11193 137.591811 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=10417 Ack=771608 Win=0 Len=0 Frame 11193: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10417, Ack: 771608, Len: 0 No. Time Source Destination Protocol Length Info 11194 137.677993 192.168.10.220 192.168.80.1 NBNS 343 Name query response NBSTAT Frame 11194: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.80.1 (192.168.80.1) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 11195 137.687115 7x.x.x.1 192.168.10.220 ICMP 70 Destination unreachable (Host unreachable) Frame 11195: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 7x.x.x.1 (7x.x.x.1), Dst: 192.168.10.220 (192.168.10.220) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 11196 137.958630 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 11196: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11197 137.958660 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 11197: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11198 137.976392 192.168.10.217 4.2.2.2 DNS 77 Standard query TXT _nfsv4idmapdomain Frame 11198: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.217 (192.168.10.217), Dst: 4.2.2.2 (4.2.2.2) User Datagram Protocol, Src Port: 51165 (51165), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 11199 138.007207 4.2.2.2 192.168.10.217 DNS 152 Standard query response, No such name Frame 11199: 152 bytes on wire (1216 bits), 152 bytes captured (1216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Oracle_86:77:66 (00:14:4f:86:77:66) Internet Protocol Version 4, Src: 4.2.2.2 (4.2.2.2), Dst: 192.168.10.217 (192.168.10.217) User Datagram Protocol, Src Port: domain (53), Dst Port: 51165 (51165) Domain Name System (response) No. Time Source Destination Protocol Length Info 11200 138.029890 192.168.10.203 59.93.218.212 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 11200: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 59.93.218.212 (59.93.218.212) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 11201 138.211898 192.168.10.202 192.168.10.255 BROWSER 219 Request Announcement ICARUS Frame 11201: 219 bytes on wire (1752 bits), 219 bytes captured (1752 bits) Ethernet II, Src: WwPcbaTe_67:48:f0 (00:0f:1f:67:48:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.202 (192.168.10.202), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 11202 138.212037 192.168.10.202 192.168.10.255 BROWSER 219 Request Announcement ICARUS Frame 11202: 219 bytes on wire (1752 bits), 219 bytes captured (1752 bits) Ethernet II, Src: WwPcbaTe_67:48:f0 (00:0f:1f:67:48:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.202 (192.168.10.202), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 11203 138.212131 192.168.10.220 192.168.10.255 BROWSER 243 Local Master Announcement TITAN, Workstation, Server, Domain Controller, Time Source, Print Queue Server, NT Workstation, Master Browser, DFS server Frame 11203: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 11204 138.212225 192.168.10.220 192.168.10.255 BROWSER 243 Local Master Announcement TITAN, Workstation, Server, Domain Controller, Time Source, Print Queue Server, NT Workstation, Master Browser, DFS server Frame 11204: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 11205 138.212353 192.168.10.202 192.168.10.255 BROWSER 219 Request Announcement ICARUS Frame 11205: 219 bytes on wire (1752 bits), 219 bytes captured (1752 bits) Ethernet II, Src: WwPcbaTe_67:48:f0 (00:0f:1f:67:48:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.202 (192.168.10.202), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 11206 138.212434 192.168.10.202 192.168.10.255 BROWSER 219 Request Announcement ICARUS Frame 11206: 219 bytes on wire (1752 bits), 219 bytes captured (1752 bits) Ethernet II, Src: WwPcbaTe_67:48:f0 (00:0f:1f:67:48:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.202 (192.168.10.202), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 11207 138.212519 192.168.10.220 192.168.10.255 BROWSER 243 Local Master Announcement TITAN, Workstation, Server, Domain Controller, Time Source, Print Queue Server, NT Workstation, Master Browser, DFS server Frame 11207: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 11208 138.212602 192.168.10.220 192.168.10.255 BROWSER 243 Local Master Announcement TITAN, Workstation, Server, Domain Controller, Time Source, Print Queue Server, NT Workstation, Master Browser, DFS server Frame 11208: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 11209 138.347254 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3887012096, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11209: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11210 138.347270 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3887012096, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11210: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11211 138.347278 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3887012096, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11211: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11212 138.347286 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3887012096, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11212: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11213 138.365594 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1461190912, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11213: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11214 138.365602 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1461190912, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11214: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11215 138.365610 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1461190912, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11215: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11216 138.365617 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1461190912, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11216: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11217 138.505654 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=5881 Ack=391876 Win=16397 Len=0 Frame 11217: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5881, Ack: 391876, Len: 0 No. Time Source Destination Protocol Length Info 11218 138.505676 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 11217#1] smtp > 9428 [ACK] Seq=5881 Ack=391876 Win=16397 Len=0 Frame 11218: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5881, Ack: 391876, Len: 0 No. Time Source Destination Protocol Length Info 11219 138.505737 206.225.164.188 192.168.10.207 SMTP 1271 C: DATA fragment, 1217 bytes Frame 11219: 1271 bytes on wire (10168 bits), 1271 bytes captured (10168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 393191, Ack: 5881, Len: 1217 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11220 138.505755 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11220: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 394408, Ack: 5881, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11221 138.505774 206.225.164.188 192.168.10.207 SMTP 1361 C: DATA fragment, 1307 bytes Frame 11221: 1361 bytes on wire (10888 bits), 1361 bytes captured (10888 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 395788, Ack: 5881, Len: 1307 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11222 138.505790 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11222: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 397095, Ack: 5881, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11223 138.505807 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11223: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 398475, Ack: 5881, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11224 138.505824 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11224: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 399855, Ack: 5881, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11225 138.505843 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 11217#2] smtp > 9428 [ACK] Seq=5881 Ack=391876 Win=16397 Len=0 Frame 11225: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5881, Ack: 391876, Len: 0 No. Time Source Destination Protocol Length Info 11226 138.505897 192.168.10.207 206.225.164.188 SMTP 264 S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 11226: 264 bytes on wire (2112 bits), 264 bytes captured (2112 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 5881, Ack: 391876, Len: 210 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11227 138.505960 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=401235 Ack=6091 Win=46405 Len=0 Frame 11227: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 401235, Ack: 6091, Len: 0 No. Time Source Destination Protocol Length Info 11228 138.506001 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 11226#1] smtp > 9428 [ACK] Seq=6091 Ack=391876 Win=16397 Len=0 Frame 11228: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6091, Ack: 391876, Len: 0 No. Time Source Destination Protocol Length Info 11229 138.506043 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 11226#2] smtp > 9428 [ACK] Seq=6091 Ack=391876 Win=16397 Len=0 Frame 11229: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6091, Ack: 391876, Len: 0 No. Time Source Destination Protocol Length Info 11230 138.506096 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 11226#3] smtp > 9428 [ACK] Seq=6091 Ack=391876 Win=16397 Len=0 Frame 11230: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6091, Ack: 391876, Len: 0 No. Time Source Destination Protocol Length Info 11231 138.506136 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 11226#4] smtp > 9428 [ACK] Seq=6091 Ack=391876 Win=16397 Len=0 Frame 11231: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6091, Ack: 391876, Len: 0 No. Time Source Destination Protocol Length Info 11232 138.506153 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 11226#5] smtp > 9428 [ACK] Seq=6091 Ack=391876 Win=16397 Len=0 Frame 11232: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6091, Ack: 391876, Len: 0 No. Time Source Destination Protocol Length Info 11233 138.506170 206.225.164.188 192.168.10.207 SMTP 1369 [TCP Fast Retransmission] C: DATA fragment, 1315 bytes Frame 11233: 1369 bytes on wire (10952 bits), 1369 bytes captured (10952 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 391876, Ack: 6091, Len: 1315 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11234 138.506189 206.225.164.188 192.168.10.207 SMTP 1271 [TCP Out-Of-Order] C: DATA fragment, 1217 bytes Frame 11234: 1271 bytes on wire (10168 bits), 1271 bytes captured (10168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 393191, Ack: 6091, Len: 1217 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11235 138.506245 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11235: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 401235, Ack: 6091, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11236 138.506264 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11236: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 402615, Ack: 6091, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11237 138.506311 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=6091 Ack=401235 Win=7038 Len=0 Frame 11237: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6091, Ack: 401235, Len: 0 No. Time Source Destination Protocol Length Info 11238 138.506363 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=6091 Ack=403995 Win=4278 Len=0 Frame 11238: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6091, Ack: 403995, Len: 0 No. Time Source Destination Protocol Length Info 11239 138.506397 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11239: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 403995, Ack: 6091, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11240 138.506441 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11240: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 405375, Ack: 6091, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11241 138.506460 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11241: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 406755, Ack: 6091, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11242 138.506478 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11242: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 408135, Ack: 6091, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11243 138.506511 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=6091 Ack=406755 Win=1518 Len=0 Frame 11243: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6091, Ack: 406755, Len: 0 No. Time Source Destination Protocol Length Info 11244 138.506617 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=6091 Ack=408273 Win=0 Len=0 Frame 11244: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6091, Ack: 408273, Len: 0 No. Time Source Destination Protocol Length Info 11245 138.621810 202.1.166.13 192.168.10.207 TCP 60 omasgport > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 11245: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: omasgport (4090), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 11246 138.621945 192.168.10.1 192.168.10.245 Syslog 202 LOCAL1.INFO: Oct 3 19:46:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 202.1.166.13 7x.x.x.3 4090 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 11246: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:46:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 202.1.166.13 7x.x.x.3 4090 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 11247 138.621979 192.168.10.207 202.1.166.13 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:46:11 -0400 Frame 11247: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 202.1.166.13 (202.1.166.13) Transmission Control Protocol, Src Port: smtp (25), Dst Port: omasgport (4090), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11248 138.622012 202.1.166.13 192.168.10.207 TCP 60 omasgport > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 11248: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: omasgport (4090), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 11249 138.901183 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 11249: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11250 138.901215 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 11250: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11251 138.995112 206.225.164.186 192.168.10.207 TCP 60 [TCP Dup ACK 11192#1] 23308 > smtp [ACK] Seq=772268 Ack=10417 Win=46720 Len=0 Frame 11251: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 772268, Ack: 10417, Len: 0 No. Time Source Destination Protocol Length Info 11252 138.995149 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=10417 Ack=771608 Win=0 Len=0 Frame 11252: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10417, Ack: 771608, Len: 0 No. Time Source Destination Protocol Length Info 11253 139.194003 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 11253: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11254 139.295614 192.168.10.134 192.168.10.255 BROWSER 243 Host Announcement AUDITSTATION4, Workstation, Server, NT Workstation, Potential Browser Frame 11254: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Intel_86:19:1f (00:11:11:86:19:1f), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.134 (192.168.10.134), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 11255 139.295822 192.168.10.134 192.168.10.255 BROWSER 243 Host Announcement AUDITSTATION4, Workstation, Server, NT Workstation, Potential Browser Frame 11255: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Intel_86:19:1f (00:11:11:86:19:1f), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.134 (192.168.10.134), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 11256 139.315426 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 11256: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11257 139.362840 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3903789312, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11257: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11258 139.362861 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3903789312, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11258: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11259 139.362874 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3903789312, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11259: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11260 139.362886 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3903789312, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11260: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11261 139.381292 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1477968128, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11261: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11262 139.381305 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1477968128, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11262: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11263 139.381317 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1477968128, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11263: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11264 139.381329 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1477968128, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11264: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11265 139.443685 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 11265: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11266 139.456277 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 11266: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11267 139.456298 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 11267: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11268 139.515572 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 11268: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6091, Ack: 408273, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11269 139.515594 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=409515 Ack=6133 Win=46384 Len=0 Frame 11269: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 409515, Ack: 6133, Len: 0 No. Time Source Destination Protocol Length Info 11270 139.515641 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=6133 Ack=408273 Win=0 Len=0 Frame 11270: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6133, Ack: 408273, Len: 0 No. Time Source Destination Protocol Length Info 11271 139.529748 192.168.10.203 59.93.218.212 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 11271: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 59.93.218.212 (59.93.218.212) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 11272 139.566034 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 11272: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11273 139.589248 202.1.166.13 192.168.10.207 SMTP 92 C: HELO hon-adsl-166-013.telekom.net.sb Frame 11273: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: omasgport (4090), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 38 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11274 139.589358 192.168.10.207 202.1.166.13 SMTP 101 S: 250 mail.mydomain.com Hello [202.1.166.13] Frame 11274: 101 bytes on wire (808 bits), 101 bytes captured (808 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 202.1.166.13 (202.1.166.13) Transmission Control Protocol, Src Port: smtp (25), Dst Port: omasgport (4090), Seq: 122, Ack: 39, Len: 47 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11275 139.589424 202.1.166.13 192.168.10.207 TCP 60 omasgport > smtp [ACK] Seq=39 Ack=169 Win=93272 Len=0 Frame 11275: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: omasgport (4090), Dst Port: smtp (25), Seq: 39, Ack: 169, Len: 0 No. Time Source Destination Protocol Length Info 11276 139.642908 192.168.10.220 202.12.28.140 DNS 85 Standard query PTR 51.110.94.77.in-addr.arpa Frame 11276: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 202.12.28.140 (202.12.28.140) User Datagram Protocol, Src Port: 61948 (61948), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 11277 139.828607 202.12.28.140 192.168.10.220 DNS 149 Standard query response Frame 11277: 149 bytes on wire (1192 bits), 149 bytes captured (1192 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 202.12.28.140 (202.12.28.140), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 61948 (61948) Domain Name System (response) No. Time Source Destination Protocol Length Info 11278 139.828679 192.168.10.220 83.174.192.227 DNS 85 Standard query PTR 51.110.94.77.in-addr.arpa Frame 11278: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 83.174.192.227 (83.174.192.227) User Datagram Protocol, Src Port: 60831 (60831), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 11279 139.843750 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-15.geo.kaspersky.com Frame 11279: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 58884 (58884), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 11280 139.880811 192.168.10.104 192.168.10.255 BROWSER 255 Domain/Workgroup Announcement WORKGROUP, NT Workstation, Domain Enum Frame 11280: 255 bytes on wire (2040 bits), 255 bytes captured (2040 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 11281 139.957037 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 11281: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11282 139.957066 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 11282: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11283 140.023109 83.174.192.227 192.168.10.220 DNS 229 Standard query response PTR h77-94-110-51.dyn.bashtel.ru Frame 11283: 229 bytes on wire (1832 bits), 229 bytes captured (1832 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 83.174.192.227 (83.174.192.227), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 60831 (60831) Domain Name System (response) No. Time Source Destination Protocol Length Info 11284 140.080536 192.168.10.226 192.168.10.67 ICMP 60 Echo (ping) request id=0x0400, seq=22257/61782, ttl=128 Frame 11284: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.67 (192.168.10.67) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 11285 140.080555 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 11285: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11286 140.080580 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 11286: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11287 140.080614 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 11287: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11288 140.080623 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 11288: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11289 140.080687 192.168.10.67 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=22257/61782, ttl=128 Frame 11289: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.67 (192.168.10.67), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 11290 140.080870 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 11290: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11291 140.080884 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 11291: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11292 140.080894 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 11292: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11293 140.080904 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 11293: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11294 140.080914 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 11294: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11295 140.080924 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 11295: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11296 140.080936 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 11296: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11297 140.080947 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 11297: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11298 140.080957 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 11298: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11299 140.080967 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 11299: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11300 140.080995 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 11300: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11301 140.081005 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 11301: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11302 140.081014 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 11302: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11303 140.081039 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 11303: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11304 140.081049 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 11304: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11305 140.081060 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 11305: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11306 140.081070 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 11306: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11307 140.081166 192.168.10.233 192.168.10.245 Syslog 178 LOCAL4.WARNING: :Oct 03 19:38:25 EDT: %PIX-session-4-405001: Received ARP request collision from 192.168.10.226/0026.b952.f0f3 on interface Inside\n Frame 11307: 178 bytes on wire (1424 bits), 178 bytes captured (1424 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.233 (192.168.10.233), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: :Oct 03 19:38:25 EDT: %PIX-session-4-405001: Received ARP request collision from 192.168.10.226/0026.b952.f0f3 on interface Inside\n No. Time Source Destination Protocol Length Info 11308 140.081178 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 11308: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11309 140.081189 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 11309: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11310 140.081198 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 11310: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11311 140.081218 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 11311: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11312 140.081229 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 11312: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11313 140.081239 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 11313: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11314 140.081250 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 11314: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11315 140.081260 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 11315: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11316 140.081270 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 11316: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11317 140.081280 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 11317: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11318 140.081290 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 11318: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11319 140.081300 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 11319: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11320 140.081318 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 11320: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11321 140.081329 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 11321: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11322 140.081339 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 11322: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11323 140.081349 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 11323: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11324 140.081359 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 11324: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11325 140.081370 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 11325: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11326 140.081380 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 11326: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11327 140.081390 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 11327: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11328 140.081411 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 11328: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11329 140.081417 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 11329: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11330 140.081423 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 11330: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11331 140.081430 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 11331: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11332 140.081438 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.69? Tell 192.168.10.226 Frame 11332: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11333 140.081448 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.69? Tell 192.168.10.226 Frame 11333: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11334 140.081547 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 11334: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11335 140.081555 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 11335: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11336 140.081562 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 11336: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11337 140.081569 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 11337: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11338 140.081576 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 11338: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11339 140.081582 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 11339: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11340 140.081589 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 11340: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11341 140.081811 192.168.10.226 192.168.10.67 ICMP 60 Echo (ping) request id=0x0400, seq=27121/61801, ttl=128 Frame 11341: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.67 (192.168.10.67) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 11342 140.081858 192.168.10.67 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=27121/61801, ttl=128 Frame 11342: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Internet Protocol Version 4, Src: 192.168.10.67 (192.168.10.67), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 11343 140.081869 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 11343: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11344 140.081879 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 11344: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11345 140.081895 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 11345: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11346 140.081906 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 11346: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11347 140.081930 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 11347: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11348 140.081940 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 11348: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11349 140.081949 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 11349: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11350 140.081974 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 11350: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11351 140.081984 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 11351: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11352 140.081994 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 11352: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11353 140.082004 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 11353: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11354 140.082014 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 11354: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11355 140.082024 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 11355: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11356 140.082035 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 11356: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11357 140.082045 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 11357: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11358 140.082063 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 11358: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11359 140.082069 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 11359: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11360 140.082076 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 11360: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11361 140.082081 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 11361: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11362 140.082088 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 11362: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11363 140.082094 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 11363: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11364 140.082100 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 11364: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11365 140.082107 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 11365: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11366 140.082113 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 11366: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11367 140.082119 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 11367: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11368 140.082130 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 11368: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11369 140.082137 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 11369: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11370 140.082143 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 11370: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11371 140.082149 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 11371: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11372 140.082156 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 11372: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11373 140.082162 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 11373: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11374 140.082168 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 11374: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11375 140.082175 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 11375: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11376 140.082181 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 11376: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11377 140.082188 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 11377: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11378 140.082195 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.55? Tell 192.168.10.226 Frame 11378: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11379 140.082204 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.55? Tell 192.168.10.226 Frame 11379: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11380 140.082212 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.108? Tell 192.168.10.226 Frame 11380: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11381 140.082220 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.108? Tell 192.168.10.226 Frame 11381: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11382 140.082267 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 11382: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11383 140.082358 192.168.10.46 192.168.10.245 Syslog 214 LOCAL4.WARNING: Oct 03 2011 19:17:20 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n Frame 11383: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:17:20 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n No. Time Source Destination Protocol Length Info 11384 140.082367 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 11384: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11385 140.082373 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 11385: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11386 140.082380 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 11386: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11387 140.082386 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 11387: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11388 140.082394 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 11388: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11389 140.082400 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 11389: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11390 140.082418 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 11390: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11391 140.082473 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 11391: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11392 140.082480 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 11392: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11393 140.082505 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 11393: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11394 140.082513 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 11394: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11395 140.082528 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 11395: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11396 140.082535 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 11396: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11397 140.082540 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 11397: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11398 140.082555 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 11398: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11399 140.082561 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 11399: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11400 140.082568 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 11400: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11401 140.082574 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 11401: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11402 140.082584 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 11402: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11403 140.082590 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 11403: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11404 140.082729 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 11404: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11405 140.082736 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 11405: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11406 140.082744 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 11406: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11407 140.082751 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 11407: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11408 140.082773 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 11408: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11409 140.082779 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 11409: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11410 140.082785 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 11410: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11411 140.082792 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 11411: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11412 140.082800 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 11412: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11413 140.082806 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 11413: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11414 140.082812 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 11414: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11415 140.082818 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 11415: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11416 140.082826 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 11416: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11417 140.082833 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 11417: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11418 140.082839 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 11418: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11419 140.082859 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 11419: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11420 140.082882 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 11420: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11421 140.082889 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 11421: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11422 140.082914 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 11422: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11423 140.082921 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 11423: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11424 140.082929 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 11424: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11425 140.083075 192.168.10.226 192.168.10.67 ICMP 60 Echo (ping) request id=0x0400, seq=31985/61820, ttl=128 Frame 11425: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.67 (192.168.10.67) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 11426 140.083104 192.168.10.67 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=31985/61820, ttl=128 Frame 11426: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.67 (192.168.10.67), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 11427 140.083145 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 11427: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11428 140.299297 202.1.166.13 192.168.10.207 SMTP 96 C: MAIL FROM: <ebsprinkler@xxxxxxxxxxxx> Frame 11428: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: omasgport (4090), Dst Port: smtp (25), Seq: 39, Ack: 169, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11429 140.299919 192.168.10.207 202.1.166.13 SMTP 106 S: 250 2.1.0 [email protected] OK Frame 11429: 106 bytes on wire (848 bits), 106 bytes captured (848 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 202.1.166.13 (202.1.166.13) Transmission Control Protocol, Src Port: smtp (25), Dst Port: omasgport (4090), Seq: 169, Ack: 81, Len: 52 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11430 140.299959 202.1.166.13 192.168.10.207 TCP 60 omasgport > smtp [ACK] Seq=81 Ack=221 Win=93220 Len=0 Frame 11430: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: omasgport (4090), Dst Port: smtp (25), Seq: 81, Ack: 221, Len: 0 No. Time Source Destination Protocol Length Info 11431 140.378479 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3920566528, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11431: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11432 140.378502 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3920566528, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11432: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11433 140.378514 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3920566528, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11433: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11434 140.378527 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3920566528, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11434: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11435 140.396809 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1494745344, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11435: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11436 140.396823 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1494745344, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11436: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11437 140.396831 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1494745344, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11437: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11438 140.396838 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1494745344, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11438: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11439 140.406917 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 11439: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11440 140.406938 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 11440: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11441 140.443253 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 11441: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11442 140.443270 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 11442: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11443 140.843286 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-15.geo.kaspersky.com Frame 11443: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 58884 (58884), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 11444 141.196834 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 11444: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11445 141.241996 192.168.10.1 192.168.10.245 Syslog 308 LOCAL1.INFO: Oct 3 19:46:39 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 202.1.166.13 7x.x.x.3 4090 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="ebsprinkler@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 11445: 308 bytes on wire (2464 bits), 308 bytes captured (2464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:46:39 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 202.1.166.13 7x.x.x.3 4090 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" No. Time Source Destination Protocol Length Info 11446 141.251320 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.69? Tell 192.168.10.226 Frame 11446: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11447 141.251349 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.69? Tell 192.168.10.226 Frame 11447: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11448 141.251367 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 11448: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11449 141.251377 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 11449: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11450 141.251387 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 11450: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11451 141.251400 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 11451: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11452 141.251411 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 11452: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11453 141.251421 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 11453: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11454 141.251433 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 11454: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11455 141.251443 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 11455: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11456 141.251454 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 11456: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11457 141.251468 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 11457: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11458 141.251506 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 11458: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11459 141.251516 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 11459: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11460 141.251543 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 11460: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11461 141.251554 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 11461: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11462 141.251564 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 11462: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11463 141.251575 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 11463: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11464 141.251595 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 11464: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11465 141.251602 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 11465: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11466 141.251608 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 11466: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11467 141.251614 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 11467: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11468 141.251621 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 11468: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11469 141.251627 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 11469: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11470 141.251633 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 11470: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11471 141.251639 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 11471: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11472 141.251645 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 11472: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11473 141.251652 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 11473: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11474 141.251658 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 11474: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11475 141.251664 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 11475: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11476 141.251675 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 11476: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11477 141.251681 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 11477: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11478 141.251687 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 11478: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11479 141.251694 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 11479: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11480 141.251700 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 11480: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11481 141.251706 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 11481: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11482 141.251713 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 11482: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11483 141.251719 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 11483: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11484 141.251725 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 11484: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11485 141.251731 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 11485: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11486 141.251737 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 11486: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11487 141.251744 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 11487: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11488 141.251750 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 11488: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11489 141.252090 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 11489: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11490 141.267615 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 156.23.195.67.in-addr.arpa Frame 11490: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 55819 (55819), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 11491 141.308450 65.32.1.65 192.168.10.246 DNS 132 Standard query response PTR n3-vm0.bullet.mail.gq1.yahoo.com Frame 11491: 132 bytes on wire (1056 bits), 132 bytes captured (1056 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 55819 (55819) Domain Name System (response) No. Time Source Destination Protocol Length Info 11492 141.315440 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 11492: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11493 141.335909 192.168.10.246 65.32.1.65 DNS 87 Standard query PTR 133.67.161.122.in-addr.arpa Frame 11493: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 65129 (65129), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 11494 141.394070 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3937343744, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11494: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11495 141.394090 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3937343744, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11495: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11496 141.394103 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3937343744, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11496: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11497 141.394115 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3937343744, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11497: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11498 141.412449 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1511522560, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11498: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11499 141.412465 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1511522560, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11499: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11500 141.412477 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1511522560, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11500: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11501 141.412489 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1511522560, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11501: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11502 141.443697 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 11502: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11503 141.447351 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 11503: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11504 141.447371 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 11504: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11505 141.459954 192.168.10.220 192.168.47.1 NBNS 343 Name query response NBSTAT Frame 11505: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.47.1 (192.168.47.1) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 11506 141.469580 7x.x.x.1 192.168.10.220 ICMP 70 Destination unreachable (Host unreachable) Frame 11506: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 7x.x.x.1 (7x.x.x.1), Dst: 192.168.10.220 (192.168.10.220) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 11507 141.520541 95.86.26.108 192.168.10.207 TCP 62 16322 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 11507: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 95.86.26.108 (95.86.26.108), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 16322 (16322), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 11508 141.520605 192.168.10.207 95.86.26.108 TCP 62 smtp > 16322 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 11508: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 95.86.26.108 (95.86.26.108) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 16322 (16322), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 11509 141.526734 Dell_98:1d:d9 Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.5 Frame 11509: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:d9 (00:19:b9:98:1d:d9), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11510 141.527043 Dell_98:1d:d9 Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.5 Frame 11510: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:d9 (00:19:b9:98:1d:d9), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11511 141.566200 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 11511: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11512 141.661976 65.32.1.65 192.168.10.246 DNS 153 Standard query response PTR ABTS-North-Dynamic-133.67.161.122.airtelbroadband.in Frame 11512: 153 bytes on wire (1224 bits), 153 bytes captured (1224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 65129 (65129) Domain Name System (response) No. Time Source Destination Protocol Length Info 11513 141.695002 95.86.26.108 192.168.10.207 TCP 60 16322 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 11513: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 95.86.26.108 (95.86.26.108), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 16322 (16322), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 11514 141.695085 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:46:39 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 95.86.26.108 7x.x.x.3 16322 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 11514: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:46:39 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 95.86.26.108 7x.x.x.3 16322 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 11515 141.695351 192.168.10.207 95.86.26.108 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:46:14 -0400 Frame 11515: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 95.86.26.108 (95.86.26.108) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 16322 (16322), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11516 141.695388 95.86.26.108 192.168.10.207 TCP 60 16322 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 11516: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 95.86.26.108 (95.86.26.108), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 16322 (16322), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 11517 141.782488 192.168.10.246 65.32.1.65 DNS 83 Standard query PTR 58.18.19.8.in-addr.arpa Frame 11517: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 49265 (49265), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 11518 141.843281 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-15.geo.kaspersky.com Frame 11518: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 58884 (58884), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 11519 141.849119 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.123? Tell 192.168.10.246 Frame 11519: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11520 141.849143 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.123? Tell 192.168.10.246 Frame 11520: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11521 141.856874 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.123? Tell 192.168.10.220 Frame 11521: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11522 141.856890 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.123? Tell 192.168.10.220 Frame 11522: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11523 141.856904 Dell_ad:25:f8 Intel_38:8d:0a ARP 64 Who has 192.168.10.66? Tell 192.168.10.220 Frame 11523: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11524 141.856915 Dell_ad:25:f8 Intel_89:5e:11 ARP 64 Who has 192.168.10.65? Tell 192.168.10.220 Frame 11524: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11525 141.856925 Intel_38:8d:0a Dell_ad:25:f6 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 11525: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11526 141.856935 Intel_89:5e:11 Dell_ad:25:f8 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 11526: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11527 141.856945 Dell_ad:25:f8 Intel_a5:f5:5b ARP 64 Who has 192.168.10.131? Tell 192.168.10.220 Frame 11527: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11528 141.856955 Dell_ad:25:f8 Intel_38:8c:64 ARP 64 Who has 192.168.10.67? Tell 192.168.10.220 Frame 11528: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11529 141.856966 Dell_ad:25:f8 Intel_02:0e:6d ARP 64 Who has 192.168.10.128? Tell 192.168.10.220 Frame 11529: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11530 141.856976 Intel_a5:f5:5b Dell_ad:25:f8 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 11530: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11531 141.856986 Dell_ad:25:f8 IntelCor_d3:4e:80 ARP 64 Who has 192.168.10.70? Tell 192.168.10.220 Frame 11531: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11532 141.857007 Intel_38:8c:64 Dell_ad:25:f6 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 11532: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11533 141.857013 Dell_ad:25:f8 Intel_d0:7a:8f ARP 64 Who has 192.168.10.68? Tell 192.168.10.220 Frame 11533: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11534 141.857019 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.233? Tell 192.168.10.220 Frame 11534: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11535 141.857026 Intel_02:0e:6d Dell_ad:25:f6 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 11535: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11536 141.857032 IntelCor_d3:4e:80 Dell_ad:25:f8 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 11536: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11537 141.857038 Dell_ad:25:f8 Intel_56:83:a5 ARP 64 Who has 192.168.10.59? Tell 192.168.10.220 Frame 11537: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11538 141.857044 Dell_ad:25:f8 Intel_38:8c:b1 ARP 64 Who has 192.168.10.138? Tell 192.168.10.220 Frame 11538: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11539 141.857050 Intel_d0:7a:8f Dell_ad:25:f8 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 11539: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11540 141.857057 Dell_ad:25:f8 Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.220 Frame 11540: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11541 141.857065 Intel_56:83:a5 Dell_ad:25:f6 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 11541: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11542 141.857072 Intel_38:8c:b1 Dell_ad:25:f6 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 11542: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11543 141.857078 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 11543: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11544 141.857084 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 11544: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11545 141.869439 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.34? Tell 192.168.10.220 Frame 11545: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11546 141.869455 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.34? Tell 192.168.10.220 Frame 11546: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11547 141.869469 Dell_ad:25:f8 Intel_38:8d:0a ARP 64 Who has 192.168.10.66? Tell 192.168.10.220 Frame 11547: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11548 141.869479 Dell_ad:25:f8 Intel_89:5e:11 ARP 64 Who has 192.168.10.65? Tell 192.168.10.220 Frame 11548: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11549 141.869489 Intel_38:8d:0a Dell_ad:25:f6 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 11549: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11550 141.869499 Intel_89:5e:11 Dell_ad:25:f8 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 11550: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11551 141.869509 Dell_ad:25:f8 Intel_a5:f5:5b ARP 64 Who has 192.168.10.131? Tell 192.168.10.220 Frame 11551: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11552 141.869520 Dell_ad:25:f8 Intel_38:8c:64 ARP 64 Who has 192.168.10.67? Tell 192.168.10.220 Frame 11552: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11553 141.869534 Dell_ad:25:f8 Intel_02:0e:6d ARP 64 Who has 192.168.10.128? Tell 192.168.10.220 Frame 11553: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11554 141.869544 Intel_a5:f5:5b Dell_ad:25:f8 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 11554: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11555 141.869554 Intel_38:8c:64 Dell_ad:25:f6 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 11555: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11556 141.869565 Dell_ad:25:f8 IntelCor_d3:4e:80 ARP 64 Who has 192.168.10.70? Tell 192.168.10.220 Frame 11556: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11557 141.869575 Intel_02:0e:6d Dell_ad:25:f6 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 11557: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11558 141.869584 Dell_ad:25:f8 Intel_d0:7a:8f ARP 64 Who has 192.168.10.68? Tell 192.168.10.220 Frame 11558: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11559 141.869595 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.233? Tell 192.168.10.220 Frame 11559: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11560 141.869604 IntelCor_d3:4e:80 Dell_ad:25:f8 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 11560: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11561 141.869615 Dell_ad:25:f8 Intel_56:83:a5 ARP 64 Who has 192.168.10.59? Tell 192.168.10.220 Frame 11561: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11562 141.869625 Dell_ad:25:f8 Intel_38:8c:b1 ARP 64 Who has 192.168.10.138? Tell 192.168.10.220 Frame 11562: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11563 141.869637 Intel_d0:7a:8f Dell_ad:25:f8 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 11563: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11564 141.869648 Dell_ad:25:f8 Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.220 Frame 11564: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11565 141.869658 Intel_56:83:a5 Dell_ad:25:f6 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 11565: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11566 141.869668 Intel_38:8c:b1 Dell_ad:25:f6 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 11566: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11567 141.869678 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 11567: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11568 141.869688 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 11568: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11569 141.870403 95.86.26.108 192.168.10.207 SMTP 76 C: HELO boskovi-b5fe03b Frame 11569: 76 bytes on wire (608 bits), 76 bytes captured (608 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 95.86.26.108 (95.86.26.108), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 16322 (16322), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 22 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11570 141.870533 192.168.10.207 95.86.26.108 SMTP 101 S: 250 mail.mydomain.com Hello [95.86.26.108] Frame 11570: 101 bytes on wire (808 bits), 101 bytes captured (808 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 95.86.26.108 (95.86.26.108) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 16322 (16322), Seq: 122, Ack: 23, Len: 47 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11571 141.870721 95.86.26.108 192.168.10.207 TCP 60 16322 > smtp [ACK] Seq=23 Ack=169 Win=93272 Len=0 Frame 11571: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 95.86.26.108 (95.86.26.108), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 16322 (16322), Dst Port: smtp (25), Seq: 23, Ack: 169, Len: 0 No. Time Source Destination Protocol Length Info 11572 141.940048 Dell_44:d0:a0 Broadcast ARP 60 Gratuitous ARP for 192.168.0.120 (Reply) Frame 11572: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:a0 (84:2b:2b:44:d0:a0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply/gratuitous ARP) No. Time Source Destination Protocol Length Info 11573 141.940073 Dell_44:d0:a0 Broadcast ARP 60 Gratuitous ARP for 192.168.0.120 (Reply) Frame 11573: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:a0 (84:2b:2b:44:d0:a0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply/gratuitous ARP) No. Time Source Destination Protocol Length Info 11574 141.962458 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 11574: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11575 141.962478 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 11575: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11576 141.978604 65.32.1.65 192.168.10.246 DNS 146 Standard query response, No such name Frame 11576: 146 bytes on wire (1168 bits), 146 bytes captured (1168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 49265 (49265) Domain Name System (response) No. Time Source Destination Protocol Length Info 11577 141.979373 192.168.10.203 8.19.18.58 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 11577: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 8.19.18.58 (8.19.18.58) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 11578 142.024234 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 4 Port 48 TTL = 120 Frame 11578: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 11579 142.045595 95.86.26.108 192.168.10.207 SMTP 92 C: MAIL FROM: <upzwant@xxxxxxxxxxxx> Frame 11579: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 95.86.26.108 (95.86.26.108), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 16322 (16322), Dst Port: smtp (25), Seq: 23, Ack: 169, Len: 38 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11580 142.045911 192.168.10.207 95.86.26.108 SMTP 102 S: 250 2.1.0 [email protected] OK Frame 11580: 102 bytes on wire (816 bits), 102 bytes captured (816 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 95.86.26.108 (95.86.26.108) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 16322 (16322), Seq: 169, Ack: 61, Len: 48 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11581 142.045951 95.86.26.108 192.168.10.207 TCP 60 16322 > smtp [ACK] Seq=61 Ack=217 Win=93224 Len=0 Frame 11581: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 95.86.26.108 (95.86.26.108), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 16322 (16322), Dst Port: smtp (25), Seq: 61, Ack: 217, Len: 0 No. Time Source Destination Protocol Length Info 11582 142.049568 202.1.166.13 192.168.10.207 TCP 60 omasgport > smtp [FIN, ACK] Seq=81 Ack=221 Win=93220 Len=0 Frame 11582: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: omasgport (4090), Dst Port: smtp (25), Seq: 81, Ack: 221, Len: 0 No. Time Source Destination Protocol Length Info 11583 142.049627 192.168.10.207 202.1.166.13 TCP 60 smtp > omasgport [ACK] Seq=221 Ack=82 Win=65455 Len=0 Frame 11583: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 202.1.166.13 (202.1.166.13) Transmission Control Protocol, Src Port: smtp (25), Dst Port: omasgport (4090), Seq: 221, Ack: 82, Len: 0 No. Time Source Destination Protocol Length Info 11584 142.049789 192.168.10.207 202.1.166.13 TCP 60 smtp > omasgport [FIN, ACK] Seq=221 Ack=82 Win=65455 Len=0 Frame 11584: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 202.1.166.13 (202.1.166.13) Transmission Control Protocol, Src Port: smtp (25), Dst Port: omasgport (4090), Seq: 221, Ack: 82, Len: 0 No. Time Source Destination Protocol Length Info 11585 142.049824 202.1.166.13 192.168.10.207 TCP 60 omasgport > smtp [ACK] Seq=82 Ack=222 Win=93220 Len=0 Frame 11585: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 202.1.166.13 (202.1.166.13), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: omasgport (4090), Dst Port: smtp (25), Seq: 82, Ack: 222, Len: 0 No. Time Source Destination Protocol Length Info 11586 142.050055 192.168.10.1 192.168.10.245 Syslog 200 LOCAL1.INFO: Oct 3 19:46:40 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 202.1.166.13 7x.x.x.3 4090 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 11586: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:46:40 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 202.1.166.13 7x.x.x.3 4090 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 11587 142.050383 8.19.18.58 192.168.10.203 ICMP 70 Destination unreachable (Port unreachable) Frame 11587: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 8.19.18.58 (8.19.18.58), Dst: 192.168.10.203 (192.168.10.203) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 11588 142.054194 192.168.10.30 192.168.10.255 UDP 675 Source port: 34427 Destination port: apc-3052 Frame 11588: 675 bytes on wire (5400 bits), 675 bytes captured (5400 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (633 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 44 54 3d 31 30 .168.10.30.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 31 38 3a 34 /03/2011.TM=18:4 0040 36 3a 31 37 0a 53 52 3d 31 42 0a 53 55 3d 37 42 6:17.SR=1B.SU=7B 0050 31 33 32 33 32 41 0a 52 44 3d 41 43 38 33 0a 54 13232A.RD=AC83.T 0060 41 3d 31 39 32 2e 31 36 38 2e 31 30 2e 32 35 35 A=192.168.10.255 0070 0a 50 54 3d 33 30 35 32 0a 43 4c 3d 43 30 41 38 .PT=3052.CL=C0A8 0080 30 41 44 42 0a 43 4c 3d 43 30 41 38 30 41 44 30 0ADB.CL=C0A80AD0 0090 0a 43 4c 3d 43 30 41 38 30 41 43 42 0a 43 4c 3d .CL=C0A80ACB.CL= 00a0 43 30 41 38 30 41 43 43 0a 43 4c 3d 43 30 41 38 C0A80ACC.CL=C0A8 00b0 30 41 43 45 0a 43 4c 3d 43 30 41 38 30 41 44 43 0ACE.CL=C0A80ADC 00c0 0a 43 4c 3d 43 30 41 38 30 41 43 46 0a 43 4c 3d .CL=C0A80ACF.CL= 00d0 43 30 41 38 30 41 43 44 0a 43 4c 3d 43 30 41 38 C0A80ACD.CL=C0A8 00e0 30 41 46 30 0a 43 4c 3d 43 30 41 38 30 41 43 39 0AF0.CL=C0A80AC9 00f0 0a 43 4c 3d 43 30 41 38 30 41 31 30 0a 43 4c 3d .CL=C0A80A10.CL= 0100 43 30 41 38 30 41 30 44 0a 43 4c 3d 43 30 41 38 C0A80A0D.CL=C0A8 0110 30 41 30 46 0a 43 4c 3d 43 30 41 38 30 41 30 43 0A0F.CL=C0A80A0C 0120 0a 43 4c 3d 43 30 41 38 30 41 44 31 0a 43 4c 3d .CL=C0A80AD1.CL= 0130 43 30 41 38 30 41 43 41 0a 43 4c 3d 43 30 41 38 C0A80ACA.CL=C0A8 0140 30 41 46 41 0a 43 4c 3d 43 30 41 38 30 41 44 38 0AFA.CL=C0A80AD8 0150 0a 43 4c 3d 43 30 41 38 30 41 32 37 0a 43 4c 3d .CL=C0A80A27.CL= 0160 43 30 41 38 30 41 44 39 0a 43 4c 3d 43 30 41 38 C0A80AD9.CL=C0A8 0170 30 41 44 33 0a 43 4c 3d 43 30 41 38 30 41 44 32 0AD3.CL=C0A80AD2 0180 0a 43 4c 3d 43 30 41 38 30 41 45 32 0a 43 4c 3d .CL=C0A80AE2.CL= 0190 43 30 41 38 30 41 45 33 0a 43 4c 3d 43 30 41 38 C0A80AE3.CL=C0A8 01a0 30 41 44 45 0a 43 4c 3d 43 30 41 38 31 34 30 33 0ADE.CL=C0A81403 01b0 0a 43 4c 3d 43 30 41 38 30 41 46 36 0a 43 4c 3d .CL=C0A80AF6.CL= 01c0 43 30 41 38 30 41 31 31 0a 43 4c 3d 30 30 0a 43 C0A80A11.CL=00.C 01d0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01e0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01f0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0200 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0210 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0220 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0230 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0240 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 4d 44 3d .CL=00.CL=00.MD= 0250 38 38 62 30 33 32 30 32 30 39 61 35 65 63 37 30 88b0320209a5ec70 0260 32 63 38 61 64 63 63 65 65 38 65 31 36 64 34 64 2c8adccee8e16d4d 0270 0a 3c 2f 42 4f 44 59 3e 0a .</BODY>. No. Time Source Destination Protocol Length Info 11589 142.054330 192.168.10.30 192.168.10.255 UDP 675 Source port: 34427 Destination port: apc-3052 Frame 11589: 675 bytes on wire (5400 bits), 675 bytes captured (5400 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (633 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 44 54 3d 31 30 .168.10.30.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 31 38 3a 34 /03/2011.TM=18:4 0040 36 3a 31 37 0a 53 52 3d 31 42 0a 53 55 3d 37 42 6:17.SR=1B.SU=7B 0050 31 33 32 33 32 41 0a 52 44 3d 41 43 38 33 0a 54 13232A.RD=AC83.T 0060 41 3d 31 39 32 2e 31 36 38 2e 31 30 2e 32 35 35 A=192.168.10.255 0070 0a 50 54 3d 33 30 35 32 0a 43 4c 3d 43 30 41 38 .PT=3052.CL=C0A8 0080 30 41 44 42 0a 43 4c 3d 43 30 41 38 30 41 44 30 0ADB.CL=C0A80AD0 0090 0a 43 4c 3d 43 30 41 38 30 41 43 42 0a 43 4c 3d .CL=C0A80ACB.CL= 00a0 43 30 41 38 30 41 43 43 0a 43 4c 3d 43 30 41 38 C0A80ACC.CL=C0A8 00b0 30 41 43 45 0a 43 4c 3d 43 30 41 38 30 41 44 43 0ACE.CL=C0A80ADC 00c0 0a 43 4c 3d 43 30 41 38 30 41 43 46 0a 43 4c 3d .CL=C0A80ACF.CL= 00d0 43 30 41 38 30 41 43 44 0a 43 4c 3d 43 30 41 38 C0A80ACD.CL=C0A8 00e0 30 41 46 30 0a 43 4c 3d 43 30 41 38 30 41 43 39 0AF0.CL=C0A80AC9 00f0 0a 43 4c 3d 43 30 41 38 30 41 31 30 0a 43 4c 3d .CL=C0A80A10.CL= 0100 43 30 41 38 30 41 30 44 0a 43 4c 3d 43 30 41 38 C0A80A0D.CL=C0A8 0110 30 41 30 46 0a 43 4c 3d 43 30 41 38 30 41 30 43 0A0F.CL=C0A80A0C 0120 0a 43 4c 3d 43 30 41 38 30 41 44 31 0a 43 4c 3d .CL=C0A80AD1.CL= 0130 43 30 41 38 30 41 43 41 0a 43 4c 3d 43 30 41 38 C0A80ACA.CL=C0A8 0140 30 41 46 41 0a 43 4c 3d 43 30 41 38 30 41 44 38 0AFA.CL=C0A80AD8 0150 0a 43 4c 3d 43 30 41 38 30 41 32 37 0a 43 4c 3d .CL=C0A80A27.CL= 0160 43 30 41 38 30 41 44 39 0a 43 4c 3d 43 30 41 38 C0A80AD9.CL=C0A8 0170 30 41 44 33 0a 43 4c 3d 43 30 41 38 30 41 44 32 0AD3.CL=C0A80AD2 0180 0a 43 4c 3d 43 30 41 38 30 41 45 32 0a 43 4c 3d .CL=C0A80AE2.CL= 0190 43 30 41 38 30 41 45 33 0a 43 4c 3d 43 30 41 38 C0A80AE3.CL=C0A8 01a0 30 41 44 45 0a 43 4c 3d 43 30 41 38 31 34 30 33 0ADE.CL=C0A81403 01b0 0a 43 4c 3d 43 30 41 38 30 41 46 36 0a 43 4c 3d .CL=C0A80AF6.CL= 01c0 43 30 41 38 30 41 31 31 0a 43 4c 3d 30 30 0a 43 C0A80A11.CL=00.C 01d0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01e0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01f0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0200 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0210 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0220 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0230 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0240 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 4d 44 3d .CL=00.CL=00.MD= 0250 38 38 62 30 33 32 30 32 30 39 61 35 65 63 37 30 88b0320209a5ec70 0260 32 63 38 61 64 63 63 65 65 38 65 31 36 64 34 64 2c8adccee8e16d4d 0270 0a 3c 2f 42 4f 44 59 3e 0a .</BODY>. No. Time Source Destination Protocol Length Info 11590 142.225111 192.168.10.1 192.168.10.245 Syslog 305 LOCAL1.INFO: Oct 3 19:46:40 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 95.86.26.108 7x.x.x.3 16322 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="upzwant@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 11590: 305 bytes on wire (2440 bits), 305 bytes captured (2440 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:46:40 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 95.86.26.108 7x.x.x.3 16322 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" No. Time Source Destination Protocol Length Info 11591 142.399498 95.86.26.108 192.168.10.207 TCP 60 16322 > smtp [FIN, ACK] Seq=61 Ack=217 Win=93224 Len=0 Frame 11591: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 95.86.26.108 (95.86.26.108), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 16322 (16322), Dst Port: smtp (25), Seq: 61, Ack: 217, Len: 0 No. Time Source Destination Protocol Length Info 11592 142.399534 192.168.10.207 95.86.26.108 TCP 60 smtp > 16322 [ACK] Seq=217 Ack=62 Win=65475 Len=0 Frame 11592: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 95.86.26.108 (95.86.26.108) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 16322 (16322), Seq: 217, Ack: 62, Len: 0 No. Time Source Destination Protocol Length Info 11593 142.399607 192.168.10.207 95.86.26.108 TCP 60 smtp > 16322 [FIN, ACK] Seq=217 Ack=62 Win=65475 Len=0 Frame 11593: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 95.86.26.108 (95.86.26.108) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 16322 (16322), Seq: 217, Ack: 62, Len: 0 No. Time Source Destination Protocol Length Info 11594 142.399647 95.86.26.108 192.168.10.207 TCP 60 16322 > smtp [ACK] Seq=62 Ack=218 Win=93224 Len=0 Frame 11594: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 95.86.26.108 (95.86.26.108), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 16322 (16322), Dst Port: smtp (25), Seq: 62, Ack: 218, Len: 0 No. Time Source Destination Protocol Length Info 11595 142.399841 192.168.10.1 192.168.10.245 Syslog 201 LOCAL1.INFO: Oct 3 19:46:40 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 95.86.26.108 7x.x.x.3 16322 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 11595: 201 bytes on wire (1608 bits), 201 bytes captured (1608 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:46:40 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 95.86.26.108 7x.x.x.3 16322 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 11596 142.409765 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3954120960, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11596: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11597 142.409789 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3954120960, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11597: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11598 142.409802 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3954120960, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11598: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11599 142.409814 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3954120960, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11599: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11600 142.428092 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1528299776, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11600: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11601 142.428111 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1528299776, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11601: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11602 142.428123 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1528299776, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11602: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11603 142.428136 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1528299776, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11603: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11604 142.959117 192.168.10.220 192.168.47.1 NBNS 343 Name query response NBSTAT Frame 11604: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.47.1 (192.168.47.1) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 11605 143.026886 7x.x.x.1 192.168.10.220 ICMP 70 Destination unreachable (Host unreachable) Frame 11605: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 7x.x.x.1 (7x.x.x.1), Dst: 192.168.10.220 (192.168.10.220) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 11606 143.027153 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 Who has 192.168.10.220? Tell 192.168.10.1 Frame 11606: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11607 143.027196 Dell_ad:25:f6 Watchgua_3c:4c:d8 ARP 60 192.168.10.220 is at 00:22:19:ad:25:f6 Frame 11607: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11608 143.194034 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 11608: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11609 143.199146 WwPcbaTe_6d:76:3c Broadcast ARP 60 Who has 192.168.10.62? Tell 192.168.10.201 Frame 11609: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11610 143.199177 WwPcbaTe_6d:76:3c Broadcast ARP 60 Who has 192.168.10.62? Tell 192.168.10.201 Frame 11610: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11611 143.199385 WwPcbaTe_6d:76:3c Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.201 Frame 11611: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11612 143.199398 Watchgua_3c:4c:d8 WwPcbaTe_6d:76:3c ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 11612: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11613 143.199415 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 11613: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11614 143.199434 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 11614: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11615 143.315465 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 11615: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11616 143.425372 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3970898176, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11616: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11617 143.425395 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3970898176, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11617: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11618 143.425409 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3970898176, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11618: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11619 143.425421 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3970898176, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11619: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11620 143.443719 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 11620: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11621 143.443734 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1545076992, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11621: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11622 143.443751 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1545076992, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11622: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11623 143.443762 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1545076992, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11623: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11624 143.443775 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1545076992, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11624: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11625 143.445612 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 11625: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11626 143.445639 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 11626: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11627 143.479072 192.168.10.203 8.19.18.58 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 11627: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 8.19.18.58 (8.19.18.58) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 11628 143.549695 8.19.18.58 192.168.10.203 ICMP 70 Destination unreachable (Port unreachable) Frame 11628: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 8.19.18.58 (8.19.18.58), Dst: 192.168.10.203 (192.168.10.203) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 11629 143.551283 Watchgua_3c:4c:d8 Dell_5e:a8:82 ARP 60 Who has 192.168.10.203? Tell 192.168.10.1 Frame 11629: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11630 143.551297 Dell_5e:a8:82 Watchgua_3c:4c:d8 ARP 106 192.168.10.203 is at 00:13:72:5e:a8:82 Frame 11630: 106 bytes on wire (848 bits), 106 bytes captured (848 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11631 143.566216 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 11631: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11632 143.827600 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 11632: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3098201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 11633 143.827637 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 11633: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3099601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 11634 143.827688 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3101001 Win=65535 Len=0 Frame 11634: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3101001, Len: 0 No. Time Source Destination Protocol Length Info 11635 143.831174 Watchgua_3c:4c:d8 Dell_80:27:ab ARP 60 Who has 192.168.10.221? Tell 192.168.10.1 Frame 11635: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11636 143.831195 Dell_80:27:ab Watchgua_3c:4c:d8 ARP 60 192.168.10.221 is at 00:22:19:80:27:ab Frame 11636: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) [Duplicate IP address detected for 192.168.10.221 (00:22:19:80:27:ab) - also in use by 00:22:19:80:27:ad (frame 195)] Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11637 143.843302 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-15.geo.kaspersky.com Frame 11637: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 58884 (58884), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 11638 143.843488 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-15.geo.kaspersky.com Frame 11638: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 58884 (58884), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 11639 143.953431 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 11639: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11640 143.953464 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 11640: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11641 143.995263 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 11269#1] 9428 > smtp [ACK] Seq=409515 Ack=6133 Win=46384 Len=0 Frame 11641: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 409515, Ack: 6133, Len: 0 No. Time Source Destination Protocol Length Info 11642 143.995301 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=6133 Ack=408273 Win=0 Len=0 Frame 11642: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6133, Ack: 408273, Len: 0 No. Time Source Destination Protocol Length Info 11643 144.204304 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=10417 Ack=771608 Win=14488 Len=0 Frame 11643: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10417, Ack: 771608, Len: 0 No. Time Source Destination Protocol Length Info 11644 144.204349 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 11643#1] smtp > 23308 [ACK] Seq=10417 Ack=771608 Win=14488 Len=0 Frame 11644: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10417, Ack: 771608, Len: 0 No. Time Source Destination Protocol Length Info 11645 144.204379 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11645: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 772268, Ack: 10417, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11646 144.204414 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11646: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 773648, Ack: 10417, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11647 144.204443 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11647: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 775028, Ack: 10417, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11648 144.204473 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11648: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 776408, Ack: 10417, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11649 144.204502 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11649: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 777788, Ack: 10417, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11650 144.204531 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11650: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 779168, Ack: 10417, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11651 144.204564 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11651: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 780548, Ack: 10417, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11652 144.204596 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 11643#2] smtp > 23308 [ACK] Seq=10417 Ack=771608 Win=14488 Len=0 Frame 11652: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10417, Ack: 771608, Len: 0 No. Time Source Destination Protocol Length Info 11653 144.204624 192.168.10.207 206.225.164.186 SMTP 516 S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 11653: 516 bytes on wire (4128 bits), 516 bytes captured (4128 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10417, Ack: 771608, Len: 462 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11654 144.204656 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 11653#1] smtp > 23308 [ACK] Seq=10879 Ack=771608 Win=14488 Len=0 Frame 11654: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10879, Ack: 771608, Len: 0 No. Time Source Destination Protocol Length Info 11655 144.204684 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=781928 Ack=10879 Win=46489 Len=0 Frame 11655: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 781928, Ack: 10879, Len: 0 No. Time Source Destination Protocol Length Info 11656 144.204712 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 11653#2] smtp > 23308 [ACK] Seq=10879 Ack=771608 Win=14488 Len=0 Frame 11656: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10879, Ack: 771608, Len: 0 No. Time Source Destination Protocol Length Info 11657 144.204739 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 11653#3] smtp > 23308 [ACK] Seq=10879 Ack=771608 Win=14488 Len=0 Frame 11657: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10879, Ack: 771608, Len: 0 No. Time Source Destination Protocol Length Info 11658 144.204766 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 11653#4] smtp > 23308 [ACK] Seq=10879 Ack=771608 Win=14488 Len=0 Frame 11658: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10879, Ack: 771608, Len: 0 No. Time Source Destination Protocol Length Info 11659 144.204798 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 11653#5] smtp > 23308 [ACK] Seq=10879 Ack=771608 Win=14488 Len=0 Frame 11659: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10879, Ack: 771608, Len: 0 No. Time Source Destination Protocol Length Info 11660 144.204826 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 11653#6] smtp > 23308 [ACK] Seq=10879 Ack=771608 Win=14488 Len=0 Frame 11660: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10879, Ack: 771608, Len: 0 No. Time Source Destination Protocol Length Info 11661 144.204854 206.225.164.186 192.168.10.207 SMTP 714 [TCP Fast Retransmission] C: DATA fragment, 660 bytes Frame 11661: 714 bytes on wire (5712 bits), 714 bytes captured (5712 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 771608, Ack: 10879, Len: 660 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11662 144.204883 206.225.164.186 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 11662: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 772268, Ack: 10879, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11663 144.204912 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11663: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 781928, Ack: 10879, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11664 144.204942 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11664: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 783308, Ack: 10879, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11665 144.204973 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=10879 Ack=781928 Win=4168 Len=0 Frame 11665: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10879, Ack: 781928, Len: 0 No. Time Source Destination Protocol Length Info 11666 144.205001 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=10879 Ack=784688 Win=1408 Len=0 Frame 11666: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10879, Ack: 784688, Len: 0 No. Time Source Destination Protocol Length Info 11667 144.205029 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11667: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 784688, Ack: 10879, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11668 144.331134 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=10879 Ack=786068 Win=28 Len=0 Frame 11668: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10879, Ack: 786068, Len: 0 No. Time Source Destination Protocol Length Info 11669 144.346507 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.69? Tell 192.168.10.226 Frame 11669: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11670 144.346540 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.69? Tell 192.168.10.226 Frame 11670: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11671 144.346672 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 11671: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11672 144.346683 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 11672: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11673 144.346696 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 11673: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11674 144.346706 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 11674: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11675 144.346716 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 11675: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11676 144.346729 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 11676: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11677 144.346739 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 11677: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11678 144.346751 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 11678: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11679 144.346761 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 11679: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11680 144.346778 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 11680: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11681 144.346811 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 11681: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11682 144.346821 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 11682: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11683 144.346831 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 11683: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11684 144.346862 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 11684: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11685 144.346872 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 11685: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11686 144.346883 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 11686: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11687 144.346893 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 11687: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11688 144.346903 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 11688: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11689 144.346921 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 11689: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11690 144.346931 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 11690: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11691 144.346941 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 11691: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11692 144.346951 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 11692: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11693 144.346962 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 11693: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11694 144.346977 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 11694: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11695 144.346990 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 11695: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11696 144.347008 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 11696: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11697 144.347022 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 11697: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11698 144.347035 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 11698: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11699 144.347046 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 11699: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11700 144.347056 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 11700: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11701 144.347066 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 11701: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11702 144.347076 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 11702: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11703 144.347086 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 11703: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11704 144.347096 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 11704: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11705 144.347107 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 11705: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11706 144.347117 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 11706: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11707 144.347127 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 11707: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11708 144.347137 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 11708: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11709 144.347150 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 11709: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11710 144.347163 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 11710: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11711 144.347173 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 11711: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11712 144.347186 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 11712: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11713 144.347196 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 11713: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11714 144.347210 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 11714: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11715 144.347220 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 11715: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11716 144.347233 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 11716: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11717 144.347243 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 11717: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11718 144.347253 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 11718: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11719 144.347264 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 11719: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11720 144.347275 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 11720: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11721 144.434638 192.168.10.207 206.225.164.188 SMTP 264 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 11721: 264 bytes on wire (2112 bits), 264 bytes captured (2112 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6091, Ack: 408273, Len: 210 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11722 144.434672 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=409515 Ack=6301 Win=46300 Len=0 Frame 11722: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 409515, Ack: 6301, Len: 0 No. Time Source Destination Protocol Length Info 11723 144.434703 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=6301 Ack=408273 Win=0 Len=0 Frame 11723: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6301, Ack: 408273, Len: 0 No. Time Source Destination Protocol Length Info 11724 144.441028 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3987675392, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11724: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11725 144.441051 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 3987675392, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11725: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11726 144.441064 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3987675392, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11726: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11727 144.441077 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 3987675392, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11727: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11728 144.459255 192.168.10.220 192.168.47.1 NBNS 343 Name query response NBSTAT Frame 11728: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.47.1 (192.168.47.1) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 11729 144.459310 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1561854208, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11729: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11730 144.459329 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1561854208, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11730: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11731 144.459341 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1561854208, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11731: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11732 144.459353 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1561854208, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11732: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11733 144.469206 7x.x.x.1 192.168.10.220 ICMP 70 Destination unreachable (Host unreachable) Frame 11733: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 7x.x.x.1 (7x.x.x.1), Dst: 192.168.10.220 (192.168.10.220) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 11734 144.781230 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 11734: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10879, Ack: 786068, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11735 144.781267 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=786068 Ack=10921 Win=46468 Len=0 Frame 11735: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 786068, Ack: 10921, Len: 0 No. Time Source Destination Protocol Length Info 11736 144.979001 192.168.10.203 8.19.18.58 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 11736: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 8.19.18.58 (8.19.18.58) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 11737 145.050214 8.19.18.58 192.168.10.203 ICMP 70 Destination unreachable (Port unreachable) Frame 11737: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 8.19.18.58 (8.19.18.58), Dst: 192.168.10.203 (192.168.10.203) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 11738 145.194121 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 11738: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11739 145.230037 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=6301 Ack=408273 Win=49138 Len=0 Frame 11739: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6301, Ack: 408273, Len: 0 No. Time Source Destination Protocol Length Info 11740 145.230072 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 11739#1] smtp > 9428 [ACK] Seq=6301 Ack=408273 Win=49138 Len=0 Frame 11740: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6301, Ack: 408273, Len: 0 No. Time Source Destination Protocol Length Info 11741 145.230101 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11741: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 409515, Ack: 6301, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11742 145.230131 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11742: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 410895, Ack: 6301, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11743 145.230160 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11743: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 412275, Ack: 6301, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11744 145.230190 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11744: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 413655, Ack: 6301, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11745 145.230224 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 11739#2] smtp > 9428 [ACK] Seq=6301 Ack=408273 Win=49138 Len=0 Frame 11745: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6301, Ack: 408273, Len: 0 No. Time Source Destination Protocol Length Info 11746 145.230251 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 11746: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6301, Ack: 408273, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11747 145.230279 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 11746#1] smtp > 9428 [ACK] Seq=6343 Ack=408273 Win=49138 Len=0 Frame 11747: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6343, Ack: 408273, Len: 0 No. Time Source Destination Protocol Length Info 11748 145.230306 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=415035 Ack=6343 Win=46279 Len=0 Frame 11748: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 415035, Ack: 6343, Len: 0 No. Time Source Destination Protocol Length Info 11749 145.230334 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 11746#2] smtp > 9428 [ACK] Seq=6343 Ack=408273 Win=49138 Len=0 Frame 11749: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6343, Ack: 408273, Len: 0 No. Time Source Destination Protocol Length Info 11750 145.230361 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 11746#3] smtp > 9428 [ACK] Seq=6343 Ack=408273 Win=49138 Len=0 Frame 11750: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6343, Ack: 408273, Len: 0 No. Time Source Destination Protocol Length Info 11751 145.230389 206.225.164.188 192.168.10.207 SMTP 1296 [TCP Fast Retransmission] C: DATA fragment, 1242 bytes Frame 11751: 1296 bytes on wire (10368 bits), 1296 bytes captured (10368 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 408273, Ack: 6343, Len: 1242 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11752 145.230418 206.225.164.188 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 11752: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 409515, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11753 145.230454 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=6343 Ack=415035 Win=42376 Len=0 Frame 11753: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6343, Ack: 415035, Len: 0 No. Time Source Destination Protocol Length Info 11754 145.230482 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 11753#1] smtp > 9428 [ACK] Seq=6343 Ack=415035 Win=42376 Len=0 Frame 11754: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6343, Ack: 415035, Len: 0 No. Time Source Destination Protocol Length Info 11755 145.230512 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11755: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 415035, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11756 145.230541 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11756: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 416415, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11757 145.230573 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=6343 Ack=417795 Win=39616 Len=0 Frame 11757: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6343, Ack: 417795, Len: 0 No. Time Source Destination Protocol Length Info 11758 145.230601 206.225.164.188 192.168.10.207 SMTP 660 C: DATA fragment, 606 bytes Frame 11758: 660 bytes on wire (5280 bits), 660 bytes captured (5280 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 417795, Ack: 6343, Len: 606 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11759 145.230631 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11759: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 418401, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11760 145.230662 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11760: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 419781, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11761 145.230714 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=6343 Ack=419781 Win=37630 Len=0 Frame 11761: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6343, Ack: 419781, Len: 0 No. Time Source Destination Protocol Length Info 11762 145.230808 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11762: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 421161, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11763 145.230838 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11763: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 422541, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11764 145.230868 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=6343 Ack=423921 Win=33490 Len=0 Frame 11764: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6343, Ack: 423921, Len: 0 No. Time Source Destination Protocol Length Info 11765 145.230917 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11765: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 423921, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11766 145.230948 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11766: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 425301, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11767 145.230978 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11767: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 426681, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11768 145.231009 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11768: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 428061, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11769 145.231040 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=6343 Ack=426681 Win=30730 Len=0 Frame 11769: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6343, Ack: 426681, Len: 0 No. Time Source Destination Protocol Length Info 11770 145.231067 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=6343 Ack=429441 Win=27970 Len=0 Frame 11770: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6343, Ack: 429441, Len: 0 No. Time Source Destination Protocol Length Info 11771 145.231097 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11771: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 429441, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11772 145.231128 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11772: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 430821, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11773 145.231157 206.225.164.188 192.168.10.207 SMTP 1161 C: DATA fragment, 1107 bytes Frame 11773: 1161 bytes on wire (9288 bits), 1161 bytes captured (9288 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 432201, Ack: 6343, Len: 1107 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11774 145.231189 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11774: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 433308, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11775 145.231218 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11775: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 434688, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11776 145.231247 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=6343 Ack=433308 Win=24103 Len=0 Frame 11776: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6343, Ack: 433308, Len: 0 No. Time Source Destination Protocol Length Info 11777 145.231278 206.225.164.188 192.168.10.207 SMTP 164 C: DATA fragment, 110 bytes Frame 11777: 164 bytes on wire (1312 bits), 164 bytes captured (1312 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 436068, Ack: 6343, Len: 110 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11778 145.231307 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11778: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 436178, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11779 145.231336 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=6343 Ack=436068 Win=21343 Len=0 Frame 11779: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6343, Ack: 436068, Len: 0 No. Time Source Destination Protocol Length Info 11780 145.231367 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11780: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 437558, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11781 145.231397 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11781: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 438938, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11782 145.231427 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11782: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 440318, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11783 145.231456 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11783: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 441698, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11784 145.231485 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=6343 Ack=437558 Win=19853 Len=0 Frame 11784: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6343, Ack: 437558, Len: 0 No. Time Source Destination Protocol Length Info 11785 145.231539 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=6343 Ack=440318 Win=17093 Len=0 Frame 11785: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6343, Ack: 440318, Len: 0 No. Time Source Destination Protocol Length Info 11786 145.231569 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=6343 Ack=443078 Win=14333 Len=0 Frame 11786: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6343, Ack: 443078, Len: 0 No. Time Source Destination Protocol Length Info 11787 145.231600 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11787: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 443078, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11788 145.231629 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11788: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 444458, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11789 145.231661 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11789: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 445838, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11790 145.231700 206.225.164.188 192.168.10.207 SMTP 522 C: DATA fragment, 468 bytes Frame 11790: 522 bytes on wire (4176 bits), 522 bytes captured (4176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 447218, Ack: 6343, Len: 468 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11791 145.231730 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11791: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 447686, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11792 145.231763 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11792: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 449066, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11793 145.231792 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=6343 Ack=445838 Win=11573 Len=0 Frame 11793: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6343, Ack: 445838, Len: 0 No. Time Source Destination Protocol Length Info 11794 145.231820 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=6343 Ack=447686 Win=9725 Len=0 Frame 11794: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6343, Ack: 447686, Len: 0 No. Time Source Destination Protocol Length Info 11795 145.231848 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11795: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 450446, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11796 145.231877 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=6343 Ack=450446 Win=6965 Len=0 Frame 11796: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6343, Ack: 450446, Len: 0 No. Time Source Destination Protocol Length Info 11797 145.231909 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11797: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 451826, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11798 145.231939 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11798: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 453206, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11799 145.231968 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11799: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 454586, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11800 145.231998 206.225.164.188 192.168.10.207 SMTP 1385 C: DATA fragment, 1331 bytes Frame 11800: 1385 bytes on wire (11080 bits), 1385 bytes captured (11080 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 455966, Ack: 6343, Len: 1331 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11801 145.232028 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11801: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 457297, Ack: 6343, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11802 145.232059 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=6343 Ack=455966 Win=1445 Len=0 Frame 11802: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6343, Ack: 455966, Len: 0 No. Time Source Destination Protocol Length Info 11803 145.232087 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=6343 Ack=457411 Win=0 Len=0 Frame 11803: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6343, Ack: 457411, Len: 0 No. Time Source Destination Protocol Length Info 11804 145.315489 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 11804: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11805 145.394311 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 11805: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10921, Ack: 786068, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11806 145.394354 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=786068 Ack=10963 Win=46447 Len=0 Frame 11806: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 786068, Ack: 10963, Len: 0 No. Time Source Destination Protocol Length Info 11807 145.420307 192.168.10.207 206.51.26.33 TCP 65 embrace-dp-c > hp-pxpib [PSH, ACK] Seq=23 Ack=23 Win=65012 Len=11 Frame 11807: 65 bytes on wire (520 bits), 65 bytes captured (520 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.51.26.33 (206.51.26.33) Transmission Control Protocol, Src Port: embrace-dp-c (3198), Dst Port: hp-pxpib (3101), Seq: 23, Ack: 23, Len: 11 Data (11 bytes) 0000 01 fc 00 00 00 05 49 00 00 12 39 ......I...9 No. Time Source Destination Protocol Length Info 11808 145.443668 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 11808: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11809 145.452579 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 11809: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11810 145.452610 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 11810: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11811 145.456562 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4004452608, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11811: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11812 145.456583 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4004452608, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11812: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11813 145.456595 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4004452608, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11813: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11814 145.456608 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4004452608, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11814: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11815 145.474893 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1578631424, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11815: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11816 145.474915 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1578631424, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11816: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11817 145.474928 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1578631424, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11817: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11818 145.474940 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1578631424, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11818: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11819 145.502288 206.51.26.33 192.168.10.207 TCP 65 hp-pxpib > embrace-dp-c [PSH, ACK] Seq=23 Ack=34 Win=64704 Len=11 Frame 11819: 65 bytes on wire (520 bits), 65 bytes captured (520 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.51.26.33 (206.51.26.33), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: hp-pxpib (3101), Dst Port: embrace-dp-c (3198), Seq: 23, Ack: 34, Len: 11 Data (11 bytes) 0000 02 fd 00 00 00 05 49 00 00 12 39 ......I...9 No. Time Source Destination Protocol Length Info 11820 145.566111 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 11820: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11821 145.709117 192.168.10.207 206.51.26.33 TCP 60 embrace-dp-c > hp-pxpib [ACK] Seq=34 Ack=34 Win=65001 Len=0 Frame 11821: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.51.26.33 (206.51.26.33) Transmission Control Protocol, Src Port: embrace-dp-c (3198), Dst Port: hp-pxpib (3101), Seq: 34, Ack: 34, Len: 0 No. Time Source Destination Protocol Length Info 11822 145.951601 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 11822: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11823 145.951634 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 11823: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11824 145.967339 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 11824: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 10963, Ack: 786068, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11825 145.967378 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=786068 Ack=11005 Win=46426 Len=0 Frame 11825: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 786068, Ack: 11005, Len: 0 No. Time Source Destination Protocol Length Info 11826 146.224184 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 11826: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6343, Ack: 457411, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11827 146.224219 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=458677 Ack=6385 Win=46258 Len=0 Frame 11827: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 458677, Ack: 6385, Len: 0 No. Time Source Destination Protocol Length Info 11828 146.224278 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=6385 Ack=457411 Win=0 Len=0 Frame 11828: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6385, Ack: 457411, Len: 0 No. Time Source Destination Protocol Length Info 11829 146.472259 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4021229824, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11829: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11830 146.472284 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4021229824, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11830: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11831 146.472297 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4021229824, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11831: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11832 146.472309 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4021229824, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11832: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11833 146.490583 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1595408640, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11833: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11834 146.490605 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1595408640, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11834: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11835 146.490618 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1595408640, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11835: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11836 146.490630 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1595408640, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11836: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11837 146.504216 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:17:27 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 11837: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:17:27 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 11838 146.546323 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 11838: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11005, Ack: 786068, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11839 146.546357 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=786068 Ack=11047 Win=46405 Len=0 Frame 11839: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 786068, Ack: 11047, Len: 0 No. Time Source Destination Protocol Length Info 11840 146.608400 192.168.10.246 65.32.1.65 DNS 88 Standard query PTR 175.109.202.217.in-addr.arpa Frame 11840: 88 bytes on wire (704 bits), 88 bytes captured (704 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 58064 (58064), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 11841 146.747360 65.32.1.65 192.168.10.246 DNS 148 Standard query response, No such name Frame 11841: 148 bytes on wire (1184 bits), 148 bytes captured (1184 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 58064 (58064) Domain Name System (response) No. Time Source Destination Protocol Length Info 11842 146.747927 192.168.10.203 217.202.109.175 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 11842: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 217.202.109.175 (217.202.109.175) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 11843 146.998781 192.168.10.32 192.168.20.3 UDP 645 Source port: 38302 Destination port: apc-3052 Frame 11843: 645 bytes on wire (5160 bits), 645 bytes captured (5160 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (603 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 38 3a 32 38 0a 53 52 3d 30 31 31 =20:58:28.SR=011 0060 35 45 37 0a 53 55 3d 32 30 42 35 0a 52 44 3d 43 5E7.SU=20B5.RD=C 0070 35 45 39 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 5E9.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 0a 34 8.7E=00.3E=002.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 36 2e 30 C=207.3.50=036.0 00c0 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 31 2f .43=028.5.78=11/ 00d0 31 39 2f 30 37 0a 36 41 3d 30 30 35 31 3a 0a 34 19/07.6A=0051:.4 00e0 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 4e 0a 7=S.63=UPS_IDEN. 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 37 34 0.38=00.6E=IS074 0120 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 31 2f 6005481 .6D=11/ 0130 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 2d 55 19/07.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 58 4c 20 20 PS RT 10000 XL 0150 20 0a 34 36 3d 35 39 2e 39 39 0a 34 44 3d 32 30 .46=59.99.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 35 3d 7.3.4E=205.9.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 3d 31 00.42=217.0.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 31 2e 30 0a 32 46 3d 31 35 2e 31 32 C=031.0.2F=15.12 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 2e 33 0.09=60.00;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 30 0a 49 30 3d 30 0a 53 48 3d 33 31 .MC=0.I0=0.SH=31 0210 44 39 43 33 35 44 43 42 39 32 33 30 30 37 44 38 D9C35DCB923007D8 0220 35 34 43 45 46 33 44 32 38 43 43 39 45 39 0a 4d 54CEF3D28CC9E9.M 0230 44 3d 65 61 61 38 31 39 65 62 34 34 34 37 37 34 D=eaa819eb444774 0240 33 31 38 63 35 32 30 32 32 66 63 63 34 34 34 32 318c52022fcc4442 0250 33 62 0a 3c 2f 42 4f 44 59 3e 0a 3b.</BODY>. No. Time Source Destination Protocol Length Info 11844 146.998854 192.168.10.32 192.168.20.3 UDP 645 Source port: 38302 Destination port: apc-3052 Frame 11844: 645 bytes on wire (5160 bits), 645 bytes captured (5160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (603 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 38 3a 32 38 0a 53 52 3d 30 31 31 =20:58:28.SR=011 0060 35 45 37 0a 53 55 3d 32 30 42 35 0a 52 44 3d 43 5E7.SU=20B5.RD=C 0070 35 45 39 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 5E9.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 0a 34 8.7E=00.3E=002.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 36 2e 30 C=207.3.50=036.0 00c0 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 31 2f .43=028.5.78=11/ 00d0 31 39 2f 30 37 0a 36 41 3d 30 30 35 31 3a 0a 34 19/07.6A=0051:.4 00e0 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 4e 0a 7=S.63=UPS_IDEN. 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 37 34 0.38=00.6E=IS074 0120 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 31 2f 6005481 .6D=11/ 0130 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 2d 55 19/07.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 58 4c 20 20 PS RT 10000 XL 0150 20 0a 34 36 3d 35 39 2e 39 39 0a 34 44 3d 32 30 .46=59.99.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 35 3d 7.3.4E=205.9.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 3d 31 00.42=217.0.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 31 2e 30 0a 32 46 3d 31 35 2e 31 32 C=031.0.2F=15.12 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 2e 33 0.09=60.00;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 30 0a 49 30 3d 30 0a 53 48 3d 33 31 .MC=0.I0=0.SH=31 0210 44 39 43 33 35 44 43 42 39 32 33 30 30 37 44 38 D9C35DCB923007D8 0220 35 34 43 45 46 33 44 32 38 43 43 39 45 39 0a 4d 54CEF3D28CC9E9.M 0230 44 3d 65 61 61 38 31 39 65 62 34 34 34 37 37 34 D=eaa819eb444774 0240 33 31 38 63 35 32 30 32 32 66 63 63 34 34 34 32 318c52022fcc4442 0250 33 62 0a 3c 2f 42 4f 44 59 3e 0a 3b.</BODY>. No. Time Source Destination Protocol Length Info 11845 146.998933 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:17:27 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS3/38302 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 11845: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:17:27 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS3/38302 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 11846 146.999368 Watchgua_3c:4c:d8 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.1 Frame 11846: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11847 146.999382 Cisco_bb:96:6d Watchgua_3c:4c:d8 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 11847: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11848 147.070180 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 11848: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11849 147.070210 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 11849: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11850 147.130150 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 11850: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11047, Ack: 786068, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11851 147.130185 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=786068 Ack=11089 Win=46384 Len=0 Frame 11851: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 786068, Ack: 11089, Len: 0 No. Time Source Destination Protocol Length Info 11852 147.130347 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=11089 Ack=786068 Win=51075 Len=0 Frame 11852: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11089, Ack: 786068, Len: 0 No. Time Source Destination Protocol Length Info 11853 147.130376 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 11852#1] smtp > 23308 [ACK] Seq=11089 Ack=786068 Win=51075 Len=0 Frame 11853: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11089, Ack: 786068, Len: 0 No. Time Source Destination Protocol Length Info 11854 147.130408 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11854: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 786068, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11855 147.130440 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11855: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 787448, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11856 147.130470 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11856: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 788828, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11857 147.130502 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11857: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 790208, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11858 147.130536 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11858: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 791588, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11859 147.130592 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=11089 Ack=792968 Win=44175 Len=0 Frame 11859: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11089, Ack: 792968, Len: 0 No. Time Source Destination Protocol Length Info 11860 147.130688 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11860: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 792968, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11861 147.130720 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11861: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 794348, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11862 147.130752 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11862: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 795728, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11863 147.130782 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11863: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 797108, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11864 147.130812 206.225.164.186 192.168.10.207 SMTP 1079 C: DATA fragment, 1025 bytes Frame 11864: 1079 bytes on wire (8632 bits), 1079 bytes captured (8632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 798488, Ack: 11089, Len: 1025 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11865 147.130844 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=11089 Ack=795728 Win=41415 Len=0 Frame 11865: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11089, Ack: 795728, Len: 0 No. Time Source Destination Protocol Length Info 11866 147.130875 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11866: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 799513, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11867 147.130903 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=11089 Ack=799513 Win=37630 Len=0 Frame 11867: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11089, Ack: 799513, Len: 0 No. Time Source Destination Protocol Length Info 11868 147.130932 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11868: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 800893, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11869 147.130964 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11869: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 802273, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11870 147.130993 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11870: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 803653, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11871 147.131022 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11871: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 805033, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11872 147.131051 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=11089 Ack=802273 Win=34870 Len=0 Frame 11872: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11089, Ack: 802273, Len: 0 No. Time Source Destination Protocol Length Info 11873 147.131091 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=11089 Ack=806413 Win=30730 Len=0 Frame 11873: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11089, Ack: 806413, Len: 0 No. Time Source Destination Protocol Length Info 11874 147.131120 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11874: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 806413, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11875 147.131149 206.225.164.186 192.168.10.207 SMTP 742 C: DATA fragment, 688 bytes Frame 11875: 742 bytes on wire (5936 bits), 742 bytes captured (5936 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 807793, Ack: 11089, Len: 688 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11876 147.131177 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11876: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 808481, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11877 147.131207 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11877: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 809861, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11878 147.131235 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=11089 Ack=808481 Win=28662 Len=0 Frame 11878: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11089, Ack: 808481, Len: 0 No. Time Source Destination Protocol Length Info 11879 147.131264 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11879: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 811241, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11880 147.131297 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11880: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 812621, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11881 147.131327 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11881: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 814001, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11882 147.131355 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=11089 Ack=811241 Win=25902 Len=0 Frame 11882: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11089, Ack: 811241, Len: 0 No. Time Source Destination Protocol Length Info 11883 147.131384 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11883: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 815381, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11884 147.131413 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=11089 Ack=814001 Win=23142 Len=0 Frame 11884: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11089, Ack: 814001, Len: 0 No. Time Source Destination Protocol Length Info 11885 147.131442 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11885: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 816761, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11886 147.131471 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11886: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 818141, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11887 147.131499 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=11089 Ack=816761 Win=20382 Len=0 Frame 11887: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11089, Ack: 816761, Len: 0 No. Time Source Destination Protocol Length Info 11888 147.131528 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11888: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 819521, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11889 147.131563 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11889: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 820901, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11890 147.131593 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11890: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 822281, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11891 147.131621 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=11089 Ack=819521 Win=17622 Len=0 Frame 11891: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11089, Ack: 819521, Len: 0 No. Time Source Destination Protocol Length Info 11892 147.131650 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11892: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 823661, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11893 147.131679 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11893: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 825041, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11894 147.131708 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=11089 Ack=822281 Win=14862 Len=0 Frame 11894: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11089, Ack: 822281, Len: 0 No. Time Source Destination Protocol Length Info 11895 147.131736 206.225.164.186 192.168.10.207 SMTP 1051 C: DATA fragment, 997 bytes Frame 11895: 1051 bytes on wire (8408 bits), 1051 bytes captured (8408 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 826421, Ack: 11089, Len: 997 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11896 147.131765 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11896: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 827418, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11897 147.131793 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=11089 Ack=825041 Win=12102 Len=0 Frame 11897: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11089, Ack: 825041, Len: 0 No. Time Source Destination Protocol Length Info 11898 147.131822 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11898: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 828798, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11899 147.131851 206.225.164.186 192.168.10.207 SMTP 966 C: DATA fragment, 912 bytes Frame 11899: 966 bytes on wire (7728 bits), 966 bytes captured (7728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 830178, Ack: 11089, Len: 912 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11900 147.131880 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=11089 Ack=828798 Win=8345 Len=0 Frame 11900: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11089, Ack: 828798, Len: 0 No. Time Source Destination Protocol Length Info 11901 147.131909 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11901: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 831090, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11902 147.131939 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11902: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 832470, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11903 147.131969 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11903: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 833850, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11904 147.132002 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11904: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 835230, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11905 147.132031 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=11089 Ack=831090 Win=6053 Len=0 Frame 11905: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11089, Ack: 831090, Len: 0 No. Time Source Destination Protocol Length Info 11906 147.132068 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 11906: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 836610, Ack: 11089, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 11907 147.132096 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=11089 Ack=833850 Win=3293 Len=0 Frame 11907: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11089, Ack: 833850, Len: 0 No. Time Source Destination Protocol Length Info 11908 147.132124 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=11089 Ack=836610 Win=533 Len=0 Frame 11908: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11089, Ack: 836610, Len: 0 No. Time Source Destination Protocol Length Info 11909 147.194044 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 11909: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11910 147.248223 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=11089 Ack=837143 Win=0 Len=0 Frame 11910: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11089, Ack: 837143, Len: 0 No. Time Source Destination Protocol Length Info 11911 147.315458 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 11911: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11912 147.442130 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 11912: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11913 147.442162 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 11913: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 11914 147.444033 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 11914: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11915 147.445750 192.168.10.31 192.168.20.3 UDP 776 Source port: 50764 Destination port: apc-3052 Frame 11915: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 35 30 3a 34 39 0a 53 52 3d 31 30 37 =19:50:49.SR=107 0060 43 0a 53 55 3d 32 44 38 32 45 46 38 32 0a 52 44 C.SU=2D82EF82.RD 0070 3d 38 30 32 33 0a 54 41 3d 31 39 32 2e 31 36 38 =8023.TA=192.168 0080 2e 32 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a .20.3.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 35 .4C=207.3.50=035 00c0 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 3d 31 .0.43=029.1.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 37 3a 1/19/07.6A=0057: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 3d 31 746005443 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d .46=60.00.4D= 0160 32 30 38 2e 38 0a 34 45 3d 32 30 37 2e 33 0a 34 208.8.4E=207.3.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 32 39 2e 30 0a 32 46 3d 31 33 2e .5C=029.0.2F=13. 01d0 37 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 77.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 000.09=60.00;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 37 37 30 43 32 31 39 36 37 35 42 44 46 38 33 =770C219675BDF83 02a0 34 39 42 42 37 37 45 45 46 41 30 31 44 35 37 41 49BB77EEFA01D57A 02b0 31 0a 4d 44 3d 32 34 37 38 33 32 64 33 37 34 37 1.MD=247832d3747 02c0 30 39 66 63 37 37 37 34 64 35 38 61 64 66 33 32 09fc7774d58adf32 02d0 65 65 31 32 36 0a 3c 2f 42 4f 44 59 3e 0a ee126.</BODY>. No. Time Source Destination Protocol Length Info 11916 147.445833 192.168.10.31 192.168.20.3 UDP 776 Source port: 50764 Destination port: apc-3052 Frame 11916: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 35 30 3a 34 39 0a 53 52 3d 31 30 37 =19:50:49.SR=107 0060 43 0a 53 55 3d 32 44 38 32 45 46 38 32 0a 52 44 C.SU=2D82EF82.RD 0070 3d 38 30 32 33 0a 54 41 3d 31 39 32 2e 31 36 38 =8023.TA=192.168 0080 2e 32 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a .20.3.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 35 .4C=207.3.50=035 00c0 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 3d 31 .0.43=029.1.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 37 3a 1/19/07.6A=0057: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 3d 31 746005443 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d .46=60.00.4D= 0160 32 30 38 2e 38 0a 34 45 3d 32 30 37 2e 33 0a 34 208.8.4E=207.3.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 32 39 2e 30 0a 32 46 3d 31 33 2e .5C=029.0.2F=13. 01d0 37 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 77.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 000.09=60.00;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 37 37 30 43 32 31 39 36 37 35 42 44 46 38 33 =770C219675BDF83 02a0 34 39 42 42 37 37 45 45 46 41 30 31 44 35 37 41 49BB77EEFA01D57A 02b0 31 0a 4d 44 3d 32 34 37 38 33 32 64 33 37 34 37 1.MD=247832d3747 02c0 30 39 66 63 37 37 37 34 64 35 38 61 64 66 33 32 09fc7774d58adf32 02d0 65 65 31 32 36 0a 3c 2f 42 4f 44 59 3e 0a ee126.</BODY>. No. Time Source Destination Protocol Length Info 11917 147.445906 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:17:28 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS2/50764 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 11917: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:17:28 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS2/50764 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 11918 147.488006 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4038007040, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11918: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11919 147.488029 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4038007040, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 11919: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11920 147.488041 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4038007040, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11920: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11921 147.488054 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4038007040, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 11921: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11922 147.506205 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1612185856, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11922: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11923 147.506229 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1612185856, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 11923: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11924 147.506242 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1612185856, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11924: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11925 147.506254 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1612185856, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 11925: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 11926 147.566228 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 11926: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 11927 147.743463 192.168.10.142 192.168.10.220 DNS 77 Standard query A www.kaspersky.com Frame 11927: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 63261 (63261), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 11928 147.743549 192.168.10.220 208.67.222.222 DNS 77 Standard query A www.kaspersky.com Frame 11928: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 49170 (49170), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 11929 147.761360 208.67.222.222 192.168.10.220 DNS 115 Standard query response CNAME web.geo.kaspersky.com A 195.27.252.18 Frame 11929: 115 bytes on wire (920 bits), 115 bytes captured (920 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 49170 (49170) Domain Name System (response) No. Time Source Destination Protocol Length Info 11930 147.761383 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.142? Tell 192.168.10.220 Frame 11930: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11931 147.761411 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.142? Tell 192.168.10.220 Frame 11931: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11932 147.761426 Dell_ad:25:f8 Intel_38:8d:0a ARP 64 Who has 192.168.10.66? Tell 192.168.10.220 Frame 11932: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11933 147.761436 Dell_ad:25:f8 Intel_89:5e:11 ARP 64 Who has 192.168.10.65? Tell 192.168.10.220 Frame 11933: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11934 147.761450 Intel_38:8d:0a Dell_ad:25:f6 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 11934: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11935 147.761461 Intel_89:5e:11 Dell_ad:25:f8 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 11935: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11936 147.761471 Dell_ad:25:f8 Intel_a5:f5:5b ARP 64 Who has 192.168.10.131? Tell 192.168.10.220 Frame 11936: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11937 147.761481 Dell_ad:25:f8 Intel_38:8c:64 ARP 64 Who has 192.168.10.67? Tell 192.168.10.220 Frame 11937: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11938 147.761492 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.142 is at 00:0f:34:04:98:91 Frame 11938: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11939 147.761502 Dell_ad:25:f8 Intel_02:0e:6d ARP 64 Who has 192.168.10.128? Tell 192.168.10.220 Frame 11939: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11940 147.761512 Intel_a5:f5:5b Dell_ad:25:f8 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 11940: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11941 147.761522 Dell_ad:25:f8 IntelCor_d3:4e:80 ARP 64 Who has 192.168.10.70? Tell 192.168.10.220 Frame 11941: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11942 147.761536 Intel_38:8c:64 Dell_ad:25:f6 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 11942: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11943 147.761546 Dell_ad:25:f8 Intel_d0:7a:8f ARP 64 Who has 192.168.10.68? Tell 192.168.10.220 Frame 11943: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11944 147.761556 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.233? Tell 192.168.10.220 Frame 11944: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11945 147.761566 Intel_02:0e:6d Dell_ad:25:f6 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 11945: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11946 147.761576 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.142? Tell 192.168.10.220 Frame 11946: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11947 147.761586 Dell_ad:25:f8 Intel_56:83:a5 ARP 64 Who has 192.168.10.59? Tell 192.168.10.220 Frame 11947: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11948 147.761596 IntelCor_d3:4e:80 Dell_ad:25:f8 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 11948: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11949 147.761606 Dell_ad:25:f8 Intel_38:8c:b1 ARP 64 Who has 192.168.10.138? Tell 192.168.10.220 Frame 11949: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11950 147.761616 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 11950: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11951 147.761720 192.168.10.220 192.168.10.142 DNS 115 Standard query response CNAME web.geo.kaspersky.com A 195.27.252.18 Frame 11951: 115 bytes on wire (920 bits), 115 bytes captured (920 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.142 (192.168.10.142) User Datagram Protocol, Src Port: domain (53), Dst Port: 63261 (63261) Domain Name System (response) No. Time Source Destination Protocol Length Info 11952 147.761734 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 11952: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11953 147.761758 Intel_d0:7a:8f Dell_ad:25:f8 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 11953: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11954 147.761768 Intel_56:83:a5 Dell_ad:25:f6 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 11954: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11955 147.761779 Dell_ad:25:f8 Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.220 Frame 11955: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11956 147.761789 Intel_38:8c:b1 Dell_ad:25:f6 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 11956: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11957 147.761800 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 11957: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11958 147.761811 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.142 is at 00:0f:34:04:98:91 Frame 11958: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11959 147.761821 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 11959: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11960 147.765867 192.168.10.226 192.168.10.46 ICMP 60 Echo (ping) request id=0x0400, seq=36337/61837, ttl=128 Frame 11960: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.46 (192.168.10.46) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 11961 147.765889 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 11961: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11962 147.765915 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 11962: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11963 147.765929 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 11963: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11964 147.765943 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 11964: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11965 147.766017 192.168.10.226 192.168.10.128 ICMP 60 Echo (ping) request id=0x0400, seq=37873/61843, ttl=128 Frame 11965: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.128 (192.168.10.128) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 11966 147.766112 192.168.10.46 192.168.10.245 Syslog 188 LOCAL4.INFO: Oct 03 2011 19:17:28 ciscoasa : %ASA-6-302020: Built inbound ICMP connection for faddr Juno/1024 gaddr 192.168.10.46/0 laddr 192.168.10.46/0\n Frame 11966: 188 bytes on wire (1504 bits), 188 bytes captured (1504 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.INFO: Oct 03 2011 19:17:28 ciscoasa : %ASA-6-302020: Built inbound ICMP connection for faddr Juno/1024 gaddr 192.168.10.46/0 laddr 192.168.10.46/0\n No. Time Source Destination Protocol Length Info 11967 147.766179 192.168.10.128 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=37873/61843, ttl=128 Frame 11967: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Internet Protocol Version 4, Src: 192.168.10.128 (192.168.10.128), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 11968 147.766234 192.168.10.46 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=36337/61837, ttl=255 Frame 11968: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 11969 147.766246 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 11969: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11970 147.766256 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 11970: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11971 147.766267 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 11971: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11972 147.766277 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 11972: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11973 147.766295 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 11973: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11974 147.766305 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 11974: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11975 147.766315 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 11975: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11976 147.766326 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 11976: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11977 147.766336 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 11977: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11978 147.766346 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 11978: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11979 147.766366 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 11979: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11980 147.766401 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 11980: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11981 147.766411 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 11981: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11982 147.766421 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 11982: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11983 147.766448 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 11983: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11984 147.766459 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 11984: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11985 147.766469 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 11985: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11986 147.766479 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 11986: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11987 147.766489 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 11987: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11988 147.766499 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 11988: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11989 147.766510 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 11989: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11990 147.766519 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 11990: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11991 147.766530 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 11991: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11992 147.766540 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 11992: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11993 147.766550 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 11993: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11994 147.766560 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 11994: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 11995 147.766571 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 11995: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11996 147.766589 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 11996: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11997 147.766600 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 11997: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11998 147.766610 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 11998: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 11999 147.766620 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 11999: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12000 147.766630 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 12000: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12001 147.766640 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 12001: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12002 147.766649 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 12002: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12003 147.766660 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 12003: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12004 147.766670 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 12004: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12005 147.766681 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 12005: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12006 147.766753 192.168.10.226 192.168.10.138 ICMP 60 Echo (ping) request id=0x0400, seq=39921/61851, ttl=128 Frame 12006: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.138 (192.168.10.138) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 12007 147.766766 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 12007: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12008 147.766776 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 12008: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12009 147.766786 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 12009: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12010 147.766847 192.168.10.138 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=39921/61851, ttl=128 Frame 12010: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.138 (192.168.10.138), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 12011 147.766859 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 12011: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12012 147.766874 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 12012: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12013 147.766884 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.100? Tell 192.168.10.226 Frame 12013: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12014 147.766903 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.100? Tell 192.168.10.226 Frame 12014: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12015 147.766917 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.73? Tell 192.168.10.226 Frame 12015: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12016 147.766930 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.73? Tell 192.168.10.226 Frame 12016: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12017 147.766984 192.168.10.226 192.168.10.46 ICMP 60 Echo (ping) request id=0x0400, seq=41457/61857, ttl=128 Frame 12017: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.46 (192.168.10.46) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 12018 147.766995 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 12018: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12019 147.767008 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 12019: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12020 147.767059 192.168.10.226 192.168.10.128 ICMP 60 Echo (ping) request id=0x0400, seq=42993/61863, ttl=128 Frame 12020: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.128 (192.168.10.128) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 12021 147.767070 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 12021: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12022 147.767081 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 12022: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12023 147.767127 192.168.10.128 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=42993/61863, ttl=128 Frame 12023: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.128 (192.168.10.128), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 12024 147.767177 192.168.10.46 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=41457/61857, ttl=255 Frame 12024: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 12025 147.767188 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 12025: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12026 147.767199 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 12026: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12027 147.767302 192.168.10.226 192.168.10.138 ICMP 60 Echo (ping) request id=0x0400, seq=45041/61871, ttl=128 Frame 12027: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.138 (192.168.10.138) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 12028 147.767314 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 12028: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12029 147.767329 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 12029: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12030 147.767376 192.168.10.138 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=45041/61871, ttl=128 Frame 12030: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.138 (192.168.10.138), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 12031 147.767388 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 12031: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12032 147.767398 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 12032: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12033 147.767410 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 12033: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12034 147.767438 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 12034: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12035 147.767449 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 12035: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12036 147.767458 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 12036: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12037 147.767483 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 12037: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12038 147.767494 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 12038: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12039 147.767504 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 12039: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12040 147.767514 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 12040: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12041 147.767525 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 12041: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12042 147.767536 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 12042: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12043 147.767546 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 12043: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12044 147.767564 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 12044: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12045 147.767575 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 12045: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12046 147.767585 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 12046: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12047 147.767595 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 12047: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12048 147.767606 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 12048: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12049 147.767617 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 12049: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12050 147.767627 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 12050: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12051 147.767638 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 12051: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12052 147.767648 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 12052: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12053 147.767659 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 12053: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12054 147.767669 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 12054: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12055 147.767680 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 12055: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12056 147.767690 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 12056: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12057 147.767701 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 12057: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12058 147.767711 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 12058: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12059 147.767722 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 12059: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12060 147.767772 192.168.10.226 192.168.10.46 ICMP 60 Echo (ping) request id=0x0400, seq=46577/61877, ttl=128 Frame 12060: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.46 (192.168.10.46) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 12061 147.767783 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 12061: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12062 147.767806 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 12062: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12063 147.767816 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 12063: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12064 147.767826 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 12064: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12065 147.767873 192.168.10.46 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=46577/61877, ttl=255 Frame 12065: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 12066 147.767884 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 12066: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12067 147.767935 192.168.10.226 192.168.10.128 ICMP 60 Echo (ping) request id=0x0400, seq=48113/61883, ttl=128 Frame 12067: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.128 (192.168.10.128) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 12068 147.768014 192.168.10.128 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=48113/61883, ttl=128 Frame 12068: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Internet Protocol Version 4, Src: 192.168.10.128 (192.168.10.128), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 12069 147.768238 192.168.10.226 192.168.10.138 ICMP 60 Echo (ping) request id=0x0400, seq=50161/61891, ttl=128 Frame 12069: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.138 (192.168.10.138) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 12070 147.768288 192.168.10.138 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=50161/61891, ttl=128 Frame 12070: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.138 (192.168.10.138), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 12071 147.768606 192.168.10.46 192.168.10.245 Syslog 183 LOCAL4.INFO: Oct 03 2011 19:17:28 ciscoasa : %ASA-6-302021: Teardown ICMP connection for faddr Juno/1024 gaddr 192.168.10.46/0 laddr 192.168.10.46/0\n Frame 12071: 183 bytes on wire (1464 bits), 183 bytes captured (1464 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.INFO: Oct 03 2011 19:17:28 ciscoasa : %ASA-6-302021: Teardown ICMP connection for faddr Juno/1024 gaddr 192.168.10.46/0 laddr 192.168.10.46/0\n No. Time Source Destination Protocol Length Info 12072 147.807148 192.168.10.142 192.168.10.220 DNS 77 Standard query A www.kaspersky.com Frame 12072: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: ftranhc (1105), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12073 147.807246 192.168.10.220 192.168.10.142 DNS 115 Standard query response CNAME web.geo.kaspersky.com A 195.27.252.18 Frame 12073: 115 bytes on wire (920 bits), 115 bytes captured (920 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.142 (192.168.10.142) User Datagram Protocol, Src Port: domain (53), Dst Port: ftranhc (1105) Domain Name System (response) No. Time Source Destination Protocol Length Info 12074 147.843200 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-15.geo.kaspersky.com Frame 12074: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 58884 (58884), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12075 147.843351 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-15.geo.kaspersky.com Frame 12075: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 58884 (58884), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12076 147.957175 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 12076: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12077 147.957207 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 12077: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12078 147.994465 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 12078: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11089, Ack: 837143, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12079 147.994503 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=837990 Ack=11131 Win=46363 Len=0 Frame 12079: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 837990, Ack: 11131, Len: 0 No. Time Source Destination Protocol Length Info 12080 147.994534 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=11131 Ack=837143 Win=0 Len=0 Frame 12080: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11131, Ack: 837143, Len: 0 No. Time Source Destination Protocol Length Info 12081 148.003070 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:17:28 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 12081: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:17:28 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 12082 148.247554 192.168.10.203 217.202.109.175 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 12082: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 217.202.109.175 (217.202.109.175) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 12083 148.503540 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4054784256, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12083: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12084 148.503564 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4054784256, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12084: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12085 148.503577 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4054784256, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12085: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12086 148.503590 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4054784256, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12086: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12087 148.521768 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1628963072, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12087: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12088 148.521791 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1628963072, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12088: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12089 148.521804 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1628963072, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12089: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12090 148.521817 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1628963072, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12090: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12091 148.833466 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.32 Frame 12091: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12092 148.833499 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.32 Frame 12092: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12093 149.193995 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 12093: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12094 149.199178 WwPcbaTe_6d:76:3c Broadcast ARP 60 Who has 192.168.10.62? Tell 192.168.10.201 Frame 12094: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12095 149.199199 WwPcbaTe_6d:76:3c Broadcast ARP 60 Who has 192.168.10.62? Tell 192.168.10.201 Frame 12095: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12096 149.199417 WwPcbaTe_6d:76:3c Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.201 Frame 12096: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12097 149.199432 Watchgua_3c:4c:d8 WwPcbaTe_6d:76:3c ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 12097: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12098 149.253334 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 12098: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12099 149.253363 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 12099: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12100 149.253378 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 12100: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12101 149.253388 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 12101: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12102 149.253399 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 12102: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12103 149.253409 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 12103: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12104 149.253419 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 12104: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12105 149.253437 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 12105: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12106 149.253443 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 12106: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12107 149.253453 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 12107: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12108 149.253460 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 12108: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12109 149.253471 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 12109: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12110 149.253492 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 12110: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12111 149.253499 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 12111: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12112 149.253505 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 12112: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12113 149.253521 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 12113: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12114 149.253527 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 12114: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12115 149.253534 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 12115: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12116 149.253540 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 12116: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12117 149.253546 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 12117: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12118 149.253552 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 12118: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12119 149.253559 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 12119: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12120 149.253565 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 12120: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12121 149.253571 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 12121: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12122 149.253578 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 12122: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12123 149.253584 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 12123: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12124 149.253595 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 12124: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12125 149.253601 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 12125: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12126 149.253607 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 12126: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12127 149.253613 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 12127: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12128 149.253619 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 12128: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12129 149.253626 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 12129: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12130 149.253632 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 12130: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12131 149.253638 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 12131: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12132 149.253645 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 12132: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12133 149.253651 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 12133: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12134 149.253657 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 12134: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12135 149.253664 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 12135: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12136 149.253672 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 12136: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12137 149.253678 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 12137: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12138 149.253685 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 12138: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12139 149.253691 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 12139: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12140 149.253697 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 12140: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12141 149.253906 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 12141: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12142 149.317982 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 12142: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12143 149.440040 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 12143: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12144 149.440062 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 12144: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12145 149.443663 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 12145: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12146 149.503041 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:17:30 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 12146: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:17:30 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 12147 149.519067 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4071561472, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12147: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12148 149.519081 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4071561472, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12148: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12149 149.519089 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4071561472, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12149: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12150 149.519097 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4071561472, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12150: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12151 149.537359 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1645740288, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12151: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12152 149.537372 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1645740288, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12152: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12153 149.537385 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1645740288, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12153: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12154 149.537396 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1645740288, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12154: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12155 149.566139 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 12155: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12156 149.655961 192.168.10.107 192.168.10.255 BROWSER 243 Host Announcement TRAININGPC12, Workstation, Server, NT Workstation, Potential Browser Frame 12156: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: IntelCor_d3:4e:05 (00:13:20:d3:4e:05), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.107 (192.168.10.107), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 12157 149.656128 192.168.10.107 192.168.10.255 BROWSER 243 Host Announcement TRAININGPC12, Workstation, Server, NT Workstation, Potential Browser Frame 12157: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: IntelCor_d3:4e:05 (00:13:20:d3:4e:05), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.107 (192.168.10.107), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 12158 149.747503 192.168.10.203 217.202.109.175 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 12158: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 217.202.109.175 (217.202.109.175) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 12159 149.948358 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 12159: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12160 149.948390 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 12160: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12161 150.165226 192.168.10.207 206.225.164.188 SMTP 222 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 12161: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6343, Ack: 457411, Len: 168 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12162 150.165432 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=458677 Ack=6511 Win=46195 Len=0 Frame 12162: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 458677, Ack: 6511, Len: 0 No. Time Source Destination Protocol Length Info 12163 150.165462 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=6511 Ack=457411 Win=0 Len=0 Frame 12163: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6511, Ack: 457411, Len: 0 No. Time Source Destination Protocol Length Info 12164 150.185237 192.168.10.207 192.168.10.255 BROWSER 243 Host Announcement PERSEUS, Workstation, Server, SQL Server, NT Workstation, NT Server, Backup Browser, DFS server Frame 12164: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 12165 150.185460 192.168.10.207 192.168.10.255 BROWSER 243 Host Announcement PERSEUS, Workstation, Server, SQL Server, NT Workstation, NT Server, Backup Browser, DFS server Frame 12165: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 12166 150.534731 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4088338688, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12166: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12167 150.534756 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4088338688, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12167: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12168 150.534769 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4088338688, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12168: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12169 150.534781 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4088338688, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12169: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12170 150.553044 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1662517504, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12170: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12171 150.553064 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1662517504, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12171: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12172 150.553076 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1662517504, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12172: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12173 150.553089 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1662517504, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12173: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12174 150.995423 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 12162#1] 9428 > smtp [ACK] Seq=458677 Ack=6511 Win=46195 Len=0 Frame 12174: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 458677, Ack: 6511, Len: 0 No. Time Source Destination Protocol Length Info 12175 150.995463 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=6511 Ack=457411 Win=0 Len=0 Frame 12175: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6511, Ack: 457411, Len: 0 No. Time Source Destination Protocol Length Info 12176 151.003012 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:17:31 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 12176: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:17:31 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 12177 151.194157 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 12177: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12178 151.270308 192.168.10.246 65.32.1.65 DNS 87 Standard query PTR 107.111.166.82.in-addr.arpa Frame 12178: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 54891 (54891), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12179 151.315470 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 12179: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12180 151.443785 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 12180: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12181 151.445715 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 12181: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12182 151.445745 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 12182: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12183 151.550317 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4105115904, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12183: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12184 151.550342 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4105115904, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12184: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12185 151.550354 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4105115904, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12185: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12186 151.550366 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4105115904, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12186: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12187 151.566175 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 12187: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12188 151.568695 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1679294720, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12188: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12189 151.568715 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1679294720, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12189: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12190 151.568727 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1679294720, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12190: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12191 151.568740 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1679294720, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12191: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12192 151.666923 192.168.10.142 192.168.10.255 BROWSER 255 Domain/Workgroup Announcement WORKGROUP, NT Workstation, Domain Enum Frame 12192: 255 bytes on wire (2040 bits), 255 bytes captured (2040 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 12193 151.667140 192.168.10.142 192.168.10.255 BROWSER 255 Domain/Workgroup Announcement WORKGROUP, NT Workstation, Domain Enum Frame 12193: 255 bytes on wire (2040 bits), 255 bytes captured (2040 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 12194 151.946299 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 12194: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12195 151.946331 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 12195: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12196 152.192518 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 12196: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12197 152.192551 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 12197: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12198 152.192580 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 12198: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12199 152.192590 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 12199: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12200 152.192601 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 12200: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12201 152.192611 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 12201: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12202 152.192625 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 12202: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12203 152.192635 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 12203: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12204 152.192645 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 12204: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12205 152.192655 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 12205: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12206 152.192665 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 12206: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12207 152.192682 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 12207: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12208 152.192716 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 12208: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12209 152.192727 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 12209: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12210 152.192737 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 12210: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12211 152.192879 192.168.10.46 192.168.10.245 Syslog 214 LOCAL4.WARNING: Oct 03 2011 19:17:32 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n Frame 12211: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:17:32 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n No. Time Source Destination Protocol Length Info 12212 152.192893 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 12212: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12213 152.192904 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 12213: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12214 152.192914 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 12214: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12215 152.192925 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 12215: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12216 152.192935 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 12216: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12217 152.192945 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 12217: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12218 152.192955 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 12218: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12219 152.192965 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 12219: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12220 152.192975 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 12220: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12221 152.192985 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 12221: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12222 152.193008 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 12222: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12223 152.193019 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 12223: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12224 152.193029 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 12224: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12225 152.193039 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 12225: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12226 152.193049 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 12226: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12227 152.193059 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 12227: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12228 152.193069 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 12228: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12229 152.193079 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 12229: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12230 152.193089 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 12230: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12231 152.193098 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 12231: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12232 152.193108 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 12232: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12233 152.193119 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 12233: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12234 152.193129 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 12234: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12235 152.193139 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 12235: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12236 152.193149 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 12236: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12237 152.193159 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 12237: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12238 152.193169 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 12238: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12239 152.193179 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 12239: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12240 152.193372 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 12240: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12241 152.270058 192.168.10.220 208.67.222.222 DNS 87 Standard query PTR 107.111.166.82.in-addr.arpa Frame 12241: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 49699 (49699), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12242 152.452980 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 12242: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12243 152.453012 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 12243: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12244 152.503013 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:17:33 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 12244: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:17:33 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 12245 152.566000 208.67.222.222 192.168.10.220 DNS 132 Standard query response PTR 82-166-111-107.barak-online.net Frame 12245: 132 bytes on wire (1056 bits), 132 bytes captured (1056 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 49699 (49699) Domain Name System (response) No. Time Source Destination Protocol Length Info 12246 152.566021 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4121893120, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12246: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12247 152.566040 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4121893120, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12247: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12248 152.566053 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4121893120, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12248: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12249 152.566065 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4121893120, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12249: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12250 152.567372 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 Who has 192.168.10.220? Tell 192.168.10.1 Frame 12250: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12251 152.567414 Dell_ad:25:f6 Watchgua_3c:4c:d8 ARP 60 192.168.10.220 is at 00:22:19:ad:25:f6 Frame 12251: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12252 152.577604 123.18.166.30 192.168.10.207 TCP 60 29139 > smtp [RST, ACK] Seq=20 Ack=312 Win=93128 Len=0 Frame 12252: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 123.18.166.30 (123.18.166.30), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 29139 (29139), Dst Port: smtp (25), Seq: 20, Ack: 312, Len: 0 No. Time Source Destination Protocol Length Info 12253 152.577745 192.168.10.1 192.168.10.245 Syslog 202 LOCAL1.INFO: Oct 3 19:46:50 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 29139 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 12253: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:46:50 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 123.18.166.30 7x.x.x.3 29139 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 12254 152.579417 192.168.10.207 206.225.164.186 SMTP 348 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 12254: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11089, Ack: 837143, Len: 294 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12255 152.579447 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=837990 Ack=11383 Win=46237 Len=0 Frame 12255: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 837990, Ack: 11383, Len: 0 No. Time Source Destination Protocol Length Info 12256 152.579460 Watchgua_3c:4c:d8 SunrichT_19:cf:97 ARP 60 Who has 192.168.10.245? Tell 192.168.10.1 Frame 12256: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12257 152.579488 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=11383 Ack=837143 Win=0 Len=0 Frame 12257: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11383, Ack: 837143, Len: 0 No. Time Source Destination Protocol Length Info 12258 152.579501 SunrichT_19:cf:97 Watchgua_3c:4c:d8 ARP 60 192.168.10.245 is at 00:0a:cd:19:cf:97 Frame 12258: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:97 (00:0a:cd:19:cf:97), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12259 152.584313 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1696071936, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12259: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12260 152.584334 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1696071936, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12260: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12261 152.584347 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1696071936, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12261: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12262 152.584360 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1696071936, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12262: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12263 152.691219 192.168.10.220 208.67.222.222 DNS 87 Standard query PTR 164.92.169.122.in-addr.arpa Frame 12263: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 55880 (55880), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12264 152.987450 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:17:33 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 12264: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:17:33 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 12265 152.995457 206.225.164.186 192.168.10.207 TCP 60 [TCP Dup ACK 12255#1] 23308 > smtp [ACK] Seq=837990 Ack=11383 Win=46237 Len=0 Frame 12265: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 837990, Ack: 11383, Len: 0 No. Time Source Destination Protocol Length Info 12266 152.995492 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=11383 Ack=837143 Win=0 Len=0 Frame 12266: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11383, Ack: 837143, Len: 0 No. Time Source Destination Protocol Length Info 12267 152.999519 Watchgua_3c:4c:d8 Dell_39:5d:dd ARP 60 Who has 192.168.10.207? Tell 192.168.10.1 Frame 12267: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12268 152.999533 Dell_39:5d:dd Watchgua_3c:4c:d8 ARP 60 192.168.10.207 is at 00:18:8b:39:5d:dd Frame 12268: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12269 153.043510 192.168.10.57 192.168.10.255 BROWSER 243 Host Announcement SWITCHBOARDXP, Workstation, Server, NT Workstation, Potential Browser Frame 12269: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: IntelCor_1b:54:aa (00:13:20:1b:54:aa), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.57 (192.168.10.57), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 12270 153.043752 192.168.10.57 192.168.10.255 BROWSER 243 Host Announcement SWITCHBOARDXP, Workstation, Server, NT Workstation, Potential Browser Frame 12270: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: IntelCor_1b:54:aa (00:13:20:1b:54:aa), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.57 (192.168.10.57), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 12271 153.194062 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 12271: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12272 153.315579 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 12272: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12273 153.436594 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 12273: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12274 153.436626 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 12274: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12275 153.443795 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 12275: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12276 153.566192 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 12276: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12277 153.575911 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=157797 Ack=2665 Win=1002 Len=1448 TSval=573642 TSecr=728718 Frame 12277: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 157797, Ack: 2665, Len: 1448 Data (1448 bytes) 0000 17 03 01 13 00 8b 64 cc bb d0 a3 5d 9a f7 28 43 ......d....]..(C 0010 73 b2 2c 2b 64 6c 95 e9 9a 67 a6 9b 8d b3 e2 67 s.,+dl...g.....g 0020 21 70 99 85 3f 98 07 3b c8 df 6d 76 ec bd b0 0f !p..?..;..mv.... 0030 af e7 f6 60 59 43 c6 54 78 5a 4f d0 76 6d c9 ec ...`YC.TxZO.vm.. 0040 45 4c 25 ea 1d ca d0 fc 55 62 fc 24 a2 80 ad ac EL%.....Ub.$.... 0050 14 aa c0 65 af 2e c7 6e a7 5a 2c e6 1b b6 f9 46 ...e...n.Z,....F 0060 d1 84 be 50 b3 00 b3 bc db 08 52 91 b8 b0 72 48 ...P......R...rH 0070 4d 8c b2 5c 9c 8c 93 71 f6 23 1b 26 d1 36 c1 cb M..\...q.#.&.6.. 0080 ab a8 af 05 e7 20 89 f8 12 94 f2 95 29 14 c5 ea ..... ......)... 0090 65 71 a7 6e ad 9b 24 53 d9 ba a9 a3 b6 1f c4 59 eq.n..$S.......Y 00a0 fd 94 15 5e 68 84 44 d8 24 6c e3 c9 f5 e9 85 ad ...^h.D.$l...... 00b0 d4 33 25 fd aa fe 55 2e 26 e0 1b 87 10 e5 f4 cb .3%...U.&....... 00c0 37 40 fb 5f f8 9e c6 47 27 60 50 8b c3 54 94 65 7@._...G'`P..T.e 00d0 8f b4 09 32 58 ce 1c ac f4 10 c3 78 08 55 ad 81 ...2X......x.U.. 00e0 7d 52 75 a5 7a 38 e3 4a 50 a7 b9 25 70 01 b4 c1 }Ru.z8.JP..%p... 00f0 65 b6 45 da 55 08 a8 40 56 26 e7 d9 9e 91 f5 04 e.E.U..@V&...... 0100 bc e2 a1 8e e2 8d cf 92 f8 de bd 9c b0 f2 f8 fa ................ 0110 97 0c db 77 7e 8e a0 00 c3 52 76 4c 35 27 e9 26 ...w~....RvL5'.& 0120 c2 76 5b a1 31 a0 50 35 2d b4 a1 1d 96 93 84 c9 .v[.1.P5-....... 0130 42 66 dd ca a7 c9 3a 6d 2b 51 d7 21 ca 08 03 ca Bf....:m+Q.!.... 0140 f6 3a 3e fc 53 c9 d7 1e f4 72 3b c2 d5 86 a5 22 .:>.S....r;...." 0150 6d d7 f9 ee 73 32 a0 0f d7 4f 6a 46 c5 53 d4 ab m...s2...OjF.S.. 0160 35 da 65 8b 9f eb c2 17 ff 16 7f 94 73 08 f9 77 5.e.........s..w 0170 c5 f7 2c 40 1f 9c b1 62 f0 47 35 ce 15 dc fb 25 ..,@...b.G5....% 0180 f9 21 8d 0e 4b 28 64 bb 72 7f 79 7d 11 9c 7a 39 .!..K(d.r.y}..z9 0190 49 4c 4f 67 6f a5 18 dc fb 8d 56 72 48 ca a8 49 ILOgo.....VrH..I 01a0 e6 38 c0 6c c9 87 43 09 29 be 1e 44 f4 e4 b9 fa .8.l..C.)..D.... 01b0 5f 10 67 b9 77 5a 80 ce 22 cb 5d 53 0a 40 39 8c _.g.wZ..".]S.@9. 01c0 9c 4b 41 1c ab 70 41 98 cc df f2 b9 df f2 8e 7f .KA..pA......... 01d0 75 87 56 f9 5b 0b 32 73 47 a3 bd c0 4f 1a 3b fc u.V.[.2sG...O.;. 01e0 ab ed 74 31 fb 45 e1 19 83 54 7e 36 61 30 37 cf ..t1.E...T~6a07. 01f0 85 f4 7b 27 7c 41 91 37 85 89 d2 16 7b bf fb ad ..{'|A.7....{... 0200 23 d7 bb a5 a1 28 9a 4a 34 77 e6 bb 52 89 9e 00 #....(.J4w..R... 0210 44 53 23 1c 76 d8 a7 87 84 f1 11 b3 31 75 09 28 DS#.v.......1u.( 0220 ea 59 a8 53 eb 6b 53 e3 3c a8 67 5a be 93 0c a2 .Y.S.kS.<.gZ.... 0230 d1 6b 11 75 06 04 62 fb 5d 65 81 07 2b b6 92 f4 .k.u..b.]e..+... 0240 c1 35 56 65 98 6b 90 30 fa 85 f0 e0 72 65 0b f7 .5Ve.k.0....re.. 0250 36 8b 62 fa 22 9a 74 0a 3d 55 ee 31 6d 9e 21 9c 6.b.".t.=U.1m.!. 0260 05 56 91 e8 04 84 ef 5b 17 ba 1e dc bd 09 c4 c8 .V.....[........ 0270 1a 03 18 75 6a 18 98 b3 92 a0 4b 70 c0 89 3a 1f ...uj.....Kp..:. 0280 ed 2e 92 b4 16 ad 3b 06 e6 12 b1 af 00 fa b6 be ......;......... 0290 a9 96 b8 57 43 c3 5e e6 6a 3f 9c ec 2b 4a f1 e4 ...WC.^.j?..+J.. 02a0 d5 fc c0 5e a7 6e c1 17 68 44 58 ec 8f 5c 2d 5a ...^.n..hDX..\-Z 02b0 4b c1 3d 57 c6 f4 d5 52 63 c1 2e 88 d8 91 ef e9 K.=W...Rc....... 02c0 bc bf 0f a0 fe d2 0d b2 e8 d1 66 39 e5 2b ca a5 ..........f9.+.. 02d0 2a e1 39 80 1f 3e f3 7f 9b 16 30 60 c8 51 f5 18 *.9..>....0`.Q.. 02e0 4b 0c 95 b7 51 c2 fb 9e cf c5 14 fa 02 45 b0 14 K...Q........E.. 02f0 4c ec 31 6a 69 66 f9 82 94 48 73 65 7c 7a fd a3 L.1jif...Hse|z.. 0300 62 ea 57 02 fc 31 ad 62 0d 3c fe 2b 63 57 fc 93 b.W..1.b.<.+cW.. 0310 23 47 e9 96 f8 91 79 bf 87 3c b3 db 2c cf 00 98 #G....y..<..,... 0320 46 d1 1b b3 74 9e 57 42 04 ee c1 f3 84 c9 3d 57 F...t.WB......=W 0330 b5 91 55 47 5d 8d be 3b cd 73 c2 04 34 fa 41 6a ..UG]..;.s..4.Aj 0340 8a 26 5c 8e 95 cf ce 29 c7 39 a2 dc 05 84 9f 8a .&\....).9...... 0350 fc 55 e8 ad e0 a0 55 fa 16 18 76 5c 86 9f 89 01 .U....U...v\.... 0360 ec 86 1f 15 12 95 a4 80 f5 c3 36 06 64 9e 79 2a ..........6.d.y* 0370 71 d7 9a 5e d1 71 89 5d 5f 1d 50 d5 57 f9 f3 d2 q..^.q.]_.P.W... 0380 a3 7c 06 3a b0 2c 73 29 8c 21 13 5a fc 16 6e e3 .|.:.,s).!.Z..n. 0390 d9 b1 bf 64 c8 94 82 f9 f2 66 81 89 d4 80 3f ab ...d.....f....?. 03a0 83 2e 2a 7a ad 13 1b 11 18 b9 58 66 6e 43 82 2b ..*z......XfnC.+ 03b0 82 a9 c4 65 12 87 a0 ab 27 ae d8 30 b7 27 8c ac ...e....'..0.'.. 03c0 ad 58 5c 05 ff b0 9b 97 0f c7 33 0c b1 49 01 c3 .X\.......3..I.. 03d0 b6 20 fa 82 58 b5 57 ae 27 de 47 78 61 d3 ef be . ..X.W.'.Gxa... 03e0 f3 e7 83 46 80 dd c5 5a fe ae 8b 06 70 9e 8d ab ...F...Z....p... 03f0 36 81 d8 28 bd 9d 17 27 d5 2b 3b ff 5e ba e5 61 6..(...'.+;.^..a 0400 a1 08 cf 1f 66 d6 da a4 b9 60 4b c9 ee 85 ec f8 ....f....`K..... 0410 59 50 ef 85 35 34 15 b3 d6 95 28 00 0b b8 ac 00 YP..54....(..... 0420 3f d5 8f 1c 5c c2 0e 5a 6d d2 81 e5 e8 1b 6d 37 ?...\..Zm.....m7 0430 31 7e e6 4f b2 92 2b 93 6a ca 20 b0 1c 0c 05 cd 1~.O..+.j. ..... 0440 b9 75 58 70 35 e2 5b 71 99 11 fd 1b a8 07 9e 95 .uXp5.[q........ 0450 e1 77 5f 8a ce e4 88 2e 3f 22 9a b7 19 b5 56 b1 .w_.....?"....V. 0460 8c 05 66 39 16 7a e8 f3 e2 9b 3b 80 4f d0 3e 02 ..f9.z....;.O.>. 0470 74 89 85 ba 10 8f f5 fb 1e 60 ca 10 11 b9 21 c9 t........`....!. 0480 44 c2 bf 11 ee a2 a0 95 6a b0 5e 03 c0 bd 07 4a D.......j.^....J 0490 d1 8f 00 07 d3 e1 89 cc a9 df 4b 5a 2e 1c c4 64 ..........KZ...d 04a0 c9 9d 07 2f c6 92 48 04 7e da 1e 05 1f 62 61 72 .../..H.~....bar 04b0 bc 71 f9 c1 be 51 8f b4 78 37 80 7a 65 6a f0 15 .q...Q..x7.zej.. 04c0 d0 30 04 1d cf 85 7b 3d c8 e9 68 bb c0 74 a4 bf .0....{=..h..t.. 04d0 c2 3a 28 f7 e8 0a 5b 9b 17 5e 8f 3e 31 29 0c 55 .:(...[..^.>1).U 04e0 f1 8f 66 0b 21 66 47 5f 8f db 0e 61 b6 e2 a0 1f ..f.!fG_...a.... 04f0 e3 94 f8 e9 0e 8a ca b5 49 f4 48 c3 6c cd 4a 4f ........I.H.l.JO 0500 22 16 c2 72 7d b0 82 14 bc f0 d9 10 1c 97 8b ce "..r}........... 0510 02 58 60 2c b6 a8 e8 95 03 55 c4 00 c0 44 9a a3 .X`,.....U...D.. 0520 c8 e7 ae c4 83 84 23 2a ca 16 bd f8 4c 7b 1c b0 ......#*....L{.. 0530 12 79 07 02 da 24 b2 eb 32 05 b1 fd 84 3b 41 5a .y...$..2....;AZ 0540 29 8c bb 99 c9 14 fb a1 42 b3 c6 d7 fc a6 ac 70 ).......B......p 0550 09 eb 4a a3 b4 43 5a 09 19 6c a1 1c 26 23 2b 2d ..J..CZ..l..&#+- 0560 e0 60 e1 ac 5c ea 1c e0 e3 4f 7f e5 0c 45 d4 d7 .`..\....O...E.. 0570 1f d1 3f b7 74 e6 eb 55 33 1b a2 86 ce 43 f3 26 ..?.t..U3....C.& 0580 82 da f7 84 6e 47 62 fd a1 3e 2e a4 1f c0 1a 63 ....nGb..>.....c 0590 27 4f d4 3b c0 a8 3e 48 65 ab d4 0b 78 a1 29 cf 'O.;..>He...x.). 05a0 7f 88 92 a7 e3 f1 9b 2c ......., No. Time Source Destination Protocol Length Info 12278 153.576034 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=159245 Ack=2665 Win=1002 Len=1448 TSval=573642 TSecr=728718 Frame 12278: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 159245, Ack: 2665, Len: 1448 Data (1448 bytes) 0000 12 fd 2e 03 98 e3 1d f4 40 21 5f 74 c6 42 6e c4 ........@!_t.Bn. 0010 83 fe 86 96 45 23 46 2e c2 28 4c 18 35 0b db a7 ....E#F..(L.5... 0020 66 2b f1 4b e6 00 70 41 55 c6 d6 55 3f 96 7f f5 f+.K..pAU..U?... 0030 f2 86 07 f8 94 f2 88 57 4e 11 b3 b0 b9 d4 d7 29 .......WN......) 0040 a6 da e8 43 8f 4a 07 41 6f 5e 10 4c 59 d0 fb e2 ...C.J.Ao^.LY... 0050 1e ab e5 8c 61 36 bb 60 3b e5 8a d7 fa 20 de 93 ....a6.`;.... .. 0060 08 8e 4f 62 9b 17 f8 3f 0e 86 e1 b7 15 41 4f bd ..Ob...?.....AO. 0070 15 60 97 4d 0c 18 bb 26 51 12 06 79 13 54 f2 c4 .`.M...&Q..y.T.. 0080 d1 b4 51 83 2a cb 08 02 10 b2 5f e1 91 18 61 e4 ..Q.*....._...a. 0090 71 4b 37 c1 cd 58 ee f1 40 f8 cd 22 0c a2 c0 06 qK7..X..@..".... 00a0 f5 22 90 eb 9f 92 78 62 a3 34 a4 01 ca 0a dd f2 ."....xb.4...... 00b0 66 ad 9b 04 77 ee 84 b8 1a d3 42 bf 08 b4 f8 9c f...w.....B..... 00c0 ec 78 91 0e 28 6c c1 c7 87 ba 7f e5 73 b7 cf 35 .x..(l......s..5 00d0 b6 0a 5c 85 a1 8d 2a d3 95 91 13 35 8a e5 56 27 ..\...*....5..V' 00e0 9b eb c6 9d 75 5a ae 4f 25 33 e6 a2 a8 e2 63 ff ....uZ.O%3....c. 00f0 bf 0d 56 d7 03 9e a7 14 7b ee 32 86 d2 4c 2a c5 ..V.....{.2..L*. 0100 a4 cc bc 2b d3 2b d4 14 7c 50 58 63 9c 2d e8 d3 ...+.+..|PXc.-.. 0110 52 3c 67 14 ac a8 18 aa b4 ae ac a4 ab f3 c6 c5 R<g............. 0120 43 4c 3e 18 82 41 53 3f c0 41 79 58 79 b4 64 a1 CL>..AS?.AyXy.d. 0130 d8 b1 99 75 25 f7 24 e0 d5 d2 e2 ba b7 bc 3c 4f ...u%.$.......<O 0140 3c b8 af e3 3e 16 7c 60 6b f7 72 e9 5e 37 6d 1f <...>.|`k.r.^7m. 0150 97 69 c5 c2 6d cf 39 dc f9 a9 2d aa 0f d4 6a 61 .i..m.9...-...ja 0160 f0 fa 94 d8 4a 81 ac 51 1f 90 08 0c e1 0e cb ad ....J..Q........ 0170 47 6c 7a f6 32 22 62 10 d5 fc 47 8f 08 26 71 6c Glz.2"b...G..&ql 0180 d9 9c a9 93 9a 5f b2 f0 55 93 6e 4f 9a 85 b4 b5 ....._..U.nO.... 0190 96 90 4d 93 d3 45 85 46 a9 3b 0e 9d 68 4a 5b 58 ..M..E.F.;..hJ[X 01a0 94 59 83 4d 85 60 80 cf 04 42 6d 7a d2 14 e2 84 .Y.M.`...Bmz.... 01b0 56 33 40 4a 34 47 bb 74 a9 45 5e be c4 68 1a 3f [email protected]^..h.? 01c0 af 0b 50 64 42 b7 54 7b 19 6a 55 fd 31 cd d0 03 ..PdB.T{.jU.1... 01d0 b4 ef c6 97 ed e6 d9 ea fa 72 85 05 b9 41 ae 01 .........r...A.. 01e0 c3 bb b8 b8 5e 9e 25 3c 20 7e f3 f5 07 71 66 f6 ....^.%< ~...qf. 01f0 b2 4a ef eb 3c 6a dc 6b b7 0e 38 de 6c 5a 79 13 .J..<j.k..8.lZy. 0200 ec a3 28 f6 56 e2 ae 63 c9 c9 e8 a5 ba 79 7c 7e ..(.V..c.....y|~ 0210 97 78 3b 6f 4b 9b 0a 81 26 e2 ed 9d e5 2e b1 e4 .x;oK...&....... 0220 4f 8a 49 26 f7 e6 00 23 cc 47 01 80 be 92 f0 b6 O.I&...#.G...... 0230 eb ef 73 37 8c 51 ee 0c 14 f5 ed 26 90 ef 2b 5e ..s7.Q.....&..+^ 0240 99 01 d1 f8 dc 8e 00 69 df 0e b1 e8 91 d7 1b 33 .......i.......3 0250 0a 4a bc a9 0d 22 94 f8 24 9e b4 e2 8b 6a 25 79 .J..."..$....j%y 0260 44 80 22 eb ec 86 16 3e 30 8c c3 f3 57 2e f6 0c D."....>0...W... 0270 e4 fc 15 78 ff 76 2b fc cc 2b 86 4f 81 94 66 7b ...x.v+..+.O..f{ 0280 e4 7a 07 73 12 32 34 fa 03 b7 e1 64 01 60 bb cf .z.s.24....d.`.. 0290 3c fb 7e 54 56 10 fb f8 52 f7 6b 1d 68 a0 6e 3c <.~TV...R.k.h.n< 02a0 78 8a 1a 2d 26 4d d9 14 37 b0 f3 9f 2c 37 8c 24 x..-&M..7...,7.$ 02b0 46 50 8b 17 f7 56 07 5f 79 69 57 21 f6 b7 f5 bf FP...V._yiW!.... 02c0 69 33 31 6c 53 78 08 1d 0a a5 2c 4b a0 5b 56 18 i31lSx....,K.[V. 02d0 06 a1 e1 b3 13 35 06 e5 ae 83 a7 c2 7c 3d b2 8b .....5......|=.. 02e0 53 94 8a fb 8e be f9 0a 81 68 35 d4 58 40 05 11 S........h5.X@.. 02f0 1b 75 8c 08 31 9a f1 37 79 81 ae e0 9e 83 22 0d .u..1..7y.....". 0300 0c 26 ce e9 72 7f 04 25 cb 38 07 2a be 52 b4 45 .&..r..%.8.*.R.E 0310 5d be 12 fa 08 eb 33 40 73 9f 20 ce ab 1a 61 96 ].....3@s. ...a. 0320 39 47 97 69 1d f6 20 f1 4d ec 98 38 1d 9f 5a 1f 9G.i.. .M..8..Z. 0330 c9 7a b5 d5 b1 b0 58 0e 45 f1 49 aa 72 2c 14 55 .z....X.E.I.r,.U 0340 ee 3e c3 9b 96 7c c2 5e 66 00 74 ec 5e 49 91 f9 .>...|.^f.t.^I.. 0350 3e dd 03 57 81 2f af 2c 69 75 0c 39 62 6f ee 87 >..W./.,iu.9bo.. 0360 91 2f 18 13 b1 4c 6c 8c fe 38 7b b9 58 b7 40 7b ./...Ll..8{.X.@{ 0370 a6 8b 72 74 e7 42 34 68 53 2d e6 5f 4f f3 f6 77 ..rt.B4hS-._O..w 0380 35 84 1a 07 e7 7c e7 ee 5c ed 4a 72 75 3d ce 8f 5....|..\.Jru=.. 0390 64 c8 f3 22 f4 a5 71 55 58 f4 9f 46 70 92 19 19 d.."..qUX..Fp... 03a0 b0 31 53 a6 d8 34 3b 6d 13 e1 f8 93 a0 6f b0 b3 .1S..4;m.....o.. 03b0 48 b9 c1 ba 03 60 7d d4 3e 61 1f dc 43 2f e1 af H....`}.>a..C/.. 03c0 56 0a 00 aa 4e 80 89 30 ef a4 b3 d2 ce 56 10 6d V...N..0.....V.m 03d0 42 19 4f da 62 05 1b b4 79 ad 2b 9a 6e 4b a5 fb B.O.b...y.+.nK.. 03e0 f7 e6 5f d9 2b 90 81 82 98 e1 6e 6c 2f 10 c0 51 .._.+.....nl/..Q 03f0 e7 59 ca f1 16 76 e7 91 52 fc 4d 22 f1 a7 6f 94 .Y...v..R.M"..o. 0400 20 d5 ea 49 ff aa 8f 21 2f 8b c4 c6 38 b7 3e 8f ..I...!/...8.>. 0410 48 0d 49 dc 37 aa d5 15 c8 02 57 a7 ed 3f 56 35 H.I.7.....W..?V5 0420 a3 47 b5 95 be f5 9d e3 34 5f 63 10 18 a3 06 1b .G......4_c..... 0430 e9 52 21 8c 7f 18 c6 60 05 43 16 bf 73 f1 35 b7 .R!....`.C..s.5. 0440 46 7c a9 7a 5c 47 26 8d fe 3d ad 84 79 e5 ef 36 F|.z\G&..=..y..6 0450 9d d7 bc fe 62 e7 8d 77 c3 2a 92 9f ab 99 f9 a5 ....b..w.*...... 0460 fa 1a 3d b7 54 20 22 72 56 35 6d 8f 31 89 c2 61 ..=.T "rV5m.1..a 0470 c0 6d 93 4e e2 a9 36 a0 ad c0 10 96 21 19 d5 e1 .m.N..6.....!... 0480 67 03 65 15 cc 8f 74 80 59 e2 d2 9e 01 ec c3 9c g.e...t.Y....... 0490 0e 11 c4 2c 48 c1 8c 68 d0 68 75 a0 a1 43 59 24 ...,H..h.hu..CY$ 04a0 cc d9 6b c5 ef d4 37 24 c9 63 2c d3 f9 e8 cd 4b ..k...7$.c,....K 04b0 36 52 2d ab 10 da b2 c6 d0 7a 40 3c e5 4a db df 6R-......z@<.J.. 04c0 15 12 50 2d e2 fd a2 67 9f f0 de df 35 47 72 6f ..P-...g....5Gro 04d0 c7 b8 86 b4 d3 66 c8 4d 9d e7 77 a5 d2 f5 48 58 .....f.M..w...HX 04e0 ca d2 86 a9 92 63 d4 c2 60 49 2e 78 f8 ff 9f e8 .....c..`I.x.... 04f0 ef 59 21 97 95 93 4d 72 52 20 5b 08 7a d1 a6 47 .Y!...MrR [.z..G 0500 d7 f9 25 f5 5a 5a 16 ac f3 1d 4a be 81 8a ba 4a ..%.ZZ....J....J 0510 73 97 f2 9a f4 c9 1f df d7 aa 62 db 91 dd 73 04 s.........b...s. 0520 14 f1 0f 5d 3c 21 49 19 ee 52 9d f6 4e fb 01 8c ...]<!I..R..N... 0530 9e 0b d8 1a e8 7b cd 72 2e ad 60 b9 f1 9f 5d 92 .....{.r..`...]. 0540 f6 61 91 d6 68 41 53 71 af a4 20 49 24 af 4c ee .a..hASq.. I$.L. 0550 3d 72 7a 8d 65 63 ac 24 b1 a8 df db 44 d1 42 ac =rz.ec.$....D.B. 0560 8e 37 3e ee d0 96 d8 6f b7 86 44 d3 47 57 55 b7 .7>....o..D.GWU. 0570 e6 03 6b b1 18 ac 06 e3 65 e1 0f 91 d8 a9 a2 57 ..k.....e......W 0580 a6 cc 36 92 52 cb f0 02 6e f5 d2 eb 73 16 c3 d3 ..6.R...n...s... 0590 3c 6b 05 18 57 88 f4 ae 5d 5f 01 d4 6c e5 57 81 <k..W...]_..l.W. 05a0 ae 6f 95 84 90 62 fc 9d .o...b.. No. Time Source Destination Protocol Length Info 12279 153.576146 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=160693 Ack=2665 Win=1002 Len=1448 TSval=573642 TSecr=728718 Frame 12279: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 160693, Ack: 2665, Len: 1448 Data (1448 bytes) 0000 2d 55 3c a9 4d de 0d 16 7a 0f 60 9d a1 fa 0b 86 -U<.M...z.`..... 0010 46 3e 75 09 97 14 1e 79 b6 19 a0 45 4c e8 40 87 F>u....y...EL.@. 0020 13 83 25 22 d5 5f c1 6f 02 7f 8d 12 04 97 90 fa ..%"._.o........ 0030 59 7a 03 9e 81 82 c2 8f 26 ac 7e 56 ce 12 21 18 Yz......&.~V..!. 0040 2a 9e 4e 25 25 05 5d 66 0c 7f 2b 5d 30 41 f2 be *.N%%.]f..+]0A.. 0050 c8 c9 49 47 47 6b 3e 5c 22 ec 77 e8 66 49 d8 53 ..IGGk>\".w.fI.S 0060 07 d0 69 4f c0 2a c0 6f 15 b9 6d 95 2b 6b 3e 8b ..iO.*.o..m.+k>. 0070 a0 5d 59 fe ab 84 a8 b0 94 4c 19 38 8c be e7 fa .]Y......L.8.... 0080 27 69 6e 32 ec 63 34 74 ab 5a 9e e3 7f 17 64 e4 'in2.c4t.Z....d. 0090 de aa 8a 49 13 d0 18 fe 6e 91 6e 9b 93 d8 69 bf ...I....n.n...i. 00a0 ad d3 4b 8a a9 cc a6 93 47 6b ee 44 ac 6f be bb ..K.....Gk.D.o.. 00b0 a8 3c 89 0d ba d5 7c d4 8a 6d 13 f6 db d4 0c 61 .<....|..m.....a 00c0 47 2b a3 87 7b 30 9d c0 b0 16 58 06 a9 40 25 10 G+..{0....X..@%. 00d0 65 0f 77 29 cd 02 08 34 d4 72 18 7a c5 21 c8 84 e.w)...4.r.z.!.. 00e0 a9 67 dc 8b e1 2e 48 3f 3e 74 58 3a 68 70 db 48 .g....H?>tX:hp.H 00f0 7c ce e0 0d bc 16 af 8f 98 8a 20 55 f7 68 a8 b5 |......... U.h.. 0100 03 af 2f 55 f7 b9 fd a4 59 c8 7d 50 5e 8c ec ac ../U....Y.}P^... 0110 06 e1 39 d9 cd 53 a3 13 30 52 96 9c a5 71 8f 60 ..9..S..0R...q.` 0120 f0 ea 46 6d d8 1c ce bd 71 a2 55 df d1 fe 0b a4 ..Fm....q.U..... 0130 55 9f 71 b8 73 b9 aa ce ca cd 89 16 81 b8 a3 09 U.q.s........... 0140 99 9d ec 97 bf c3 04 58 00 01 3c 74 88 d9 4e ab .......X..<t..N. 0150 4e 63 ba bb 83 a9 07 dc 53 60 59 50 15 a2 e3 8c Nc......S`YP.... 0160 45 b1 a1 22 5a 38 a0 67 6a f4 b6 1b f3 ea 75 8e E.."Z8.gj.....u. 0170 2d f8 c6 e1 79 f2 c0 91 6b 7b cd c7 22 b8 d5 05 -...y...k{.."... 0180 1b 32 ec ac a0 20 3b 16 74 41 d4 fe ce 77 14 48 .2... ;.tA...w.H 0190 30 e0 6c d3 62 d1 7f 96 c9 a3 dc d7 eb 35 54 07 0.l.b........5T. 01a0 f6 b5 bc 72 95 1b a9 7f e1 cd 7a 54 98 1d a5 ac ...r......zT.... 01b0 1f 90 09 81 88 00 ff b2 4a 55 92 f6 6d 29 9a 28 ........JU..m).( 01c0 62 9c 6c 3f 8d b4 c0 82 8f d5 f8 43 d9 16 bd 68 b.l?.......C...h 01d0 49 e3 09 43 ef d2 b2 ef 00 c6 23 00 66 34 45 16 I..C......#.f4E. 01e0 0c 46 2c 4a 66 b5 88 dc 6d b8 33 92 b8 48 a4 0e .F,Jf...m.3..H.. 01f0 e7 48 81 67 4b 49 72 63 ed bb 20 2c 4b 44 8b f7 .H.gKIrc.. ,KD.. 0200 ec 35 0a 12 b5 ac cb 77 9e a0 f4 36 ab bc f3 e5 .5.....w...6.... 0210 56 b8 30 b1 4f 96 14 e0 14 fa ed 47 38 12 d5 b8 V.0.O......G8... 0220 eb 33 a0 a7 b5 17 e7 69 2c 44 23 b1 c1 04 42 db .3.....i,D#...B. 0230 9c 83 aa 81 42 2f 0a d0 67 12 22 62 56 c3 f1 72 ....B/..g."bV..r 0240 ab eb dd 61 04 2b 8e 67 08 3e 37 02 e6 55 71 b9 ...a.+.g.>7..Uq. 0250 6b 02 a7 17 cc 52 d3 3b 55 07 64 4d da 75 ca 21 k....R.;U.dM.u.! 0260 81 1a 09 12 75 fa 4c f2 2a 0e 1a fc b0 21 9d 31 ....u.L.*....!.1 0270 71 50 3b 52 5f aa 34 7b 96 3a 64 68 0d 95 c3 32 qP;R_.4{.:dh...2 0280 96 9e b8 41 85 8c 9a 72 ca 16 5c 3a 3e d7 68 09 ...A...r..\:>.h. 0290 b2 52 67 25 3c b9 95 90 83 b6 11 be a7 f4 7a 4f .Rg%<.........zO 02a0 8a aa b8 1c 5e 29 32 ec e6 6c e9 a1 04 b9 66 c3 ....^)2..l....f. 02b0 07 9a 94 df f7 0e 2f d1 52 5b bf 6a 16 8c 68 dc ....../.R[.j..h. 02c0 f2 98 81 2a d8 c9 07 81 9f 54 87 39 80 b4 f5 b7 ...*.....T.9.... 02d0 6f de 14 84 99 20 09 a7 17 76 54 ef 48 b5 8a ea o.... ...vT.H... 02e0 07 0e ca af 8e 22 a6 16 2b 27 8a 12 35 a1 53 ae ....."..+'..5.S. 02f0 dd b8 c1 4d 4d d9 0c 14 c4 61 0d 1a 0f 58 f6 3d ...MM....a...X.= 0300 84 0a 99 eb 14 38 5a 2f 79 31 1a 3f bf 15 f2 ae .....8Z/y1.?.... 0310 77 6a b3 ef 72 8b 5e 35 0e c8 fc 22 95 54 9a 8b wj..r.^5...".T.. 0320 7c 5c 35 cb 02 b6 f1 2d 1b bd 53 9e ea ba 42 e5 |\5....-..S...B. 0330 c2 7c fd 1d 03 60 9c 11 fd 01 39 58 c0 13 18 07 .|...`....9X.... 0340 82 98 20 14 f7 d7 1b 52 bd 97 37 c2 f4 66 01 58 .. ....R..7..f.X 0350 8b 0c 64 c8 5c ce 0d d7 99 b1 93 0e 88 a2 1f 94 ..d.\........... 0360 9a e4 be 5c ae 0c 58 64 5f b9 a8 84 56 58 6f cb ...\..Xd_...VXo. 0370 34 3d f7 bf 9d 03 77 60 45 e5 d9 45 73 2b c8 2a 4=....w`E..Es+.* 0380 e7 31 32 65 99 a3 06 8c 9f bc cc 51 66 fd 69 2f .12e.......Qf.i/ 0390 f3 6c d4 75 46 9e 63 69 4b 66 25 0e d8 64 97 5d .l.uF.ciKf%..d.] 03a0 ca d9 9e f2 d0 fb 5f e6 58 b5 9e 47 5c c2 5e eb ......_.X..G\.^. 03b0 d7 c8 20 44 31 ef 90 62 02 e8 04 7a e4 53 71 65 .. D1..b...z.Sqe 03c0 1b 08 8c e4 12 26 f4 b5 32 96 7f 3e c0 b5 66 4e .....&..2..>..fN 03d0 87 32 66 f3 ed 69 e3 d5 62 48 2a 3b 42 98 b8 8d .2f..i..bH*;B... 03e0 32 34 a5 e5 93 8d f5 e4 67 65 ec 13 8e 3a 74 05 24......ge...:t. 03f0 85 82 49 cf cf 75 94 7f 31 70 88 07 e3 8a 3b ba ..I..u..1p....;. 0400 86 31 92 68 1b a8 0a 3f f8 e1 0d 95 8b 48 40 82 .1.h...?.....H@. 0410 e1 2b 86 67 4e 24 c3 fd 76 44 80 af 5d e8 26 c4 .+.gN$..vD..].&. 0420 66 5e 6c 99 72 ce 42 8d b8 6f fa df 02 a7 c9 c5 f^l.r.B..o...... 0430 e4 b9 b4 c0 b2 6e 61 1c 4f 4c a4 ad aa 85 f3 2a .....na.OL.....* 0440 ef 2c 90 a0 1c 01 58 fa cf b8 0f c3 58 31 ac 4d .,....X.....X1.M 0450 d8 0d 03 4f 7c 8d 28 2c f7 1e 78 7e 61 f5 4b a8 ...O|.(,..x~a.K. 0460 1a 86 fa 54 49 f5 72 e4 ad ff 3a cf 3b 1f da 48 ...TI.r...:.;..H 0470 aa 32 79 06 90 9a 3e e5 b7 2e a8 b8 de d3 aa f8 .2y...>......... 0480 e9 5c 48 f4 2a 3f 22 35 a5 66 3e 80 c4 92 20 78 .\H.*?"5.f>... x 0490 92 3f 8c a1 e8 d8 bd e4 9f c2 3d 03 7a 63 61 2a .?........=.zca* 04a0 55 32 de 58 74 02 a4 db f5 94 90 eb a0 94 6a 88 U2.Xt.........j. 04b0 c4 72 71 24 75 8b 1a 9a 81 75 71 cf 6a 0c b1 77 .rq$u....uq.j..w 04c0 4d 48 1b 61 6a 2a d1 22 45 01 5b e6 6e 3e 75 ea MH.aj*."E.[.n>u. 04d0 bb f7 b6 3d a5 e2 fa 2f 53 b2 02 b7 a6 6a e6 39 ...=.../S....j.9 04e0 38 00 1a 42 fb 6c a3 e0 11 b4 f9 0e fd 86 24 0c 8..B.l........$. 04f0 f0 ae f7 e5 57 41 ad ef 8b 1f dc 08 90 5a b5 6f ....WA.......Z.o 0500 3c 0a 5b 69 ac ff 0b be 0e 97 d5 3a d1 03 af 9b <.[i.......:.... 0510 24 e3 64 64 84 a5 5e db 15 17 45 dd 95 36 86 bd $.dd..^...E..6.. 0520 96 3b ed 84 5c f3 2d a4 aa a8 bf 24 ab 36 7b dd .;..\.-....$.6{. 0530 04 e5 bc fb 0e b9 95 01 b0 3d 18 39 6c 9a d0 00 .........=.9l... 0540 41 3b 93 95 79 61 23 da 89 e8 14 e8 e8 64 3c 6a A;..ya#......d<j 0550 b2 22 48 7b 22 da b8 ef 50 85 13 bf f4 1e 8d a8 ."H{"...P....... 0560 1c 0e 1a 72 b6 e6 63 0d 68 fb 53 a1 90 52 d5 0e ...r..c.h.S..R.. 0570 c7 b7 b6 09 fd dc 49 2c 4a 82 f8 d9 22 d1 4e 65 ......I,J...".Ne 0580 b1 ac c2 49 66 4d 18 9e d5 bc e0 3a 3f 24 e3 81 ...IfM.....:?$.. 0590 46 a3 35 02 bd 9a 89 45 d5 cb 80 77 d0 a2 f5 0d F.5....E...w.... 05a0 87 0f 6c 98 50 43 55 d6 ..l.PCU. No. Time Source Destination Protocol Length Info 12280 153.576209 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2665 Ack=162141 Win=65535 Len=0 TSval=729018 TSecr=573642 Frame 12280: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2665, Ack: 162141, Len: 0 No. Time Source Destination Protocol Length Info 12281 153.576290 192.168.10.1 192.168.10.203 TCP 591 34433 > cds [PSH, ACK] Seq=162141 Ack=2665 Win=1002 Len=525 TSval=573642 TSecr=729018 Frame 12281: 591 bytes on wire (4728 bits), 591 bytes captured (4728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 162141, Ack: 2665, Len: 525 Data (525 bytes) 0000 8f 30 9c f6 0e 2d 31 65 0b 91 1c af 65 28 af fa .0...-1e....e(.. 0010 a1 f3 fe 88 a4 6b 3c bd 62 7a d8 84 09 8d 8f 24 .....k<.bz.....$ 0020 55 75 8d af 8a 5a db 33 06 ef ba 86 45 82 b9 8b Uu...Z.3....E... 0030 ba 30 c2 98 ef 63 d2 06 b4 d1 2b 38 c1 87 aa a9 .0...c....+8.... 0040 b6 7b d6 42 e1 9c 4a 8b 10 4c 99 df 53 a7 ac 9e .{.B..J..L..S... 0050 ca a0 72 37 53 9a 06 8e 53 a0 ef 17 71 9d 64 aa ..r7S...S...q.d. 0060 e8 b7 4c 92 37 4c 98 36 25 44 86 5c be 41 ce 8a ..L.7L.6%D.\.A.. 0070 ca 5c 44 6b c1 eb 56 8c c1 5b 26 99 11 01 2b ba .\Dk..V..[&...+. 0080 c0 88 0c 36 3b 65 14 39 ec cb d3 46 c7 0a 69 c6 ...6;e.9...F..i. 0090 3b 92 13 51 60 f6 7c 7d df 1c 33 06 cb 2d 0d 60 ;..Q`.|}..3..-.` 00a0 e2 c6 ca 6e c5 8e ae 03 0b 35 03 ea 4b e2 66 ef ...n.....5..K.f. 00b0 f3 ea fa c5 2c d9 5d 07 3c d9 d3 72 80 94 bb 37 ....,.].<..r...7 00c0 72 c8 eb 3d f3 57 08 4c 9a 25 cb b9 69 be 85 df r..=.W.L.%..i... 00d0 a2 51 06 2c 36 2d 16 00 bf 66 4d d8 90 96 54 27 .Q.,6-...fM...T' 00e0 7d 89 cf 1c 5f 48 92 13 5a b5 c5 9b 83 a5 e5 c8 }..._H..Z....... 00f0 e3 e4 d8 f6 4d f3 9e 4d cd 17 0c e6 c8 2c 81 e7 ....M..M.....,.. 0100 ca ba 31 b5 ee a6 23 ac a6 aa 79 48 38 08 17 90 ..1...#...yH8... 0110 77 43 78 23 78 2d 44 e1 0f 10 42 1a 84 5b e6 70 wCx#x-D...B..[.p 0120 2d 0a d9 3b 74 23 40 69 b9 0e d4 c1 ba a9 ce b5 -..;t#@i........ 0130 8d 34 9c 87 b7 d1 92 3f f0 7c 1e 50 86 8d 26 9d .4.....?.|.P..&. 0140 f9 a4 99 b2 24 dd 3d 76 e9 ec 88 f7 5a bc ee 78 ....$.=v....Z..x 0150 c9 f6 d1 d7 83 dd 56 5b ce 46 cd 09 c8 db 55 30 ......V[.F....U0 0160 d9 d0 56 43 5b 8a 4b 93 d5 b0 66 4d 9a b6 5b 73 ..VC[.K...fM..[s 0170 c5 ce a0 43 10 00 2e b9 c1 55 d0 04 75 53 b5 8d ...C.....U..uS.. 0180 a9 bc 37 0a db 8b 52 ad b6 63 12 79 b9 85 93 fd ..7...R..c.y.... 0190 60 8f 17 16 aa c8 d0 b1 97 f1 1d 83 1b 07 a3 29 `..............) 01a0 dd 5c a6 f4 45 38 ed c3 11 9d 84 18 a5 15 3b 34 .\..E8........;4 01b0 37 7c 82 ad 36 6c 57 d0 39 55 d8 d9 8e 76 7d 42 7|..6lW.9U...v}B 01c0 ad 42 10 2d e3 da 80 5d a4 8e 1e c2 ae c7 f7 81 .B.-...]........ 01d0 9f a4 6c 82 89 55 f6 66 8e f8 34 50 bb c3 eb 39 ..l..U.f..4P...9 01e0 11 5d 8e 30 47 00 c5 1c 0c f3 11 5c ce e9 d9 2f .].0G......\.../ 01f0 aa 5f 73 97 ab bf 39 13 34 47 84 a0 37 ad 6d 34 ._s...9.4G..7.m4 0200 ed 44 74 af c9 1e 5b 39 bb 95 05 a1 f4 .Dt...[9..... No. Time Source Destination Protocol Length Info 12282 153.581586 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4138670336, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12282: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12283 153.581609 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4138670336, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12283: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12284 153.581622 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4138670336, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12284: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12285 153.581634 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4138670336, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12285: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12286 153.584337 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 3 Port 42 TTL = 120 Frame 12286: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 12287 153.599913 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1712849152, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12287: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12288 153.599932 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1712849152, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12288: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12289 153.599945 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1712849152, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12289: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12290 153.599957 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1712849152, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12290: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12291 153.691194 192.168.10.246 65.32.1.65 DNS 87 Standard query PTR 164.92.169.122.in-addr.arpa Frame 12291: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 57360 (57360), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12292 153.692956 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2665 Ack=162666 Win=65010 Len=0 TSval=729020 TSecr=573642 Frame 12292: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2665, Ack: 162666, Len: 0 No. Time Source Destination Protocol Length Info 12293 153.799404 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=2665 Ack=162666 Win=65010 Len=74 TSval=729021 TSecr=573642 Frame 12293: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2665, Ack: 162666, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 2d 5c 63 d7 c9 aa c5 17 63 56 da .... -\c.....cV. 0010 f0 e5 d9 ad f6 0b 08 b9 09 22 b5 92 60 90 d8 59 ........."..`..Y 0020 b6 bd 9b ac 65 17 03 01 00 20 f6 8b 3a ab e4 30 ....e.... ..:..0 0030 dd ec c6 7e 3e 38 86 74 bf 6a 31 9a b7 71 51 7a ...~>8.t.j1..qQz 0040 91 1e 5f 1d f6 8b 3a 1d a3 d3 .._...:... No. Time Source Destination Protocol Length Info 12294 153.799472 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=162666 Ack=2739 Win=1002 Len=0 TSval=573697 TSecr=729021 Frame 12294: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 162666, Ack: 2739, Len: 0 No. Time Source Destination Protocol Length Info 12295 153.834237 208.67.222.222 192.168.10.220 DNS 151 Standard query response PTR ABTS-mum-dynamic-164.92.169.122.airtelbroadband.in Frame 12295: 151 bytes on wire (1208 bits), 151 bytes captured (1208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 55880 (55880) Domain Name System (response) No. Time Source Destination Protocol Length Info 12296 153.855359 192.168.10.220 208.67.222.222 DNS 86 Standard query PTR 39.62.172.122.in-addr.arpa Frame 12296: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 62064 (62064), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12297 153.952190 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 12297: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12298 153.952221 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 12298: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12299 153.998276 Dell_42:b9:dc Broadcast ARP 60 Who has 192.168.10.203? Tell 192.168.10.224 Frame 12299: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12300 153.998304 Dell_42:b9:dc Broadcast ARP 60 Who has 192.168.10.203? Tell 192.168.10.224 Frame 12300: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12301 154.003045 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:17:34 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 12301: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:17:34 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 12302 154.016996 65.32.1.65 192.168.10.246 DNS 151 Standard query response PTR ABTS-mum-dynamic-164.92.169.122.airtelbroadband.in Frame 12302: 151 bytes on wire (1208 bits), 151 bytes captured (1208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 57360 (57360) Domain Name System (response) No. Time Source Destination Protocol Length Info 12303 154.019577 Watchgua_3c:4c:d8 Dell_44:d0:9e ARP 60 Who has 192.168.10.246? Tell 192.168.10.1 Frame 12303: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12304 154.019591 Dell_44:d0:9e Watchgua_3c:4c:d8 ARP 60 192.168.10.246 is at 84:2b:2b:44:d0:9e Frame 12304: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12305 154.487579 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:17:35 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 12305: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:17:35 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 12306 154.571727 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.36? Tell 192.168.10.220 Frame 12306: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12307 154.571762 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.36? Tell 192.168.10.220 Frame 12307: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12308 154.571776 Dell_ad:25:f8 Intel_38:8d:0a ARP 64 Who has 192.168.10.66? Tell 192.168.10.220 Frame 12308: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12309 154.571787 Dell_ad:25:f8 Intel_89:5e:11 ARP 64 Who has 192.168.10.65? Tell 192.168.10.220 Frame 12309: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12310 154.571801 Intel_38:8d:0a Dell_ad:25:f6 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 12310: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12311 154.571812 Intel_89:5e:11 Dell_ad:25:f8 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 12311: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12312 154.571822 Dell_ad:25:f8 Intel_a5:f5:5b ARP 64 Who has 192.168.10.131? Tell 192.168.10.220 Frame 12312: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12313 154.571832 Dell_ad:25:f8 Intel_38:8c:64 ARP 64 Who has 192.168.10.67? Tell 192.168.10.220 Frame 12313: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12314 154.571845 Dell_ad:25:f8 Intel_02:0e:6d ARP 64 Who has 192.168.10.128? Tell 192.168.10.220 Frame 12314: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12315 154.571855 Intel_a5:f5:5b Dell_ad:25:f8 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 12315: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12316 154.571865 Intel_38:8c:64 Dell_ad:25:f6 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 12316: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12317 154.571875 Dell_ad:25:f8 IntelCor_d3:4e:80 ARP 64 Who has 192.168.10.70? Tell 192.168.10.220 Frame 12317: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12318 154.571888 Dell_ad:25:f8 Intel_d0:7a:8f ARP 64 Who has 192.168.10.68? Tell 192.168.10.220 Frame 12318: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12319 154.571898 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.142? Tell 192.168.10.220 Frame 12319: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12320 154.571909 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.233? Tell 192.168.10.220 Frame 12320: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12321 154.571919 Intel_02:0e:6d Dell_ad:25:f6 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 12321: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12322 154.571929 Dell_ad:25:f8 Intel_56:83:a5 ARP 64 Who has 192.168.10.59? Tell 192.168.10.220 Frame 12322: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12323 154.571939 IntelCor_d3:4e:80 Dell_ad:25:f8 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 12323: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12324 154.571952 Dell_ad:25:f8 Intel_38:8c:b1 ARP 64 Who has 192.168.10.138? Tell 192.168.10.220 Frame 12324: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12325 154.571962 Intel_d0:7a:8f Dell_ad:25:f8 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 12325: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12326 154.571972 Intel_56:83:a5 Dell_ad:25:f6 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 12326: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12327 154.571985 Intel_38:8c:b1 Dell_ad:25:f6 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 12327: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12328 154.571995 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.142 is at 00:0f:34:04:98:91 Frame 12328: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12329 154.572005 Dell_ad:25:f8 Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.220 Frame 12329: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12330 154.572017 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 12330: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12331 154.572029 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 12331: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12332 154.597161 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4155447552, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12332: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12333 154.597184 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4155447552, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12333: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12334 154.597197 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4155447552, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12334: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12335 154.597209 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4155447552, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12335: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12336 154.615464 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1729626368, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12336: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12337 154.615489 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1729626368, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12337: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12338 154.615501 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1729626368, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12338: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12339 154.615514 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1729626368, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12339: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12340 154.846959 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-16.geo.kaspersky.com Frame 12340: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 56599 (56599), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12341 154.855241 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 39.62.172.122.in-addr.arpa Frame 12341: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 50777 (50777), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12342 154.916286 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 12342: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12343 154.916318 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 12343: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12344 155.109943 192.168.10.30 192.168.20.3 UDP 673 Source port: 34427 Destination port: apc-3052 Frame 12344: 673 bytes on wire (5384 bits), 673 bytes captured (5384 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (631 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 44 54 3d 31 30 .168.10.30.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 31 38 3a 34 /03/2011.TM=18:4 0040 36 3a 33 30 0a 53 52 3d 31 42 0a 53 55 3d 37 42 6:30.SR=1B.SU=7B 0050 31 33 32 38 34 34 0a 52 44 3d 46 37 44 39 0a 54 132844.RD=F7D9.T 0060 41 3d 31 39 32 2e 31 36 38 2e 32 30 2e 33 0a 50 A=192.168.20.3.P 0070 54 3d 33 30 35 32 0a 43 4c 3d 43 30 41 38 30 41 T=3052.CL=C0A80A 0080 44 42 0a 43 4c 3d 43 30 41 38 30 41 44 30 0a 43 DB.CL=C0A80AD0.C 0090 4c 3d 43 30 41 38 30 41 43 42 0a 43 4c 3d 43 30 L=C0A80ACB.CL=C0 00a0 41 38 30 41 43 43 0a 43 4c 3d 43 30 41 38 30 41 A80ACC.CL=C0A80A 00b0 43 45 0a 43 4c 3d 43 30 41 38 30 41 44 43 0a 43 CE.CL=C0A80ADC.C 00c0 4c 3d 43 30 41 38 30 41 43 46 0a 43 4c 3d 43 30 L=C0A80ACF.CL=C0 00d0 41 38 30 41 43 44 0a 43 4c 3d 43 30 41 38 30 41 A80ACD.CL=C0A80A 00e0 46 30 0a 43 4c 3d 43 30 41 38 30 41 43 39 0a 43 F0.CL=C0A80AC9.C 00f0 4c 3d 43 30 41 38 30 41 31 30 0a 43 4c 3d 43 30 L=C0A80A10.CL=C0 0100 41 38 30 41 30 44 0a 43 4c 3d 43 30 41 38 30 41 A80A0D.CL=C0A80A 0110 30 46 0a 43 4c 3d 43 30 41 38 30 41 30 43 0a 43 0F.CL=C0A80A0C.C 0120 4c 3d 43 30 41 38 30 41 44 31 0a 43 4c 3d 43 30 L=C0A80AD1.CL=C0 0130 41 38 30 41 43 41 0a 43 4c 3d 43 30 41 38 30 41 A80ACA.CL=C0A80A 0140 46 41 0a 43 4c 3d 43 30 41 38 30 41 44 38 0a 43 FA.CL=C0A80AD8.C 0150 4c 3d 43 30 41 38 30 41 32 37 0a 43 4c 3d 43 30 L=C0A80A27.CL=C0 0160 41 38 30 41 44 39 0a 43 4c 3d 43 30 41 38 30 41 A80AD9.CL=C0A80A 0170 44 33 0a 43 4c 3d 43 30 41 38 30 41 44 32 0a 43 D3.CL=C0A80AD2.C 0180 4c 3d 43 30 41 38 30 41 45 32 0a 43 4c 3d 43 30 L=C0A80AE2.CL=C0 0190 41 38 30 41 45 33 0a 43 4c 3d 43 30 41 38 30 41 A80AE3.CL=C0A80A 01a0 44 45 0a 43 4c 3d 43 30 41 38 31 34 30 33 0a 43 DE.CL=C0A81403.C 01b0 4c 3d 43 30 41 38 30 41 46 36 0a 43 4c 3d 43 30 L=C0A80AF6.CL=C0 01c0 41 38 30 41 31 31 0a 43 4c 3d 30 30 0a 43 4c 3d A80A11.CL=00.CL= 01d0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 01e0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01f0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0200 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0210 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0220 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0230 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0240 4c 3d 30 30 0a 43 4c 3d 30 30 0a 4d 44 3d 38 62 L=00.CL=00.MD=8b 0250 62 38 61 35 61 35 32 63 32 37 30 36 33 64 64 39 b8a5a52c27063dd9 0260 32 66 65 34 30 64 33 63 63 39 33 34 65 31 0a 3c 2fe40d3cc934e1.< 0270 2f 42 4f 44 59 3e 0a /BODY>. No. Time Source Destination Protocol Length Info 12345 155.110041 192.168.10.30 192.168.20.3 UDP 673 Source port: 34427 Destination port: apc-3052 Frame 12345: 673 bytes on wire (5384 bits), 673 bytes captured (5384 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (631 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 44 54 3d 31 30 .168.10.30.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 31 38 3a 34 /03/2011.TM=18:4 0040 36 3a 33 30 0a 53 52 3d 31 42 0a 53 55 3d 37 42 6:30.SR=1B.SU=7B 0050 31 33 32 38 34 34 0a 52 44 3d 46 37 44 39 0a 54 132844.RD=F7D9.T 0060 41 3d 31 39 32 2e 31 36 38 2e 32 30 2e 33 0a 50 A=192.168.20.3.P 0070 54 3d 33 30 35 32 0a 43 4c 3d 43 30 41 38 30 41 T=3052.CL=C0A80A 0080 44 42 0a 43 4c 3d 43 30 41 38 30 41 44 30 0a 43 DB.CL=C0A80AD0.C 0090 4c 3d 43 30 41 38 30 41 43 42 0a 43 4c 3d 43 30 L=C0A80ACB.CL=C0 00a0 41 38 30 41 43 43 0a 43 4c 3d 43 30 41 38 30 41 A80ACC.CL=C0A80A 00b0 43 45 0a 43 4c 3d 43 30 41 38 30 41 44 43 0a 43 CE.CL=C0A80ADC.C 00c0 4c 3d 43 30 41 38 30 41 43 46 0a 43 4c 3d 43 30 L=C0A80ACF.CL=C0 00d0 41 38 30 41 43 44 0a 43 4c 3d 43 30 41 38 30 41 A80ACD.CL=C0A80A 00e0 46 30 0a 43 4c 3d 43 30 41 38 30 41 43 39 0a 43 F0.CL=C0A80AC9.C 00f0 4c 3d 43 30 41 38 30 41 31 30 0a 43 4c 3d 43 30 L=C0A80A10.CL=C0 0100 41 38 30 41 30 44 0a 43 4c 3d 43 30 41 38 30 41 A80A0D.CL=C0A80A 0110 30 46 0a 43 4c 3d 43 30 41 38 30 41 30 43 0a 43 0F.CL=C0A80A0C.C 0120 4c 3d 43 30 41 38 30 41 44 31 0a 43 4c 3d 43 30 L=C0A80AD1.CL=C0 0130 41 38 30 41 43 41 0a 43 4c 3d 43 30 41 38 30 41 A80ACA.CL=C0A80A 0140 46 41 0a 43 4c 3d 43 30 41 38 30 41 44 38 0a 43 FA.CL=C0A80AD8.C 0150 4c 3d 43 30 41 38 30 41 32 37 0a 43 4c 3d 43 30 L=C0A80A27.CL=C0 0160 41 38 30 41 44 39 0a 43 4c 3d 43 30 41 38 30 41 A80AD9.CL=C0A80A 0170 44 33 0a 43 4c 3d 43 30 41 38 30 41 44 32 0a 43 D3.CL=C0A80AD2.C 0180 4c 3d 43 30 41 38 30 41 45 32 0a 43 4c 3d 43 30 L=C0A80AE2.CL=C0 0190 41 38 30 41 45 33 0a 43 4c 3d 43 30 41 38 30 41 A80AE3.CL=C0A80A 01a0 44 45 0a 43 4c 3d 43 30 41 38 31 34 30 33 0a 43 DE.CL=C0A81403.C 01b0 4c 3d 43 30 41 38 30 41 46 36 0a 43 4c 3d 43 30 L=C0A80AF6.CL=C0 01c0 41 38 30 41 31 31 0a 43 4c 3d 30 30 0a 43 4c 3d A80A11.CL=00.CL= 01d0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 01e0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01f0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0200 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0210 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0220 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0230 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0240 4c 3d 30 30 0a 43 4c 3d 30 30 0a 4d 44 3d 38 62 L=00.CL=00.MD=8b 0250 62 38 61 35 61 35 32 63 32 37 30 36 33 64 64 39 b8a5a52c27063dd9 0260 32 66 65 34 30 64 33 63 63 39 33 34 65 31 0a 3c 2fe40d3cc934e1.< 0270 2f 42 4f 44 59 3e 0a /BODY>. No. Time Source Destination Protocol Length Info 12346 155.110128 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:17:35 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS1/34427 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 12346: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:17:35 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS1/34427 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 12347 155.194163 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 12347: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12348 155.200364 WwPcbaTe_6d:76:3c Broadcast ARP 60 Who has 192.168.10.95? Tell 192.168.10.201 Frame 12348: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12349 155.200403 WwPcbaTe_6d:76:3c Broadcast ARP 60 Who has 192.168.10.95? Tell 192.168.10.201 Frame 12349: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12350 155.200493 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 12350: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12351 155.200511 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 12351: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12352 155.200569 WwPcbaTe_6d:76:3c Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.201 Frame 12352: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12353 155.200610 Watchgua_3c:4c:d8 WwPcbaTe_6d:76:3c ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 12353: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12354 155.202362 65.32.1.65 192.168.10.246 DNS 149 Standard query response PTR ABTS-KK-dynamic-039.62.172.122.airtelbroadband.in Frame 12354: 149 bytes on wire (1192 bits), 149 bytes captured (1192 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 50777 (50777) Domain Name System (response) No. Time Source Destination Protocol Length Info 12355 155.231100 192.168.10.246 65.32.1.65 DNS 85 Standard query PTR 51.207.98.62.in-addr.arpa Frame 12355: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 65181 (65181), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12356 155.315489 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 12356: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12357 155.434882 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 12357: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12358 155.434914 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 12358: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12359 155.443724 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 12359: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12360 155.508809 65.32.1.65 192.168.10.246 DNS 125 Standard query response PTR ppp-51-207.98-62.inwind.it Frame 12360: 125 bytes on wire (1000 bits), 125 bytes captured (1000 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 65181 (65181) Domain Name System (response) No. Time Source Destination Protocol Length Info 12361 155.540995 200.179.192.5 192.168.10.207 TCP 62 www-dev > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 12361: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 200.179.192.5 (200.179.192.5), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: www-dev (2784), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 12362 155.541066 192.168.10.207 200.179.192.5 TCP 62 smtp > www-dev [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 12362: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 200.179.192.5 (200.179.192.5) Transmission Control Protocol, Src Port: smtp (25), Dst Port: www-dev (2784), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 12363 155.566251 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 12363: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12364 155.612822 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4172224768, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12364: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12365 155.612846 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4172224768, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12365: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12366 155.612858 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4172224768, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12366: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12367 155.612871 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4172224768, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12367: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12368 155.631166 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1746403584, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12368: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12369 155.631186 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1746403584, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12369: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12370 155.631198 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1746403584, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12370: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12371 155.631210 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1746403584, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12371: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12372 155.661347 192.168.10.246 65.32.1.65 DNS 87 Standard query PTR 249.201.112.92.in-addr.arpa Frame 12372: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 59667 (59667), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12373 155.683776 200.179.192.5 192.168.10.207 TCP 60 www-dev > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 12373: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 200.179.192.5 (200.179.192.5), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: www-dev (2784), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 12374 155.683887 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:46:53 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 200.179.192.5 7x.x.x.3 2784 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 12374: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:46:53 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 200.179.192.5 7x.x.x.3 2784 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 12375 155.683921 192.168.10.207 200.179.192.5 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:46:28 -0400 Frame 12375: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 200.179.192.5 (200.179.192.5) Transmission Control Protocol, Src Port: smtp (25), Dst Port: www-dev (2784), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12376 155.683960 200.179.192.5 192.168.10.207 TCP 60 www-dev > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 12376: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 200.179.192.5 (200.179.192.5), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: www-dev (2784), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 12377 155.766077 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 12377: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12378 155.766110 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 12378: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12379 155.766130 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 12379: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12380 155.766140 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 12380: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12381 155.766153 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 12381: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12382 155.766163 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 12382: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12383 155.766175 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 12383: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12384 155.766185 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 12384: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12385 155.766198 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 12385: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12386 155.766209 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 12386: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12387 155.766222 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 12387: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12388 155.766238 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 12388: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12389 155.766272 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 12389: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12390 155.766282 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 12390: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12391 155.766292 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 12391: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12392 155.766323 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 12392: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12393 155.766334 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 12393: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12394 155.766345 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 12394: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12395 155.766355 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 12395: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12396 155.766365 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 12396: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12397 155.766375 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 12397: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12398 155.766385 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 12398: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12399 155.766396 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 12399: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12400 155.766412 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 12400: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12401 155.766423 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 12401: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12402 155.766433 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 12402: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12403 155.766443 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 12403: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12404 155.766453 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 12404: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12405 155.766463 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 12405: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12406 155.766473 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 12406: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12407 155.766484 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 12407: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12408 155.766494 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 12408: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12409 155.766504 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 12409: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12410 155.766514 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 12410: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12411 155.766524 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 12411: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12412 155.766538 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 12412: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12413 155.766548 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 12413: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12414 155.766670 192.168.10.233 192.168.10.245 Syslog 178 LOCAL4.WARNING: :Oct 03 19:38:41 EDT: %PIX-session-4-405001: Received ARP request collision from 192.168.10.226/0026.b952.f0f3 on interface Inside\n Frame 12414: 178 bytes on wire (1424 bits), 178 bytes captured (1424 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.233 (192.168.10.233), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: :Oct 03 19:38:41 EDT: %PIX-session-4-405001: Received ARP request collision from 192.168.10.226/0026.b952.f0f3 on interface Inside\n No. Time Source Destination Protocol Length Info 12415 155.766683 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 12415: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12416 155.766693 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 12416: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12417 155.766703 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 12417: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12418 155.766714 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 12418: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12419 155.766724 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 12419: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12420 155.766734 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 12420: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12421 155.766864 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 12421: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12422 155.847148 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-16.geo.kaspersky.com Frame 12422: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 56599 (56599), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12423 155.942814 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 12423: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12424 155.942844 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 12424: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12425 155.987453 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:17:36 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 12425: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:17:36 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 12426 156.181514 208.67.222.222 192.168.10.220 DNS 149 Standard query response PTR ABTS-KK-dynamic-039.62.172.122.airtelbroadband.in Frame 12426: 149 bytes on wire (1192 bits), 149 bytes captured (1192 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 62064 (62064) Domain Name System (response) No. Time Source Destination Protocol Length Info 12427 156.183601 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 Who has 192.168.10.220? Tell 192.168.10.1 Frame 12427: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12428 156.183615 Dell_ad:25:f6 Watchgua_3c:4c:d8 ARP 60 192.168.10.220 is at 00:22:19:ad:25:f6 Frame 12428: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12429 156.407022 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 12429: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12430 156.407054 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 12430: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12431 156.490309 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 12431: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12432 156.490340 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 12432: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12433 156.602186 192.168.10.220 192.168.10.255 NBNS 92 Name query NB MYDOMAIN<1c> Frame 12433: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 12434 156.602411 192.168.10.220 192.168.10.255 NBNS 92 Name query NB MYDOMAIN<1c> Frame 12434: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 12435 156.602560 192.168.10.220 192.168.10.255 SMB_NETLOGON 273 SAM LOGON request from client Frame 12435: 273 bytes on wire (2184 bits), 273 bytes captured (2184 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Logon Protocol (Old) No. Time Source Destination Protocol Length Info 12436 156.602758 192.168.10.220 192.168.10.255 SMB_NETLOGON 273 SAM LOGON request from client Frame 12436: 273 bytes on wire (2184 bits), 273 bytes captured (2184 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Logon Protocol (Old) No. Time Source Destination Protocol Length Info 12437 156.628574 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4189001984, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12437: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12438 156.628596 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4189001984, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12438: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12439 156.628609 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4189001984, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12439: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12440 156.628620 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4189001984, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12440: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12441 156.646782 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1763180800, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12441: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12442 156.646805 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1763180800, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12442: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12443 156.646817 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1763180800, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12443: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12444 156.646829 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1763180800, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12444: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12445 156.660753 192.168.10.220 208.67.222.222 DNS 87 Standard query PTR 249.201.112.92.in-addr.arpa Frame 12445: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 54807 (54807), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12446 156.819083 200.179.192.5 192.168.10.207 SMTP 76 C: HELO maria-d3ec40294 Frame 12446: 76 bytes on wire (608 bits), 76 bytes captured (608 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 200.179.192.5 (200.179.192.5), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: www-dev (2784), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 22 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12447 156.819201 192.168.10.207 200.179.192.5 SMTP 102 S: 250 mail.mydomain.com Hello [200.179.192.5] Frame 12447: 102 bytes on wire (816 bits), 102 bytes captured (816 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 200.179.192.5 (200.179.192.5) Transmission Control Protocol, Src Port: smtp (25), Dst Port: www-dev (2784), Seq: 122, Ack: 23, Len: 48 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12448 156.819249 200.179.192.5 192.168.10.207 TCP 60 www-dev > smtp [ACK] Seq=23 Ack=170 Win=93270 Len=0 Frame 12448: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 200.179.192.5 (200.179.192.5), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: www-dev (2784), Dst Port: smtp (25), Seq: 23, Ack: 170, Len: 0 No. Time Source Destination Protocol Length Info 12449 156.847144 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-16.geo.kaspersky.com Frame 12449: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 56599 (56599), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12450 156.908796 208.67.222.222 192.168.10.220 DNS 131 Standard query response PTR 249-201-112-92.pool.ukrtel.net Frame 12450: 131 bytes on wire (1048 bits), 131 bytes captured (1048 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 54807 (54807) Domain Name System (response) No. Time Source Destination Protocol Length Info 12451 156.992971 192.168.10.246 65.32.1.70 DNS 87 Standard query PTR 107.111.166.82.in-addr.arpa Frame 12451: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.70 (65.32.1.70) User Datagram Protocol, Src Port: 54891 (54891), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12452 156.994742 192.168.10.220 208.67.222.222 DNS 86 Standard query PTR 5.207.175.212.in-addr.arpa Frame 12452: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 50150 (50150), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12453 156.995550 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 12162#2] 9428 > smtp [ACK] Seq=458677 Ack=6511 Win=46195 Len=0 Frame 12453: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 458677, Ack: 6511, Len: 0 No. Time Source Destination Protocol Length Info 12454 156.995629 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=6511 Ack=457411 Win=0 Len=0 Frame 12454: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6511, Ack: 457411, Len: 0 No. Time Source Destination Protocol Length Info 12455 157.075578 fe80::9e8e:99ff:fe88:e94c ff02::1:2 DHCPv6 128 Solicit XID: 0x282f CID: 00020000000b9c8e9988e94c Frame 12455: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: HewlettP_88:e9:4c (9c:8e:99:88:e9:4c), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02) Internet Protocol Version 6, Src: fe80::9e8e:99ff:fe88:e94c (fe80::9e8e:99ff:fe88:e94c), Dst: ff02::1:2 (ff02::1:2) User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547) DHCPv6 No. Time Source Destination Protocol Length Info 12456 157.075634 fe80::9e8e:99ff:fe88:e94c ff02::1:2 DHCPv6 128 Solicit XID: 0x282f CID: 00020000000b9c8e9988e94c Frame 12456: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: HewlettP_88:e9:4c (9c:8e:99:88:e9:4c), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02) Internet Protocol Version 6, Src: fe80::9e8e:99ff:fe88:e94c (fe80::9e8e:99ff:fe88:e94c), Dst: ff02::1:2 (ff02::1:2) User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547) DHCPv6 No. Time Source Destination Protocol Length Info 12457 157.150393 192.168.10.216 64.74.103.131 TLSv1 91 Application Data Frame 12457: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.216 (192.168.10.216), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: ovrimosdbman (2956), Dst Port: https (443), Seq: 186, Ack: 186, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 12458 157.150465 64.74.103.131 192.168.10.216 TCP 60 https > ovrimosdbman [ACK] Seq=186 Ack=223 Win=65535 Len=0 Frame 12458: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.216 (192.168.10.216) Transmission Control Protocol, Src Port: https (443), Dst Port: ovrimosdbman (2956), Seq: 186, Ack: 223, Len: 0 No. Time Source Destination Protocol Length Info 12459 157.151633 Watchgua_3c:4c:d8 IntelCor_36:19:60 ARP 60 Who has 192.168.10.216? Tell 192.168.10.1 Frame 12459: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12460 157.151647 IntelCor_36:19:60 Watchgua_3c:4c:d8 ARP 60 192.168.10.216 is at 00:13:20:36:19:60 Frame 12460: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12461 157.194050 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 12461: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12462 157.198361 64.74.103.131 192.168.10.216 TLSv1 91 Application Data Frame 12462: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.216 (192.168.10.216) Transmission Control Protocol, Src Port: https (443), Dst Port: ovrimosdbman (2956), Seq: 186, Ack: 223, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 12463 157.289327 65.32.1.70 192.168.10.246 DNS 132 Standard query response PTR 82-166-111-107.barak-online.net Frame 12463: 132 bytes on wire (1056 bits), 132 bytes captured (1056 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.70 (65.32.1.70), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 54891 (54891) Domain Name System (response) No. Time Source Destination Protocol Length Info 12464 157.290852 208.67.222.222 192.168.10.220 DNS 86 Standard query response, No such name Frame 12464: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 50150 (50150) Domain Name System (response) No. Time Source Destination Protocol Length Info 12465 157.291459 192.168.10.203 212.175.207.5 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 12465: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 212.175.207.5 (212.175.207.5) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 12466 157.315622 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 12466: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12467 157.337862 192.168.10.216 64.74.103.131 TCP 60 ovrimosdbman > https [ACK] Seq=223 Ack=223 Win=65498 Len=0 Frame 12467: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.216 (192.168.10.216), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: ovrimosdbman (2956), Dst Port: https (443), Seq: 223, Ack: 223, Len: 0 No. Time Source Destination Protocol Length Info 12468 157.440994 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 12468: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12469 157.441026 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 12469: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12470 157.443844 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 12470: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12471 157.566190 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 12471: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12472 157.644048 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4205779200, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12472: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12473 157.644071 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4205779200, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12473: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12474 157.644084 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4205779200, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12474: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12475 157.644096 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4205779200, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12475: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12476 157.662538 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1779958016, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12476: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12477 157.662557 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1779958016, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12477: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12478 157.662570 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1779958016, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12478: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12479 157.662582 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1779958016, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12479: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12480 157.890521 IntelCor_ed:1c:1c Broadcast ARP 60 Who has 192.168.10.12? Tell 192.168.10.225 Frame 12480: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1c:1c (00:13:20:ed:1c:1c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12481 157.890551 IntelCor_ed:1c:1c Broadcast ARP 60 Who has 192.168.10.12? Tell 192.168.10.225 Frame 12481: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1c:1c (00:13:20:ed:1c:1c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12482 157.939164 200.179.192.5 192.168.10.207 SMTP 94 C: MAIL FROM: <oekmidden@xxxxxxxxxxxx> Frame 12482: 94 bytes on wire (752 bits), 94 bytes captured (752 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 200.179.192.5 (200.179.192.5), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: www-dev (2784), Dst Port: smtp (25), Seq: 23, Ack: 170, Len: 40 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12483 157.939464 192.168.10.207 200.179.192.5 SMTP 104 S: 250 2.1.0 [email protected] OK Frame 12483: 104 bytes on wire (832 bits), 104 bytes captured (832 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 200.179.192.5 (200.179.192.5) Transmission Control Protocol, Src Port: smtp (25), Dst Port: www-dev (2784), Seq: 170, Ack: 63, Len: 50 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12484 157.939505 200.179.192.5 192.168.10.207 TCP 60 www-dev > smtp [ACK] Seq=63 Ack=220 Win=93220 Len=0 Frame 12484: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 200.179.192.5 (200.179.192.5), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: www-dev (2784), Dst Port: smtp (25), Seq: 63, Ack: 220, Len: 0 No. Time Source Destination Protocol Length Info 12485 157.941124 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 12485: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12486 157.941150 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 12486: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12487 158.011108 192.168.10.207 206.225.164.188 SMTP 474 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 12487: 474 bytes on wire (3792 bits), 474 bytes captured (3792 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6343, Ack: 457411, Len: 420 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12488 158.011162 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=458677 Ack=6763 Win=46069 Len=0 Frame 12488: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 458677, Ack: 6763, Len: 0 No. Time Source Destination Protocol Length Info 12489 158.011208 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=6763 Ack=457411 Win=0 Len=0 Frame 12489: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6763, Ack: 457411, Len: 0 No. Time Source Destination Protocol Length Info 12490 158.430362 189.68.14.39 192.168.10.207 TCP 62 4496 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 12490: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.68.14.39 (189.68.14.39), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 4496 (4496), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 12491 158.430403 192.168.10.207 189.68.14.39 TCP 62 smtp > 4496 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 12491: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.68.14.39 (189.68.14.39) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 4496 (4496), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 12492 158.644196 189.68.14.39 192.168.10.207 TCP 60 4496 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 12492: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.68.14.39 (189.68.14.39), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 4496 (4496), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 12493 158.644416 192.168.10.1 192.168.10.245 Syslog 202 LOCAL1.INFO: Oct 3 19:46:56 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.68.14.39 7x.x.x.3 4496 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 12493: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:46:56 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.68.14.39 7x.x.x.3 4496 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 12494 158.644447 192.168.10.207 189.68.14.39 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:46:31 -0400 Frame 12494: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.68.14.39 (189.68.14.39) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 4496 (4496), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12495 158.644486 189.68.14.39 192.168.10.207 TCP 60 4496 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 12495: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.68.14.39 (189.68.14.39), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 4496 (4496), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 12496 158.659794 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4222556416, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12496: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12497 158.659814 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4222556416, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12497: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12498 158.659830 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4222556416, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12498: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12499 158.659842 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4222556416, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12499: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12500 158.677997 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1796735232, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12500: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12501 158.678011 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1796735232, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12501: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12502 158.678019 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1796735232, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12502: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12503 158.678026 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1796735232, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12503: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12504 158.790396 192.168.10.203 212.175.207.5 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 12504: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 212.175.207.5 (212.175.207.5) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 12505 158.847080 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-16.geo.kaspersky.com Frame 12505: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 56599 (56599), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12506 158.847212 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-16.geo.kaspersky.com Frame 12506: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 56599 (56599), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12507 158.860452 189.68.14.39 192.168.10.207 SMTP 91 C: HELO 189-68-14-39.dsl.telesp.net.br Frame 12507: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.68.14.39 (189.68.14.39), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 4496 (4496), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 37 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12508 158.860524 192.168.10.207 189.68.14.39 SMTP 101 S: 250 mail.mydomain.com Hello [189.68.14.39] Frame 12508: 101 bytes on wire (808 bits), 101 bytes captured (808 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.68.14.39 (189.68.14.39) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 4496 (4496), Seq: 122, Ack: 38, Len: 47 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12509 158.860563 189.68.14.39 192.168.10.207 TCP 60 4496 > smtp [ACK] Seq=38 Ack=169 Win=93272 Len=0 Frame 12509: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.68.14.39 (189.68.14.39), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 4496 (4496), Dst Port: smtp (25), Seq: 38, Ack: 169, Len: 0 No. Time Source Destination Protocol Length Info 12510 158.995724 206.225.164.186 192.168.10.207 TCP 60 [TCP Dup ACK 12255#2] 23308 > smtp [ACK] Seq=837990 Ack=11383 Win=46237 Len=0 Frame 12510: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 837990, Ack: 11383, Len: 0 No. Time Source Destination Protocol Length Info 12511 158.995760 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=11383 Ack=837143 Win=0 Len=0 Frame 12511: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11383, Ack: 837143, Len: 0 No. Time Source Destination Protocol Length Info 12512 159.076824 189.68.14.39 192.168.10.207 SMTP 95 C: MAIL FROM: <uqbrecover@xxxxxxxxxxxx> Frame 12512: 95 bytes on wire (760 bits), 95 bytes captured (760 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.68.14.39 (189.68.14.39), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 4496 (4496), Dst Port: smtp (25), Seq: 38, Ack: 169, Len: 41 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12513 159.076971 192.168.10.207 189.68.14.39 SMTP 105 S: 250 2.1.0 [email protected] OK Frame 12513: 105 bytes on wire (840 bits), 105 bytes captured (840 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.68.14.39 (189.68.14.39) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 4496 (4496), Seq: 169, Ack: 79, Len: 51 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12514 159.077021 189.68.14.39 192.168.10.207 TCP 60 4496 > smtp [ACK] Seq=79 Ack=220 Win=93220 Len=0 Frame 12514: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.68.14.39 (189.68.14.39), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 4496 (4496), Dst Port: smtp (25), Seq: 79, Ack: 220, Len: 0 No. Time Source Destination Protocol Length Info 12515 159.179038 192.168.10.1 192.168.10.245 Syslog 307 LOCAL1.INFO: Oct 3 19:46:57 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 200.179.192.5 7x.x.x.3 2784 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="oekmidden@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 12515: 307 bytes on wire (2456 bits), 307 bytes captured (2456 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:46:57 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 200.179.192.5 7x.x.x.3 2784 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" No. Time Source Destination Protocol Length Info 12516 159.196622 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 12516: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12517 159.295742 192.168.10.1 192.168.10.245 Syslog 307 LOCAL1.INFO: Oct 3 19:46:57 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 189.68.14.39 7x.x.x.3 4496 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="uqbrecover@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 12517: 307 bytes on wire (2456 bits), 307 bytes captured (2456 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:46:57 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 189.68.14.39 7x.x.x.3 4496 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" No. Time Source Destination Protocol Length Info 12518 159.315622 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 12518: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12519 159.431443 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 12519: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12520 159.431475 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 12520: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12521 159.443729 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 12521: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12522 159.525562 189.68.14.39 192.168.10.207 TCP 60 4496 > smtp [FIN, ACK] Seq=79 Ack=220 Win=93220 Len=0 Frame 12522: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.68.14.39 (189.68.14.39), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 4496 (4496), Dst Port: smtp (25), Seq: 79, Ack: 220, Len: 0 No. Time Source Destination Protocol Length Info 12523 159.525762 192.168.10.207 189.68.14.39 TCP 60 smtp > 4496 [ACK] Seq=220 Ack=80 Win=65457 Len=0 Frame 12523: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.68.14.39 (189.68.14.39) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 4496 (4496), Seq: 220, Ack: 80, Len: 0 No. Time Source Destination Protocol Length Info 12524 159.525791 192.168.10.207 189.68.14.39 TCP 60 smtp > 4496 [FIN, ACK] Seq=220 Ack=80 Win=65457 Len=0 Frame 12524: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.68.14.39 (189.68.14.39) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 4496 (4496), Seq: 220, Ack: 80, Len: 0 No. Time Source Destination Protocol Length Info 12525 159.525828 189.68.14.39 192.168.10.207 TCP 60 4496 > smtp [ACK] Seq=80 Ack=221 Win=93220 Len=0 Frame 12525: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.68.14.39 (189.68.14.39), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 4496 (4496), Dst Port: smtp (25), Seq: 80, Ack: 221, Len: 0 No. Time Source Destination Protocol Length Info 12526 159.525961 192.168.10.1 192.168.10.245 Syslog 200 LOCAL1.INFO: Oct 3 19:46:57 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.68.14.39 7x.x.x.3 4496 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 12526: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:46:57 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.68.14.39 7x.x.x.3 4496 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 12527 159.566209 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 12527: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12528 159.675304 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4239333632, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12528: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12529 159.675328 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4239333632, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12529: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12530 159.675341 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4239333632, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12530: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12531 159.675353 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4239333632, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12531: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12532 159.693729 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1813512448, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12532: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12533 159.693751 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1813512448, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12533: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12534 159.693764 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1813512448, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12534: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12535 159.693776 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1813512448, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12535: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12536 159.914130 192.168.10.115 64.74.103.129 TLSv1 91 Application Data Frame 12536: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.115 (192.168.10.115), Dst: 64.74.103.129 (64.74.103.129) Transmission Control Protocol, Src Port: cogsys-lm (3377), Dst Port: https (443), Seq: 186, Ack: 186, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 12537 159.914200 64.74.103.129 192.168.10.115 TCP 60 https > cogsys-lm [ACK] Seq=186 Ack=223 Win=65535 Len=0 Frame 12537: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Internet Protocol Version 4, Src: 64.74.103.129 (64.74.103.129), Dst: 192.168.10.115 (192.168.10.115) Transmission Control Protocol, Src Port: https (443), Dst Port: cogsys-lm (3377), Seq: 186, Ack: 223, Len: 0 No. Time Source Destination Protocol Length Info 12538 159.915562 Watchgua_3c:4c:d8 IntelCor_ed:1a:c9 ARP 60 Who has 192.168.10.115? Tell 192.168.10.1 Frame 12538: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12539 159.915611 IntelCor_ed:1a:c9 Watchgua_3c:4c:d8 ARP 60 192.168.10.115 is at 00:13:20:ed:1a:c9 Frame 12539: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12540 159.946672 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 12540: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12541 159.946703 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 12541: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12542 159.962500 64.74.103.129 192.168.10.115 TLSv1 91 Application Data Frame 12542: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Internet Protocol Version 4, Src: 64.74.103.129 (64.74.103.129), Dst: 192.168.10.115 (192.168.10.115) Transmission Control Protocol, Src Port: https (443), Dst Port: cogsys-lm (3377), Seq: 186, Ack: 223, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 12543 160.003112 192.168.10.31 192.168.10.255 UDP 665 Source port: 50764 Destination port: apc-3052 Frame 12543: 665 bytes on wire (5320 bits), 665 bytes captured (5320 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (623 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 44 54 3d 31 30 .168.10.31.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 31 39 3a 35 /03/2011.TM=19:5 0040 31 3a 30 31 0a 53 52 3d 31 30 37 43 0a 53 55 3d 1:01.SR=107C.SU= 0050 32 44 38 32 46 34 38 36 0a 52 44 3d 45 38 42 39 2D82F486.RD=E8B9 0060 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 30 2e 32 .TA=192.168.10.2 0070 35 35 0a 50 54 3d 33 30 35 32 0a 43 4c 3d 43 30 55.PT=3052.CL=C0 0080 41 38 30 41 44 39 0a 43 4c 3d 43 30 41 38 30 41 A80AD9.CL=C0A80A 0090 43 44 0a 43 4c 3d 43 30 41 38 30 41 44 38 0a 43 CD.CL=C0A80AD8.C 00a0 4c 3d 43 30 41 38 30 41 44 42 0a 43 4c 3d 43 30 L=C0A80ADB.CL=C0 00b0 41 38 30 41 44 30 0a 43 4c 3d 43 30 41 38 30 41 A80AD0.CL=C0A80A 00c0 43 42 0a 43 4c 3d 43 30 41 38 30 41 43 43 0a 43 CB.CL=C0A80ACC.C 00d0 4c 3d 43 30 41 38 30 41 43 45 0a 43 4c 3d 43 30 L=C0A80ACE.CL=C0 00e0 41 38 30 41 44 43 0a 43 4c 3d 43 30 41 38 30 41 A80ADC.CL=C0A80A 00f0 43 46 0a 43 4c 3d 43 30 41 38 30 41 46 30 0a 43 CF.CL=C0A80AF0.C 0100 4c 3d 43 30 41 38 30 41 43 39 0a 43 4c 3d 43 30 L=C0A80AC9.CL=C0 0110 41 38 30 41 31 30 0a 43 4c 3d 43 30 41 38 30 41 A80A10.CL=C0A80A 0120 30 44 0a 43 4c 3d 43 30 41 38 30 41 30 46 0a 43 0D.CL=C0A80A0F.C 0130 4c 3d 43 30 41 38 30 41 30 43 0a 43 4c 3d 43 30 L=C0A80A0C.CL=C0 0140 41 38 30 41 44 31 0a 43 4c 3d 43 30 41 38 30 41 A80AD1.CL=C0A80A 0150 43 41 0a 43 4c 3d 43 30 41 38 30 41 46 41 0a 43 CA.CL=C0A80AFA.C 0160 4c 3d 43 30 41 38 30 41 32 37 0a 43 4c 3d 43 30 L=C0A80A27.CL=C0 0170 41 38 30 41 44 33 0a 43 4c 3d 43 30 41 38 30 41 A80AD3.CL=C0A80A 0180 44 32 0a 43 4c 3d 43 30 41 38 30 41 45 32 0a 43 D2.CL=C0A80AE2.C 0190 4c 3d 43 30 41 38 30 41 45 33 0a 43 4c 3d 43 30 L=C0A80AE3.CL=C0 01a0 41 38 30 41 44 45 0a 43 4c 3d 43 30 41 38 31 34 A80ADE.CL=C0A814 01b0 30 33 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 03.CL=00.CL=00.C 01c0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01d0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01e0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 01f0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0200 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0210 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0220 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0230 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0240 30 30 0a 4d 44 3d 66 31 65 33 63 33 62 65 37 61 00.MD=f1e3c3be7a 0250 64 35 32 32 35 35 63 61 65 39 33 34 65 31 34 61 d52255cae934e14a 0260 30 31 34 61 39 30 0a 3c 2f 42 4f 44 59 3e 0a 014a90.</BODY>. No. Time Source Destination Protocol Length Info 12544 160.003239 192.168.10.31 192.168.10.255 UDP 665 Source port: 50764 Destination port: apc-3052 Frame 12544: 665 bytes on wire (5320 bits), 665 bytes captured (5320 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (623 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 44 54 3d 31 30 .168.10.31.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 31 39 3a 35 /03/2011.TM=19:5 0040 31 3a 30 31 0a 53 52 3d 31 30 37 43 0a 53 55 3d 1:01.SR=107C.SU= 0050 32 44 38 32 46 34 38 36 0a 52 44 3d 45 38 42 39 2D82F486.RD=E8B9 0060 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 30 2e 32 .TA=192.168.10.2 0070 35 35 0a 50 54 3d 33 30 35 32 0a 43 4c 3d 43 30 55.PT=3052.CL=C0 0080 41 38 30 41 44 39 0a 43 4c 3d 43 30 41 38 30 41 A80AD9.CL=C0A80A 0090 43 44 0a 43 4c 3d 43 30 41 38 30 41 44 38 0a 43 CD.CL=C0A80AD8.C 00a0 4c 3d 43 30 41 38 30 41 44 42 0a 43 4c 3d 43 30 L=C0A80ADB.CL=C0 00b0 41 38 30 41 44 30 0a 43 4c 3d 43 30 41 38 30 41 A80AD0.CL=C0A80A 00c0 43 42 0a 43 4c 3d 43 30 41 38 30 41 43 43 0a 43 CB.CL=C0A80ACC.C 00d0 4c 3d 43 30 41 38 30 41 43 45 0a 43 4c 3d 43 30 L=C0A80ACE.CL=C0 00e0 41 38 30 41 44 43 0a 43 4c 3d 43 30 41 38 30 41 A80ADC.CL=C0A80A 00f0 43 46 0a 43 4c 3d 43 30 41 38 30 41 46 30 0a 43 CF.CL=C0A80AF0.C 0100 4c 3d 43 30 41 38 30 41 43 39 0a 43 4c 3d 43 30 L=C0A80AC9.CL=C0 0110 41 38 30 41 31 30 0a 43 4c 3d 43 30 41 38 30 41 A80A10.CL=C0A80A 0120 30 44 0a 43 4c 3d 43 30 41 38 30 41 30 46 0a 43 0D.CL=C0A80A0F.C 0130 4c 3d 43 30 41 38 30 41 30 43 0a 43 4c 3d 43 30 L=C0A80A0C.CL=C0 0140 41 38 30 41 44 31 0a 43 4c 3d 43 30 41 38 30 41 A80AD1.CL=C0A80A 0150 43 41 0a 43 4c 3d 43 30 41 38 30 41 46 41 0a 43 CA.CL=C0A80AFA.C 0160 4c 3d 43 30 41 38 30 41 32 37 0a 43 4c 3d 43 30 L=C0A80A27.CL=C0 0170 41 38 30 41 44 33 0a 43 4c 3d 43 30 41 38 30 41 A80AD3.CL=C0A80A 0180 44 32 0a 43 4c 3d 43 30 41 38 30 41 45 32 0a 43 D2.CL=C0A80AE2.C 0190 4c 3d 43 30 41 38 30 41 45 33 0a 43 4c 3d 43 30 L=C0A80AE3.CL=C0 01a0 41 38 30 41 44 45 0a 43 4c 3d 43 30 41 38 31 34 A80ADE.CL=C0A814 01b0 30 33 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 03.CL=00.CL=00.C 01c0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01d0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01e0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 01f0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0200 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0210 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0220 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0230 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0240 30 30 0a 4d 44 3d 66 31 65 33 63 33 62 65 37 61 00.MD=f1e3c3be7a 0250 64 35 32 32 35 35 63 61 65 39 33 34 65 31 34 61 d52255cae934e14a 0260 30 31 34 61 39 30 0a 3c 2f 42 4f 44 59 3e 0a 014a90.</BODY>. No. Time Source Destination Protocol Length Info 12545 160.117144 192.168.10.115 64.74.103.129 TCP 60 cogsys-lm > https [ACK] Seq=223 Ack=223 Win=65387 Len=0 Frame 12545: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.115 (192.168.10.115), Dst: 64.74.103.129 (64.74.103.129) Transmission Control Protocol, Src Port: cogsys-lm (3377), Dst Port: https (443), Seq: 223, Ack: 223, Len: 0 No. Time Source Destination Protocol Length Info 12546 160.290408 192.168.10.203 212.175.207.5 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 12546: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 212.175.207.5 (212.175.207.5) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 12547 160.478783 200.179.192.5 192.168.10.207 TCP 60 www-dev > smtp [FIN, ACK] Seq=63 Ack=220 Win=93220 Len=0 Frame 12547: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 200.179.192.5 (200.179.192.5), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: www-dev (2784), Dst Port: smtp (25), Seq: 63, Ack: 220, Len: 0 No. Time Source Destination Protocol Length Info 12548 160.478822 192.168.10.207 200.179.192.5 TCP 60 smtp > www-dev [ACK] Seq=220 Ack=64 Win=65473 Len=0 Frame 12548: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 200.179.192.5 (200.179.192.5) Transmission Control Protocol, Src Port: smtp (25), Dst Port: www-dev (2784), Seq: 220, Ack: 64, Len: 0 No. Time Source Destination Protocol Length Info 12549 160.478930 192.168.10.207 200.179.192.5 TCP 60 smtp > www-dev [FIN, ACK] Seq=220 Ack=64 Win=65473 Len=0 Frame 12549: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 200.179.192.5 (200.179.192.5) Transmission Control Protocol, Src Port: smtp (25), Dst Port: www-dev (2784), Seq: 220, Ack: 64, Len: 0 No. Time Source Destination Protocol Length Info 12550 160.478968 200.179.192.5 192.168.10.207 TCP 60 www-dev > smtp [ACK] Seq=64 Ack=221 Win=93220 Len=0 Frame 12550: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 200.179.192.5 (200.179.192.5), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: www-dev (2784), Dst Port: smtp (25), Seq: 64, Ack: 221, Len: 0 No. Time Source Destination Protocol Length Info 12551 160.479222 192.168.10.1 192.168.10.245 Syslog 201 LOCAL1.INFO: Oct 3 19:46:58 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 200.179.192.5 7x.x.x.3 2784 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 12551: 201 bytes on wire (1608 bits), 201 bytes captured (1608 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:46:58 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 200.179.192.5 7x.x.x.3 2784 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 12552 160.485786 192.168.10.32 192.168.10.255 UDP 647 Source port: 38302 Destination port: apc-3052 Frame 12552: 647 bytes on wire (5176 bits), 647 bytes captured (5176 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (605 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 38 3a 34 32 0a 53 52 3d 30 31 31 =20:58:42.SR=011 0060 35 45 37 0a 53 55 3d 32 35 46 39 0a 52 44 3d 37 5E7.SU=25F9.RD=7 0070 32 41 42 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 2AB.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 36 .4C=207.3.50=036 00c0 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 .0.43=028.5.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 30 3a 1/19/07.6A=0050: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 746005481 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 35 39 2e 39 39 0a 34 44 3d .46=59.99.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 207.3.4E=205.9.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 31 2e 30 0a 32 46 3d 31 35 2e .5C=031.0.2F=15. 01d0 31 32 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 12.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 000.09=60.00;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 30 0a 49 30 3d 30 0a 53 48 3d O .MC=0.I0=0.SH= 0210 36 35 37 31 43 45 39 44 43 35 42 30 44 44 42 37 6571CE9DC5B0DDB7 0220 38 42 46 36 42 37 38 45 37 41 43 44 30 33 33 42 8BF6B78E7ACD033B 0230 0a 4d 44 3d 33 63 64 33 32 62 39 66 30 63 35 62 .MD=3cd32b9f0c5b 0240 39 66 65 34 63 33 61 64 31 30 37 30 63 35 63 39 9fe4c3ad1070c5c9 0250 63 64 63 66 0a 3c 2f 42 4f 44 59 3e 0a cdcf.</BODY>. No. Time Source Destination Protocol Length Info 12553 160.485922 192.168.10.32 192.168.10.255 UDP 647 Source port: 38302 Destination port: apc-3052 Frame 12553: 647 bytes on wire (5176 bits), 647 bytes captured (5176 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (605 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 38 3a 34 32 0a 53 52 3d 30 31 31 =20:58:42.SR=011 0060 35 45 37 0a 53 55 3d 32 35 46 39 0a 52 44 3d 37 5E7.SU=25F9.RD=7 0070 32 41 42 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 2AB.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 36 .4C=207.3.50=036 00c0 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 .0.43=028.5.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 30 3a 1/19/07.6A=0050: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 746005481 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 35 39 2e 39 39 0a 34 44 3d .46=59.99.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 207.3.4E=205.9.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 31 2e 30 0a 32 46 3d 31 35 2e .5C=031.0.2F=15. 01d0 31 32 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 12.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 000.09=60.00;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 30 0a 49 30 3d 30 0a 53 48 3d O .MC=0.I0=0.SH= 0210 36 35 37 31 43 45 39 44 43 35 42 30 44 44 42 37 6571CE9DC5B0DDB7 0220 38 42 46 36 42 37 38 45 37 41 43 44 30 33 33 42 8BF6B78E7ACD033B 0230 0a 4d 44 3d 33 63 64 33 32 62 39 66 30 63 35 62 .MD=3cd32b9f0c5b 0240 39 66 65 34 63 33 61 64 31 30 37 30 63 35 63 39 9fe4c3ad1070c5c9 0250 63 64 63 66 0a 3c 2f 42 4f 44 59 3e 0a cdcf.</BODY>. No. Time Source Destination Protocol Length Info 12554 160.603580 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=11383 Ack=837143 Win=14460 Len=0 Frame 12554: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11383, Ack: 837143, Len: 0 No. Time Source Destination Protocol Length Info 12555 160.603613 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 12554#1] smtp > 23308 [ACK] Seq=11383 Ack=837143 Win=14460 Len=0 Frame 12555: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11383, Ack: 837143, Len: 0 No. Time Source Destination Protocol Length Info 12556 160.603647 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12556: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 837990, Ack: 11383, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12557 160.603686 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12557: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 839370, Ack: 11383, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12558 160.603728 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12558: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 840750, Ack: 11383, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12559 160.603758 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12559: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 842130, Ack: 11383, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12560 160.603789 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12560: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 843510, Ack: 11383, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12561 160.603818 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12561: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 844890, Ack: 11383, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12562 160.603852 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12562: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 846270, Ack: 11383, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12563 160.603891 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 12554#2] smtp > 23308 [ACK] Seq=11383 Ack=837143 Win=14460 Len=0 Frame 12563: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11383, Ack: 837143, Len: 0 No. Time Source Destination Protocol Length Info 12564 160.603927 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 12554#3] smtp > 23308 [ACK] Seq=11383 Ack=837143 Win=14460 Len=0 Frame 12564: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11383, Ack: 837143, Len: 0 No. Time Source Destination Protocol Length Info 12565 160.603959 192.168.10.207 206.225.164.186 SMTP 474 S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 12565: 474 bytes on wire (3792 bits), 474 bytes captured (3792 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11383, Ack: 837143, Len: 420 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12566 160.603990 206.225.164.186 192.168.10.207 SMTP 901 [TCP Out-Of-Order] C: DATA fragment, 847 bytes Frame 12566: 901 bytes on wire (7208 bits), 901 bytes captured (7208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 837143, Ack: 11383, Len: 847 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12567 160.604023 206.225.164.186 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 12567: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 837990, Ack: 11383, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12568 160.604052 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=847650 Ack=11803 Win=46720 Len=0 Frame 12568: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 847650, Ack: 11803, Len: 0 No. Time Source Destination Protocol Length Info 12569 160.604081 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 12565#1] smtp > 23308 [ACK] Seq=11803 Ack=837143 Win=14460 Len=0 Frame 12569: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11803, Ack: 837143, Len: 0 No. Time Source Destination Protocol Length Info 12570 160.604110 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 12565#2] smtp > 23308 [ACK] Seq=11803 Ack=837143 Win=14460 Len=0 Frame 12570: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11803, Ack: 837143, Len: 0 No. Time Source Destination Protocol Length Info 12571 160.604138 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 12565#3] smtp > 23308 [ACK] Seq=11803 Ack=837143 Win=14460 Len=0 Frame 12571: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11803, Ack: 837143, Len: 0 No. Time Source Destination Protocol Length Info 12572 160.604165 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 12565#4] smtp > 23308 [ACK] Seq=11803 Ack=837143 Win=14460 Len=0 Frame 12572: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11803, Ack: 837143, Len: 0 No. Time Source Destination Protocol Length Info 12573 160.604193 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 12565#5] smtp > 23308 [ACK] Seq=11803 Ack=837143 Win=14460 Len=0 Frame 12573: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11803, Ack: 837143, Len: 0 No. Time Source Destination Protocol Length Info 12574 160.604222 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=11803 Ack=847650 Win=3953 Len=0 Frame 12574: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11803, Ack: 847650, Len: 0 No. Time Source Destination Protocol Length Info 12575 160.604262 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12575: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 847650, Ack: 11803, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12576 160.604295 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12576: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 849030, Ack: 11803, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12577 160.604324 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12577: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 850410, Ack: 11803, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12578 160.604351 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=11803 Ack=850410 Win=1193 Len=0 Frame 12578: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11803, Ack: 850410, Len: 0 No. Time Source Destination Protocol Length Info 12579 160.690882 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4256110848, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12579: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12580 160.690905 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4256110848, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12580: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12581 160.690918 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4256110848, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12581: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12582 160.690930 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4256110848, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12582: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12583 160.709091 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1830289664, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12583: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12584 160.709107 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1830289664, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12584: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12585 160.709119 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1830289664, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12585: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12586 160.709139 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1830289664, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12586: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12587 160.727005 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=11803 Ack=851603 Win=0 Len=0 Frame 12587: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11803, Ack: 851603, Len: 0 No. Time Source Destination Protocol Length Info 12588 160.894192 31.44.78.103 192.168.10.207 TCP 62 mpc-lifenet > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 12588: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 31.44.78.103 (31.44.78.103), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mpc-lifenet (1213), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 12589 160.894263 192.168.10.207 31.44.78.103 TCP 62 smtp > mpc-lifenet [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 12589: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 31.44.78.103 (31.44.78.103) Transmission Control Protocol, Src Port: smtp (25), Dst Port: mpc-lifenet (1213), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 12590 161.073220 31.44.78.103 192.168.10.207 TCP 60 mpc-lifenet > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 12590: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 31.44.78.103 (31.44.78.103), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mpc-lifenet (1213), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 12591 161.073423 192.168.10.1 192.168.10.245 Syslog 202 LOCAL1.INFO: Oct 3 19:46:59 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 31.44.78.103 7x.x.x.3 1213 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 12591: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:46:59 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 31.44.78.103 7x.x.x.3 1213 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 12592 161.073461 192.168.10.207 31.44.78.103 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:46:33 -0400 Frame 12592: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 31.44.78.103 (31.44.78.103) Transmission Control Protocol, Src Port: smtp (25), Dst Port: mpc-lifenet (1213), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12593 161.073502 31.44.78.103 192.168.10.207 TCP 60 mpc-lifenet > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 12593: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 31.44.78.103 (31.44.78.103), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mpc-lifenet (1213), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 12594 161.188195 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 12594: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11803, Ack: 851603, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12595 161.188231 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=851790 Ack=11845 Win=46699 Len=0 Frame 12595: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 851790, Ack: 11845, Len: 0 No. Time Source Destination Protocol Length Info 12596 161.188263 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=11845 Ack=851603 Win=0 Len=0 Frame 12596: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11845, Ack: 851603, Len: 0 No. Time Source Destination Protocol Length Info 12597 161.194175 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 12597: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12598 161.255897 31.44.78.103 192.168.10.207 SMTP 75 C: EHLO [31.44.78.103] Frame 12598: 75 bytes on wire (600 bits), 75 bytes captured (600 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 31.44.78.103 (31.44.78.103), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mpc-lifenet (1213), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 21 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12599 161.256013 192.168.10.207 31.44.78.103 SMTP 243 S: 250-mail.mydomain.com Hello [31.44.78.103] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 12599: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 31.44.78.103 (31.44.78.103) Transmission Control Protocol, Src Port: smtp (25), Dst Port: mpc-lifenet (1213), Seq: 122, Ack: 22, Len: 189 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12600 161.256061 31.44.78.103 192.168.10.207 TCP 60 mpc-lifenet > smtp [ACK] Seq=22 Ack=311 Win=93130 Len=0 Frame 12600: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 31.44.78.103 (31.44.78.103), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mpc-lifenet (1213), Dst Port: smtp (25), Seq: 22, Ack: 311, Len: 0 No. Time Source Destination Protocol Length Info 12601 161.256564 192.168.10.1 192.168.10.245 Syslog 269 LOCAL1.INFO: Oct 3 19:46:59 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 31.44.78.103 7x.x.x.3 1213 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 12601: 269 bytes on wire (2152 bits), 269 bytes captured (2152 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:46:59 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 31.44.78.103 7x.x.x.3 1213 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" No. Time Source Destination Protocol Length Info 12602 161.256636 192.168.10.1 192.168.10.245 Syslog 275 LOCAL1.INFO: Oct 3 19:46:59 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 31.44.78.103 7x.x.x.3 1213 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 12602: 275 bytes on wire (2200 bits), 275 bytes captured (2200 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:46:59 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 31.44.78.103 7x.x.x.3 1213 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELIN No. Time Source Destination Protocol Length Info 12603 161.256708 192.168.10.1 192.168.10.245 Syslog 268 LOCAL1.INFO: Oct 3 19:46:59 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 31.44.78.103 7x.x.x.3 1213 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 12603: 268 bytes on wire (2144 bits), 268 bytes captured (2144 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:46:59 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 31.44.78.103 7x.x.x.3 1213 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" ( No. Time Source Destination Protocol Length Info 12604 161.256786 192.168.10.1 192.168.10.245 Syslog 284 LOCAL1.INFO: Oct 3 19:46:59 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 31.44.78.103 7x.x.x.3 1213 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 12604: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:46:59 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 31.44.78.103 7x.x.x.3 1213 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCE No. Time Source Destination Protocol Length Info 12605 161.256858 192.168.10.1 192.168.10.245 Syslog 275 LOCAL1.INFO: Oct 3 19:46:59 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 31.44.78.103 7x.x.x.3 1213 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 12605: 275 bytes on wire (2200 bits), 275 bytes captured (2200 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:46:59 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 31.44.78.103 7x.x.x.3 1213 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYM No. Time Source Destination Protocol Length Info 12606 161.256962 192.168.10.1 192.168.10.245 Syslog 269 LOCAL1.INFO: Oct 3 19:46:59 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 31.44.78.103 7x.x.x.3 1213 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 12606: 269 bytes on wire (2152 bits), 269 bytes captured (2152 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:46:59 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 31.44.78.103 7x.x.x.3 1213 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" No. Time Source Destination Protocol Length Info 12607 161.317779 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 12607: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12608 161.421160 192.168.10.217 4.2.2.2 DNS 77 Standard query TXT _nfsv4idmapdomain Frame 12608: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.217 (192.168.10.217), Dst: 4.2.2.2 (4.2.2.2) User Datagram Protocol, Src Port: 51168 (51168), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12609 161.429702 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 12609: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12610 161.429733 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 12610: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12611 161.439256 4.2.2.2 192.168.10.217 DNS 152 Standard query response, No such name Frame 12611: 152 bytes on wire (1216 bits), 152 bytes captured (1216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Oracle_86:77:66 (00:14:4f:86:77:66) Internet Protocol Version 4, Src: 4.2.2.2 (4.2.2.2), Dst: 192.168.10.217 (192.168.10.217) User Datagram Protocol, Src Port: domain (53), Dst Port: 51168 (51168) Domain Name System (response) No. Time Source Destination Protocol Length Info 12612 161.439709 Watchgua_3c:4c:d8 Oracle_86:77:66 ARP 60 Who has 192.168.10.217? Tell 192.168.10.1 Frame 12612: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Oracle_86:77:66 (00:14:4f:86:77:66) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12613 161.439725 Oracle_86:77:66 Watchgua_3c:4c:d8 ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 12613: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12614 161.443870 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 12614: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12615 161.464323 31.44.78.103 192.168.10.207 SMTP 105 C: MAIL FROM: <rfinfo@xxxxxxxxxxxxxxxxxxx> SIZE=1016 Frame 12615: 105 bytes on wire (840 bits), 105 bytes captured (840 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 31.44.78.103 (31.44.78.103), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mpc-lifenet (1213), Dst Port: smtp (25), Seq: 22, Ack: 311, Len: 51 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12616 161.464484 192.168.10.207 31.44.78.103 SMTP 105 S: 250 2.1.0 [email protected] OK Frame 12616: 105 bytes on wire (840 bits), 105 bytes captured (840 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 31.44.78.103 (31.44.78.103) Transmission Control Protocol, Src Port: smtp (25), Dst Port: mpc-lifenet (1213), Seq: 311, Ack: 73, Len: 51 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12617 161.464575 31.44.78.103 192.168.10.207 TCP 60 mpc-lifenet > smtp [ACK] Seq=73 Ack=362 Win=93078 Len=0 Frame 12617: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 31.44.78.103 (31.44.78.103), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mpc-lifenet (1213), Dst Port: smtp (25), Seq: 73, Ack: 362, Len: 0 No. Time Source Destination Protocol Length Info 12618 161.566228 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 12618: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12619 161.706579 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4272888064, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12619: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12620 161.706603 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4272888064, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12620: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12621 161.706616 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4272888064, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12621: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12622 161.706628 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4272888064, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12622: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12623 161.724770 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1847066880, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12623: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12624 161.724793 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1847066880, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12624: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12625 161.724806 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1847066880, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12625: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12626 161.724818 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1847066880, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12626: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12627 161.730301 31.44.78.103 192.168.10.207 SMTP 91 C: RCPT TO: <ghopkins@xxxxxxxxxxxx> Frame 12627: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 31.44.78.103 (31.44.78.103), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mpc-lifenet (1213), Dst Port: smtp (25), Seq: 73, Ack: 362, Len: 37 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12628 161.730842 192.168.10.207 31.44.78.103 SMTP 91 S: 250 2.1.5 ghopkins@xxxxxxxxxxxx Frame 12628: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 31.44.78.103 (31.44.78.103) Transmission Control Protocol, Src Port: smtp (25), Dst Port: mpc-lifenet (1213), Seq: 362, Ack: 110, Len: 37 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12629 161.730884 31.44.78.103 192.168.10.207 TCP 60 mpc-lifenet > smtp [ACK] Seq=110 Ack=399 Win=93042 Len=0 Frame 12629: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 31.44.78.103 (31.44.78.103), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mpc-lifenet (1213), Dst Port: smtp (25), Seq: 110, Ack: 399, Len: 0 No. Time Source Destination Protocol Length Info 12630 161.892311 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.88? Tell 192.168.10.220 Frame 12630: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12631 161.892343 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.88? Tell 192.168.10.220 Frame 12631: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12632 161.892359 Dell_ad:25:f8 Intel_38:8d:0a ARP 64 Who has 192.168.10.66? Tell 192.168.10.220 Frame 12632: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12633 161.892370 Dell_ad:25:f8 Intel_89:5e:11 ARP 64 Who has 192.168.10.65? Tell 192.168.10.220 Frame 12633: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12634 161.892380 Intel_38:8d:0a Dell_ad:25:f6 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 12634: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12635 161.892390 Intel_89:5e:11 Dell_ad:25:f8 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 12635: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12636 161.892401 Dell_ad:25:f8 Intel_a5:f5:5b ARP 64 Who has 192.168.10.131? Tell 192.168.10.220 Frame 12636: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12637 161.892416 Dell_ad:25:f8 Intel_38:8c:64 ARP 64 Who has 192.168.10.67? Tell 192.168.10.220 Frame 12637: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12638 161.892427 Dell_ad:25:f8 Intel_02:0e:6d ARP 64 Who has 192.168.10.128? Tell 192.168.10.220 Frame 12638: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12639 161.892437 Intel_a5:f5:5b Dell_ad:25:f8 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 12639: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12640 161.892446 Dell_ad:25:f8 IntelCor_d3:4e:80 ARP 64 Who has 192.168.10.70? Tell 192.168.10.220 Frame 12640: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12641 161.892457 Intel_38:8c:64 Dell_ad:25:f6 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 12641: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12642 161.892467 Dell_ad:25:f8 Intel_d0:7a:8f ARP 64 Who has 192.168.10.68? Tell 192.168.10.220 Frame 12642: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12643 161.892477 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.142? Tell 192.168.10.220 Frame 12643: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12644 161.892487 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.233? Tell 192.168.10.220 Frame 12644: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12645 161.892497 Intel_02:0e:6d Dell_ad:25:f6 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 12645: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12646 161.892507 IntelCor_d3:4e:80 Dell_ad:25:f8 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 12646: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12647 161.892521 Dell_ad:25:f8 Intel_56:83:a5 ARP 64 Who has 192.168.10.59? Tell 192.168.10.220 Frame 12647: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12648 161.892531 Dell_ad:25:f8 Intel_38:8c:b1 ARP 64 Who has 192.168.10.138? Tell 192.168.10.220 Frame 12648: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12649 161.892542 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 12649: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12650 161.892557 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 12650: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12651 161.892571 Intel_d0:7a:8f Dell_ad:25:f8 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 12651: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12652 161.892581 Dell_ad:25:f8 Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.220 Frame 12652: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12653 161.892591 Intel_56:83:a5 Dell_ad:25:f6 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 12653: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12654 161.892601 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 12654: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12655 161.892615 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 12655: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12656 161.892628 Intel_38:8c:b1 Dell_ad:25:f6 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 12656: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12657 161.892638 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 12657: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12658 161.892651 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.142 is at 00:0f:34:04:98:91 Frame 12658: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12659 161.892661 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 12659: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12660 161.892950 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.88? Tell 192.168.10.246 Frame 12660: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12661 161.892976 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.88? Tell 192.168.10.246 Frame 12661: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12662 161.895263 192.168.10.220 208.67.222.222 DNS 87 Standard query PTR 163.136.126.79.in-addr.arpa Frame 12662: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 56101 (56101), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12663 161.937956 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 12663: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12664 161.937987 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 12664: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12665 161.940427 31.44.78.103 192.168.10.207 SMTP 89 C: RCPT TO: <dcinci@xxxxxxxxxxxx> Frame 12665: 89 bytes on wire (712 bits), 89 bytes captured (712 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 31.44.78.103 (31.44.78.103), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mpc-lifenet (1213), Dst Port: smtp (25), Seq: 110, Ack: 399, Len: 35 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12666 161.940871 192.168.10.207 31.44.78.103 SMTP 89 S: 250 2.1.5 dcinci@xxxxxxxxxxxx Frame 12666: 89 bytes on wire (712 bits), 89 bytes captured (712 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 31.44.78.103 (31.44.78.103) Transmission Control Protocol, Src Port: smtp (25), Dst Port: mpc-lifenet (1213), Seq: 399, Ack: 145, Len: 35 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12667 161.940911 31.44.78.103 192.168.10.207 TCP 60 mpc-lifenet > smtp [ACK] Seq=145 Ack=434 Win=93006 Len=0 Frame 12667: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 31.44.78.103 (31.44.78.103), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mpc-lifenet (1213), Dst Port: smtp (25), Seq: 145, Ack: 434, Len: 0 No. Time Source Destination Protocol Length Info 12668 161.993010 192.168.10.246 65.32.1.70 DNS 87 Standard query PTR 249.201.112.92.in-addr.arpa Frame 12668: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.70 (65.32.1.70) User Datagram Protocol, Src Port: 59667 (59667), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12669 162.007787 65.32.1.70 192.168.10.246 DNS 131 Standard query response PTR 249-201-112-92.pool.ukrtel.net Frame 12669: 131 bytes on wire (1048 bits), 131 bytes captured (1048 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.70 (65.32.1.70), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 59667 (59667) Domain Name System (response) No. Time Source Destination Protocol Length Info 12670 162.045554 192.168.10.205 192.168.10.255 BROWSER 243 Host Announcement MERCURY, Workstation, Server, Print Queue Server, NT Workstation, NT Server, Backup Browser, DFS server Frame 12670: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_52:2e:6b (00:13:72:52:2e:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.205 (192.168.10.205), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 12671 162.045762 192.168.10.205 192.168.10.255 BROWSER 243 Host Announcement MERCURY, Workstation, Server, Print Queue Server, NT Workstation, NT Server, Backup Browser, DFS server Frame 12671: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_52:2e:6b (00:13:72:52:2e:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.205 (192.168.10.205), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 12672 162.115596 208.67.222.222 192.168.10.220 DNS 87 Standard query response, No such name Frame 12672: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 56101 (56101) Domain Name System (response) No. Time Source Destination Protocol Length Info 12673 162.115646 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 Who has 192.168.10.220? Tell 192.168.10.1 Frame 12673: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12674 162.115660 Dell_ad:25:f6 Watchgua_3c:4c:d8 ARP 60 192.168.10.220 is at 00:22:19:ad:25:f6 Frame 12674: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12675 162.116197 192.168.10.203 79.126.136.163 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 12675: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 79.126.136.163 (79.126.136.163) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 12676 162.147502 31.44.78.103 192.168.10.207 SMTP 91 C: RCPT TO: <pswanson@xxxxxxxxxxxx> Frame 12676: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 31.44.78.103 (31.44.78.103), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mpc-lifenet (1213), Dst Port: smtp (25), Seq: 145, Ack: 434, Len: 37 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12677 162.147829 192.168.10.207 31.44.78.103 SMTP 91 S: 250 2.1.5 pswanson@xxxxxxxxxxxx Frame 12677: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 31.44.78.103 (31.44.78.103) Transmission Control Protocol, Src Port: smtp (25), Dst Port: mpc-lifenet (1213), Seq: 434, Ack: 182, Len: 37 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12678 162.147869 31.44.78.103 192.168.10.207 TCP 60 mpc-lifenet > smtp [ACK] Seq=182 Ack=471 Win=92970 Len=0 Frame 12678: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 31.44.78.103 (31.44.78.103), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mpc-lifenet (1213), Dst Port: smtp (25), Seq: 182, Ack: 471, Len: 0 No. Time Source Destination Protocol Length Info 12679 162.281929 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.100? Tell 192.168.10.226 Frame 12679: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12680 162.281963 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.100? Tell 192.168.10.226 Frame 12680: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12681 162.281978 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 12681: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12682 162.281988 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 12682: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12683 162.282004 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 12683: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12684 162.282014 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 12684: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12685 162.282024 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 12685: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12686 162.282034 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 12686: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12687 162.282044 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 12687: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12688 162.282054 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 12688: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12689 162.282064 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 12689: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12690 162.282080 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 12690: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12691 162.282113 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 12691: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12692 162.282124 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 12692: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12693 162.282133 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 12693: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12694 162.282156 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 12694: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12695 162.282166 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 12695: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12696 162.282182 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 12696: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12697 162.282193 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 12697: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12698 162.282203 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 12698: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12699 162.282213 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 12699: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12700 162.282223 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 12700: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12701 162.282330 192.168.10.46 192.168.10.245 Syslog 214 LOCAL4.WARNING: Oct 03 2011 19:17:42 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n Frame 12701: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:17:42 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n No. Time Source Destination Protocol Length Info 12702 162.282342 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 12702: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12703 162.282352 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 12703: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12704 162.282372 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 12704: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12705 162.282382 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 12705: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12706 162.282392 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 12706: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12707 162.282402 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 12707: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12708 162.282413 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 12708: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12709 162.282423 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 12709: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12710 162.282433 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 12710: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12711 162.282443 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 12711: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12712 162.282453 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 12712: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12713 162.282463 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 12713: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12714 162.282473 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 12714: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12715 162.282489 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 12715: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12716 162.282502 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 12716: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12717 162.282516 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 12717: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12718 162.282530 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 12718: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12719 162.282551 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 12719: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12720 162.282565 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 12720: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12721 162.282578 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 12721: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12722 162.282588 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 12722: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12723 162.282598 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 12723: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12724 162.282608 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 12724: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12725 162.282618 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 12725: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12726 162.282628 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 12726: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12727 162.282638 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 12727: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12728 162.282649 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 12728: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12729 162.282659 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 12729: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12730 162.358374 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=162666 Ack=2739 Win=1002 Len=1448 TSval=575837 TSecr=729021 Frame 12730: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 162666, Ack: 2739, Len: 1448 Data (1448 bytes) 0000 17 03 01 22 80 7f 04 eb 1f dd d3 3b 58 f8 c0 2e ...".......;X... 0010 d4 32 58 89 c0 88 81 a0 db a0 57 4e 46 0a 6c da .2X.......WNF.l. 0020 4b a6 52 fc 2d 9b 85 48 1e bc 5f a8 5c 6f a6 c4 K.R.-..H.._.\o.. 0030 8e ef c9 b5 b8 ce 72 7a 6a c9 5e e0 9e d8 be 8e ......rzj.^..... 0040 f1 52 10 0d b9 34 c1 3f 8d ef c4 27 cb 57 14 9e .R...4.?...'.W.. 0050 d7 8a bc d5 06 b6 3b b9 bd 4b f1 68 65 f7 b1 b5 ......;..K.he... 0060 a8 be e4 9c ac f5 12 6b 13 d9 e2 71 41 3d 9e e5 .......k...qA=.. 0070 7d d2 1c ca 87 7e 68 29 50 96 32 71 89 b1 60 d9 }....~h)P.2q..`. 0080 26 50 5b f5 f4 1c b1 bb 1f 15 3b e9 55 5f 67 ec &P[.......;.U_g. 0090 1d 25 b8 53 e2 2a 48 d6 e2 69 34 34 37 c5 61 02 .%.S.*H..i447.a. 00a0 4d f9 da 97 85 68 f1 bf b2 18 cf c8 65 ae 70 e4 M....h......e.p. 00b0 d0 97 a2 36 87 4f 85 39 fe d4 04 e7 a6 a3 e7 51 ...6.O.9.......Q 00c0 5d bd 79 14 d4 90 84 dc 24 49 ff ba 92 eb 93 e6 ].y.....$I...... 00d0 9c 4e 5c b5 f2 50 27 cf 02 16 00 55 4c 8c 32 bb .N\..P'....UL.2. 00e0 95 ed 30 b8 fd d0 1f 94 80 80 3d 96 db a9 86 a4 ..0.......=..... 00f0 67 af 39 4d 0a b7 fc 38 87 1d 62 a2 70 be d3 74 g.9M...8..b.p..t 0100 c8 96 1d 47 a2 31 71 f3 6a 03 26 66 9c bb 00 2e ...G.1q.j.&f.... 0110 30 08 c2 52 2a 18 3f e4 4d 33 6d c7 d9 88 a6 02 0..R*.?.M3m..... 0120 cf 73 a4 5f ac e7 97 86 47 ce ec ad bd 75 7d 75 .s._....G....u}u 0130 69 39 ce 81 0c f9 0a e2 51 44 54 1a 68 b7 46 ed i9......QDT.h.F. 0140 af d4 23 ba 43 d5 06 0c 9a a9 86 c8 76 49 8b 3d ..#.C.......vI.= 0150 b4 d4 d4 7c e5 de 12 b6 2b 8e 07 45 88 99 93 0d ...|....+..E.... 0160 d0 70 8e 50 00 a8 2e af 22 9b b5 7f 49 71 57 db .p.P...."...IqW. 0170 a4 b8 25 14 d4 d1 57 38 04 74 75 47 81 0e 29 e1 ..%...W8.tuG..). 0180 d3 85 76 4b 84 af e3 99 71 4e 17 73 81 1c d9 3a ..vK....qN.s...: 0190 96 8e 30 18 4d 7f 7c 89 22 63 15 96 b4 68 44 b1 ..0.M.|."c...hD. 01a0 c6 65 f9 3e 41 b5 36 37 32 63 16 ff bd 2e 96 4a .e.>A.672c.....J 01b0 d5 e3 36 b4 c9 9d 89 51 2e 28 a9 62 cf 0d 33 77 ..6....Q.(.b..3w 01c0 7a 6f bd e3 1d 96 f8 ef 4b 31 d8 1f 81 4e 32 ea zo......K1...N2. 01d0 36 87 30 7e ee 55 df 1b 55 78 a8 80 36 ae 73 5a 6.0~.U..Ux..6.sZ 01e0 87 5b 48 4a 9c 1c 6b 5a 49 a8 e6 e9 40 37 5b 42 .[HJ..kZI...@7[B 01f0 bb 0f 1e 19 fe e4 b9 5d 2d d4 53 de 43 6b 83 86 .......]-.S.Ck.. 0200 60 4c 30 12 cf f3 33 4f db c5 b8 26 e8 13 fa f2 `L0...3O...&.... 0210 21 ec 6b 80 44 d8 c6 79 52 5f ad c0 c4 26 44 c5 !.k.D..yR_...&D. 0220 0e 4f 31 f9 21 8f de d2 0e 27 b2 95 3d ae ae b7 .O1.!....'..=... 0230 6d 07 c5 e5 aa 73 be 66 5c 15 19 5b 8e 51 b8 73 m....s.f\..[.Q.s 0240 e0 e1 dc d6 1b f8 c4 dc c9 69 d1 fa e3 93 59 2a .........i....Y* 0250 c8 28 eb 3e a7 06 35 d8 31 9d ad 05 92 56 14 07 .(.>..5.1....V.. 0260 5b 45 a7 06 01 bd 0a 46 fd 32 36 1f cf c1 8a 12 [E.....F.26..... 0270 ea 81 83 80 15 73 c1 dc 98 ca 39 63 5a db 58 c7 .....s....9cZ.X. 0280 cc b2 c8 8b 29 a0 ea 45 29 1b bd 87 b8 f6 b2 b5 ....)..E)....... 0290 8e 17 c9 50 01 5f e9 17 4e 96 b0 73 db 60 d0 1e ...P._..N..s.`.. 02a0 dd dd be 73 9d 3c 76 73 86 29 17 89 aa 45 11 8c ...s.<vs.)...E.. 02b0 87 6c 21 4d 9b a0 dd d6 76 33 bb 90 64 8f 58 4a .l!M....v3..d.XJ 02c0 f0 a4 c0 4b 34 1a f9 8f 50 38 a1 68 48 6c 91 bf ...K4...P8.hHl.. 02d0 4a 31 6d 32 aa d5 b8 38 b9 5c 76 3f cd 5d d8 ca J1m2...8.\v?.].. 02e0 d5 2c 0b b4 91 35 7b 59 1a 58 3b 0c c7 32 16 66 .,...5{Y.X;..2.f 02f0 41 37 1a 98 49 62 bb d6 38 96 43 e9 ce 33 d9 b0 A7..Ib..8.C..3.. 0300 dc a9 b4 59 c2 ee a2 bb 86 04 14 30 38 32 10 6e ...Y.......082.n 0310 5d dc 08 78 6d d6 3f 95 8f aa 51 8e 31 81 14 20 ]..xm.?...Q.1.. 0320 f8 56 f2 5e 90 a0 61 31 ae bb 84 f9 55 da 69 54 .V.^..a1....U.iT 0330 2d f5 17 b0 60 a7 fd 28 9d 3a 73 c3 8a ba 5c 1f -...`..(.:s...\. 0340 19 05 bc c4 52 f4 8a 45 57 78 a9 89 4b de f5 a7 ....R..EWx..K... 0350 fd a7 2d 90 2c 6c de 35 e9 96 4f b0 86 3a 44 11 ..-.,l.5..O..:D. 0360 6e ff 25 93 b1 5f de 1d 53 9e c6 90 be e1 04 b6 n.%.._..S....... 0370 3f 0b 74 5a 82 79 e0 98 37 a2 2a 7d 2c a9 21 19 ?.tZ.y..7.*},.!. 0380 64 dc 67 eb f3 ed a5 df 10 21 1c 65 4f a9 6c b8 d.g......!.eO.l. 0390 9f 87 76 06 fa 72 56 90 12 78 ec c9 c0 dc 8c dc ..v..rV..x...... 03a0 d8 1e 8a ea 9a 1c d2 90 b7 fb 33 e7 f4 8f 42 f1 ..........3...B. 03b0 1c 6e 70 e0 45 85 be 8c a1 7e ae 8b b8 fc af bd .np.E....~...... 03c0 f2 1a b7 48 40 9c 4e 5b 64 7a ff 68 d0 35 d9 1c [email protected][dz.h.5.. 03d0 ee 1a ba 76 83 c2 4d 3e 37 13 46 71 6b 17 2e 19 ...v..M>7.Fqk... 03e0 76 2b 9c 52 63 1a 8f 52 56 1a f3 68 09 7c 77 bb v+.Rc..RV..h.|w. 03f0 e5 6d 68 33 ee 8d e6 e4 c7 46 d8 fd ca cf 67 07 .mh3.....F....g. 0400 01 e3 6a 4d 8f e0 fe 1c f5 08 e4 74 b3 5a 77 c2 ..jM.......t.Zw. 0410 8f c4 01 92 27 2f 6a 29 f9 91 53 27 03 d6 e1 eb ....'/j)..S'.... 0420 6b d6 f3 60 1c 49 5f e5 96 23 c4 67 a2 ce 92 51 k..`.I_..#.g...Q 0430 87 db 72 6b 68 cd 13 1e f5 44 5f 15 ce 8c cb 41 ..rkh....D_....A 0440 f2 0a 9a d0 ba aa 47 67 87 d7 ac 2c 82 21 80 05 ......Gg...,.!.. 0450 eb fb 46 ba 6f 6c 09 f5 f3 80 97 4c 1d 74 ba ba ..F.ol.....L.t.. 0460 8a bc 9d 31 5e cd 8f cb 56 42 5e 33 7d 55 24 9a ...1^...VB^3}U$. 0470 b6 3e 7b 7c 05 9b 0c 33 47 a3 05 8b 27 2d b6 c8 .>{|...3G...'-.. 0480 02 24 2b e6 a7 e5 79 4a 2b 4c d3 ca 46 b5 e5 d2 .$+...yJ+L..F... 0490 df ca de 41 f0 5a 00 0a 70 9b bf f6 91 49 63 f2 ...A.Z..p....Ic. 04a0 82 67 cd 70 f8 8a 4d e0 53 39 e7 b1 e5 f4 05 a0 .g.p..M.S9...... 04b0 23 b4 01 b5 5d bd a0 e1 dc fc 42 88 8a 17 f5 92 #...].....B..... 04c0 0b 6b d5 0d 54 8f a2 da 73 6b 62 a5 01 61 7d 5a .k..T...skb..a}Z 04d0 34 a4 3e 22 9e eb 83 04 c1 64 30 d2 30 f8 31 4e 4.>".....d0.0.1N 04e0 a8 7b 43 8d 3e b2 a2 5d 26 c1 10 7d 6c d3 32 b6 .{C.>..]&..}l.2. 04f0 2a df 6a 2d 35 e4 28 a5 42 72 cf 19 f2 97 f9 6e *.j-5.(.Br.....n 0500 8d c4 1f bd f4 4e 7b 12 a4 83 ed d7 91 90 6a 76 .....N{.......jv 0510 d6 bb 9a 83 ea 96 fb b8 23 9c ad f3 6d f6 73 20 ........#...m.s 0520 42 32 91 fe 86 cc 33 d9 38 59 cd a8 fb 4e 29 4d B2....3.8Y...N)M 0530 12 be ed b9 b0 d6 2f 87 5d 7a 1d 7c ec 05 77 80 ....../.]z.|..w. 0540 09 21 a9 27 ac 77 39 e8 23 5f e4 ad 14 de d9 c5 .!.'.w9.#_...... 0550 2d d0 4c 97 aa 49 52 2e da b0 a8 b8 13 3c 11 90 -.L..IR......<.. 0560 c8 ea 02 34 f7 93 85 bb c4 67 ab a0 d7 70 52 fc ...4.....g...pR. 0570 20 18 e4 f8 5f 13 4b 41 8c 46 35 95 f0 d0 43 55 ..._.KA.F5...CU 0580 93 f5 9e 91 96 af 81 76 ca 06 b6 d2 41 2d d0 8b .......v....A-.. 0590 14 ca 8d 50 8b ec 29 14 19 c2 db 7b ef b2 e3 91 ...P..)....{.... 05a0 c0 91 21 c9 ec 3c 88 14 ..!..<.. No. Time Source Destination Protocol Length Info 12731 162.358483 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=164114 Ack=2739 Win=1002 Len=1448 TSval=575837 TSecr=729021 Frame 12731: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 164114, Ack: 2739, Len: 1448 Data (1448 bytes) 0000 c6 c9 fd cb 98 b9 4d 2c 34 f1 da 0a b1 a8 ff 0c ......M,4....... 0010 77 3a e2 8d db 97 28 6b ef 21 b2 a6 ba c2 f5 65 w:....(k.!.....e 0020 69 5c 35 2b b6 79 49 43 82 48 a4 6d 8c d9 0c 4c i\5+.yIC.H.m...L 0030 c8 bf 91 67 a8 ee 27 87 7a d0 d8 2e b0 b3 64 db ...g..'.z.....d. 0040 ea 3b f9 db 13 fb 8c 01 cf 33 2b ad fb 67 e0 a2 .;.......3+..g.. 0050 29 36 54 18 05 c9 58 23 10 a6 79 db 57 5d b5 a7 )6T...X#..y.W].. 0060 bf d3 94 cc 4d 34 66 d1 dc 49 2d 95 81 1a 26 a7 ....M4f..I-...&. 0070 07 6b 99 cb 87 e4 bc f3 8d d4 19 7a e2 42 1b 76 .k.........z.B.v 0080 62 6c 02 26 a6 1e 51 4e 55 49 6c 7d b0 6f 98 d8 bl.&..QNUIl}.o.. 0090 c9 54 6c a0 22 6e 9e 42 ce fb 74 49 7d 90 b0 a7 .Tl."n.B..tI}... 00a0 ff 5a 6c 45 7c b5 19 38 b6 f5 4c 3c 6d bc 17 57 .ZlE|..8..L<m..W 00b0 c1 99 15 23 75 f6 aa 5d 6b 61 6e 2c dc 98 be 91 ...#u..]kan,.... 00c0 af 9f 9e ee b3 84 b3 c1 3e 26 5d 0e 6b 44 21 95 ........>&].kD!. 00d0 69 51 27 b9 57 e1 55 10 ff 44 a7 19 cb 37 66 45 iQ'.W.U..D...7fE 00e0 55 ec a0 01 94 c4 c5 87 55 da 19 e6 e3 16 86 11 U.......U....... 00f0 db 01 72 e3 fb d5 e3 d5 3b e7 8b 30 2a 84 c1 7a ..r.....;..0*..z 0100 16 99 ed 7f 83 46 f0 5f 30 4d bf ae b0 2a e5 d0 .....F._0M...*.. 0110 05 86 2c 61 a4 08 d0 9c 5e cc 75 17 66 f2 68 87 ..,a....^.u.f.h. 0120 43 7f aa fb 8b a9 39 4c 73 42 12 15 f2 f9 f0 ee C.....9LsB...... 0130 0e 23 30 33 a4 b8 81 fe 76 63 a1 7a 4a b3 ff 39 .#03....vc.zJ..9 0140 ed c1 90 5e 63 b9 0b 34 5d 3b 1e ca 81 d1 e7 cd ...^c..4];...... 0150 14 46 20 c4 39 44 2f a9 43 f0 f7 73 16 bd af a2 .F .9D/.C..s.... 0160 4a b8 44 3d 5d 32 a9 ad 3f a5 07 6f a1 c5 d1 c8 J.D=]2..?..o.... 0170 23 39 d7 e4 2d 14 1e 25 f2 0b 5a fb 56 0f b2 39 #9..-..%..Z.V..9 0180 eb 88 60 d6 42 a7 1c 87 22 a0 8c bb 67 9a 2b d8 ..`.B..."...g.+. 0190 c9 e5 94 40 0e 36 e1 be fb 68 17 6f 88 f3 11 84 [email protected].... 01a0 94 56 d5 31 77 41 cb d3 22 ba 10 ef da e8 48 62 .V.1wA..".....Hb 01b0 d4 6a 0f 00 c5 52 a8 79 f2 e8 e6 8f 91 10 ca 2f .j...R.y......./ 01c0 17 cc 6a 81 a0 af 50 7b b5 ef 10 35 55 29 d9 45 ..j...P{...5U).E 01d0 9c db 6f 53 59 a6 29 ea 38 f9 cd 26 40 ed e0 9d ..oSY.).8..&@... 01e0 77 46 c2 18 ef bf 28 07 bf 2c 13 b2 70 7f 61 14 wF....(..,..p.a. 01f0 aa ef 48 f2 4e f1 8e 8a 70 d0 13 4a 14 16 07 4c ..H.N...p..J...L 0200 d4 c0 76 b0 74 c5 71 53 0d 7f 2a 91 cb 8d 7f 12 ..v.t.qS..*..... 0210 48 e2 64 94 49 e5 97 59 29 5d e2 0a 4f 8f ab dc H.d.I..Y)]..O... 0220 38 bf 17 3b 08 64 e5 86 e6 74 17 66 36 fd b0 47 8..;.d...t.f6..G 0230 8d 45 54 5f 80 bf f3 d9 f4 88 51 cf f7 72 66 93 .ET_......Q..rf. 0240 12 67 f4 94 51 9f 9d 42 2a 12 1d a4 27 7c de 4c .g..Q..B*...'|.L 0250 c4 f4 5a b1 53 89 d2 e1 84 69 bb 99 3d e8 43 30 ..Z.S....i..=.C0 0260 68 e2 71 63 62 b6 95 8a 46 7b 00 e7 a2 ec ea 07 h.qcb...F{...... 0270 97 38 82 c7 01 dd e0 12 a3 10 70 72 d9 ce 62 db .8........pr..b. 0280 31 a9 3c 5e eb 0e ef 13 e6 7b 03 0f f9 48 9a 5b 1.<^.....{...H.[ 0290 a6 63 8e b7 bb 25 61 58 c0 36 74 59 66 d2 cc b7 .c...%aX.6tYf... 02a0 ec de 2a e5 83 33 c7 6f d0 95 63 59 68 5f be 6c ..*..3.o..cYh_.l 02b0 3d 25 56 46 8e 86 ec 84 bc ff d2 3e 3f 49 15 92 =%VF.......>?I.. 02c0 9d 5f 71 df b1 d1 b7 0e 71 5a 8b 4b 88 bd 95 03 ._q.....qZ.K.... 02d0 2f fd bf bd 19 7b 10 8e ea 90 b6 49 a3 c1 5c f9 /....{.....I..\. 02e0 a6 b5 66 76 ac 24 08 13 fc e1 44 29 3a 01 dd ab ..fv.$....D):... 02f0 fb 45 de 2e 30 a3 94 2d 2d 7b c9 bc d1 54 05 b9 .E..0..--{...T.. 0300 95 8f 9f f5 19 87 cd 06 77 27 25 ed 1c 30 5f e2 ........w'%..0_. 0310 94 7d 8b 7a b4 e6 29 2a 8d 65 ed 25 b1 b0 45 4d .}.z..)*.e.%..EM 0320 7f 8f ee 77 ce 14 29 de fd 26 18 dd c8 8c 66 3c ...w..)..&....f< 0330 6a 09 4e 05 a7 95 e9 08 61 9e 72 cd 71 f2 e4 58 j.N.....a.r.q..X 0340 7e 10 f4 66 23 1e ed 10 6b c3 f4 dd 3b 6a d6 dd ~..f#...k...;j.. 0350 b2 29 6b 03 e3 3c 4c 08 a0 2a d6 8e d6 c3 71 03 .)k..<L..*....q. 0360 f1 2c a5 31 d8 a1 69 a4 43 cc 69 c0 4b 83 e0 27 .,.1..i.C.i.K..' 0370 b1 e9 33 19 17 21 28 83 bc ea f6 bb 70 02 7b 5b ..3..!(.....p.{[ 0380 82 35 9c e7 b9 07 4c 50 c5 fa 4c 43 fd cb 88 22 .5....LP..LC..." 0390 3f 2f 04 ec 3b 8a e3 cb 62 4d 01 4e b1 7f da e8 ?/..;...bM.N.... 03a0 e2 eb e9 25 e5 8d ed d5 fa b7 cd de fe 60 99 1e ...%.........`.. 03b0 4a 70 99 6c f4 1d 39 b7 19 57 de 82 d5 3f ee 19 Jp.l..9..W...?.. 03c0 8c 18 26 58 36 59 b2 81 c5 a0 ab d5 dd 34 8a 54 ..&X6Y.......4.T 03d0 ab 06 6f 70 46 0e 19 7e 08 df a0 98 8f b7 16 f7 ..opF..~........ 03e0 22 2c 80 30 01 78 c8 fe db d3 93 0f 06 b2 10 20 ",.0.x......... 03f0 e5 39 0b c5 db 9a f4 2b ee 88 f6 d4 fb 7e 41 26 .9.....+.....~A& 0400 ad b5 f0 cc ce ff 27 3a 4b e2 ab 9e 16 a9 54 92 ......':K.....T. 0410 10 7f 58 17 46 d7 27 28 95 68 e3 32 38 0d 77 d6 ..X.F.'(.h.28.w. 0420 be 97 1d 44 a8 f6 f7 ee cf 46 3f 56 4a dc f4 4d ...D.....F?VJ..M 0430 91 0f 52 18 bd 9a c4 6d a1 af bb 93 c0 de eb 2e ..R....m........ 0440 6c 16 eb 2e 02 f7 aa b2 92 f5 fe c7 8e 81 32 6c l.............2l 0450 35 fa fd ec af 5b c1 f9 12 60 eb 52 9c 32 b5 e8 5....[...`.R.2.. 0460 ca 0d d1 5b ea dc 4b 35 ab 76 a7 4b de 41 b7 ff ...[..K5.v.K.A.. 0470 6c 10 1d 93 8e 66 04 54 01 f3 5d 76 2e a9 a6 09 l....f.T..]v.... 0480 a4 e7 19 ce 6d d5 11 9b f6 a4 32 4b 82 02 d1 70 ....m.....2K...p 0490 cc c5 13 c8 1f e3 40 f0 0a b4 ba 1d eb 03 70 fb [email protected]. 04a0 1b bf da be 8a 27 57 c6 6c 94 5f ea 5d 33 fd b4 .....'W.l._.]3.. 04b0 47 63 d4 dc a7 c8 af 3d 97 b7 f9 25 9c bf 54 47 Gc.....=...%..TG 04c0 66 26 d1 5d 2b 46 20 b5 32 ae a4 7e 02 6d a3 35 f&.]+F .2..~.m.5 04d0 8d 0e 21 28 c5 03 54 bb 54 b2 1a 23 b8 b5 ba 21 ..!(..T.T..#...! 04e0 e3 69 6a a7 ac 1b 11 96 17 c5 ab cd 75 eb 71 d6 .ij.........u.q. 04f0 96 2b 52 10 1b 1b 4b 50 e4 cf 54 c8 ff b5 3e 0b .+R...KP..T...>. 0500 cb 3c 09 76 08 fc 69 19 ba a2 1d 78 84 b9 4e 59 .<.v..i....x..NY 0510 b8 03 87 0e c7 24 3b 7d 28 f6 c1 01 94 c8 03 45 .....$;}(......E 0520 96 b1 6b 42 63 f0 00 4a a7 73 35 b1 19 b0 1e 17 ..kBc..J.s5..... 0530 ce 60 24 dc b5 d8 7b e0 c8 92 95 89 f6 bb 3a 4c .`$...{.......:L 0540 79 49 28 4d 01 b6 33 9b 75 52 02 6f 21 d0 66 09 yI(M..3.uR.o!.f. 0550 39 92 27 3f ba 19 51 da e9 70 fb 14 46 31 a2 89 9.'?..Q..p..F1.. 0560 7e 07 56 c5 e1 bc f7 c7 d7 8d 2e 35 8d 5c 4f 78 ~.V........5.\Ox 0570 4d 46 e5 a4 f8 56 ec 4f 7b 8f 4a f1 e2 1e 8a 7e MF...V.O{.J....~ 0580 2d f4 c8 fe 62 f3 8f 92 24 b9 7c ef d2 e7 ff ca -...b...$.|..... 0590 bb 72 f9 31 92 56 b9 c5 c6 30 8f a7 c9 aa 96 e3 .r.1.V...0...... 05a0 80 2c b2 28 21 c6 1e 0e .,.(!... No. Time Source Destination Protocol Length Info 12732 162.358607 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=165562 Ack=2739 Win=1002 Len=1448 TSval=575837 TSecr=729021 Frame 12732: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 165562, Ack: 2739, Len: 1448 Data (1448 bytes) 0000 8b 27 2a 2c 25 0c c9 02 af 91 59 65 05 10 22 61 .'*,%.....Ye.."a 0010 16 df ac 9d dd c5 51 13 a3 b5 5d fc 4e b6 fb dc ......Q...].N... 0020 e4 2f ad 76 43 27 3d 5a 6b 49 6d 68 bb e3 7b 40 ./.vC'=ZkImh..{@ 0030 3d ea 32 2e 5a d1 44 52 db 59 6d 48 71 54 3c 99 =.2.Z.DR.YmHqT<. 0040 75 aa bf 0a 36 26 13 67 20 e7 9b 63 c1 38 0a be u...6&.g ..c.8.. 0050 98 f0 4b 14 af f7 f2 10 4e 46 eb b3 c3 4c 19 a7 ..K.....NF...L.. 0060 46 32 8a 7d 4e d8 3c fd fb f3 dc 30 f7 62 64 a5 F2.}N.<....0.bd. 0070 fd 91 50 9a 73 54 00 c2 70 9b ee 6f 3c 8b 04 f8 ..P.sT..p..o<... 0080 a4 8f f8 de 7c 47 75 ba ff 61 88 05 c6 e9 d9 e4 ....|Gu..a...... 0090 d0 f5 c6 fb 18 67 7d 16 1a d2 61 d1 75 78 9b 4c .....g}...a.ux.L 00a0 ed 2c 1d e1 dc b8 95 d7 8e 92 bc 44 eb 9c 09 c2 .,.........D.... 00b0 00 fb 71 98 64 a5 df 26 89 b2 0e cb 3a ba 4d 86 ..q.d..&....:.M. 00c0 62 15 5c 52 40 d0 aa c8 e9 cd f1 35 62 8b 52 0c b.\[email protected]. 00d0 bb a2 03 80 99 ab 09 cb 59 75 26 5c e2 15 ca 83 ........Yu&\.... 00e0 38 06 5b 0c 9c 70 f1 02 93 d5 df c3 b4 4f 62 13 8.[..p.......Ob. 00f0 95 2f c8 02 a9 91 4f 95 22 10 89 aa 97 6d ff fc ./....O."....m.. 0100 86 d3 b7 0d 44 13 da a1 e9 69 1f 78 e3 a6 a0 b1 ....D....i.x.... 0110 e6 0f 02 af 3d 77 12 68 bb ae 7c 06 76 fd 79 00 ....=w.h..|.v.y. 0120 a7 3d 4a ea d0 a2 2a 74 cb 73 43 56 cb c8 d1 00 .=J...*t.sCV.... 0130 a7 68 d4 b3 e7 be e7 d1 71 0c 13 08 da f1 aa 83 .h......q....... 0140 01 aa 99 2b a5 6a 1f 73 80 4b 20 33 11 80 80 e1 ...+.j.s.K 3.... 0150 b5 c2 5a 49 6c 26 8b d3 94 ae 53 62 3e 6a 33 af ..ZIl&....Sb>j3. 0160 9c 44 6a 52 e0 83 34 d3 e5 1b df bb 44 40 a4 f2 .DjR..4.....D@.. 0170 bb 14 52 1f 6b 9c 4b 13 74 40 3d cb ae 0f 6e 7a ..R.k.K.t@=...nz 0180 e0 9a b0 03 93 d9 14 e4 c7 a8 45 0d 93 3f bd db ..........E..?.. 0190 2c 3b 10 b7 20 bc 7c 06 56 83 54 5b b6 76 72 fe ,;.. .|.V.T[.vr. 01a0 ac d5 9e 4f 78 78 fc 35 4b 19 fe fc b2 97 59 f4 ...Oxx.5K.....Y. 01b0 9f 4f 99 23 14 db db 4d fa 8c 25 77 18 93 6c e9 .O.#...M..%w..l. 01c0 8c 2d 0e ef 77 ef f6 16 df 72 0d 59 e7 02 ba ad .-..w....r.Y.... 01d0 97 8f fa 7e 7f 3b 9b 43 71 23 f4 f5 87 c9 fd 0f ...~.;.Cq#...... 01e0 76 ee 3e ba 92 9c b4 be a3 46 5b ca 85 6b 0b 93 v.>......F[..k.. 01f0 36 21 d8 09 d1 6d 4d fe 01 93 00 82 46 94 42 d2 6!...mM.....F.B. 0200 ea 84 58 21 06 1a c9 bd f7 f3 a7 e3 43 75 6a fa ..X!........Cuj. 0210 e6 81 d3 7d e2 16 e8 dd 85 a7 6a 2e 09 c5 45 a1 ...}......j...E. 0220 38 63 12 e2 1c e5 b5 8b 8f 5f 74 a8 86 90 fb 35 8c......._t....5 0230 9d ed 3d 5a c6 74 d5 32 f3 cc 9d bd 43 8b bd e5 ..=Z.t.2....C... 0240 f6 80 4c 32 9a 56 60 a0 d7 35 43 00 42 2a b4 3a ..L2.V`..5C.B*.: 0250 71 15 eb 1d ae 1a fe 00 f3 9f d2 b8 ab 97 82 fd q............... 0260 6f cb 21 23 80 9f 4f 60 b2 b0 2e 53 83 9a 23 31 o.!#..O`...S..#1 0270 b9 6b 2f 44 19 bc 40 9e 1e 0e df ab 69 00 7c 30 .k/[email protected].|0 0280 a1 46 a8 da 1f 73 f8 97 48 47 24 93 e9 15 97 8f .F...s..HG$..... 0290 7f fa 3e 64 37 69 b9 ce 44 71 8c 77 f5 ef 15 dc ..>d7i..Dq.w.... 02a0 c5 87 46 dc ed e8 08 b8 a0 e2 f8 ac 65 f0 37 6f ..F.........e.7o 02b0 e3 30 e2 47 a2 43 85 75 95 cf 49 36 6e 10 03 90 .0.G.C.u..I6n... 02c0 ed c0 d0 92 a9 e3 87 13 5e 21 62 ec 42 ee 96 de ........^!b.B... 02d0 2f 17 2e 15 77 9c 09 9d 7c f4 b4 43 d9 95 87 08 /...w...|..C.... 02e0 c0 72 b4 e4 70 4f 2a 3d 40 89 a7 ee 67 75 6b 3a .r..pO*[email protected]: 02f0 3e fe 1f ea 3b fa 79 35 be 0b ed ee 69 e9 2c 9f >...;.y5....i.,. 0300 9f a4 f9 d9 e1 16 09 5c a0 1a 41 af f8 e5 2e b5 .......\..A..... 0310 29 40 25 f4 f9 00 fb 41 af ea d5 51 a1 21 9b 71 )@%....A...Q.!.q 0320 43 9b da 2c e9 d0 f6 f4 52 42 28 01 3a a2 26 27 C..,....RB(.:.&' 0330 15 f9 6e 54 53 19 0b ae bc 28 b3 25 67 f4 e1 43 ..nTS....(.%g..C 0340 24 14 c8 87 0c a9 85 70 3c ac a3 60 05 d0 29 30 $......p<..`..)0 0350 27 a7 21 33 58 05 01 86 8a 54 28 fa 04 bc 0f 9a '.!3X....T(..... 0360 93 93 47 df ed 12 75 e4 c6 cb 03 3e 77 6b 2a 84 ..G...u....>wk*. 0370 34 00 2e b7 27 99 3b a1 69 ba 5e 8c 2b 72 c1 47 4...'.;.i.^.+r.G 0380 46 27 3e d9 76 dc f5 53 ec 0c b1 96 f5 69 64 be F'>.v..S.....id. 0390 55 f5 63 b2 54 7d c2 d5 94 65 2b 61 22 f2 5f fb U.c.T}...e+a"._. 03a0 f7 65 a5 b8 e3 e0 17 2e 70 b6 e9 70 59 bb b9 40 .e......p..pY..@ 03b0 10 7a 63 d4 6d 42 d4 70 56 d7 83 50 1e 49 4e 7f .zc.mB.pV..P.IN. 03c0 6b 68 46 ce 76 f8 34 61 af 06 29 07 bc 90 96 ab khF.v.4a..)..... 03d0 f1 d7 19 27 04 23 65 de d5 6e 8b dc fa 30 f5 c1 ...'.#e..n...0.. 03e0 a6 9b 50 e0 14 3b e5 b1 f0 dc f2 9a 83 f6 f5 94 ..P..;.......... 03f0 64 c2 66 25 55 08 c6 fb 7a d0 60 2b 14 28 d8 ff d.f%U...z.`+.(.. 0400 8a 50 ca 89 62 3b 48 31 a8 fe 2d 22 ad 93 b8 49 .P..b;H1..-"...I 0410 15 f5 fa e2 a2 6b e9 bd 5f 80 2a 9c 9b 87 fb da .....k.._.*..... 0420 55 94 e2 c5 62 2e 55 90 ba 3a 88 0a 7a 5e 6f 91 U...b.U..:..z^o. 0430 74 ae 1d 2c d7 7b de 21 72 95 9f a6 3b 8a e1 ef t..,.{.!r...;... 0440 a9 c4 ce 68 a0 c2 7f ee 75 e7 81 a4 5f 8c 3c 46 ...h....u..._.<F 0450 34 6b e1 be f3 76 9a 19 4e e6 76 84 66 ea e7 ec 4k...v..N.v.f... 0460 91 00 31 dc 66 29 5d cd 6e cd 4e 9f af 48 63 5b ..1.f)].n.N..Hc[ 0470 22 f6 06 ce 69 52 bf 8b 43 24 6b fc f7 8a 4b 3e "...iR..C$k...K> 0480 74 42 ee bf 4c b6 9b 15 e2 e4 b5 42 d5 6e 99 95 tB..L......B.n.. 0490 c1 01 72 5d e3 a8 01 fb dc 22 79 1c a1 ff 6b ca ..r]....."y...k. 04a0 6a 61 c7 2a 97 a2 3b 3a b3 e8 80 5f 5c 39 c5 76 ja.*..;:..._\9.v 04b0 45 0a 53 83 5c 55 44 0c d3 be 1f f2 d2 bc 97 df E.S.\UD......... 04c0 83 e6 71 65 67 07 3f cb 34 91 02 76 57 d0 ae c8 ..qeg.?.4..vW... 04d0 c6 ed 98 e4 92 e6 65 b5 7e af 3b d4 70 e1 05 cb ......e.~.;.p... 04e0 35 ce b4 ff 99 c8 09 4e e8 c1 89 5b 40 4b 2a bc 5......N...[@K*. 04f0 ef f9 59 6f c4 c7 f3 91 9a 4f 30 55 79 4b 1b c1 ..Yo.....O0UyK.. 0500 fa 62 61 3c b5 25 32 9a 6e fe dd f3 7f cf 50 3d .ba<.%2.n.....P= 0510 67 f4 c3 29 ea 38 74 2a 6e 5c 5f d2 7c 84 0c 88 g..).8t*n\_.|... 0520 21 7b 58 a5 2d 2b 5c 11 52 70 2c 4f 53 83 9c 78 !{X.-+\.Rp,OS..x 0530 c9 f6 4e 57 90 58 f0 71 8c 68 46 3f d3 2b 17 25 ..NW.X.q.hF?.+.% 0540 a8 d3 a3 93 4d d8 52 c7 7c 0a 60 fd b7 9e ca 2f ....M.R.|.`..../ 0550 e2 7b 0a b0 ee 80 20 61 8a a1 3d 76 01 e5 4b 2b .{.... a..=v..K+ 0560 06 3d 04 60 06 d1 cf d6 12 0e 28 b5 bd ab 51 0f .=.`......(...Q. 0570 75 10 9b 13 21 5a 3e 21 b0 b5 01 67 6c 14 e6 fe u...!Z>!...gl... 0580 7f 63 69 8e 16 5f bb 10 fa 19 67 ad 34 5e 01 77 .ci.._....g.4^.w 0590 c1 2e 18 d6 e3 53 65 d2 4d 94 5d 61 7c 4d ce 29 .....Se.M.]a|M.) 05a0 e2 88 d6 16 ca 4f 24 de .....O$. No. Time Source Destination Protocol Length Info 12733 162.358718 192.168.10.1 192.168.10.245 Syslog 303 LOCAL1.INFO: Oct 3 19:47:00 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 31.44.78.103 7x.x.x.3 1213 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="rsweat@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 12733: 303 bytes on wire (2424 bits), 303 bytes captured (2424 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:47:00 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 31.44.78.103 7x.x.x.3 1213 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" No. Time Source Destination Protocol Length Info 12734 162.358781 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2739 Ack=165562 Win=65535 Len=0 TSval=729106 TSecr=575837 Frame 12734: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2739, Ack: 165562, Len: 0 No. Time Source Destination Protocol Length Info 12735 162.358896 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=167010 Ack=2739 Win=1002 Len=1448 TSval=575837 TSecr=729106 Frame 12735: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 167010, Ack: 2739, Len: 1448 Data (1448 bytes) 0000 94 81 10 1f 0b 43 ad 8a 86 0f 0c 74 6f 74 41 b9 .....C.....totA. 0010 9a 1b 5d 01 27 cd 7f 3d e4 e0 99 0f 15 5c 67 b8 ..].'..=.....\g. 0020 03 c8 a9 bd ef b3 f8 ab 95 d8 44 17 bf 93 0a fb ..........D..... 0030 60 84 05 c5 ff 39 97 d8 fc 20 9a ef 03 a8 c2 80 `....9... ...... 0040 15 41 8e 69 9d 66 03 d5 6a 1a bb 41 e4 d4 48 d8 .A.i.f..j..A..H. 0050 21 89 b6 97 ce 7b 31 df 34 41 18 dc af e7 dd 83 !....{1.4A...... 0060 c0 fe 8d da 20 58 8b 8a 6c 54 4d e4 78 e4 80 95 .... X..lTM.x... 0070 69 34 74 20 e3 bb 1a 9f 4c d2 15 40 72 be 54 62 i4t ....L..@xxxx 0080 b7 9a 68 aa 77 bb 42 77 45 ed e4 80 07 45 46 d4 ..h.w.BwE....EF. 0090 5b b6 d3 12 1e 0d ce 8f 9b cf f8 75 d6 51 3a 80 [..........u.Q:. 00a0 d3 04 15 37 c7 2a 6f b9 7b 19 69 51 fd 9a 2f 4a ...7.*o.{.iQ../J 00b0 5a e5 af f2 37 ea 00 16 86 66 23 3d c6 35 5b 4b Z...7....f#=.5[K 00c0 05 f0 be 82 88 ac 50 6c 29 f4 8a e0 bf a3 f8 e2 ......Pl)....... 00d0 be 86 88 8a d0 4b 67 2b 05 27 42 e5 50 c6 40 2c .....Kg+.'B.P.@, 00e0 37 d1 23 8c 08 49 5d 60 ae a2 ee aa aa cb 40 7d 7.#..I]`......@} 00f0 b5 aa 3e 75 25 d2 e2 e2 29 90 04 11 27 ff 85 a3 ..>u%...)...'... 0100 38 f3 40 d3 d4 00 84 83 2d c6 55 55 86 52 03 48 [email protected] 0110 49 3b 75 4e bb 61 94 83 ef 4e 26 e7 87 f6 e9 71 I;uN.a...N&....q 0120 b9 be be 0e 64 6e 0b 4f 1e c5 b9 de b4 2a 92 3d ....dn.O.....*.= 0130 75 0e 27 d2 6d f6 32 d1 d4 dc a4 0b ef 12 53 3e u.'.m.2.......S> 0140 24 6a d0 8a 9b 36 ef 0c 32 20 5c 46 49 9d 4f bd $j...6..2 \FI.O. 0150 4c a3 e6 4b 07 c8 b4 3f b3 cd 14 b6 52 8e a1 0d L..K...?....R... 0160 5f 8b f7 78 fc e0 93 c2 61 65 60 dc 30 73 ea d8 _..x....ae`.0s.. 0170 37 60 39 54 a7 44 8d bd 04 3d 02 2e 53 c5 06 a3 7`9T.D...=..S... 0180 b0 93 e2 13 f5 98 6b f8 43 d4 05 0f bd 1b 9a 1b ......k.C....... 0190 ab 12 4d ec 48 05 dd 6e 9d 11 94 15 12 26 ed b5 ..M.H..n.....&.. 01a0 87 a6 53 70 c3 b5 7c 79 a7 a9 9d 9e b4 e1 40 69 ..Sp..|y......@i 01b0 42 3c cc 4f 56 38 4b fd 57 70 1a d8 b2 77 bb 29 B<.OV8K.Wp...w.) 01c0 52 d7 63 2d b8 58 97 04 f7 98 65 b2 1a 9c 9e 33 R.c-.X....e....3 01d0 62 2e 90 ad a7 43 c4 fb c1 09 e7 44 56 d1 a4 5c b....C.....DV..\ 01e0 ac cf 52 d3 96 25 a6 34 39 c4 4c 37 90 c5 b9 70 ..R..%.49.L7...p 01f0 12 15 fe 05 65 e4 6d 58 bf 46 da a4 54 92 d4 85 ....e.mX.F..T... 0200 ca 48 92 a2 65 b3 4e 5c dc b5 4c 8d 1e 26 09 cd .H..e.N\..L..&.. 0210 e2 a3 54 bc 04 59 6d 2e 79 c8 28 ec 22 f1 38 32 ..T..Ym.y.(.".82 0220 dc 96 c7 7c ac 50 42 62 a9 14 fa 2c 8c 48 53 a7 ...|.PBb...,.HS. 0230 28 a9 a0 b3 51 23 11 a0 e0 9f 62 70 a2 86 c1 25 (...Q#....bp...% 0240 3b ad ec 9e 0a 78 3f 52 ee ce cb c2 c2 db b3 bf ;....x?R........ 0250 36 d0 98 11 a2 3e 71 b9 c5 33 f0 87 01 fb b2 e7 6....>q..3...... 0260 57 d2 73 66 ee b3 a2 a9 1c fb 26 44 b0 3b 53 d0 W.sf......&D.;S. 0270 c7 ef ef c9 44 7a 46 0b 06 1c 3e 4a 84 24 76 e0 ....DzF...>J.$v. 0280 97 43 b0 79 ac 82 b5 68 04 36 16 3a 5b 36 3a d9 .C.y...h.6.:[6:. 0290 6a c1 a5 d8 6d 10 69 38 a5 be 93 a4 87 75 17 b3 j...m.i8.....u.. 02a0 5b 2a bc ee 41 5a 55 3e a1 58 7b a9 17 50 87 a0 [*..AZU>.X{..P.. 02b0 44 0f 37 68 d0 3a 69 a6 7a ed 06 08 a1 42 59 7b D.7h.:i.z....BY{ 02c0 84 87 a1 f0 29 8d 60 20 c6 2f 00 25 89 14 81 bd ....).` ./.%.... 02d0 a2 29 69 f9 10 ba a1 92 ce 34 4b cb 30 e7 fd 2a .)i......4K.0..* 02e0 82 b3 0e 1e 46 cb 12 d7 fb b8 bc 26 64 d8 a0 f8 ....F......&d... 02f0 13 01 a4 d1 8e b0 50 ee c6 86 a6 c7 b9 d7 e6 c9 ......P......... 0300 56 94 6c b6 5f 37 9e 01 68 21 e6 07 2f fc 32 bb V.l._7..h!../.2. 0310 42 4e cc d5 25 86 71 98 bd 75 27 d6 07 c4 07 13 BN..%.q..u'..... 0320 7d 85 73 71 69 18 83 52 1d c3 5e 79 78 91 ff 6f }.sqi..R..^yx..o 0330 99 d5 63 1b d1 89 57 f5 fa a2 13 a8 2c 74 e3 77 ..c...W.....,t.w 0340 89 f8 b1 d8 9d b5 9f 5c b2 08 bc 66 a1 24 2f c2 .......\...f.$/. 0350 03 fa c3 02 d7 75 81 bc e2 b9 6d b6 78 f4 f8 2e .....u....m.x... 0360 bf 28 66 e1 49 30 57 9b a3 72 a3 33 90 1e 41 5c .(f.I0W..r.3..A\ 0370 45 fd 43 79 2f 22 02 f7 33 5d 0a b5 88 c7 9b 78 E.Cy/"..3].....x 0380 79 42 b9 73 20 1a d0 0c 2b 55 11 a5 f2 0d 23 e4 yB.s ...+U....#. 0390 d0 f0 d5 ec 28 f4 bb 9e 86 45 d9 fb b0 e0 6d 4c ....(....E....mL 03a0 47 70 77 96 78 3c 13 0b f2 9b 42 30 36 bd b8 34 Gpw.x<....B06..4 03b0 19 12 96 d5 4a 6d 5b c3 c5 30 16 48 f5 13 82 fa ....Jm[..0.H.... 03c0 8b 0e 35 97 72 36 c6 bc 27 d5 f7 82 3a 78 fc 20 ..5.r6..'...:x. 03d0 00 16 c1 98 4c b3 7c 71 14 90 a0 c4 ab d9 56 ea ....L.|q......V. 03e0 c9 c5 f0 5d b1 15 81 d3 36 99 4a b5 72 00 83 a9 ...]....6.J.r... 03f0 f1 de 69 99 0f 4a 08 56 5c 42 20 6e 31 7b f0 31 ..i..J.V\B n1{.1 0400 46 e2 25 e0 cb cb 65 16 3f 3d 82 60 05 ce 2d c0 F.%...e.?=.`..-. 0410 28 51 77 26 5c 77 f9 2a a1 15 c8 8c 41 cb 85 2a (Qw&\w.*....A..* 0420 9d 5a 32 cb a8 ff 1e 9c bf e8 95 98 bb 78 87 ee .Z2..........x.. 0430 da 0b 9a e3 9e 73 d5 42 20 ac 0e 0f 14 03 66 e3 .....s.B .....f. 0440 80 e1 97 c2 f1 18 e1 d7 3b 80 54 b8 e5 87 ff ec ........;.T..... 0450 87 8d cf 9a ef 02 8e 7a 85 66 ef a3 a2 9e ba 40 .......z.f.....@ 0460 c6 35 a7 34 22 5a 45 ef 25 68 56 ff a5 56 7b 3c .5.4"ZE.%hV..V{< 0470 4b 0a 4b 4f ce cb fe 87 12 28 82 5b 22 ed 33 8a K.KO.....(.[".3. 0480 6b 7c a4 52 2e d5 8e d4 8d 9e a0 02 28 84 bf 51 k|.R........(..Q 0490 98 a0 6c 8e f4 86 de cb 71 57 82 32 1b 91 e0 bd ..l.....qW.2.... 04a0 e6 11 7a 5d 9c 32 80 e1 fa 91 15 dc 6c 28 c9 da ..z].2......l(.. 04b0 d4 ed 2a 60 98 8e f3 12 67 46 82 5b 67 a4 95 94 ..*`....gF.[g... 04c0 1d be c3 f8 e3 1e 7f 56 59 c9 fe d2 ec c5 f4 fd .......VY....... 04d0 8b bb 9d c4 6f 0d b9 31 95 fb 1b 75 dc 88 71 a2 ....o..1...u..q. 04e0 de 81 73 b0 c4 34 d1 6a b7 13 55 ee 5b f1 e3 e3 ..s..4.j..U.[... 04f0 de 73 01 d0 3f 1a f1 1c d9 59 66 f2 d3 48 b4 4f .s..?....Yf..H.O 0500 f0 8b a7 63 1c 1a 87 0c 21 74 29 29 b2 41 94 2d ...c....!t)).A.- 0510 d7 28 58 a0 ce fd 9d 5e 65 34 34 4c f5 78 f1 d9 .(X....^e44L.x.. 0520 ac 4d 81 37 49 75 a6 75 6c 73 07 5a f8 83 79 32 .M.7Iu.uls.Z..y2 0530 a8 a6 0f 2e fb b5 74 8f 18 25 cd 9e 31 2d 8a 20 ......t..%..1-. 0540 1c e9 0f 6a f7 d9 80 3b 55 b4 96 7e a6 ab f7 4f ...j...;U..~...O 0550 ab 69 05 34 30 6b eb 7a a3 fd b1 98 1e b2 76 34 .i.40k.z......v4 0560 df b6 86 44 e8 4f d0 6d ee 5a 48 01 e6 03 66 3c ...D.O.m.ZH...f< 0570 2b eb c3 57 c4 2b 8d 22 a7 21 b6 3e dd 7a 83 97 +..W.+.".!.>.z.. 0580 c8 11 fb ed a0 68 f0 5c 22 dd 9e a5 e0 05 1e 1b .....h.\"....... 0590 41 28 7f 5e cd 27 ab 8e 4c 7e 8f 28 d6 53 81 59 A(.^.'..L~.(.S.Y 05a0 07 cb 7e 28 08 33 0b 25 ..~(.3.% No. Time Source Destination Protocol Length Info 12736 162.359001 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=168458 Ack=2739 Win=1002 Len=1448 TSval=575837 TSecr=729106 Frame 12736: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 168458, Ack: 2739, Len: 1448 Data (1448 bytes) 0000 a8 6e 7b 52 03 c9 00 0f 16 d7 7c 2b 1d da f3 bc .n{R......|+.... 0010 66 aa 3e b4 f2 37 c7 21 fb 45 43 70 cd f7 b2 94 f.>..7.!.ECp.... 0020 99 c3 e7 b2 3e 8d a3 d9 24 00 e1 09 a2 f7 7c d9 ....>...$.....|. 0030 e4 a9 a9 f9 03 5a 72 b1 94 fc 2f 08 73 3d a0 89 .....Zr.../.s=.. 0040 0f 0a de 63 0b f4 c5 72 94 d2 cc 3c 96 f6 ff c1 ...c...r...<.... 0050 aa 85 16 9c 8c 01 40 fb 87 14 b2 70 f2 e6 d1 63 [email protected] 0060 74 0f 0a 56 86 30 18 70 d6 4a e9 50 e4 1a 93 90 t..V.0.p.J.P.... 0070 b3 d7 62 48 3f 7c 91 f2 5a 58 8c 19 65 69 f4 da ..bH?|..ZX..ei.. 0080 a6 5d 28 3e 8b 25 39 9d 2a bf 61 68 42 9a 7b 27 .](>.%9.*.ahB.{' 0090 8f ce 70 7f d1 a0 14 c9 97 9e fb fa 3c c9 c8 5b ..p.........<..[ 00a0 17 bf 39 c8 8a 04 7d f5 7e 21 1d 9d 65 dc 5d cb ..9...}.~!..e.]. 00b0 ca 73 b1 19 d0 09 36 86 3b fb 4c c0 fc 72 b7 8e .s....6.;.L..r.. 00c0 36 7d 66 58 8d f3 24 1b 42 c5 20 09 f1 2e bb f1 6}fX..$.B. ..... 00d0 39 0d 5e c3 cd e6 4e 7b 3a 1b 6e ac 10 fb 65 d6 9.^...N{:.n...e. 00e0 e2 20 7a e7 df 8c a0 51 59 21 00 96 1e 41 7f 3a . z....QY!...A.: 00f0 d0 0b cf 30 5d 6c d0 be 22 3d 87 96 74 da 20 a8 ...0]l.."=..t. . 0100 19 39 af e5 43 18 aa 11 f0 96 f4 d8 49 01 7b dd .9..C.......I.{. 0110 b1 fc 1f ea 9b 7b 66 38 31 0b 0a 42 61 ab 97 56 .....{f81..Ba..V 0120 49 d0 f5 20 b8 52 f4 64 c7 32 ea 10 57 4e 1b 0b I.. .R.d.2..WN.. 0130 c9 f8 82 69 b0 c6 9d ff 66 ba 36 1f a3 8b c9 aa ...i....f.6..... 0140 82 a2 c9 5f 35 77 26 28 63 42 3e 79 3e 74 a6 e2 ..._5w&(cB>y>t.. 0150 12 ea 10 63 3b 28 97 ae 5e 08 fe 0a 94 be 22 6d ...c;(..^....."m 0160 98 01 01 aa 18 c9 a3 e7 37 8c 45 52 4e f2 9b 77 ........7.ERN..w 0170 e6 56 72 ff a0 09 2f e1 d9 bb 21 63 f4 54 0e 70 .Vr.../...!c.T.p 0180 79 44 ea 8f 21 d6 a2 9a 33 1c aa 1d e4 84 9c 5e yD..!...3......^ 0190 6f 8b b5 d5 4c 1a d2 1a 17 d5 46 92 c0 20 98 47 o...L.....F.. .G 01a0 e9 06 36 b3 9e 29 30 3a a8 9c a3 8f 67 de fe 2c ..6..)0:....g.., 01b0 e2 97 6c 94 e2 93 7a 3a 92 59 a6 79 f1 6e 92 1c ..l...z:.Y.y.n.. 01c0 2a e0 1a ea be 85 14 09 b6 9b 31 57 83 51 d3 03 *.........1W.Q.. 01d0 b2 2b 2e cf 35 6e 7e ee e4 64 85 9c 70 3f fd 6d .+..5n~..d..p?.m 01e0 8d ba fe 88 42 b7 d5 2d f5 19 e9 e9 87 0f 99 d7 ....B..-........ 01f0 c1 3b a0 fa 0a f6 1d 8d 25 81 60 7d 97 65 68 2c .;......%.`}.eh, 0200 ba ed 04 a8 82 74 f2 67 fa c4 aa f2 cb 26 6e 67 .....t.g.....&ng 0210 66 a5 99 7c 46 b9 50 fb 3e 46 0e 28 d9 fc b8 7e f..|F.P.>F.(...~ 0220 d9 fb da 2f 58 77 47 e7 85 3d d8 b8 a9 c7 2b da .../XwG..=....+. 0230 91 3e 7d 0e 5b 63 c5 3e b1 3a b8 eb e3 9c ba 6e .>}.[c.>.:.....n 0240 52 70 23 44 b6 87 58 76 db 4e 44 1d 26 3b 0a 64 Rp#D..Xv.ND.&;.d 0250 35 df 6b 8c 5c da ef 78 3f f2 00 c5 a8 dd a8 f0 5.k.\..x?....... 0260 23 14 24 4c ed a3 b2 2f 7f fa 36 7c e6 02 fd 8a #.$L.../..6|.... 0270 0f b4 54 ad 1d 69 9e c7 9e 61 26 c8 4f e9 b2 5c ..T..i...a&.O..\ 0280 d2 2a 90 5a 23 c9 6e f0 51 06 f0 3e ad a1 08 ad .*.Z#.n.Q..>.... 0290 52 c0 6f 31 af 6f 76 ec 8c dd 39 b0 f5 e0 9d bd R.o1.ov...9..... 02a0 34 69 20 a6 59 6f f1 75 ef 30 7f 7a ac 76 ac e1 4i .Yo.u.0.z.v.. 02b0 d4 86 9f 5d c0 13 ab 7f ed fa db 87 c9 cc 78 dc ...]..........x. 02c0 d6 a3 e4 e5 d6 c8 66 46 c7 45 af 79 b0 f9 ae 52 ......fF.E.y...R 02d0 dc cd 61 2a d7 72 04 6c f1 94 31 12 02 f4 b6 95 ..a*.r.l..1..... 02e0 63 cb 6b f7 a1 e6 00 6f 58 62 b2 27 95 19 75 f2 c.k....oXb.'..u. 02f0 e0 a7 13 5f aa 6c c0 70 d6 9b 7a 01 9b b8 46 88 ..._.l.p..z...F. 0300 df 48 4e 68 cb ac 44 00 39 b4 1d 4a f7 d4 59 39 .HNh..D.9..J..Y9 0310 79 d4 da 5b 34 35 6f ad 55 ee 19 ee ac c4 29 e4 y..[45o.U.....). 0320 94 b7 a0 fd 64 23 f8 a5 58 e3 c6 ae a1 53 24 8c ....d#..X....S$. 0330 ef ed fc b4 56 5b f4 1d 21 f2 ac 99 75 cd d5 d0 ....V[..!...u... 0340 f6 cc b5 40 b5 74 5a 9b b1 41 dc 09 6a 6d 59 7b [email protected]{ 0350 c3 1d 0d dc 6f 07 38 85 54 a5 f3 fd 1f 3f a1 44 ....o.8.T....?.D 0360 8e 31 98 b4 52 09 b8 b4 50 bd 0f e2 10 dd ed 60 .1..R...P......` 0370 1f 78 e7 46 36 f9 14 2d e6 7f 46 fd f1 d4 66 bc .x.F6..-..F...f. 0380 8d d3 3c 49 dc ae c0 6b 46 b2 33 75 f0 4a 1e 47 ..<I...kF.3u.J.G 0390 fd 00 7e 64 f4 67 ac 98 3a 66 89 c6 e0 c7 5d 8f ..~d.g..:f....]. 03a0 8d 7a 95 42 de 3c 3d b4 27 9f f0 45 4e 28 cb e6 .z.B.<=.'..EN(.. 03b0 f3 89 d5 25 00 42 a3 43 89 a0 1e 49 f9 f9 1b 93 ...%.B.C...I.... 03c0 af bb 77 72 80 27 6a 4f 10 f6 20 08 24 98 f8 d3 ..wr.'jO.. .$... 03d0 21 75 46 70 e2 73 78 d0 39 00 48 b3 cc 33 e7 a9 !uFp.sx.9.H..3.. 03e0 e5 35 9e 39 be fb b5 de ee 3b 21 09 82 3a 41 f2 .5.9.....;!..:A. 03f0 7e 31 82 a6 f6 3d 0d 80 65 2e 64 a3 a8 86 26 72 ~1...=..e.d...&r 0400 59 20 40 10 b3 cd b4 47 87 11 e7 db d6 ae d7 f4 Y @....G........ 0410 22 89 cd 9c b2 0f 28 a9 38 ea 90 7c 27 24 c2 28 ".....(.8..|'$.( 0420 2c f8 fd e2 96 20 3b 09 f0 e6 07 12 de fc 8b 61 ,.... ;........a 0430 ff d4 06 55 ca de 11 06 40 57 8e 7f 4a 0b 3a a5 [email protected].:. 0440 86 28 15 42 03 95 8f 15 fc 08 22 11 f8 d8 43 82 .(.B......"...C. 0450 d2 84 98 f0 10 4d b0 b8 dd e9 50 a5 33 6c 81 fb .....M....P.3l.. 0460 66 cf e6 7d 8c 7f 8e e4 2b ba 2a c0 e6 4f 81 77 f..}....+.*..O.w 0470 fb a6 f0 a9 87 4d 6d d1 85 60 2a 75 cf 47 1d 19 .....Mm..`*u.G.. 0480 ec 5d 4d e3 2f cf f9 7c 49 44 6e f9 d3 4c aa dc .]M./..|IDn..L.. 0490 d6 18 f1 e9 79 67 8b ec a4 02 e8 2d 88 ad b3 ff ....yg.....-.... 04a0 6b d5 eb 7d 9d 5c 73 1d 7b 5f a3 6d e7 85 44 90 k..}.\s.{_.m..D. 04b0 c8 f6 d5 60 74 37 8c 71 5a e4 6c 72 a7 f5 91 51 ...`t7.qZ.lr...Q 04c0 99 aa 07 dc b0 b4 84 ec d0 52 e2 27 4a cd 7c 02 .........R.'J.|. 04d0 71 84 12 94 4c a9 f9 c8 b6 0f 1f e5 63 e5 fd 16 q...L.......c... 04e0 89 2a ae d7 31 20 52 f7 18 19 68 58 9e 7f 68 0c .*..1 R...hX..h. 04f0 25 7f 54 99 0a c0 6b 40 3c a6 41 97 4e 9d e5 c4 %.T...k@<.A.N... 0500 50 28 d9 3e de 98 c4 d5 b9 59 fc 8e 6a 6b 40 37 P(.>.....Y..jk@7 0510 9f d0 ae 9b 6c d1 75 c3 e8 58 35 81 ac 6e 6a 65 ....l.u..X5..nje 0520 d1 9b af 3a 6c 26 b9 f2 c0 02 66 d4 11 75 31 f4 ...:l&....f..u1. 0530 f4 5c c2 22 69 54 30 2d 04 a8 fd 9b 85 df 38 9e .\."iT0-......8. 0540 60 42 d0 1f 05 37 b4 a2 ef ec 92 74 33 18 ba 4b `B...7.....t3..K 0550 7f 2c a0 d2 ad ce 87 15 fe bc 21 5f 43 b2 42 0b .,........!_C.B. 0560 6f 97 f1 9e 67 76 3d c6 e1 fd e7 d2 24 a4 66 df o...gv=.....$.f. 0570 c9 e3 d9 1a 28 f6 b7 ac 12 88 ca b5 df 2f e9 0d ....(......../.. 0580 fd 81 8d 1c 8f b4 5f e3 db 6b 5c 33 a0 8d 4e 16 ......_..k\3..N. 0590 ae c6 d3 d2 54 ac 45 ef 0b c0 ed a0 ba fc 3e 7d ....T.E.......>} 05a0 95 f0 58 35 a9 0d ce 1a ..X5.... No. Time Source Destination Protocol Length Info 12737 162.359104 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=169906 Ack=2739 Win=1002 Len=1448 TSval=575837 TSecr=729106 Frame 12737: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 169906, Ack: 2739, Len: 1448 Data (1448 bytes) 0000 58 e7 47 d3 65 60 b1 5d 97 cb 1d c1 42 fb 42 02 X.G.e`.]....B.B. 0010 56 88 8f 4f da 47 12 43 a8 a1 97 1d 44 6e c0 98 V..O.G.C....Dn.. 0020 67 54 f1 a1 ec 44 00 d3 75 5c 62 1d e7 fe 74 47 gT...D..u\b...tG 0030 94 3a b2 c8 f1 1e 43 4d cb 38 34 39 6e 48 62 0c .:....CM.849nHb. 0040 55 d1 13 40 08 a7 df 0a b7 5e 09 1f 87 86 ea fa U..@.....^...... 0050 5b 24 25 b1 3f b4 a9 60 97 1c d9 20 f0 a3 d5 80 [$%.?..`... .... 0060 cf 99 4b 94 0f 56 40 6a 60 cd 1b 8d 6b 86 09 20 ..K..V@j`...k.. 0070 01 2f 8f 63 f3 e4 26 dd 8f 59 e5 00 21 31 ce c5 ./.c..&..Y..!1.. 0080 d1 f2 92 65 fb 10 f7 4f ee 74 74 d0 ed 7b ac db ...e...O.tt..{.. 0090 10 65 c6 a0 31 26 28 a3 eb c5 9f 2c 8e 72 4a ae .e..1&(....,.rJ. 00a0 df 8e a7 d2 fc 7a b1 f6 09 e3 ef 34 71 33 c7 cd .....z.....4q3.. 00b0 27 d3 28 f9 72 79 df a9 0e 21 01 ce 23 da e1 ff '.(.ry...!..#... 00c0 fb d4 b2 c7 7d 98 9c 0d 4e fc b0 4c 72 58 4d 88 ....}...N..LrXM. 00d0 ef 9e aa a9 06 42 69 84 75 e0 eb 47 35 06 2e d2 .....Bi.u..G5... 00e0 66 b7 51 8f 9b d0 16 38 bc 45 6d 14 0e 2d ad 1c f.Q....8.Em..-.. 00f0 91 d7 62 6d 32 3e fc 1e 7b 22 61 fc 06 38 97 71 ..bm2>..{"a..8.q 0100 b5 4a b9 c6 86 69 65 04 c4 75 8f 24 91 75 08 06 .J...ie..u.$.u.. 0110 bf 81 ac 96 f3 0b f6 74 7c 3b 06 31 89 dd 75 6c .......t|;.1..ul 0120 14 37 8b 60 de 81 64 00 a7 ba 0b aa f1 6d 47 1a .7.`..d......mG. 0130 c4 cd d0 a8 70 ae e2 87 65 46 54 db e4 ba 06 ea ....p...eFT..... 0140 bb b9 b3 ad 5f 0d 2a 78 10 0e 41 44 96 fc a7 d6 ...._.*x..AD.... 0150 f9 fe 48 a3 40 b5 3d f1 8b b0 c1 cc 3c 13 98 0e ..H.@.=.....<... 0160 45 4f e7 cc 7d 85 52 9c 93 f8 df 41 52 08 3d 42 EO..}.R....AR.=B 0170 68 1f b6 01 37 fe fa 23 a7 6e 90 7d 5a 42 30 03 h...7..#.n.}ZB0. 0180 12 73 66 a7 2c d3 42 58 2d 2c 05 a3 d8 46 b6 5e .sf.,.BX-,...F.^ 0190 56 e3 12 dc 3e fd 08 a3 dc 5c 68 7f 31 e3 15 ee V...>....\h.1... 01a0 b6 6e 21 38 ba e5 e7 b3 df 93 f8 e7 23 7a f4 b8 .n!8........#z.. 01b0 bc 1a 0e 3e a7 56 1c b1 b0 a4 90 6b 89 10 a5 eb ...>.V.....k.... 01c0 62 18 9f a1 91 56 23 47 d4 62 0a ef af 1f 9c 89 b....V#G.b...... 01d0 57 0a ef 76 6c f7 c4 de f4 ba 7c 11 b3 57 4f 04 W..vl.....|..WO. 01e0 ba c5 36 22 b6 bf 38 15 a0 00 64 f7 5d 64 e2 d1 ..6"..8...d.]d.. 01f0 9f 07 2a 27 aa 40 f2 1b 03 9d f5 93 24 ea 61 0f ..*'.@......$.a. 0200 cb b3 e1 c4 46 0d d8 ff 86 15 1e 2c 41 5e 07 31 ....F......,A^.1 0210 11 e6 40 61 db a0 41 68 82 56 80 09 a9 be cd 73 [email protected] 0220 74 04 e5 dd 9d 83 a9 63 05 c5 79 f2 76 73 b7 15 t......c..y.vs.. 0230 04 a1 a6 a5 17 e8 82 a0 00 eb ff 49 a0 3d cb 74 ...........I.=.t 0240 79 26 ae 74 12 48 43 ba 9f a3 71 66 ac 58 c2 4a y&.t.HC...qf.X.J 0250 f2 e7 02 13 0d 7f b1 ea 9c 27 b1 7f 29 1b ad ec .........'..)... 0260 c0 7e 18 9e 24 1e 00 b8 80 46 b7 28 b0 7f bb 05 .~..$....F.(.... 0270 d7 83 6f 61 33 f7 be 4e c8 34 0b 1d 22 b4 44 d3 ..oa3..N.4..".D. 0280 85 f5 65 d9 01 90 e6 94 fb 4c c4 a2 c9 e8 46 76 ..e......L....Fv 0290 9a ba e8 1a 99 4b 02 3e bc 5b a2 a6 fc 42 87 36 .....K.>.[...B.6 02a0 e5 0c 24 39 05 51 e3 a8 ca 2c 50 9a c9 1c 03 0e ..$9.Q...,P..... 02b0 e0 2d a5 44 ca c1 78 20 48 6c e6 f8 12 8f da f4 .-.D..x Hl...... 02c0 e0 ce 71 bb 2b 71 62 c0 61 04 17 dd 8f 54 cc 86 ..q.+qb.a....T.. 02d0 62 7b e7 03 f3 a1 1c 82 dd 8b e4 06 f6 68 a4 27 b{...........h.' 02e0 11 e6 6d 78 4a 82 00 d1 91 6f 10 e7 fd db f6 83 ..mxJ....o...... 02f0 e7 88 93 65 89 e5 8a ec a5 ae 49 3d 30 4c bc ad ...e......I=0L.. 0300 b3 6b d0 be 04 f3 e2 e5 67 54 42 44 44 67 d3 9e .k......gTBDDg.. 0310 60 d7 ea 2d a3 b7 61 fc f2 4c 51 3a a8 a3 66 e1 `..-..a..LQ:..f. 0320 39 e9 fe f0 9e b9 e5 ef b4 7b f3 18 d4 8f 43 17 9........{....C. 0330 48 b1 70 cb d6 b1 ce bb c4 2a 07 05 4d 93 89 c5 H.p......*..M... 0340 20 a7 75 36 7e 26 fd 7d c8 fa 41 9c b1 c2 20 ed .u6~&.}..A... . 0350 3d 21 3b 9e 10 3a 4f ea c3 17 9c 4d 11 eb f5 d8 =!;..:O....M.... 0360 34 ca 79 e4 5c 83 ad ba 66 51 b3 2b 7f d1 a5 35 4.y.\...fQ.+...5 0370 d4 5c ee d8 24 40 eb ad ea dc 8f 1b fc 8a c7 d0 .\..$@.......... 0380 04 4c 95 2a 58 cc ea f1 1c 64 20 5d 63 46 40 62 .L.*X....d ]cF@b 0390 0b d7 18 3e 59 26 d9 99 be 1f c4 d5 cc 97 00 0e ...>Y&.......... 03a0 f1 f5 8f 03 04 1b 6d 48 e4 d6 79 d0 65 61 9b 25 ......mH..y.ea.% 03b0 da 1d bb 06 ad 62 04 5d 2e a2 f1 94 51 0e 8f 35 .....b.]....Q..5 03c0 05 75 c0 67 c0 f4 d0 ec ed 05 77 52 52 09 7f 3a .u.g......wRR..: 03d0 e0 19 80 fe 43 03 2d 2a 82 be c1 e9 f7 59 07 35 ....C.-*.....Y.5 03e0 e0 ba c8 e6 e2 7e 3d 71 64 29 45 50 2d f9 54 a1 .....~=qd)EP-.T. 03f0 66 8e b6 58 d2 6a 85 b2 fc b5 08 ff 00 f7 53 78 f..X.j........Sx 0400 09 67 59 ec 3d d6 d8 9d 3d 61 2b 5f cd f7 20 cf .gY.=...=a+_.. . 0410 2c bf 37 52 f4 54 ec b7 c5 bf 18 d1 01 76 3c 3f ,.7R.T.......v<? 0420 ff ad 51 ff 90 90 d7 e8 00 61 62 19 9a 32 c8 11 ..Q......ab..2.. 0430 3a dd f3 ec d6 61 f1 38 89 6a 6a a7 d3 c6 cd 87 :....a.8.jj..... 0440 f3 f8 08 cb e8 55 75 92 0e 76 80 eb 51 3a 47 d0 .....Uu..v..Q:G. 0450 b3 88 fb 8a 46 42 05 08 37 ad 77 29 46 89 ed b1 ....FB..7.w)F... 0460 4a 9e ff 3a c5 f3 68 75 fa 7a 4a 58 6b 86 c4 02 J..:..hu.zJXk... 0470 95 95 0e 80 40 c8 04 b7 1f f9 01 89 87 4f ff 63 [email protected] 0480 8a 15 43 da 79 fe 52 8c d1 6d 90 8d c3 df c5 f0 ..C.y.R..m...... 0490 33 f4 39 bf 5c 5e b3 c7 ab d4 0b ed 54 e9 9f a0 3.9.\^......T... 04a0 40 a4 19 b1 f5 7f 1b 2c 03 43 aa 44 44 c2 90 ab @......,.C.DD... 04b0 68 e1 34 cf b8 ed 84 eb 8c 48 e5 a9 f6 fd 9f 7b h.4......H.....{ 04c0 41 69 39 05 08 78 eb a8 4e 1c 25 b5 75 64 c8 06 Ai9..x..N.%.ud.. 04d0 50 55 0e 50 e2 87 5b 2f 74 a8 f4 3c 9f 75 fb 77 PU.P..[/t..<.u.w 04e0 50 43 c9 b8 1a f8 8d 3c d7 de 8d ea a5 e8 1e d3 PC.....<........ 04f0 f9 31 72 1a 27 90 db c4 ba 8d f2 36 c6 58 97 6b .1r.'......6.X.k 0500 26 fe 33 be 59 65 60 ef ea 04 55 7b 19 96 20 a6 &.3.Ye`...U{.. . 0510 ca f1 d2 ec 1e e2 cd 4b 1d 68 cc 2c 59 41 e0 79 .......K.h.,YA.y 0520 74 fa f8 92 cd 4c 33 02 69 4c 8a c5 42 5f 15 0c t....L3.iL..B_.. 0530 06 00 3f 24 11 1e b0 e2 73 a6 f4 25 cb 8b 65 49 ..?$....s..%..eI 0540 f8 ed f5 d7 8a fd d1 1d bb 98 38 10 ad 6d 0c 86 ..........8..m.. 0550 86 ef 8b 04 e5 63 e1 03 ab 1d 66 2f c0 fe 1d 95 .....c....f/.... 0560 ae ec 1a f9 5e 9b 68 02 19 1c 7d eb 26 13 b3 05 ....^.h...}.&... 0570 bd 41 26 24 95 7c af 70 d6 e0 30 d4 9b 44 23 5e .A&$.|.p..0..D#^ 0580 11 6b cf 0b 2a 46 7a b7 dd 16 77 70 fd d2 8a 37 .k..*Fz...wp...7 0590 72 a9 d3 d8 36 53 6b f4 82 ef d0 13 47 cb 6c e4 r...6Sk.....G.l. 05a0 7e 23 03 fa c7 6e cf a2 ~#...n.. No. Time Source Destination Protocol Length Info 12738 162.359165 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2739 Ack=168458 Win=65535 Len=0 TSval=729106 TSecr=575837 Frame 12738: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2739, Ack: 168458, Len: 0 No. Time Source Destination Protocol Length Info 12739 162.359221 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2739 Ack=171354 Win=65535 Len=0 TSval=729106 TSecr=575837 Frame 12739: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2739, Ack: 171354, Len: 0 No. Time Source Destination Protocol Length Info 12740 162.359285 192.168.10.1 192.168.10.203 TCP 215 34433 > cds [PSH, ACK] Seq=171354 Ack=2739 Win=1002 Len=149 TSval=575837 TSecr=729106 Frame 12740: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 171354, Ack: 2739, Len: 149 Data (149 bytes) 0000 8d cc 21 73 1a 25 21 67 2a 42 1e b3 0e a8 39 f3 ..!s.%!g*B....9. 0010 46 e9 e3 cf 0f c9 15 19 0c 35 bc 58 4e ef e5 36 F........5.XN..6 0020 84 44 82 e8 24 39 e7 b4 36 f1 cb 38 9a d1 bf 6e .D..$9..6..8...n 0030 e2 81 15 98 1d b5 3d ba 93 60 6c a4 52 1b 53 12 ......=..`l.R.S. 0040 2f 4c 82 a6 1c 27 69 10 90 db d3 9e c7 4c 14 99 /L...'i......L.. 0050 48 42 26 24 e9 af 71 a1 8a 6c d3 09 c6 c3 b4 28 HB&$..q..l.....( 0060 ca 0c a4 57 ad dd 65 8f 7c 21 b2 a9 16 95 50 ed ...W..e.|!....P. 0070 c7 d5 71 6b f5 e7 0d e3 72 62 ff a2 cc 5d 10 9a ..qk....rb...].. 0080 d0 d4 98 e3 c1 e2 51 c4 2c 21 7c ef db be 8f 20 ......Q.,!|.... 0090 a3 68 5b 30 d0 .h[0. No. Time Source Destination Protocol Length Info 12741 162.408354 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=2739 Ack=171503 Win=65386 Len=74 TSval=729106 TSecr=575837 Frame 12741: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2739, Ack: 171503, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 56 3b b8 c7 5c 05 97 8f 91 eb ea .... V;..\...... 0010 42 22 97 cb d8 9f 00 94 88 55 cf 13 8d e7 07 dd B".......U...... 0020 20 ff 96 1a bb 17 03 01 00 20 2a 86 ca c1 f8 a0 ........ *..... 0030 4a df 0e a6 7a b4 a5 bb e1 95 ed 04 bd 1a 26 77 J...z.........&w 0040 a1 e2 0c 1f 87 bc 1e 7e f8 c5 .......~.. No. Time Source Destination Protocol Length Info 12742 162.408422 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=171503 Ack=2813 Win=1002 Len=0 TSval=575850 TSecr=729106 Frame 12742: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 171503, Ack: 2813, Len: 0 No. Time Source Destination Protocol Length Info 12743 162.569669 31.44.78.103 192.168.10.207 SMTP 60 C: DATA Frame 12743: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 31.44.78.103 (31.44.78.103), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mpc-lifenet (1213), Dst Port: smtp (25), Seq: 182, Ack: 471, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12744 162.590976 192.168.10.207 31.44.78.103 SMTP 100 S: 354 Start mail input; end with <CRLF>.<CRLF> Frame 12744: 100 bytes on wire (800 bits), 100 bytes captured (800 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 31.44.78.103 (31.44.78.103) Transmission Control Protocol, Src Port: smtp (25), Dst Port: mpc-lifenet (1213), Seq: 471, Ack: 188, Len: 46 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12745 162.591027 31.44.78.103 192.168.10.207 TCP 60 mpc-lifenet > smtp [ACK] Seq=188 Ack=517 Win=92924 Len=0 Frame 12745: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 31.44.78.103 (31.44.78.103), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mpc-lifenet (1213), Dst Port: smtp (25), Seq: 188, Ack: 517, Len: 0 No. Time Source Destination Protocol Length Info 12746 162.625017 192.168.10.74 192.168.10.255 BROWSER 243 Host Announcement DCINCI320XP, Workstation, Server, NT Workstation, Potential Browser Frame 12746: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.74 (192.168.10.74), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 12747 162.625230 192.168.10.74 192.168.10.255 BROWSER 243 Host Announcement DCINCI320XP, Workstation, Server, NT Workstation, Potential Browser Frame 12747: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.74 (192.168.10.74), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 12748 162.722156 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4289665280, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12748: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12749 162.722181 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 4289665280, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12749: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12750 162.722194 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4289665280, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12750: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12751 162.722206 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 4289665280, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12751: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12752 162.740429 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1863844096, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12752: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12753 162.740450 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1863844096, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12753: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12754 162.740462 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1863844096, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12754: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12755 162.740474 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1863844096, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12755: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12756 162.797433 31.44.78.103 192.168.10.207 SMTP 1075 C: DATA fragment, 1021 bytes Frame 12756: 1075 bytes on wire (8600 bits), 1075 bytes captured (8600 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 31.44.78.103 (31.44.78.103), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mpc-lifenet (1213), Dst Port: smtp (25), Seq: 188, Ack: 517, Len: 1021 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12757 162.797555 192.168.10.1 192.168.10.245 Syslog 298 LOCAL1.INFO: Oct 3 19:47:00 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 31.44.78.103 7x.x.x.3 1213 25 msg="ProxyStrip: SMTP Header" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" header="X-Mailer: nujhzlh.57" (SMTP-proxy-incoming-00) Frame 12757: 298 bytes on wire (2384 bits), 298 bytes captured (2384 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:47:00 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 31.44.78.103 7x.x.x.3 1213 25 msg="ProxyStrip: SMTP Header" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" he No. Time Source Destination Protocol Length Info 12758 162.798279 31.44.78.103 192.168.10.207 IMF 561 from: Luxury 50%-Off-109637 <rfinfo@xxxxxxxxxxxxxxxxxxx>, subject: BIG SALE!! Watches, Luxury items, and Handbags... All Brand Name, (text/plain) (text/html) Frame 12758: 561 bytes on wire (4488 bits), 561 bytes captured (4488 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 31.44.78.103 (31.44.78.103), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mpc-lifenet (1213), Dst Port: smtp (25), Seq: 1209, Ack: 517, Len: 507 Simple Mail Transfer Protocol Internet Message Format No. Time Source Destination Protocol Length Info 12759 162.798315 192.168.10.207 31.44.78.103 TCP 60 smtp > mpc-lifenet [ACK] Seq=517 Ack=1716 Win=65535 Len=0 Frame 12759: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 31.44.78.103 (31.44.78.103) Transmission Control Protocol, Src Port: smtp (25), Dst Port: mpc-lifenet (1213), Seq: 517, Ack: 1716, Len: 0 No. Time Source Destination Protocol Length Info 12760 162.798394 192.168.10.1 192.168.10.245 Syslog 395 LOCAL1.INFO: Oct 3 19:47:00 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 31.44.78.103 7x.x.x.3 1213 25 msg="SMTP Request" proxy_act="SMTP-Incoming-Mail.1" rcvd_bytes="1550" sent_bytes="1528" sender="rfinfo@xxxxxxxxxxxxxxxxxxx" recipients="ghopkins@xxxxxxxxxxxx;dcinci@xxxxxxxxxxxx;pswanson@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 12760: 395 bytes on wire (3160 bits), 395 bytes captured (3160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:47:00 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 31.44.78.103 7x.x.x.3 1213 25 msg="SMTP Request" proxy_act="SMTP-Incoming-Mail.1" rcvd_bytes="1550" sent_bytes="152 No. Time Source Destination Protocol Length Info 12761 162.847023 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-16.geo.kaspersky.com Frame 12761: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 56599 (56599), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12762 162.847182 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-16.geo.kaspersky.com Frame 12762: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 56599 (56599), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12763 162.951013 192.168.10.207 31.44.78.103 SMTP 133 S: 250 2.6.0 <226870446.15YZ9636860@xxxxxxxxxxxxxxxxx> Queued mail for delivery Frame 12763: 133 bytes on wire (1064 bits), 133 bytes captured (1064 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 31.44.78.103 (31.44.78.103) Transmission Control Protocol, Src Port: smtp (25), Dst Port: mpc-lifenet (1213), Seq: 517, Ack: 1716, Len: 79 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12764 162.951066 31.44.78.103 192.168.10.207 TCP 60 mpc-lifenet > smtp [ACK] Seq=1716 Ack=596 Win=92844 Len=0 Frame 12764: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 31.44.78.103 (31.44.78.103), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mpc-lifenet (1213), Dst Port: smtp (25), Seq: 1716, Ack: 596, Len: 0 No. Time Source Destination Protocol Length Info 12765 162.995708 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 12488#1] 9428 > smtp [ACK] Seq=458677 Ack=6763 Win=46069 Len=0 Frame 12765: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 458677, Ack: 6763, Len: 0 No. Time Source Destination Protocol Length Info 12766 162.995776 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=6763 Ack=457411 Win=0 Len=0 Frame 12766: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6763, Ack: 457411, Len: 0 No. Time Source Destination Protocol Length Info 12767 163.085759 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 12767: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12768 163.085790 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 12768: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12769 163.157556 31.44.78.103 192.168.10.207 SMTP 60 C: QUIT Frame 12769: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 31.44.78.103 (31.44.78.103), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mpc-lifenet (1213), Dst Port: smtp (25), Seq: 1716, Ack: 596, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12770 163.157720 192.168.10.207 31.44.78.103 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 12770: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 31.44.78.103 (31.44.78.103) Transmission Control Protocol, Src Port: smtp (25), Dst Port: mpc-lifenet (1213), Seq: 596, Ack: 1722, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12771 163.157771 31.44.78.103 192.168.10.207 TCP 60 mpc-lifenet > smtp [ACK] Seq=1722 Ack=665 Win=92776 Len=0 Frame 12771: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 31.44.78.103 (31.44.78.103), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mpc-lifenet (1213), Dst Port: smtp (25), Seq: 1722, Ack: 665, Len: 0 No. Time Source Destination Protocol Length Info 12772 163.157799 192.168.10.207 31.44.78.103 TCP 60 smtp > mpc-lifenet [FIN, ACK] Seq=665 Ack=1722 Win=65529 Len=0 Frame 12772: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 31.44.78.103 (31.44.78.103) Transmission Control Protocol, Src Port: smtp (25), Dst Port: mpc-lifenet (1213), Seq: 665, Ack: 1722, Len: 0 No. Time Source Destination Protocol Length Info 12773 163.157836 31.44.78.103 192.168.10.207 TCP 60 mpc-lifenet > smtp [ACK] Seq=1722 Ack=666 Win=92776 Len=0 Frame 12773: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 31.44.78.103 (31.44.78.103), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mpc-lifenet (1213), Dst Port: smtp (25), Seq: 1722, Ack: 666, Len: 0 No. Time Source Destination Protocol Length Info 12774 163.194168 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 12774: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12775 163.313766 121.150.25.169 192.168.10.207 TCP 62 oracle-vp2 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 12775: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 121.150.25.169 (121.150.25.169), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: oracle-vp2 (1808), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 12776 163.313837 192.168.10.207 121.150.25.169 TCP 62 smtp > oracle-vp2 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 12776: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 121.150.25.169 (121.150.25.169) Transmission Control Protocol, Src Port: smtp (25), Dst Port: oracle-vp2 (1808), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 12777 163.315623 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 12777: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12778 163.331304 192.168.10.220 208.67.222.222 DNS 79 Standard query TXT micropallinatura.it Frame 12778: 79 bytes on wire (632 bits), 79 bytes captured (632 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 62826 (62826), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 12779 163.435252 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 12779: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12780 163.435283 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 12780: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12781 163.443735 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 12781: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12782 163.520235 121.150.25.169 192.168.10.207 TCP 60 oracle-vp2 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 12782: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 121.150.25.169 (121.150.25.169), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: oracle-vp2 (1808), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 12783 163.520381 192.168.10.1 192.168.10.245 Syslog 204 LOCAL1.INFO: Oct 3 19:47:01 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 121.150.25.169 7x.x.x.3 1808 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 12783: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:47:01 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 121.150.25.169 7x.x.x.3 1808 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 12784 163.520442 192.168.10.207 121.150.25.169 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:46:36 -0400 Frame 12784: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 121.150.25.169 (121.150.25.169) Transmission Control Protocol, Src Port: smtp (25), Dst Port: oracle-vp2 (1808), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12785 163.520483 121.150.25.169 192.168.10.207 TCP 60 oracle-vp2 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 12785: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 121.150.25.169 (121.150.25.169), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: oracle-vp2 (1808), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 12786 163.530373 31.44.78.103 192.168.10.207 TCP 60 mpc-lifenet > smtp [FIN, ACK] Seq=1722 Ack=666 Win=92776 Len=0 Frame 12786: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 31.44.78.103 (31.44.78.103), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: mpc-lifenet (1213), Dst Port: smtp (25), Seq: 1722, Ack: 666, Len: 0 No. Time Source Destination Protocol Length Info 12787 163.530420 192.168.10.207 31.44.78.103 TCP 60 smtp > mpc-lifenet [ACK] Seq=666 Ack=1723 Win=65529 Len=0 Frame 12787: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 31.44.78.103 (31.44.78.103) Transmission Control Protocol, Src Port: smtp (25), Dst Port: mpc-lifenet (1213), Seq: 666, Ack: 1723, Len: 0 No. Time Source Destination Protocol Length Info 12788 163.530495 192.168.10.1 192.168.10.245 Syslog 200 LOCAL1.INFO: Oct 3 19:47:01 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 31.44.78.103 7x.x.x.3 1213 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 12788: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:47:01 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 31.44.78.103 7x.x.x.3 1213 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 12789 163.566133 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 12789: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12790 163.582142 64.74.103.131 192.168.10.240 TLSv1 107 Application Data Frame 12790: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.240 (192.168.10.240) Transmission Control Protocol, Src Port: https (443), Dst Port: mentaserver (2118), Seq: 266, Ack: 266, Len: 53 Secure Sockets Layer No. Time Source Destination Protocol Length Info 12791 163.582400 192.168.10.240 64.74.103.131 TLSv1 107 Application Data Frame 12791: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.240 (192.168.10.240), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: mentaserver (2118), Dst Port: https (443), Seq: 266, Ack: 319, Len: 53 Secure Sockets Layer No. Time Source Destination Protocol Length Info 12792 163.582457 64.74.103.131 192.168.10.240 TCP 60 https > mentaserver [ACK] Seq=319 Ack=319 Win=65535 Len=0 Frame 12792: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.240 (192.168.10.240) Transmission Control Protocol, Src Port: https (443), Dst Port: mentaserver (2118), Seq: 319, Ack: 319, Len: 0 No. Time Source Destination Protocol Length Info 12793 163.583668 Watchgua_3c:4c:d8 Dell_ba:b4:3c ARP 60 Who has 192.168.10.240? Tell 192.168.10.1 Frame 12793: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12794 163.583728 Dell_ba:b4:3c Watchgua_3c:4c:d8 ARP 60 192.168.10.240 is at 00:1e:c9:ba:b4:3c Frame 12794: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12795 163.615557 192.168.10.203 79.126.136.163 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 12795: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 79.126.136.163 (79.126.136.163) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 12796 163.697281 192.168.10.190 64.74.103.148 TLSv1 91 Application Data Frame 12796: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.190 (192.168.10.190), Dst: 64.74.103.148 (64.74.103.148) Transmission Control Protocol, Src Port: wsmlb (3806), Dst Port: https (443), Seq: 186, Ack: 186, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 12797 163.697346 64.74.103.148 192.168.10.190 TCP 60 https > wsmlb [ACK] Seq=186 Ack=223 Win=65535 Len=0 Frame 12797: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Internet Protocol Version 4, Src: 64.74.103.148 (64.74.103.148), Dst: 192.168.10.190 (192.168.10.190) Transmission Control Protocol, Src Port: https (443), Dst Port: wsmlb (3806), Seq: 186, Ack: 223, Len: 0 No. Time Source Destination Protocol Length Info 12798 163.699690 Watchgua_3c:4c:d8 IntelCor_ed:1a:23 ARP 60 Who has 192.168.10.190? Tell 192.168.10.1 Frame 12798: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12799 163.699706 IntelCor_ed:1a:23 Watchgua_3c:4c:d8 ARP 60 192.168.10.190 is at 00:13:20:ed:1a:23 Frame 12799: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12800 163.727164 121.150.25.169 192.168.10.207 SMTP 73 C: HELO 7x.x.x.3 Frame 12800: 73 bytes on wire (584 bits), 73 bytes captured (584 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 121.150.25.169 (121.150.25.169), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: oracle-vp2 (1808), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 19 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12801 163.727254 192.168.10.207 121.150.25.169 SMTP 103 S: 250 mail.mydomain.com Hello [121.150.25.169] Frame 12801: 103 bytes on wire (824 bits), 103 bytes captured (824 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 121.150.25.169 (121.150.25.169) Transmission Control Protocol, Src Port: smtp (25), Dst Port: oracle-vp2 (1808), Seq: 122, Ack: 20, Len: 49 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12802 163.727315 121.150.25.169 192.168.10.207 TCP 60 oracle-vp2 > smtp [ACK] Seq=20 Ack=171 Win=93270 Len=0 Frame 12802: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 121.150.25.169 (121.150.25.169), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: oracle-vp2 (1808), Dst Port: smtp (25), Seq: 20, Ack: 171, Len: 0 No. Time Source Destination Protocol Length Info 12803 163.737770 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 11540736, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12803: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12804 163.737794 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 11540736, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12804: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12805 163.737807 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 11540736, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12805: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12806 163.737819 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 11540736, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12806: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12807 163.745542 64.74.103.148 192.168.10.190 TLSv1 91 Application Data Frame 12807: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Internet Protocol Version 4, Src: 64.74.103.148 (64.74.103.148), Dst: 192.168.10.190 (192.168.10.190) Transmission Control Protocol, Src Port: https (443), Dst Port: wsmlb (3806), Seq: 186, Ack: 223, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 12808 163.756024 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1880621312, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12808: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12809 163.756045 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1880621312, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12809: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12810 163.756057 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1880621312, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12810: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12811 163.756068 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1880621312, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12811: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12812 163.756123 192.168.10.104 192.168.10.255 BROWSER 224 Become Backup Browser Frame 12812: 224 bytes on wire (1792 bits), 224 bytes captured (1792 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 12813 163.933195 121.150.25.169 192.168.10.207 SMTP 92 C: MAIL FROM: <djgdjsgjsdjgh@xxxxxxxxx> Frame 12813: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 121.150.25.169 (121.150.25.169), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: oracle-vp2 (1808), Dst Port: smtp (25), Seq: 20, Ack: 171, Len: 38 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12814 163.933386 192.168.10.207 121.150.25.169 SMTP 102 S: 250 2.1.0 [email protected] OK Frame 12814: 102 bytes on wire (816 bits), 102 bytes captured (816 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 121.150.25.169 (121.150.25.169) Transmission Control Protocol, Src Port: smtp (25), Dst Port: oracle-vp2 (1808), Seq: 171, Ack: 58, Len: 48 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12815 163.933429 121.150.25.169 192.168.10.207 TCP 60 oracle-vp2 > smtp [ACK] Seq=58 Ack=219 Win=93222 Len=0 Frame 12815: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 121.150.25.169 (121.150.25.169), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: oracle-vp2 (1808), Dst Port: smtp (25), Seq: 58, Ack: 219, Len: 0 No. Time Source Destination Protocol Length Info 12816 163.935801 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 12816: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12817 163.935831 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 12817: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12818 163.947157 192.168.10.190 64.74.103.148 TCP 60 wsmlb > https [ACK] Seq=223 Ack=223 Win=65424 Len=0 Frame 12818: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.190 (192.168.10.190), Dst: 64.74.103.148 (64.74.103.148) Transmission Control Protocol, Src Port: wsmlb (3806), Dst Port: https (443), Seq: 223, Ack: 223, Len: 0 No. Time Source Destination Protocol Length Info 12819 164.145747 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 4 Port 45 TTL = 120 Frame 12819: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 12820 164.146729 121.150.25.169 192.168.10.207 SMTP 87 C: RCPT TO: <info@xxxxxxxxxxxx> Frame 12820: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 121.150.25.169 (121.150.25.169), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: oracle-vp2 (1808), Dst Port: smtp (25), Seq: 58, Ack: 219, Len: 33 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12821 164.147266 192.168.10.207 121.150.25.169 SMTP 87 S: 250 2.1.5 info@xxxxxxxxxxxx Frame 12821: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 121.150.25.169 (121.150.25.169) Transmission Control Protocol, Src Port: smtp (25), Dst Port: oracle-vp2 (1808), Seq: 219, Ack: 91, Len: 33 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12822 164.147313 121.150.25.169 192.168.10.207 TCP 60 oracle-vp2 > smtp [ACK] Seq=91 Ack=252 Win=93188 Len=0 Frame 12822: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 121.150.25.169 (121.150.25.169), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: oracle-vp2 (1808), Dst Port: smtp (25), Seq: 91, Ack: 252, Len: 0 No. Time Source Destination Protocol Length Info 12823 164.183264 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=11845 Ack=851603 Win=51075 Len=0 Frame 12823: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11845, Ack: 851603, Len: 0 No. Time Source Destination Protocol Length Info 12824 164.183297 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 12823#1] smtp > 23308 [ACK] Seq=11845 Ack=851603 Win=51075 Len=0 Frame 12824: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11845, Ack: 851603, Len: 0 No. Time Source Destination Protocol Length Info 12825 164.183333 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12825: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 851790, Ack: 11845, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12826 164.183363 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12826: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 853170, Ack: 11845, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12827 164.183392 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12827: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 854550, Ack: 11845, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12828 164.183422 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12828: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 855930, Ack: 11845, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12829 164.183451 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12829: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 857310, Ack: 11845, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12830 164.183480 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12830: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 858690, Ack: 11845, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12831 164.183512 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12831: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 860070, Ack: 11845, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12832 164.183542 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12832: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 861450, Ack: 11845, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12833 164.183571 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 12823#2] smtp > 23308 [ACK] Seq=11845 Ack=851603 Win=51075 Len=0 Frame 12833: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11845, Ack: 851603, Len: 0 No. Time Source Destination Protocol Length Info 12834 164.183599 192.168.10.207 206.225.164.186 SMTP 222 S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 12834: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 11845, Ack: 851603, Len: 168 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12835 164.183632 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 12834#1] smtp > 23308 [ACK] Seq=12013 Ack=851603 Win=51075 Len=0 Frame 12835: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12013, Ack: 851603, Len: 0 No. Time Source Destination Protocol Length Info 12836 164.183660 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 12834#2] smtp > 23308 [ACK] Seq=12013 Ack=851603 Win=51075 Len=0 Frame 12836: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12013, Ack: 851603, Len: 0 No. Time Source Destination Protocol Length Info 12837 164.183688 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 12834#3] smtp > 23308 [ACK] Seq=12013 Ack=851603 Win=51075 Len=0 Frame 12837: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12013, Ack: 851603, Len: 0 No. Time Source Destination Protocol Length Info 12838 164.183725 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=862830 Ack=12013 Win=46615 Len=0 Frame 12838: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 862830, Ack: 12013, Len: 0 No. Time Source Destination Protocol Length Info 12839 164.183753 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 12834#4] smtp > 23308 [ACK] Seq=12013 Ack=851603 Win=51075 Len=0 Frame 12839: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12013, Ack: 851603, Len: 0 No. Time Source Destination Protocol Length Info 12840 164.183780 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 12834#5] smtp > 23308 [ACK] Seq=12013 Ack=851603 Win=51075 Len=0 Frame 12840: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12013, Ack: 851603, Len: 0 No. Time Source Destination Protocol Length Info 12841 164.183808 206.225.164.186 192.168.10.207 SMTP 241 [TCP Fast Retransmission] C: DATA fragment, 187 bytes Frame 12841: 241 bytes on wire (1928 bits), 241 bytes captured (1928 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 851603, Ack: 12013, Len: 187 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12842 164.183835 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 12834#6] smtp > 23308 [ACK] Seq=12013 Ack=851603 Win=51075 Len=0 Frame 12842: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12013, Ack: 851603, Len: 0 No. Time Source Destination Protocol Length Info 12843 164.183865 206.225.164.186 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 12843: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 851790, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12844 164.183893 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 12834#7] smtp > 23308 [ACK] Seq=12013 Ack=851603 Win=51075 Len=0 Frame 12844: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12013, Ack: 851603, Len: 0 No. Time Source Destination Protocol Length Info 12845 164.183922 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12845: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 862830, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12846 164.183950 206.225.164.186 192.168.10.207 SMTP 172 C: DATA fragment, 118 bytes Frame 12846: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 864210, Ack: 12013, Len: 118 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12847 164.183978 206.225.164.186 192.168.10.207 SMTP 774 C: DATA fragment, 720 bytes Frame 12847: 774 bytes on wire (6192 bits), 774 bytes captured (6192 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 864328, Ack: 12013, Len: 720 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12848 164.184007 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12848: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 865048, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12849 164.184035 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12013 Ack=862830 Win=39848 Len=0 Frame 12849: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12013, Ack: 862830, Len: 0 No. Time Source Destination Protocol Length Info 12850 164.184068 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12850: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 866428, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12851 164.184097 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12013 Ack=866428 Win=36250 Len=0 Frame 12851: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12013, Ack: 866428, Len: 0 No. Time Source Destination Protocol Length Info 12852 164.184125 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12852: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 867808, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12853 164.184154 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12853: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 869188, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12854 164.184183 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12854: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 870568, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12855 164.184212 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12013 Ack=869188 Win=33490 Len=0 Frame 12855: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12013, Ack: 869188, Len: 0 No. Time Source Destination Protocol Length Info 12856 164.184239 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12013 Ack=871948 Win=30730 Len=0 Frame 12856: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12013, Ack: 871948, Len: 0 No. Time Source Destination Protocol Length Info 12857 164.184268 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12857: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 871948, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12858 164.184296 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12858: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 873328, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12859 164.184324 206.225.164.186 192.168.10.207 SMTP 714 C: DATA fragment, 660 bytes Frame 12859: 714 bytes on wire (5712 bits), 714 bytes captured (5712 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 874708, Ack: 12013, Len: 660 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12860 164.184353 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12860: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 875368, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12861 164.184387 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12861: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 876748, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12862 164.184415 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12013 Ack=875368 Win=27310 Len=0 Frame 12862: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12013, Ack: 875368, Len: 0 No. Time Source Destination Protocol Length Info 12863 164.184443 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12013 Ack=878128 Win=24550 Len=0 Frame 12863: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12013, Ack: 878128, Len: 0 No. Time Source Destination Protocol Length Info 12864 164.184471 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12864: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 878128, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12865 164.184500 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12865: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 879508, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12866 164.184529 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12866: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 880888, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12867 164.184558 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12867: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 882268, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12868 164.184588 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12868: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 883648, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12869 164.184615 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12013 Ack=880888 Win=21790 Len=0 Frame 12869: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12013, Ack: 880888, Len: 0 No. Time Source Destination Protocol Length Info 12870 164.184643 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12870: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 885028, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12871 164.184672 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12013 Ack=885028 Win=17650 Len=0 Frame 12871: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12013, Ack: 885028, Len: 0 No. Time Source Destination Protocol Length Info 12872 164.184708 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12872: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 886408, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12873 164.184737 206.225.164.186 192.168.10.207 SMTP 583 C: DATA fragment, 529 bytes Frame 12873: 583 bytes on wire (4664 bits), 583 bytes captured (4664 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 887788, Ack: 12013, Len: 529 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12874 164.184770 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12874: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 888317, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12875 164.184799 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12875: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 889697, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12876 164.184828 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12876: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 891077, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12877 164.184857 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12013 Ack=888317 Win=14361 Len=0 Frame 12877: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12013, Ack: 888317, Len: 0 No. Time Source Destination Protocol Length Info 12878 164.184884 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12013 Ack=891077 Win=11601 Len=0 Frame 12878: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12013, Ack: 891077, Len: 0 No. Time Source Destination Protocol Length Info 12879 164.184912 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12879: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 892457, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12880 164.184941 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12880: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 893837, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12881 164.184971 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12881: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 895217, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12882 164.185000 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12882: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 896597, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12883 164.185029 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12883: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 897977, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12884 164.185057 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12013 Ack=893837 Win=8841 Len=0 Frame 12884: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12013, Ack: 893837, Len: 0 No. Time Source Destination Protocol Length Info 12885 164.185085 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12013 Ack=896597 Win=6081 Len=0 Frame 12885: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12013, Ack: 896597, Len: 0 No. Time Source Destination Protocol Length Info 12886 164.185113 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12886: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 899357, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12887 164.185143 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12887: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 900737, Ack: 12013, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12888 164.185171 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12013 Ack=899357 Win=3321 Len=0 Frame 12888: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12013, Ack: 899357, Len: 0 No. Time Source Destination Protocol Length Info 12889 164.185198 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12013 Ack=902117 Win=561 Len=0 Frame 12889: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12013, Ack: 902117, Len: 0 No. Time Source Destination Protocol Length Info 12890 164.307912 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=6763 Ack=457411 Win=16397 Len=0 Frame 12890: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6763, Ack: 457411, Len: 0 No. Time Source Destination Protocol Length Info 12891 164.307946 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 12890#1] smtp > 9428 [ACK] Seq=6763 Ack=457411 Win=16397 Len=0 Frame 12891: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6763, Ack: 457411, Len: 0 No. Time Source Destination Protocol Length Info 12892 164.307980 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12892: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 458677, Ack: 6763, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12893 164.308013 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12893: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 460057, Ack: 6763, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12894 164.308043 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12894: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 461437, Ack: 6763, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12895 164.308072 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12895: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 462817, Ack: 6763, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12896 164.308101 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12896: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 464197, Ack: 6763, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12897 164.308131 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12897: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 465577, Ack: 6763, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12898 164.308167 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 12890#2] smtp > 9428 [ACK] Seq=6763 Ack=457411 Win=16397 Len=0 Frame 12898: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6763, Ack: 457411, Len: 0 No. Time Source Destination Protocol Length Info 12899 164.308201 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 12890#3] smtp > 9428 [ACK] Seq=6763 Ack=457411 Win=16397 Len=0 Frame 12899: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6763, Ack: 457411, Len: 0 No. Time Source Destination Protocol Length Info 12900 164.308231 192.168.10.207 206.225.164.188 SMTP 306 S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 12900: 306 bytes on wire (2448 bits), 306 bytes captured (2448 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 6763, Ack: 457411, Len: 252 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12901 164.308265 206.225.164.188 192.168.10.207 SMTP 1320 [TCP Out-Of-Order] C: DATA fragment, 1266 bytes Frame 12901: 1320 bytes on wire (10560 bits), 1320 bytes captured (10560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 457411, Ack: 6763, Len: 1266 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12902 164.308298 206.225.164.188 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 12902: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 458677, Ack: 6763, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12903 164.308328 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 12900#1] smtp > 9428 [ACK] Seq=7015 Ack=457411 Win=16397 Len=0 Frame 12903: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7015, Ack: 457411, Len: 0 No. Time Source Destination Protocol Length Info 12904 164.308357 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=466957 Ack=7015 Win=46720 Len=0 Frame 12904: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 466957, Ack: 7015, Len: 0 No. Time Source Destination Protocol Length Info 12905 164.308386 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 12900#2] smtp > 9428 [ACK] Seq=7015 Ack=457411 Win=16397 Len=0 Frame 12905: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7015, Ack: 457411, Len: 0 No. Time Source Destination Protocol Length Info 12906 164.308414 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 12900#3] smtp > 9428 [ACK] Seq=7015 Ack=457411 Win=16397 Len=0 Frame 12906: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7015, Ack: 457411, Len: 0 No. Time Source Destination Protocol Length Info 12907 164.308441 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 12900#4] smtp > 9428 [ACK] Seq=7015 Ack=457411 Win=16397 Len=0 Frame 12907: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7015, Ack: 457411, Len: 0 No. Time Source Destination Protocol Length Info 12908 164.308471 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=7015 Ack=466957 Win=6851 Len=0 Frame 12908: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7015, Ack: 466957, Len: 0 No. Time Source Destination Protocol Length Info 12909 164.308499 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12909: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 466957, Ack: 7015, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12910 164.308529 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12910: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 468337, Ack: 7015, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12911 164.308559 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12911: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 469717, Ack: 7015, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12912 164.308597 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12912: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 471097, Ack: 7015, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12913 164.308629 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 12913: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 472477, Ack: 7015, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12914 164.308659 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=7015 Ack=469717 Win=4091 Len=0 Frame 12914: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7015, Ack: 469717, Len: 0 No. Time Source Destination Protocol Length Info 12915 164.308735 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=7015 Ack=473808 Win=0 Len=0 Frame 12915: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7015, Ack: 473808, Len: 0 No. Time Source Destination Protocol Length Info 12916 164.353149 121.150.25.169 192.168.10.207 SMTP 60 C: DATA Frame 12916: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 121.150.25.169 (121.150.25.169), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: oracle-vp2 (1808), Dst Port: smtp (25), Seq: 91, Ack: 252, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12917 164.373292 192.168.10.207 121.150.25.169 SMTP 100 S: 354 Start mail input; end with <CRLF>.<CRLF> Frame 12917: 100 bytes on wire (800 bits), 100 bytes captured (800 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 121.150.25.169 (121.150.25.169) Transmission Control Protocol, Src Port: smtp (25), Dst Port: oracle-vp2 (1808), Seq: 252, Ack: 97, Len: 46 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12918 164.373344 121.150.25.169 192.168.10.207 TCP 60 oracle-vp2 > smtp [ACK] Seq=97 Ack=298 Win=93142 Len=0 Frame 12918: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 121.150.25.169 (121.150.25.169), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: oracle-vp2 (1808), Dst Port: smtp (25), Seq: 97, Ack: 298, Len: 0 No. Time Source Destination Protocol Length Info 12919 164.580025 192.168.10.1 192.168.10.245 Syslog 330 LOCAL1.INFO: Oct 3 19:47:02 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 121.150.25.169 7x.x.x.3 1808 25 msg="ProxyStrip: SMTP Header" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" header="X-Mailer: Microsoft Outlook Express 5.50.4133.2400" (SMTP-proxy-incoming-00) Frame 12919: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:47:02 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 121.150.25.169 7x.x.x.3 1808 25 msg="ProxyStrip: SMTP Header" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" No. Time Source Destination Protocol Length Info 12920 164.753362 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 28317952, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12920: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12921 164.753386 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 28317952, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12921: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12922 164.753399 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 28317952, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12922: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12923 164.753411 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 28317952, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12923: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12924 164.764591 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 12924: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12013, Ack: 902117, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12925 164.764625 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=902117 Ack=12055 Win=46594 Len=0 Frame 12925: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 902117, Ack: 12055, Len: 0 No. Time Source Destination Protocol Length Info 12926 164.771689 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1897398528, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12926: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12927 164.771712 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1897398528, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12927: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12928 164.771725 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1897398528, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12928: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12929 164.771737 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1897398528, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12929: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12930 164.786677 121.150.25.169 192.168.10.207 SMTP 1454 C: DATA fragment, 1400 bytes Frame 12930: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 121.150.25.169 (121.150.25.169), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: oracle-vp2 (1808), Dst Port: smtp (25), Seq: 97, Ack: 298, Len: 1400 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12931 164.786726 121.150.25.169 192.168.10.207 IMF 156 from: "ÈĺÒÁ¦" <djgdjsgjsdjgh@xxxxxxxxx>, subject: ºñ¾Æ±×¶ó °æÇèÇϼ¼¿ä - ÈĺÒÁ¦, (text/html) Frame 12931: 156 bytes on wire (1248 bits), 156 bytes captured (1248 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 121.150.25.169 (121.150.25.169), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: oracle-vp2 (1808), Dst Port: smtp (25), Seq: 1497, Ack: 298, Len: 102 Simple Mail Transfer Protocol Internet Message Format No. Time Source Destination Protocol Length Info 12932 164.786834 192.168.10.1 192.168.10.245 Syslog 293 LOCAL1.INFO: Oct 3 19:47:02 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 121.150.25.169 7x.x.x.3 1808 25 msg="ProxyStrip: SMTP Header" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" header="X-Priority: 3" (SMTP-proxy-incoming-00) Frame 12932: 293 bytes on wire (2344 bits), 293 bytes captured (2344 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:47:02 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 121.150.25.169 7x.x.x.3 1808 25 msg="ProxyStrip: SMTP Header" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" No. Time Source Destination Protocol Length Info 12933 164.786865 192.168.10.207 121.150.25.169 TCP 60 smtp > oracle-vp2 [ACK] Seq=298 Ack=1599 Win=65535 Len=0 Frame 12933: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 121.150.25.169 (121.150.25.169) Transmission Control Protocol, Src Port: smtp (25), Dst Port: oracle-vp2 (1808), Seq: 298, Ack: 1599, Len: 0 No. Time Source Destination Protocol Length Info 12934 164.786941 192.168.10.1 192.168.10.245 Syslog 342 LOCAL1.INFO: Oct 3 19:47:02 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 121.150.25.169 7x.x.x.3 1808 25 msg="SMTP Request" proxy_act="SMTP-Incoming-Mail.1" rcvd_bytes="1569" sent_bytes="1502" sender="djgdjsgjsdjgh@xxxxxxxxx" recipients="info@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 12934: 342 bytes on wire (2736 bits), 342 bytes captured (2736 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:47:02 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 121.150.25.169 7x.x.x.3 1808 25 msg="SMTP Request" proxy_act="SMTP-Incoming-Mail.1" rcvd_bytes="1569" sent_bytes="1 No. Time Source Destination Protocol Length Info 12935 164.932385 192.168.10.207 121.150.25.169 SMTP 130 S: 250 2.6.0 <[email protected]> Queued mail for delivery Frame 12935: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 121.150.25.169 (121.150.25.169) Transmission Control Protocol, Src Port: smtp (25), Dst Port: oracle-vp2 (1808), Seq: 298, Ack: 1599, Len: 76 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12936 164.932439 121.150.25.169 192.168.10.207 TCP 60 oracle-vp2 > smtp [ACK] Seq=1599 Ack=374 Win=93066 Len=0 Frame 12936: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 121.150.25.169 (121.150.25.169), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: oracle-vp2 (1808), Dst Port: smtp (25), Seq: 1599, Ack: 374, Len: 0 No. Time Source Destination Protocol Length Info 12937 165.115483 192.168.10.203 79.126.136.163 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 12937: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 79.126.136.163 (79.126.136.163) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 12938 165.138428 121.150.25.169 192.168.10.207 SMTP 60 C: QUIT Frame 12938: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 121.150.25.169 (121.150.25.169), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: oracle-vp2 (1808), Dst Port: smtp (25), Seq: 1599, Ack: 374, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12939 165.138512 192.168.10.207 121.150.25.169 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 12939: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 121.150.25.169 (121.150.25.169) Transmission Control Protocol, Src Port: smtp (25), Dst Port: oracle-vp2 (1808), Seq: 374, Ack: 1605, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12940 165.138598 121.150.25.169 192.168.10.207 TCP 60 oracle-vp2 > smtp [ACK] Seq=1605 Ack=443 Win=92998 Len=0 Frame 12940: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 121.150.25.169 (121.150.25.169), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: oracle-vp2 (1808), Dst Port: smtp (25), Seq: 1605, Ack: 443, Len: 0 No. Time Source Destination Protocol Length Info 12941 165.138627 192.168.10.207 121.150.25.169 TCP 60 smtp > oracle-vp2 [FIN, ACK] Seq=443 Ack=1605 Win=65529 Len=0 Frame 12941: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 121.150.25.169 (121.150.25.169) Transmission Control Protocol, Src Port: smtp (25), Dst Port: oracle-vp2 (1808), Seq: 443, Ack: 1605, Len: 0 No. Time Source Destination Protocol Length Info 12942 165.138664 121.150.25.169 192.168.10.207 TCP 60 oracle-vp2 > smtp [ACK] Seq=1605 Ack=444 Win=92998 Len=0 Frame 12942: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 121.150.25.169 (121.150.25.169), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: oracle-vp2 (1808), Dst Port: smtp (25), Seq: 1605, Ack: 444, Len: 0 No. Time Source Destination Protocol Length Info 12943 165.149412 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.58? Tell 192.168.10.220 Frame 12943: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12944 165.149439 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.58? Tell 192.168.10.220 Frame 12944: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12945 165.149454 Dell_ad:25:f8 Intel_38:8d:0a ARP 64 Who has 192.168.10.66? Tell 192.168.10.220 Frame 12945: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12946 165.149464 Dell_ad:25:f8 Intel_89:5e:11 ARP 64 Who has 192.168.10.65? Tell 192.168.10.220 Frame 12946: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12947 165.149477 Intel_38:8d:0a Dell_ad:25:f6 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 12947: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12948 165.149488 Intel_89:5e:11 Dell_ad:25:f8 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 12948: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12949 165.149498 Dell_ad:25:f8 Intel_a5:f5:5b ARP 64 Who has 192.168.10.131? Tell 192.168.10.220 Frame 12949: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12950 165.149508 Dell_ad:25:f8 Intel_38:8c:64 ARP 64 Who has 192.168.10.67? Tell 192.168.10.220 Frame 12950: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12951 165.149719 Intel_a5:f5:5b Dell_ad:25:f8 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 12951: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12952 165.149730 Dell_ad:25:f8 Intel_02:0e:6d ARP 64 Who has 192.168.10.128? Tell 192.168.10.220 Frame 12952: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12953 165.149740 Intel_38:8c:64 Dell_ad:25:f6 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 12953: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12954 165.149750 Dell_ad:25:f8 IntelCor_d3:4e:80 ARP 64 Who has 192.168.10.70? Tell 192.168.10.220 Frame 12954: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12955 165.149761 Dell_ad:25:f8 Intel_d0:7a:8f ARP 64 Who has 192.168.10.68? Tell 192.168.10.220 Frame 12955: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12956 165.149771 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.142? Tell 192.168.10.220 Frame 12956: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12957 165.149781 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.233? Tell 192.168.10.220 Frame 12957: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12958 165.149791 Intel_02:0e:6d Dell_ad:25:f6 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 12958: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12959 165.149801 Dell_ad:25:f8 Intel_56:83:a5 ARP 64 Who has 192.168.10.59? Tell 192.168.10.220 Frame 12959: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12960 165.149811 IntelCor_d3:4e:80 Dell_ad:25:f8 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 12960: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12961 165.149821 Dell_ad:25:f8 Intel_38:8c:b1 ARP 64 Who has 192.168.10.138? Tell 192.168.10.220 Frame 12961: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12962 165.149831 Intel_d0:7a:8f Dell_ad:25:f8 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 12962: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12963 165.149842 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 12963: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12964 165.149857 Dell_ad:25:f8 Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.220 Frame 12964: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12965 165.149867 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 12965: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12966 165.149881 Intel_56:83:a5 Dell_ad:25:f6 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 12966: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12967 165.149891 Intel_38:8c:b1 Dell_ad:25:f6 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 12967: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12968 165.149902 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 12968: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12969 165.149912 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.142 is at 00:0f:34:04:98:91 Frame 12969: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12970 165.149925 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 12970: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 12971 165.194053 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 12971: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12972 165.315513 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 12972: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12973 165.324987 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 12973: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7015, Ack: 473808, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12974 165.325021 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=473857 Ack=7057 Win=46699 Len=0 Frame 12974: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 473857, Ack: 7057, Len: 0 No. Time Source Destination Protocol Length Info 12975 165.325053 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=7057 Ack=473808 Win=0 Len=0 Frame 12975: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7057, Ack: 473808, Len: 0 No. Time Source Destination Protocol Length Info 12976 165.344682 121.150.25.169 192.168.10.207 TCP 60 oracle-vp2 > smtp [FIN, ACK] Seq=1605 Ack=444 Win=92998 Len=0 Frame 12976: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 121.150.25.169 (121.150.25.169), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: oracle-vp2 (1808), Dst Port: smtp (25), Seq: 1605, Ack: 444, Len: 0 No. Time Source Destination Protocol Length Info 12977 165.344716 192.168.10.207 121.150.25.169 TCP 60 smtp > oracle-vp2 [ACK] Seq=444 Ack=1606 Win=65529 Len=0 Frame 12977: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 121.150.25.169 (121.150.25.169) Transmission Control Protocol, Src Port: smtp (25), Dst Port: oracle-vp2 (1808), Seq: 444, Ack: 1606, Len: 0 No. Time Source Destination Protocol Length Info 12978 165.344794 192.168.10.1 192.168.10.245 Syslog 202 LOCAL1.INFO: Oct 3 19:47:03 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 121.150.25.169 7x.x.x.3 1808 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 12978: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:47:03 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 121.150.25.169 7x.x.x.3 1808 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 12979 165.374166 DellComp_f0:68:fd Broadcast ARP 60 Who has 192.168.10.240? Tell 192.168.10.15 Frame 12979: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: DellComp_f0:68:fd (00:b0:d0:f0:68:fd), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12980 165.374197 DellComp_f0:68:fd Broadcast ARP 60 Who has 192.168.10.240? Tell 192.168.10.15 Frame 12980: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: DellComp_f0:68:fd (00:b0:d0:f0:68:fd), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 12981 165.380475 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 12981: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12055, Ack: 902117, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 12982 165.380509 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=902117 Ack=12097 Win=46573 Len=0 Frame 12982: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 902117, Ack: 12097, Len: 0 No. Time Source Destination Protocol Length Info 12983 165.425956 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 12983: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12984 165.425987 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 12984: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12985 165.443857 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 12985: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12986 165.566209 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 12986: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 12987 165.768950 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 45095168, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12987: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12988 165.768974 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 45095168, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 12988: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12989 165.768988 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 45095168, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12989: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12990 165.769001 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 45095168, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 12990: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12991 165.787208 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1914175744, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12991: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12992 165.787240 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1914175744, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 12992: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12993 165.787253 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1914175744, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12993: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12994 165.787265 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1914175744, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 12994: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 12995 165.930252 192.168.10.183 192.168.10.255 BROWSER 243 Host Announcement PSWANSONXP, Workstation, Server, NT Workstation Frame 12995: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: SunrichT_19:cf:8d (00:0a:cd:19:cf:8d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.183 (192.168.10.183), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 12996 165.930381 192.168.10.183 192.168.10.255 BROWSER 243 Host Announcement PSWANSONXP, Workstation, Server, NT Workstation Frame 12996: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: SunrichT_19:cf:8d (00:0a:cd:19:cf:8d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.183 (192.168.10.183), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 12997 165.941463 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 12997: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12998 165.941479 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 12998: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 12999 165.972189 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 12999: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12097, Ack: 902117, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13000 165.972212 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=902117 Ack=12139 Win=46552 Len=0 Frame 13000: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 902117, Ack: 12139, Len: 0 No. Time Source Destination Protocol Length Info 13001 166.063284 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 3 Port 47 TTL = 120 Frame 13001: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 13002 166.576761 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 13002: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12139, Ack: 902117, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13003 166.576809 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=902117 Ack=12181 Win=46531 Len=0 Frame 13003: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 902117, Ack: 12181, Len: 0 No. Time Source Destination Protocol Length Info 13004 166.733181 192.168.10.220 208.67.222.222 DNS 86 Standard query PTR 132.192.67.88.in-addr.arpa Frame 13004: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 58859 (58859), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13005 166.784608 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 61872384, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13005: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13006 166.784630 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 61872384, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13006: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13007 166.784643 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 61872384, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13007: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13008 166.784655 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 61872384, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13008: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13009 166.802831 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1930952960, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13009: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13010 166.802855 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1930952960, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13010: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13011 166.802868 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1930952960, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13011: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13012 166.802880 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1930952960, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13012: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13013 166.858279 208.67.222.222 192.168.10.220 DNS 139 Standard query response PTR dslb-088-067-192-132.pools.arcor-ip.net Frame 13013: 139 bytes on wire (1112 bits), 139 bytes captured (1112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 58859 (58859) Domain Name System (response) No. Time Source Destination Protocol Length Info 13014 166.859854 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 Who has 192.168.10.220? Tell 192.168.10.1 Frame 13014: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13015 166.859867 Dell_ad:25:f6 Watchgua_3c:4c:d8 ARP 60 192.168.10.220 is at 00:22:19:ad:25:f6 Frame 13015: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13016 166.878253 192.168.10.220 208.67.222.222 DNS 85 Standard query PTR 3.14.217.124.in-addr.arpa Frame 13016: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 54534 (54534), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13017 167.055310 Dell_52:2e:6b Broadcast ARP 106 Who has 192.168.10.224? Tell 192.168.10.205 Frame 13017: 106 bytes on wire (848 bits), 106 bytes captured (848 bits) Ethernet II, Src: Dell_52:2e:6b (00:13:72:52:2e:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13018 167.055342 Dell_52:2e:6b Broadcast ARP 106 Who has 192.168.10.224? Tell 192.168.10.205 Frame 13018: 106 bytes on wire (848 bits), 106 bytes captured (848 bits) Ethernet II, Src: Dell_52:2e:6b (00:13:72:52:2e:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13019 167.158353 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 13019: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12181, Ack: 902117, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13020 167.158388 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=902117 Ack=12223 Win=46510 Len=0 Frame 13020: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 902117, Ack: 12223, Len: 0 No. Time Source Destination Protocol Length Info 13021 167.194060 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 13021: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13022 167.315500 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 13022: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13023 167.424282 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 13023: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13024 167.424313 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 13024: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13025 167.443754 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 13025: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13026 167.566216 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 13026: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13027 167.800375 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 78649600, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13027: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13028 167.800400 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 78649600, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13028: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13029 167.800413 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 78649600, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13029: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13030 167.800426 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 78649600, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13030: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13031 167.818455 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1947730176, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13031: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13032 167.818487 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1947730176, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13032: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13033 167.818500 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1947730176, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13033: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13034 167.818512 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1947730176, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13034: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13035 167.878426 192.168.10.246 65.32.1.65 DNS 85 Standard query PTR 3.14.217.124.in-addr.arpa Frame 13035: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 63255 (63255), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13036 167.932445 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 13036: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13037 167.932477 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 13037: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13038 168.052028 192.168.10.30 192.168.10.255 UDP 764 Source port: 34427 Destination port: apc-3052 Frame 13038: 764 bytes on wire (6112 bits), 764 bytes captured (6112 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (722 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 36 3a 34 33 0a 53 52 3d 31 42 0a =18:46:43.SR=1B. 0060 53 55 3d 37 42 31 33 32 44 33 36 0a 52 44 3d 42 SU=7B132D36.RD=B 0070 31 37 42 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 17B.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 =08.7E=00.3E=001 00b0 0a 34 43 3d 32 30 35 2e 39 0a 35 30 3d 30 34 30 .4C=205.9.50=040 00c0 2e 30 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 .0.43=025.2.78=0 00d0 37 2f 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 7/25/06.6A=0023: 00e0 0a 34 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 .47=S.63=BAI_UPS 00f0 20 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f .66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 =00.38=00.6E=NS0 0120 36 33 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 631005398 .6D=0 0130 37 2f 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 7/25/06.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 52 4d -UPS RT 10000 RM 0150 20 58 4c 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d XL.46=60.00.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 207.3.4E=204.4.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 =000.42=218.1.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e .5C=034.0.2F=16. 01d0 34 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 47.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 36 30 2e 30 31 3b 32 30 37 000.09=60.01;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 .E9=0.I0=2.I1=26 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a .I5=0.I6=0.I7=1. 0250 49 38 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 I8=Device 1.I9=0 0260 0a 49 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d .IA=Device 2.IB= 0270 30 0a 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 0.IC=Relay 1.ID= 0280 30 0a 53 48 3d 35 34 44 42 31 34 34 45 37 41 35 0.SH=54DB144E7A5 0290 41 46 45 39 36 38 34 45 43 34 30 30 43 38 31 43 AFE9684EC400C81C 02a0 45 30 39 46 42 0a 4d 44 3d 34 66 36 37 32 37 32 E09FB.MD=4f67272 02b0 33 35 34 35 63 31 35 64 63 35 64 39 62 65 66 31 3545c15dc5d9bef1 02c0 30 39 37 32 30 66 31 39 31 0a 3c 2f 42 4f 44 59 09720f191.</BODY 02d0 3e 0a >. No. Time Source Destination Protocol Length Info 13039 168.052144 192.168.10.30 192.168.10.255 UDP 764 Source port: 34427 Destination port: apc-3052 Frame 13039: 764 bytes on wire (6112 bits), 764 bytes captured (6112 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (722 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 36 3a 34 33 0a 53 52 3d 31 42 0a =18:46:43.SR=1B. 0060 53 55 3d 37 42 31 33 32 44 33 36 0a 52 44 3d 42 SU=7B132D36.RD=B 0070 31 37 42 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 17B.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 =08.7E=00.3E=001 00b0 0a 34 43 3d 32 30 35 2e 39 0a 35 30 3d 30 34 30 .4C=205.9.50=040 00c0 2e 30 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 .0.43=025.2.78=0 00d0 37 2f 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 7/25/06.6A=0023: 00e0 0a 34 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 .47=S.63=BAI_UPS 00f0 20 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f .66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 =00.38=00.6E=NS0 0120 36 33 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 631005398 .6D=0 0130 37 2f 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 7/25/06.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 52 4d -UPS RT 10000 RM 0150 20 58 4c 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d XL.46=60.00.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 207.3.4E=204.4.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 =000.42=218.1.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e .5C=034.0.2F=16. 01d0 34 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 47.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 36 30 2e 30 31 3b 32 30 37 000.09=60.01;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 .E9=0.I0=2.I1=26 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a .I5=0.I6=0.I7=1. 0250 49 38 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 I8=Device 1.I9=0 0260 0a 49 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d .IA=Device 2.IB= 0270 30 0a 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 0.IC=Relay 1.ID= 0280 30 0a 53 48 3d 35 34 44 42 31 34 34 45 37 41 35 0.SH=54DB144E7A5 0290 41 46 45 39 36 38 34 45 43 34 30 30 43 38 31 43 AFE9684EC400C81C 02a0 45 30 39 46 42 0a 4d 44 3d 34 66 36 37 32 37 32 E09FB.MD=4f67272 02b0 33 35 34 35 63 31 35 64 63 35 64 39 62 65 66 31 3545c15dc5d9bef1 02c0 30 39 37 32 30 66 31 39 31 0a 3c 2f 42 4f 44 59 09720f191.</BODY 02d0 3e 0a >. No. Time Source Destination Protocol Length Info 13040 168.211391 192.168.10.202 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 13040: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: WwPcbaTe_67:48:f0 (00:0f:1f:67:48:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.202 (192.168.10.202), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 13041 168.211626 192.168.10.202 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 13041: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: WwPcbaTe_67:48:f0 (00:0f:1f:67:48:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.202 (192.168.10.202), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 13042 168.392803 192.168.10.220 208.67.222.222 DNS 87 Standard query A 103.78.44.31.bl.spamcop.net Frame 13042: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 62536 (62536), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13043 168.394163 192.168.10.220 208.67.222.222 DNS 89 Standard query A 103.78.44.31.zen.spamhaus.org Frame 13043: 89 bytes on wire (712 bits), 89 bytes captured (712 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 62290 (62290), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13044 168.395707 192.168.10.220 208.67.222.222 DNS 92 Standard query A 103.78.44.31.dul.dnsbl.sorbs.net Frame 13044: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 57173 (57173), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13045 168.402222 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 13045: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12223, Ack: 902117, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13046 168.402255 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=902117 Ack=12265 Win=46489 Len=0 Frame 13046: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 902117, Ack: 12265, Len: 0 No. Time Source Destination Protocol Length Info 13047 168.438767 208.67.222.222 192.168.10.220 DNS 103 Standard query response A 127.0.0.2 Frame 13047: 103 bytes on wire (824 bits), 103 bytes captured (824 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 62536 (62536) Domain Name System (response) No. Time Source Destination Protocol Length Info 13048 168.454510 208.67.222.222 192.168.10.220 DNS 92 Standard query response, No such name Frame 13048: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 57173 (57173) Domain Name System (response) No. Time Source Destination Protocol Length Info 13049 168.483982 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 13049: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13050 168.484012 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 13050: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13051 168.643327 192.168.10.220 208.67.220.220 DNS 79 Standard query TXT micropallinatura.it Frame 13051: 79 bytes on wire (632 bits), 79 bytes captured (632 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.220.220 (208.67.220.220) User Datagram Protocol, Src Port: 62826 (62826), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13052 168.797537 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.100? Tell 192.168.10.226 Frame 13052: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13053 168.797579 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.100? Tell 192.168.10.226 Frame 13053: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13054 168.797601 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 13054: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13055 168.797613 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 13055: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13056 168.797624 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 13056: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13057 168.797638 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 13057: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13058 168.797649 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 13058: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13059 168.797660 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 13059: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13060 168.797751 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 13060: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13061 168.797762 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 13061: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13062 168.797775 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 13062: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13063 168.797795 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 13063: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13064 168.797817 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 13064: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13065 168.797856 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 13065: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13066 168.797868 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 13066: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13067 168.797879 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 13067: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13068 168.797890 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 13068: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13069 168.797921 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 13069: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13070 168.797932 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 13070: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13071 168.797943 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 13071: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13072 168.797974 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 13072: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13073 168.797985 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 13073: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13074 168.797996 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 13074: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13075 168.798008 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 13075: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13076 168.798019 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 13076: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13077 168.798030 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 13077: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13078 168.798041 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 13078: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13079 168.798052 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 13079: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13080 168.798063 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 13080: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13081 168.798073 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 13081: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13082 168.798084 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 13082: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13083 168.798096 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 13083: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13084 168.798107 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 13084: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13085 168.798118 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 13085: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13086 168.798129 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 13086: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13087 168.798140 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 13087: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13088 168.798150 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 13088: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13089 168.798162 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 13089: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13090 168.798177 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 13090: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13091 168.798188 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 13091: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13092 168.798199 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 13092: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13093 168.798210 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 13093: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13094 168.798221 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 13094: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13095 168.798235 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 13095: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13096 168.803111 208.67.222.222 192.168.10.220 DNS 121 Standard query response A 127.0.0.11 A 127.0.0.4 Frame 13096: 121 bytes on wire (968 bits), 121 bytes captured (968 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 62290 (62290) Domain Name System (response) No. Time Source Destination Protocol Length Info 13097 168.815829 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 95426816, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13097: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13098 168.815852 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 95426816, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13098: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13099 168.815865 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 95426816, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13099: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13100 168.815877 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 95426816, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13100: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13101 168.834032 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1964507392, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13101: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13102 168.834056 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1964507392, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13102: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13103 168.834068 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1964507392, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13103: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13104 168.834080 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1964507392, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13104: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13105 168.992315 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 13105: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12265, Ack: 902117, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13106 168.992350 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=902117 Ack=12307 Win=46468 Len=0 Frame 13106: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 902117, Ack: 12307, Len: 0 No. Time Source Destination Protocol Length Info 13107 169.051774 65.32.1.65 192.168.10.246 DNS 136 Standard query response PTR 3-14-217.124.adsl-pool.digitelone.com Frame 13107: 136 bytes on wire (1088 bits), 136 bytes captured (1088 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 63255 (63255) Domain Name System (response) No. Time Source Destination Protocol Length Info 13108 169.061377 192.168.10.224 192.168.20.3 TCP 74 46651 > 5666 [SYN] Seq=0 Win=5840 Len=0 MSS=1460 SACK_PERM=1 TSval=72422331 TSecr=0 WS=128 Frame 13108: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.224 (192.168.10.224), Dst: 192.168.20.3 (192.168.20.3) Transmission Control Protocol, Src Port: 46651 (46651), Dst Port: 5666 (5666), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 13109 169.061577 192.168.10.46 192.168.10.245 Syslog 214 LOCAL4.INFO: Oct 03 2011 19:17:49 ciscoasa : %ASA-6-302013: Built outbound TCP connection 54 for dmz1:WebServer/5666 (WebServer/5666) to inside:Groundwork/46651 (Groundwork/46651)\n Frame 13109: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.INFO: Oct 03 2011 19:17:49 ciscoasa : %ASA-6-302013: Built outbound TCP connection 54 for dmz1:WebServer/5666 (WebServer/5666) to inside:Groundwork/46651 (Groundwork/46651)\n No. Time Source Destination Protocol Length Info 13110 169.061597 Dell_39:6b:43 Broadcast ARP 60 Who has 192.168.10.224? Tell 192.168.10.204 Frame 13110: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:6b:43 (00:18:8b:39:6b:43), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13111 169.061634 Dell_39:6b:43 Broadcast ARP 60 Who has 192.168.10.224? Tell 192.168.10.204 Frame 13111: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:6b:43 (00:18:8b:39:6b:43), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13112 169.061928 192.168.20.3 192.168.10.224 TCP 78 5666 > 46651 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1380 WS=1 TSval=0 TSecr=0 SACK_PERM=1 Frame 13112: 78 bytes on wire (624 bits), 78 bytes captured (624 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_42:b9:dc (00:21:9b:42:b9:dc) Internet Protocol Version 4, Src: 192.168.20.3 (192.168.20.3), Dst: 192.168.10.224 (192.168.10.224) Transmission Control Protocol, Src Port: 5666 (5666), Dst Port: 46651 (46651), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 13113 169.061971 192.168.10.224 192.168.20.3 TCP 66 46651 > 5666 [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSval=72422331 TSecr=0 Frame 13113: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.224 (192.168.10.224), Dst: 192.168.20.3 (192.168.20.3) Transmission Control Protocol, Src Port: 46651 (46651), Dst Port: 5666 (5666), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 13114 169.062017 192.168.10.224 192.168.20.3 TCP 128 46651 > 5666 [PSH, ACK] Seq=1 Ack=1 Win=5888 Len=62 TSval=72422331 TSecr=0 Frame 13114: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.224 (192.168.10.224), Dst: 192.168.20.3 (192.168.20.3) Transmission Control Protocol, Src Port: 46651 (46651), Dst Port: 5666 (5666), Seq: 1, Ack: 1, Len: 62 Data (62 bytes) 0000 16 03 01 00 39 01 00 00 35 03 01 4e 8a 4a e8 a2 ....9...5..N.J.. 0010 57 c7 a0 66 5b c2 51 af c0 24 cf 37 b2 18 ce c8 W..f[.Q..$.7.... 0020 4a 98 46 2b 1e 6d 23 41 b4 4c 65 00 00 0e 00 3a J.F+.m#A.Le....: 0030 00 34 00 1b 00 1a 00 19 00 18 00 17 01 00 .4............ No. Time Source Destination Protocol Length Info 13115 169.139244 192.168.20.3 192.168.10.224 TCP 298 5666 > 46651 [PSH, ACK] Seq=1 Ack=63 Win=65473 Len=232 TSval=18493449 TSecr=72422331 Frame 13115: 298 bytes on wire (2384 bits), 298 bytes captured (2384 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_42:b9:dc (00:21:9b:42:b9:dc) Internet Protocol Version 4, Src: 192.168.20.3 (192.168.20.3), Dst: 192.168.10.224 (192.168.10.224) Transmission Control Protocol, Src Port: 5666 (5666), Dst Port: 46651 (46651), Seq: 1, Ack: 63, Len: 232 Data (232 bytes) 0000 16 03 01 00 4a 02 00 00 46 03 01 4e 8a 49 64 cd ....J...F..N.Id. 0010 73 c1 f5 7c f9 94 cd 4f 16 79 46 79 52 21 29 4e s..|...O.yFyR!)N 0020 62 ab f9 58 a2 94 0a d6 d3 fc 51 20 7c e0 89 f5 b..X......Q |... 0030 2e 82 d4 c3 75 00 4e 77 de c9 d9 92 3b 74 f2 28 ....u.Nw....;t.( 0040 78 62 f7 a7 aa dc 06 95 09 85 a8 79 00 3a 00 16 xb.........y.:.. 0050 03 01 00 8b 0c 00 00 87 00 40 cf ff 65 c2 c8 b4 [email protected]... 0060 d2 68 8c c1 80 b1 7b d6 e8 b3 62 59 62 ed a7 45 .h....{...bYb..E 0070 6a f8 e9 d8 be 3f 38 42 5f b2 a5 36 03 d3 06 27 j....?8B_..6...' 0080 81 c8 9b 88 50 3b 82 3d 31 45 2c b4 c5 a5 be 6a ....P;.=1E,....j 0090 e3 2e a6 86 fd 6a 7e 1e 6a 73 00 01 02 00 40 10 .....j~.js....@. 00a0 2a 6c 2f df 76 9c 39 b5 37 38 58 9f a6 84 bd 3f *l/.v.9.78X....? 00b0 41 b6 6c fa b9 7e ba ce 40 cf 62 ce fc e3 69 a5 [email protected]. 00c0 ea 7e a1 a3 ea 4b d9 37 c4 a5 a1 b8 92 74 82 53 .~...K.7.....t.S 00d0 8a 86 46 7d 29 03 31 84 f4 bb 61 c8 4e 4c 02 16 ..F}).1...a.NL.. 00e0 03 01 00 04 0e 00 00 00 ........ No. Time Source Destination Protocol Length Info 13116 169.139298 192.168.10.224 192.168.20.3 TCP 66 46651 > 5666 [ACK] Seq=63 Ack=233 Win=6912 Len=0 TSval=72422409 TSecr=18493449 Frame 13116: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.224 (192.168.10.224), Dst: 192.168.20.3 (192.168.20.3) Transmission Control Protocol, Src Port: 46651 (46651), Dst Port: 5666 (5666), Seq: 63, Ack: 233, Len: 0 No. Time Source Destination Protocol Length Info 13117 169.140661 192.168.10.224 192.168.20.3 TCP 200 46651 > 5666 [PSH, ACK] Seq=63 Ack=233 Win=6912 Len=134 TSval=72422410 TSecr=18493449 Frame 13117: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.224 (192.168.10.224), Dst: 192.168.20.3 (192.168.20.3) Transmission Control Protocol, Src Port: 46651 (46651), Dst Port: 5666 (5666), Seq: 63, Ack: 233, Len: 134 Data (134 bytes) 0000 16 03 01 00 46 10 00 00 42 00 40 62 22 f9 2a 23 ....F...B.@b".*# 0010 16 4f 3c 90 c2 77 09 c9 7c 8a 6c 0d f7 45 3c e1 .O<..w..|.l..E<. 0020 90 ee 44 91 ef 97 2b 6b 52 0a ac 0a 55 08 bc a3 ..D...+kR...U... 0030 cc 89 07 a5 af 0f 38 91 e7 4a 8f 5e 79 4a 39 93 ......8..J.^yJ9. 0040 11 04 6c a4 ed 34 7f 0e 90 b6 b3 14 03 01 00 01 ..l..4.......... 0050 01 16 03 01 00 30 5f 32 b1 36 a6 5f 6b 24 f1 cc .....0_2.6._k$.. 0060 4e 5c 5f 0a e7 96 5f 1d 8a 53 21 c3 fa f9 ed ba N\_..._..S!..... 0070 a3 22 99 1a 83 be 41 69 e6 bb 5b 72 26 72 e3 c5 ."....Ai..[r&r.. 0080 16 ee b1 65 3f 4c ...e?L No. Time Source Destination Protocol Length Info 13118 169.168084 192.168.10.246 65.32.1.65 DNS 88 Standard query PTR 161.227.200.117.in-addr.arpa Frame 13118: 88 bytes on wire (704 bits), 88 bytes captured (704 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 57432 (57432), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13119 169.194131 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 13119: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13120 169.216973 65.32.1.65 192.168.10.246 DNS 177 Standard query response, No such name Frame 13120: 177 bytes on wire (1416 bits), 177 bytes captured (1416 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 57432 (57432) Domain Name System (response) No. Time Source Destination Protocol Length Info 13121 169.217799 192.168.10.203 117.200.227.161 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 13121: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 117.200.227.161 (117.200.227.161) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 13122 169.250002 192.168.20.3 192.168.10.224 TCP 125 5666 > 46651 [PSH, ACK] Seq=233 Ack=197 Win=65339 Len=59 TSval=18493450 TSecr=72422410 Frame 13122: 125 bytes on wire (1000 bits), 125 bytes captured (1000 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_42:b9:dc (00:21:9b:42:b9:dc) Internet Protocol Version 4, Src: 192.168.20.3 (192.168.20.3), Dst: 192.168.10.224 (192.168.10.224) Transmission Control Protocol, Src Port: 5666 (5666), Dst Port: 46651 (46651), Seq: 233, Ack: 197, Len: 59 Data (59 bytes) 0000 14 03 01 00 01 01 16 03 01 00 30 9c aa 74 e4 27 ..........0..t.' 0010 87 98 a0 a5 59 b1 c2 95 0c 73 85 21 f0 3a 33 c4 ....Y....s.!.:3. 0020 f9 2e 14 7a dd 08 bd b6 3a 2c 37 52 65 00 5e 3e ...z....:,7Re.^> 0030 2d cd cf 8e 4c 5a fd 03 38 6a 38 -...LZ..8j8 No. Time Source Destination Protocol Length Info 13123 169.251256 192.168.10.224 192.168.20.3 TCP 1180 46651 > 5666 [PSH, ACK] Seq=197 Ack=292 Win=6912 Len=1114 TSval=72422520 TSecr=18493450 Frame 13123: 1180 bytes on wire (9440 bits), 1180 bytes captured (9440 bits) Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.224 (192.168.10.224), Dst: 192.168.20.3 (192.168.20.3) Transmission Control Protocol, Src Port: 46651 (46651), Dst Port: 5666 (5666), Seq: 197, Ack: 292, Len: 1114 Data (1114 bytes) 0000 17 03 01 00 20 1f 61 88 9a c2 5f 7e 0f e1 73 7c .... .a..._~..s| 0010 c6 3a 93 15 72 f8 38 41 27 b9 aa 40 68 85 34 e2 .:..r.8A'[email protected]. 0020 2a ae 9f 0d ef 17 03 01 04 30 e2 5e 34 93 dc a6 *........0.^4... 0030 64 16 03 a1 eb c5 0c 99 88 19 cb 7a 1b fe b7 17 d..........z.... 0040 63 11 01 07 ee 52 37 13 d5 ca e8 b3 05 16 ad c3 c....R7......... 0050 52 54 09 3d 42 15 a7 7c 6c be 17 f8 e5 c3 33 1a RT.=B..|l.....3. 0060 27 e9 d4 86 fd e4 b9 01 ba c7 1e 5b d2 58 60 a2 '..........[.X`. 0070 cb a9 16 97 84 9a 0e ee 74 42 c9 2e ff e7 ba bb ........tB...... 0080 fb f8 3f 28 6d 67 e4 19 f4 15 05 b9 7c 23 cc a1 ..?(mg......|#.. 0090 75 13 b9 73 12 48 53 9b 5a 24 19 a2 2b bc 11 21 u..s.HS.Z$..+..! 00a0 56 10 3b b7 10 f6 93 9e de 8e 73 cc 64 c5 d7 dc V.;.......s.d... 00b0 67 fc 65 93 70 a6 43 60 26 2b 77 67 18 d1 38 86 g.e.p.C`&+wg..8. 00c0 25 31 cd fd e4 e6 e9 5b 92 bb 49 ad 7d eb d3 40 %1.....[..I.}..@ 00d0 97 93 d8 3f 36 71 3c 38 55 91 89 aa 39 16 87 cd ...?6q<8U...9... 00e0 2b 44 eb 1d f8 f2 78 e0 2a 45 d0 28 38 de 18 16 +D....x.*E.(8... 00f0 82 2e 99 47 03 0f a6 e3 28 31 56 ab d4 d3 f2 40 ...G....(1V....@ 0100 e3 08 c0 cd 43 1a 16 34 53 0c 6a c5 cc 75 2c 6b ....C..4S.j..u,k 0110 1d 3a ae 3d c2 1e 12 31 1d f9 9e b0 af 54 35 0f .:.=...1.....T5. 0120 fb 75 3a 6c 8c 2d 92 a1 b9 92 1f 92 18 e2 88 55 .u:l.-.........U 0130 05 2e 00 c8 f4 08 76 f8 e9 58 3f 59 e6 9e 98 d4 ......v..X?Y.... 0140 a0 8a 31 05 f9 d2 04 d3 36 77 38 94 11 a3 3d 6a ..1.....6w8...=j 0150 0c 07 b3 46 d3 b9 a1 f1 8a 43 e6 96 a2 f8 06 5d ...F.....C.....] 0160 2d 94 33 31 52 0a 48 73 9e 53 71 48 f3 1f fe 5c -.31R.Hs.SqH...\ 0170 dc 64 2c 8d f7 bb 6c d4 70 db ec 01 2d 4f 4a 34 .d,...l.p...-OJ4 0180 9d 79 b3 b1 c5 e6 8e d5 3e 33 f6 1b 96 4a cc cc .y......>3...J.. 0190 a3 f5 49 99 f7 02 f8 0b bf e9 0a 30 3c 98 cc 39 ..I........0<..9 01a0 19 ee 47 01 03 6c 0a 2d 8d 11 d0 8a 45 ef 10 4b ..G..l.-....E..K 01b0 b3 7b fa c6 1d de 11 18 6d 5c ac 3c 4e 08 2b be .{......m\.<N.+. 01c0 91 9f ee cd 51 9d 6d 4a 5d 97 13 7e 92 af 93 48 ....Q.mJ]..~...H 01d0 0e aa 3b 03 c8 f8 6e 10 88 de a0 fa 9b 3d 63 32 ..;...n......=c2 01e0 a0 cb ff 9a cb d2 53 d8 16 c0 9a 09 43 0a 5a 1a ......S.....C.Z. 01f0 27 e8 ba 87 42 b9 6f a3 16 cd 66 a9 cc da 13 ec '...B.o...f..... 0200 22 2d 4a 56 17 3b dc 1a 73 ac 41 fd 9e 21 ca 9d "-JV.;..s.A..!.. 0210 f4 ca 11 0f e8 84 e0 9a 27 65 a4 34 dd af 3c 09 ........'e.4..<. 0220 53 43 d3 e2 23 95 6b 0d 01 32 f2 85 87 5c 09 a7 SC..#.k..2...\.. 0230 f7 23 21 9b 06 5a ad 4d 21 b2 cf 89 09 60 a4 50 .#!..Z.M!....`.P 0240 f5 d9 b2 b3 64 55 b7 6e 74 2a 07 80 b4 57 dd a3 ....dU.nt*...W.. 0250 b5 79 11 2b 23 6c 0c 86 b9 af d3 60 d2 26 a4 fa .y.+#l.....`.&.. 0260 83 3b 7d aa a3 e9 1a 41 83 6f 6b 13 95 cc 62 c8 .;}....A.ok...b. 0270 5b ff cf db 3d 46 ec 7b dd 6c e9 6c 6f 8c b6 3c [...=F.{.l.lo..< 0280 84 f6 20 5e 6b 8b 94 e2 39 43 5c d4 83 75 60 04 .. ^k...9C\..u`. 0290 c1 6c b9 96 95 eb ed 5c 04 f6 1c 05 90 de 75 6a .l.....\......uj 02a0 1f 55 c5 d9 16 07 a6 62 a4 d6 e3 02 29 f7 b0 e5 .U.....b....)... 02b0 27 41 4c 01 1f 75 fd 2c a6 92 65 22 cd 7d 6b fe 'AL..u.,..e".}k. 02c0 26 57 bb f1 28 09 ed fb 0f b8 9d 29 89 dc 27 1d &W..(......)..'. 02d0 bb 36 c3 1e a7 a5 86 bd 77 0a 68 6f f4 b1 f2 bf .6......w.ho.... 02e0 fa 70 ce f4 5c 6d 51 84 b3 ed 27 ec 8e aa 9e 08 .p..\mQ...'..... 02f0 11 0c 66 60 c4 90 ec 3e 2a 88 ec ca f0 6e 94 c7 ..f`...>*....n.. 0300 45 0c 66 47 a2 66 05 3b 03 11 8e 82 80 af 46 95 E.fG.f.;......F. 0310 46 91 4b 56 a6 3b c6 eb ce a5 7d cf ce e1 1b 1a F.KV.;....}..... 0320 f8 1e 69 b6 07 5a 26 b4 80 d9 7e 99 41 4c c9 11 ..i..Z&...~.AL.. 0330 a5 8e 88 ff a5 f5 e9 69 73 45 25 f8 c4 08 e2 af .......isE%..... 0340 7c 4d f8 7c 1e f3 84 13 da b6 64 62 0f 43 50 48 |M.|......db.CPH 0350 a8 83 22 c7 30 c8 2c b9 a9 c4 79 9f a6 1a d8 85 ..".0.,...y..... 0360 45 eb 1e e1 31 30 09 2d 7d 29 ae ec 01 6e bc d4 E...10.-})...n.. 0370 6c d7 98 2f d3 5a a8 d5 fd d8 fa 26 62 42 33 de l../.Z.....&bB3. 0380 ec 82 d8 23 d2 63 f4 44 42 e1 7f fa c5 30 fe 36 ...#.c.DB....0.6 0390 47 60 77 48 9c 54 f2 68 91 5b ef 3a ad ac ff 9e G`wH.T.h.[.:.... 03a0 02 f1 b7 ef 79 5d d4 a4 cc 7b 0e ca 82 06 9c 1e ....y]...{...... 03b0 0c 12 52 e2 c4 54 af f6 52 c8 a4 87 2a 34 1e 23 ..R..T..R...*4.# 03c0 24 7d 9e fb 24 0d bf 11 98 0c 7e 3b f3 6b 3d 29 $}..$.....~;.k=) 03d0 f3 e7 4f b2 85 a8 71 80 9a 0b 5a 0c e6 2a 3a 98 ..O...q...Z..*:. 03e0 dc e7 1c 49 52 7b d3 fb 93 0c bd b9 4f bf 66 b4 ...IR{......O.f. 03f0 60 25 d8 cc f9 2b 84 4a aa 8c 67 f8 83 0b 48 a8 `%...+.J..g...H. 0400 b3 c1 4f 64 35 13 b8 2d 12 b3 74 a7 62 74 13 df ..Od5..-..t.bt.. 0410 14 23 9c 7c 79 db 82 82 39 9c b4 7d c8 72 77 2f .#.|y...9..}.rw/ 0420 4e 44 cb 14 44 70 a8 11 8f 74 22 ed 4b c2 b0 2d ND..Dp...t".K..- 0430 36 bf e5 c9 72 2e 91 e2 30 09 b5 12 b6 20 32 0d 6...r...0.... 2. 0440 b8 48 50 66 4c 01 cd 3b 41 5c af f5 66 4f 41 dc .HPfL..;A\..fOA. 0450 0a b1 5c 65 dc 61 51 49 4c fb ..\e.aQIL. No. Time Source Destination Protocol Length Info 13124 169.289629 208.67.220.220 192.168.10.220 DNS 79 Standard query response Frame 13124: 79 bytes on wire (632 bits), 79 bytes captured (632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.220.220 (208.67.220.220), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 62826 (62826) Domain Name System (response) No. Time Source Destination Protocol Length Info 13125 169.318133 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 13125: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13126 169.374114 192.168.10.220 208.67.222.222 DNS 91 Standard query A 169.25.150.121.zen.spamhaus.org Frame 13126: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 51143 (51143), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13127 169.375895 192.168.10.220 208.67.222.222 DNS 89 Standard query A 169.25.150.121.bl.spamcop.net Frame 13127: 89 bytes on wire (712 bits), 89 bytes captured (712 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 55808 (55808), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13128 169.377430 192.168.10.220 208.67.222.222 DNS 94 Standard query A 169.25.150.121.dul.dnsbl.sorbs.net Frame 13128: 94 bytes on wire (752 bits), 94 bytes captured (752 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 61119 (61119), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13129 169.429822 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 13129: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13130 169.429854 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 13130: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13131 169.435814 208.67.222.222 192.168.10.220 DNS 94 Standard query response, No such name Frame 13131: 94 bytes on wire (752 bits), 94 bytes captured (752 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 61119 (61119) Domain Name System (response) No. Time Source Destination Protocol Length Info 13132 169.443788 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 13132: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13133 169.467284 192.168.20.3 192.168.10.224 TCP 66 5666 > 46651 [ACK] Seq=292 Ack=1311 Win=64225 Len=0 TSval=18493452 TSecr=72422520 Frame 13133: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_42:b9:dc (00:21:9b:42:b9:dc) Internet Protocol Version 4, Src: 192.168.20.3 (192.168.20.3), Dst: 192.168.10.224 (192.168.10.224) Transmission Control Protocol, Src Port: 5666 (5666), Dst Port: 46651 (46651), Seq: 292, Ack: 1311, Len: 0 No. Time Source Destination Protocol Length Info 13134 169.535065 208.67.222.222 192.168.10.220 DNS 89 Standard query response, No such name Frame 13134: 89 bytes on wire (712 bits), 89 bytes captured (712 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 55808 (55808) Domain Name System (response) No. Time Source Destination Protocol Length Info 13135 169.566177 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 13135: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13136 169.577880 192.168.20.3 192.168.10.224 TCP 1180 5666 > 46651 [PSH, ACK] Seq=292 Ack=1311 Win=64225 Len=1114 TSval=18493453 TSecr=72422520 Frame 13136: 1180 bytes on wire (9440 bits), 1180 bytes captured (9440 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_42:b9:dc (00:21:9b:42:b9:dc) Internet Protocol Version 4, Src: 192.168.20.3 (192.168.20.3), Dst: 192.168.10.224 (192.168.10.224) Transmission Control Protocol, Src Port: 5666 (5666), Dst Port: 46651 (46651), Seq: 292, Ack: 1311, Len: 1114 Data (1114 bytes) 0000 17 03 01 00 20 7e cf 9d ee 00 97 f6 82 2d 02 75 .... ~.......-.u 0010 bd c7 6a 06 a0 28 20 ba 26 2b 69 f6 0f 76 45 d2 ..j..( .&+i..vE. 0020 e4 37 08 be 5b 17 03 01 04 30 4f 7a 4d 62 ab d5 .7..[....0OzMb.. 0030 b6 1d e3 1f 57 58 fc f0 dd 55 f6 a2 74 7f 8b 93 ....WX...U..t... 0040 15 62 f6 0b d6 76 50 c8 7f 0f fc 85 be 74 2d 5d .b...vP......t-] 0050 cf 6b 43 0d 2b ea 75 3c f3 c7 2f cb 54 fe 19 e3 .kC.+.u<../.T... 0060 17 6d 0b ee 47 d5 f9 97 64 c4 33 3a 4f ba 19 45 .m..G...d.3:O..E 0070 c8 09 fb 6f 69 de b1 e8 10 69 a2 f4 26 73 49 13 ...oi....i..&sI. 0080 8a 27 97 34 3a 0b 54 19 db 9c 9f 85 57 5f c8 3e .'.4:.T.....W_.> 0090 d6 ca bf eb 8e 94 cc f5 0b bb be e3 8a 07 6a d6 ..............j. 00a0 6b 49 22 96 21 e7 2e 00 da 6e d6 87 ea f8 6f a5 kI".!....n....o. 00b0 d4 a5 de 9b 3b 15 9e 3a dc e7 40 29 d9 44 7b 44 ....;..:..@).D{D 00c0 09 c4 5d a8 07 c4 44 4c a8 1b 12 18 24 ca e0 86 ..]...DL....$... 00d0 a0 bd 75 12 2b c1 3b c5 87 d4 d8 b8 97 24 4d 94 ..u.+.;......$M. 00e0 03 ae 94 62 07 8c 18 85 2c 81 09 b9 b2 97 cf d0 ...b....,....... 00f0 6f 78 cf f7 8a 6e e9 a7 cb 52 15 c4 48 3b 68 0a ox...n...R..H;h. 0100 b0 ee 63 69 8a 6d 2b a5 60 2a f9 4d 08 f1 44 a6 ..ci.m+.`*.M..D. 0110 28 2f ef 4b bd b6 63 97 cc 13 3a 63 c4 51 c5 9d (/.K..c...:c.Q.. 0120 4b 5a 6a 21 07 a9 bc 0b 5b ad 6b 3a 74 25 12 e7 KZj!....[.k:t%.. 0130 61 77 f2 c4 34 6f fa 69 58 64 2d ec 5b 34 18 74 aw..4o.iXd-.[4.t 0140 00 77 10 4c 55 dd 49 55 46 ad 41 4b 2d 81 9c ab .w.LU.IUF.AK-... 0150 5c 4b d2 8b 8e 82 7f 0a 5c e0 ac 48 44 c5 be ae \K......\..HD... 0160 7f 44 bb 9e 49 b9 24 e3 f5 82 77 45 a1 e8 4d 9a .D..I.$...wE..M. 0170 9e e0 0d 46 6b 65 9c 96 9a 49 9f 36 99 89 45 c7 ...Fke...I.6..E. 0180 8a b7 ee df 06 7a 1e b3 5b d0 b0 25 58 ff ca b9 .....z..[..%X... 0190 30 ab 29 e5 2b 8a e2 b4 41 a9 e0 f4 e2 be af b0 0.).+...A....... 01a0 d1 0a ce 33 8e 85 25 d1 af 23 e8 4a 15 35 95 02 ...3..%..#.J.5.. 01b0 0b 2e c0 6f cf ad b1 8a 79 47 5e 94 0c 23 cd a2 ...o....yG^..#.. 01c0 75 5e 94 e2 a2 9e 26 b7 f4 1e 65 e9 2a 06 e6 64 u^....&...e.*..d 01d0 3b 1b a8 73 4d ab d2 3b da fb b4 b0 4a 62 81 18 ;..sM..;....Jb.. 01e0 b2 1b 26 a3 d6 b0 45 8a 1f 54 17 11 3b be e7 d3 ..&...E..T..;... 01f0 c1 68 8f 99 b0 da 36 8c 67 bd f8 0c 28 ef 84 9b .h....6.g...(... 0200 25 cc cc 92 8c d7 4e db 05 76 6f af f5 1c 20 38 %.....N..vo... 8 0210 77 f7 8b e0 f1 00 88 b8 15 61 b9 3b 5c 97 2b 0e w........a.;\.+. 0220 b1 a0 c8 84 99 07 fa 32 e4 cb 9f 8a 6b 4b 2f a1 .......2....kK/. 0230 a2 00 9d 50 af 4d cf f1 ea 0c 28 68 3b de 72 f0 ...P.M....(h;.r. 0240 c6 d3 d9 24 82 95 b8 f5 a1 9c 49 0e 0d 23 9f f8 ...$......I..#.. 0250 5a b6 70 8d 2f ed 49 9e c2 35 1f b2 6b e1 72 ee Z.p./.I..5..k.r. 0260 73 e4 c4 83 f4 0f fc 49 0b cc 86 52 46 a7 65 75 s......I...RF.eu 0270 52 4f 57 86 8c b2 d0 dd 2a 7c 52 9b dd 5a a6 25 ROW.....*|R..Z.% 0280 c3 e7 98 6d 54 c0 8e 47 1b 0c 75 f5 06 3c 4b e6 ...mT..G..u..<K. 0290 44 6d ee 04 f6 07 93 1f 51 63 45 eb 6f 6c 51 41 Dm......QcE.olQA 02a0 f7 56 a7 3b 40 32 be b6 36 82 11 80 15 b5 7b ee .V.;@2..6.....{. 02b0 f1 bd 2c cb 43 fb 53 c8 1c 76 3f 1b cb b6 34 2c ..,.C.S..v?...4, 02c0 0a f1 3a a8 25 48 52 74 b6 1d 81 60 32 ab bb 84 ..:.%HRt...`2... 02d0 ef 17 1d 34 73 52 43 b7 78 fd 13 8c ab af 03 ed ...4sRC.x....... 02e0 de a8 72 4d 2f 08 69 2d 28 31 8a 96 ba b5 2c e1 ..rM/.i-(1....,. 02f0 15 89 6b 23 ed c5 8e e6 c7 cb 80 a1 da 7d d7 eb ..k#.........}.. 0300 f5 0e ca c0 2b f5 76 02 af f7 a3 67 64 6b 7b a9 ....+.v....gdk{. 0310 30 c4 bb 87 57 c0 6f e4 ab 8d eb 26 f9 e0 2f a9 0...W.o....&../. 0320 42 b5 97 1f bb 11 52 e3 f6 4f 68 48 1b 48 5f 4c B.....R..OhH.H_L 0330 95 1e 08 e6 76 97 f9 60 f5 a2 c7 2a 1b df d1 3f ....v..`...*...? 0340 af 0f 85 bf a4 95 20 47 ec fc 9e 4d 4b 67 cd 4f ...... G...MKg.O 0350 2c e4 fa 2c 48 50 d4 e2 39 b0 12 b4 5e 88 00 63 ,..,HP..9...^..c 0360 e5 32 20 28 83 c4 87 b7 a4 85 b3 ff 5e 47 48 99 .2 (........^GH. 0370 67 f2 64 fa c7 78 04 83 dc 31 19 24 c8 1b fe ad g.d..x...1.$.... 0380 ff 0e 8f 1b 07 1e 74 fe ec 81 8c 33 1a bf 28 32 ......t....3..(2 0390 4d 8f 53 1e 2f 05 fd 01 bd 8a 0d 52 b0 65 8c 9e M.S./......R.e.. 03a0 29 35 2f 11 7b 9e 72 ab ac 91 e5 40 6e a7 e6 1a )5/.{.r....@n... 03b0 8c 54 da 89 82 42 92 f4 b5 23 4d 36 6d 67 c5 c7 .T...B...#M6mg.. 03c0 e9 58 77 8a fb 93 16 cb 0c af 3c af 59 59 d7 2a .Xw.......<.YY.* 03d0 f3 8d 4f 4a 24 08 d5 fa 34 8c 18 46 b3 a6 f0 64 ..OJ$...4..F...d 03e0 10 49 b0 86 6d 67 fb 59 b4 a9 20 01 f0 68 b0 2f .I..mg.Y.. ..h./ 03f0 08 46 25 41 92 29 22 7e b8 c2 99 fc ff 7e 64 17 .F%A.)"~.....~d. 0400 6f 46 c4 f2 85 b1 df ec 86 65 52 a0 0d 3c a4 83 oF.......eR..<.. 0410 08 cc b9 6d 7b a1 5f 2b 8b 58 7b 6e 7a 26 a2 30 ...m{._+.X{nz&.0 0420 73 f4 cd d0 84 71 ba 13 9f e8 b7 43 d3 c1 7a e7 s....q.....C..z. 0430 89 e9 37 ee 47 1c 55 d6 56 65 7b 83 25 49 3d d7 ..7.G.U.Ve{.%I=. 0440 e5 ec 4e 35 a9 31 8f c2 cb a4 9e e7 18 96 d1 99 ..N5.1.......... 0450 82 8b 6d 4d c7 5e 63 08 1f 76 ..mM.^c..v No. Time Source Destination Protocol Length Info 13137 169.577901 192.168.20.3 192.168.10.224 TCP 103 5666 > 46651 [FIN, PSH, ACK] Seq=1406 Ack=1311 Win=64225 Len=37 TSval=18493453 TSecr=72422520 Frame 13137: 103 bytes on wire (824 bits), 103 bytes captured (824 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_42:b9:dc (00:21:9b:42:b9:dc) Internet Protocol Version 4, Src: 192.168.20.3 (192.168.20.3), Dst: 192.168.10.224 (192.168.10.224) Transmission Control Protocol, Src Port: 5666 (5666), Dst Port: 46651 (46651), Seq: 1406, Ack: 1311, Len: 37 Data (37 bytes) 0000 15 03 01 00 20 31 bb b6 d8 e7 5c 2c 50 57 6c 80 .... 1....\,PWl. 0010 d9 e4 83 5d 2c 6a 82 ee cb 3c 04 bb bc 89 c2 d7 ...],j...<...... 0020 ec 67 6e 7e 39 .gn~9 No. Time Source Destination Protocol Length Info 13138 169.577934 192.168.10.224 192.168.20.3 TCP 66 46651 > 5666 [ACK] Seq=1311 Ack=1444 Win=9216 Len=0 TSval=72422847 TSecr=18493453 Frame 13138: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.224 (192.168.10.224), Dst: 192.168.20.3 (192.168.20.3) Transmission Control Protocol, Src Port: 46651 (46651), Dst Port: 5666 (5666), Seq: 1311, Ack: 1444, Len: 0 No. Time Source Destination Protocol Length Info 13139 169.577960 192.168.10.224 192.168.20.3 TCP 103 46651 > 5666 [PSH, ACK] Seq=1311 Ack=1444 Win=9216 Len=37 TSval=72422847 TSecr=18493453 Frame 13139: 103 bytes on wire (824 bits), 103 bytes captured (824 bits) Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.224 (192.168.10.224), Dst: 192.168.20.3 (192.168.20.3) Transmission Control Protocol, Src Port: 46651 (46651), Dst Port: 5666 (5666), Seq: 1311, Ack: 1444, Len: 37 Data (37 bytes) 0000 15 03 01 00 20 53 b5 f2 b8 82 7c 0d 20 4a 0c 7b .... S....|. J.{ 0010 24 75 12 f0 b7 65 27 85 02 2f dc 5c be 3f bd 5c $u...e'../.\.?.\ 0020 fb bb 45 50 f3 ..EP. No. Time Source Destination Protocol Length Info 13140 169.577982 192.168.10.224 192.168.20.3 TCP 66 46651 > 5666 [RST, ACK] Seq=1348 Ack=1444 Win=9216 Len=0 TSval=72422848 TSecr=18493453 Frame 13140: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.224 (192.168.10.224), Dst: 192.168.20.3 (192.168.20.3) Transmission Control Protocol, Src Port: 46651 (46651), Dst Port: 5666 (5666), Seq: 1348, Ack: 1444, Len: 0 No. Time Source Destination Protocol Length Info 13141 169.578990 192.168.10.46 192.168.10.245 Syslog 209 LOCAL4.INFO: Oct 03 2011 19:17:50 ciscoasa : %ASA-6-302014: Teardown TCP connection 54 for dmz1:WebServer/5666 to inside:Groundwork/46651 duration 0:00:00 bytes 2789 TCP FINs\n Frame 13141: 209 bytes on wire (1672 bits), 209 bytes captured (1672 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.INFO: Oct 03 2011 19:17:50 ciscoasa : %ASA-6-302014: Teardown TCP connection 54 for dmz1:WebServer/5666 to inside:Groundwork/46651 duration 0:00:00 bytes 2789 TCP FINs\n No. Time Source Destination Protocol Length Info 13142 169.617705 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 13142: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12307, Ack: 902117, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13143 169.617755 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=902117 Ack=12349 Win=46447 Len=0 Frame 13143: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 902117, Ack: 12349, Len: 0 No. Time Source Destination Protocol Length Info 13144 169.785835 208.67.222.222 192.168.10.220 DNS 91 Standard query response, No such name Frame 13144: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 51143 (51143) Domain Name System (response) No. Time Source Destination Protocol Length Info 13145 169.817584 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.201? Tell 192.168.10.32 Frame 13145: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13146 169.817613 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.201? Tell 192.168.10.32 Frame 13146: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13147 169.831395 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 112204032, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13147: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13148 169.831414 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 112204032, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13148: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13149 169.831427 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 112204032, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13149: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13150 169.831439 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 112204032, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13150: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13151 169.849579 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-17.geo.kaspersky.com Frame 13151: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 65222 (65222), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13152 169.849652 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1981284608, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13152: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13153 169.849663 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1981284608, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13153: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13154 169.849671 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1981284608, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13154: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13155 169.849678 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1981284608, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13155: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13156 169.890525 192.168.10.220 208.67.222.222 DNS 91 Standard query A cloudns.in.dnsbl7.mailshell.net Frame 13156: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 50138 (50138), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13157 169.890593 192.168.10.220 208.67.222.222 DNS 93 Standard query A 169.25.150.121.rbl7.mailshell.net Frame 13157: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 55522 (55522), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13158 169.930749 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 13158: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13159 169.930789 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 13159: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13160 169.951020 208.67.222.222 192.168.10.220 DNS 107 Standard query response A 127.0.0.190 Frame 13160: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 50138 (50138) Domain Name System (response) No. Time Source Destination Protocol Length Info 13161 169.951093 208.67.222.222 192.168.10.220 DNS 109 Standard query response A 127.0.0.100 Frame 13161: 109 bytes on wire (872 bits), 109 bytes captured (872 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 55522 (55522) Domain Name System (response) No. Time Source Destination Protocol Length Info 13162 169.995969 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 12974#1] 9428 > smtp [ACK] Seq=473857 Ack=7057 Win=46699 Len=0 Frame 13162: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 473857, Ack: 7057, Len: 0 No. Time Source Destination Protocol Length Info 13163 169.996002 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=7057 Ack=473808 Win=0 Len=0 Frame 13163: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7057, Ack: 473808, Len: 0 No. Time Source Destination Protocol Length Info 13164 170.158937 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=7057 Ack=473808 Win=49138 Len=0 Frame 13164: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7057, Ack: 473808, Len: 0 No. Time Source Destination Protocol Length Info 13165 170.158972 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 13164#1] smtp > 9428 [ACK] Seq=7057 Ack=473808 Win=49138 Len=0 Frame 13165: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7057, Ack: 473808, Len: 0 No. Time Source Destination Protocol Length Info 13166 170.159007 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13166: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 473857, Ack: 7057, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13167 170.159037 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13167: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 475237, Ack: 7057, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13168 170.159066 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13168: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 476617, Ack: 7057, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13169 170.159096 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13169: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 477997, Ack: 7057, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13170 170.159126 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13170: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 479377, Ack: 7057, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13171 170.159155 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13171: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 480757, Ack: 7057, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13172 170.159188 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13172: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 482137, Ack: 7057, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13173 170.159218 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13173: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 483517, Ack: 7057, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13174 170.159253 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 13164#2] smtp > 9428 [ACK] Seq=7057 Ack=473808 Win=49138 Len=0 Frame 13174: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7057, Ack: 473808, Len: 0 No. Time Source Destination Protocol Length Info 13175 170.159291 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 13164#3] smtp > 9428 [ACK] Seq=7057 Ack=473808 Win=49138 Len=0 Frame 13175: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7057, Ack: 473808, Len: 0 No. Time Source Destination Protocol Length Info 13176 170.159319 206.225.164.188 192.168.10.207 SMTP 103 [TCP Fast Retransmission] C: DATA fragment, 49 bytes Frame 13176: 103 bytes on wire (824 bits), 103 bytes captured (824 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 473808, Ack: 7057, Len: 49 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13177 170.159348 192.168.10.207 206.225.164.188 SMTP 222 S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 13177: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7057, Ack: 473808, Len: 168 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13178 170.159376 206.225.164.188 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 13178: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 473857, Ack: 7057, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13179 170.159405 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=484897 Ack=7225 Win=46615 Len=0 Frame 13179: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 484897, Ack: 7225, Len: 0 No. Time Source Destination Protocol Length Info 13180 170.159433 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 13177#1] smtp > 9428 [ACK] Seq=7225 Ack=473808 Win=49138 Len=0 Frame 13180: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7225, Ack: 473808, Len: 0 No. Time Source Destination Protocol Length Info 13181 170.159461 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 13177#2] smtp > 9428 [ACK] Seq=7225 Ack=473808 Win=49138 Len=0 Frame 13181: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7225, Ack: 473808, Len: 0 No. Time Source Destination Protocol Length Info 13182 170.159489 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 13177#3] smtp > 9428 [ACK] Seq=7225 Ack=473808 Win=49138 Len=0 Frame 13182: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7225, Ack: 473808, Len: 0 No. Time Source Destination Protocol Length Info 13183 170.159517 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 13177#4] smtp > 9428 [ACK] Seq=7225 Ack=473808 Win=49138 Len=0 Frame 13183: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7225, Ack: 473808, Len: 0 No. Time Source Destination Protocol Length Info 13184 170.159545 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 13177#5] smtp > 9428 [ACK] Seq=7225 Ack=473808 Win=49138 Len=0 Frame 13184: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7225, Ack: 473808, Len: 0 No. Time Source Destination Protocol Length Info 13185 170.159577 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 13177#6] smtp > 9428 [ACK] Seq=7225 Ack=473808 Win=49138 Len=0 Frame 13185: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7225, Ack: 473808, Len: 0 No. Time Source Destination Protocol Length Info 13186 170.159605 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=7225 Ack=484897 Win=38049 Len=0 Frame 13186: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7225, Ack: 484897, Len: 0 No. Time Source Destination Protocol Length Info 13187 170.159633 206.225.164.188 192.168.10.207 SMTP 408 C: DATA fragment, 354 bytes Frame 13187: 408 bytes on wire (3264 bits), 408 bytes captured (3264 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 484897, Ack: 7225, Len: 354 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13188 170.159661 206.225.164.188 192.168.10.207 SMTP 119 C: DATA fragment, 65 bytes Frame 13188: 119 bytes on wire (952 bits), 119 bytes captured (952 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 485251, Ack: 7225, Len: 65 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13189 170.159690 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13189: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 485316, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13190 170.159720 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13190: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 486696, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13191 170.159749 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=7225 Ack=485316 Win=37630 Len=0 Frame 13191: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7225, Ack: 485316, Len: 0 No. Time Source Destination Protocol Length Info 13192 170.159778 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13192: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 488076, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13193 170.159807 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13193: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 489456, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13194 170.159837 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13194: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 490836, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13195 170.159867 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13195: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 492216, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13196 170.159897 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13196: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 493596, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13197 170.159926 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13197: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 494976, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13198 170.159961 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=7225 Ack=489456 Win=33490 Len=0 Frame 13198: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7225, Ack: 489456, Len: 0 No. Time Source Destination Protocol Length Info 13199 170.159989 206.225.164.188 192.168.10.207 SMTP 1133 C: DATA fragment, 1079 bytes Frame 13199: 1133 bytes on wire (9064 bits), 1133 bytes captured (9064 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 496356, Ack: 7225, Len: 1079 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13200 170.160019 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13200: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 497435, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13201 170.160048 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13201: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 498815, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13202 170.160077 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=7225 Ack=496356 Win=26590 Len=0 Frame 13202: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7225, Ack: 496356, Len: 0 No. Time Source Destination Protocol Length Info 13203 170.160105 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13203: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 500195, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13204 170.160134 206.225.164.188 192.168.10.207 SMTP 192 C: DATA fragment, 138 bytes Frame 13204: 192 bytes on wire (1536 bits), 192 bytes captured (1536 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 501575, Ack: 7225, Len: 138 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13205 170.160163 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13205: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 501713, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13206 170.160192 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13206: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 503093, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13207 170.160221 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=7225 Ack=500195 Win=22751 Len=0 Frame 13207: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7225, Ack: 500195, Len: 0 No. Time Source Destination Protocol Length Info 13208 170.160258 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13208: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 504473, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13209 170.160288 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13209: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 505853, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13210 170.160317 206.225.164.188 192.168.10.207 SMTP 1296 C: DATA fragment, 1242 bytes Frame 13210: 1296 bytes on wire (10368 bits), 1296 bytes captured (10368 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 507233, Ack: 7225, Len: 1242 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13211 170.160347 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=7225 Ack=501713 Win=21233 Len=0 Frame 13211: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7225, Ack: 501713, Len: 0 No. Time Source Destination Protocol Length Info 13212 170.160375 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13212: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 508475, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13213 170.160403 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=7225 Ack=505853 Win=17093 Len=0 Frame 13213: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7225, Ack: 505853, Len: 0 No. Time Source Destination Protocol Length Info 13214 170.160431 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13214: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 509855, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13215 170.160461 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13215: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 511235, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13216 170.160489 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=7225 Ack=508475 Win=14471 Len=0 Frame 13216: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7225, Ack: 508475, Len: 0 No. Time Source Destination Protocol Length Info 13217 170.160517 206.225.164.188 192.168.10.207 SMTP 660 C: DATA fragment, 606 bytes Frame 13217: 660 bytes on wire (5280 bits), 660 bytes captured (5280 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 512615, Ack: 7225, Len: 606 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13218 170.160551 206.225.164.188 192.168.10.207 SMTP 1357 C: DATA fragment, 1303 bytes Frame 13218: 1357 bytes on wire (10856 bits), 1357 bytes captured (10856 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 513221, Ack: 7225, Len: 1303 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13219 170.160580 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13219: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 514524, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13220 170.160609 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=7225 Ack=511235 Win=11711 Len=0 Frame 13220: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7225, Ack: 511235, Len: 0 No. Time Source Destination Protocol Length Info 13221 170.160637 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13221: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 515904, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13222 170.160667 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13222: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 517284, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13223 170.160697 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13223: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 518664, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13224 170.160726 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13224: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 520044, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13225 170.160755 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13225: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 521424, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13226 170.160784 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13226: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 522804, Ack: 7225, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13227 170.160813 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=7225 Ack=513221 Win=9725 Len=0 Frame 13227: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7225, Ack: 513221, Len: 0 No. Time Source Destination Protocol Length Info 13228 170.160840 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=7225 Ack=522804 Win=142 Len=0 Frame 13228: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7225, Ack: 522804, Len: 0 No. Time Source Destination Protocol Length Info 13229 170.286340 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=7225 Ack=522946 Win=0 Len=0 Frame 13229: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7225, Ack: 522946, Len: 0 No. Time Source Destination Protocol Length Info 13230 170.287762 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 13230: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12349, Ack: 902117, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13231 170.287796 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=902117 Ack=12391 Win=46426 Len=0 Frame 13231: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 902117, Ack: 12391, Len: 0 No. Time Source Destination Protocol Length Info 13232 170.717321 192.168.10.203 117.200.227.161 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 13232: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 117.200.227.161 (117.200.227.161) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 13233 170.847063 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 128981248, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13233: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13234 170.847087 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 128981248, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13234: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13235 170.847099 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 128981248, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13235: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13236 170.847111 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 128981248, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13236: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13237 170.848927 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-17.geo.kaspersky.com Frame 13237: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 65222 (65222), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13238 170.864169 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 4 Port 48 TTL = 120 Frame 13238: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 13239 170.865268 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1998061824, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13239: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13240 170.865288 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 1998061824, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13240: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13241 170.865301 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1998061824, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13241: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13242 170.865313 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 1998061824, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13242: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13243 170.931269 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 13243: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13244 170.931304 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 13244: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13245 171.108724 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 13245: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12391, Ack: 902117, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13246 171.108772 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=902117 Ack=12433 Win=46405 Len=0 Frame 13246: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 902117, Ack: 12433, Len: 0 No. Time Source Destination Protocol Length Info 13247 171.164896 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 13247: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7225, Ack: 522946, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13248 171.164930 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=524184 Ack=7267 Win=46594 Len=0 Frame 13248: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 524184, Ack: 7267, Len: 0 No. Time Source Destination Protocol Length Info 13249 171.164961 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=7267 Ack=522946 Win=0 Len=0 Frame 13249: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7267, Ack: 522946, Len: 0 No. Time Source Destination Protocol Length Info 13250 171.194161 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 13250: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13251 171.315506 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 13251: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13252 171.420894 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 13252: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13253 171.420924 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 13253: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13254 171.443710 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 13254: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13255 171.566203 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 13255: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13256 171.849009 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-17.geo.kaspersky.com Frame 13256: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 65222 (65222), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13257 171.862856 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 145758464, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13257: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13258 171.862880 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 145758464, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13258: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13259 171.862892 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 145758464, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13259: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13260 171.862904 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 145758464, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13260: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13261 171.881245 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2014839040, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13261: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13262 171.881267 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2014839040, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13262: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13263 171.881280 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2014839040, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13263: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13264 171.881292 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2014839040, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13264: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13265 171.936233 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 13265: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13266 171.936265 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 13266: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13267 172.013703 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 13267: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12433, Ack: 902117, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13268 172.013741 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=902117 Ack=12475 Win=46384 Len=0 Frame 13268: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 902117, Ack: 12475, Len: 0 No. Time Source Destination Protocol Length Info 13269 172.216953 192.168.10.203 117.200.227.161 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 13269: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 117.200.227.161 (117.200.227.161) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 13270 172.319785 Dell_44:d0:a0 Broadcast ARP 60 Gratuitous ARP for 192.168.0.120 (Reply) Frame 13270: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:a0 (84:2b:2b:44:d0:a0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply/gratuitous ARP) No. Time Source Destination Protocol Length Info 13271 172.319817 Dell_44:d0:a0 Broadcast ARP 60 Gratuitous ARP for 192.168.0.120 (Reply) Frame 13271: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:a0 (84:2b:2b:44:d0:a0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply/gratuitous ARP) No. Time Source Destination Protocol Length Info 13272 172.422359 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 13272: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13273 172.422392 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 13273: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13274 172.537007 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 13274: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13275 172.537038 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 13275: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13276 172.622582 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 13276: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12475, Ack: 902117, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13277 172.622620 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=902117 Ack=12517 Win=46363 Len=0 Frame 13277: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 902117, Ack: 12517, Len: 0 No. Time Source Destination Protocol Length Info 13278 172.623922 Watchgua_3c:4c:d8 Dell_39:5d:dd ARP 60 Who has 192.168.10.207? Tell 192.168.10.1 Frame 13278: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13279 172.623937 Dell_39:5d:dd Watchgua_3c:4c:d8 ARP 60 192.168.10.207 is at 00:18:8b:39:5d:dd Frame 13279: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13280 172.643274 192.168.10.220 208.67.220.220 DNS 85 Standard query PTR 3.14.217.124.in-addr.arpa Frame 13280: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.220.220 (208.67.220.220) User Datagram Protocol, Src Port: 54534 (54534), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13281 172.643296 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.22? Tell 192.168.10.220 Frame 13281: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13282 172.643324 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.22? Tell 192.168.10.220 Frame 13282: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13283 172.643338 Dell_ad:25:f8 Intel_38:8d:0a ARP 64 Who has 192.168.10.66? Tell 192.168.10.220 Frame 13283: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13284 172.643349 Dell_ad:25:f8 Intel_89:5e:11 ARP 64 Who has 192.168.10.65? Tell 192.168.10.220 Frame 13284: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13285 172.643359 Intel_38:8d:0a Dell_ad:25:f6 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 13285: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13286 172.643369 Intel_89:5e:11 Dell_ad:25:f8 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 13286: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13287 172.643379 Dell_ad:25:f8 Intel_a5:f5:5b ARP 64 Who has 192.168.10.131? Tell 192.168.10.220 Frame 13287: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13288 172.643389 Dell_ad:25:f8 Intel_38:8c:64 ARP 64 Who has 192.168.10.67? Tell 192.168.10.220 Frame 13288: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13289 172.643404 Dell_ad:25:f8 Intel_02:0e:6d ARP 64 Who has 192.168.10.128? Tell 192.168.10.220 Frame 13289: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13290 172.643414 Intel_a5:f5:5b Dell_ad:25:f8 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 13290: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13291 172.643424 Dell_ad:25:f8 IntelCor_d3:4e:80 ARP 64 Who has 192.168.10.70? Tell 192.168.10.220 Frame 13291: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13292 172.643434 Intel_38:8c:64 Dell_ad:25:f6 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 13292: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13293 172.643445 Dell_ad:25:f8 Intel_d0:7a:8f ARP 64 Who has 192.168.10.68? Tell 192.168.10.220 Frame 13293: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13294 172.643455 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.142? Tell 192.168.10.220 Frame 13294: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13295 172.643465 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.233? Tell 192.168.10.220 Frame 13295: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13296 172.643475 Intel_02:0e:6d Dell_ad:25:f6 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 13296: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13297 172.643485 IntelCor_d3:4e:80 Dell_ad:25:f8 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 13297: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13298 172.643498 Dell_ad:25:f8 Intel_56:83:a5 ARP 64 Who has 192.168.10.59? Tell 192.168.10.220 Frame 13298: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13299 172.643509 Intel_d0:7a:8f Dell_ad:25:f8 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 13299: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13300 172.643519 Dell_ad:25:f8 Intel_38:8c:b1 ARP 64 Who has 192.168.10.138? Tell 192.168.10.220 Frame 13300: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13301 172.643529 Dell_ad:25:f8 Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.220 Frame 13301: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13302 172.643539 Intel_56:83:a5 Dell_ad:25:f6 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 13302: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13303 172.643549 Intel_38:8c:b1 Dell_ad:25:f6 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 13303: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13304 172.643562 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 13304: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13305 172.643600 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.142 is at 00:0f:34:04:98:91 Frame 13305: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13306 172.643612 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 13306: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13307 172.878346 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 162535680, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13307: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13308 172.878371 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 162535680, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13308: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13309 172.878384 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 162535680, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13309: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13310 172.878397 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 162535680, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13310: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13311 172.896536 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2031616256, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13311: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13312 172.896568 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2031616256, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13312: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13313 172.896582 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2031616256, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13313: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13314 172.896594 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2031616256, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13314: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13315 173.072159 192.168.10.31 192.168.20.3 UDP 663 Source port: 50764 Destination port: apc-3052 Frame 13315: 663 bytes on wire (5304 bits), 663 bytes captured (5304 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (621 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 44 54 3d 31 30 .168.10.31.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 31 39 3a 35 /03/2011.TM=19:5 0040 31 3a 31 34 0a 53 52 3d 31 30 37 43 0a 53 55 3d 1:14.SR=107C.SU= 0050 32 44 38 32 46 39 41 31 0a 52 44 3d 38 36 31 42 2D82F9A1.RD=861B 0060 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 30 2e 33 .TA=192.168.20.3 0070 0a 50 54 3d 33 30 35 32 0a 43 4c 3d 43 30 41 38 .PT=3052.CL=C0A8 0080 30 41 44 39 0a 43 4c 3d 43 30 41 38 30 41 43 44 0AD9.CL=C0A80ACD 0090 0a 43 4c 3d 43 30 41 38 30 41 44 38 0a 43 4c 3d .CL=C0A80AD8.CL= 00a0 43 30 41 38 30 41 44 42 0a 43 4c 3d 43 30 41 38 C0A80ADB.CL=C0A8 00b0 30 41 44 30 0a 43 4c 3d 43 30 41 38 30 41 43 42 0AD0.CL=C0A80ACB 00c0 0a 43 4c 3d 43 30 41 38 30 41 43 43 0a 43 4c 3d .CL=C0A80ACC.CL= 00d0 43 30 41 38 30 41 43 45 0a 43 4c 3d 43 30 41 38 C0A80ACE.CL=C0A8 00e0 30 41 44 43 0a 43 4c 3d 43 30 41 38 30 41 43 46 0ADC.CL=C0A80ACF 00f0 0a 43 4c 3d 43 30 41 38 30 41 46 30 0a 43 4c 3d .CL=C0A80AF0.CL= 0100 43 30 41 38 30 41 43 39 0a 43 4c 3d 43 30 41 38 C0A80AC9.CL=C0A8 0110 30 41 31 30 0a 43 4c 3d 43 30 41 38 30 41 30 44 0A10.CL=C0A80A0D 0120 0a 43 4c 3d 43 30 41 38 30 41 30 46 0a 43 4c 3d .CL=C0A80A0F.CL= 0130 43 30 41 38 30 41 30 43 0a 43 4c 3d 43 30 41 38 C0A80A0C.CL=C0A8 0140 30 41 44 31 0a 43 4c 3d 43 30 41 38 30 41 43 41 0AD1.CL=C0A80ACA 0150 0a 43 4c 3d 43 30 41 38 30 41 46 41 0a 43 4c 3d .CL=C0A80AFA.CL= 0160 43 30 41 38 30 41 32 37 0a 43 4c 3d 43 30 41 38 C0A80A27.CL=C0A8 0170 30 41 44 33 0a 43 4c 3d 43 30 41 38 30 41 44 32 0AD3.CL=C0A80AD2 0180 0a 43 4c 3d 43 30 41 38 30 41 45 32 0a 43 4c 3d .CL=C0A80AE2.CL= 0190 43 30 41 38 30 41 45 33 0a 43 4c 3d 43 30 41 38 C0A80AE3.CL=C0A8 01a0 30 41 44 45 0a 43 4c 3d 43 30 41 38 31 34 30 33 0ADE.CL=C0A81403 01b0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01c0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 01d0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01e0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01f0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0200 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0210 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0220 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0230 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0240 0a 4d 44 3d 64 31 34 37 38 63 34 66 33 31 36 61 .MD=d1478c4f316a 0250 38 66 38 31 39 37 35 64 30 30 38 65 33 63 65 39 8f81975d008e3ce9 0260 66 33 38 61 0a 3c 2f 42 4f 44 59 3e 0a f38a.</BODY>. No. Time Source Destination Protocol Length Info 13316 173.072259 192.168.10.31 192.168.20.3 UDP 663 Source port: 50764 Destination port: apc-3052 Frame 13316: 663 bytes on wire (5304 bits), 663 bytes captured (5304 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (621 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 44 54 3d 31 30 .168.10.31.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 31 39 3a 35 /03/2011.TM=19:5 0040 31 3a 31 34 0a 53 52 3d 31 30 37 43 0a 53 55 3d 1:14.SR=107C.SU= 0050 32 44 38 32 46 39 41 31 0a 52 44 3d 38 36 31 42 2D82F9A1.RD=861B 0060 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 30 2e 33 .TA=192.168.20.3 0070 0a 50 54 3d 33 30 35 32 0a 43 4c 3d 43 30 41 38 .PT=3052.CL=C0A8 0080 30 41 44 39 0a 43 4c 3d 43 30 41 38 30 41 43 44 0AD9.CL=C0A80ACD 0090 0a 43 4c 3d 43 30 41 38 30 41 44 38 0a 43 4c 3d .CL=C0A80AD8.CL= 00a0 43 30 41 38 30 41 44 42 0a 43 4c 3d 43 30 41 38 C0A80ADB.CL=C0A8 00b0 30 41 44 30 0a 43 4c 3d 43 30 41 38 30 41 43 42 0AD0.CL=C0A80ACB 00c0 0a 43 4c 3d 43 30 41 38 30 41 43 43 0a 43 4c 3d .CL=C0A80ACC.CL= 00d0 43 30 41 38 30 41 43 45 0a 43 4c 3d 43 30 41 38 C0A80ACE.CL=C0A8 00e0 30 41 44 43 0a 43 4c 3d 43 30 41 38 30 41 43 46 0ADC.CL=C0A80ACF 00f0 0a 43 4c 3d 43 30 41 38 30 41 46 30 0a 43 4c 3d .CL=C0A80AF0.CL= 0100 43 30 41 38 30 41 43 39 0a 43 4c 3d 43 30 41 38 C0A80AC9.CL=C0A8 0110 30 41 31 30 0a 43 4c 3d 43 30 41 38 30 41 30 44 0A10.CL=C0A80A0D 0120 0a 43 4c 3d 43 30 41 38 30 41 30 46 0a 43 4c 3d .CL=C0A80A0F.CL= 0130 43 30 41 38 30 41 30 43 0a 43 4c 3d 43 30 41 38 C0A80A0C.CL=C0A8 0140 30 41 44 31 0a 43 4c 3d 43 30 41 38 30 41 43 41 0AD1.CL=C0A80ACA 0150 0a 43 4c 3d 43 30 41 38 30 41 46 41 0a 43 4c 3d .CL=C0A80AFA.CL= 0160 43 30 41 38 30 41 32 37 0a 43 4c 3d 43 30 41 38 C0A80A27.CL=C0A8 0170 30 41 44 33 0a 43 4c 3d 43 30 41 38 30 41 44 32 0AD3.CL=C0A80AD2 0180 0a 43 4c 3d 43 30 41 38 30 41 45 32 0a 43 4c 3d .CL=C0A80AE2.CL= 0190 43 30 41 38 30 41 45 33 0a 43 4c 3d 43 30 41 38 C0A80AE3.CL=C0A8 01a0 30 41 44 45 0a 43 4c 3d 43 30 41 38 31 34 30 33 0ADE.CL=C0A81403 01b0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01c0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 01d0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01e0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01f0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0200 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0210 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0220 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0230 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0240 0a 4d 44 3d 64 31 34 37 38 63 34 66 33 31 36 61 .MD=d1478c4f316a 0250 38 66 38 31 39 37 35 64 30 30 38 65 33 63 65 39 8f81975d008e3ce9 0260 66 33 38 61 0a 3c 2f 42 4f 44 59 3e 0a f38a.</BODY>. No. Time Source Destination Protocol Length Info 13317 173.072361 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:17:53 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS2/50764 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 13317: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:17:53 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS2/50764 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 13318 173.076034 Watchgua_3c:4c:d8 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.1 Frame 13318: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13319 173.076049 Cisco_bb:96:6d Watchgua_3c:4c:d8 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 13319: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13320 173.194223 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 13320: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13321 173.217455 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 13321: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12517, Ack: 902117, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13322 173.217490 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=902117 Ack=12559 Win=46342 Len=0 Frame 13322: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 902117, Ack: 12559, Len: 0 No. Time Source Destination Protocol Length Info 13323 173.315625 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 13323: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13324 173.419085 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 13324: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13325 173.419117 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 13325: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13326 173.443764 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 13326: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13327 173.566283 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 13327: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13328 173.812855 192.168.10.32 192.168.20.3 UDP 774 Source port: 38302 Destination port: apc-3052 Frame 13328: 774 bytes on wire (6192 bits), 774 bytes captured (6192 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (732 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 38 3a 35 35 0a 53 52 3d 30 31 31 =20:58:55.SR=011 0060 35 45 37 0a 53 55 3d 32 42 32 38 0a 52 44 3d 46 5E7.SU=2B28.RD=F 0070 33 44 31 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 3D1.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 0a 34 8.7E=00.3E=002.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 38 2e 30 C=207.3.50=038.0 00c0 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 31 2f .43=028.5.78=11/ 00d0 31 39 2f 30 37 0a 36 41 3d 30 30 35 31 3a 0a 34 19/07.6A=0051:.4 00e0 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 4e 0a 7=S.63=UPS_IDEN. 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 37 34 0.38=00.6E=IS074 0120 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 31 2f 6005481 .6D=11/ 0130 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 2d 55 19/07.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 58 4c 20 20 PS RT 10000 XL 0150 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d 32 30 .46=60.00.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 35 3d 7.3.4E=205.9.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 3d 31 00.42=217.0.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 30 2e 30 0a 32 46 3d 31 34 2e 38 35 C=030.0.2F=14.85 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 35 39 2e 39 37 3b 32 30 37 2e 33 0.09=59.97;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 0a 49 9=0.I0=2.I1=00.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a 49 38 5=0.I6=0.I7=0.I8 0250 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 0a 49 =Int Contact 1.I 0260 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e 74 61 9=0.IA=Int Conta 0270 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 6e 74 ct 2.IB=0.IC=Int 0280 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 3d 43 Relay.ID=0.SH=C 0290 37 38 44 46 30 44 35 34 42 36 35 33 34 30 36 31 78DF0D54B6534061 02a0 36 31 32 31 42 43 38 42 45 33 41 42 34 34 43 0a 6121BC8BE3AB44C. 02b0 4d 44 3d 34 37 63 62 35 32 35 33 66 64 34 39 64 MD=47cb5253fd49d 02c0 64 34 37 35 36 38 32 35 64 32 37 38 35 32 63 64 d4756825d27852cd 02d0 61 31 30 0a 3c 2f 42 4f 44 59 3e 0a a10.</BODY>. No. Time Source Destination Protocol Length Info 13329 173.812939 192.168.10.32 192.168.20.3 UDP 774 Source port: 38302 Destination port: apc-3052 Frame 13329: 774 bytes on wire (6192 bits), 774 bytes captured (6192 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (732 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 38 3a 35 35 0a 53 52 3d 30 31 31 =20:58:55.SR=011 0060 35 45 37 0a 53 55 3d 32 42 32 38 0a 52 44 3d 46 5E7.SU=2B28.RD=F 0070 33 44 31 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 3D1.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 0a 34 8.7E=00.3E=002.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 38 2e 30 C=207.3.50=038.0 00c0 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 31 2f .43=028.5.78=11/ 00d0 31 39 2f 30 37 0a 36 41 3d 30 30 35 31 3a 0a 34 19/07.6A=0051:.4 00e0 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 4e 0a 7=S.63=UPS_IDEN. 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 37 34 0.38=00.6E=IS074 0120 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 31 2f 6005481 .6D=11/ 0130 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 2d 55 19/07.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 58 4c 20 20 PS RT 10000 XL 0150 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d 32 30 .46=60.00.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 35 3d 7.3.4E=205.9.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 3d 31 00.42=217.0.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 30 2e 30 0a 32 46 3d 31 34 2e 38 35 C=030.0.2F=14.85 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 35 39 2e 39 37 3b 32 30 37 2e 33 0.09=59.97;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 0a 49 9=0.I0=2.I1=00.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a 49 38 5=0.I6=0.I7=0.I8 0250 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 0a 49 =Int Contact 1.I 0260 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e 74 61 9=0.IA=Int Conta 0270 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 6e 74 ct 2.IB=0.IC=Int 0280 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 3d 43 Relay.ID=0.SH=C 0290 37 38 44 46 30 44 35 34 42 36 35 33 34 30 36 31 78DF0D54B6534061 02a0 36 31 32 31 42 43 38 42 45 33 41 42 34 34 43 0a 6121BC8BE3AB44C. 02b0 4d 44 3d 34 37 63 62 35 32 35 33 66 64 34 39 64 MD=47cb5253fd49d 02c0 64 34 37 35 36 38 32 35 64 32 37 38 35 32 63 64 d4756825d27852cd 02d0 61 31 30 0a 3c 2f 42 4f 44 59 3e 0a a10.</BODY>. No. Time Source Destination Protocol Length Info 13330 173.813019 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:17:54 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS3/38302 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 13330: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:17:54 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS3/38302 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 13331 173.848995 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-17.geo.kaspersky.com Frame 13331: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 65222 (65222), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13332 173.849185 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-17.geo.kaspersky.com Frame 13332: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 65222 (65222), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13333 173.855236 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 43.67.186.188.in-addr.arpa Frame 13333: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 54049 (54049), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13334 173.894095 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 179312896, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13334: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13335 173.894118 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 179312896, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13335: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13336 173.894131 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 179312896, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13336: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13337 173.894143 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 179312896, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13337: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13338 173.912172 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2048393472, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13338: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13339 173.912204 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2048393472, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13339: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13340 173.912217 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2048393472, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13340: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13341 173.912229 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2048393472, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13341: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13342 173.927152 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 13342: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13343 173.927183 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 13343: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13344 173.948212 208.67.220.220 192.168.10.220 DNS 136 Standard query response PTR 3-14-217.124.adsl-pool.digitelone.com Frame 13344: 136 bytes on wire (1088 bits), 136 bytes captured (1088 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.220.220 (208.67.220.220), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 54534 (54534) Domain Name System (response) No. Time Source Destination Protocol Length Info 13345 173.951067 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 13345: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12559, Ack: 902117, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13346 173.951099 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=902117 Ack=12601 Win=46321 Len=0 Frame 13346: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 902117, Ack: 12601, Len: 0 No. Time Source Destination Protocol Length Info 13347 173.952048 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 Who has 192.168.10.220? Tell 192.168.10.1 Frame 13347: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13348 173.952062 Dell_ad:25:f6 Watchgua_3c:4c:d8 ARP 60 192.168.10.220 is at 00:22:19:ad:25:f6 Frame 13348: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13349 174.190325 65.32.1.65 192.168.10.246 DNS 133 Standard query response PTR net67.186.188-43.tmn.ertelecom.ru Frame 13349: 133 bytes on wire (1064 bits), 133 bytes captured (1064 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 54049 (54049) Domain Name System (response) No. Time Source Destination Protocol Length Info 13350 174.192080 Watchgua_3c:4c:d8 Dell_44:d0:9e ARP 60 Who has 192.168.10.246? Tell 192.168.10.1 Frame 13350: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13351 174.192094 Dell_44:d0:9e Watchgua_3c:4c:d8 ARP 60 192.168.10.246 is at 84:2b:2b:44:d0:9e Frame 13351: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13352 174.334456 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 236.9.175.178.in-addr.arpa Frame 13352: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 63861 (63861), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13353 174.559318 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 13353: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12601, Ack: 902117, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13354 174.559356 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=902117 Ack=12643 Win=46300 Len=0 Frame 13354: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 902117, Ack: 12643, Len: 0 No. Time Source Destination Protocol Length Info 13355 174.585117 65.32.1.65 192.168.10.246 DNS 146 Standard query response, No such name Frame 13355: 146 bytes on wire (1168 bits), 146 bytes captured (1168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 63861 (63861) Domain Name System (response) No. Time Source Destination Protocol Length Info 13356 174.585717 192.168.10.203 178.175.9.236 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 13356: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 178.175.9.236 (178.175.9.236) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 13357 174.744251 64.239.246.16 192.168.10.207 TCP 60 http > 4857 [FIN, ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 13357: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: 4857 (4857), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 13358 174.744380 192.168.10.207 64.239.246.16 TCP 60 4857 > http [ACK] Seq=1 Ack=2 Win=65535 Len=0 Frame 13358: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: 4857 (4857), Dst Port: http (80), Seq: 1, Ack: 2, Len: 0 No. Time Source Destination Protocol Length Info 13359 174.744483 192.168.10.1 192.168.10.245 Syslog 232 LOCAL1.INFO: Oct 3 19:47:12 MyFirewall http-proxy[2015]: Deny 1-Trusted 0-External tcp 192.168.10.207 64.239.246.16 4857 80 msg="ProxyDeny: HTTP Client request timeout" (HTTP-proxy.endusers-00) Frame 13359: 232 bytes on wire (1856 bits), 232 bytes captured (1856 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:47:12 MyFirewall http-proxy[2015]: Deny 1-Trusted 0-External tcp 192.168.10.207 64.239.246.16 4857 80 msg="ProxyDeny: HTTP Client request timeout" (HTTP-proxy.endusers-00) No. Time Source Destination Protocol Length Info 13360 174.748071 Watchgua_3c:4c:d8 SunrichT_19:cf:97 ARP 60 Who has 192.168.10.245? Tell 192.168.10.1 Frame 13360: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13361 174.748085 SunrichT_19:cf:97 Watchgua_3c:4c:d8 ARP 60 192.168.10.245 is at 00:0a:cd:19:cf:97 Frame 13361: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:97 (00:0a:cd:19:cf:97), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13362 174.909581 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 196090112, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13362: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13363 174.909605 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 196090112, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13363: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13364 174.909618 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 196090112, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13364: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13365 174.909630 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 196090112, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13365: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13366 174.927932 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2065170688, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13366: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13367 174.927955 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2065170688, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13367: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13368 174.927968 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2065170688, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13368: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13369 174.927980 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2065170688, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13369: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13370 175.025806 116.202.71.110 192.168.10.207 TCP 62 36559 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 13370: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 116.202.71.110 (116.202.71.110), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 36559 (36559), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 13371 175.025884 192.168.10.207 116.202.71.110 TCP 62 smtp > 36559 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 13371: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 116.202.71.110 (116.202.71.110) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 36559 (36559), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 13372 175.166158 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 13372: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12643, Ack: 902117, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13373 175.166193 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=902117 Ack=12685 Win=46279 Len=0 Frame 13373: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 902117, Ack: 12685, Len: 0 No. Time Source Destination Protocol Length Info 13374 175.194071 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 13374: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13375 175.313434 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.73? Tell 192.168.10.226 Frame 13375: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13376 175.313469 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.73? Tell 192.168.10.226 Frame 13376: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13377 175.313485 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 13377: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13378 175.313495 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 13378: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13379 175.313516 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 13379: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13380 175.313526 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 13380: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13381 175.313536 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 13381: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13382 175.313556 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 13382: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13383 175.313667 192.168.10.46 192.168.10.245 Syslog 214 LOCAL4.WARNING: Oct 03 2011 19:17:55 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n Frame 13383: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:17:55 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n No. Time Source Destination Protocol Length Info 13384 175.313680 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 13384: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13385 175.313691 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 13385: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13386 175.313701 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 13386: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13387 175.313719 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 13387: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13388 175.313754 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 13388: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13389 175.313765 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 13389: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13390 175.313775 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 13390: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13391 175.313799 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 13391: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13392 175.313810 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 13392: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13393 175.313820 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 13393: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13394 175.313830 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 13394: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13395 175.313841 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 13395: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13396 175.313851 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 13396: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13397 175.313861 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 13397: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13398 175.313871 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 13398: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13399 175.313881 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 13399: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13400 175.313891 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 13400: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13401 175.313901 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 13401: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13402 175.313912 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 13402: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13403 175.313922 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 13403: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13404 175.313932 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 13404: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13405 175.313942 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 13405: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13406 175.313952 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 13406: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13407 175.313962 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 13407: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13408 175.313973 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 13408: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13409 175.313989 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 13409: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13410 175.314003 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 13410: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13411 175.314014 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 13411: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13412 175.314024 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 13412: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13413 175.314044 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 13413: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13414 175.314054 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 13414: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13415 175.314064 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 13415: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13416 175.314074 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 13416: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13417 175.314084 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 13417: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13418 175.314094 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 13418: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13419 175.314105 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 13419: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13420 175.314114 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 13420: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13421 175.314125 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 13421: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13422 175.316979 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 13422: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13423 175.426116 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 13423: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13424 175.426148 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 13424: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13425 175.443912 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 13425: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13426 175.445724 116.202.71.110 192.168.10.207 TCP 60 36559 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 13426: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 116.202.71.110 (116.202.71.110), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 36559 (36559), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 13427 175.445810 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:47:13 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 116.202.71.110 7x.x.x.3 36559 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 13427: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:47:13 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 116.202.71.110 7x.x.x.3 36559 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 13428 175.445845 192.168.10.207 116.202.71.110 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:46:48 -0400 Frame 13428: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 116.202.71.110 (116.202.71.110) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 36559 (36559), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13429 175.445886 116.202.71.110 192.168.10.207 TCP 60 36559 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 13429: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 116.202.71.110 (116.202.71.110), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 36559 (36559), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 13430 175.566298 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 13430: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13431 175.776529 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 13431: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12685, Ack: 902117, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13432 175.776564 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=902117 Ack=12727 Win=46258 Len=0 Frame 13432: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 902117, Ack: 12727, Len: 0 No. Time Source Destination Protocol Length Info 13433 175.776597 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=12727 Ack=902117 Win=15021 Len=0 Frame 13433: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12727, Ack: 902117, Len: 0 No. Time Source Destination Protocol Length Info 13434 175.776625 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 13433#1] smtp > 23308 [ACK] Seq=12727 Ack=902117 Win=15021 Len=0 Frame 13434: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12727, Ack: 902117, Len: 0 No. Time Source Destination Protocol Length Info 13435 175.776656 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13435: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 902117, Ack: 12727, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13436 175.776687 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13436: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 903497, Ack: 12727, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13437 175.776720 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13437: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 904877, Ack: 12727, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13438 175.776749 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13438: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 906257, Ack: 12727, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13439 175.776779 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13439: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 907637, Ack: 12727, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13440 175.776809 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13440: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 909017, Ack: 12727, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13441 175.776841 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13441: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 910397, Ack: 12727, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13442 175.776872 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12727 Ack=909017 Win=8121 Len=0 Frame 13442: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12727, Ack: 909017, Len: 0 No. Time Source Destination Protocol Length Info 13443 175.776904 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13443: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 911777, Ack: 12727, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13444 175.776936 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13444: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 913157, Ack: 12727, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13445 175.776965 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13445: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 914537, Ack: 12727, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13446 175.776997 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13446: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 915917, Ack: 12727, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13447 175.777025 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12727 Ack=911777 Win=5361 Len=0 Frame 13447: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12727, Ack: 911777, Len: 0 No. Time Source Destination Protocol Length Info 13448 175.777069 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=12727 Ack=917138 Win=0 Len=0 Frame 13448: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12727, Ack: 917138, Len: 0 No. Time Source Destination Protocol Length Info 13449 175.859504 116.202.71.110 192.168.10.207 SMTP 72 C: HELO darkedition Frame 13449: 72 bytes on wire (576 bits), 72 bytes captured (576 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 116.202.71.110 (116.202.71.110), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 36559 (36559), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 18 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13450 175.859545 192.168.10.207 116.202.71.110 SMTP 103 S: 250 mail.mydomain.com Hello [116.202.71.110] Frame 13450: 103 bytes on wire (824 bits), 103 bytes captured (824 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 116.202.71.110 (116.202.71.110) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 36559 (36559), Seq: 122, Ack: 19, Len: 49 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13451 175.859584 116.202.71.110 192.168.10.207 TCP 60 36559 > smtp [ACK] Seq=19 Ack=171 Win=93270 Len=0 Frame 13451: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 116.202.71.110 (116.202.71.110), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 36559 (36559), Dst Port: smtp (25), Seq: 19, Ack: 171, Len: 0 No. Time Source Destination Protocol Length Info 13452 175.925332 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 212867328, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13452: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13453 175.925356 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 212867328, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13453: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13454 175.925369 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 212867328, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13454: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13455 175.925381 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 212867328, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13455: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13456 175.925393 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 13456: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13457 175.925413 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 13457: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13458 175.943414 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2081947904, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13458: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13459 175.943448 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2081947904, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13459: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13460 175.943461 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2081947904, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13460: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13461 175.943473 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2081947904, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13461: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13462 175.996172 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 13248#1] 9428 > smtp [ACK] Seq=524184 Ack=7267 Win=46594 Len=0 Frame 13462: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 524184, Ack: 7267, Len: 0 No. Time Source Destination Protocol Length Info 13463 175.996207 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=7267 Ack=522946 Win=0 Len=0 Frame 13463: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7267, Ack: 522946, Len: 0 No. Time Source Destination Protocol Length Info 13464 176.085286 192.168.10.203 178.175.9.236 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 13464: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 178.175.9.236 (178.175.9.236) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 13465 176.435406 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 13465: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12727, Ack: 917138, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13466 176.435441 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=917297 Ack=12769 Win=46237 Len=0 Frame 13466: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 917297, Ack: 12769, Len: 0 No. Time Source Destination Protocol Length Info 13467 176.435472 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=12769 Ack=917138 Win=0 Len=0 Frame 13467: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12769, Ack: 917138, Len: 0 No. Time Source Destination Protocol Length Info 13468 176.940786 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 229644544, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13468: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13469 176.940810 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 229644544, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13469: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13470 176.940823 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 229644544, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13470: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13471 176.940836 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 229644544, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13471: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13472 176.959161 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2098725120, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13472: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13473 176.959184 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2098725120, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13473: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13474 176.959197 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2098725120, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13474: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13475 176.959209 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2098725120, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13475: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13476 177.194202 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 13476: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13477 177.225703 WwPcbaTe_6d:76:3c Broadcast ARP 60 Who has 192.168.10.25? Tell 192.168.10.201 Frame 13477: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13478 177.225735 WwPcbaTe_6d:76:3c Broadcast ARP 60 Who has 192.168.10.25? Tell 192.168.10.201 Frame 13478: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13479 177.225750 WwPcbaTe_6d:76:3c Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.201 Frame 13479: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13480 177.225764 Watchgua_3c:4c:d8 WwPcbaTe_6d:76:3c ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 13480: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13481 177.225774 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 13481: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13482 177.225789 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 13482: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13483 177.315605 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 13483: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13484 177.415373 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 13484: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13485 177.415404 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 13485: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13486 177.443896 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 13486: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13487 177.566297 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 13487: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13488 177.585124 192.168.10.203 178.175.9.236 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 13488: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 178.175.9.236 (178.175.9.236) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 13489 177.827066 192.168.10.207 206.225.164.186 SMTP 180 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 13489: 180 bytes on wire (1440 bits), 180 bytes captured (1440 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12727, Ack: 917138, Len: 126 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13490 177.827103 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=917297 Ack=12853 Win=46195 Len=0 Frame 13490: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 917297, Ack: 12853, Len: 0 No. Time Source Destination Protocol Length Info 13491 177.827222 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=12853 Ack=917138 Win=0 Len=0 Frame 13491: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12853, Ack: 917138, Len: 0 No. Time Source Destination Protocol Length Info 13492 177.848890 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-17.geo.kaspersky.com Frame 13492: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 65222 (65222), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13493 177.849030 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-17.geo.kaspersky.com Frame 13493: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 65222 (65222), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13494 177.930932 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 13494: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13495 177.930962 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 13495: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13496 177.956380 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 246421760, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13496: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13497 177.956400 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 246421760, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13497: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13498 177.956412 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 246421760, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13498: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13499 177.956424 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 246421760, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13499: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13500 177.974574 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2115502336, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13500: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13501 177.974590 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2115502336, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13501: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13502 177.974601 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2115502336, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13502: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13503 177.974614 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2115502336, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13503: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13504 178.253317 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=12853 Ack=917138 Win=50514 Len=0 Frame 13504: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12853, Ack: 917138, Len: 0 No. Time Source Destination Protocol Length Info 13505 178.253338 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 13504#1] smtp > 23308 [ACK] Seq=12853 Ack=917138 Win=50514 Len=0 Frame 13505: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12853, Ack: 917138, Len: 0 No. Time Source Destination Protocol Length Info 13506 178.253408 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13506: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 917297, Ack: 12853, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13507 178.253425 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13507: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 918677, Ack: 12853, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13508 178.253445 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13508: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 920057, Ack: 12853, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13509 178.253462 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13509: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 921437, Ack: 12853, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13510 178.253479 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13510: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 922817, Ack: 12853, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13511 178.253496 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13511: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 924197, Ack: 12853, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13512 178.253513 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13512: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 925577, Ack: 12853, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13513 178.253532 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 13504#2] smtp > 23308 [ACK] Seq=12853 Ack=917138 Win=50514 Len=0 Frame 13513: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12853, Ack: 917138, Len: 0 No. Time Source Destination Protocol Length Info 13514 178.253548 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 13504#3] smtp > 23308 [ACK] Seq=12853 Ack=917138 Win=50514 Len=0 Frame 13514: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12853, Ack: 917138, Len: 0 No. Time Source Destination Protocol Length Info 13515 178.253564 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 13515: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12853, Ack: 917138, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13516 178.253580 206.225.164.186 192.168.10.207 SMTP 213 [TCP Out-Of-Order] C: DATA fragment, 159 bytes Frame 13516: 213 bytes on wire (1704 bits), 213 bytes captured (1704 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 917138, Ack: 12853, Len: 159 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13517 178.253598 206.225.164.186 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 13517: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 917297, Ack: 12853, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13518 178.253614 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=926957 Ack=12895 Win=46174 Len=0 Frame 13518: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 926957, Ack: 12895, Len: 0 No. Time Source Destination Protocol Length Info 13519 178.253631 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 13515#1] smtp > 23308 [ACK] Seq=12895 Ack=917138 Win=50514 Len=0 Frame 13519: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12895, Ack: 917138, Len: 0 No. Time Source Destination Protocol Length Info 13520 178.253647 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 13515#2] smtp > 23308 [ACK] Seq=12895 Ack=917138 Win=50514 Len=0 Frame 13520: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12895, Ack: 917138, Len: 0 No. Time Source Destination Protocol Length Info 13521 178.253662 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 13515#3] smtp > 23308 [ACK] Seq=12895 Ack=917138 Win=50514 Len=0 Frame 13521: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12895, Ack: 917138, Len: 0 No. Time Source Destination Protocol Length Info 13522 178.253679 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 13515#4] smtp > 23308 [ACK] Seq=12895 Ack=917138 Win=50514 Len=0 Frame 13522: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12895, Ack: 917138, Len: 0 No. Time Source Destination Protocol Length Info 13523 178.253695 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 13515#5] smtp > 23308 [ACK] Seq=12895 Ack=917138 Win=50514 Len=0 Frame 13523: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12895, Ack: 917138, Len: 0 No. Time Source Destination Protocol Length Info 13524 178.253720 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12895 Ack=926957 Win=40695 Len=0 Frame 13524: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12895, Ack: 926957, Len: 0 No. Time Source Destination Protocol Length Info 13525 178.253784 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13525: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 926957, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13526 178.253804 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13526: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 928337, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13527 178.253820 206.225.164.186 192.168.10.207 SMTP 387 C: DATA fragment, 333 bytes Frame 13527: 387 bytes on wire (3096 bits), 387 bytes captured (3096 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 929717, Ack: 12895, Len: 333 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13528 178.253837 206.225.164.186 192.168.10.207 SMTP 587 C: DATA fragment, 533 bytes Frame 13528: 587 bytes on wire (4696 bits), 587 bytes captured (4696 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 930050, Ack: 12895, Len: 533 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13529 178.253855 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13529: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 930583, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13530 178.253872 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13530: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 931963, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13531 178.253889 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13531: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 933343, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13532 178.253908 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13532: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 934723, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13533 178.253925 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13533: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 936103, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13534 178.253941 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12895 Ack=930583 Win=37069 Len=0 Frame 13534: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12895, Ack: 930583, Len: 0 No. Time Source Destination Protocol Length Info 13535 178.253965 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12895 Ack=934723 Win=32929 Len=0 Frame 13535: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12895, Ack: 934723, Len: 0 No. Time Source Destination Protocol Length Info 13536 178.253983 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13536: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 937483, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13537 178.254001 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13537: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 938863, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13538 178.254018 206.225.164.186 192.168.10.207 SMTP 901 C: DATA fragment, 847 bytes Frame 13538: 901 bytes on wire (7208 bits), 901 bytes captured (7208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 940243, Ack: 12895, Len: 847 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13539 178.254036 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12895 Ack=937483 Win=30169 Len=0 Frame 13539: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12895, Ack: 937483, Len: 0 No. Time Source Destination Protocol Length Info 13540 178.254053 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13540: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 941090, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13541 178.254071 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13541: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 942470, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13542 178.254089 206.225.164.186 192.168.10.207 SMTP 1247 C: DATA fragment, 1193 bytes Frame 13542: 1247 bytes on wire (9976 bits), 1247 bytes captured (9976 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 943850, Ack: 12895, Len: 1193 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13543 178.254106 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12895 Ack=941090 Win=26562 Len=0 Frame 13543: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12895, Ack: 941090, Len: 0 No. Time Source Destination Protocol Length Info 13544 178.254123 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13544: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 945043, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13545 178.254140 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13545: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 946423, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13546 178.254158 206.225.164.186 192.168.10.207 SMTP 770 C: DATA fragment, 716 bytes Frame 13546: 770 bytes on wire (6160 bits), 770 bytes captured (6160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 947803, Ack: 12895, Len: 716 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13547 178.254175 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12895 Ack=945043 Win=22609 Len=0 Frame 13547: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12895, Ack: 945043, Len: 0 No. Time Source Destination Protocol Length Info 13548 178.254193 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13548: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 948519, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13549 178.254210 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13549: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 949899, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13550 178.254227 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12895 Ack=947803 Win=19849 Len=0 Frame 13550: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12895, Ack: 947803, Len: 0 No. Time Source Destination Protocol Length Info 13551 178.254244 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13551: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 951279, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13552 178.254263 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13552: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 952659, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13553 178.254281 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13553: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 954039, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13554 178.254298 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12895 Ack=949899 Win=17753 Len=0 Frame 13554: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12895, Ack: 949899, Len: 0 No. Time Source Destination Protocol Length Info 13555 178.254315 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13555: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 955419, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13556 178.254333 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13556: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 956799, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13557 178.254350 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13557: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 958179, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13558 178.254367 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12895 Ack=954039 Win=13613 Len=0 Frame 13558: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12895, Ack: 954039, Len: 0 No. Time Source Destination Protocol Length Info 13559 178.254385 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13559: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 959559, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13560 178.254402 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13560: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 960939, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13561 178.254418 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12895 Ack=958179 Win=9473 Len=0 Frame 13561: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12895, Ack: 958179, Len: 0 No. Time Source Destination Protocol Length Info 13562 178.254436 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13562: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 962319, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13563 178.254453 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12895 Ack=960939 Win=6713 Len=0 Frame 13563: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12895, Ack: 960939, Len: 0 No. Time Source Destination Protocol Length Info 13564 178.254469 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13564: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 963699, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13565 178.254487 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13565: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 965079, Ack: 12895, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13566 178.254504 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12895 Ack=963699 Win=3953 Len=0 Frame 13566: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12895, Ack: 963699, Len: 0 No. Time Source Destination Protocol Length Info 13567 178.254608 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=12895 Ack=966459 Win=1193 Len=0 Frame 13567: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12895, Ack: 966459, Len: 0 No. Time Source Destination Protocol Length Info 13568 178.868311 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 13568: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12895, Ack: 966459, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13569 178.868348 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=966459 Ack=12937 Win=46153 Len=0 Frame 13569: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 966459, Ack: 12937, Len: 0 No. Time Source Destination Protocol Length Info 13570 178.972042 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 263198976, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13570: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13571 178.972067 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 263198976, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13571: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13572 178.972080 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 263198976, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13572: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13573 178.972092 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 263198976, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13573: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13574 178.990469 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2132279552, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13574: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13575 178.990489 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2132279552, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13575: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13576 178.990503 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2132279552, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13576: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13577 178.990515 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2132279552, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13577: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13578 179.101151 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 13578: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13579 179.101179 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 13579: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13580 179.110834 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 97.210.131.27.in-addr.arpa Frame 13580: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 64220 (64220), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13581 179.153082 116.202.71.110 192.168.10.207 SMTP 98 C: MAIL FROM: <ebresignation@xxxxxxxxxxxx> Frame 13581: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 116.202.71.110 (116.202.71.110), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 36559 (36559), Dst Port: smtp (25), Seq: 19, Ack: 171, Len: 44 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13582 179.153329 192.168.10.207 116.202.71.110 SMTP 108 S: 250 2.1.0 [email protected] OK Frame 13582: 108 bytes on wire (864 bits), 108 bytes captured (864 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 116.202.71.110 (116.202.71.110) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 36559 (36559), Seq: 171, Ack: 63, Len: 54 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13583 179.153377 116.202.71.110 192.168.10.207 TCP 60 36559 > smtp [ACK] Seq=63 Ack=225 Win=93216 Len=0 Frame 13583: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 116.202.71.110 (116.202.71.110), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 36559 (36559), Dst Port: smtp (25), Seq: 63, Ack: 225, Len: 0 No. Time Source Destination Protocol Length Info 13584 179.196720 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 13584: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13585 179.315628 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 13585: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13586 179.413697 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 13586: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13587 179.413729 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 13587: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13588 179.443802 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 13588: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13589 179.474998 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 13589: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12937, Ack: 966459, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13590 179.475033 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=966459 Ack=12979 Win=46132 Len=0 Frame 13590: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 966459, Ack: 12979, Len: 0 No. Time Source Destination Protocol Length Info 13591 179.565858 192.168.10.1 192.168.10.245 Syslog 313 LOCAL1.INFO: Oct 3 19:47:17 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 116.202.71.110 7x.x.x.3 36559 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="ebresignation@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 13591: 313 bytes on wire (2504 bits), 313 bytes captured (2504 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:47:17 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 116.202.71.110 7x.x.x.3 36559 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 13592 179.566216 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 13592: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13593 179.921759 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 13593: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13594 179.921790 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 13594: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13595 179.987747 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 279976192, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13595: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13596 179.987771 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 279976192, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13596: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13597 179.987784 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 279976192, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13597: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13598 179.987796 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 279976192, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13598: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13599 180.005797 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2149056768, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13599: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13600 180.005818 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2149056768, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13600: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13601 180.005830 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2149056768, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13601: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13602 180.005842 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2149056768, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13602: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13603 180.013183 116.202.71.110 192.168.10.207 TCP 60 36559 > smtp [FIN, ACK] Seq=63 Ack=225 Win=93216 Len=0 Frame 13603: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 116.202.71.110 (116.202.71.110), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 36559 (36559), Dst Port: smtp (25), Seq: 63, Ack: 225, Len: 0 No. Time Source Destination Protocol Length Info 13604 180.013218 192.168.10.207 116.202.71.110 TCP 60 smtp > 36559 [ACK] Seq=225 Ack=64 Win=65473 Len=0 Frame 13604: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 116.202.71.110 (116.202.71.110) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 36559 (36559), Seq: 225, Ack: 64, Len: 0 No. Time Source Destination Protocol Length Info 13605 180.013315 192.168.10.207 116.202.71.110 TCP 60 smtp > 36559 [FIN, ACK] Seq=225 Ack=64 Win=65473 Len=0 Frame 13605: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 116.202.71.110 (116.202.71.110) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 36559 (36559), Seq: 225, Ack: 64, Len: 0 No. Time Source Destination Protocol Length Info 13606 180.013358 116.202.71.110 192.168.10.207 TCP 60 36559 > smtp [ACK] Seq=64 Ack=226 Win=93216 Len=0 Frame 13606: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 116.202.71.110 (116.202.71.110), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 36559 (36559), Dst Port: smtp (25), Seq: 64, Ack: 226, Len: 0 No. Time Source Destination Protocol Length Info 13607 180.013617 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:47:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 116.202.71.110 7x.x.x.3 36559 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 13607: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:47:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 116.202.71.110 7x.x.x.3 36559 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 13608 180.079594 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 13608: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 12979, Ack: 966459, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13609 180.079628 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=966459 Ack=13021 Win=46111 Len=0 Frame 13609: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 966459, Ack: 13021, Len: 0 No. Time Source Destination Protocol Length Info 13610 180.110647 192.168.10.220 208.67.222.222 DNS 86 Standard query PTR 97.210.131.27.in-addr.arpa Frame 13610: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 59474 (59474), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13611 180.155617 208.67.222.222 192.168.10.220 DNS 86 Standard query response, No such name Frame 13611: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 59474 (59474) Domain Name System (response) No. Time Source Destination Protocol Length Info 13612 180.156225 192.168.10.203 27.131.210.97 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 13612: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 27.131.210.97 (27.131.210.97) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 13613 180.505049 IntelCor_ed:1c:1c Broadcast ARP 60 Who has 192.168.10.216? Tell 192.168.10.225 Frame 13613: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1c:1c (00:13:20:ed:1c:1c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13614 180.505080 IntelCor_ed:1c:1c Broadcast ARP 60 Who has 192.168.10.216? Tell 192.168.10.225 Frame 13614: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1c:1c (00:13:20:ed:1c:1c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13615 181.003334 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 296753408, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13615: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13616 181.003358 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 296753408, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13616: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13617 181.003371 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 296753408, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13617: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13618 181.003384 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 296753408, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13618: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13619 181.018920 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 13619: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13021, Ack: 966459, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13620 181.018955 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=966459 Ack=13063 Win=46090 Len=0 Frame 13620: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 966459, Ack: 13063, Len: 0 No. Time Source Destination Protocol Length Info 13621 181.021773 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2165833984, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13621: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13622 181.021794 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2165833984, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13622: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13623 181.021807 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2165833984, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13623: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13624 181.021819 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2165833984, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13624: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13625 181.095282 Dell_54:71:54 Broadcast ARP 60 Who has 192.168.10.224? Tell 192.168.10.227 Frame 13625: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_54:71:54 (00:26:b9:54:71:54), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13626 181.095313 Dell_54:71:54 Broadcast ARP 60 Who has 192.168.10.224? Tell 192.168.10.227 Frame 13626: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_54:71:54 (00:26:b9:54:71:54), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13627 181.095328 Dell_54:71:54 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.227 Frame 13627: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_54:71:54 (00:26:b9:54:71:54), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13628 181.095339 Dell_54:71:54 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.227 Frame 13628: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_54:71:54 (00:26:b9:54:71:54), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13629 181.095350 Dell_54:71:54 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.227 Frame 13629: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_54:71:54 (00:26:b9:54:71:54), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13630 181.095360 Dell_54:71:54 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.227 Frame 13630: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_54:71:54 (00:26:b9:54:71:54), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13631 181.095374 Dell_54:71:54 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.227 Frame 13631: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_54:71:54 (00:26:b9:54:71:54), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13632 181.095385 Dell_54:71:54 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.227 Frame 13632: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_54:71:54 (00:26:b9:54:71:54), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13633 181.095395 Watchgua_3c:4c:d8 Dell_54:71:54 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 13633: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_54:71:54 (00:26:b9:54:71:54) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13634 181.095406 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 13634: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13635 181.095420 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 13635: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13636 181.095861 192.168.10.233 192.168.10.245 Syslog 178 LOCAL4.WARNING: :Oct 03 19:39:06 EDT: %PIX-session-4-405001: Received ARP request collision from 192.168.10.227/0026.b954.7156 on interface Inside\n Frame 13636: 178 bytes on wire (1424 bits), 178 bytes captured (1424 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.233 (192.168.10.233), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: :Oct 03 19:39:06 EDT: %PIX-session-4-405001: Received ARP request collision from 192.168.10.227/0026.b954.7156 on interface Inside\n No. Time Source Destination Protocol Length Info 13637 181.194234 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 13637: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13638 181.212995 192.168.10.208 192.168.10.255 NBNS 92 Name query NB ZEUS<20> Frame 13638: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.208 (192.168.10.208), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 13639 181.213233 192.168.10.208 192.168.10.255 NBNS 92 Name query NB ZEUS<20> Frame 13639: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.208 (192.168.10.208), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 13640 181.247145 192.168.10.207 206.225.164.188 SMTP 516 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 13640: 516 bytes on wire (4128 bits), 516 bytes captured (4128 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7225, Ack: 522946, Len: 462 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13641 181.247183 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=524184 Ack=7687 Win=46384 Len=0 Frame 13641: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 524184, Ack: 7687, Len: 0 No. Time Source Destination Protocol Length Info 13642 181.247245 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=7687 Ack=522946 Win=0 Len=0 Frame 13642: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7687, Ack: 522946, Len: 0 No. Time Source Destination Protocol Length Info 13643 181.315813 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 13643: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13644 181.419964 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 13644: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13645 181.419995 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 13645: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13646 181.443835 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 13646: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13647 181.561622 192.168.10.30 192.168.20.3 UDP 762 Source port: 34427 Destination port: apc-3052 Frame 13647: 762 bytes on wire (6096 bits), 762 bytes captured (6096 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (720 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 36 3a 35 36 0a 53 52 3d 31 42 0a =18:46:56.SR=1B. 0060 53 55 3d 37 42 31 33 33 32 37 44 0a 52 44 3d 39 SU=7B13327D.RD=9 0070 42 34 31 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 B41.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 0a 34 8.7E=00.3E=001.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 2e 30 C=207.3.50=040.0 00c0 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 37 2f .43=025.2.78=07/ 00d0 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 0a 34 25/06.6A=0023:.4 00e0 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 20 0a 7=S.63=BAI_UPS . 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 36 33 0.38=00.6E=NS063 0120 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 37 2f 1005398 .6D=07/ 0130 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 2d 55 25/06.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 52 4d 20 58 PS RT 10000 RM X 0150 4c 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d 32 30 L.46=60.00.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 35 3d 7.3.4E=204.4.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 3d 31 00.42=218.1.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e 34 37 C=034.0.2F=16.47 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 2e 33 0.09=60.00;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 0a 49 9=0.I0=2.I1=26.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a 49 38 5=0.I6=0.I7=1.I8 0250 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 0a 49 =Device 1.I9=0.I 0260 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d 30 0a A=Device 2.IB=0. 0270 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 30 0a IC=Relay 1.ID=0. 0280 53 48 3d 39 41 30 32 46 32 41 32 41 43 35 44 32 SH=9A02F2A2AC5D2 0290 38 43 35 41 43 42 44 43 44 35 35 35 35 32 35 32 8C5ACBDCD5555252 02a0 34 33 32 0a 4d 44 3d 38 31 64 30 62 64 33 38 61 432.MD=81d0bd38a 02b0 30 66 34 30 64 62 33 35 36 30 61 63 38 37 64 31 0f40db3560ac87d1 02c0 34 37 35 63 66 61 61 0a 3c 2f 42 4f 44 59 3e 0a 475cfaa.</BODY>. No. Time Source Destination Protocol Length Info 13648 181.561705 192.168.10.30 192.168.20.3 UDP 762 Source port: 34427 Destination port: apc-3052 Frame 13648: 762 bytes on wire (6096 bits), 762 bytes captured (6096 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (720 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 36 3a 35 36 0a 53 52 3d 31 42 0a =18:46:56.SR=1B. 0060 53 55 3d 37 42 31 33 33 32 37 44 0a 52 44 3d 39 SU=7B13327D.RD=9 0070 42 34 31 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 B41.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 0a 34 8.7E=00.3E=001.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 2e 30 C=207.3.50=040.0 00c0 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 37 2f .43=025.2.78=07/ 00d0 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 0a 34 25/06.6A=0023:.4 00e0 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 20 0a 7=S.63=BAI_UPS . 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 36 33 0.38=00.6E=NS063 0120 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 37 2f 1005398 .6D=07/ 0130 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 2d 55 25/06.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 52 4d 20 58 PS RT 10000 RM X 0150 4c 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d 32 30 L.46=60.00.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 35 3d 7.3.4E=204.4.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 3d 31 00.42=218.1.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e 34 37 C=034.0.2F=16.47 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 2e 33 0.09=60.00;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 0a 49 9=0.I0=2.I1=26.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a 49 38 5=0.I6=0.I7=1.I8 0250 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 0a 49 =Device 1.I9=0.I 0260 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d 30 0a A=Device 2.IB=0. 0270 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 30 0a IC=Relay 1.ID=0. 0280 53 48 3d 39 41 30 32 46 32 41 32 41 43 35 44 32 SH=9A02F2A2AC5D2 0290 38 43 35 41 43 42 44 43 44 35 35 35 35 32 35 32 8C5ACBDCD5555252 02a0 34 33 32 0a 4d 44 3d 38 31 64 30 62 64 33 38 61 432.MD=81d0bd38a 02b0 30 66 34 30 64 62 33 35 36 30 61 63 38 37 64 31 0f40db3560ac87d1 02c0 34 37 35 63 66 61 61 0a 3c 2f 42 4f 44 59 3e 0a 475cfaa.</BODY>. No. Time Source Destination Protocol Length Info 13649 181.561794 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:18:02 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS1/34427 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 13649: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:18:02 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS1/34427 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 13650 181.566229 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 13650: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13651 181.627482 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 13651: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13063, Ack: 966459, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13652 181.627520 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=966459 Ack=13105 Win=46069 Len=0 Frame 13652: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 966459, Ack: 13105, Len: 0 No. Time Source Destination Protocol Length Info 13653 181.655599 192.168.10.203 27.131.210.97 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 13653: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 27.131.210.97 (27.131.210.97) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 13654 181.829020 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 13654: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13655 181.829055 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 13655: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13656 181.829252 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 13656: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13657 181.829266 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 13657: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13658 181.829279 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 13658: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13659 181.829289 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 13659: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13660 181.829373 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 13660: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13661 181.829387 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 13661: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13662 181.829627 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 13662: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13663 181.829640 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 13663: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13664 181.829651 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 13664: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13665 181.829664 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 13665: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13666 181.829687 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 13666: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13667 181.829724 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 13667: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13668 181.829735 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 13668: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13669 181.829746 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 13669: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13670 181.829773 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 13670: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13671 181.829783 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 13671: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13672 181.829800 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 13672: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13673 181.829810 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 13673: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13674 181.829821 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 13674: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13675 181.829836 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 13675: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13676 181.829850 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 13676: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13677 181.829860 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 13677: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13678 181.829871 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 13678: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13679 181.829881 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 13679: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13680 181.829891 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 13680: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13681 181.829905 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 13681: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13682 181.829919 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 13682: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13683 181.829929 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 13683: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13684 181.829943 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 13684: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13685 181.829953 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 13685: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13686 181.829963 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 13686: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13687 181.829977 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 13687: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13688 181.829992 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 13688: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13689 181.830002 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 13689: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13690 181.830012 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 13690: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13691 181.830022 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 13691: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13692 181.830032 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 13692: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13693 181.830042 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 13693: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13694 181.830052 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 13694: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13695 181.830062 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 13695: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13696 181.830072 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 13696: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13697 181.830082 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 13697: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13698 181.830097 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 13698: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13699 181.830121 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 13699: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13700 181.830131 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 13700: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13701 181.830323 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 13701: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13702 181.830334 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 13702: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13703 181.830344 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 13703: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13704 181.830354 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 13704: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13705 181.830364 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 13705: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13706 181.830374 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 13706: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13707 181.830389 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 13707: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13708 181.830405 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 13708: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13709 181.830416 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 13709: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13710 181.830466 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 13710: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13711 181.830476 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 13711: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13712 181.830487 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 13712: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13713 181.830497 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 13713: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13714 181.830562 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 13714: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13715 181.830572 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 13715: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13716 181.830585 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 13716: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13717 181.830595 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 13717: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13718 181.830619 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 13718: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13719 181.830628 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 13719: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13720 181.830652 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 13720: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13721 181.830663 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 13721: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13722 181.830680 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 13722: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13723 181.830691 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 13723: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13724 181.830701 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 13724: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13725 181.830712 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 13725: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13726 181.830722 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 13726: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13727 181.830731 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 13727: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13728 181.830741 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 13728: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13729 181.830752 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 13729: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13730 181.830762 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 13730: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13731 181.830772 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 13731: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13732 181.830782 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 13732: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13733 181.830792 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 13733: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13734 181.830802 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 13734: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13735 181.830817 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 13735: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13736 181.830827 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 13736: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13737 181.830837 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 13737: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13738 181.830847 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 13738: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13739 181.830857 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 13739: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13740 181.830867 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 13740: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13741 181.830877 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 13741: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13742 181.830887 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 13742: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13743 181.830897 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 13743: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13744 181.830908 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 13744: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13745 181.830918 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 13745: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13746 181.830928 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 13746: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13747 181.830938 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 13747: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13748 181.830950 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 13748: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13749 181.831214 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 13749: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13750 181.920111 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 13750: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13751 181.920143 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 13751: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13752 181.996302 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 13641#1] 9428 > smtp [ACK] Seq=524184 Ack=7687 Win=46384 Len=0 Frame 13752: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 524184, Ack: 7687, Len: 0 No. Time Source Destination Protocol Length Info 13753 181.996337 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=7687 Ack=522946 Win=0 Len=0 Frame 13753: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7687, Ack: 522946, Len: 0 No. Time Source Destination Protocol Length Info 13754 182.018911 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 313530624, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13754: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13755 182.018935 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 313530624, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13755: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13756 182.018948 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 313530624, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13756: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13757 182.018960 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 313530624, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13757: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13758 182.037227 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2182611200, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13758: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13759 182.037249 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2182611200, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13759: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13760 182.037262 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2182611200, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13760: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13761 182.037273 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2182611200, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13761: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13762 182.233736 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 13762: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13105, Ack: 966459, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13763 182.233771 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=966459 Ack=13147 Win=46048 Len=0 Frame 13763: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 966459, Ack: 13147, Len: 0 No. Time Source Destination Protocol Length Info 13764 182.243320 WwPcbaTe_6d:76:3c Broadcast ARP 60 Who has 192.168.10.27? Tell 192.168.10.201 Frame 13764: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13765 182.243351 WwPcbaTe_6d:76:3c Broadcast ARP 60 Who has 192.168.10.27? Tell 192.168.10.201 Frame 13765: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13766 182.243441 WwPcbaTe_6d:76:3c Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.201 Frame 13766: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13767 182.243479 Watchgua_3c:4c:d8 WwPcbaTe_6d:76:3c ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 13767: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: WwPcbaTe_6d:76:3c (00:0f:1f:6d:76:3c) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13768 182.272731 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.224? Tell 192.168.10.246 Frame 13768: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13769 182.272763 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.224? Tell 192.168.10.246 Frame 13769: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13770 182.384165 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 3 Port 42 TTL = 120 Frame 13770: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 13771 182.732278 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.102? Tell 192.168.10.246 Frame 13771: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13772 182.732310 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.102? Tell 192.168.10.246 Frame 13772: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13773 182.803760 Oracle_86:77:68 Broadcast ARP 60 Gratuitous ARP for 192.168.10.213 (Request) Frame 13773: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13774 182.803792 Oracle_86:77:68 Broadcast ARP 60 Gratuitous ARP for 192.168.10.213 (Request) Frame 13774: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13775 182.864221 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 13775: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13147, Ack: 966459, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13776 182.864257 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=966459 Ack=13189 Win=46720 Len=0 Frame 13776: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 966459, Ack: 13189, Len: 0 No. Time Source Destination Protocol Length Info 13777 183.034578 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 330307840, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13777: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13778 183.034602 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 330307840, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13778: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13779 183.034615 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 330307840, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13779: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13780 183.034627 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 330307840, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13780: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13781 183.052699 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2199388416, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13781: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13782 183.052721 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2199388416, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13782: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13783 183.052733 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2199388416, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13783: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13784 183.052746 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2199388416, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13784: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13785 183.155393 192.168.10.203 27.131.210.97 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 13785: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 27.131.210.97 (27.131.210.97) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 13786 183.194106 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 13786: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13787 183.241362 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 13787: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13788 183.241396 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 13788: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13789 183.241448 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 13789: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13790 183.241460 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 13790: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13791 183.241471 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 13791: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13792 183.241481 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 13792: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13793 183.241495 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 13793: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13794 183.241506 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 13794: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13795 183.241517 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 13795: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13796 183.241527 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 13796: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13797 183.241537 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 13797: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13798 183.241555 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 13798: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13799 183.241590 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 13799: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13800 183.241600 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 13800: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13801 183.241628 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 13801: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13802 183.241639 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 13802: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13803 183.241649 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 13803: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13804 183.241667 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 13804: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13805 183.241677 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 13805: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13806 183.241687 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 13806: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13807 183.241697 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 13807: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13808 183.241707 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 13808: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13809 183.241717 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 13809: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13810 183.241727 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 13810: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13811 183.241738 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 13811: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13812 183.241747 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 13812: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13813 183.241757 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 13813: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13814 183.241768 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 13814: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13815 183.241778 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 13815: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13816 183.241788 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 13816: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13817 183.241798 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 13817: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13818 183.241809 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 13818: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13819 183.241819 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 13819: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13820 183.241829 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 13820: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13821 183.241839 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 13821: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13822 183.241849 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 13822: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13823 183.241859 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 13823: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13824 183.241869 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 13824: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13825 183.241879 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 13825: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13826 183.241890 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 13826: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13827 183.241899 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 13827: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13828 183.241909 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 13828: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13829 183.241919 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 13829: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13830 183.241934 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 13830: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13831 183.315565 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 13831: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13832 183.410442 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 13832: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13833 183.410474 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 13833: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13834 183.443832 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 13834: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13835 183.465063 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 13835: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13189, Ack: 966459, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13836 183.465102 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=966459 Ack=13231 Win=46699 Len=0 Frame 13836: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 966459, Ack: 13231, Len: 0 No. Time Source Destination Protocol Length Info 13837 183.566314 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 13837: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13838 183.735924 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.78? Tell 192.168.10.246 Frame 13838: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13839 183.735959 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.78? Tell 192.168.10.246 Frame 13839: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13840 183.926041 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 13840: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13841 183.926073 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 13841: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13842 183.953345 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.136? Tell 192.168.10.246 Frame 13842: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13843 183.953376 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.136? Tell 192.168.10.246 Frame 13843: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13844 183.967405 192.168.10.184 192.168.10.255 BROWSER 243 Host Announcement KBLACKXP, Workstation, Server, NT Workstation Frame 13844: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_11:24:1c (00:1a:a0:11:24:1c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.184 (192.168.10.184), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 13845 183.967645 192.168.10.184 192.168.10.255 BROWSER 243 Host Announcement KBLACKXP, Workstation, Server, NT Workstation Frame 13845: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_11:24:1c (00:1a:a0:11:24:1c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.184 (192.168.10.184), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 13846 184.050154 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 347085056, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13846: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13847 184.050177 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 347085056, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13847: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13848 184.050190 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 347085056, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13848: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13849 184.050202 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 347085056, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13849: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13850 184.068311 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2216165632, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13850: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13851 184.068333 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2216165632, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13851: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13852 184.068345 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2216165632, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13852: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13853 184.068357 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2216165632, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13853: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13854 184.089941 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 13854: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13231, Ack: 966459, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13855 184.089975 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=966459 Ack=13273 Win=46678 Len=0 Frame 13855: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 966459, Ack: 13273, Len: 0 No. Time Source Destination Protocol Length Info 13856 184.498997 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 13856: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13857 184.499045 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 13857: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13858 184.624183 DellComp_f0:68:fd Broadcast ARP 60 Who has 192.168.10.182? Tell 192.168.10.15 Frame 13858: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: DellComp_f0:68:fd (00:b0:d0:f0:68:fd), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13859 184.624214 DellComp_f0:68:fd Broadcast ARP 60 Who has 192.168.10.182? Tell 192.168.10.15 Frame 13859: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: DellComp_f0:68:fd (00:b0:d0:f0:68:fd), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13860 184.770352 192.168.10.220 208.67.222.222 DNS 87 Standard query PTR 117.213.25.178.in-addr.arpa Frame 13860: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 55955 (55955), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13861 184.852687 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-18.geo.kaspersky.com Frame 13861: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 56679 (56679), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13862 184.861762 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.34? Tell 192.168.10.246 Frame 13862: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13863 184.861794 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.34? Tell 192.168.10.246 Frame 13863: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13864 184.992692 192.168.10.246 65.32.1.70 DNS 86 Standard query PTR 97.210.131.27.in-addr.arpa Frame 13864: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.70 (65.32.1.70) User Datagram Protocol, Src Port: 64220 (64220), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13865 185.065901 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 363862272, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13865: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13866 185.065926 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 363862272, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13866: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13867 185.065938 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 363862272, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13867: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13868 185.065950 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 363862272, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13868: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13869 185.083893 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2232942848, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13869: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13870 185.083916 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2232942848, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13870: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13871 185.083928 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2232942848, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13871: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13872 185.083941 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2232942848, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13872: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13873 185.097985 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 13873: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13273, Ack: 966459, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13874 185.098021 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=966459 Ack=13315 Win=46657 Len=0 Frame 13874: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 966459, Ack: 13315, Len: 0 No. Time Source Destination Protocol Length Info 13875 185.111371 65.32.1.70 192.168.10.246 DNS 175 Standard query response, No such name Frame 13875: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.70 (65.32.1.70), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 64220 (64220) Domain Name System (response) No. Time Source Destination Protocol Length Info 13876 185.168742 208.67.222.222 192.168.10.220 DNS 135 Standard query response PTR 178-25-213-117-dynip.superkabel.de Frame 13876: 135 bytes on wire (1080 bits), 135 bytes captured (1080 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 55955 (55955) Domain Name System (response) No. Time Source Destination Protocol Length Info 13877 185.172912 192.168.10.220 208.67.222.222 DNS 85 Standard query PTR 37.27.234.80.in-addr.arpa Frame 13877: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 60341 (60341), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13878 185.194150 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 13878: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13879 185.315605 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 13879: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13880 185.408356 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 13880: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13881 185.408388 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 13881: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13882 185.443907 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 13882: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13883 185.566306 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 13883: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13884 185.852844 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-18.geo.kaspersky.com Frame 13884: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 56679 (56679), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13885 185.916585 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 13885: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13886 185.916617 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 13886: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13887 185.918432 192.168.10.31 192.168.10.255 UDP 778 Source port: 50764 Destination port: apc-3052 Frame 13887: 778 bytes on wire (6224 bits), 778 bytes captured (6224 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (736 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 35 31 3a 32 37 0a 53 52 3d 31 30 37 =19:51:27.SR=107 0060 43 0a 53 55 3d 32 44 38 32 46 45 38 41 0a 52 44 C.SU=2D82FE8A.RD 0070 3d 46 46 32 31 0a 54 41 3d 31 39 32 2e 31 36 38 =FF21.TA=192.168 0080 2e 31 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d .10.255.UC=1.SD= 0090 30 0a 53 4d 3d 32 0a 34 46 3d 32 30 37 2e 30 0a 0.SM=2.4F=207.0. 00a0 35 31 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 51=08.7E=00.3E=0 00b0 30 32 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 02.4C=207.3.50=0 00c0 33 33 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 33.0.43=029.1.78 00d0 3d 31 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 =11/19/07.6A=005 00e0 37 3a 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 7:.47=S.63=UPS_I 00f0 44 45 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d DEN.66=100.0.58= 0100 4e 4f 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a NO.56=5YW.39=FF. 0110 32 37 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 27=00.38=00.6E=I 0120 53 30 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 S0746005443 .6D 0130 3d 31 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 =11/19/07.01=Sma 0140 72 74 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 rt-UPS RT 10000 0150 58 4c 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 XL .46=60.00.4 0160 44 3d 32 30 37 2e 33 0a 34 45 3d 32 30 37 2e 33 D=207.3.4E=207.3 0170 0a 34 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 .45=336.75=229.6 0180 43 3d 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 C=146.65=00.6F=2 0190 30 38 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 08.71=02.70=020. 01a0 37 32 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 72=000.42=217.0. 01b0 36 37 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 67=192.62=476.17 01c0 2e 57 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 .W.5C=028.0.2F=1 01d0 33 2e 37 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 3.77.16=A.05=000 01e0 30 30 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 00000.09=60.00;2 01f0 30 37 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 07.3.6B=0.81E2=A 0200 55 54 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 UTO .MC=1.E0=0.E 0210 31 3d 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 1=0.E2=0.E3=0.E8 0220 3d 30 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d =0.E9=0.I0=2.I1= 0230 30 30 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 00.I2=01.I3=0.I4 0240 3d 30 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d =0.I5=0.I6=0.I7= 0250 30 0a 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 0.I8=Int Contact 0260 20 31 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 1.I9=0.IA=Int C 0270 6f 6e 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 ontact 2.IB=0.IC 0280 3d 49 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a =Int Relay.ID=0. 0290 53 48 3d 30 46 33 41 34 39 32 35 33 34 43 45 38 SH=0F3A492534CE8 02a0 32 38 36 35 46 31 46 45 34 34 38 36 42 30 42 32 2865F1FE4486B0B2 02b0 45 31 38 0a 4d 44 3d 63 62 66 64 36 33 35 64 64 E18.MD=cbfd635dd 02c0 62 35 66 61 66 62 62 61 63 62 32 35 62 33 37 33 b5fafbbacb25b373 02d0 36 66 34 61 31 36 66 0a 3c 2f 42 4f 44 59 3e 0a 6f4a16f.</BODY>. No. Time Source Destination Protocol Length Info 13888 185.918578 192.168.10.31 192.168.10.255 UDP 778 Source port: 50764 Destination port: apc-3052 Frame 13888: 778 bytes on wire (6224 bits), 778 bytes captured (6224 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (736 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 35 31 3a 32 37 0a 53 52 3d 31 30 37 =19:51:27.SR=107 0060 43 0a 53 55 3d 32 44 38 32 46 45 38 41 0a 52 44 C.SU=2D82FE8A.RD 0070 3d 46 46 32 31 0a 54 41 3d 31 39 32 2e 31 36 38 =FF21.TA=192.168 0080 2e 31 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d .10.255.UC=1.SD= 0090 30 0a 53 4d 3d 32 0a 34 46 3d 32 30 37 2e 30 0a 0.SM=2.4F=207.0. 00a0 35 31 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 51=08.7E=00.3E=0 00b0 30 32 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 02.4C=207.3.50=0 00c0 33 33 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 33.0.43=029.1.78 00d0 3d 31 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 =11/19/07.6A=005 00e0 37 3a 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 7:.47=S.63=UPS_I 00f0 44 45 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d DEN.66=100.0.58= 0100 4e 4f 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a NO.56=5YW.39=FF. 0110 32 37 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 27=00.38=00.6E=I 0120 53 30 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 S0746005443 .6D 0130 3d 31 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 =11/19/07.01=Sma 0140 72 74 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 rt-UPS RT 10000 0150 58 4c 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 XL .46=60.00.4 0160 44 3d 32 30 37 2e 33 0a 34 45 3d 32 30 37 2e 33 D=207.3.4E=207.3 0170 0a 34 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 .45=336.75=229.6 0180 43 3d 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 C=146.65=00.6F=2 0190 30 38 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 08.71=02.70=020. 01a0 37 32 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 72=000.42=217.0. 01b0 36 37 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 67=192.62=476.17 01c0 2e 57 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 .W.5C=028.0.2F=1 01d0 33 2e 37 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 3.77.16=A.05=000 01e0 30 30 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 00000.09=60.00;2 01f0 30 37 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 07.3.6B=0.81E2=A 0200 55 54 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 UTO .MC=1.E0=0.E 0210 31 3d 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 1=0.E2=0.E3=0.E8 0220 3d 30 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d =0.E9=0.I0=2.I1= 0230 30 30 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 00.I2=01.I3=0.I4 0240 3d 30 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d =0.I5=0.I6=0.I7= 0250 30 0a 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 0.I8=Int Contact 0260 20 31 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 1.I9=0.IA=Int C 0270 6f 6e 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 ontact 2.IB=0.IC 0280 3d 49 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a =Int Relay.ID=0. 0290 53 48 3d 30 46 33 41 34 39 32 35 33 34 43 45 38 SH=0F3A492534CE8 02a0 32 38 36 35 46 31 46 45 34 34 38 36 42 30 42 32 2865F1FE4486B0B2 02b0 45 31 38 0a 4d 44 3d 63 62 66 64 36 33 35 64 64 E18.MD=cbfd635dd 02c0 62 35 66 61 66 62 62 61 63 62 32 35 62 33 37 33 b5fafbbacb25b373 02d0 36 66 34 61 31 36 66 0a 3c 2f 42 4f 44 59 3e 0a 6f4a16f.</BODY>. No. Time Source Destination Protocol Length Info 13889 185.925315 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 13889: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13315, Ack: 966459, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13890 185.925349 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=966459 Ack=13357 Win=46636 Len=0 Frame 13890: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 966459, Ack: 13357, Len: 0 No. Time Source Destination Protocol Length Info 13891 186.081521 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 380639488, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13891: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13892 186.081545 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 380639488, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13892: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13893 186.081557 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 380639488, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13893: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13894 186.081569 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 380639488, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13894: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13895 186.099681 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2249720064, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13895: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13896 186.099700 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2249720064, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13896: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13897 186.099712 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2249720064, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13897: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13898 186.099724 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2249720064, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13898: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13899 186.172299 192.168.10.246 65.32.1.65 DNS 85 Standard query PTR 37.27.234.80.in-addr.arpa Frame 13899: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 60157 (60157), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13900 186.190926 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 13900: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13901 186.190959 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 13901: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13902 186.190975 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 13902: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13903 186.190986 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 13903: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13904 186.190996 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 13904: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13905 186.191006 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 13905: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13906 186.191020 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 13906: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13907 186.191031 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 13907: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13908 186.191040 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 13908: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13909 186.191051 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 13909: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13910 186.191061 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 13910: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13911 186.191077 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 13911: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13912 186.191110 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 13912: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13913 186.191121 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 13913: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13914 186.191131 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 13914: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13915 186.191159 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 13915: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13916 186.191170 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 13916: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13917 186.191179 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 13917: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13918 186.191197 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 13918: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13919 186.191208 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 13919: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13920 186.191218 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 13920: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13921 186.191228 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 13921: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13922 186.191238 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 13922: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13923 186.191248 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 13923: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13924 186.191258 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 13924: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13925 186.191269 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 13925: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13926 186.191278 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 13926: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13927 186.191288 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 13927: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13928 186.191298 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 13928: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13929 186.191308 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 13929: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13930 186.191318 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 13930: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13931 186.191328 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 13931: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13932 186.191338 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 13932: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13933 186.191348 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 13933: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13934 186.191358 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 13934: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13935 186.191368 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 13935: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13936 186.191378 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 13936: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13937 186.191391 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 13937: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13938 186.191402 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 13938: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13939 186.191422 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 13939: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13940 186.191432 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 13940: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13941 186.191442 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 13941: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13942 186.191452 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 13942: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13943 186.191612 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 13943: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13944 186.309486 65.32.1.65 192.168.10.246 DNS 145 Standard query response, No such name Frame 13944: 145 bytes on wire (1160 bits), 145 bytes captured (1160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 60157 (60157) Domain Name System (response) No. Time Source Destination Protocol Length Info 13945 186.310252 192.168.10.203 80.234.27.37 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 13945: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 80.234.27.37 (80.234.27.37) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 13946 186.533584 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 13946: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13357, Ack: 966459, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13947 186.533619 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=966459 Ack=13399 Win=46615 Len=0 Frame 13947: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 966459, Ack: 13399, Len: 0 No. Time Source Destination Protocol Length Info 13948 186.612936 192.168.10.32 192.168.10.255 UDP 663 Source port: 38302 Destination port: apc-3052 Frame 13948: 663 bytes on wire (5304 bits), 663 bytes captured (5304 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (621 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 44 54 3d 31 30 .168.10.32.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 32 30 3a 35 /03/2011.TM=20:5 0040 39 3a 30 38 0a 53 52 3d 30 31 31 35 45 37 0a 53 9:08.SR=0115E7.S 0050 55 3d 33 30 34 33 0a 52 44 3d 34 39 45 33 0a 54 U=3043.RD=49E3.T 0060 41 3d 31 39 32 2e 31 36 38 2e 31 30 2e 32 35 35 A=192.168.10.255 0070 0a 50 54 3d 33 30 35 32 0a 43 4c 3d 43 30 41 38 .PT=3052.CL=C0A8 0080 30 41 31 30 0a 43 4c 3d 43 30 41 38 30 41 43 45 0A10.CL=C0A80ACE 0090 0a 43 4c 3d 43 30 41 38 30 41 44 30 0a 43 4c 3d .CL=C0A80AD0.CL= 00a0 43 30 41 38 30 41 43 39 0a 43 4c 3d 43 30 41 38 C0A80AC9.CL=C0A8 00b0 30 41 46 30 0a 43 4c 3d 43 30 41 38 30 41 43 43 0AF0.CL=C0A80ACC 00c0 0a 43 4c 3d 43 30 41 38 30 41 43 46 0a 43 4c 3d .CL=C0A80ACF.CL= 00d0 43 30 41 38 30 41 43 42 0a 43 4c 3d 43 30 41 38 C0A80ACB.CL=C0A8 00e0 30 41 44 42 0a 43 4c 3d 43 30 41 38 30 41 44 43 0ADB.CL=C0A80ADC 00f0 0a 43 4c 3d 43 30 41 38 30 41 43 44 0a 43 4c 3d .CL=C0A80ACD.CL= 0100 43 30 41 38 30 41 30 44 0a 43 4c 3d 43 30 41 38 C0A80A0D.CL=C0A8 0110 30 41 30 46 0a 43 4c 3d 43 30 41 38 30 41 30 43 0A0F.CL=C0A80A0C 0120 0a 43 4c 3d 43 30 41 38 30 41 44 31 0a 43 4c 3d .CL=C0A80AD1.CL= 0130 43 30 41 38 30 41 43 41 0a 43 4c 3d 43 30 41 38 C0A80ACA.CL=C0A8 0140 30 41 46 41 0a 43 4c 3d 43 30 41 38 30 41 44 38 0AFA.CL=C0A80AD8 0150 0a 43 4c 3d 43 30 41 38 30 41 32 37 0a 43 4c 3d .CL=C0A80A27.CL= 0160 43 30 41 38 30 41 44 39 0a 43 4c 3d 43 30 41 38 C0A80AD9.CL=C0A8 0170 30 41 44 33 0a 43 4c 3d 43 30 41 38 30 41 44 32 0AD3.CL=C0A80AD2 0180 0a 43 4c 3d 43 30 41 38 30 41 45 32 0a 43 4c 3d .CL=C0A80AE2.CL= 0190 43 30 41 38 30 41 45 33 0a 43 4c 3d 43 30 41 38 C0A80AE3.CL=C0A8 01a0 30 41 44 45 0a 43 4c 3d 43 30 41 38 31 34 30 33 0ADE.CL=C0A81403 01b0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01c0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 01d0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01e0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01f0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0200 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0210 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0220 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0230 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0240 0a 4d 44 3d 33 64 38 64 64 37 39 64 31 39 39 39 .MD=3d8dd79d1999 0250 66 35 62 37 66 64 37 35 32 32 61 64 31 38 38 35 f5b7fd7522ad1885 0260 37 32 34 62 0a 3c 2f 42 4f 44 59 3e 0a 724b.</BODY>. No. Time Source Destination Protocol Length Info 13949 186.613072 192.168.10.32 192.168.10.255 UDP 663 Source port: 38302 Destination port: apc-3052 Frame 13949: 663 bytes on wire (5304 bits), 663 bytes captured (5304 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (621 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 44 54 3d 31 30 .168.10.32.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 32 30 3a 35 /03/2011.TM=20:5 0040 39 3a 30 38 0a 53 52 3d 30 31 31 35 45 37 0a 53 9:08.SR=0115E7.S 0050 55 3d 33 30 34 33 0a 52 44 3d 34 39 45 33 0a 54 U=3043.RD=49E3.T 0060 41 3d 31 39 32 2e 31 36 38 2e 31 30 2e 32 35 35 A=192.168.10.255 0070 0a 50 54 3d 33 30 35 32 0a 43 4c 3d 43 30 41 38 .PT=3052.CL=C0A8 0080 30 41 31 30 0a 43 4c 3d 43 30 41 38 30 41 43 45 0A10.CL=C0A80ACE 0090 0a 43 4c 3d 43 30 41 38 30 41 44 30 0a 43 4c 3d .CL=C0A80AD0.CL= 00a0 43 30 41 38 30 41 43 39 0a 43 4c 3d 43 30 41 38 C0A80AC9.CL=C0A8 00b0 30 41 46 30 0a 43 4c 3d 43 30 41 38 30 41 43 43 0AF0.CL=C0A80ACC 00c0 0a 43 4c 3d 43 30 41 38 30 41 43 46 0a 43 4c 3d .CL=C0A80ACF.CL= 00d0 43 30 41 38 30 41 43 42 0a 43 4c 3d 43 30 41 38 C0A80ACB.CL=C0A8 00e0 30 41 44 42 0a 43 4c 3d 43 30 41 38 30 41 44 43 0ADB.CL=C0A80ADC 00f0 0a 43 4c 3d 43 30 41 38 30 41 43 44 0a 43 4c 3d .CL=C0A80ACD.CL= 0100 43 30 41 38 30 41 30 44 0a 43 4c 3d 43 30 41 38 C0A80A0D.CL=C0A8 0110 30 41 30 46 0a 43 4c 3d 43 30 41 38 30 41 30 43 0A0F.CL=C0A80A0C 0120 0a 43 4c 3d 43 30 41 38 30 41 44 31 0a 43 4c 3d .CL=C0A80AD1.CL= 0130 43 30 41 38 30 41 43 41 0a 43 4c 3d 43 30 41 38 C0A80ACA.CL=C0A8 0140 30 41 46 41 0a 43 4c 3d 43 30 41 38 30 41 44 38 0AFA.CL=C0A80AD8 0150 0a 43 4c 3d 43 30 41 38 30 41 32 37 0a 43 4c 3d .CL=C0A80A27.CL= 0160 43 30 41 38 30 41 44 39 0a 43 4c 3d 43 30 41 38 C0A80AD9.CL=C0A8 0170 30 41 44 33 0a 43 4c 3d 43 30 41 38 30 41 44 32 0AD3.CL=C0A80AD2 0180 0a 43 4c 3d 43 30 41 38 30 41 45 32 0a 43 4c 3d .CL=C0A80AE2.CL= 0190 43 30 41 38 30 41 45 33 0a 43 4c 3d 43 30 41 38 C0A80AE3.CL=C0A8 01a0 30 41 44 45 0a 43 4c 3d 43 30 41 38 31 34 30 33 0ADE.CL=C0A81403 01b0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01c0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 01d0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01e0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01f0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0200 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0210 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0220 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0230 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0240 0a 4d 44 3d 33 64 38 64 64 37 39 64 31 39 39 39 .MD=3d8dd79d1999 0250 66 35 62 37 66 64 37 35 32 32 61 64 31 38 38 35 f5b7fd7522ad1885 0260 37 32 34 62 0a 3c 2f 42 4f 44 59 3e 0a 724b.</BODY>. No. Time Source Destination Protocol Length Info 13950 186.852785 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-18.geo.kaspersky.com Frame 13950: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 56679 (56679), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 13951 186.946376 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 13951: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13952 186.946408 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 13952: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13953 187.096996 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 397416704, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13953: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13954 187.097020 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 397416704, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 13954: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13955 187.097033 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 397416704, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13955: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13956 187.097046 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 397416704, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 13956: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13957 187.115452 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2266497280, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13957: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13958 187.115476 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2266497280, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 13958: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13959 187.115489 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2266497280, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13959: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13960 187.115501 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2266497280, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 13960: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 13961 187.149650 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 13961: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13399, Ack: 966459, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13962 187.149688 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=966459 Ack=13441 Win=46594 Len=0 Frame 13962: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 966459, Ack: 13441, Len: 0 No. Time Source Destination Protocol Length Info 13963 187.194216 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 13963: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13964 187.197083 192.168.10.216 64.74.103.131 TLSv1 91 Application Data Frame 13964: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.216 (192.168.10.216), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: ovrimosdbman (2956), Dst Port: https (443), Seq: 223, Ack: 223, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 13965 187.197150 64.74.103.131 192.168.10.216 TCP 60 https > ovrimosdbman [ACK] Seq=223 Ack=260 Win=65535 Len=0 Frame 13965: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.216 (192.168.10.216) Transmission Control Protocol, Src Port: https (443), Dst Port: ovrimosdbman (2956), Seq: 223, Ack: 260, Len: 0 No. Time Source Destination Protocol Length Info 13966 187.200302 Watchgua_3c:4c:d8 IntelCor_36:19:60 ARP 60 Who has 192.168.10.216? Tell 192.168.10.1 Frame 13966: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 13967 187.200320 IntelCor_36:19:60 Watchgua_3c:4c:d8 ARP 60 192.168.10.216 is at 00:13:20:36:19:60 Frame 13967: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 13968 187.245104 64.74.103.131 192.168.10.216 TLSv1 91 Application Data Frame 13968: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.216 (192.168.10.216) Transmission Control Protocol, Src Port: https (443), Dst Port: ovrimosdbman (2956), Seq: 223, Ack: 260, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 13969 187.318167 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 13969: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 13970 187.382781 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=7687 Ack=522946 Win=16397 Len=0 Frame 13970: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7687, Ack: 522946, Len: 0 No. Time Source Destination Protocol Length Info 13971 187.382825 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 13970#1] smtp > 9428 [ACK] Seq=7687 Ack=522946 Win=16397 Len=0 Frame 13971: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7687, Ack: 522946, Len: 0 No. Time Source Destination Protocol Length Info 13972 187.382860 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13972: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 524184, Ack: 7687, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13973 187.382890 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13973: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 525564, Ack: 7687, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13974 187.382920 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13974: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 526944, Ack: 7687, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13975 187.382950 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13975: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 528324, Ack: 7687, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13976 187.382980 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13976: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 529704, Ack: 7687, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13977 187.383013 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13977: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 531084, Ack: 7687, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13978 187.383042 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13978: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 532464, Ack: 7687, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13979 187.383072 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13979: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 533844, Ack: 7687, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13980 187.383102 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13980: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 535224, Ack: 7687, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13981 187.383137 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 13970#2] smtp > 9428 [ACK] Seq=7687 Ack=522946 Win=16397 Len=0 Frame 13981: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7687, Ack: 522946, Len: 0 No. Time Source Destination Protocol Length Info 13982 187.383164 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 13970#3] smtp > 9428 [ACK] Seq=7687 Ack=522946 Win=16397 Len=0 Frame 13982: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7687, Ack: 522946, Len: 0 No. Time Source Destination Protocol Length Info 13983 187.383192 192.168.10.207 206.225.164.188 SMTP 306 S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 13983: 306 bytes on wire (2448 bits), 306 bytes captured (2448 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7687, Ack: 522946, Len: 252 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13984 187.383221 206.225.164.188 192.168.10.207 SMTP 1292 [TCP Out-Of-Order] C: DATA fragment, 1238 bytes Frame 13984: 1292 bytes on wire (10336 bits), 1292 bytes captured (10336 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 522946, Ack: 7687, Len: 1238 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13985 187.383250 206.225.164.188 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 13985: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 524184, Ack: 7687, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13986 187.383279 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 13983#1] smtp > 9428 [ACK] Seq=7939 Ack=522946 Win=16397 Len=0 Frame 13986: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7939, Ack: 522946, Len: 0 No. Time Source Destination Protocol Length Info 13987 187.383306 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=536604 Ack=7939 Win=46258 Len=0 Frame 13987: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 536604, Ack: 7939, Len: 0 No. Time Source Destination Protocol Length Info 13988 187.383334 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 13983#2] smtp > 9428 [ACK] Seq=7939 Ack=522946 Win=16397 Len=0 Frame 13988: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7939, Ack: 522946, Len: 0 No. Time Source Destination Protocol Length Info 13989 187.383362 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 13983#3] smtp > 9428 [ACK] Seq=7939 Ack=522946 Win=16397 Len=0 Frame 13989: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7939, Ack: 522946, Len: 0 No. Time Source Destination Protocol Length Info 13990 187.383389 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 13983#4] smtp > 9428 [ACK] Seq=7939 Ack=522946 Win=16397 Len=0 Frame 13990: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7939, Ack: 522946, Len: 0 No. Time Source Destination Protocol Length Info 13991 187.383418 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 13983#5] smtp > 9428 [ACK] Seq=7939 Ack=522946 Win=16397 Len=0 Frame 13991: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7939, Ack: 522946, Len: 0 No. Time Source Destination Protocol Length Info 13992 187.383445 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 13983#6] smtp > 9428 [ACK] Seq=7939 Ack=522946 Win=16397 Len=0 Frame 13992: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7939, Ack: 522946, Len: 0 No. Time Source Destination Protocol Length Info 13993 187.383473 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 13983#7] smtp > 9428 [ACK] Seq=7939 Ack=522946 Win=16397 Len=0 Frame 13993: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7939, Ack: 522946, Len: 0 No. Time Source Destination Protocol Length Info 13994 187.383504 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=7939 Ack=536604 Win=2739 Len=0 Frame 13994: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7939, Ack: 536604, Len: 0 No. Time Source Destination Protocol Length Info 13995 187.383533 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13995: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 536604, Ack: 7939, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13996 187.383563 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 13996: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 537984, Ack: 7939, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 13997 187.383591 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=7939 Ack=539343 Win=0 Len=0 Frame 13997: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7939, Ack: 539343, Len: 0 No. Time Source Destination Protocol Length Info 13998 187.414000 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 13998: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 13999 187.414033 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 13999: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14000 187.415703 192.168.10.216 64.74.103.131 TCP 60 ovrimosdbman > https [ACK] Seq=260 Ack=260 Win=65461 Len=0 Frame 14000: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.216 (192.168.10.216), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: ovrimosdbman (2956), Dst Port: https (443), Seq: 260, Ack: 260, Len: 0 No. Time Source Destination Protocol Length Info 14001 187.443801 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 14001: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14002 187.566323 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 14002: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14003 187.606338 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.80? Tell 192.168.10.220 Frame 14003: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14004 187.606370 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.80? Tell 192.168.10.220 Frame 14004: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14005 187.606385 Dell_ad:25:f8 Intel_38:8d:0a ARP 64 Who has 192.168.10.66? Tell 192.168.10.220 Frame 14005: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14006 187.606396 Dell_ad:25:f8 Intel_89:5e:11 ARP 64 Who has 192.168.10.65? Tell 192.168.10.220 Frame 14006: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14007 187.606406 Intel_38:8d:0a Dell_ad:25:f6 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 14007: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14008 187.606423 Intel_89:5e:11 Dell_ad:25:f8 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 14008: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14009 187.606433 Dell_ad:25:f8 Intel_a5:f5:5b ARP 64 Who has 192.168.10.131? Tell 192.168.10.220 Frame 14009: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14010 187.606451 Dell_ad:25:f8 Intel_38:8c:64 ARP 64 Who has 192.168.10.67? Tell 192.168.10.220 Frame 14010: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14011 187.606462 Dell_ad:25:f8 Intel_02:0e:6d ARP 64 Who has 192.168.10.128? Tell 192.168.10.220 Frame 14011: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14012 187.606472 Intel_a5:f5:5b Dell_ad:25:f8 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 14012: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14013 187.606482 Dell_ad:25:f8 IntelCor_d3:4e:80 ARP 64 Who has 192.168.10.70? Tell 192.168.10.220 Frame 14013: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14014 187.606492 Intel_38:8c:64 Dell_ad:25:f6 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 14014: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14015 187.606502 Dell_ad:25:f8 Intel_d0:7a:8f ARP 64 Who has 192.168.10.68? Tell 192.168.10.220 Frame 14015: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14016 187.606512 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.142? Tell 192.168.10.220 Frame 14016: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14017 187.606522 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.233? Tell 192.168.10.220 Frame 14017: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14018 187.606532 Intel_02:0e:6d Dell_ad:25:f6 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 14018: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14019 187.606543 IntelCor_d3:4e:80 Dell_ad:25:f8 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 14019: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14020 187.606553 Dell_ad:25:f8 Intel_56:83:a5 ARP 64 Who has 192.168.10.59? Tell 192.168.10.220 Frame 14020: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14021 187.606564 Intel_d0:7a:8f Dell_ad:25:f8 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 14021: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14022 187.606574 Dell_ad:25:f8 Intel_38:8c:b1 ARP 64 Who has 192.168.10.138? Tell 192.168.10.220 Frame 14022: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14023 187.606584 Dell_ad:25:f8 Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.220 Frame 14023: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14024 187.606595 Intel_56:83:a5 Dell_ad:25:f6 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 14024: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14025 187.606605 Intel_38:8c:b1 Dell_ad:25:f6 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 14025: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14026 187.606618 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 14026: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14027 187.606628 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.142 is at 00:0f:34:04:98:91 Frame 14027: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14028 187.606648 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 14028: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14029 187.753605 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 14029: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13441, Ack: 966459, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14030 187.753639 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=966459 Ack=13483 Win=46573 Len=0 Frame 14030: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 966459, Ack: 13483, Len: 0 No. Time Source Destination Protocol Length Info 14031 187.809685 192.168.10.203 80.234.27.37 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 14031: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 80.234.27.37 (80.234.27.37) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 14032 187.914810 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 14032: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14033 187.914843 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 14033: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14034 188.105103 178.148.30.51 192.168.10.207 TCP 62 aplx > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 14034: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 178.148.30.51 (178.148.30.51), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: aplx (1134), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 14035 188.105182 192.168.10.207 178.148.30.51 TCP 62 smtp > aplx [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 14035: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 178.148.30.51 (178.148.30.51) Transmission Control Protocol, Src Port: smtp (25), Dst Port: aplx (1134), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 14036 188.112631 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 414193920, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14036: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14037 188.112655 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 414193920, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14037: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14038 188.112669 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 414193920, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14038: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14039 188.112681 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 414193920, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14039: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14040 188.130767 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2283274496, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14040: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14041 188.130789 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2283274496, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14041: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14042 188.130801 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2283274496, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14042: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14043 188.130813 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2283274496, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14043: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14044 188.366824 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 14044: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13483, Ack: 966459, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14045 188.366868 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=966459 Ack=13525 Win=46552 Len=0 Frame 14045: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 966459, Ack: 13525, Len: 0 No. Time Source Destination Protocol Length Info 14046 188.390672 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 14046: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7939, Ack: 539343, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14047 188.390707 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=539364 Ack=7981 Win=46237 Len=0 Frame 14047: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 539364, Ack: 7981, Len: 0 No. Time Source Destination Protocol Length Info 14048 188.390739 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=7981 Ack=539343 Win=0 Len=0 Frame 14048: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7981, Ack: 539343, Len: 0 No. Time Source Destination Protocol Length Info 14049 188.422314 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 14049: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14050 188.422345 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 14050: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14051 188.583881 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 14051: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14052 188.583913 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 14052: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14053 188.852834 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-18.geo.kaspersky.com Frame 14053: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 56679 (56679), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 14054 188.853011 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-18.geo.kaspersky.com Frame 14054: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 56679 (56679), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 14055 188.967052 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 14055: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13525, Ack: 966459, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14056 188.967087 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=966459 Ack=13567 Win=46531 Len=0 Frame 14056: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 966459, Ack: 13567, Len: 0 No. Time Source Destination Protocol Length Info 14057 189.128376 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 430971136, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14057: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14058 189.128400 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 430971136, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14058: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14059 189.128413 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 430971136, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14059: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14060 189.128426 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 430971136, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14060: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14061 189.146385 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2300051712, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14061: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14062 189.146409 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2300051712, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14062: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14063 189.146422 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2300051712, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14063: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14064 189.146434 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2300051712, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14064: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14065 189.194230 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 14065: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14066 189.309689 192.168.10.203 80.234.27.37 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 14066: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 80.234.27.37 (80.234.27.37) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 14067 189.315564 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 14067: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14068 189.404933 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 14068: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14069 189.404964 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 14069: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14070 189.443830 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 14070: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14071 189.508997 64.74.103.131 192.168.10.240 TLSv1 107 Application Data Frame 14071: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.240 (192.168.10.240) Transmission Control Protocol, Src Port: https (443), Dst Port: mentaserver (2118), Seq: 319, Ack: 319, Len: 53 Secure Sockets Layer No. Time Source Destination Protocol Length Info 14072 189.509070 192.168.10.240 64.74.103.131 TLSv1 107 Application Data Frame 14072: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.240 (192.168.10.240), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: mentaserver (2118), Dst Port: https (443), Seq: 319, Ack: 372, Len: 53 Secure Sockets Layer No. Time Source Destination Protocol Length Info 14073 189.509139 64.74.103.131 192.168.10.240 TCP 60 https > mentaserver [ACK] Seq=372 Ack=372 Win=65535 Len=0 Frame 14073: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.240 (192.168.10.240) Transmission Control Protocol, Src Port: https (443), Dst Port: mentaserver (2118), Seq: 372, Ack: 372, Len: 0 No. Time Source Destination Protocol Length Info 14074 189.512338 Watchgua_3c:4c:d8 Dell_ba:b4:3c ARP 60 Who has 192.168.10.240? Tell 192.168.10.1 Frame 14074: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14075 189.512399 Dell_ba:b4:3c Watchgua_3c:4c:d8 ARP 60 192.168.10.240 is at 00:1e:c9:ba:b4:3c Frame 14075: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14076 189.529730 192.168.10.59 192.168.10.255 BROWSER 243 Host Announcement TRAININGPC02, Workstation, Server, NT Workstation, Potential Browser Frame 14076: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.59 (192.168.10.59), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 14077 189.529990 192.168.10.59 192.168.10.255 BROWSER 243 Host Announcement TRAININGPC02, Workstation, Server, NT Workstation, Potential Browser Frame 14077: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.59 (192.168.10.59), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 14078 189.566339 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 14078: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14079 189.575729 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 14079: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13567, Ack: 966459, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14080 189.575768 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=966459 Ack=13609 Win=46510 Len=0 Frame 14080: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 966459, Ack: 13609, Len: 0 No. Time Source Destination Protocol Length Info 14081 189.575869 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=13609 Ack=966459 Win=16214 Len=0 Frame 14081: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13609, Ack: 966459, Len: 0 No. Time Source Destination Protocol Length Info 14082 189.575898 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 14081#1] smtp > 23308 [ACK] Seq=13609 Ack=966459 Win=16214 Len=0 Frame 14082: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13609, Ack: 966459, Len: 0 No. Time Source Destination Protocol Length Info 14083 189.576003 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14083: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 966459, Ack: 13609, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14084 189.576034 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14084: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 967839, Ack: 13609, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14085 189.576068 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14085: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 969219, Ack: 13609, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14086 189.576098 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14086: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 970599, Ack: 13609, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14087 189.576127 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14087: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 971979, Ack: 13609, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14088 189.576166 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14088: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 973359, Ack: 13609, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14089 189.576197 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14089: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 974739, Ack: 13609, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14090 189.576228 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14090: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 976119, Ack: 13609, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14091 189.576258 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14091: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 977499, Ack: 13609, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14092 189.576291 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=13609 Ack=973359 Win=9314 Len=0 Frame 14092: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13609, Ack: 973359, Len: 0 No. Time Source Destination Protocol Length Info 14093 189.576320 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=13609 Ack=978879 Win=3794 Len=0 Frame 14093: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13609, Ack: 978879, Len: 0 No. Time Source Destination Protocol Length Info 14094 189.576349 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14094: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 978879, Ack: 13609, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14095 189.576381 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14095: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 980259, Ack: 13609, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14096 189.576411 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14096: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 981639, Ack: 13609, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14097 189.576440 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=13609 Ack=981639 Win=1034 Len=0 Frame 14097: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13609, Ack: 981639, Len: 0 No. Time Source Destination Protocol Length Info 14098 189.696618 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=13609 Ack=982673 Win=0 Len=0 Frame 14098: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13609, Ack: 982673, Len: 0 No. Time Source Destination Protocol Length Info 14099 189.751035 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 14099: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14100 189.751070 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 14100: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14101 189.751086 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 14101: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14102 189.751096 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 14102: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14103 189.751106 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 14103: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14104 189.751117 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 14104: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14105 189.751127 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 14105: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14106 189.751137 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 14106: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14107 189.751147 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 14107: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14108 189.751157 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 14108: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14109 189.751167 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 14109: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14110 189.751184 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 14110: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14111 189.751217 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 14111: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14112 189.751228 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 14112: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14113 189.751237 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 14113: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14114 189.751269 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 14114: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14115 189.751280 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 14115: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14116 189.751290 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 14116: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14117 189.751300 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 14117: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14118 189.751310 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 14118: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14119 189.751320 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 14119: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14120 189.751331 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 14120: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14121 189.751341 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 14121: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14122 189.751351 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 14122: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14123 189.751361 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 14123: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14124 189.751371 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 14124: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14125 189.751381 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 14125: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14126 189.751391 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 14126: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14127 189.751401 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 14127: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14128 189.751411 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 14128: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14129 189.751421 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 14129: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14130 189.751431 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 14130: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14131 189.751442 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 14131: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14132 189.751452 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 14132: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14133 189.751462 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 14133: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14134 189.751472 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 14134: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14135 189.751482 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 14135: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14136 189.751493 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 14136: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14137 189.751503 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 14137: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14138 189.751523 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 14138: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14139 189.751533 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 14139: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14140 189.751543 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 14140: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14141 189.751553 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 14141: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14142 189.751563 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 14142: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14143 189.921016 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 14143: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14144 189.921049 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 14144: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14145 189.934677 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.71? Tell 192.168.10.220 Frame 14145: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14146 189.934707 Dell_ad:25:f8 Broadcast ARP 60 Who has 192.168.10.71? Tell 192.168.10.220 Frame 14146: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14147 189.934722 Dell_ad:25:f8 Intel_38:8d:0a ARP 64 Who has 192.168.10.66? Tell 192.168.10.220 Frame 14147: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14148 189.934732 Dell_ad:25:f8 Intel_89:5e:11 ARP 64 Who has 192.168.10.65? Tell 192.168.10.220 Frame 14148: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14149 189.934743 Intel_38:8d:0a Dell_ad:25:f6 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 14149: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14150 189.934753 Intel_89:5e:11 Dell_ad:25:f8 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 14150: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14151 189.934763 Dell_ad:25:f8 Intel_a5:f5:5b ARP 64 Who has 192.168.10.131? Tell 192.168.10.220 Frame 14151: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14152 189.934779 Dell_ad:25:f8 Intel_38:8c:64 ARP 64 Who has 192.168.10.67? Tell 192.168.10.220 Frame 14152: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14153 189.934790 Dell_ad:25:f8 Intel_02:0e:6d ARP 64 Who has 192.168.10.128? Tell 192.168.10.220 Frame 14153: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14154 189.934800 Intel_a5:f5:5b Dell_ad:25:f8 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 14154: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14155 189.934809 Dell_ad:25:f8 IntelCor_d3:4e:80 ARP 64 Who has 192.168.10.70? Tell 192.168.10.220 Frame 14155: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14156 189.934820 Intel_38:8c:64 Dell_ad:25:f6 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 14156: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14157 189.934830 Intel_02:0e:6d Dell_ad:25:f6 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 14157: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14158 189.934839 Dell_ad:25:f8 Intel_d0:7a:8f ARP 64 Who has 192.168.10.68? Tell 192.168.10.220 Frame 14158: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14159 189.934849 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.142? Tell 192.168.10.220 Frame 14159: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14160 189.934860 Dell_ad:25:f8 Cisco_04:98:91 ARP 64 Who has 192.168.10.233? Tell 192.168.10.220 Frame 14160: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14161 189.934870 IntelCor_d3:4e:80 Dell_ad:25:f8 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 14161: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14162 189.934880 Dell_ad:25:f8 Intel_56:83:a5 ARP 64 Who has 192.168.10.59? Tell 192.168.10.220 Frame 14162: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14163 189.934890 Dell_ad:25:f8 Intel_38:8c:b1 ARP 64 Who has 192.168.10.138? Tell 192.168.10.220 Frame 14163: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14164 189.934904 Intel_d0:7a:8f Dell_ad:25:f8 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 14164: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14165 189.934914 Dell_ad:25:f8 Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.220 Frame 14165: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14166 189.934923 Intel_56:83:a5 Dell_ad:25:f6 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 14166: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14167 189.934934 Intel_38:8c:b1 Dell_ad:25:f6 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 14167: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14168 189.934944 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 14168: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14169 189.934954 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.142 is at 00:0f:34:04:98:91 Frame 14169: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14170 189.934964 Cisco_04:98:91 Dell_ad:25:f8 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 14170: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14171 189.960555 192.168.10.115 64.74.103.129 TLSv1 91 Application Data Frame 14171: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.115 (192.168.10.115), Dst: 64.74.103.129 (64.74.103.129) Transmission Control Protocol, Src Port: cogsys-lm (3377), Dst Port: https (443), Seq: 223, Ack: 223, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 14172 189.960625 64.74.103.129 192.168.10.115 TCP 60 https > cogsys-lm [ACK] Seq=223 Ack=260 Win=65535 Len=0 Frame 14172: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Internet Protocol Version 4, Src: 64.74.103.129 (64.74.103.129), Dst: 192.168.10.115 (192.168.10.115) Transmission Control Protocol, Src Port: https (443), Dst Port: cogsys-lm (3377), Seq: 223, Ack: 260, Len: 0 No. Time Source Destination Protocol Length Info 14173 189.964374 Watchgua_3c:4c:d8 IntelCor_ed:1a:c9 ARP 60 Who has 192.168.10.115? Tell 192.168.10.1 Frame 14173: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14174 189.964389 IntelCor_ed:1a:c9 Watchgua_3c:4c:d8 ARP 60 192.168.10.115 is at 00:13:20:ed:1a:c9 Frame 14174: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14175 190.008729 64.74.103.129 192.168.10.115 TLSv1 91 Application Data Frame 14175: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Internet Protocol Version 4, Src: 64.74.103.129 (64.74.103.129), Dst: 192.168.10.115 (192.168.10.115) Transmission Control Protocol, Src Port: https (443), Dst Port: cogsys-lm (3377), Seq: 223, Ack: 260, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 14176 190.143816 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 447748352, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14176: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14177 190.143840 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 447748352, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14177: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14178 190.143852 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 447748352, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14178: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14179 190.143864 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 447748352, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14179: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14180 190.162072 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2316828928, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14180: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14181 190.162106 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2316828928, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14181: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14182 190.162119 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2316828928, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14182: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14183 190.162131 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2316828928, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14183: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14184 190.172624 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 14184: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13609, Ack: 982673, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14185 190.172659 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=983019 Ack=13651 Win=46489 Len=0 Frame 14185: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 983019, Ack: 13651, Len: 0 No. Time Source Destination Protocol Length Info 14186 190.172722 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=13651 Ack=982673 Win=0 Len=0 Frame 14186: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13651, Ack: 982673, Len: 0 No. Time Source Destination Protocol Length Info 14187 190.194851 192.168.10.115 64.74.103.129 TCP 60 cogsys-lm > https [ACK] Seq=260 Ack=260 Win=65350 Len=0 Frame 14187: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.115 (192.168.10.115), Dst: 64.74.103.129 (64.74.103.129) Transmission Control Protocol, Src Port: cogsys-lm (3377), Dst Port: https (443), Seq: 260, Ack: 260, Len: 0 No. Time Source Destination Protocol Length Info 14188 190.400630 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 14188: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13609, Ack: 982673, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14189 190.400664 206.225.164.186 192.168.10.207 TCP 60 [TCP Dup ACK 14185#1] 23308 > smtp [ACK] Seq=983019 Ack=13651 Win=46489 Len=0 Frame 14189: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 983019, Ack: 13651, Len: 0 No. Time Source Destination Protocol Length Info 14190 190.400697 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=13651 Ack=982673 Win=0 Len=0 Frame 14190: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13651, Ack: 982673, Len: 0 No. Time Source Destination Protocol Length Info 14191 190.502919 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.32 Frame 14191: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14192 190.502951 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.32 Frame 14192: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14193 190.643639 192.168.10.220 208.67.220.220 DNS 85 Standard query PTR 37.27.234.80.in-addr.arpa Frame 14193: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.220.220 (208.67.220.220) User Datagram Protocol, Src Port: 60341 (60341), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 14194 190.769984 208.67.220.220 192.168.10.220 DNS 85 Standard query response, No such name Frame 14194: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.220.220 (208.67.220.220), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 60341 (60341) Domain Name System (response) No. Time Source Destination Protocol Length Info 14195 190.772482 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 Who has 192.168.10.220? Tell 192.168.10.1 Frame 14195: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14196 190.772496 Dell_ad:25:f6 Watchgua_3c:4c:d8 ARP 60 192.168.10.220 is at 00:22:19:ad:25:f6 Frame 14196: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14197 190.931667 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 14.252.186.91.in-addr.arpa Frame 14197: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 60923 (60923), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 14198 191.004164 192.168.10.207 206.225.164.186 SMTP 138 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 14198: 138 bytes on wire (1104 bits), 138 bytes captured (1104 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13609, Ack: 982673, Len: 84 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14199 191.004203 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=983019 Ack=13693 Win=46468 Len=0 Frame 14199: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 983019, Ack: 13693, Len: 0 No. Time Source Destination Protocol Length Info 14200 191.004233 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=13693 Ack=982673 Win=0 Len=0 Frame 14200: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13693, Ack: 982673, Len: 0 No. Time Source Destination Protocol Length Info 14201 191.159480 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 464525568, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14201: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14202 191.159504 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 464525568, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14202: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14203 191.159517 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 464525568, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14203: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14204 191.159530 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 464525568, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14204: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14205 191.177748 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2333606144, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14205: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14206 191.177768 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2333606144, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14206: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14207 191.177781 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2333606144, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14207: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14208 191.177792 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2333606144, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14208: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14209 191.194123 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 14209: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14210 191.315544 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 14210: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14211 191.402955 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 14211: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14212 191.402986 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 14212: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14213 191.443673 192.168.10.217 4.2.2.2 DNS 77 Standard query TXT _nfsv4idmapdomain Frame 14213: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.217 (192.168.10.217), Dst: 4.2.2.2 (4.2.2.2) User Datagram Protocol, Src Port: 51171 (51171), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 14214 191.443760 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 14214: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14215 191.461791 4.2.2.2 192.168.10.217 DNS 152 Standard query response, No such name Frame 14215: 152 bytes on wire (1216 bits), 152 bytes captured (1216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Oracle_86:77:66 (00:14:4f:86:77:66) Internet Protocol Version 4, Src: 4.2.2.2 (4.2.2.2), Dst: 192.168.10.217 (192.168.10.217) User Datagram Protocol, Src Port: domain (53), Dst Port: 51171 (51171) Domain Name System (response) No. Time Source Destination Protocol Length Info 14216 191.464428 Watchgua_3c:4c:d8 Oracle_86:77:66 ARP 60 Who has 192.168.10.217? Tell 192.168.10.1 Frame 14216: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Oracle_86:77:66 (00:14:4f:86:77:66) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14217 191.464524 Oracle_86:77:66 Watchgua_3c:4c:d8 ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 14217: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14218 191.566233 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 14218: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14219 191.911240 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 14219: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14220 191.911275 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 14220: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14221 191.930791 192.168.10.220 208.67.222.222 DNS 86 Standard query PTR 14.252.186.91.in-addr.arpa Frame 14221: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 50541 (50541), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 14222 192.013090 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=171503 Ack=2813 Win=1002 Len=1448 TSval=583251 TSecr=729106 Frame 14222: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 171503, Ack: 2813, Len: 1448 Data (1448 bytes) 0000 17 03 01 20 b0 f3 37 07 e6 11 10 f5 5e 9d 29 29 ... ..7.....^.)) 0010 d5 f9 f4 d3 73 34 e3 43 8d 50 b7 83 66 c3 a5 47 ....s4.C.P..f..G 0020 8c ba 4b e2 40 11 36 c0 79 fd 1c ed 8f d3 d5 80 [email protected]....... 0030 d1 d5 4c e7 e7 73 44 f2 52 de da bc 31 86 3c 38 ..L..sD.R...1.<8 0040 d9 7e cc 24 30 f2 3e c0 13 2a 7e e2 76 34 73 5d .~.$0.>..*~.v4s] 0050 2c 28 46 9e a4 19 67 30 11 39 1b 75 fb 50 13 d1 ,(F...g0.9.u.P.. 0060 a9 19 bc db 6a 6c f4 6f 3a 27 90 d8 cd b0 89 e7 ....jl.o:'...... 0070 97 01 ba db 28 bf 2f 8b 56 60 4d fc 85 42 be f9 ....(./.V`M..B.. 0080 5b 10 a3 02 c7 c1 63 c6 fc 28 18 e4 0f 8d 0a 97 [.....c..(...... 0090 a1 17 0d 59 cf c6 95 d9 5f b5 97 07 5a 70 29 04 ...Y...._...Zp). 00a0 03 dc 0d 20 41 f6 10 b1 fa 05 83 8b bb d4 51 6b ... A.........Qk 00b0 d8 71 38 a2 40 d8 ca b9 7f d4 b2 e9 f5 53 2d ae [email protected]. 00c0 8d 4d 5b 00 42 8b cd 02 11 6a e9 d7 3b d1 94 c9 .M[.B....j..;... 00d0 03 5b 7b fb cc 13 e2 11 e7 44 29 9d 30 0e 2e 65 .[{......D).0..e 00e0 1c 0c 90 50 78 2f 80 68 1a c8 21 8a 68 90 d1 7f ...Px/.h..!.h... 00f0 03 b4 ba c3 88 ac df 72 27 47 87 12 34 af 8c 05 .......r'G..4... 0100 28 a7 e0 06 e8 a8 29 a7 d8 94 c5 71 b6 f3 e6 8c (.....)....q.... 0110 20 e1 09 c2 d8 e6 e6 15 a7 4b 1e d8 56 bc 79 08 ........K..V.y. 0120 a9 83 70 91 2e 2a cb 55 e9 57 08 b1 b3 6d 6c a0 ..p..*.U.W...ml. 0130 8d 43 e1 9d a8 4d e2 47 b5 12 ed 8e ce d6 4c 03 .C...M.G......L. 0140 7e 83 04 c8 ed 65 b8 7e ac cd 16 e3 f8 be 1b a9 ~....e.~........ 0150 7d 74 ab f8 d7 54 49 7a 9d a1 bd ae 17 09 ea 40 }t...TIz.......@ 0160 49 76 63 21 0d 44 08 2b 02 6c ef 84 85 d3 46 e1 Ivc!.D.+.l....F. 0170 e5 20 01 f9 4d b9 3f 84 ae 68 ff 31 97 0b 78 2d . ..M.?..h.1..x- 0180 36 70 fc fc 80 7a f9 f4 90 b9 d3 00 b1 d4 5f 37 6p...z........_7 0190 ca 53 a8 da fa 59 e5 7f 0a 49 e5 e7 4d 88 49 a9 .S...Y...I..M.I. 01a0 99 e2 9d c7 ba bf 18 61 d6 06 05 81 2f 89 44 d1 .......a..../.D. 01b0 79 a1 5b 9b c7 52 4b e5 51 40 1d eb ce 65 c8 33 y.[[email protected] 01c0 45 58 e4 c1 a3 4d 89 67 56 57 ac 37 7e 8e 9d f4 EX...M.gVW.7~... 01d0 4b 05 24 bc 51 e3 f4 97 eb 7a 5b df 47 04 ce 53 K.$.Q....z[.G..S 01e0 db 0c b2 35 f2 88 b9 ec 21 f6 51 d1 74 c3 b8 b7 ...5....!.Q.t... 01f0 eb bd 1f bd 38 3e 89 64 19 85 d9 14 a8 37 b7 17 ....8>.d.....7.. 0200 8f cb 92 04 08 de f5 c6 de 0e 5d 16 97 e4 aa 39 ..........]....9 0210 0a cd 54 eb 08 27 7e 82 00 91 d4 bd 83 a3 f2 8d ..T..'~......... 0220 82 48 c8 62 cd c7 ee 41 df cc e1 d8 91 c7 01 ad .H.b...A........ 0230 e7 e8 d4 44 c6 48 46 bc 28 8c d2 2b 25 d5 ed 19 ...D.HF.(..+%... 0240 5d 60 f3 25 8f 56 d2 eb 47 79 ce 33 21 31 f4 b0 ]`.%.V..Gy.3!1.. 0250 99 91 d5 eb f7 36 f5 2a 0b b3 a6 11 43 d2 49 2f .....6.*....C.I/ 0260 5e ed 5e 7a a1 89 b3 f6 3e bf f6 1f 48 d7 a0 16 ^.^z....>...H... 0270 61 b6 5f 29 1f 8f c2 93 58 13 e4 c6 67 db c3 60 a._)....X...g..` 0280 e3 81 70 dd 2d 9c ee 3c 1e b5 31 80 ad d4 85 6a ..p.-..<..1....j 0290 64 fb c1 07 4d 24 f5 ca 1a 95 bb 8b 35 b0 a7 65 d...M$......5..e 02a0 0b a4 6c cb e0 f2 ea 00 8d 12 34 ac 2b 54 4d 9f ..l.......4.+TM. 02b0 e0 b8 58 1f 89 11 b6 4a 01 7d 9d 74 f4 b7 7f 38 ..X....J.}.t...8 02c0 51 9f d2 fc 0d ed 1e 47 bd a8 fa 53 52 2b 60 bd Q......G...SR+`. 02d0 d6 15 ed 2a f6 d6 dd 1d b0 43 1c db ac 0c 94 0d ...*.....C...... 02e0 72 f3 85 05 bc c5 2a c8 13 c8 59 92 57 6a 86 f7 r.....*...Y.Wj.. 02f0 16 c3 ed 95 eb 86 19 cf e8 6a 97 4c c1 b2 b3 30 .........j.L...0 0300 0f 62 26 98 d8 5b d3 76 de d2 a8 a4 7c 75 de 11 .b&..[.v....|u.. 0310 bc b0 ca cf 12 e3 77 58 e2 bf dc 01 d8 80 67 64 ......wX......gd 0320 9e 6e f4 83 45 aa 91 13 eb c1 2b 2f 96 94 df c2 .n..E.....+/.... 0330 2f 76 65 ad dc fb e6 2f 12 72 8c c3 d6 30 65 22 /ve..../.r...0e" 0340 88 a0 d0 af bb 83 17 f2 93 66 20 c2 86 24 1e 3e .........f ..$.> 0350 4a 68 b3 72 5e 81 bd 81 c8 b8 19 ad 0d 37 55 c6 Jh.r^........7U. 0360 8e 67 13 04 e5 81 18 fd 56 b9 42 1f be 7d 07 57 .g......V.B..}.W 0370 84 ab 5c 20 13 45 5b 12 4e 57 57 be 47 73 63 0a ..\ .E[.NWW.Gsc. 0380 68 92 90 f7 dc 66 35 40 55 73 45 4d ba aa 49 c8 [email protected]. 0390 54 bb c1 9a 42 8e d7 59 87 6a 10 56 a8 31 80 a9 T...B..Y.j.V.1.. 03a0 49 0b 1e 98 a0 63 e3 2a 7a ea 1c f2 12 c8 de e7 I....c.*z....... 03b0 69 03 bb 35 f7 77 16 36 0c 6d 6a 10 34 5b 87 e5 i..5.w.6.mj.4[.. 03c0 20 32 25 0c ba d3 e0 66 14 70 1c 2b 51 9f 5b 56 2%....f.p.+Q.[V 03d0 13 b7 6f 31 98 45 ed a0 08 fa b9 ff af 1b 1f e3 ..o1.E.......... 03e0 fd b6 38 3d bd 40 d7 7c 0d 7f bf ff 16 56 13 59 ..8=.@.|.....V.Y 03f0 c7 40 0e b6 7b 28 3b fb fc 1e fc 31 80 79 d5 07 .@..{(;....1.y.. 0400 f6 a3 39 fb 4b ad 83 95 80 2f 2f 44 27 9f 60 72 ..9.K....//D'.`r 0410 03 13 88 e9 7e d9 b5 14 df 37 74 17 dd a1 6d 10 ....~....7t...m. 0420 d2 f3 bc 0d 9d 27 98 dc a6 00 a4 13 ff 0d 52 c5 .....'........R. 0430 6b 2f f5 88 23 8c f0 3c bb 9e b8 7e 59 3e 8d cb k/..#..<...~Y>.. 0440 90 29 05 5a 77 2e 90 f7 a5 be ce de 40 7e e3 a5 .).Zw.......@~.. 0450 e4 2e 77 77 dc b4 33 c4 15 00 92 86 fe 54 42 83 ..ww..3......TB. 0460 47 5e 3f 8b dc 4e 13 62 77 e0 12 27 17 df 14 1c G^?..N.bw..'.... 0470 83 70 74 0c b1 63 2d 36 f2 54 3b 05 67 98 20 81 .pt..c-6.T;.g. . 0480 85 c1 3a a5 37 a0 3c 48 bf 80 f1 95 ec 87 b0 c5 ..:.7.<H........ 0490 27 5f c8 91 7e 2c ae 01 fc 89 64 b8 ca d7 60 1f '_..~,....d...`. 04a0 7a 50 40 5d da 9a d1 dc 7e b6 c3 97 55 46 17 28 zP@]....~...UF.( 04b0 75 e6 ff 53 68 2c d7 3e e0 72 dd 67 73 9e 9e 07 u..Sh,.>.r.gs... 04c0 66 14 b2 36 6f 8d b0 83 4b 23 c7 5d dd 5c 9f 8b f..6o...K#.].\.. 04d0 e3 e7 dd 1f d6 ed 5d 08 00 4f 67 28 9b 07 e3 4f ......]..Og(...O 04e0 c7 71 c7 dc 1b 97 dd cb 65 fc ed 09 4a b1 c5 7b .q......e...J..{ 04f0 e3 13 27 8f 76 76 35 ca 0a 6d e1 86 e5 a0 6b 37 ..'.vv5..m....k7 0500 9e 09 e1 30 b6 5b 5a 9f a7 d8 cb a3 fc ab 57 9d ...0.[Z.......W. 0510 92 09 b5 3a b1 d7 f8 6e 89 48 6c ca bf 98 99 aa ...:...n.Hl..... 0520 18 c8 81 c8 50 1f 3d 1c dc 89 90 3e 66 52 4a e5 ....P.=....>fRJ. 0530 eb 86 a4 ed bd cc d4 aa c4 62 2e b1 ca 03 d4 b9 .........b...... 0540 f6 6c 72 27 67 dc 59 5e dd 35 a1 02 e1 83 c7 9b .lr'g.Y^.5...... 0550 9b 0e 7a b5 23 6d b8 02 b0 0f 6a 57 29 fa 48 f2 ..z.#m....jW).H. 0560 6d 15 24 b5 6f a0 19 50 53 a8 22 6a 25 6b f0 e9 m.$.o..PS."j%k.. 0570 e0 0c 3a 30 c5 d3 b1 b4 da a4 79 55 78 2e 1c 2e ..:0......yUx... 0580 1e 96 16 4d 6b 52 bd b1 3d 6e 11 c8 e4 f0 03 7e ...MkR..=n.....~ 0590 39 f7 0a 23 9b 29 54 39 c1 36 00 11 25 bf a9 37 9..#.)T9.6..%..7 05a0 91 ea f1 e5 a7 59 d9 99 .....Y.. No. Time Source Destination Protocol Length Info 14223 192.013214 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=172951 Ack=2813 Win=1002 Len=1448 TSval=583251 TSecr=729106 Frame 14223: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 172951, Ack: 2813, Len: 1448 Data (1448 bytes) 0000 6e db 22 44 dd 4e 9c aa 15 1c 0c 02 88 6c 96 b2 n."D.N.......l.. 0010 f7 37 17 bc 5e 19 6b 00 4a 6d 0d 6b 56 0f e0 1f .7..^.k.Jm.kV... 0020 d6 44 88 ef e9 00 b2 3d 09 e0 0a 5b d5 0b cf f0 .D.....=...[.... 0030 17 f0 da 02 30 c3 76 bb 8d b1 97 c0 6a eb 20 a6 ....0.v.....j. . 0040 fe ea 77 95 36 70 f3 3c d9 2d 72 63 b9 96 1c 0d ..w.6p.<.-rc.... 0050 6d 21 e7 df 36 3b 36 09 5c 09 58 a1 9c 49 70 f8 m!..6;6.\.X..Ip. 0060 08 e1 64 a1 d9 da 7f fa ce 3f 8d 69 e3 f6 75 bb ..d......?.i..u. 0070 8b d2 98 91 e0 69 c2 ab f9 7e 3d dc ec c4 ad 38 .....i...~=....8 0080 16 41 57 37 d7 e2 b2 48 6c e6 35 b2 62 64 53 dd .AW7...Hl.5.bdS. 0090 c2 f1 db 8c 18 42 1a 3f 2a 32 28 21 0e 0e 1e fa .....B.?*2(!.... 00a0 ca 5a 17 12 7e 95 f4 96 c8 59 02 af 9b ab f0 c6 .Z..~....Y...... 00b0 a0 16 01 66 56 e5 fd a3 22 31 2e c3 ac 74 5a 39 ...fV..."1...tZ9 00c0 8f be ad 7f d1 3e b6 48 86 75 47 75 20 15 3b 70 .....>.H.uGu .;p 00d0 4e ad 8b ad f5 0b e7 dc d4 17 3e 0f d9 9f e0 1c N.........>..... 00e0 b5 7b 19 46 76 97 ac ec 41 1d 78 97 5c ca 61 fd .{.Fv...A.x.\.a. 00f0 17 e2 7c 4b f1 e1 d1 2e 0f c8 fe be 2d cd b7 39 ..|K........-..9 0100 8c f7 00 23 9e 00 33 ed dd 8f 78 05 07 e8 51 97 ...#..3...x...Q. 0110 83 fa a9 b7 92 bc ca a7 07 87 e5 20 c8 3a 92 39 ........... .:.9 0120 02 b0 7b 8b b3 db 26 79 97 95 eb 24 ec 02 3a b7 ..{...&y...$..:. 0130 ad d6 89 93 35 ca 50 c0 c7 30 e3 b0 eb 7c 68 aa ....5.P..0...|h. 0140 3f 87 3e 20 be a7 44 b3 56 a6 c0 34 9b c0 69 c0 ?.> ..D.V..4..i. 0150 8c 83 f4 a4 df b9 62 27 d6 f1 91 b6 e8 5f 9e 8e ......b'....._.. 0160 33 82 a1 eb 98 ad a3 9c 92 69 a3 65 6c 08 5a d9 3........i.el.Z. 0170 e5 0c 03 ce 27 14 11 70 10 51 88 aa 2e 57 b5 57 ....'..p.Q...W.W 0180 41 9a c1 9b 42 c3 19 d2 33 97 8b 11 5e 54 fc c9 A...B...3...^T.. 0190 63 dc 60 dd 34 0a 1b 9d bc d1 20 a1 6e fe 2e 87 c.`.4..... .n... 01a0 72 80 59 f4 fa 0f d2 d4 73 7a a5 fa 19 84 c0 03 r.Y.....sz...... 01b0 63 60 b7 97 7f 9e 57 42 b7 b2 23 be 0a 7e f5 4a c`....WB..#..~.J 01c0 94 43 e9 72 7e e7 10 0b 6e cf df 6c 0c 93 1a 08 .C.r~...n..l.... 01d0 80 bf d4 61 d4 fa 06 13 f5 ee c8 af 9c 62 bc ca ...a.........b.. 01e0 69 df 35 93 57 0a b0 52 b1 b9 37 10 b7 c0 a3 29 i.5.W..R..7....) 01f0 51 1e a8 b1 5f 3f a2 90 48 a0 e5 21 ce 55 05 2a Q..._?..H..!.U.* 0200 5a 6a fe b1 a7 ce 10 e1 ed ec ea 39 c4 9b 83 c7 Zj.........9.... 0210 8e 9f f4 60 dc 8c 4a 79 b7 32 43 8f 66 d4 b4 56 ...`..Jy.2C.f..V 0220 e9 56 bc 31 89 b2 a3 aa de 25 bb ed 80 0f 9d b6 .V.1.....%...... 0230 d8 38 8d 02 0e da 40 65 c6 fb 5a 32 fa 9b c4 bf [email protected].... 0240 8a 28 5a af fa eb 71 70 ff 02 ee 05 0a f7 08 b3 .(Z...qp........ 0250 8c ee cc 0d a7 b2 c0 c3 a3 a0 48 86 58 b0 47 4a ..........H.X.GJ 0260 1b cc 69 cb b6 9e 8f a4 f2 7e 1c f9 81 99 20 ea ..i......~.... . 0270 e5 d4 b1 72 41 b1 97 d4 19 8b 03 5d 3d a5 e9 5f ...rA......]=.._ 0280 f7 67 c7 26 24 07 14 45 f0 1f 65 35 16 e9 fb dc .g.&$..E..e5.... 0290 13 5e 89 bf d3 8f e9 e0 49 06 c3 06 cc 38 a0 cc .^......I....8.. 02a0 37 ca a1 d5 7d 88 64 2e 54 d3 5c 3a a7 32 df 94 7...}.d.T.\:.2.. 02b0 b9 e5 8c 4b 52 79 f5 4b 6f 1e 24 29 95 64 49 62 ...KRy.Ko.$).dIb 02c0 1c a0 2f d7 66 d8 8d ef 00 0d fa 97 50 0a e9 83 ../.f.......P... 02d0 7c ee 4e 67 4c 86 74 bf 48 ff d3 74 71 06 9a 66 |.NgL.t.H..tq..f 02e0 aa 9f 80 ef 40 a4 10 ad 99 58 5e ba 0e 3e e2 cf [email protected]^..>.. 02f0 50 24 fb b9 30 a1 eb 4b 1e 66 b0 74 28 9e d3 cf P$..0..K.f.t(... 0300 0a 89 cd ce 9e 06 4c cb 73 90 be 84 22 ad 62 c6 ......L.s...".b. 0310 60 92 6a 79 c5 43 db d8 ed dc 51 2e 18 22 86 54 `.jy.C....Q..".T 0320 30 76 80 8e cf 5a a4 41 11 cb c2 40 f4 10 01 0d 0v...Z.A...@.... 0330 ff b4 ba 82 14 9a 13 3c cf 08 3e 9b c6 41 ec dc .......<..>..A.. 0340 02 ba ca 10 86 4e 75 dc 97 ab 6b ed 4b 10 53 d8 .....Nu...k.K.S. 0350 1e 16 df 67 c8 82 25 a0 be 4c fd cb d4 62 9a b6 ...g..%..L...b.. 0360 d2 f1 88 f7 ad 27 1c e7 87 ce 4f 0a 81 b1 23 c6 .....'....O...#. 0370 c7 2d 9c ca d5 90 90 50 1e 98 85 af 51 25 92 e3 .-.....P....Q%.. 0380 0d 3b 4c dc 6b 37 5e af f8 cc 02 63 8a d2 e3 ff .;L.k7^....c.... 0390 36 2a 94 da 08 8d 72 ca 2b 46 e1 22 ae fc 23 bd 6*....r.+F."..#. 03a0 c4 00 f5 8c d9 78 d8 1a 86 84 e1 63 e6 0f b2 76 .....x.....c...v 03b0 9f ad 3d 85 60 fd f2 fd d3 cb 29 c5 2f 7e 49 1f ..=.`.....)./~I. 03c0 31 ab b8 1c a2 c7 cd 2d 47 18 55 9e 71 ff 4b 6d 1......-G.U.q.Km 03d0 ed 95 6d 04 de c0 ff b0 af ae 20 04 3d 50 8d 30 ..m....... .=P.0 03e0 6e 44 e6 c6 0c be 63 f1 41 b8 de 4c e8 5f b3 83 nD....c.A..L._.. 03f0 d7 43 b4 81 2c 94 30 03 cd 8d c1 37 4d 11 75 16 .C..,.0....7M.u. 0400 1a bb 1a c5 6a f6 47 33 8e b1 cc e5 6f 6c 4b 22 ....j.G3....olK" 0410 7c 8f 6c bf 20 f5 9d 7c fa 07 9b d3 f3 f5 45 d5 |.l. ..|......E. 0420 62 78 68 80 54 9b da 45 f3 ce fb ed 4f 04 5b 3b bxh.T..E....O.[; 0430 7c 25 8e 0f ec 94 82 63 8b 74 f8 cf 98 0d d6 fb |%.....c.t...... 0440 ef bf 0a 8e 4b df ee e7 7b b8 c2 92 c5 86 73 2a ....K...{.....s* 0450 88 a6 1a 6f 7f fd e3 68 98 99 2f 7a 11 e9 b5 b3 ...o...h../z.... 0460 e0 59 ec 62 ad 71 81 b7 d8 4d 22 d2 85 61 49 b4 .Y.b.q...M"..aI. 0470 45 30 a8 3d b6 9a 70 44 8e ef 0c 60 1a 13 4a 46 E0.=..pD...`..JF 0480 d5 02 10 89 3e 0c 7d 85 60 b1 3c b8 42 72 8b c5 ....>.}.`.<.Br.. 0490 d5 4c 15 4a 79 90 57 9d 5e 4a d7 2e 60 52 f2 ea .L.Jy.W.^J..`R.. 04a0 94 d5 47 b3 fd f9 82 99 d8 ec 22 97 b2 c4 04 c3 ..G......."..... 04b0 ea a1 05 9d c4 1c 5e c0 d8 d6 ea f6 22 df 01 06 ......^....."... 04c0 6e c8 89 5e 3e 46 9b 2c a5 bc cf 7c 11 51 fa 93 n..^>F.,...|.Q.. 04d0 fb 8d e4 01 f3 37 ac 3f ab 1f 57 e7 82 62 ed 15 .....7.?..W..b.. 04e0 f0 c1 16 84 7a 69 98 5d ef 6e b0 7a 51 9e a9 96 ....zi.].n.zQ... 04f0 21 cd 5b a6 ab eb 4e 3f 09 79 e3 74 df d3 f4 bb !.[...N?.y.t.... 0500 2f 72 a2 43 56 45 2c 82 8b 97 2f ab 96 ed 3d 08 /r.CVE,.../...=. 0510 39 93 4d 91 f1 42 12 b9 48 e1 e5 47 7a 48 f6 da 9.M..B..H..GzH.. 0520 5f 35 fb 53 d2 de 53 66 4d ba d9 9f 65 d8 de 19 _5.S..SfM...e... 0530 75 b3 b2 db 84 82 bd 03 84 0c 3d 9e 41 da 39 a4 u.........=.A.9. 0540 6e 0e e1 d7 19 01 92 51 1d 62 bd 9b 22 17 fc 62 n......Q.b.."..b 0550 c7 f3 59 fa 0e 5f 70 0d 6b 78 2c db 0c 88 e7 84 ..Y.._p.kx,..... 0560 f8 ff 84 09 8c a3 a0 0f ec 63 2b 06 c6 91 be 30 .........c+....0 0570 9c b2 d6 c8 45 ab 0e 3f 22 3a 19 48 9e 3d 83 8b ....E..?":.H.=.. 0580 3c 35 f3 a8 4c a3 e4 68 a0 a9 d9 e8 ce 55 0c 18 <5..L..h.....U.. 0590 ab 97 29 e5 a7 db e8 c4 bf 95 32 b1 57 29 e0 de ..).......2.W).. 05a0 6e f2 be 72 9a 9e 34 4c n..r..4L No. Time Source Destination Protocol Length Info 14224 192.013324 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=174399 Ack=2813 Win=1002 Len=1448 TSval=583251 TSecr=729106 Frame 14224: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 174399, Ack: 2813, Len: 1448 Data (1448 bytes) 0000 5e 0c fc c6 3a 44 be 42 1a 32 99 b0 35 03 81 25 ^...:D.B.2..5..% 0010 e1 8f a3 ac ff 68 76 0c 3e e2 c6 ac 0f ef 64 c2 .....hv.>.....d. 0020 45 40 6c 29 c7 ed 55 c8 4a 2f 34 f0 90 84 6e 50 E@l)..U.J/4...nP 0030 09 f4 ff 17 a8 b3 97 7e b1 d6 ab 45 26 05 eb 63 .......~...E&..c 0040 60 28 3c 06 5a 2f 4e 78 82 9e be 36 d4 7d aa f7 `(<.Z/Nx...6.}.. 0050 dd 3d 3b 65 c0 33 13 fb 5c bc 5f 67 00 aa 6c 6e .=;e.3..\._g..ln 0060 eb c5 ba a0 cb 3d 2c f0 7e db be e8 20 00 02 8e .....=,.~... ... 0070 54 ba 5d 5f d2 44 80 80 e4 ea db 69 36 12 3c 63 T.]_.D.....i6.<c 0080 06 15 f2 af c0 a3 f6 0e bf 65 50 29 14 4b 7f d5 .........eP).K.. 0090 bd 97 d1 e5 30 0b 49 56 9a 7e ad 6a 65 aa 36 14 ....0.IV.~.je.6. 00a0 bb f2 dc a2 da 49 e5 f8 2d 60 f0 6e e4 77 64 fd .....I..-`.n.wd. 00b0 90 46 02 d3 16 8a 1c 07 06 e4 b9 9a c3 10 21 90 .F............!. 00c0 6a ab a2 da e7 81 15 dd 53 85 03 45 7a f8 af d0 j.......S..Ez... 00d0 28 d8 a8 3b b3 a6 ac eb 4e c8 5f f5 3e bf aa 34 (..;....N._.>..4 00e0 60 0f dc cb b7 ea 61 d3 c7 45 03 bc 6f 11 11 6a `.....a..E..o..j 00f0 2c bd 23 2a 1f 7c a6 4b 90 34 27 40 be fc 2a 41 ,.#*.|.K.4'@..*A 0100 8d 64 e5 c1 eb 87 f6 d0 f9 a7 f4 b0 73 18 c3 79 .d..........s..y 0110 dd 6d e4 ab d4 cf f2 2a b6 d9 b4 91 a6 8f 46 88 .m.....*......F. 0120 93 a0 ab 9a 8c 44 84 93 a0 37 63 86 a5 2a d7 84 .....D...7c..*.. 0130 5a 5c 40 97 7b 71 10 d5 e0 69 18 67 f4 0c 1a 91 Z\@.{q...i.g.... 0140 c6 19 c5 c2 04 19 10 a4 0a f8 2f 40 54 73 2b 38 ........../@Ts+8 0150 fd 2f 68 32 18 ab 75 9e 97 5a ba ff d8 9a 23 f6 ./h2..u..Z....#. 0160 06 df 04 19 1d c3 15 05 11 3a 18 4e 6a 1f 3c 6c .........:.Nj.<l 0170 99 3c b6 bb dc 84 db 6f e4 29 2e 73 b7 17 65 db .<.....o.).s..e. 0180 8f b1 81 72 fe 98 24 70 4e ad 73 38 09 7a 57 56 ...r..$pN.s8.zWV 0190 38 44 b6 29 19 56 5d 0e a1 95 37 b0 51 b4 ad d6 8D.).V]...7.Q... 01a0 8d 01 b2 bd 16 cb 8f 80 6c 03 5d f8 38 4e eb 8d ........l.].8N.. 01b0 00 08 16 80 5a 20 ca 28 27 a7 4c e3 7f 93 a5 e4 ....Z .('.L..... 01c0 73 b8 31 2a 84 f9 93 2d 1e 86 da bc 78 72 65 18 s.1*...-....xre. 01d0 b0 06 51 58 cb 9d 4c 3c 87 80 b6 cc e4 60 63 9c ..QX..L<.....`c. 01e0 a1 c7 1a 42 b4 c8 b4 d7 77 8a c3 56 61 0b 4b 52 ...B....w..Va.KR 01f0 bc 2d 90 63 2e 1a 72 71 1f c2 9d 3b 64 27 05 8b .-.c..rq...;d'.. 0200 59 46 0f 59 47 4d 5b 5f 2e 91 0c c7 5d 8a a2 f9 YF.YGM[_....]... 0210 a0 a2 2f 57 f9 74 ac 9a a2 9b 05 25 3b 79 e4 7d ../W.t.....%;y.} 0220 c5 61 96 16 79 62 c8 10 f2 32 80 0f 2f 6f 90 bc .a..yb...2../o.. 0230 27 19 e9 ee 18 6b 65 47 f3 70 c2 9d fd 8e 72 d6 '....keG.p....r. 0240 12 86 31 e2 2d c5 9b df b6 ee 3c b7 b9 ec 5a fb ..1.-.....<...Z. 0250 d2 62 13 ff 49 7e 24 85 c7 3d 19 d9 36 32 ad 2a .b..I~$..=..62.* 0260 8b f1 37 42 de 81 02 88 e4 97 c3 a3 a8 bd 76 b4 ..7B..........v. 0270 bf 24 ad ee 14 28 e1 0d 5a 4d d8 3c d0 53 be 36 .$...(..ZM.<.S.6 0280 a7 ee 77 c8 b3 54 8c b6 40 3e 5d e0 81 c9 e9 21 ..w..T..@>]....! 0290 e3 0e b0 17 7c 1e 40 88 0e 0d c1 b5 22 1a 8f d8 ....|.@....."... 02a0 2e 15 6f 3f 8c 53 8e 47 2c a1 23 c6 61 2d b0 d5 ..o?.S.G,.#.a-.. 02b0 95 33 65 be 50 0c 44 2b d6 95 99 d3 6f 0f a8 6d .3e.P.D+....o..m 02c0 e5 ff 2a 38 9a d1 bf 99 f9 95 79 64 3a ad b8 fa ..*8......yd:... 02d0 bd 06 48 3d 77 d2 be 53 b2 bb 72 58 1e 07 b6 9b ..H=w..S..rX.... 02e0 d7 b6 95 dd 61 30 cc 0c f8 04 6a aa bd 1f ce a0 ....a0....j..... 02f0 5c 9a a0 ed d2 93 9e 47 82 e9 0c 58 c8 82 11 75 \......G...X...u 0300 17 ca 1c 6b 7d d4 8f ec fd 36 0b dd 9b ff aa 51 ...k}....6.....Q 0310 b8 45 9c 96 dd 35 93 be 26 f5 b2 24 5c 77 a5 64 .E...5..&..$\w.d 0320 3c 4d 05 00 6e b7 41 72 34 7a 41 69 0b e6 d5 32 <M..n.Ar4zAi...2 0330 47 e5 b9 e7 47 30 16 21 e1 ff 77 6c 37 47 e8 fe G...G0.!..wl7G.. 0340 4e 1f 54 aa 57 e4 ae a7 54 c1 4b 7e ab cd a2 42 N.T.W...T.K~...B 0350 53 26 d6 60 eb 67 0c c0 56 fb 43 7d ff 31 12 04 S&.`.g..V.C}.1.. 0360 b3 50 03 3b 29 c9 f3 f0 4b e0 1b 27 cd 46 35 96 .P.;)...K..'.F5. 0370 3d 6d f5 84 d6 75 a6 bf 27 ca 07 96 be 7b 7a 33 =m...u..'....{z3 0380 b8 bf e3 a4 95 de 4b 19 6c 5c 81 80 8e f1 44 8e ......K.l\....D. 0390 58 4f fb 48 12 04 b9 e7 c5 05 13 a6 09 46 6e b4 XO.H.........Fn. 03a0 de 50 f8 ba e7 5d 27 0c a4 23 5d cb 2f 2b 70 ef .P...]'..#]./+p. 03b0 af e3 56 31 4d 9f 6a 3e 60 c6 0a 67 eb 00 f7 60 ..V1M.j>`..g...` 03c0 d6 94 2e df d7 f8 68 7d 1a 03 58 ca 4d 97 84 4c ......h}..X.M..L 03d0 7f bc c9 ca 6a 67 53 70 17 8a e3 09 5b bf b7 a3 ....jgSp....[... 03e0 66 60 df 0b 53 4f ea 4a 09 0b 03 91 3f 12 fe 5c f`..SO.J....?..\ 03f0 9a ab a6 e5 d6 6c bc 94 cb ab ac 3f a4 23 13 d2 .....l.....?.#.. 0400 d5 92 68 48 8a e5 e0 b4 5a ae 9a ae 35 f8 cf fd ..hH....Z...5... 0410 77 05 8a a0 10 c1 99 16 28 3d dd dc 98 b1 a9 0f w.......(=...... 0420 7d 3b 92 ff c8 ec 47 18 85 e1 2b 3f de 7e c3 ab };....G...+?.~.. 0430 1b 78 81 8d 18 65 08 10 41 cf da a3 2e b1 a1 48 .x...e..A......H 0440 e0 f3 d6 44 cd f0 cf 77 89 08 89 4a b7 27 5c 02 ...D...w...J.'\. 0450 de c0 93 08 a6 dd fc 85 51 b2 5d 7d ca d1 da b3 ........Q.]}.... 0460 f3 cb 01 c1 a9 9c 6c 77 28 45 6b 97 f6 48 ac c9 ......lw(Ek..H.. 0470 bb 70 c5 f2 f3 19 8f 9a a5 ba 6f 80 3e 50 c5 ed .p........o.>P.. 0480 ab 8d d1 61 51 30 58 99 36 3e 28 94 2d 56 15 1b ...aQ0X.6>(.-V.. 0490 bf f9 28 6b c7 3b 19 fa f7 7e 79 8e 42 5d 2a 69 ..(k.;...~y.B]*i 04a0 4c e8 0f 58 a0 b3 8a d1 30 7c ed b6 60 30 aa 5e L..X....0|..`0.^ 04b0 98 c2 9d d5 e9 31 1a 71 24 2d 1f f4 2b 5d 25 44 .....1.q$-..+]%D 04c0 1c 8d 36 89 61 b2 2b ea fb 61 e6 f6 6a e3 95 6a ..6.a.+..a..j..j 04d0 d8 41 0a 1d 2b 3c a7 c5 57 6f 14 05 86 f8 19 be .A..+<..Wo...... 04e0 33 b7 96 22 a6 88 d9 56 1b 54 c2 38 d5 9c fa 2b 3.."...V.T.8...+ 04f0 01 be 38 40 20 24 6e aa eb 1b 0a f5 35 65 ba 38 ..8@ $n.....5e.8 0500 63 9f ad a4 40 9b ca 2a f2 0d 8e 53 47 ef 3b 70 c...@..*...SG.;p 0510 73 0c 36 fc c4 9d 60 26 aa c5 b0 85 c4 72 7e c8 s.6...`&.....r~. 0520 b5 b8 04 9c 38 cc 57 5b 48 26 3f 7c 5d 62 da 09 ....8.W[H&?|]b.. 0530 cc 44 e4 f0 b9 f9 4b 71 1c a3 ae 5e a2 fd 3e db .D....Kq...^..>. 0540 1f 4f f8 28 55 dc b1 be 20 c2 82 1a 83 68 08 f9 .O.(U... ....h.. 0550 f3 0f 08 89 af ad 8f 59 9a 33 21 d9 75 45 f9 91 .......Y.3!.uE.. 0560 32 d5 60 fd 49 a9 3e 5c e7 c3 2d d5 f2 5b 02 de 2.`.I.>\..-..[.. 0570 cd b7 81 70 00 2f 32 c7 88 0c a7 1d 87 3c e5 8f ...p./2......<.. 0580 8b ad cb 44 ab 7a 78 63 58 2e 5d 9d d5 11 d0 09 ...D.zxcX.]..... 0590 28 21 c5 7b ad 01 9f 81 85 78 d9 df bc 9a 67 63 (!.{.....x....gc 05a0 36 82 b9 98 19 9a 74 39 6.....t9 No. Time Source Destination Protocol Length Info 14225 192.013397 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2813 Ack=175847 Win=65535 Len=0 TSval=729402 TSecr=583251 Frame 14225: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2813, Ack: 175847, Len: 0 No. Time Source Destination Protocol Length Info 14226 192.013508 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=175847 Ack=2813 Win=1002 Len=1448 TSval=583251 TSecr=729402 Frame 14226: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 175847, Ack: 2813, Len: 1448 Data (1448 bytes) 0000 f9 a8 02 b8 82 11 36 24 42 b4 8b f7 d1 5b 15 b3 ......6$B....[.. 0010 c6 53 47 66 a5 fa 86 df 2d 04 37 48 ca 0f 36 fc .SGf....-.7H..6. 0020 84 5d 1c 32 a9 55 58 2b ed e1 07 30 1e 98 33 cb .].2.UX+...0..3. 0030 e7 cf c0 8e 04 32 b0 78 75 ef 06 94 6e 47 e9 af .....2.xu...nG.. 0040 14 2d 21 3c 02 04 ee a1 59 63 32 1d fc e5 64 04 .-!<....Yc2...d. 0050 73 2a d3 c8 22 6e ec b3 39 2b b3 3e 44 1f 98 08 s*.."n..9+.>D... 0060 93 59 74 01 9d da 1c 16 f5 8c 11 88 75 ba 19 ad .Yt.........u... 0070 d6 01 e8 20 8e 38 d2 cf 6b 12 c4 f1 e4 24 f8 c8 ... .8..k....$.. 0080 25 0d dc 5b 1c e3 57 80 b5 46 b5 fb e4 1a 41 27 %..[..W..F....A' 0090 81 b5 f2 43 60 f3 2e 32 6b b8 09 fe 2a 27 a1 b0 ...C`..2k...*'.. 00a0 c9 ec c4 bb 19 d5 92 29 8b 0d 2c 7c 5d 95 11 a0 .......)..,|]... 00b0 d0 17 75 04 71 f2 ed b9 d6 f2 61 ac 59 bb 62 20 ..u.q.....a.Y.b 00c0 65 4f fa e4 c9 bc 1b 25 01 e0 1a ba 25 bd 26 c8 eO.....%....%.&. 00d0 01 26 9e dd b3 7e c2 1d 3f 70 35 70 5b 49 a3 d7 .&...~..?p5p[I.. 00e0 7b a4 19 78 26 77 4b f3 ed a7 65 8c 46 c7 68 6e {..x&wK...e.F.hn 00f0 7e b0 df 64 86 fa 1b b9 a5 c0 69 b8 57 dd e3 71 ~..d......i.W..q 0100 23 32 d8 50 5f 6f 7c b8 c6 cc 36 89 91 94 90 06 #2.P_o|...6..... 0110 8f a2 2f 9c d9 88 fe 3f 20 79 c3 f9 03 68 22 56 ../....? y...h"V 0120 b4 9e c7 b2 ae 11 d1 e2 4a 40 6b de 73 14 25 2c [email protected].%, 0130 db 50 8b ba 08 72 ad fd 99 9b f5 23 62 e0 ec 73 .P...r.....#b..s 0140 a5 bf 12 6b f9 f4 e9 72 51 14 ff 7d ff b6 d8 82 ...k...rQ..}.... 0150 91 ff bc 96 bd 28 ee 0e 36 05 43 4a c5 66 ab a9 .....(..6.CJ.f.. 0160 8c 6c 9b a3 db 42 90 12 e5 24 50 03 aa 5d 82 b4 .l...B...$P..].. 0170 7a 78 60 ee 8e 0a e6 df 88 73 bf 01 7f 56 32 40 zx`......s...V2@ 0180 44 04 fb 82 ea e4 e2 e3 45 19 69 20 6e 0b 13 b1 D.......E.i n... 0190 f5 94 4d 00 60 a0 69 ab 85 6e 18 91 f2 ea 6f 3f ..M.`.i..n....o? 01a0 e2 f5 13 7f 21 38 60 e3 84 5e ba 2b f1 5a 57 68 ....!8`..^.+.ZWh 01b0 91 d9 07 4f 95 fe 2e ff 27 38 97 5e 70 9b 73 d0 ...O....'8.^p.s. 01c0 16 b2 07 9b ab d5 66 40 a0 d8 3a 50 78 95 9b cd ......f@..:Px... 01d0 81 5a 4c 22 44 3f 35 34 29 88 95 be d9 0f ae f1 .ZL"D?54)....... 01e0 c4 a3 34 fc 68 63 cb d4 56 6e 85 a0 bf 4a 95 a6 ..4.hc..Vn...J.. 01f0 30 9a 48 cb 19 83 80 73 4e 8f 08 28 c5 da 83 bc 0.H....sN..(.... 0200 b9 34 c4 43 84 77 0a 4c 8b 66 ef 8d c1 f9 0c 76 .4.C.w.L.f.....v 0210 80 72 30 2f 2a f7 ef 6b ca 97 85 92 63 6a 9a 64 .r0/*..k....cj.d 0220 ba 34 dd 18 92 4e d8 c0 2b 2a 34 66 f1 24 b2 b4 .4...N..+*4f.$.. 0230 6f 6f 2b c3 7b bf c3 4d aa c7 dd d5 88 f5 c5 f6 oo+.{..M........ 0240 cb e8 29 b5 4c 9d 4f 05 6a 54 2d e7 62 3e d0 ef ..).L.O.jT-.b>.. 0250 a7 22 db 0e c3 3b cc 16 02 6f 21 67 a9 2c f9 46 ."...;...o!g.,.F 0260 0d 3a 6c 84 e4 e6 81 fd 9b 33 94 23 ba a6 3c c1 .:l......3.#..<. 0270 d0 72 1f 51 0f 6e cf 0f 4a 5a f6 39 07 bb f7 72 .r.Q.n..JZ.9...r 0280 0a 9d ec 95 96 90 c5 50 75 c9 3d 65 6e b8 dc 2e .......Pu.=en... 0290 cb 9b d5 3c 94 72 48 22 24 1a c1 5e 6d 53 0d 7e ...<.rH"$..^mS.~ 02a0 cc 7a 74 26 46 16 46 c4 60 cd e7 27 63 fe eb 2b .zt&F.F.`..'c..+ 02b0 43 bd a2 f8 e3 f1 f1 c2 74 2d 9b d7 2a e1 17 19 C.......t-..*... 02c0 71 66 7c bc 3e 1f 51 bb 72 fb dd 70 f9 89 22 96 qf|.>.Q.r..p..". 02d0 52 c1 cb a2 fd 1f aa 74 46 a3 95 d8 5c 76 d2 ba R......tF...\v.. 02e0 83 4a ad 50 6a bf 65 73 c7 91 a6 8f 0d 81 56 bd .J.Pj.es......V. 02f0 d1 37 cd 0f 73 0c fc 8b 67 45 4d 93 48 f6 98 e9 .7..s...gEM.H... 0300 f6 49 a5 f1 86 60 b9 26 5e 85 19 65 bc 61 56 9d .I...`.&^..e.aV. 0310 33 f2 0e 2b 2c 8c 02 db 5d 05 f7 d4 9b 74 27 2e 3..+,...]....t'. 0320 2a 03 cf 06 41 91 0f bb 1c 35 2d cf 15 87 3e 8a *...A....5-...>. 0330 c5 f6 f1 a7 f3 8d 46 b8 49 e7 d6 63 88 61 f5 03 ......F.I..c.a.. 0340 3a 51 d0 b0 11 2f ab fa 64 31 04 5d 74 52 90 93 :Q.../..d1.]tR.. 0350 9d d6 b4 54 6d 2c 4a e7 40 56 19 83 2e 5a ca 10 ...Tm,[email protected].. 0360 d6 ef 9a 38 c9 fd 2e b5 bd 49 31 bb c5 90 a2 db ...8.....I1..... 0370 b9 27 da e0 21 f8 d9 76 e0 af c4 dc 1c c6 e3 16 .'..!..v........ 0380 94 2c fe 17 0a 2d dd 7d d3 bf 08 81 a6 52 8e 63 .,...-.}.....R.c 0390 61 5e 51 2e 37 c4 f3 f9 84 1d 03 21 ab f9 71 41 a^Q.7......!..qA 03a0 07 34 1d 81 6a 1e c6 6b 83 c4 e8 9e 08 4f d1 16 .4..j..k.....O.. 03b0 65 85 db d3 ec f3 bd 31 26 e2 ab 0a d1 0b ad d8 e......1&....... 03c0 93 7c 6b 41 8a 39 53 3f d4 b4 3c 41 91 86 99 ba .|kA.9S?..<A.... 03d0 65 26 51 61 5b 16 54 c6 ce 93 a0 9d 94 0e 05 3a e&Qa[.T........: 03e0 5b 3a 23 52 e4 7a dc b2 87 ba 88 d1 d4 79 a7 aa [:#R.z.......y.. 03f0 61 fd e6 ed c9 e0 1f 32 1f a0 85 86 23 15 e0 8d a......2....#... 0400 9e 59 77 90 b6 51 91 71 de 75 dc 00 94 a1 d5 3e .Yw..Q.q.u.....> 0410 1d 98 ef e1 e6 cd 74 9d de 1d be 2b f5 53 40 c8 ......t....+.S@. 0420 98 c1 b1 68 6b 46 ec 52 e2 b5 98 c2 dc 78 28 06 ...hkF.R.....x(. 0430 85 8d d0 90 ed fa 4b 73 08 65 21 9e 02 ab d9 3c ......Ks.e!....< 0440 33 d5 5c 0f c4 5d 44 ae 37 f3 11 93 54 39 ed cb 3.\..]D.7...T9.. 0450 3b c7 3d 3f 8b 40 10 21 33 ee 6d c2 a6 f8 02 ee ;.=?.@.!3.m..... 0460 f4 f3 3d cf 1e db 2f 55 6c 2f 2c 2c ae 2a 02 36 ..=.../Ul/,,.*.6 0470 bc 9b 4f 60 60 73 f0 b7 92 0a 74 0b a6 b2 e4 73 ..O``s....t....s 0480 02 78 da 38 e9 11 51 3a bf 30 0e e7 f3 bb 17 8b .x.8..Q:.0...... 0490 e9 f4 5c f5 1c 7b 4a 2b b5 58 8f 80 38 e4 07 f4 ..\..{J+.X..8... 04a0 61 e2 7e 05 c6 8a e9 18 fd a1 83 51 2a ef 0b 1e a.~........Q*... 04b0 0e cd d0 ab 4d 1c 72 c9 49 67 ab e6 9d 8c 33 23 ....M.r.Ig....3# 04c0 a1 ec 86 de e7 26 ff e1 32 08 2f 8f 54 7c 2c c4 .....&..2./.T|,. 04d0 8a 05 4f d3 0f 1f 79 55 e9 70 96 1f 4b 97 2f a0 ..O...yU.p..K./. 04e0 98 51 82 0d 92 3f 46 2d 77 cf ce c8 14 70 29 3b .Q...?F-w....p); 04f0 2e fa 66 58 08 4e 1a f2 9d 19 14 7f be 62 f8 e5 ..fX.N.......b.. 0500 fb 28 19 87 95 07 33 71 f7 3f 80 5e 0f b2 92 29 .(....3q.?.^...) 0510 1d 50 b5 68 6f 79 cc 00 b0 80 0c 4c 34 81 4d a7 .P.hoy.....L4.M. 0520 63 3f 96 f5 5a f4 cd 96 fa 6f f0 b7 62 b9 9b b2 c?..Z....o..b... 0530 6b 46 6b 23 bb f4 09 2c 45 6c 4a 9f 70 84 c5 bb kFk#...,ElJ.p... 0540 2f ea 5b f5 5c 06 50 e0 9f ec 65 c2 de 93 aa 9f /.[.\.P...e..... 0550 ee 31 53 ee 2f 81 f9 19 30 d7 d0 cf bd ff 1b cf .1S./...0....... 0560 93 04 09 b6 f4 0a 66 03 ea a6 6c 66 13 8f df 4f ......f...lf...O 0570 2e 73 ea 47 b9 42 8c 88 a0 28 e0 bc fe 36 47 d8 .s.G.B...(...6G. 0580 6a 85 33 20 c7 65 69 b3 25 4d 54 d5 19 c2 e2 22 j.3 .ei.%MT...." 0590 35 b7 c7 1f 53 01 87 be 96 fb 38 9f 4a ee b0 3b 5...S.....8.J..; 05a0 c2 e0 ed c3 92 3e be 25 .....>.% No. Time Source Destination Protocol Length Info 14227 192.013610 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=177295 Ack=2813 Win=1002 Len=1448 TSval=583251 TSecr=729402 Frame 14227: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 177295, Ack: 2813, Len: 1448 Data (1448 bytes) 0000 de 2c 29 93 e3 01 a6 ef 09 1b 86 ad ed 02 80 a1 .,)............. 0010 2f 53 fc c4 b7 7b 4b 1c 96 28 ee 0d 37 10 27 b0 /S...{K..(..7.'. 0020 fd f3 e8 f6 cb 17 4f b9 15 18 1c 9a 34 6b d4 9c ......O.....4k.. 0030 27 87 3b 18 a7 41 1c 85 a8 81 bb c5 6b cb 72 0e '.;..A......k.r. 0040 28 e5 2a 1f fa d0 ef 5e 32 1f 03 4b b1 10 72 06 (.*....^2..K..r. 0050 03 e8 d7 3a 6a 30 f6 52 21 e6 d3 91 78 7d e1 d4 ...:j0.R!...x}.. 0060 7a 76 c4 a2 ac 52 80 93 27 3a c9 a2 59 e1 fc 0d zv...R..':..Y... 0070 7e 01 cf 85 e5 81 c8 18 d8 b6 dd 7e e9 31 3c e9 ~..........~.1<. 0080 90 b3 e2 24 4b 67 3c 4e 3c 37 48 c8 0f 79 f6 63 ...$Kg<N<7H..y.c 0090 bf ca 9d d3 f0 91 5f 7a cb 17 6b b3 e4 6b 8a 70 ......_z..k..k.p 00a0 1f ae 99 a4 75 53 61 b1 fa e5 cd 08 be 28 5a 02 ....uSa......(Z. 00b0 aa d4 0c 87 4b 27 c5 c4 96 4e 14 37 07 65 51 35 ....K'...N.7.eQ5 00c0 55 49 10 68 bd ca 34 a5 07 35 11 ff f0 49 b3 81 UI.h..4..5...I.. 00d0 54 89 42 54 f1 ef bb b4 b9 e5 3f 42 b2 a3 90 ac T.BT......?B.... 00e0 6a 6f d5 97 04 f3 47 bc 54 35 0e 36 d5 c7 0f 56 jo....G.T5.6...V 00f0 30 0f d6 f8 ad c4 40 e7 ce ac 0f eb 27 07 4f f9 0.....@.....'.O. 0100 2a 76 5b 97 10 bf 8d 2f eb fd 4b 8a 90 54 61 9d *v[..../..K..Ta. 0110 b9 d2 ba 61 78 2a 07 31 36 43 17 61 25 d7 d4 75 ...ax*.16C.a%..u 0120 21 6e b6 f1 b6 19 e8 7e bf 5b fc 31 33 85 af 4a !n.....~.[.13..J 0130 bf 07 e7 0a 1c 6e 40 84 25 f2 87 d4 97 8d 66 e6 .....n@.%.....f. 0140 1d b7 42 67 f0 33 7b e3 1e 6f 2f ff 3a 64 bd 4b ..Bg.3{..o/.:d.K 0150 4d 6c a3 b8 ca 5e 24 d9 ac 80 04 96 c3 d7 69 ae Ml...^$.......i. 0160 57 ba 5b b6 8f 7e 90 77 23 c1 13 c3 90 4c c5 d4 W.[..~.w#....L.. 0170 b9 02 fd 9b 95 46 43 a5 e2 70 37 5d c8 7f 7e f8 .....FC..p7]..~. 0180 50 da 38 dd 57 00 54 3e 73 73 71 a3 a8 8b 94 34 P.8.W.T>ssq....4 0190 ad 41 e3 09 cf 1e 59 8e 50 55 47 af 14 ab e2 a7 .A....Y.PUG..... 01a0 f1 bd bb 96 ea 78 8b 1f 2b d8 3b 66 d5 8d 93 1c .....x..+.;f.... 01b0 3c e0 97 41 b3 75 3f 7e dd 3b 29 20 d3 11 00 5b <..A.u?~.;) ...[ 01c0 54 eb 1c 25 ac a2 67 6c a6 92 bd 16 81 02 87 e2 T..%..gl........ 01d0 1c 02 7d b6 9d 49 35 41 22 ea b0 70 73 55 6a bd ..}..I5A"..psUj. 01e0 3b 2a 10 22 d3 d3 14 f1 29 21 76 c1 06 80 82 8f ;*."....)!v..... 01f0 f9 f9 81 1c 1f b8 27 0a 60 e1 59 07 00 98 e8 43 ......'.`.Y....C 0200 80 2e 5d c2 c9 3e b5 af e5 33 56 d3 1f 86 dd e0 ..]..>...3V..... 0210 d8 68 30 61 32 d6 d7 16 ac e4 2f eb dc b4 95 90 .h0a2...../..... 0220 bb 0f 14 4c 27 a0 2f 3b 06 fd 60 2f ca 9c 48 f1 ...L'./;..`/..H. 0230 46 58 4b 40 79 f0 c2 57 4b 7c 38 bc 23 85 7a 73 FXK@xxxxx|8.#.zs 0240 8f a8 b3 20 87 f4 6e 48 1d 7d 91 a3 bb e9 9c c7 ... ..nH.}...... 0250 8e 0a 5e f5 7d 5e 13 78 8d 3d ed bd be b8 3e 22 ..^.}^.x.=....>" 0260 4e d1 2c 32 0f 9d 40 db c2 31 da 52 76 64 f0 1a N.,2..@xxxxxxx.. 0270 9c 14 92 ba 4d f1 88 5c 0b f2 98 53 49 59 5f f4 ....M..\...SIY_. 0280 71 d1 d9 81 06 e6 69 48 6b 6a 8a 9b c7 10 31 e5 q.....iHkj....1. 0290 52 e7 0f f0 c7 58 24 7c c3 33 ad 2f 5c af 3a 1b R....X$|.3./\.:. 02a0 22 dd 0e 78 10 9a 66 1f 6b 51 bd e6 42 6e 93 4c "..x..f.kQ..Bn.L 02b0 49 00 56 64 da 68 01 2a d8 a6 56 3c 17 64 58 71 I.Vd.h.*..V<.dXq 02c0 ee 14 fb 83 da 09 b1 6a bc de 5b 54 a0 d1 0a e7 .......j..[T.... 02d0 94 57 c9 12 73 0f dc be 27 cc 74 24 3e 55 16 84 .W..s...'.t$>U.. 02e0 f6 2e 4e eb b6 19 f4 02 4a 1a 83 56 22 f7 d3 94 ..N.....J..V"... 02f0 45 0a 2f cd c3 f0 b4 70 e4 08 79 6f 33 a4 cb e6 E./....p..yo3... 0300 6f 91 31 25 ab 99 ed 2a 21 e0 65 a9 72 1a 09 1b o.1%...*!.e.r... 0310 88 8e b0 1e 12 30 34 80 92 0b ff c4 77 df 19 37 .....04.....w..7 0320 2c d8 b4 50 5a 78 59 2f 8a d1 fd d0 16 86 0d 48 ,..PZxY/.......H 0330 8d c3 1d 6d 78 b8 3a 61 65 b1 b2 49 f6 42 08 34 ...mx.:ae..I.B.4 0340 6f 3d 35 d5 90 3a 38 a2 b6 d9 be a5 08 e3 cc 9c o=5..:8......... 0350 05 4b a3 9f 3b 1c 0a 14 ee 12 1f f6 bf 29 15 d4 .K..;........).. 0360 85 15 2b bb bd ea f6 32 3f 7f b3 f8 39 e6 a4 10 ..+....2?...9... 0370 24 02 92 e9 00 ce 34 e1 f6 bc 1f 18 79 32 c3 12 $.....4.....y2.. 0380 83 e7 53 b4 f3 6a 8d f8 bd 07 67 e9 b6 e6 9a 45 ..S..j....g....E 0390 b7 ae be d1 61 99 d6 85 d7 66 ba 66 8f 30 ab d8 ....a....f.f.0.. 03a0 7c 50 71 e1 b8 cc 11 e6 bc 88 09 ca a8 19 83 e8 |Pq............. 03b0 fd 9b b3 48 75 4b 7f 2c 74 ab 04 60 a6 c0 61 8f ...HuK.,t..`..a. 03c0 7a 67 f9 98 16 24 98 19 85 76 ff c5 a9 9b 1c 1c zg...$...v...... 03d0 3c 39 7c d4 15 bc f7 19 6e 50 26 c4 82 93 ad aa <9|.....nP&..... 03e0 4f 44 7c a1 ea a4 60 49 55 35 d7 91 5a b4 86 63 OD|...`IU5..Z..c 03f0 4d a0 99 39 db 72 51 2e 41 67 75 fd 95 52 02 8a M..9.rQ.Agu..R.. 0400 44 75 1f 55 88 4b 22 63 ed ba 21 89 4d 5c 25 bd Du.U.K"c..!.M\%. 0410 75 ab 36 4b bc 4c ee d2 9a 08 c2 9b 92 8d e0 23 u.6K.L.........# 0420 2b 18 76 58 ef 9d fa 99 c3 9a 57 3b 75 66 bf ca +.vX......W;uf.. 0430 9f 8d b1 f1 e5 47 c0 62 4e be 01 d1 d3 5f 5b be .....G.bN...._[. 0440 86 c0 8e 96 49 de ff c6 71 7c d6 d5 c7 54 91 99 ....I...q|...T.. 0450 a5 23 65 68 6d d0 a7 80 13 17 7e f4 cf ba 87 d4 .#ehm.....~..... 0460 c2 c4 e7 29 c6 a5 2c 05 ed af 25 e2 f4 9f 35 df ...)..,...%...5. 0470 ad 6d 10 dd 6c d8 e2 5d f4 35 0b f9 62 2a a9 e1 .m..l..].5..b*.. 0480 ab f6 71 ad 6a a5 d9 a9 74 ad 19 bf 34 fe b3 70 ..q.j...t...4..p 0490 0a 5e c0 85 84 14 bf 9c 16 6a e3 8a 2b c1 c6 73 .^.......j..+..s 04a0 25 1c d7 1f 7a 52 90 5e ac 7a e0 70 80 00 39 f3 %...zR.^.z.p..9. 04b0 fd 12 b0 9a a8 09 be 08 44 d1 42 0c 65 c1 9c 10 ........D.B.e... 04c0 3c 52 8d ca 66 3f e2 41 d4 84 98 e8 2f e8 63 c4 <R..f?.A..../.c. 04d0 18 87 2c f1 44 cc 01 b3 c2 17 d9 e9 88 60 ff 31 ..,.D........`.1 04e0 1d 1a a1 8b 55 38 19 84 62 e9 b4 b8 86 c8 10 65 ....U8..b......e 04f0 99 ef 20 d6 8c 24 83 83 8a c6 46 06 a7 53 cc 2f .. ..$....F..S./ 0500 57 8d ea ad 5f 3c 7c 79 fe 83 9e 8b 6d 6b bc 90 W..._<|y....mk.. 0510 f4 97 95 78 13 c1 6e 05 79 19 54 c6 69 96 e7 9c ...x..n.y.T.i... 0520 00 a2 78 da 7a 53 d2 ac 80 4d f4 d6 30 33 94 d4 ..x.zS...M..03.. 0530 a7 a2 df 4f 91 f6 b8 ae e0 1e 2a 3d 77 03 b7 22 ...O......*=w.." 0540 f3 f7 4d f8 0f d0 c1 18 38 69 52 ac 41 0f df 95 ..M.....8iR.A... 0550 69 a6 48 06 b9 30 42 c0 32 03 e9 31 24 36 bd ab i.H..0B.2..1$6.. 0560 0d 85 6f fa cd 2b 86 25 8e 3c 2d f1 6a d8 0c 83 ..o..+.%.<-.j... 0570 ad 68 44 29 e3 90 d7 f9 34 1c 42 c8 b8 ba f7 07 .hD)....4.B..... 0580 74 a9 d6 90 19 36 3b a8 58 6a 7a 48 8a 9e da 0d t....6;.XjzH.... 0590 88 a8 7e fd 1f f3 30 7e f8 54 fc 90 7f 17 14 f1 ..~...0~.T...... 05a0 93 64 f0 c1 94 ae 87 18 .d...... No. Time Source Destination Protocol Length Info 14228 192.013718 192.168.10.1 192.168.10.203 TCP 1199 34433 > cds [PSH, ACK] Seq=178743 Ack=2813 Win=1002 Len=1133 TSval=583251 TSecr=729402 Frame 14228: 1199 bytes on wire (9592 bits), 1199 bytes captured (9592 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 178743, Ack: 2813, Len: 1133 Data (1133 bytes) 0000 bc 6b 1d dd 0b f5 2e e2 53 ae ed 73 e0 ab dc f2 .k......S..s.... 0010 6f 77 02 17 77 da 75 33 42 81 67 9c 84 94 88 a4 ow..w.u3B.g..... 0020 e0 e3 bd 03 72 1d e9 ee 81 05 9e 49 12 18 ab 0d ....r......I.... 0030 cf 23 f9 65 40 26 d8 88 4d 7d 53 c9 c3 07 f4 38 .#.e@&..M}S....8 0040 db db 96 ba ae cd 81 77 18 33 2f eb c1 42 34 ec .......w.3/..B4. 0050 90 ef 9a 87 b6 ec 0b ba ff ac b2 c3 08 d5 99 3f ...............? 0060 92 1a b0 96 ea 10 7a ab 7d 7d 09 97 6f 9a eb d9 ......z.}}..o... 0070 c0 7e 93 44 c8 bd f4 11 4f 9c 4e 47 c1 88 a5 76 .~.D....O.NG...v 0080 60 f6 64 a6 e7 32 c0 2b 24 e2 42 8c e9 b3 8e 3d `.d..2.+$.B....= 0090 71 17 03 13 04 e5 56 4d f0 df 2a 57 de 66 f0 65 q.....VM..*W.f.e 00a0 4e eb 97 75 cc a0 3b 43 bd 98 eb 83 d3 da 66 0f N..u..;C......f. 00b0 10 49 00 ee 8f 39 3d 36 41 aa 46 99 19 60 b5 7d .I...9=6A.F..`.} 00c0 e9 34 cc 4d 47 2f 3d 6d ff 44 54 a6 95 56 46 40 .4.MG/=m.DT..VF@ 00d0 74 7c 97 c1 da 37 06 7e c2 1b 4b 70 2b 93 9c 6c t|...7.~..Kp+..l 00e0 2e 17 61 30 31 55 b9 38 85 16 fa 04 6f 76 a3 ac ..a01U.8....ov.. 00f0 8d 79 3c 0c 51 b3 a7 62 f9 18 73 c4 5e e1 7b 62 .y<.Q..b..s.^.{b 0100 2e c3 b2 cb ae 99 15 94 07 fe cc 3f c3 5a 20 e1 ...........?.Z . 0110 d1 e7 ee 87 6b 14 bb 7d a6 d6 27 2f 73 d4 d0 40 ....k..}..'/s..@ 0120 4a 2b 2e 2c e9 ce b3 f3 d0 e2 15 14 ec b2 64 44 J+.,..........dD 0130 99 f4 97 41 43 65 16 ef c9 98 60 1e a9 22 ea 0e ...ACe....`..".. 0140 fb 67 c0 7f b4 a6 3b 87 60 7c 4b 17 de 13 8b f9 .g....;.`|K..... 0150 8f d6 14 20 9c de f3 70 5b 62 0f 95 6f 5a 3f fc ... ...p[b..oZ?. 0160 92 9e 22 81 b9 d7 77 51 fc 85 7a 8f 26 37 59 a7 .."...wQ..z.&7Y. 0170 74 f5 83 7a 37 2a 0e 60 92 2d 44 53 bf 50 4f 84 t..z7*.`.-DS.PO. 0180 c8 a2 3f 2b e3 8d 2a de dd c5 64 db a8 b9 4c b9 ..?+..*...d...L. 0190 bb 57 03 25 f8 d7 4b 9d b0 d6 c0 5d e4 e8 d4 26 .W.%..K....]...& 01a0 39 c2 40 9b 71 e6 80 7c 31 fe d5 b2 15 95 cf 78 [email protected]..|1......x 01b0 b1 6f ec 23 a9 e5 75 fa e3 c4 6d ab 89 6e ad 92 .o.#..u...m..n.. 01c0 e1 6d c3 30 4c 7c c6 b5 57 81 07 a1 0a f9 d6 2d .m.0L|..W......- 01d0 9d 04 21 09 d4 af b3 ff a2 7e 64 9e 67 b7 a3 0c ..!......~d.g... 01e0 9f 19 9e 8d 32 3d 0b 9d d5 c4 dd 9e a5 3e 01 93 ....2=.......>.. 01f0 cd 06 fc 2c 2d 15 e4 5f 08 59 f4 10 48 2d 5f db ...,-.._.Y..H-_. 0200 1e 18 62 37 e1 76 2b b8 b7 19 d3 59 5f 16 84 66 ..b7.v+....Y_..f 0210 e1 5f 69 ba 9d a7 70 d6 a0 e1 0f 8a d1 52 4c cc ._i...p......RL. 0220 e2 f2 dc f5 8d 6c ea 20 e8 8d 33 56 72 bc f6 93 .....l. ..3Vr... 0230 91 9f 03 2a 5f ad c8 01 ee 5d ae 2e 65 98 cd b9 ...*_....]..e... 0240 58 38 71 e0 85 7e 6b 9e a4 80 b1 a9 e0 03 c6 a7 X8q..~k......... 0250 f9 a1 08 d7 a4 ee e5 19 6e 90 64 57 b4 31 d9 2f ........n.dW.1./ 0260 bc 98 93 bf 80 55 72 d3 f5 24 06 87 86 8d 1e 76 .....Ur..$.....v 0270 ad f9 6e 04 0e 04 a2 b5 e9 15 3c 6c 67 6d 8a 56 ..n.......<lgm.V 0280 61 fb c6 b1 50 aa c2 0d 20 6b 55 09 b5 30 b9 ef a...P... kU..0.. 0290 71 6c 53 37 2c 3a bd d6 4f 86 26 68 89 1b 35 97 qlS7,:..O.&h..5. 02a0 f2 9d 36 18 fb 9f c1 11 9c b3 c7 43 76 cf 26 50 ..6........Cv.&P 02b0 19 10 54 26 75 dd d4 49 43 92 7d df 70 13 b4 13 ..T&u..IC.}.p... 02c0 bb 76 27 30 9a 9d 3b b0 80 08 3f 8d 92 3d 50 8a .v'0..;...?..=P. 02d0 92 08 f2 1e fd f5 b2 0b 30 f3 6b 10 f2 73 9e c4 ........0.k..s.. 02e0 83 e8 dd f0 1b 31 5d 69 d2 c5 ff 4c 73 f8 16 05 .....1]i...Ls... 02f0 18 16 b4 89 9a c9 6c f1 b6 ee 80 17 08 f4 14 4b ......l........K 0300 7f da f5 4c 5a 2a 1c e2 73 41 14 a9 53 76 f5 db ...LZ*..sA..Sv.. 0310 a5 92 7d fc b6 f1 0d 5c 46 6f a8 c6 40 9b 71 f8 ..}....\[email protected]. 0320 70 2e b2 56 d4 21 9b a5 93 d8 9e 74 db ef d2 bb p..V.!.....t.... 0330 57 18 4d 4e df 33 33 1a ee 1e 4f 85 8d c6 aa fe W.MN.33...O..... 0340 a2 3a 6d 8e d4 f2 cd 35 9f 2e 35 ce c6 07 d5 32 .:m....5..5....2 0350 0a 1c 69 dd d7 ca b0 28 ad 3a a0 b9 08 7f a8 8f ..i....(.:...... 0360 ec 01 8a 6e 29 27 b2 7b 7e 7f 6e 99 f7 08 78 1c ...n)'.{~.n...x. 0370 cb a4 ef 39 47 63 34 82 38 55 98 4f 20 bd 65 08 ...9Gc4.8U.O .e. 0380 d8 4f bf bc 2c 0c fc 9c f3 73 8b 75 83 a3 f9 2c .O..,....s.u..., 0390 65 66 84 77 2e 46 23 77 c3 96 93 fc b1 45 33 ae ef.w.F#w.....E3. 03a0 33 43 96 02 15 40 ea 76 c1 f8 99 e4 f5 cf 03 6e [email protected] 03b0 20 82 c0 e6 93 0b 4d 68 5e 26 ec cd 77 49 d5 3e .....Mh^&..wI.> 03c0 cc 51 4b e8 6d 4d 13 31 55 11 38 f1 2e 19 6d 76 .QK.mM.1U.8...mv 03d0 dd 86 61 75 33 1e 35 c5 c7 47 ee 6c f9 98 63 71 ..au3.5..G.l..cq 03e0 29 fd 02 65 5b 45 55 54 b4 29 10 16 4b 55 fe f7 )..e[EUT.)..KU.. 03f0 46 b8 f9 ae 5b e2 2b 65 21 9b 15 1d 12 ab a5 c9 F...[.+e!....... 0400 bc 97 76 5f 5d 27 74 9e 96 81 54 13 21 ce 18 49 ..v_]'t...T.!..I 0410 a6 f7 8d c6 86 1b 6c 53 2a c5 7b 19 1e bb 03 3a ......lS*.{....: 0420 ab 98 08 6a 7a b0 cf 6a 13 f9 81 eb ae 70 eb c3 ...jz..j.....p.. 0430 3d a0 5c e9 05 a2 c8 fd f2 46 a9 d8 06 d9 65 01 =.\......F....e. 0440 e3 9d 37 21 3d 47 32 79 bc e3 29 36 25 b6 b6 47 ..7!=G2y..)6%..G 0450 9f 5b 1f 10 59 57 29 8a bc 4a d3 f5 0d 0b 69 96 .[..YW)..J....i. 0460 d8 09 30 3a d7 02 b1 91 ee 00 85 78 32 ..0:.......x2 No. Time Source Destination Protocol Length Info 14229 192.013773 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2813 Ack=178743 Win=65535 Len=0 TSval=729402 TSecr=583251 Frame 14229: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2813, Ack: 178743, Len: 0 No. Time Source Destination Protocol Length Info 14230 192.016473 Watchgua_3c:4c:d8 Dell_5e:a8:82 ARP 60 Who has 192.168.10.203? Tell 192.168.10.1 Frame 14230: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14231 192.016488 Dell_5e:a8:82 Watchgua_3c:4c:d8 ARP 106 192.168.10.203 is at 00:13:72:5e:a8:82 Frame 14231: 106 bytes on wire (848 bits), 106 bytes captured (848 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14232 192.150789 208.67.222.222 192.168.10.220 DNS 86 Standard query response, No such name Frame 14232: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 50541 (50541) Domain Name System (response) No. Time Source Destination Protocol Length Info 14233 192.151384 192.168.10.203 91.186.252.14 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 14233: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 91.186.252.14 (91.186.252.14) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 14234 192.175098 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 481302784, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14234: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14235 192.175122 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 481302784, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14235: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14236 192.175135 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 481302784, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14236: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14237 192.175148 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 481302784, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14237: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14238 192.193213 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2350383360, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14238: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14239 192.193233 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2350383360, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14239: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14240 192.193246 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2350383360, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14240: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14241 192.193258 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2350383360, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14241: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14242 192.211238 192.168.10.207 206.225.164.186 SMTP 222 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 14242: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13609, Ack: 982673, Len: 168 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14243 192.211273 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=983019 Ack=13777 Win=46426 Len=0 Frame 14243: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 983019, Ack: 13777, Len: 0 No. Time Source Destination Protocol Length Info 14244 192.211307 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=13777 Ack=982673 Win=0 Len=0 Frame 14244: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13777, Ack: 982673, Len: 0 No. Time Source Destination Protocol Length Info 14245 192.212507 Watchgua_3c:4c:d8 Dell_39:5d:dd ARP 60 Who has 192.168.10.207? Tell 192.168.10.1 Frame 14245: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14246 192.212522 Dell_39:5d:dd Watchgua_3c:4c:d8 ARP 60 192.168.10.207 is at 00:18:8b:39:5d:dd Frame 14246: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14247 192.216784 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2813 Ack=179876 Win=64402 Len=0 TSval=729405 TSecr=583251 Frame 14247: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2813, Ack: 179876, Len: 0 No. Time Source Destination Protocol Length Info 14248 192.234174 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=2813 Ack=179876 Win=64402 Len=74 TSval=729405 TSecr=583251 Frame 14248: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2813, Ack: 179876, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 96 3e 8f 3a 6c 6b 4c a5 ec b1 3e .... .>.:lkL...> 0010 65 5d d6 5f 99 7a 33 75 d1 cd 20 06 f7 f3 3d b9 e]._.z3u.. ...=. 0020 a3 a0 51 c8 31 17 03 01 00 20 b8 5d 8d c3 1d 1d ..Q.1.... .].... 0030 ad 86 79 27 29 b9 59 1f 44 c4 31 3c 39 e3 51 2b ..y').Y.D.1<9.Q+ 0040 25 d8 74 85 04 35 6f 3f 50 30 %.t..5o?P0 No. Time Source Destination Protocol Length Info 14249 192.234237 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=179876 Ack=2887 Win=1002 Len=0 TSval=583306 TSecr=729405 Frame 14249: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 179876, Ack: 2887, Len: 0 No. Time Source Destination Protocol Length Info 14250 192.289735 192.168.10.207 178.148.30.51 TCP 62 smtp > aplx [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 14250: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 178.148.30.51 (178.148.30.51) Transmission Control Protocol, Src Port: smtp (25), Dst Port: aplx (1134), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 14251 192.411783 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=7981 Ack=539343 Win=49138 Len=0 Frame 14251: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7981, Ack: 539343, Len: 0 No. Time Source Destination Protocol Length Info 14252 192.411817 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 14251#1] smtp > 9428 [ACK] Seq=7981 Ack=539343 Win=49138 Len=0 Frame 14252: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7981, Ack: 539343, Len: 0 No. Time Source Destination Protocol Length Info 14253 192.411854 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14253: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 539364, Ack: 7981, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14254 192.411883 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14254: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 540744, Ack: 7981, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14255 192.411913 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14255: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 542124, Ack: 7981, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14256 192.411943 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14256: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 543504, Ack: 7981, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14257 192.411972 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14257: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 544884, Ack: 7981, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14258 192.412001 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14258: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 546264, Ack: 7981, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14259 192.412034 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14259: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 547644, Ack: 7981, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14260 192.412063 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14260: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 549024, Ack: 7981, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14261 192.412102 206.225.164.188 192.168.10.207 SMTP 501 C: DATA fragment, 447 bytes Frame 14261: 501 bytes on wire (4008 bits), 501 bytes captured (4008 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 550404, Ack: 7981, Len: 447 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14262 192.412130 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 14251#2] smtp > 9428 [ACK] Seq=7981 Ack=539343 Win=49138 Len=0 Frame 14262: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7981, Ack: 539343, Len: 0 No. Time Source Destination Protocol Length Info 14263 192.412159 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14263: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 550851, Ack: 7981, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14264 192.412189 192.168.10.207 206.225.164.188 SMTP 222 S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 14264: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 7981, Ack: 539343, Len: 168 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14265 192.412222 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=552231 Ack=8149 Win=46153 Len=0 Frame 14265: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 552231, Ack: 8149, Len: 0 No. Time Source Destination Protocol Length Info 14266 192.412250 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 14264#1] smtp > 9428 [ACK] Seq=8149 Ack=539343 Win=49138 Len=0 Frame 14266: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8149, Ack: 539343, Len: 0 No. Time Source Destination Protocol Length Info 14267 192.412278 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 14264#2] smtp > 9428 [ACK] Seq=8149 Ack=539343 Win=49138 Len=0 Frame 14267: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8149, Ack: 539343, Len: 0 No. Time Source Destination Protocol Length Info 14268 192.412305 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 14264#3] smtp > 9428 [ACK] Seq=8149 Ack=539343 Win=49138 Len=0 Frame 14268: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8149, Ack: 539343, Len: 0 No. Time Source Destination Protocol Length Info 14269 192.412332 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 14264#4] smtp > 9428 [ACK] Seq=8149 Ack=539343 Win=49138 Len=0 Frame 14269: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8149, Ack: 539343, Len: 0 No. Time Source Destination Protocol Length Info 14270 192.412360 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 14264#5] smtp > 9428 [ACK] Seq=8149 Ack=539343 Win=49138 Len=0 Frame 14270: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8149, Ack: 539343, Len: 0 No. Time Source Destination Protocol Length Info 14271 192.412388 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 14264#6] smtp > 9428 [ACK] Seq=8149 Ack=539343 Win=49138 Len=0 Frame 14271: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8149, Ack: 539343, Len: 0 No. Time Source Destination Protocol Length Info 14272 192.412416 206.225.164.188 192.168.10.207 SMTP 75 [TCP Fast Retransmission] C: DATA fragment, 21 bytes Frame 14272: 75 bytes on wire (600 bits), 75 bytes captured (600 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 539343, Ack: 8149, Len: 21 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14273 192.412444 206.225.164.188 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 14273: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 539364, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14274 192.412473 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 14264#7] smtp > 9428 [ACK] Seq=8149 Ack=539343 Win=49138 Len=0 Frame 14274: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8149, Ack: 539343, Len: 0 No. Time Source Destination Protocol Length Info 14275 192.412501 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 14264#8] smtp > 9428 [ACK] Seq=8149 Ack=539343 Win=49138 Len=0 Frame 14275: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8149, Ack: 539343, Len: 0 No. Time Source Destination Protocol Length Info 14276 192.412529 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14276: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 552231, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14277 192.412559 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14277: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 553611, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14278 192.412588 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 14264#9] smtp > 9428 [ACK] Seq=8149 Ack=539343 Win=49138 Len=0 Frame 14278: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8149, Ack: 539343, Len: 0 No. Time Source Destination Protocol Length Info 14279 192.412622 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14279: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 554991, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14280 192.412651 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14280: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 556371, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14281 192.412680 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=8149 Ack=552231 Win=36250 Len=0 Frame 14281: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8149, Ack: 552231, Len: 0 No. Time Source Destination Protocol Length Info 14282 192.412708 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=8149 Ack=554991 Win=33490 Len=0 Frame 14282: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8149, Ack: 554991, Len: 0 No. Time Source Destination Protocol Length Info 14283 192.412736 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14283: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 557751, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14284 192.412768 206.225.164.188 192.168.10.207 SMTP 1320 C: DATA fragment, 1266 bytes Frame 14284: 1320 bytes on wire (10560 bits), 1320 bytes captured (10560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 559131, Ack: 8149, Len: 1266 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14285 192.412797 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14285: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 560397, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14286 192.412826 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=8149 Ack=557751 Win=30730 Len=0 Frame 14286: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8149, Ack: 557751, Len: 0 No. Time Source Destination Protocol Length Info 14287 192.412855 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14287: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 561777, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14288 192.412884 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14288: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 563157, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14289 192.412914 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14289: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 564537, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14290 192.412943 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=8149 Ack=563157 Win=25324 Len=0 Frame 14290: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8149, Ack: 563157, Len: 0 No. Time Source Destination Protocol Length Info 14291 192.412970 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=8149 Ack=565917 Win=22564 Len=0 Frame 14291: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8149, Ack: 565917, Len: 0 No. Time Source Destination Protocol Length Info 14292 192.413004 206.225.164.188 192.168.10.207 SMTP 1385 C: DATA fragment, 1331 bytes Frame 14292: 1385 bytes on wire (11080 bits), 1385 bytes captured (11080 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 565917, Ack: 8149, Len: 1331 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14293 192.413034 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14293: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 567248, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14294 192.413073 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14294: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 568628, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14295 192.413102 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14295: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 570008, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14296 192.413132 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14296: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 571388, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14297 192.413161 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14297: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 572768, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14298 192.413189 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=8149 Ack=572768 Win=15713 Len=0 Frame 14298: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8149, Ack: 572768, Len: 0 No. Time Source Destination Protocol Length Info 14299 192.413217 206.225.164.188 192.168.10.207 SMTP 632 C: DATA fragment, 578 bytes Frame 14299: 632 bytes on wire (5056 bits), 632 bytes captured (5056 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 574148, Ack: 8149, Len: 578 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14300 192.413246 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14300: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 574726, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14301 192.413274 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14301: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 576106, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14302 192.413303 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14302: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 577486, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14303 192.413332 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=8149 Ack=574726 Win=13755 Len=0 Frame 14303: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8149, Ack: 574726, Len: 0 No. Time Source Destination Protocol Length Info 14304 192.413361 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14304: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 578866, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14305 192.413390 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14305: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 580246, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14306 192.413418 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=8149 Ack=577486 Win=10995 Len=0 Frame 14306: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8149, Ack: 577486, Len: 0 No. Time Source Destination Protocol Length Info 14307 192.413451 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14307: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 581626, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14308 192.413480 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=8149 Ack=581626 Win=6855 Len=0 Frame 14308: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8149, Ack: 581626, Len: 0 No. Time Source Destination Protocol Length Info 14309 192.413508 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14309: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 583006, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14310 192.413537 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14310: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 584386, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14311 192.413566 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14311: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 585766, Ack: 8149, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14312 192.413594 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=8149 Ack=584386 Win=4095 Len=0 Frame 14312: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8149, Ack: 584386, Len: 0 No. Time Source Destination Protocol Length Info 14313 192.413622 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=8149 Ack=587146 Win=1335 Len=0 Frame 14313: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8149, Ack: 587146, Len: 0 No. Time Source Destination Protocol Length Info 14314 192.459480 192.168.10.185 192.168.10.142 VNC 128 Authentication result Frame 14314: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 104916, Ack: 4983, Len: 74 Virtual Network Computing No. Time Source Destination Protocol Length Info 14315 192.470803 178.148.30.51 192.168.10.207 TCP 60 aplx > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 14315: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 178.148.30.51 (178.148.30.51), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: aplx (1134), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 14316 192.470949 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:47:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 178.148.30.51 7x.x.x.3 1134 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 14316: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:47:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 178.148.30.51 7x.x.x.3 1134 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 14317 192.470986 192.168.10.207 178.148.30.51 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:47:05 -0400 Frame 14317: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 178.148.30.51 (178.148.30.51) Transmission Control Protocol, Src Port: smtp (25), Dst Port: aplx (1134), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14318 192.471068 178.148.30.51 192.168.10.207 TCP 60 aplx > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 14318: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 178.148.30.51 (178.148.30.51), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: aplx (1134), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 14319 192.498924 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 14319: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 4983, Ack: 104990, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 14320 192.630918 178.148.30.51 192.168.10.207 SMTP 95 C: HELO cable-178-148-30-51.dynamic.sbb.rs Frame 14320: 95 bytes on wire (760 bits), 95 bytes captured (760 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 178.148.30.51 (178.148.30.51), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: aplx (1134), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 41 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14321 192.630959 192.168.10.207 178.148.30.51 SMTP 102 S: 250 mail.mydomain.com Hello [178.148.30.51] Frame 14321: 102 bytes on wire (816 bits), 102 bytes captured (816 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 178.148.30.51 (178.148.30.51) Transmission Control Protocol, Src Port: smtp (25), Dst Port: aplx (1134), Seq: 122, Ack: 42, Len: 48 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14322 192.631000 178.148.30.51 192.168.10.207 TCP 60 aplx > smtp [ACK] Seq=42 Ack=170 Win=93270 Len=0 Frame 14322: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 178.148.30.51 (178.148.30.51), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: aplx (1134), Dst Port: smtp (25), Seq: 42, Ack: 170, Len: 0 No. Time Source Destination Protocol Length Info 14323 192.646050 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=13777 Ack=982673 Win=49321 Len=0 Frame 14323: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13777, Ack: 982673, Len: 0 No. Time Source Destination Protocol Length Info 14324 192.646085 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 14323#1] smtp > 23308 [ACK] Seq=13777 Ack=982673 Win=49321 Len=0 Frame 14324: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13777, Ack: 982673, Len: 0 No. Time Source Destination Protocol Length Info 14325 192.646114 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14325: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 983019, Ack: 13777, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14326 192.646149 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14326: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 984399, Ack: 13777, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14327 192.646178 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14327: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 985779, Ack: 13777, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14328 192.646207 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14328: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 987159, Ack: 13777, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14329 192.646236 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14329: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 988539, Ack: 13777, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14330 192.646268 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14330: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 989919, Ack: 13777, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14331 192.646299 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14331: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 991299, Ack: 13777, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14332 192.646328 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14332: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 992679, Ack: 13777, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14333 192.646357 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14333: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 994059, Ack: 13777, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14334 192.646387 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 14323#2] smtp > 23308 [ACK] Seq=13777 Ack=982673 Win=49321 Len=0 Frame 14334: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13777, Ack: 982673, Len: 0 No. Time Source Destination Protocol Length Info 14335 192.646421 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 14335: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13777, Ack: 982673, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14336 192.646449 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=995439 Ack=13819 Win=46405 Len=0 Frame 14336: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 995439, Ack: 13819, Len: 0 No. Time Source Destination Protocol Length Info 14337 192.646486 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 14335#1] smtp > 23308 [ACK] Seq=13819 Ack=982673 Win=49321 Len=0 Frame 14337: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 982673, Len: 0 No. Time Source Destination Protocol Length Info 14338 192.646514 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 14335#2] smtp > 23308 [ACK] Seq=13819 Ack=982673 Win=49321 Len=0 Frame 14338: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 982673, Len: 0 No. Time Source Destination Protocol Length Info 14339 192.646555 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 14335#3] smtp > 23308 [ACK] Seq=13819 Ack=982673 Win=49321 Len=0 Frame 14339: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 982673, Len: 0 No. Time Source Destination Protocol Length Info 14340 192.646583 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 14335#4] smtp > 23308 [ACK] Seq=13819 Ack=982673 Win=49321 Len=0 Frame 14340: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 982673, Len: 0 No. Time Source Destination Protocol Length Info 14341 192.646611 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 14335#5] smtp > 23308 [ACK] Seq=13819 Ack=982673 Win=49321 Len=0 Frame 14341: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 982673, Len: 0 No. Time Source Destination Protocol Length Info 14342 192.646638 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 14335#6] smtp > 23308 [ACK] Seq=13819 Ack=982673 Win=49321 Len=0 Frame 14342: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 982673, Len: 0 No. Time Source Destination Protocol Length Info 14343 192.646666 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 14335#7] smtp > 23308 [ACK] Seq=13819 Ack=982673 Win=49321 Len=0 Frame 14343: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 982673, Len: 0 No. Time Source Destination Protocol Length Info 14344 192.646693 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 14335#8] smtp > 23308 [ACK] Seq=13819 Ack=982673 Win=49321 Len=0 Frame 14344: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 982673, Len: 0 No. Time Source Destination Protocol Length Info 14345 192.646721 206.225.164.186 192.168.10.207 SMTP 400 [TCP Fast Retransmission] C: DATA fragment, 346 bytes Frame 14345: 400 bytes on wire (3200 bits), 400 bytes captured (3200 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 982673, Ack: 13819, Len: 346 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14346 192.646750 206.225.164.186 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 14346: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 983019, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14347 192.646778 206.225.164.186 192.168.10.207 SMTP 172 C: DATA fragment, 118 bytes Frame 14347: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 995439, Ack: 13819, Len: 118 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14348 192.646807 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14348: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 995557, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14349 192.646836 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14349: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 996937, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14350 192.646865 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=13819 Ack=995439 Win=36555 Len=0 Frame 14350: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 995439, Len: 0 No. Time Source Destination Protocol Length Info 14351 192.646898 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=13819 Ack=996937 Win=35057 Len=0 Frame 14351: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 996937, Len: 0 No. Time Source Destination Protocol Length Info 14352 192.646927 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14352: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 998317, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14353 192.646956 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14353: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 999697, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14354 192.646985 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14354: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1001077, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14355 192.647015 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14355: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1002457, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14356 192.647044 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=13819 Ack=999697 Win=32297 Len=0 Frame 14356: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 999697, Len: 0 No. Time Source Destination Protocol Length Info 14357 192.647072 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14357: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1003837, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14358 192.647101 206.225.164.186 192.168.10.207 SMTP 583 C: DATA fragment, 529 bytes Frame 14358: 583 bytes on wire (4664 bits), 583 bytes captured (4664 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1005217, Ack: 13819, Len: 529 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14359 192.647129 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=13819 Ack=1003837 Win=28157 Len=0 Frame 14359: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 1003837, Len: 0 No. Time Source Destination Protocol Length Info 14360 192.647156 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=13819 Ack=1005746 Win=26248 Len=0 Frame 14360: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 1005746, Len: 0 No. Time Source Destination Protocol Length Info 14361 192.647185 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14361: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1005746, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14362 192.647213 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14362: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1007126, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14363 192.647243 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14363: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1008506, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14364 192.647271 206.225.164.186 192.168.10.207 SMTP 746 C: DATA fragment, 692 bytes Frame 14364: 746 bytes on wire (5968 bits), 746 bytes captured (5968 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1009886, Ack: 13819, Len: 692 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14365 192.647300 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14365: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1010578, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14366 192.647329 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14366: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1011958, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14367 192.647357 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=13819 Ack=1008506 Win=23488 Len=0 Frame 14367: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 1008506, Len: 0 No. Time Source Destination Protocol Length Info 14368 192.647392 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=13819 Ack=1010578 Win=21416 Len=0 Frame 14368: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 1010578, Len: 0 No. Time Source Destination Protocol Length Info 14369 192.647420 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14369: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1013338, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14370 192.647457 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=13819 Ack=1013338 Win=18656 Len=0 Frame 14370: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 1013338, Len: 0 No. Time Source Destination Protocol Length Info 14371 192.647485 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14371: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1014718, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14372 192.647514 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14372: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1016098, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14373 192.647543 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14373: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1017478, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14374 192.647572 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14374: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1018858, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14375 192.647600 206.225.164.186 192.168.10.207 SMTP 213 C: DATA fragment, 159 bytes Frame 14375: 213 bytes on wire (1704 bits), 213 bytes captured (1704 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1020238, Ack: 13819, Len: 159 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14376 192.647628 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14376: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1020397, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14377 192.647666 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=13819 Ack=1016098 Win=15896 Len=0 Frame 14377: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 1016098, Len: 0 No. Time Source Destination Protocol Length Info 14378 192.647694 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=13819 Ack=1018858 Win=13136 Len=0 Frame 14378: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 1018858, Len: 0 No. Time Source Destination Protocol Length Info 14379 192.647722 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14379: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1021777, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14380 192.647751 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14380: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1023157, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14381 192.647780 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=13819 Ack=1021777 Win=10217 Len=0 Frame 14381: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 1021777, Len: 0 No. Time Source Destination Protocol Length Info 14382 192.647808 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14382: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1024537, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14383 192.647838 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14383: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1025917, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14384 192.647866 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=13819 Ack=1024537 Win=7457 Len=0 Frame 14384: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 1024537, Len: 0 No. Time Source Destination Protocol Length Info 14385 192.647895 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14385: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1027297, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14386 192.647924 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14386: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1028677, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14387 192.647953 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14387: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1030057, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14388 192.647982 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=13819 Ack=1027297 Win=4697 Len=0 Frame 14388: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 1027297, Len: 0 No. Time Source Destination Protocol Length Info 14389 192.648010 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14389: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1031437, Ack: 13819, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14390 192.648038 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=13819 Ack=1030057 Win=1937 Len=0 Frame 14390: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 1030057, Len: 0 No. Time Source Destination Protocol Length Info 14391 192.648065 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=13819 Ack=1031994 Win=0 Len=0 Frame 14391: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 1031994, Len: 0 No. Time Source Destination Protocol Length Info 14392 192.677669 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=104990 Ack=5015 Win=64327 Len=0 Frame 14392: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 104990, Ack: 5015, Len: 0 No. Time Source Destination Protocol Length Info 14393 192.848984 178.148.30.51 192.168.10.207 SMTP 97 C: MAIL FROM: <ecasummation@xxxxxxxxxxxx> Frame 14393: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 178.148.30.51 (178.148.30.51), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: aplx (1134), Dst Port: smtp (25), Seq: 42, Ack: 170, Len: 43 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14394 192.849574 192.168.10.207 178.148.30.51 SMTP 107 S: 250 2.1.0 [email protected] OK Frame 14394: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 178.148.30.51 (178.148.30.51) Transmission Control Protocol, Src Port: smtp (25), Dst Port: aplx (1134), Seq: 170, Ack: 85, Len: 53 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14395 192.849632 178.148.30.51 192.168.10.207 TCP 60 aplx > smtp [ACK] Seq=85 Ack=223 Win=93218 Len=0 Frame 14395: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 178.148.30.51 (178.148.30.51), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: aplx (1134), Dst Port: smtp (25), Seq: 85, Ack: 223, Len: 0 No. Time Source Destination Protocol Length Info 14396 192.852834 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-18.geo.kaspersky.com Frame 14396: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 56679 (56679), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 14397 192.853011 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-18.geo.kaspersky.com Frame 14397: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 56679 (56679), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 14398 192.947939 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 4 Port 45 TTL = 120 Frame 14398: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 14399 193.190688 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 498080000, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14399: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14400 193.190712 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 498080000, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14400: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14401 193.190725 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 498080000, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14401: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14402 193.190737 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 498080000, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14402: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14403 193.194211 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 14403: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14404 193.208812 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2367160576, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14404: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14405 193.208835 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2367160576, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14405: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14406 193.208848 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2367160576, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14406: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14407 193.208861 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2367160576, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14407: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14408 193.247137 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 14408: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 1031994, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14409 193.247175 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1032817 Ack=13861 Win=46384 Len=0 Frame 14409: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1032817, Ack: 13861, Len: 0 No. Time Source Destination Protocol Length Info 14410 193.247208 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=13861 Ack=1031994 Win=0 Len=0 Frame 14410: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13861, Ack: 1031994, Len: 0 No. Time Source Destination Protocol Length Info 14411 193.315676 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 14411: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14412 193.393488 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 14412: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8149, Ack: 587146, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14413 193.393534 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=587146 Ack=8191 Win=46132 Len=0 Frame 14413: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 587146, Ack: 8191, Len: 0 No. Time Source Destination Protocol Length Info 14414 193.417754 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 14414: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14415 193.417785 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 14415: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14416 193.443821 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 14416: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14417 193.566238 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 14417: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14418 193.651477 192.168.10.203 91.186.252.14 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 14418: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 91.186.252.14 (91.186.252.14) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 14419 193.743676 192.168.10.190 64.74.103.148 TLSv1 91 Application Data Frame 14419: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.190 (192.168.10.190), Dst: 64.74.103.148 (64.74.103.148) Transmission Control Protocol, Src Port: wsmlb (3806), Dst Port: https (443), Seq: 223, Ack: 223, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 14420 193.743748 64.74.103.148 192.168.10.190 TCP 60 https > wsmlb [ACK] Seq=223 Ack=260 Win=65535 Len=0 Frame 14420: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Internet Protocol Version 4, Src: 64.74.103.148 (64.74.103.148), Dst: 192.168.10.190 (192.168.10.190) Transmission Control Protocol, Src Port: https (443), Dst Port: wsmlb (3806), Seq: 223, Ack: 260, Len: 0 No. Time Source Destination Protocol Length Info 14421 193.744548 Watchgua_3c:4c:d8 IntelCor_ed:1a:23 ARP 60 Who has 192.168.10.190? Tell 192.168.10.1 Frame 14421: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14422 193.744561 IntelCor_ed:1a:23 Watchgua_3c:4c:d8 ARP 60 192.168.10.190 is at 00:13:20:ed:1a:23 Frame 14422: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14423 193.755989 192.168.10.104 192.168.10.255 BROWSER 224 Become Backup Browser Frame 14423: 224 bytes on wire (1792 bits), 224 bytes captured (1792 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 14424 193.791560 64.74.103.148 192.168.10.190 TLSv1 91 Application Data Frame 14424: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Internet Protocol Version 4, Src: 64.74.103.148 (64.74.103.148), Dst: 192.168.10.190 (192.168.10.190) Transmission Control Protocol, Src Port: https (443), Dst Port: wsmlb (3806), Seq: 223, Ack: 260, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 14425 193.909751 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 14425: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14426 193.909783 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 14426: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14427 193.915397 192.168.10.190 64.74.103.148 TCP 60 wsmlb > https [ACK] Seq=260 Ack=260 Win=65387 Len=0 Frame 14427: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.190 (192.168.10.190), Dst: 64.74.103.148 (64.74.103.148) Transmission Control Protocol, Src Port: wsmlb (3806), Dst Port: https (443), Seq: 260, Ack: 260, Len: 0 No. Time Source Destination Protocol Length Info 14428 194.022930 192.168.10.94 192.168.10.255 BROWSER 243 Host Announcement CHECKSCANPC, Workstation, Server, NT Workstation, Potential Browser Frame 14428: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Intel_02:0e:d4 (00:16:76:02:0e:d4), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.94 (192.168.10.94), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 14429 194.023177 192.168.10.94 192.168.10.255 BROWSER 243 Host Announcement CHECKSCANPC, Workstation, Server, NT Workstation, Potential Browser Frame 14429: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Intel_02:0e:d4 (00:16:76:02:0e:d4), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.94 (192.168.10.94), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 14430 194.122397 192.168.10.207 206.225.164.186 SMTP 138 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 14430: 138 bytes on wire (1104 bits), 138 bytes captured (1104 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 1031994, Len: 84 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14431 194.122436 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1032817 Ack=13903 Win=46363 Len=0 Frame 14431: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1032817, Ack: 13903, Len: 0 No. Time Source Destination Protocol Length Info 14432 194.122474 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=13903 Ack=1031994 Win=0 Len=0 Frame 14432: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13903, Ack: 1031994, Len: 0 No. Time Source Destination Protocol Length Info 14433 194.206353 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 514857216, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14433: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14434 194.206379 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 514857216, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14434: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14435 194.206393 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 514857216, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14435: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14436 194.206405 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 514857216, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14436: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14437 194.224456 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2383937792, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14437: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14438 194.224479 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2383937792, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14438: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14439 194.224492 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2383937792, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14439: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14440 194.224504 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2383937792, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14440: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14441 194.415326 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 14441: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8191, Ack: 587146, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14442 194.415360 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=587146 Ack=8233 Win=46111 Len=0 Frame 14442: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 587146, Ack: 8233, Len: 0 No. Time Source Destination Protocol Length Info 14443 194.789358 192.168.10.30 192.168.10.255 UDP 764 Source port: 34427 Destination port: apc-3052 Frame 14443: 764 bytes on wire (6112 bits), 764 bytes captured (6112 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (722 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 37 3a 31 30 0a 53 52 3d 31 42 0a =18:47:10.SR=1B. 0060 53 55 3d 37 42 31 33 33 37 41 38 0a 52 44 3d 44 SU=7B1337A8.RD=D 0070 31 33 33 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 133.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 =08.7E=00.3E=001 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 31 .4C=207.3.50=041 00c0 2e 30 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 .0.43=025.2.78=0 00d0 37 2f 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 7/25/06.6A=0023: 00e0 0a 34 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 .47=S.63=BAI_UPS 00f0 20 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f .66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 =00.38=00.6E=NS0 0120 36 33 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 631005398 .6D=0 0130 37 2f 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 7/25/06.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 52 4d -UPS RT 10000 RM 0150 20 58 4c 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d XL.46=60.00.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 207.3.4E=204.4.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 =000.42=218.1.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e .5C=034.0.2F=16. 01d0 34 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 47.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 000.09=59.99;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 .E9=0.I0=2.I1=26 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a .I5=0.I6=0.I7=1. 0250 49 38 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 I8=Device 1.I9=0 0260 0a 49 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d .IA=Device 2.IB= 0270 30 0a 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 0.IC=Relay 1.ID= 0280 30 0a 53 48 3d 33 46 37 34 31 31 41 38 38 36 37 0.SH=3F7411A8867 0290 37 37 31 44 30 46 33 38 36 36 46 46 45 46 34 42 771D0F3866FFEF4B 02a0 41 33 31 34 33 0a 4d 44 3d 63 64 31 38 39 34 33 A3143.MD=cd18943 02b0 35 62 63 32 63 30 34 62 35 64 34 39 35 33 33 63 5bc2c04b5d49533c 02c0 33 62 64 62 31 36 37 37 33 0a 3c 2f 42 4f 44 59 3bdb16773.</BODY 02d0 3e 0a >. No. Time Source Destination Protocol Length Info 14444 194.789475 192.168.10.30 192.168.10.255 UDP 764 Source port: 34427 Destination port: apc-3052 Frame 14444: 764 bytes on wire (6112 bits), 764 bytes captured (6112 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (722 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 37 3a 31 30 0a 53 52 3d 31 42 0a =18:47:10.SR=1B. 0060 53 55 3d 37 42 31 33 33 37 41 38 0a 52 44 3d 44 SU=7B1337A8.RD=D 0070 31 33 33 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 133.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 =08.7E=00.3E=001 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 31 .4C=207.3.50=041 00c0 2e 30 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 .0.43=025.2.78=0 00d0 37 2f 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 7/25/06.6A=0023: 00e0 0a 34 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 .47=S.63=BAI_UPS 00f0 20 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f .66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 =00.38=00.6E=NS0 0120 36 33 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 631005398 .6D=0 0130 37 2f 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 7/25/06.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 52 4d -UPS RT 10000 RM 0150 20 58 4c 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d XL.46=60.00.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 207.3.4E=204.4.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 =000.42=218.1.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e .5C=034.0.2F=16. 01d0 34 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 47.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 000.09=59.99;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 .E9=0.I0=2.I1=26 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a .I5=0.I6=0.I7=1. 0250 49 38 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 I8=Device 1.I9=0 0260 0a 49 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d .IA=Device 2.IB= 0270 30 0a 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 0.IC=Relay 1.ID= 0280 30 0a 53 48 3d 33 46 37 34 31 31 41 38 38 36 37 0.SH=3F7411A8867 0290 37 37 31 44 30 46 33 38 36 36 46 46 45 46 34 42 771D0F3866FFEF4B 02a0 41 33 31 34 33 0a 4d 44 3d 63 64 31 38 39 34 33 A3143.MD=cd18943 02b0 35 62 63 32 63 30 34 62 35 64 34 39 35 33 33 63 5bc2c04b5d49533c 02c0 33 62 64 62 31 36 37 37 33 0a 3c 2f 42 4f 44 59 3bdb16773.</BODY 02d0 3e 0a >. No. Time Source Destination Protocol Length Info 14445 194.863091 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 3 Port 47 TTL = 120 Frame 14445: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 14446 195.116298 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 14446: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14447 195.116329 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 14447: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14448 195.151343 192.168.10.203 91.186.252.14 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 14448: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 91.186.252.14 (91.186.252.14) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 14449 195.194244 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 14449: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14450 195.221914 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 531634432, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14450: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14451 195.221938 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 531634432, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14451: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14452 195.221951 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 531634432, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14452: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14453 195.221963 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 531634432, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14453: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14454 195.240212 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2400715008, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14454: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14455 195.240235 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2400715008, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14455: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14456 195.240248 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2400715008, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14456: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14457 195.240260 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2400715008, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14457: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14458 195.315685 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 14458: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14459 195.399561 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 14459: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14460 195.399592 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 14460: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14461 195.405743 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 14461: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8233, Ack: 587146, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14462 195.405778 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=587146 Ack=8275 Win=46090 Len=0 Frame 14462: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 587146, Ack: 8275, Len: 0 No. Time Source Destination Protocol Length Info 14463 195.443842 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 14463: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14464 195.566260 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 14464: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14465 195.915293 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 14465: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14466 195.915326 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 14466: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14467 195.933177 192.168.10.207 206.225.164.186 SMTP 264 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 14467: 264 bytes on wire (2112 bits), 264 bytes captured (2112 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 1031994, Len: 210 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14468 195.933211 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1032817 Ack=14029 Win=46300 Len=0 Frame 14468: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1032817, Ack: 14029, Len: 0 No. Time Source Destination Protocol Length Info 14469 195.933240 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=14029 Ack=1031994 Win=0 Len=0 Frame 14469: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14029, Ack: 1031994, Len: 0 No. Time Source Destination Protocol Length Info 14470 195.992459 192.168.10.246 65.32.1.70 DNS 86 Standard query PTR 14.252.186.91.in-addr.arpa Frame 14470: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.70 (65.32.1.70) User Datagram Protocol, Src Port: 60923 (60923), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 14471 196.136142 65.32.1.70 192.168.10.246 DNS 146 Standard query response, No such name Frame 14471: 146 bytes on wire (1168 bits), 146 bytes captured (1168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.70 (65.32.1.70), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 60923 (60923) Domain Name System (response) No. Time Source Destination Protocol Length Info 14472 196.136531 Watchgua_3c:4c:d8 Dell_44:d0:9e ARP 60 Who has 192.168.10.246? Tell 192.168.10.1 Frame 14472: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14473 196.136766 Dell_44:d0:9e Watchgua_3c:4c:d8 ARP 60 192.168.10.246 is at 84:2b:2b:44:d0:9e Frame 14473: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14474 196.237496 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 548411648, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14474: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14475 196.237519 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 548411648, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14475: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14476 196.237532 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 548411648, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14476: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14477 196.237545 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 548411648, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14477: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14478 196.255622 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2417492224, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14478: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14479 196.255646 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2417492224, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14479: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14480 196.255658 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2417492224, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14480: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14481 196.255671 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2417492224, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14481: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14482 196.266296 192.168.10.226 192.168.10.68 ICMP 60 Echo (ping) request id=0x0400, seq=1522/61957, ttl=128 Frame 14482: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.68 (192.168.10.68) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 14483 196.266356 192.168.10.68 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=1522/61957, ttl=128 Frame 14483: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.68 (192.168.10.68), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 14484 196.266372 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.89? Tell 192.168.10.226 Frame 14484: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14485 196.266402 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.89? Tell 192.168.10.226 Frame 14485: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14486 196.266467 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 14486: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14487 196.266479 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 14487: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14488 196.266512 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 14488: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14489 196.266524 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 14489: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14490 196.266535 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 14490: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14491 196.266546 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 14491: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14492 196.266659 192.168.10.46 192.168.10.245 Syslog 214 LOCAL4.WARNING: Oct 03 2011 19:18:16 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n Frame 14492: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:18:16 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n No. Time Source Destination Protocol Length Info 14493 196.266673 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 14493: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14494 196.266685 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 14494: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14495 196.266697 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 14495: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14496 196.266709 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 14496: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14497 196.266725 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 14497: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14498 196.266761 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 14498: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14499 196.266772 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 14499: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14500 196.266782 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 14500: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14501 196.266809 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 14501: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14502 196.266819 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 14502: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14503 196.266829 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 14503: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14504 196.266848 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 14504: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14505 196.266868 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 14505: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14506 196.266878 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 14506: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14507 196.266888 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 14507: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14508 196.266898 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 14508: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14509 196.266908 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 14509: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14510 196.266918 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 14510: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14511 196.266928 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 14511: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14512 196.266939 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 14512: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14513 196.266949 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 14513: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14514 196.266959 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 14514: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14515 196.266970 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 14515: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14516 196.266980 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 14516: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14517 196.266990 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 14517: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14518 196.267005 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 14518: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14519 196.267015 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 14519: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14520 196.267073 192.168.10.226 192.168.10.1 ICMP 60 Echo (ping) request id=0x0400, seq=4850/61970, ttl=128 Frame 14520: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.1 (192.168.10.1) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 14521 196.267089 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 14521: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14522 196.267099 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 14522: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14523 196.267110 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 14523: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14524 196.267125 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 14524: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14525 196.267138 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 14525: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14526 196.267148 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 14526: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14527 196.267161 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 14527: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14528 196.267175 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 14528: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14529 196.267185 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 14529: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14530 196.267234 192.168.10.1 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=4850/61970, ttl=64 Frame 14530: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 14531 196.267245 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 14531: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14532 196.267298 192.168.10.226 192.168.10.131 ICMP 60 Echo (ping) request id=0x0400, seq=6386/61976, ttl=128 Frame 14532: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.131 (192.168.10.131) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 14533 196.267345 192.168.10.226 192.168.10.68 ICMP 60 Echo (ping) request id=0x0400, seq=6642/61977, ttl=128 Frame 14533: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.68 (192.168.10.68) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 14534 196.267356 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 14534: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14535 196.267404 192.168.10.131 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=6386/61976, ttl=128 Frame 14535: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Internet Protocol Version 4, Src: 192.168.10.131 (192.168.10.131), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 14536 196.267415 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 14536: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14537 196.267460 192.168.10.68 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=6642/61977, ttl=128 Frame 14537: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.68 (192.168.10.68), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 14538 196.267471 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 14538: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14539 196.267481 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 14539: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14540 196.267491 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 14540: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14541 196.267505 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.87? Tell 192.168.10.226 Frame 14541: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14542 196.267519 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.87? Tell 192.168.10.226 Frame 14542: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14543 196.267541 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.186? Tell 192.168.10.226 Frame 14543: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14544 196.267554 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.186? Tell 192.168.10.226 Frame 14544: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14545 196.267570 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 14545: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14546 196.267581 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 14546: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14547 196.267591 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 14547: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14548 196.267601 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 14548: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14549 196.267611 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 14549: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14550 196.267623 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 14550: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14551 196.267826 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 14551: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14552 196.267837 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 14552: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14553 196.267847 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 14553: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14554 196.267857 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 14554: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14555 196.267881 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 14555: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14556 196.267892 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 14556: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14557 196.267900 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 14557: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14558 196.267925 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 14558: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14559 196.267936 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 14559: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14560 196.267946 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 14560: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14561 196.267966 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 14561: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14562 196.267977 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 14562: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14563 196.267987 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 14563: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14564 196.267997 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 14564: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14565 196.268007 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 14565: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14566 196.268059 192.168.10.226 192.168.10.1 ICMP 60 Echo (ping) request id=0x0400, seq=9970/61990, ttl=128 Frame 14566: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.1 (192.168.10.1) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 14567 196.268070 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 14567: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14568 196.268083 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 14568: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14569 196.268094 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 14569: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14570 196.268105 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 14570: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14571 196.268116 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 14571: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14572 196.268128 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 14572: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14573 196.268146 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 14573: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14574 196.268158 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 14574: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14575 196.268169 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 14575: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14576 196.268180 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 14576: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14577 196.268190 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 14577: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14578 196.268201 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 14578: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14579 196.268221 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 14579: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14580 196.268231 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 14580: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14581 196.268241 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 14581: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14582 196.268252 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 14582: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14583 196.268262 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 14583: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14584 196.268312 192.168.10.1 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=9970/61990, ttl=64 Frame 14584: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 14585 196.268323 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 14585: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14586 196.268333 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 14586: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14587 196.268344 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 14587: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14588 196.268394 192.168.10.226 192.168.10.131 ICMP 60 Echo (ping) request id=0x0400, seq=11506/61996, ttl=128 Frame 14588: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.131 (192.168.10.131) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 14589 196.268405 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 14589: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14590 196.268453 192.168.10.131 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=11506/61996, ttl=128 Frame 14590: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Internet Protocol Version 4, Src: 192.168.10.131 (192.168.10.131), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 14591 196.268502 192.168.10.226 192.168.10.68 ICMP 60 Echo (ping) request id=0x0400, seq=11762/61997, ttl=128 Frame 14591: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.68 (192.168.10.68) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 14592 196.268559 192.168.10.68 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=11762/61997, ttl=128 Frame 14592: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.68 (192.168.10.68), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 14593 196.268612 192.168.10.226 192.168.10.1 ICMP 60 Echo (ping) request id=0x0400, seq=15090/62010, ttl=128 Frame 14593: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.1 (192.168.10.1) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 14594 196.268661 192.168.10.1 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=15090/62010, ttl=64 Frame 14594: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 14595 196.268916 192.168.10.226 192.168.10.131 ICMP 60 Echo (ping) request id=0x0400, seq=16626/62016, ttl=128 Frame 14595: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.131 (192.168.10.131) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 14596 196.268966 192.168.10.131 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=16626/62016, ttl=128 Frame 14596: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Internet Protocol Version 4, Src: 192.168.10.131 (192.168.10.131), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 14597 196.272494 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 Who has 192.168.10.226? Tell 192.168.10.1 Frame 14597: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14598 196.272556 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 192.168.10.226 is at 00:26:b9:52:f0:f3 Frame 14598: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14599 196.416977 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 14599: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8275, Ack: 587146, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14600 196.417015 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=587146 Ack=8317 Win=46069 Len=0 Frame 14600: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 587146, Ack: 8317, Len: 0 No. Time Source Destination Protocol Length Info 14601 196.761522 192.168.10.220 208.67.222.222 DNS 87 Standard query PTR 19.169.108.213.in-addr.arpa Frame 14601: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 65139 (65139), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 14602 197.196699 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 14602: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14603 197.253179 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 565188864, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14603: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14604 197.253203 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 565188864, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14604: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14605 197.253216 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 565188864, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14605: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14606 197.253228 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 565188864, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14606: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14607 197.271300 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2434269440, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14607: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14608 197.271323 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2434269440, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14608: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14609 197.271337 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2434269440, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14609: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14610 197.271349 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2434269440, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14610: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14611 197.315662 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 14611: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14612 197.328954 208.67.222.222 192.168.10.220 DNS 87 Standard query response, No such name Frame 14612: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 65139 (65139) Domain Name System (response) No. Time Source Destination Protocol Length Info 14613 197.329665 192.168.10.203 213.108.169.19 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 14613: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 213.108.169.19 (213.108.169.19) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 14614 197.397698 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 14614: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14615 197.397729 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 14615: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14616 197.409376 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 14616: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8317, Ack: 587146, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14617 197.409413 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=587146 Ack=8359 Win=46048 Len=0 Frame 14617: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 587146, Ack: 8359, Len: 0 No. Time Source Destination Protocol Length Info 14618 197.443930 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 14618: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14619 197.566334 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 14619: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14620 197.741424 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.89? Tell 192.168.10.226 Frame 14620: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14621 197.741456 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.89? Tell 192.168.10.226 Frame 14621: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14622 197.741499 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 14622: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14623 197.741511 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 14623: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14624 197.741521 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 14624: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14625 197.741531 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 14625: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14626 197.741544 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 14626: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14627 197.741554 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 14627: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14628 197.741567 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 14628: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14629 197.741579 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 14629: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14630 197.741589 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 14630: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14631 197.741605 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 14631: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14632 197.741640 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 14632: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14633 197.741650 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 14633: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14634 197.741677 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 14634: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14635 197.741687 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 14635: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14636 197.741697 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 14636: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14637 197.741714 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 14637: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14638 197.741725 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 14638: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14639 197.741735 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 14639: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14640 197.741745 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 14640: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14641 197.741755 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 14641: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14642 197.741765 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 14642: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14643 197.741775 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 14643: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14644 197.741786 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 14644: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14645 197.741800 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 14645: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14646 197.741814 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 14646: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14647 197.741828 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 14647: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14648 197.741838 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 14648: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14649 197.741848 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 14649: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14650 197.741859 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 14650: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14651 197.741869 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 14651: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14652 197.741879 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 14652: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14653 197.741892 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 14653: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14654 197.741902 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 14654: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14655 197.741912 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 14655: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14656 197.741923 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 14656: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14657 197.741937 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 14657: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14658 197.741947 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 14658: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14659 197.741957 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 14659: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14660 197.741967 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 14660: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14661 197.741981 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 14661: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14662 197.741991 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 14662: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14663 197.742005 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 14663: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14664 197.742018 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 14664: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14665 197.742029 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 14665: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14666 197.742039 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 14666: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14667 197.742049 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 14667: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14668 197.742059 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 14668: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14669 197.742092 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 14669: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14670 197.906148 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 14670: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14671 197.906178 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 14671: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14672 197.996575 206.225.164.186 192.168.10.207 TCP 60 [TCP Dup ACK 14468#1] 23308 > smtp [ACK] Seq=1032817 Ack=14029 Win=46300 Len=0 Frame 14672: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1032817, Ack: 14029, Len: 0 No. Time Source Destination Protocol Length Info 14673 197.996641 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=14029 Ack=1031994 Win=0 Len=0 Frame 14673: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14029, Ack: 1031994, Len: 0 No. Time Source Destination Protocol Length Info 14674 197.996799 192.168.10.1 192.168.10.245 Syslog 202 LOCAL1.INFO: Oct 3 19:47:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 84.109.32.117 7x.x.x.3 24849 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 14674: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:47:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 84.109.32.117 7x.x.x.3 24849 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 14675 198.000555 Watchgua_3c:4c:d8 SunrichT_19:cf:97 ARP 60 Who has 192.168.10.245? Tell 192.168.10.1 Frame 14675: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14676 198.000563 SunrichT_19:cf:97 Watchgua_3c:4c:d8 ARP 60 192.168.10.245 is at 00:0a:cd:19:cf:97 Frame 14676: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:97 (00:0a:cd:19:cf:97), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14677 198.268782 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 581966080, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14677: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14678 198.268806 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 581966080, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14678: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14679 198.268819 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 581966080, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14679: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14680 198.268831 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 581966080, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14680: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14681 198.286875 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2451046656, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14681: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14682 198.286891 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2451046656, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14682: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14683 198.286903 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2451046656, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14683: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14684 198.286916 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2451046656, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14684: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14685 198.430652 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 14685: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8359, Ack: 587146, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14686 198.430686 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=587146 Ack=8401 Win=46720 Len=0 Frame 14686: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 587146, Ack: 8401, Len: 0 No. Time Source Destination Protocol Length Info 14687 198.829081 192.168.10.203 213.108.169.19 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 14687: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 213.108.169.19 (213.108.169.19) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 14688 199.026108 213.108.175.19 192.168.10.203 ICMP 120 Destination unreachable (Host unreachable) Frame 14688: 120 bytes on wire (960 bits), 120 bytes captured (960 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 213.108.175.19 (213.108.175.19), Dst: 192.168.10.203 (192.168.10.203) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 14689 199.194138 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 14689: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14690 199.284407 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 598743296, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14690: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14691 199.284430 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 598743296, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14691: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14692 199.284443 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 598743296, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14692: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14693 199.284455 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 598743296, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14693: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14694 199.302546 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2467823872, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14694: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14695 199.302563 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2467823872, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14695: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14696 199.302575 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2467823872, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14696: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14697 199.302587 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2467823872, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14697: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14698 199.315556 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 14698: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14699 199.403131 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 14699: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14700 199.403149 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 14700: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14701 199.432631 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 14701: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8401, Ack: 587146, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14702 199.432663 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=587146 Ack=8443 Win=46699 Len=0 Frame 14702: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 587146, Ack: 8443, Len: 0 No. Time Source Destination Protocol Length Info 14703 199.443810 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 14703: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14704 199.525331 192.168.10.31 192.168.20.3 UDP 776 Source port: 50764 Destination port: apc-3052 Frame 14704: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 35 31 3a 34 31 0a 53 52 3d 31 30 37 =19:51:41.SR=107 0060 43 0a 53 55 3d 32 44 38 33 30 33 44 41 0a 52 44 C.SU=2D8303DA.RD 0070 3d 34 45 44 33 0a 54 41 3d 31 39 32 2e 31 36 38 =4ED3.TA=192.168 0080 2e 32 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a .20.3.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 35 .4C=207.3.50=035 00c0 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 3d 31 .0.43=029.1.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 37 3a 1/19/07.6A=0057: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 3d 31 746005443 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d .46=60.00.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 37 2e 33 0a 34 207.3.4E=207.3.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 34 2e .5C=028.0.2F=14. 01d0 33 31 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 31.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 000.09=60.00;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 33 36 36 35 38 30 46 34 34 41 30 39 31 32 31 =366580F44A09121 02a0 31 44 34 37 36 42 36 45 45 36 39 37 42 39 37 33 1D476B6EE697B973 02b0 44 0a 4d 44 3d 39 65 36 66 35 36 39 36 38 38 31 D.MD=9e6f5696881 02c0 37 38 63 34 65 32 30 39 66 33 62 39 64 39 38 37 78c4e209f3b9d987 02d0 33 34 62 63 39 0a 3c 2f 42 4f 44 59 3e 0a 34bc9.</BODY>. No. Time Source Destination Protocol Length Info 14705 199.525407 192.168.10.31 192.168.20.3 UDP 776 Source port: 50764 Destination port: apc-3052 Frame 14705: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 35 31 3a 34 31 0a 53 52 3d 31 30 37 =19:51:41.SR=107 0060 43 0a 53 55 3d 32 44 38 33 30 33 44 41 0a 52 44 C.SU=2D8303DA.RD 0070 3d 34 45 44 33 0a 54 41 3d 31 39 32 2e 31 36 38 =4ED3.TA=192.168 0080 2e 32 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a .20.3.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 35 .4C=207.3.50=035 00c0 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 3d 31 .0.43=029.1.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 37 3a 1/19/07.6A=0057: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 3d 31 746005443 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d .46=60.00.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 37 2e 33 0a 34 207.3.4E=207.3.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 34 2e .5C=028.0.2F=14. 01d0 33 31 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 31.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 000.09=60.00;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 33 36 36 35 38 30 46 34 34 41 30 39 31 32 31 =366580F44A09121 02a0 31 44 34 37 36 42 36 45 45 36 39 37 42 39 37 33 1D476B6EE697B973 02b0 44 0a 4d 44 3d 39 65 36 66 35 36 39 36 38 38 31 D.MD=9e6f5696881 02c0 37 38 63 34 65 32 30 39 66 33 62 39 64 39 38 37 78c4e209f3b9d987 02d0 33 34 62 63 39 0a 3c 2f 42 4f 44 59 3e 0a 34bc9.</BODY>. No. Time Source Destination Protocol Length Info 14706 199.525420 Watchgua_3c:4c:d8 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.1 Frame 14706: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14707 199.525502 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:18:20 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS2/50764 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 14707: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:18:20 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS2/50764 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 14708 199.525514 Cisco_bb:96:6d Watchgua_3c:4c:d8 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 14708: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 14709 199.554171 192.168.10.207 206.225.164.186 SMTP 474 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 14709: 474 bytes on wire (3792 bits), 474 bytes captured (3792 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 13819, Ack: 1031994, Len: 420 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14710 199.554191 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1032817 Ack=14239 Win=46195 Len=0 Frame 14710: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1032817, Ack: 14239, Len: 0 No. Time Source Destination Protocol Length Info 14711 199.554291 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=14239 Ack=1031994 Win=0 Len=0 Frame 14711: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14239, Ack: 1031994, Len: 0 No. Time Source Destination Protocol Length Info 14712 199.566243 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 14712: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14713 199.664333 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 4 Port 48 TTL = 120 Frame 14713: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 14714 199.671522 192.168.10.32 192.168.20.3 UDP 661 Source port: 38302 Destination port: apc-3052 Frame 14714: 661 bytes on wire (5288 bits), 661 bytes captured (5288 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (619 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 44 54 3d 31 30 .168.10.32.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 32 30 3a 35 /03/2011.TM=20:5 0040 39 3a 32 31 0a 53 52 3d 30 31 31 35 45 37 0a 53 9:21.SR=0115E7.S 0050 55 3d 33 35 35 44 0a 52 44 3d 43 39 46 39 0a 54 U=355D.RD=C9F9.T 0060 41 3d 31 39 32 2e 31 36 38 2e 32 30 2e 33 0a 50 A=192.168.20.3.P 0070 54 3d 33 30 35 32 0a 43 4c 3d 43 30 41 38 30 41 T=3052.CL=C0A80A 0080 31 30 0a 43 4c 3d 43 30 41 38 30 41 43 45 0a 43 10.CL=C0A80ACE.C 0090 4c 3d 43 30 41 38 30 41 44 30 0a 43 4c 3d 43 30 L=C0A80AD0.CL=C0 00a0 41 38 30 41 43 39 0a 43 4c 3d 43 30 41 38 30 41 A80AC9.CL=C0A80A 00b0 46 30 0a 43 4c 3d 43 30 41 38 30 41 43 43 0a 43 F0.CL=C0A80ACC.C 00c0 4c 3d 43 30 41 38 30 41 43 46 0a 43 4c 3d 43 30 L=C0A80ACF.CL=C0 00d0 41 38 30 41 43 42 0a 43 4c 3d 43 30 41 38 30 41 A80ACB.CL=C0A80A 00e0 44 42 0a 43 4c 3d 43 30 41 38 30 41 44 43 0a 43 DB.CL=C0A80ADC.C 00f0 4c 3d 43 30 41 38 30 41 43 44 0a 43 4c 3d 43 30 L=C0A80ACD.CL=C0 0100 41 38 30 41 30 44 0a 43 4c 3d 43 30 41 38 30 41 A80A0D.CL=C0A80A 0110 30 46 0a 43 4c 3d 43 30 41 38 30 41 30 43 0a 43 0F.CL=C0A80A0C.C 0120 4c 3d 43 30 41 38 30 41 44 31 0a 43 4c 3d 43 30 L=C0A80AD1.CL=C0 0130 41 38 30 41 43 41 0a 43 4c 3d 43 30 41 38 30 41 A80ACA.CL=C0A80A 0140 46 41 0a 43 4c 3d 43 30 41 38 30 41 44 38 0a 43 FA.CL=C0A80AD8.C 0150 4c 3d 43 30 41 38 30 41 32 37 0a 43 4c 3d 43 30 L=C0A80A27.CL=C0 0160 41 38 30 41 44 39 0a 43 4c 3d 43 30 41 38 30 41 A80AD9.CL=C0A80A 0170 44 33 0a 43 4c 3d 43 30 41 38 30 41 44 32 0a 43 D3.CL=C0A80AD2.C 0180 4c 3d 43 30 41 38 30 41 45 32 0a 43 4c 3d 43 30 L=C0A80AE2.CL=C0 0190 41 38 30 41 45 33 0a 43 4c 3d 43 30 41 38 30 41 A80AE3.CL=C0A80A 01a0 44 45 0a 43 4c 3d 43 30 41 38 31 34 30 33 0a 43 DE.CL=C0A81403.C 01b0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01c0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01d0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 01e0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01f0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0200 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0210 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0220 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0230 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 4d 00.CL=00.CL=00.M 0240 44 3d 65 37 34 66 64 32 36 33 66 62 37 39 64 37 D=e74fd263fb79d7 0250 37 34 39 64 65 65 39 33 62 39 35 64 66 30 38 30 749dee93b95df080 0260 38 63 0a 3c 2f 42 4f 44 59 3e 0a 8c.</BODY>. No. Time Source Destination Protocol Length Info 14715 199.671617 192.168.10.32 192.168.20.3 UDP 661 Source port: 38302 Destination port: apc-3052 Frame 14715: 661 bytes on wire (5288 bits), 661 bytes captured (5288 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (619 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 44 54 3d 31 30 .168.10.32.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 32 30 3a 35 /03/2011.TM=20:5 0040 39 3a 32 31 0a 53 52 3d 30 31 31 35 45 37 0a 53 9:21.SR=0115E7.S 0050 55 3d 33 35 35 44 0a 52 44 3d 43 39 46 39 0a 54 U=355D.RD=C9F9.T 0060 41 3d 31 39 32 2e 31 36 38 2e 32 30 2e 33 0a 50 A=192.168.20.3.P 0070 54 3d 33 30 35 32 0a 43 4c 3d 43 30 41 38 30 41 T=3052.CL=C0A80A 0080 31 30 0a 43 4c 3d 43 30 41 38 30 41 43 45 0a 43 10.CL=C0A80ACE.C 0090 4c 3d 43 30 41 38 30 41 44 30 0a 43 4c 3d 43 30 L=C0A80AD0.CL=C0 00a0 41 38 30 41 43 39 0a 43 4c 3d 43 30 41 38 30 41 A80AC9.CL=C0A80A 00b0 46 30 0a 43 4c 3d 43 30 41 38 30 41 43 43 0a 43 F0.CL=C0A80ACC.C 00c0 4c 3d 43 30 41 38 30 41 43 46 0a 43 4c 3d 43 30 L=C0A80ACF.CL=C0 00d0 41 38 30 41 43 42 0a 43 4c 3d 43 30 41 38 30 41 A80ACB.CL=C0A80A 00e0 44 42 0a 43 4c 3d 43 30 41 38 30 41 44 43 0a 43 DB.CL=C0A80ADC.C 00f0 4c 3d 43 30 41 38 30 41 43 44 0a 43 4c 3d 43 30 L=C0A80ACD.CL=C0 0100 41 38 30 41 30 44 0a 43 4c 3d 43 30 41 38 30 41 A80A0D.CL=C0A80A 0110 30 46 0a 43 4c 3d 43 30 41 38 30 41 30 43 0a 43 0F.CL=C0A80A0C.C 0120 4c 3d 43 30 41 38 30 41 44 31 0a 43 4c 3d 43 30 L=C0A80AD1.CL=C0 0130 41 38 30 41 43 41 0a 43 4c 3d 43 30 41 38 30 41 A80ACA.CL=C0A80A 0140 46 41 0a 43 4c 3d 43 30 41 38 30 41 44 38 0a 43 FA.CL=C0A80AD8.C 0150 4c 3d 43 30 41 38 30 41 32 37 0a 43 4c 3d 43 30 L=C0A80A27.CL=C0 0160 41 38 30 41 44 39 0a 43 4c 3d 43 30 41 38 30 41 A80AD9.CL=C0A80A 0170 44 33 0a 43 4c 3d 43 30 41 38 30 41 44 32 0a 43 D3.CL=C0A80AD2.C 0180 4c 3d 43 30 41 38 30 41 45 32 0a 43 4c 3d 43 30 L=C0A80AE2.CL=C0 0190 41 38 30 41 45 33 0a 43 4c 3d 43 30 41 38 30 41 A80AE3.CL=C0A80A 01a0 44 45 0a 43 4c 3d 43 30 41 38 31 34 30 33 0a 43 DE.CL=C0A81403.C 01b0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01c0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01d0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 01e0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01f0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0200 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0210 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0220 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0230 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 4d 00.CL=00.CL=00.M 0240 44 3d 65 37 34 66 64 32 36 33 66 62 37 39 64 37 D=e74fd263fb79d7 0250 37 34 39 64 65 65 39 33 62 39 35 64 66 30 38 30 749dee93b95df080 0260 38 63 0a 3c 2f 42 4f 44 59 3e 0a 8c.</BODY>. No. Time Source Destination Protocol Length Info 14716 199.671695 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:18:20 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS3/38302 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 14716: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:18:20 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS3/38302 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 14717 199.856590 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-19.geo.kaspersky.com Frame 14717: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 55399 (55399), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 14718 199.904266 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 14718: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14719 199.904298 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 14719: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14720 199.937256 192.168.10.1 192.168.10.245 Syslog 310 LOCAL1.INFO: Oct 3 19:47:37 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 178.148.30.51 7x.x.x.3 1134 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="ecasummation@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 14720: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:47:37 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 178.148.30.51 7x.x.x.3 1134 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" No. Time Source Destination Protocol Length Info 14721 200.299987 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 615520512, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14721: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14722 200.300010 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 615520512, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14722: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14723 200.300023 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 615520512, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14723: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14724 200.300036 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 615520512, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14724: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14725 200.318097 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2484601088, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14725: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14726 200.318118 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2484601088, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14726: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14727 200.318130 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2484601088, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14727: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14728 200.318142 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2484601088, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14728: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14729 200.328995 192.168.10.203 213.108.169.19 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 14729: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 213.108.169.19 (213.108.169.19) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 14730 200.514264 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 14730: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14731 200.514296 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 14731: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14732 200.526159 213.108.175.19 192.168.10.203 ICMP 120 Destination unreachable (Host unreachable) Frame 14732: 120 bytes on wire (960 bits), 120 bytes captured (960 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 213.108.175.19 (213.108.175.19), Dst: 192.168.10.203 (192.168.10.203) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 14733 200.533703 IntelCor_ed:1c:1c Broadcast ARP 60 Who has 192.168.10.39? Tell 192.168.10.225 Frame 14733: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1c:1c (00:13:20:ed:1c:1c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14734 200.533732 IntelCor_ed:1c:1c Broadcast ARP 60 Who has 192.168.10.39? Tell 192.168.10.225 Frame 14734: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1c:1c (00:13:20:ed:1c:1c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14735 200.572329 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 14735: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8443, Ack: 587146, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14736 200.572363 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=587146 Ack=8485 Win=46678 Len=0 Frame 14736: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 587146, Ack: 8485, Len: 0 No. Time Source Destination Protocol Length Info 14737 200.856617 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-19.geo.kaspersky.com Frame 14737: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 55399 (55399), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 14738 201.194109 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 14738: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14739 201.315578 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 14739: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14740 201.315599 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 632297728, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14740: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14741 201.315618 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 632297728, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14741: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14742 201.315631 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 632297728, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14742: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14743 201.315643 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 632297728, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14743: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14744 201.333713 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2501378304, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14744: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14745 201.333736 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2501378304, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14745: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14746 201.333749 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2501378304, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14746: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14747 201.333761 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2501378304, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14747: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14748 201.394369 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 14748: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14749 201.394401 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 14749: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14750 201.443924 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 14750: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14751 201.566362 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 14751: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14752 201.592893 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 14752: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8485, Ack: 587146, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14753 201.592931 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=587146 Ack=8527 Win=46657 Len=0 Frame 14753: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 587146, Ack: 8527, Len: 0 No. Time Source Destination Protocol Length Info 14754 201.786404 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14754: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5015, Ack: 104990, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14755 201.803114 192.168.10.185 192.168.10.142 VNC 315 Authentication result Frame 14755: 315 bytes on wire (2520 bits), 315 bytes captured (2520 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 104990, Ack: 5042, Len: 261 Virtual Network Computing No. Time Source Destination Protocol Length Info 14756 201.826194 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 14756: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5042, Ack: 105251, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 14757 201.856648 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-19.geo.kaspersky.com Frame 14757: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 55399 (55399), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 14758 201.878204 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14758: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5074, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14759 201.878240 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=5101 Win=65535 Len=0 Frame 14759: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 5101, Len: 0 No. Time Source Destination Protocol Length Info 14760 201.903094 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14760: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5101, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14761 201.906216 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14761: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5128, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14762 201.906249 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=5155 Win=65481 Len=0 Frame 14762: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 5155, Len: 0 No. Time Source Destination Protocol Length Info 14763 201.910054 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 14763: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14764 201.910093 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 14764: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14765 201.910449 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14765: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5155, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14766 201.919188 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14766: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5182, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14767 201.919221 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=5209 Win=65427 Len=0 Frame 14767: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 5209, Len: 0 No. Time Source Destination Protocol Length Info 14768 201.929444 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14768: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5209, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14769 201.934770 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14769: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5236, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14770 201.934804 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=5263 Win=65373 Len=0 Frame 14770: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 5263, Len: 0 No. Time Source Destination Protocol Length Info 14771 201.940273 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14771: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5263, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14772 201.952790 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14772: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5290, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14773 201.952825 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=5317 Win=65319 Len=0 Frame 14773: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 5317, Len: 0 No. Time Source Destination Protocol Length Info 14774 201.956517 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14774: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5317, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14775 201.964387 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14775: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5344, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14776 201.964420 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=5371 Win=65265 Len=0 Frame 14776: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 5371, Len: 0 No. Time Source Destination Protocol Length Info 14777 201.969927 192.168.10.220 208.67.222.222 DNS 85 Standard query PTR 181.71.84.92.in-addr.arpa Frame 14777: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 59323 (59323), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 14778 201.973011 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14778: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5371, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14779 201.982357 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14779: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5398, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14780 201.982389 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=5425 Win=65211 Len=0 Frame 14780: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 5425, Len: 0 No. Time Source Destination Protocol Length Info 14781 201.992273 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14781: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5425, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14782 201.996668 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14782: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5452, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14783 201.996701 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=5479 Win=65157 Len=0 Frame 14783: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 5479, Len: 0 No. Time Source Destination Protocol Length Info 14784 202.004400 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14784: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5479, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14785 202.015503 208.67.222.222 192.168.10.220 DNS 85 Standard query response, No such name Frame 14785: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 59323 (59323) Domain Name System (response) No. Time Source Destination Protocol Length Info 14786 202.016042 192.168.10.203 92.84.71.181 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 14786: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 92.84.71.181 (92.84.71.181) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 14787 202.016173 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14787: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5506, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14788 202.016208 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=5533 Win=65103 Len=0 Frame 14788: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 5533, Len: 0 No. Time Source Destination Protocol Length Info 14789 202.026203 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14789: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5533, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14790 202.032930 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14790: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5560, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14791 202.032964 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=5587 Win=65049 Len=0 Frame 14791: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 5587, Len: 0 No. Time Source Destination Protocol Length Info 14792 202.118384 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 14792: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5614, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14793 202.118419 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 14791#1] rfb > xrl [ACK] Seq=105251 Ack=5587 Win=65049 Len=0 SLE=5614 SRE=5641 Frame 14793: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 5587, Len: 0 No. Time Source Destination Protocol Length Info 14794 202.126255 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14794: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5641, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14795 202.126291 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 14791#2] rfb > xrl [ACK] Seq=105251 Ack=5587 Win=65049 Len=0 SLE=5614 SRE=5668 Frame 14795: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 5587, Len: 0 No. Time Source Destination Protocol Length Info 14796 202.133892 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14796: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5668, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14797 202.133924 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 14791#3] rfb > xrl [ACK] Seq=105251 Ack=5587 Win=65049 Len=0 SLE=5614 SRE=5695 Frame 14797: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 5587, Len: 0 No. Time Source Destination Protocol Length Info 14798 202.146194 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14798: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5695, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14799 202.146229 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 14791#4] rfb > xrl [ACK] Seq=105251 Ack=5587 Win=65049 Len=0 SLE=5614 SRE=5722 Frame 14799: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 5587, Len: 0 No. Time Source Destination Protocol Length Info 14800 202.152060 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 14800: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5587, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14801 202.152096 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=5722 Win=64914 Len=0 Frame 14801: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 5722, Len: 0 No. Time Source Destination Protocol Length Info 14802 202.152148 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14802: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5722, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14803 202.160267 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14803: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5749, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14804 202.160302 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=5776 Win=64860 Len=0 Frame 14804: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 5776, Len: 0 No. Time Source Destination Protocol Length Info 14805 202.172442 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14805: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5776, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14806 202.331256 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 649074944, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14806: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14807 202.331280 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 649074944, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14807: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14808 202.331294 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 649074944, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14808: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14809 202.331306 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 649074944, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14809: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14810 202.349365 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2518155520, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14810: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14811 202.349384 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2518155520, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14811: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14812 202.349396 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2518155520, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14812: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14813 202.349408 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2518155520, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14813: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14814 202.412047 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=5803 Win=64833 Len=0 Frame 14814: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 5803, Len: 0 No. Time Source Destination Protocol Length Info 14815 202.610321 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 14815: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8527, Ack: 587146, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14816 202.610356 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=587146 Ack=8569 Win=46636 Len=0 Frame 14816: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 587146, Ack: 8569, Len: 0 No. Time Source Destination Protocol Length Info 14817 202.699663 Dell_44:d0:a0 Broadcast ARP 60 Gratuitous ARP for 192.168.0.120 (Reply) Frame 14817: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:a0 (84:2b:2b:44:d0:a0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply/gratuitous ARP) No. Time Source Destination Protocol Length Info 14818 202.699695 Dell_44:d0:a0 Broadcast ARP 60 Gratuitous ARP for 192.168.0.120 (Reply) Frame 14818: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:a0 (84:2b:2b:44:d0:a0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply/gratuitous ARP) No. Time Source Destination Protocol Length Info 14819 202.718432 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14819: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5803, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14820 202.726316 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14820: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5830, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14821 202.726350 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=5857 Win=64779 Len=0 Frame 14821: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 5857, Len: 0 No. Time Source Destination Protocol Length Info 14822 202.736417 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14822: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5857, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14823 202.746218 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14823: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5884, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14824 202.746251 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=5911 Win=64725 Len=0 Frame 14824: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 5911, Len: 0 No. Time Source Destination Protocol Length Info 14825 202.750362 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14825: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5911, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14826 202.758394 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14826: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5938, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14827 202.758428 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=5965 Win=64671 Len=0 Frame 14827: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 5965, Len: 0 No. Time Source Destination Protocol Length Info 14828 202.778525 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14828: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5965, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14829 202.782380 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14829: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 5992, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14830 202.782414 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=6019 Win=64617 Len=0 Frame 14830: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 6019, Len: 0 No. Time Source Destination Protocol Length Info 14831 202.782512 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14831: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6019, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14832 202.790274 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14832: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6046, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14833 202.790307 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=6073 Win=64563 Len=0 Frame 14833: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 6073, Len: 0 No. Time Source Destination Protocol Length Info 14834 202.798319 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14834: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6073, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14835 202.807594 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14835: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6100, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14836 202.807627 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=6127 Win=64509 Len=0 Frame 14836: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 6127, Len: 0 No. Time Source Destination Protocol Length Info 14837 202.826677 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 14837: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6154, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14838 202.826716 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 14836#1] rfb > xrl [ACK] Seq=105251 Ack=6127 Win=64509 Len=0 SLE=6154 SRE=6181 Frame 14838: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 6127, Len: 0 No. Time Source Destination Protocol Length Info 14839 202.830481 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14839: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6181, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14840 202.830513 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 14836#2] rfb > xrl [ACK] Seq=105251 Ack=6127 Win=64509 Len=0 SLE=6154 SRE=6208 Frame 14840: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 6127, Len: 0 No. Time Source Destination Protocol Length Info 14841 202.841604 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14841: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6208, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14842 202.841639 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 14836#3] rfb > xrl [ACK] Seq=105251 Ack=6127 Win=64509 Len=0 SLE=6154 SRE=6235 Frame 14842: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 6127, Len: 0 No. Time Source Destination Protocol Length Info 14843 202.846388 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14843: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6235, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14844 202.846422 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 14836#4] rfb > xrl [ACK] Seq=105251 Ack=6127 Win=64509 Len=0 SLE=6154 SRE=6262 Frame 14844: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 6127, Len: 0 No. Time Source Destination Protocol Length Info 14845 202.852260 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 14845: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6127, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14846 202.852295 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=6262 Win=64374 Len=0 Frame 14846: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 6262, Len: 0 No. Time Source Destination Protocol Length Info 14847 202.856477 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14847: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6262, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14848 202.867445 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14848: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6289, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14849 202.867478 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=6316 Win=64320 Len=0 Frame 14849: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 6316, Len: 0 No. Time Source Destination Protocol Length Info 14850 202.871535 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14850: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6316, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14851 202.878309 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14851: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6343, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14852 202.878342 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=6370 Win=65535 Len=0 Frame 14852: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 6370, Len: 0 No. Time Source Destination Protocol Length Info 14853 202.886539 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14853: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6370, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14854 202.894831 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14854: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6397, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14855 202.894872 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=6424 Win=65481 Len=0 Frame 14855: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 6424, Len: 0 No. Time Source Destination Protocol Length Info 14856 202.903263 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14856: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6424, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14857 202.910574 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14857: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6451, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14858 202.910608 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=6478 Win=65427 Len=0 Frame 14858: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 6478, Len: 0 No. Time Source Destination Protocol Length Info 14859 202.922547 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14859: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6478, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14860 202.926378 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14860: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6505, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14861 202.926411 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=6532 Win=65373 Len=0 Frame 14861: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 6532, Len: 0 No. Time Source Destination Protocol Length Info 14862 202.932631 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14862: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6532, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14863 202.961394 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 14863: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14864 202.961426 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 14864: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 14865 202.966771 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14865: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6559, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14866 202.966805 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=6586 Win=65319 Len=0 Frame 14866: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 6586, Len: 0 No. Time Source Destination Protocol Length Info 14867 202.971282 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14867: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6586, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14868 202.971386 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14868: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6613, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14869 202.971420 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=6640 Win=65265 Len=0 Frame 14869: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 6640, Len: 0 No. Time Source Destination Protocol Length Info 14870 202.971461 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14870: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6640, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14871 202.977428 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14871: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6667, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14872 202.977472 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=6694 Win=65211 Len=0 Frame 14872: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 6694, Len: 0 No. Time Source Destination Protocol Length Info 14873 202.983254 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14873: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6694, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14874 202.990323 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14874: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6721, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14875 202.990357 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=6748 Win=65157 Len=0 Frame 14875: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 6748, Len: 0 No. Time Source Destination Protocol Length Info 14876 202.998507 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14876: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6748, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14877 203.006453 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14877: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6775, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14878 203.006487 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=6802 Win=65103 Len=0 Frame 14878: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 6802, Len: 0 No. Time Source Destination Protocol Length Info 14879 203.018333 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14879: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6802, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14880 203.022385 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14880: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6829, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14881 203.022421 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=6856 Win=65049 Len=0 Frame 14881: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 6856, Len: 0 No. Time Source Destination Protocol Length Info 14882 203.031384 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14882: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6856, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14883 203.042346 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14883: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6883, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14884 203.042380 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=6910 Win=64995 Len=0 Frame 14884: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 6910, Len: 0 No. Time Source Destination Protocol Length Info 14885 203.058387 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14885: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6910, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14886 203.058432 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14886: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6937, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14887 203.058462 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=6964 Win=64941 Len=0 Frame 14887: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 6964, Len: 0 No. Time Source Destination Protocol Length Info 14888 203.062476 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14888: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6964, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14889 203.070405 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14889: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 6991, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14890 203.070438 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105251 Ack=7018 Win=64887 Len=0 Frame 14890: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 7018, Len: 0 No. Time Source Destination Protocol Length Info 14891 203.082356 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14891: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7018, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14892 203.084499 192.168.10.185 192.168.10.142 VNC 386 Authentication result Frame 14892: 386 bytes on wire (3088 bits), 386 bytes captured (3088 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105251, Ack: 7045, Len: 332 Virtual Network Computing No. Time Source Destination Protocol Length Info 14893 203.094528 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 14893: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7072, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14894 203.094562 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 14892#1] rfb > xrl [ACK] Seq=105583 Ack=7045 Win=64860 Len=0 SLE=7072 SRE=7099 Frame 14894: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105583, Ack: 7045, Len: 0 No. Time Source Destination Protocol Length Info 14895 203.108546 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14895: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7099, Ack: 105251, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14896 203.108583 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 14892#2] rfb > xrl [ACK] Seq=105583 Ack=7045 Win=64860 Len=0 SLE=7072 SRE=7126 Frame 14896: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105583, Ack: 7045, Len: 0 No. Time Source Destination Protocol Length Info 14897 203.113271 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 14897: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7126, Ack: 105583, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 14898 203.113306 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 14892#3] rfb > xrl [ACK] Seq=105583 Ack=7045 Win=64860 Len=0 SLE=7072 SRE=7158 Frame 14898: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105583, Ack: 7045, Len: 0 No. Time Source Destination Protocol Length Info 14899 203.113346 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14899: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7158, Ack: 105583, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14900 203.113378 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 14892#4] rfb > xrl [ACK] Seq=105583 Ack=7045 Win=64860 Len=0 SLE=7072 SRE=7185 Frame 14900: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105583, Ack: 7045, Len: 0 No. Time Source Destination Protocol Length Info 14901 203.118415 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14901: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7185, Ack: 105583, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14902 203.118448 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 14892#5] rfb > xrl [ACK] Seq=105583 Ack=7045 Win=64860 Len=0 SLE=7072 SRE=7212 Frame 14902: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105583, Ack: 7045, Len: 0 No. Time Source Destination Protocol Length Info 14903 203.130457 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 14903: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7045, Ack: 105583, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14904 203.130490 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105583 Ack=7212 Win=64693 Len=0 Frame 14904: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105583, Ack: 7212, Len: 0 No. Time Source Destination Protocol Length Info 14905 203.194274 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 14905: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14906 203.315642 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 14906: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14907 203.328183 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=14239 Ack=1031994 Win=16214 Len=0 Frame 14907: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14239, Ack: 1031994, Len: 0 No. Time Source Destination Protocol Length Info 14908 203.328217 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 14907#1] smtp > 23308 [ACK] Seq=14239 Ack=1031994 Win=16214 Len=0 Frame 14908: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14239, Ack: 1031994, Len: 0 No. Time Source Destination Protocol Length Info 14909 203.328252 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14909: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1032817, Ack: 14239, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14910 203.328282 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14910: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1034197, Ack: 14239, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14911 203.328311 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14911: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1035577, Ack: 14239, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14912 203.328340 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14912: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1036957, Ack: 14239, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14913 203.328370 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14913: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1038337, Ack: 14239, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14914 203.328399 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14914: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1039717, Ack: 14239, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14915 203.328429 206.225.164.186 192.168.10.207 SMTP 200 C: DATA fragment, 146 bytes Frame 14915: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1041097, Ack: 14239, Len: 146 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14916 203.328457 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 14907#2] smtp > 23308 [ACK] Seq=14239 Ack=1031994 Win=16214 Len=0 Frame 14916: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14239, Ack: 1031994, Len: 0 No. Time Source Destination Protocol Length Info 14917 203.328486 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14917: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1041243, Ack: 14239, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14918 203.328515 192.168.10.207 206.225.164.186 SMTP 348 S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 14918: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14239, Ack: 1031994, Len: 294 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14919 203.328548 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 14918#1] smtp > 23308 [ACK] Seq=14533 Ack=1031994 Win=16214 Len=0 Frame 14919: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14533, Ack: 1031994, Len: 0 No. Time Source Destination Protocol Length Info 14920 203.328576 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1042623 Ack=14533 Win=46048 Len=0 Frame 14920: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1042623, Ack: 14533, Len: 0 No. Time Source Destination Protocol Length Info 14921 203.328604 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 14918#2] smtp > 23308 [ACK] Seq=14533 Ack=1031994 Win=16214 Len=0 Frame 14921: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14533, Ack: 1031994, Len: 0 No. Time Source Destination Protocol Length Info 14922 203.328632 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 14918#3] smtp > 23308 [ACK] Seq=14533 Ack=1031994 Win=16214 Len=0 Frame 14922: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14533, Ack: 1031994, Len: 0 No. Time Source Destination Protocol Length Info 14923 203.328659 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 14918#4] smtp > 23308 [ACK] Seq=14533 Ack=1031994 Win=16214 Len=0 Frame 14923: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14533, Ack: 1031994, Len: 0 No. Time Source Destination Protocol Length Info 14924 203.328688 206.225.164.186 192.168.10.207 SMTP 877 [TCP Fast Retransmission] C: DATA fragment, 823 bytes Frame 14924: 877 bytes on wire (7016 bits), 877 bytes captured (7016 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1031994, Ack: 14533, Len: 823 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14925 203.328717 206.225.164.186 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 14925: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1032817, Ack: 14533, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14926 203.328746 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 14918#5] smtp > 23308 [ACK] Seq=14533 Ack=1031994 Win=16214 Len=0 Frame 14926: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14533, Ack: 1031994, Len: 0 No. Time Source Destination Protocol Length Info 14927 203.328787 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 14918#6] smtp > 23308 [ACK] Seq=14533 Ack=1031994 Win=16214 Len=0 Frame 14927: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14533, Ack: 1031994, Len: 0 No. Time Source Destination Protocol Length Info 14928 203.328815 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 14918#7] smtp > 23308 [ACK] Seq=14533 Ack=1031994 Win=16214 Len=0 Frame 14928: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14533, Ack: 1031994, Len: 0 No. Time Source Destination Protocol Length Info 14929 203.328843 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14929: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1042623, Ack: 14533, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14930 203.328872 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14930: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1044003, Ack: 14533, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14931 203.328904 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=14533 Ack=1042623 Win=5585 Len=0 Frame 14931: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14533, Ack: 1042623, Len: 0 No. Time Source Destination Protocol Length Info 14932 203.328932 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14932: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1045383, Ack: 14533, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14933 203.328960 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=14533 Ack=1045383 Win=2825 Len=0 Frame 14933: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14533, Ack: 1045383, Len: 0 No. Time Source Destination Protocol Length Info 14934 203.328989 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 14934: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1046763, Ack: 14533, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14935 203.329026 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=14533 Ack=1048143 Win=65 Len=0 Frame 14935: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14533, Ack: 1048143, Len: 0 No. Time Source Destination Protocol Length Info 14936 203.346871 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 665852160, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14936: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14937 203.346895 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 665852160, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 14937: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14938 203.346909 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 665852160, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14938: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14939 203.346920 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 665852160, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 14939: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14940 203.364988 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2534932736, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14940: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14941 203.365012 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2534932736, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 14941: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14942 203.365024 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2534932736, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14942: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14943 203.365036 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2534932736, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 14943: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 14944 203.384473 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14944: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7212, Ack: 105583, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14945 203.390441 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14945: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7239, Ack: 105583, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14946 203.390475 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105583 Ack=7266 Win=64639 Len=0 Frame 14946: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105583, Ack: 7266, Len: 0 No. Time Source Destination Protocol Length Info 14947 203.392521 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 14947: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14948 203.392551 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 14948: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 14949 203.399385 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14949: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7266, Ack: 105583, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14950 203.406572 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14950: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7293, Ack: 105583, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14951 203.406607 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105583 Ack=7320 Win=64585 Len=0 Frame 14951: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105583, Ack: 7320, Len: 0 No. Time Source Destination Protocol Length Info 14952 203.414375 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14952: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7320, Ack: 105583, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14953 203.424557 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14953: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7347, Ack: 105583, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14954 203.424592 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=105583 Ack=7374 Win=64531 Len=0 Frame 14954: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105583, Ack: 7374, Len: 0 No. Time Source Destination Protocol Length Info 14955 203.428308 192.168.10.185 192.168.10.142 VNC 290 Authentication result Frame 14955: 290 bytes on wire (2320 bits), 290 bytes captured (2320 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105583, Ack: 7374, Len: 236 Virtual Network Computing No. Time Source Destination Protocol Length Info 14956 203.438987 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 14956: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7401, Ack: 105583, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14957 203.439022 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 14955#1] rfb > xrl [ACK] Seq=105819 Ack=7374 Win=64531 Len=0 SLE=7401 SRE=7428 Frame 14957: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105819, Ack: 7374, Len: 0 No. Time Source Destination Protocol Length Info 14958 203.443789 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 14958: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14959 203.446495 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14959: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7428, Ack: 105583, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14960 203.446527 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 14955#2] rfb > xrl [ACK] Seq=105819 Ack=7374 Win=64531 Len=0 SLE=7401 SRE=7455 Frame 14960: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105819, Ack: 7374, Len: 0 No. Time Source Destination Protocol Length Info 14961 203.451006 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 14961: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7455, Ack: 105819, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 14962 203.451042 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 14955#3] rfb > xrl [ACK] Seq=105819 Ack=7374 Win=64531 Len=0 SLE=7401 SRE=7487 Frame 14962: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105819, Ack: 7374, Len: 0 No. Time Source Destination Protocol Length Info 14963 203.454895 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14963: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7487, Ack: 105819, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14964 203.454929 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 14955#4] rfb > xrl [ACK] Seq=105819 Ack=7374 Win=64531 Len=0 SLE=7401 SRE=7514 Frame 14964: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105819, Ack: 7374, Len: 0 No. Time Source Destination Protocol Length Info 14965 203.515487 192.168.10.203 92.84.71.181 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 14965: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 92.84.71.181 (92.84.71.181) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 14966 203.566336 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 14966: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 14967 203.630789 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 14967: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7757, Ack: 105819, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14968 203.630826 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 14955#5] rfb > xrl [ACK] Seq=105819 Ack=7374 Win=64531 Len=0 SLE=7757 SRE=7784 SLE=7401 SRE=7514 Frame 14968: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105819, Ack: 7374, Len: 0 No. Time Source Destination Protocol Length Info 14969 203.652906 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14969: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7784, Ack: 105819, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14970 203.652943 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 14970: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8569, Ack: 587146, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 14971 203.652972 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 14955#6] rfb > xrl [ACK] Seq=105819 Ack=7374 Win=64531 Len=0 SLE=7757 SRE=7811 SLE=7401 SRE=7514 Frame 14971: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105819, Ack: 7374, Len: 0 No. Time Source Destination Protocol Length Info 14972 203.653007 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=587146 Ack=8611 Win=46615 Len=0 Frame 14972: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 587146, Ack: 8611, Len: 0 No. Time Source Destination Protocol Length Info 14973 203.657519 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14973: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7811, Ack: 105819, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14974 203.657552 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 14955#7] rfb > xrl [ACK] Seq=105819 Ack=7374 Win=64531 Len=0 SLE=7757 SRE=7838 SLE=7401 SRE=7514 Frame 14974: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105819, Ack: 7374, Len: 0 No. Time Source Destination Protocol Length Info 14975 203.657590 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14975: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7838, Ack: 105819, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14976 203.657621 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 14955#8] rfb > xrl [ACK] Seq=105819 Ack=7374 Win=64531 Len=0 SLE=7757 SRE=7865 SLE=7401 SRE=7514 Frame 14976: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105819, Ack: 7374, Len: 0 No. Time Source Destination Protocol Length Info 14977 203.668568 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14977: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7865, Ack: 105819, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14978 203.668603 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 14955#9] rfb > xrl [ACK] Seq=105819 Ack=7374 Win=64531 Len=0 SLE=7757 SRE=7892 SLE=7401 SRE=7514 Frame 14978: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105819, Ack: 7374, Len: 0 No. Time Source Destination Protocol Length Info 14979 203.673503 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14979: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7892, Ack: 105819, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14980 203.673537 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 14955#10] rfb > xrl [ACK] Seq=105819 Ack=7374 Win=64531 Len=0 SLE=7757 SRE=7919 SLE=7401 SRE=7514 Frame 14980: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105819, Ack: 7374, Len: 0 No. Time Source Destination Protocol Length Info 14981 203.678724 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14981: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7919, Ack: 105819, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14982 203.678758 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 14955#11] rfb > xrl [ACK] Seq=105819 Ack=7374 Win=64531 Len=0 SLE=7757 SRE=7946 SLE=7401 SRE=7514 Frame 14982: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105819, Ack: 7374, Len: 0 No. Time Source Destination Protocol Length Info 14983 203.694592 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 14983: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7973, Ack: 105819, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14984 203.694625 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 14955#12] rfb > xrl [ACK] Seq=105819 Ack=7374 Win=64531 Len=0 SLE=7973 SRE=8000 SLE=7757 SRE=7946 Frame 14984: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105819, Ack: 7374, Len: 0 No. Time Source Destination Protocol Length Info 14985 203.713974 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14985: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8000, Ack: 105819, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14986 203.714009 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 14955#13] rfb > xrl [ACK] Seq=105819 Ack=7374 Win=64531 Len=0 SLE=7973 SRE=8027 SLE=7757 SRE=7946 Frame 14986: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105819, Ack: 7374, Len: 0 No. Time Source Destination Protocol Length Info 14987 203.718439 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14987: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8027, Ack: 105819, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14988 203.718472 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 14955#14] rfb > xrl [ACK] Seq=105819 Ack=7374 Win=64531 Len=0 SLE=7973 SRE=8054 SLE=7757 SRE=7946 Frame 14988: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105819, Ack: 7374, Len: 0 No. Time Source Destination Protocol Length Info 14989 203.718516 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14989: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8054, Ack: 105819, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14990 203.718544 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 14955#15] rfb > xrl [ACK] Seq=105819 Ack=7374 Win=64531 Len=0 SLE=7973 SRE=8081 SLE=7757 SRE=7946 Frame 14990: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105819, Ack: 7374, Len: 0 No. Time Source Destination Protocol Length Info 14991 203.726416 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14991: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8081, Ack: 105819, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14992 203.726450 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 14955#16] rfb > xrl [ACK] Seq=105819 Ack=7374 Win=64531 Len=0 SLE=7973 SRE=8108 SLE=7757 SRE=7946 Frame 14992: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105819, Ack: 7374, Len: 0 No. Time Source Destination Protocol Length Info 14993 203.744489 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14993: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8108, Ack: 105819, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14994 203.744525 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 14955#17] rfb > xrl [ACK] Seq=105819 Ack=7374 Win=64531 Len=0 SLE=7973 SRE=8135 SLE=7757 SRE=7946 Frame 14994: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105819, Ack: 7374, Len: 0 No. Time Source Destination Protocol Length Info 14995 203.762948 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 14995: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8135, Ack: 105819, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 14996 203.762986 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 14955#18] rfb > xrl [ACK] Seq=105819 Ack=7374 Win=64531 Len=0 SLE=7973 SRE=8162 SLE=7757 SRE=7946 Frame 14996: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105819, Ack: 7374, Len: 0 No. Time Source Destination Protocol Length Info 14997 203.794030 192.168.10.142 192.168.10.185 VNC 842 [TCP Retransmission] Authentication result Frame 14997: 842 bytes on wire (6736 bits), 842 bytes captured (6736 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 7374, Ack: 105819, Len: 788 Virtual Network Computing No. Time Source Destination Protocol Length Info 14998 203.804926 192.168.10.185 192.168.10.142 VNC 386 Authentication result Frame 14998: 386 bytes on wire (3088 bits), 386 bytes captured (3088 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105819, Ack: 8162, Len: 332 Virtual Network Computing No. Time Source Destination Protocol Length Info 14999 203.835165 192.168.10.118 96.8.81.129 TCP 60 versatalk > http [FIN, ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 14999: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.118 (192.168.10.118), Dst: 96.8.81.129 (96.8.81.129) Transmission Control Protocol, Src Port: versatalk (3738), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 15000 203.835743 192.168.10.118 96.8.81.129 TCP 62 vipremoteagent > http [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM=1 Frame 15000: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.118 (192.168.10.118), Dst: 96.8.81.129 (96.8.81.129) Transmission Control Protocol, Src Port: vipremoteagent (3752), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 15001 203.856631 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-19.geo.kaspersky.com Frame 15001: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 55399 (55399), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 15002 203.856781 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-19.geo.kaspersky.com Frame 15002: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 55399 (55399), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 15003 203.900746 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 15003: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 15004 203.900781 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 15004: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 15005 203.971877 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 15005: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14533, Ack: 1048143, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15006 203.971912 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1048143 Ack=14575 Win=46720 Len=0 Frame 15006: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1048143, Ack: 14575, Len: 0 No. Time Source Destination Protocol Length Info 15007 204.052584 192.168.10.185 192.168.10.142 VNC 386 [TCP Retransmission] Authentication result Frame 15007: 386 bytes on wire (3088 bits), 386 bytes captured (3088 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 105819, Ack: 8162, Len: 332 Virtual Network Computing No. Time Source Destination Protocol Length Info 15008 204.074589 192.168.10.142 192.168.10.185 TCP 60 [TCP Previous segment lost] xrl > rfb [ACK] Seq=8194 Ack=106151 Win=64240 Len=0 Frame 15008: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8194, Ack: 106151, Len: 0 No. Time Source Destination Protocol Length Info 15009 204.177046 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15009: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8194, Ack: 106151, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15010 204.177082 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15007#1] rfb > xrl [ACK] Seq=106151 Ack=8162 Win=65535 Len=0 SLE=8194 SRE=8221 Frame 15010: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 106151, Ack: 8162, Len: 0 No. Time Source Destination Protocol Length Info 15011 204.251157 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.87? Tell 192.168.10.226 Frame 15011: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15012 204.251190 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.87? Tell 192.168.10.226 Frame 15012: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15013 204.251206 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 15013: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15014 204.251216 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 15014: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15015 204.251226 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 15015: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15016 204.251236 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 15016: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15017 204.251247 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 15017: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15018 204.251257 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 15018: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15019 204.251275 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 15019: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15020 204.251285 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 15020: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15021 204.251295 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 15021: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15022 204.251311 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 15022: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15023 204.251344 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 15023: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15024 204.251354 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 15024: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15025 204.251364 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 15025: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15026 204.251390 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 15026: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15027 204.251401 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 15027: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15028 204.251411 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 15028: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15029 204.251421 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 15029: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15030 204.251431 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 15030: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15031 204.251441 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 15031: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15032 204.251451 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 15032: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15033 204.251461 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 15033: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15034 204.251471 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 15034: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15035 204.251481 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 15035: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15036 204.251491 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 15036: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15037 204.251501 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 15037: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15038 204.251511 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 15038: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15039 204.251521 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 15039: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15040 204.251532 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 15040: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15041 204.251542 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 15041: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15042 204.251552 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 15042: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15043 204.251562 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 15043: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15044 204.251572 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 15044: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15045 204.251582 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 15045: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15046 204.251592 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 15046: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15047 204.251602 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 15047: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15048 204.251620 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 15048: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15049 204.251630 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 15049: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15050 204.251640 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 15050: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15051 204.251655 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 15051: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15052 204.251669 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 15052: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15053 204.251679 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 15053: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15054 204.251689 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 15054: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15055 204.251699 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 15055: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15056 204.251709 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 15056: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15057 204.258755 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15057: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8221, Ack: 106151, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15058 204.258788 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15007#2] rfb > xrl [ACK] Seq=106151 Ack=8162 Win=65535 Len=0 SLE=8194 SRE=8248 Frame 15058: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 106151, Ack: 8162, Len: 0 No. Time Source Destination Protocol Length Info 15059 204.278957 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15059: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8248, Ack: 106151, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15060 204.278996 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15007#3] rfb > xrl [ACK] Seq=106151 Ack=8162 Win=65535 Len=0 SLE=8194 SRE=8275 Frame 15060: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 106151, Ack: 8162, Len: 0 No. Time Source Destination Protocol Length Info 15061 204.282621 192.168.10.142 192.168.10.185 VNC 86 [TCP Fast Retransmission] Authentication result Frame 15061: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8162, Ack: 106151, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15062 204.282657 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=106151 Ack=8275 Win=65422 Len=0 Frame 15062: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 106151, Ack: 8275, Len: 0 No. Time Source Destination Protocol Length Info 15063 204.287983 192.168.10.185 192.168.10.142 VNC 453 Authentication result Frame 15063: 453 bytes on wire (3624 bits), 453 bytes captured (3624 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 106151, Ack: 8275, Len: 399 Virtual Network Computing No. Time Source Destination Protocol Length Info 15064 204.337924 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 15064: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8302, Ack: 106151, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15065 204.337961 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15063#1] rfb > xrl [ACK] Seq=106550 Ack=8275 Win=65422 Len=0 SLE=8302 SRE=8329 Frame 15065: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 106550, Ack: 8275, Len: 0 No. Time Source Destination Protocol Length Info 15066 204.338130 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15066: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8329, Ack: 106550, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15067 204.338161 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15063#2] rfb > xrl [ACK] Seq=106550 Ack=8275 Win=65422 Len=0 SLE=8302 SRE=8361 Frame 15067: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 106550, Ack: 8275, Len: 0 No. Time Source Destination Protocol Length Info 15068 204.338203 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15068: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8361, Ack: 106550, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15069 204.338231 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15063#3] rfb > xrl [ACK] Seq=106550 Ack=8275 Win=65422 Len=0 SLE=8302 SRE=8388 Frame 15069: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 106550, Ack: 8275, Len: 0 No. Time Source Destination Protocol Length Info 15070 204.342627 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 15070: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8415, Ack: 106550, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15071 204.342665 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15063#4] rfb > xrl [ACK] Seq=106550 Ack=8275 Win=65422 Len=0 SLE=8415 SRE=8442 SLE=8302 SRE=8388 Frame 15071: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 106550, Ack: 8275, Len: 0 No. Time Source Destination Protocol Length Info 15072 204.351144 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15072: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8442, Ack: 106550, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15073 204.351179 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15063#5] rfb > xrl [ACK] Seq=106550 Ack=8275 Win=65422 Len=0 SLE=8415 SRE=8469 SLE=8302 SRE=8388 Frame 15073: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 106550, Ack: 8275, Len: 0 No. Time Source Destination Protocol Length Info 15074 204.355280 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15074: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8469, Ack: 106550, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15075 204.355312 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15063#6] rfb > xrl [ACK] Seq=106550 Ack=8275 Win=65422 Len=0 SLE=8415 SRE=8496 SLE=8302 SRE=8388 Frame 15075: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 106550, Ack: 8275, Len: 0 No. Time Source Destination Protocol Length Info 15076 204.360125 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15076: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8496, Ack: 106550, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15077 204.360158 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15063#7] rfb > xrl [ACK] Seq=106550 Ack=8275 Win=65422 Len=0 SLE=8415 SRE=8523 SLE=8302 SRE=8388 Frame 15077: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 106550, Ack: 8275, Len: 0 No. Time Source Destination Protocol Length Info 15078 204.362475 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 682629376, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 15078: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15079 204.362498 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 682629376, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 15079: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15080 204.362511 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 682629376, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 15080: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15081 204.362523 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 682629376, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 15081: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15082 204.364603 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 15082: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8275, Ack: 106550, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15083 204.364636 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=106550 Ack=8388 Win=65309 Len=0 SLE=8415 SRE=8523 Frame 15083: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 106550, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15084 204.368542 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15084: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8523, Ack: 106550, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15085 204.368575 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15083#1] rfb > xrl [ACK] Seq=106550 Ack=8388 Win=65309 Len=0 SLE=8415 SRE=8550 Frame 15085: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 106550, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15086 204.374513 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15086: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8550, Ack: 106550, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15087 204.374550 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15083#2] rfb > xrl [ACK] Seq=106550 Ack=8388 Win=65309 Len=0 SLE=8415 SRE=8577 Frame 15087: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 106550, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15088 204.374624 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 15088: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 106550, Ack: 8388, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 15089 204.374657 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 15089: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 107810, Ack: 8388, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 15090 204.374698 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 15090: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 109070, Ack: 8388, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 15091 204.380546 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2551709952, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 15091: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15092 204.380566 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2551709952, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 15092: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15093 204.380579 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2551709952, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 15093: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15094 204.380591 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2551709952, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 15094: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15095 204.382481 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15095: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8577, Ack: 106550, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15096 204.382511 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15090#1] rfb > xrl [ACK] Seq=110330 Ack=8388 Win=65309 Len=0 SLE=8415 SRE=8604 Frame 15096: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 110330, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15097 204.390663 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15097: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8604, Ack: 106550, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15098 204.390699 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15090#2] rfb > xrl [ACK] Seq=110330 Ack=8388 Win=65309 Len=0 SLE=8415 SRE=8631 Frame 15098: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 110330, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15099 204.403592 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=8631 Ack=109070 Win=64240 Len=0 Frame 15099: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8631, Ack: 109070, Len: 0 No. Time Source Destination Protocol Length Info 15100 204.403629 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 15100: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 110330, Ack: 8388, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 15101 204.403661 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 15101: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 111590, Ack: 8388, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 15102 204.403690 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 15102: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 112850, Ack: 8388, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 15103 204.403731 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15103: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8631, Ack: 109070, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15104 204.403761 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15102#1] rfb > xrl [ACK] Seq=114110 Ack=8388 Win=65309 Len=0 SLE=8415 SRE=8658 Frame 15104: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114110, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15105 204.404083 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=8658 Ack=110330 Win=64240 Len=0 Frame 15105: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8658, Ack: 110330, Len: 0 No. Time Source Destination Protocol Length Info 15106 204.404115 192.168.10.185 192.168.10.142 VNC 629 Authentication result Frame 15106: 629 bytes on wire (5032 bits), 629 bytes captured (5032 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114110, Ack: 8388, Len: 575 Virtual Network Computing No. Time Source Destination Protocol Length Info 15107 204.408593 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15107: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8658, Ack: 110330, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15108 204.408627 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15106#1] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=8415 SRE=8685 Frame 15108: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15109 204.416575 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15109: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8685, Ack: 110330, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15110 204.416607 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15106#2] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=8415 SRE=8712 Frame 15110: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15111 204.423615 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15111: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8712, Ack: 110330, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15112 204.423649 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15106#3] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=8415 SRE=8739 Frame 15112: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15113 204.438047 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 15113: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15114 204.438076 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 15114: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15115 204.440875 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15115: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8739, Ack: 110330, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15116 204.440909 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15106#4] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=8415 SRE=8766 Frame 15116: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15117 204.444767 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=8766 Ack=112850 Win=64240 Len=0 Frame 15117: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8766, Ack: 112850, Len: 0 No. Time Source Destination Protocol Length Info 15118 204.444810 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=8766 Ack=114685 Win=64240 Len=0 Frame 15118: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8766, Ack: 114685, Len: 0 No. Time Source Destination Protocol Length Info 15119 204.444852 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15119: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8766, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15120 204.444883 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15106#5] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=8415 SRE=8793 Frame 15120: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15121 204.445011 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15121: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8793, Ack: 114685, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15122 204.445046 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15106#6] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=8415 SRE=8825 Frame 15122: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15123 204.518739 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15123: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8825, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15124 204.518776 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15106#7] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=8415 SRE=8852 Frame 15124: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15125 204.526602 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15125: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8852, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15126 204.526636 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15106#8] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=8415 SRE=8879 Frame 15126: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15127 204.562016 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 15127: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8906, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15128 204.562051 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#9] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=8906 SRE=8933 SLE=8415 SRE=8879 Frame 15128: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15129 204.574560 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15129: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8933, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15130 204.574594 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#10] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=8906 SRE=8960 SLE=8415 SRE=8879 Frame 15130: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15131 204.606683 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15131: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8960, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15132 204.606723 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#11] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=8906 SRE=8987 SLE=8415 SRE=8879 Frame 15132: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15133 204.611257 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15133: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8987, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15134 204.611290 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#12] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=8906 SRE=9014 SLE=8415 SRE=8879 Frame 15134: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15135 204.611328 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15135: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9014, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15136 204.611360 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#13] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=8906 SRE=9041 SLE=8415 SRE=8879 Frame 15136: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15137 204.616780 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15137: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9041, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15138 204.616815 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#14] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=8906 SRE=9068 SLE=8415 SRE=8879 Frame 15138: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15139 204.628961 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15139: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9068, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15140 204.628995 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#15] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=8906 SRE=9095 SLE=8415 SRE=8879 Frame 15140: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15141 204.630877 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 15141: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15142 204.630907 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 15142: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15143 204.633038 192.168.10.1 192.168.10.245 Syslog 220 LOCAL1.WARNING: Oct 3 19:47:42 MyFirewall firewall: Allow 1-Trusted 0-External 48 tcp 20 127 192.168.10.118 96.8.81.129 3752 80 offset 7 S 2709030442 win 65535 (HTTP-proxy.endusers-00) Frame 15143: 220 bytes on wire (1760 bits), 220 bytes captured (1760 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.WARNING: Oct 3 19:47:42 MyFirewall firewall: Allow 1-Trusted 0-External 48 tcp 20 127 192.168.10.118 96.8.81.129 3752 80 offset 7 S 2709030442 win 65535 (HTTP-proxy.endusers-00) No. Time Source Destination Protocol Length Info 15144 204.633867 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15144: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9095, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15145 204.633900 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#16] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=8906 SRE=9122 SLE=8415 SRE=8879 Frame 15145: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15146 204.638637 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15146: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9122, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15147 204.638672 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#17] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=8906 SRE=9149 SLE=8415 SRE=8879 Frame 15147: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15148 204.646620 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15148: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9149, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15149 204.646657 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#18] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=8906 SRE=9176 SLE=8415 SRE=8879 Frame 15149: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15150 204.652769 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15150: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9176, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15151 204.652803 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#19] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=8906 SRE=9203 SLE=8415 SRE=8879 Frame 15151: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15152 204.670174 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15152: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9203, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15153 204.670209 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#20] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=8906 SRE=9230 SLE=8415 SRE=8879 Frame 15153: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15154 204.699171 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15154: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9230, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15155 204.699209 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#21] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=8906 SRE=9257 SLE=8415 SRE=8879 Frame 15155: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15156 204.708679 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15156: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9257, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15157 204.708711 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#22] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=8906 SRE=9284 SLE=8415 SRE=8879 Frame 15157: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15158 204.727814 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15158: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9284, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15159 204.727850 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#23] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=8906 SRE=9311 SLE=8415 SRE=8879 Frame 15159: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15160 204.752618 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 15160: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9338, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15161 204.752652 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#24] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=9338 SRE=9365 SLE=8906 SRE=9311 Frame 15161: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15162 204.756691 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15162: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9365, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15163 204.756724 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#25] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=9338 SRE=9392 SLE=8906 SRE=9311 Frame 15163: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15164 204.760590 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15164: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9392, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15165 204.760624 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#26] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=9338 SRE=9419 SLE=8906 SRE=9311 Frame 15165: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15166 204.771019 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15166: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9419, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15167 204.771057 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#27] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=9338 SRE=9446 SLE=8906 SRE=9311 Frame 15167: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15168 204.774628 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15168: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9446, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15169 204.774664 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#28] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=9338 SRE=9473 SLE=8906 SRE=9311 Frame 15169: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15170 204.884813 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 15170: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9500, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15171 204.884849 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#29] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=9500 SRE=9527 SLE=9338 SRE=9473 Frame 15171: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15172 204.911398 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15172: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9527, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15173 204.911433 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#30] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=9500 SRE=9554 SLE=9338 SRE=9473 Frame 15173: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15174 204.938471 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15174: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9554, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15175 204.938506 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#31] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=9500 SRE=9581 SLE=9338 SRE=9473 Frame 15175: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15176 204.942534 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15176: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9581, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15177 204.942567 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#32] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=9500 SRE=9608 SLE=9338 SRE=9473 Frame 15177: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15178 204.960644 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15178: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9608, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15179 204.960680 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#33] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=9500 SRE=9635 SLE=9338 SRE=9473 Frame 15179: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15180 204.975271 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15180: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9635, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15181 204.975306 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#34] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=9500 SRE=9662 SLE=9338 SRE=9473 Frame 15181: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15182 204.990671 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15182: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9662, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15183 204.990707 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15106#35] rfb > xrl [ACK] Seq=114685 Ack=8388 Win=65309 Len=0 SLE=9500 SRE=9689 SLE=9338 SRE=9473 Frame 15183: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 8388, Len: 0 No. Time Source Destination Protocol Length Info 15184 204.996280 192.168.10.142 192.168.10.185 VNC 1314 [TCP Fast Retransmission] Authentication result Frame 15184: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 8388, Ack: 114685, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 15185 204.996315 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=114685 Ack=9689 Win=65535 Len=0 Frame 15185: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 9689, Len: 0 No. Time Source Destination Protocol Length Info 15186 205.001256 192.168.10.142 192.168.10.185 VNC 95 [TCP Retransmission] Authentication result Frame 15186: 95 bytes on wire (760 bits), 95 bytes captured (760 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9648, Ack: 114685, Len: 41 Virtual Network Computing No. Time Source Destination Protocol Length Info 15187 205.001292 192.168.10.185 192.168.10.142 TCP 60 [TCP Dup ACK 15185#1] rfb > xrl [ACK] Seq=114685 Ack=9689 Win=65535 Len=0 Frame 15187: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 9689, Len: 0 No. Time Source Destination Protocol Length Info 15188 205.015592 192.168.10.203 92.84.71.181 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 15188: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 92.84.71.181 (92.84.71.181) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 15189 205.016629 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15189: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9689, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15190 205.022663 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 15190: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 114685, Ack: 9716, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 15191 205.022697 192.168.10.185 192.168.10.142 VNC 1271 Authentication result Frame 15191: 1271 bytes on wire (10168 bits), 1271 bytes captured (10168 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 115945, Ack: 9716, Len: 1217 Virtual Network Computing No. Time Source Destination Protocol Length Info 15192 205.031146 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15192: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9716, Ack: 114685, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15193 205.047778 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=9743 Ack=117162 Win=64240 Len=0 Frame 15193: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9743, Ack: 117162, Len: 0 No. Time Source Destination Protocol Length Info 15194 205.052520 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15194: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9743, Ack: 117162, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15195 205.052553 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=117162 Ack=9775 Win=65449 Len=0 Frame 15195: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 117162, Ack: 9775, Len: 0 No. Time Source Destination Protocol Length Info 15196 205.058615 192.168.10.185 192.168.10.142 VNC 1278 Authentication result Frame 15196: 1278 bytes on wire (10224 bits), 1278 bytes captured (10224 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 117162, Ack: 9775, Len: 1224 Virtual Network Computing No. Time Source Destination Protocol Length Info 15197 205.062793 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15197: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9775, Ack: 117162, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15198 205.067859 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 15198: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14575, Ack: 1048143, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15199 205.067891 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1048143 Ack=14617 Win=46699 Len=0 Frame 15199: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1048143, Ack: 14617, Len: 0 No. Time Source Destination Protocol Length Info 15200 205.085970 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15200: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9802, Ack: 117162, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15201 205.086006 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=118386 Ack=9829 Win=65395 Len=0 Frame 15201: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 118386, Ack: 9829, Len: 0 No. Time Source Destination Protocol Length Info 15202 205.090645 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15202: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9829, Ack: 118386, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15203 205.096252 192.168.10.185 192.168.10.142 VNC 1286 Authentication result Frame 15203: 1286 bytes on wire (10288 bits), 1286 bytes captured (10288 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 118386, Ack: 9861, Len: 1232 Virtual Network Computing No. Time Source Destination Protocol Length Info 15204 205.097183 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15204: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9861, Ack: 118386, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15205 205.101969 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15205: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9888, Ack: 118386, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15206 205.102002 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=119618 Ack=9915 Win=65309 Len=0 Frame 15206: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 119618, Ack: 9915, Len: 0 No. Time Source Destination Protocol Length Info 15207 205.106997 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15207: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9915, Ack: 118386, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15208 205.108743 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 15208: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8611, Ack: 587146, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15209 205.108822 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=587146 Ack=8653 Win=46594 Len=0 Frame 15209: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 587146, Ack: 8653, Len: 0 No. Time Source Destination Protocol Length Info 15210 205.121067 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15210: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9942, Ack: 118386, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15211 205.121101 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=119618 Ack=9969 Win=65255 Len=0 Frame 15211: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 119618, Ack: 9969, Len: 0 No. Time Source Destination Protocol Length Info 15212 205.124672 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15212: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9969, Ack: 118386, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15213 205.124721 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15213: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 9996, Ack: 119618, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15214 205.124750 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=119618 Ack=10028 Win=65196 Len=0 Frame 15214: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 119618, Ack: 10028, Len: 0 No. Time Source Destination Protocol Length Info 15215 205.130660 192.168.10.185 192.168.10.142 VNC 561 Authentication result Frame 15215: 561 bytes on wire (4488 bits), 561 bytes captured (4488 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 119618, Ack: 10028, Len: 507 Virtual Network Computing No. Time Source Destination Protocol Length Info 15216 205.131348 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15216: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10028, Ack: 119618, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15217 205.134834 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15217: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10055, Ack: 119618, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15218 205.134867 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=120125 Ack=10082 Win=65142 Len=0 Frame 15218: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 120125, Ack: 10082, Len: 0 No. Time Source Destination Protocol Length Info 15219 205.168979 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15219: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10082, Ack: 119618, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15220 205.172781 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15220: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10109, Ack: 119618, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15221 205.172815 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=120125 Ack=10136 Win=65088 Len=0 Frame 15221: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 120125, Ack: 10136, Len: 0 No. Time Source Destination Protocol Length Info 15222 205.173049 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15222: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10136, Ack: 120125, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15223 205.173132 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15223: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10168, Ack: 120125, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15224 205.173162 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=120125 Ack=10195 Win=65029 Len=0 Frame 15224: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 120125, Ack: 10195, Len: 0 No. Time Source Destination Protocol Length Info 15225 205.173204 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15225: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10195, Ack: 120125, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15226 205.177112 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15226: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10222, Ack: 120125, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15227 205.177146 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=120125 Ack=10249 Win=64975 Len=0 Frame 15227: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 120125, Ack: 10249, Len: 0 No. Time Source Destination Protocol Length Info 15228 205.179625 192.168.10.185 192.168.10.142 VNC 714 Authentication result Frame 15228: 714 bytes on wire (5712 bits), 714 bytes captured (5712 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 120125, Ack: 10249, Len: 660 Virtual Network Computing No. Time Source Destination Protocol Length Info 15229 205.184897 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15229: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10249, Ack: 120125, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15230 205.192573 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15230: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10276, Ack: 120125, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15231 205.192614 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=120785 Ack=10303 Win=64921 Len=0 Frame 15231: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 120785, Ack: 10303, Len: 0 No. Time Source Destination Protocol Length Info 15232 205.194265 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 15232: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 15233 205.202078 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15233: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10303, Ack: 120125, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15234 205.206631 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15234: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10330, Ack: 120785, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15235 205.206664 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=120785 Ack=10362 Win=64862 Len=0 Frame 15235: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 120785, Ack: 10362, Len: 0 No. Time Source Destination Protocol Length Info 15236 205.211272 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15236: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10362, Ack: 120785, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15237 205.212037 192.168.10.185 192.168.10.142 VNC 1038 Authentication result Frame 15237: 1038 bytes on wire (8304 bits), 1038 bytes captured (8304 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 120785, Ack: 10389, Len: 984 Virtual Network Computing No. Time Source Destination Protocol Length Info 15238 205.219179 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15238: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10389, Ack: 120785, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15239 205.222863 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15239: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10416, Ack: 120785, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15240 205.222897 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=121769 Ack=10443 Win=64781 Len=0 Frame 15240: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 121769, Ack: 10443, Len: 0 No. Time Source Destination Protocol Length Info 15241 205.231381 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15241: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10443, Ack: 120785, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15242 205.236640 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15242: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10470, Ack: 121769, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15243 205.236673 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=121769 Ack=10502 Win=64722 Len=0 Frame 15243: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 121769, Ack: 10502, Len: 0 No. Time Source Destination Protocol Length Info 15244 205.242134 192.168.10.185 192.168.10.142 VNC 701 Authentication result Frame 15244: 701 bytes on wire (5608 bits), 701 bytes captured (5608 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 121769, Ack: 10502, Len: 647 Virtual Network Computing No. Time Source Destination Protocol Length Info 15245 205.246743 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15245: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10502, Ack: 121769, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15246 205.251228 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15246: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10529, Ack: 121769, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15247 205.251264 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=122416 Ack=10556 Win=64668 Len=0 Frame 15247: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 122416, Ack: 10556, Len: 0 No. Time Source Destination Protocol Length Info 15248 205.264647 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15248: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10556, Ack: 121769, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15249 205.273113 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15249: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10583, Ack: 122416, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15250 205.273147 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=122416 Ack=10615 Win=64609 Len=0 Frame 15250: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 122416, Ack: 10615, Len: 0 No. Time Source Destination Protocol Length Info 15251 205.276908 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15251: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10615, Ack: 122416, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15252 205.276991 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15252: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10642, Ack: 122416, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15253 205.277024 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=122416 Ack=10669 Win=64555 Len=0 Frame 15253: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 122416, Ack: 10669, Len: 0 No. Time Source Destination Protocol Length Info 15254 205.277854 192.168.10.185 192.168.10.142 VNC 549 Authentication result Frame 15254: 549 bytes on wire (4392 bits), 549 bytes captured (4392 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 122416, Ack: 10669, Len: 495 Virtual Network Computing No. Time Source Destination Protocol Length Info 15255 205.291157 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15255: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10669, Ack: 122416, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15256 205.294808 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15256: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10696, Ack: 122416, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15257 205.294851 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=122911 Ack=10723 Win=64501 Len=0 Frame 15257: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 122911, Ack: 10723, Len: 0 No. Time Source Destination Protocol Length Info 15258 205.302644 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15258: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10723, Ack: 122911, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15259 205.302928 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15259: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10755, Ack: 122911, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15260 205.302960 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=122911 Ack=10782 Win=64442 Len=0 Frame 15260: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 122911, Ack: 10782, Len: 0 No. Time Source Destination Protocol Length Info 15261 205.307792 192.168.10.185 192.168.10.142 VNC 333 Authentication result Frame 15261: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 122911, Ack: 10782, Len: 279 Virtual Network Computing No. Time Source Destination Protocol Length Info 15262 205.312599 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15262: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10782, Ack: 122911, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15263 205.315623 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 15263: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 15264 205.322344 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15264: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10809, Ack: 122911, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15265 205.322377 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=123190 Ack=10836 Win=64388 Len=0 Frame 15265: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 123190, Ack: 10836, Len: 0 No. Time Source Destination Protocol Length Info 15266 205.329087 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15266: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10836, Ack: 122911, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15267 205.332616 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15267: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10863, Ack: 123190, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15268 205.332650 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=123190 Ack=10895 Win=64329 Len=0 Frame 15268: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 123190, Ack: 10895, Len: 0 No. Time Source Destination Protocol Length Info 15269 205.337962 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15269: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10895, Ack: 123190, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15270 205.339502 192.168.10.185 192.168.10.142 VNC 574 Authentication result Frame 15270: 574 bytes on wire (4592 bits), 574 bytes captured (4592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 123190, Ack: 10922, Len: 520 Virtual Network Computing No. Time Source Destination Protocol Length Info 15271 205.342641 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15271: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10922, Ack: 123190, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15272 205.359574 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 15272: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10976, Ack: 123190, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15273 205.359609 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=123710 Ack=10949 Win=65535 Len=0 SLE=10976 SRE=11003 Frame 15273: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 123710, Ack: 10949, Len: 0 No. Time Source Destination Protocol Length Info 15274 205.364393 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15274: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11003, Ack: 123710, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15275 205.364429 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15273#1] rfb > xrl [ACK] Seq=123710 Ack=10949 Win=65535 Len=0 SLE=10976 SRE=11035 Frame 15275: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 123710, Ack: 10949, Len: 0 No. Time Source Destination Protocol Length Info 15276 205.372640 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15276: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11035, Ack: 123710, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15277 205.372673 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15273#2] rfb > xrl [ACK] Seq=123710 Ack=10949 Win=65535 Len=0 SLE=10976 SRE=11062 Frame 15277: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 123710, Ack: 10949, Len: 0 No. Time Source Destination Protocol Length Info 15278 205.376948 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15278: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11062, Ack: 123710, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15279 205.376981 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15273#3] rfb > xrl [ACK] Seq=123710 Ack=10949 Win=65535 Len=0 SLE=10976 SRE=11089 Frame 15279: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 123710, Ack: 10949, Len: 0 No. Time Source Destination Protocol Length Info 15280 205.378067 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 699406592, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 15280: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15281 205.378087 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 699406592, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 15281: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15282 205.378101 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 699406592, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 15282: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15283 205.378114 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 699406592, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 15283: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15284 205.394998 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 15284: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 10949, Ack: 123710, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15285 205.395032 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=123710 Ack=11089 Win=65395 Len=0 Frame 15285: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 123710, Ack: 11089, Len: 0 No. Time Source Destination Protocol Length Info 15286 205.396338 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2568487168, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 15286: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15287 205.396359 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2568487168, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 15287: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15288 205.396371 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2568487168, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 15288: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15289 205.396383 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2568487168, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 15289: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15290 205.399586 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 15290: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 15291 205.399615 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 15291: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 15292 205.402820 192.168.10.185 192.168.10.142 VNC 379 Authentication result Frame 15292: 379 bytes on wire (3032 bits), 379 bytes captured (3032 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 123710, Ack: 11089, Len: 325 Virtual Network Computing No. Time Source Destination Protocol Length Info 15293 205.408240 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15293: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11089, Ack: 123710, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15294 205.425076 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15294: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11116, Ack: 124035, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15295 205.425111 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=124035 Ack=11148 Win=65336 Len=0 Frame 15295: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 124035, Ack: 11148, Len: 0 No. Time Source Destination Protocol Length Info 15296 205.428741 192.168.10.207 206.51.26.33 TCP 65 embrace-dp-c > hp-pxpib [PSH, ACK] Seq=34 Ack=34 Win=65001 Len=11 Frame 15296: 65 bytes on wire (520 bits), 65 bytes captured (520 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.51.26.33 (206.51.26.33) Transmission Control Protocol, Src Port: embrace-dp-c (3198), Dst Port: hp-pxpib (3101), Seq: 34, Ack: 34, Len: 11 Data (11 bytes) 0000 01 fc 00 00 00 05 49 00 00 12 3a ......I...: No. Time Source Destination Protocol Length Info 15297 205.429973 192.168.10.185 192.168.10.142 VNC 279 Authentication result Frame 15297: 279 bytes on wire (2232 bits), 279 bytes captured (2232 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 124035, Ack: 11148, Len: 225 Virtual Network Computing No. Time Source Destination Protocol Length Info 15298 205.432549 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15298: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11148, Ack: 124035, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15299 205.443898 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 15299: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 15300 205.452655 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15300: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11175, Ack: 124260, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15301 205.452691 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=124260 Ack=11207 Win=65277 Len=0 Frame 15301: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 124260, Ack: 11207, Len: 0 No. Time Source Destination Protocol Length Info 15302 205.457435 192.168.10.185 192.168.10.142 VNC 383 Authentication result Frame 15302: 383 bytes on wire (3064 bits), 383 bytes captured (3064 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 124260, Ack: 11207, Len: 329 Virtual Network Computing No. Time Source Destination Protocol Length Info 15303 205.460723 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15303: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11207, Ack: 124260, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15304 205.472098 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15304: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11234, Ack: 124260, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15305 205.472134 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=124589 Ack=11261 Win=65223 Len=0 Frame 15305: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 124589, Ack: 11261, Len: 0 No. Time Source Destination Protocol Length Info 15306 205.489579 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15306: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11261, Ack: 124589, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15307 205.494219 192.168.10.185 192.168.10.142 VNC 235 Authentication result Frame 15307: 235 bytes on wire (1880 bits), 235 bytes captured (1880 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 124589, Ack: 11293, Len: 181 Virtual Network Computing No. Time Source Destination Protocol Length Info 15308 205.517252 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15308: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11293, Ack: 124770, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15309 205.566264 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 15309: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 15310 205.598796 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15310: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11325, Ack: 124770, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15311 205.598831 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=124770 Ack=11352 Win=65132 Len=0 Frame 15311: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 124770, Ack: 11352, Len: 0 No. Time Source Destination Protocol Length Info 15312 205.614737 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 15312: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11379, Ack: 124770, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15313 205.614771 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15311#1] rfb > xrl [ACK] Seq=124770 Ack=11352 Win=65132 Len=0 SLE=11379 SRE=11406 Frame 15313: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 124770, Ack: 11352, Len: 0 No. Time Source Destination Protocol Length Info 15314 205.653098 192.168.10.185 192.168.10.142 VNC 323 Authentication result Frame 15314: 323 bytes on wire (2584 bits), 323 bytes captured (2584 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 124770, Ack: 11352, Len: 269 Virtual Network Computing No. Time Source Destination Protocol Length Info 15315 205.654767 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 15315: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11514, Ack: 124770, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15316 205.654798 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15314#1] rfb > xrl [ACK] Seq=125039 Ack=11352 Win=65132 Len=0 SLE=11514 SRE=11541 SLE=11379 SRE=11406 Frame 15316: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11352, Len: 0 No. Time Source Destination Protocol Length Info 15317 205.663047 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15317: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11541, Ack: 124770, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15318 205.663081 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15314#2] rfb > xrl [ACK] Seq=125039 Ack=11352 Win=65132 Len=0 SLE=11514 SRE=11568 SLE=11379 SRE=11406 Frame 15318: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11352, Len: 0 No. Time Source Destination Protocol Length Info 15319 205.678914 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 15319: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11352, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15320 205.678949 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=125039 Ack=11406 Win=65078 Len=0 SLE=11514 SRE=11568 Frame 15320: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11406, Len: 0 No. Time Source Destination Protocol Length Info 15321 205.683651 192.168.10.142 192.168.10.185 VNC 86 [TCP Previous segment lost] Authentication result Frame 15321: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11595, Ack: 125039, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15322 205.683685 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15320#1] rfb > xrl [ACK] Seq=125039 Ack=11406 Win=65078 Len=0 SLE=11595 SRE=11627 SLE=11514 SRE=11568 Frame 15322: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11406, Len: 0 No. Time Source Destination Protocol Length Info 15323 205.683729 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15323: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11627, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15324 205.683757 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15320#2] rfb > xrl [ACK] Seq=125039 Ack=11406 Win=65078 Len=0 SLE=11595 SRE=11654 SLE=11514 SRE=11568 Frame 15324: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11406, Len: 0 No. Time Source Destination Protocol Length Info 15325 205.713960 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 15325: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11708, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15326 205.713998 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15320#3] rfb > xrl [ACK] Seq=125039 Ack=11406 Win=65078 Len=0 SLE=11708 SRE=11735 SLE=11595 SRE=11654 Frame 15326: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11406, Len: 0 No. Time Source Destination Protocol Length Info 15327 205.719014 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 15327: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11406, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15328 205.719094 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 15328: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11568, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15329 205.719126 192.168.10.185 192.168.10.142 TCP 82 rfb > xrl [ACK] Seq=125039 Ack=11433 Win=65051 Len=0 SLE=11514 SRE=11595 SLE=11708 SRE=11735 SLE=11595 SRE=11654 Frame 15329: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11433, Len: 0 No. Time Source Destination Protocol Length Info 15330 205.719535 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15330: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11735, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15331 205.719567 192.168.10.185 192.168.10.142 TCP 82 [TCP Dup ACK 15329#1] rfb > xrl [ACK] Seq=125039 Ack=11433 Win=65051 Len=0 SLE=11708 SRE=11762 SLE=11514 SRE=11595 SLE=11708 SRE=11735 Frame 15331: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11433, Len: 0 No. Time Source Destination Protocol Length Info 15332 205.719607 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15332: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11762, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15333 205.719649 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15329#2] rfb > xrl [ACK] Seq=125039 Ack=11433 Win=65051 Len=0 SLE=11708 SRE=11789 SLE=11514 SRE=11595 Frame 15333: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11433, Len: 0 No. Time Source Destination Protocol Length Info 15334 205.726837 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15334: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11789, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15335 205.726869 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15329#3] rfb > xrl [ACK] Seq=125039 Ack=11433 Win=65051 Len=0 SLE=11708 SRE=11816 SLE=11514 SRE=11595 Frame 15335: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11433, Len: 0 No. Time Source Destination Protocol Length Info 15336 205.738356 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15336: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11816, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15337 205.738389 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15329#4] rfb > xrl [ACK] Seq=125039 Ack=11433 Win=65051 Len=0 SLE=11708 SRE=11843 SLE=11514 SRE=11595 Frame 15337: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11433, Len: 0 No. Time Source Destination Protocol Length Info 15338 205.742891 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15338: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11843, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15339 205.742921 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15329#5] rfb > xrl [ACK] Seq=125039 Ack=11433 Win=65051 Len=0 SLE=11708 SRE=11870 SLE=11514 SRE=11595 Frame 15339: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11433, Len: 0 No. Time Source Destination Protocol Length Info 15340 205.753591 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 15340: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11433, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15341 205.753644 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 15341: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11654, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15342 205.753674 192.168.10.185 192.168.10.142 TCP 74 rfb > xrl [ACK] Seq=125039 Ack=11460 Win=65024 Len=0 SLE=11595 SRE=11681 SLE=11708 SRE=11870 Frame 15342: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11460, Len: 0 No. Time Source Destination Protocol Length Info 15343 205.753716 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15343: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11870, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15344 205.753747 192.168.10.185 192.168.10.142 TCP 82 [TCP Dup ACK 15342#1] rfb > xrl [ACK] Seq=125039 Ack=11460 Win=65024 Len=0 SLE=11708 SRE=11897 SLE=11595 SRE=11681 SLE=11708 SRE=11870 Frame 15344: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11460, Len: 0 No. Time Source Destination Protocol Length Info 15345 205.769052 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15345: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11897, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15346 205.769087 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15342#2] rfb > xrl [ACK] Seq=125039 Ack=11460 Win=65024 Len=0 SLE=11708 SRE=11924 SLE=11514 SRE=11595 Frame 15346: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11460, Len: 0 No. Time Source Destination Protocol Length Info 15347 205.772678 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15347: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11924, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15348 205.772713 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15342#3] rfb > xrl [ACK] Seq=125039 Ack=11460 Win=65024 Len=0 SLE=11708 SRE=11951 SLE=11514 SRE=11595 Frame 15348: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11460, Len: 0 No. Time Source Destination Protocol Length Info 15349 205.777061 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15349: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11951, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15350 205.777094 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15342#4] rfb > xrl [ACK] Seq=125039 Ack=11460 Win=65024 Len=0 SLE=11708 SRE=11978 SLE=11514 SRE=11595 Frame 15350: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11460, Len: 0 No. Time Source Destination Protocol Length Info 15351 205.783169 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15351: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11978, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15352 205.783202 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15342#5] rfb > xrl [ACK] Seq=125039 Ack=11460 Win=65024 Len=0 SLE=11708 SRE=12005 SLE=11514 SRE=11595 Frame 15352: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11460, Len: 0 No. Time Source Destination Protocol Length Info 15353 205.792986 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15353: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12005, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15354 205.793018 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15342#6] rfb > xrl [ACK] Seq=125039 Ack=11460 Win=65024 Len=0 SLE=11708 SRE=12032 SLE=11514 SRE=11595 Frame 15354: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11460, Len: 0 No. Time Source Destination Protocol Length Info 15355 205.803945 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 15355: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11460, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15356 205.808817 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 15356: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11681, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15357 205.808850 192.168.10.185 192.168.10.142 TCP 74 rfb > xrl [ACK] Seq=125039 Ack=11487 Win=64997 Len=0 SLE=11595 SRE=11708 SLE=11514 SRE=11595 Frame 15357: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11487, Len: 0 No. Time Source Destination Protocol Length Info 15358 205.809145 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15358: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12032, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15359 205.809177 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15357#1] rfb > xrl [ACK] Seq=125039 Ack=11487 Win=64997 Len=0 SLE=11708 SRE=12059 SLE=11514 SRE=11595 Frame 15359: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11487, Len: 0 No. Time Source Destination Protocol Length Info 15360 205.815190 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15360: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12059, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15361 205.815223 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15357#2] rfb > xrl [ACK] Seq=125039 Ack=11487 Win=64997 Len=0 SLE=11708 SRE=12086 SLE=11514 SRE=11595 Frame 15361: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11487, Len: 0 No. Time Source Destination Protocol Length Info 15362 205.822831 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15362: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12086, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15363 205.822864 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15357#3] rfb > xrl [ACK] Seq=125039 Ack=11487 Win=64997 Len=0 SLE=11708 SRE=12113 SLE=11514 SRE=11595 Frame 15363: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11487, Len: 0 No. Time Source Destination Protocol Length Info 15364 205.824082 192.168.10.207 64.239.246.16 TCP 60 4857 > http [FIN, ACK] Seq=1 Ack=2 Win=65535 Len=0 Frame 15364: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: 4857 (4857), Dst Port: http (80), Seq: 1, Ack: 2, Len: 0 No. Time Source Destination Protocol Length Info 15365 205.824892 192.168.10.207 64.239.246.16 TCP 62 piranha2 > http [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM=1 Frame 15365: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: piranha2 (4601), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 15366 205.831040 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15366: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12113, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15367 205.831074 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15357#4] rfb > xrl [ACK] Seq=125039 Ack=11487 Win=64997 Len=0 SLE=11708 SRE=12140 SLE=11514 SRE=11595 Frame 15367: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 11487, Len: 0 No. Time Source Destination Protocol Length Info 15368 205.836841 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 15368: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 11487, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15369 205.836874 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=125039 Ack=12140 Win=64344 Len=0 Frame 15369: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 12140, Len: 0 No. Time Source Destination Protocol Length Info 15370 205.842721 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15370: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12140, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15371 205.847011 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15371: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12167, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15372 205.847048 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=125039 Ack=12194 Win=64290 Len=0 Frame 15372: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 12194, Len: 0 No. Time Source Destination Protocol Length Info 15373 205.850910 192.168.10.185 192.168.10.142 VNC 346 Authentication result Frame 15373: 346 bytes on wire (2768 bits), 346 bytes captured (2768 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125039, Ack: 12194, Len: 292 Virtual Network Computing No. Time Source Destination Protocol Length Info 15374 205.854789 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15374: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12194, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15375 205.859725 64.239.246.16 192.168.10.207 TCP 60 http > piranha2 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1400 Frame 15375: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 15376 205.859777 192.168.10.207 64.239.246.16 TCP 60 piranha2 > http [ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 15376: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: piranha2 (4601), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 15377 205.860177 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:47:43 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.207 64.239.246.16 4601 80 msg="Conn Begin" (HTTP-proxy.endusers-00) Frame 15377: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:47:43 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.207 64.239.246.16 4601 80 msg="Conn Begin" (HTTP-proxy.endusers-00) No. Time Source Destination Protocol Length Info 15378 205.860472 192.168.10.207 64.239.246.16 HTTP 239 GET /ap/ HTTP/1.1 Frame 15378: 239 bytes on wire (1912 bits), 239 bytes captured (1912 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: piranha2 (4601), Dst Port: http (80), Seq: 1, Ack: 1, Len: 185 Hypertext Transfer Protocol No. Time Source Destination Protocol Length Info 15379 205.860509 64.239.246.16 192.168.10.207 TCP 60 http > piranha2 [ACK] Seq=1 Ack=186 Win=65535 Len=0 Frame 15379: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 1, Ack: 186, Len: 0 No. Time Source Destination Protocol Length Info 15380 205.864242 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15380: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12221, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15381 205.864275 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=125331 Ack=12248 Win=65535 Len=0 Frame 15381: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125331, Ack: 12248, Len: 0 No. Time Source Destination Protocol Length Info 15382 205.882882 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15382: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12248, Ack: 125039, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15383 205.882930 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15383: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12275, Ack: 125331, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15384 205.882959 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=125331 Ack=12307 Win=65476 Len=0 Frame 15384: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125331, Ack: 12307, Len: 0 No. Time Source Destination Protocol Length Info 15385 205.887317 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15385: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12307, Ack: 125331, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15386 205.887364 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15386: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12334, Ack: 125331, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15387 205.887396 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=125331 Ack=12361 Win=65422 Len=0 Frame 15387: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125331, Ack: 12361, Len: 0 No. Time Source Destination Protocol Length Info 15388 205.889682 192.168.10.185 192.168.10.142 VNC 1247 Authentication result Frame 15388: 1247 bytes on wire (9976 bits), 1247 bytes captured (9976 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 125331, Ack: 12361, Len: 1193 Virtual Network Computing No. Time Source Destination Protocol Length Info 15389 205.894999 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15389: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12361, Ack: 125331, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15390 205.899170 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 15390: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 15391 205.899200 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 15391: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 15392 205.903772 64.239.246.16 192.168.10.207 TCP 1454 [TCP segment of a reassembled PDU] Frame 15392: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 1, Ack: 186, Len: 1400 No. Time Source Destination Protocol Length Info 15393 205.903809 64.239.246.16 192.168.10.207 TCP 137 [TCP segment of a reassembled PDU] Frame 15393: 137 bytes on wire (1096 bits), 137 bytes captured (1096 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 1401, Ack: 186, Len: 83 No. Time Source Destination Protocol Length Info 15394 205.903842 64.239.246.16 192.168.10.207 TCP 1454 [TCP segment of a reassembled PDU] Frame 15394: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 1484, Ack: 186, Len: 1400 No. Time Source Destination Protocol Length Info 15395 205.903873 64.239.246.16 192.168.10.207 TCP 1454 [TCP segment of a reassembled PDU] Frame 15395: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 2884, Ack: 186, Len: 1400 No. Time Source Destination Protocol Length Info 15396 205.903919 192.168.10.207 64.239.246.16 TCP 60 piranha2 > http [ACK] Seq=186 Ack=1484 Win=65535 Len=0 Frame 15396: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: piranha2 (4601), Dst Port: http (80), Seq: 186, Ack: 1484, Len: 0 No. Time Source Destination Protocol Length Info 15397 205.903958 192.168.10.207 64.239.246.16 TCP 60 piranha2 > http [ACK] Seq=186 Ack=4284 Win=65535 Len=0 Frame 15397: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: piranha2 (4601), Dst Port: http (80), Seq: 186, Ack: 4284, Len: 0 No. Time Source Destination Protocol Length Info 15398 205.904879 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15398: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12388, Ack: 125331, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15399 205.904909 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=126524 Ack=12415 Win=65368 Len=0 Frame 15399: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 126524, Ack: 12415, Len: 0 No. Time Source Destination Protocol Length Info 15400 205.908186 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 15400: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14617, Ack: 1048143, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15401 205.908218 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1048143 Ack=14659 Win=46678 Len=0 Frame 15401: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1048143, Ack: 14659, Len: 0 No. Time Source Destination Protocol Length Info 15402 205.913576 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15402: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12415, Ack: 125331, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15403 205.922830 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15403: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12442, Ack: 126524, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15404 205.922863 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=126524 Ack=12474 Win=65309 Len=0 Frame 15404: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 126524, Ack: 12474, Len: 0 No. Time Source Destination Protocol Length Info 15405 205.923072 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15405: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12474, Ack: 126524, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15406 205.926976 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15406: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12501, Ack: 126524, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15407 205.927009 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=126524 Ack=12528 Win=65255 Len=0 Frame 15407: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 126524, Ack: 12528, Len: 0 No. Time Source Destination Protocol Length Info 15408 205.928136 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 15408: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 126524, Ack: 12528, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 15409 205.928168 192.168.10.185 192.168.10.142 VNC 67 Authentication result Frame 15409: 67 bytes on wire (536 bits), 67 bytes captured (536 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 127784, Ack: 12528, Len: 13 Virtual Network Computing No. Time Source Destination Protocol Length Info 15410 205.937845 64.239.246.16 192.168.10.207 TCP 1454 [TCP segment of a reassembled PDU] Frame 15410: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 4284, Ack: 186, Len: 1400 No. Time Source Destination Protocol Length Info 15411 205.938766 64.239.246.16 192.168.10.207 TCP 1454 [TCP segment of a reassembled PDU] Frame 15411: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 5684, Ack: 186, Len: 1400 No. Time Source Destination Protocol Length Info 15412 205.938819 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15412: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12528, Ack: 126524, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15413 205.938862 192.168.10.207 64.239.246.16 TCP 60 piranha2 > http [ACK] Seq=186 Ack=7084 Win=65535 Len=0 Frame 15413: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: piranha2 (4601), Dst Port: http (80), Seq: 186, Ack: 7084, Len: 0 No. Time Source Destination Protocol Length Info 15414 205.938892 64.239.246.16 192.168.10.207 TCP 1454 [TCP segment of a reassembled PDU] Frame 15414: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 7084, Ack: 186, Len: 1400 No. Time Source Destination Protocol Length Info 15415 205.945778 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15415: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12555, Ack: 126524, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15416 205.945812 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=127797 Ack=12582 Win=65201 Len=0 Frame 15416: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 127797, Ack: 12582, Len: 0 No. Time Source Destination Protocol Length Info 15417 205.951344 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15417: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12582, Ack: 126524, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15418 205.960930 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=12609 Ack=127797 Win=64240 Len=0 Frame 15418: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12609, Ack: 127797, Len: 0 No. Time Source Destination Protocol Length Info 15419 205.960993 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15419: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12609, Ack: 127797, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15420 205.961026 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=127797 Ack=12641 Win=65142 Len=0 Frame 15420: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 127797, Ack: 12641, Len: 0 No. Time Source Destination Protocol Length Info 15421 205.964740 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15421: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12641, Ack: 127797, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15422 205.968466 192.168.10.185 192.168.10.142 VNC 1306 Authentication result Frame 15422: 1306 bytes on wire (10448 bits), 1306 bytes captured (10448 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 127797, Ack: 12668, Len: 1252 Virtual Network Computing No. Time Source Destination Protocol Length Info 15423 205.972613 64.239.246.16 192.168.10.207 TCP 1454 [TCP segment of a reassembled PDU] Frame 15423: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 8484, Ack: 186, Len: 1400 No. Time Source Destination Protocol Length Info 15424 205.972666 192.168.10.207 64.239.246.16 TCP 60 piranha2 > http [ACK] Seq=186 Ack=9884 Win=65535 Len=0 Frame 15424: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: piranha2 (4601), Dst Port: http (80), Seq: 186, Ack: 9884, Len: 0 No. Time Source Destination Protocol Length Info 15425 205.972696 64.239.246.16 192.168.10.207 TCP 1454 [TCP segment of a reassembled PDU] Frame 15425: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 9884, Ack: 186, Len: 1400 No. Time Source Destination Protocol Length Info 15426 205.972892 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15426: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12668, Ack: 127797, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15427 205.973356 64.239.246.16 192.168.10.207 TCP 1454 [TCP segment of a reassembled PDU] Frame 15427: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 11284, Ack: 186, Len: 1400 No. Time Source Destination Protocol Length Info 15428 205.973416 192.168.10.207 64.239.246.16 TCP 60 piranha2 > http [ACK] Seq=186 Ack=12684 Win=65535 Len=0 Frame 15428: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: piranha2 (4601), Dst Port: http (80), Seq: 186, Ack: 12684, Len: 0 No. Time Source Destination Protocol Length Info 15429 205.973722 64.239.246.16 192.168.10.207 HTTP 866 HTTP/1.1 200 OK (text/html) Frame 15429: 866 bytes on wire (6928 bits), 866 bytes captured (6928 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 12684, Ack: 186, Len: 812 [11 Reassembled TCP Segments (13495 bytes): #15392(1400), #15393(83), #15394(1400), #15395(1400), #15410(1400), #15411(1400), #15414(1400), #15423(1400), #15425(1400), #15427(1400), #15429(812)] Hypertext Transfer Protocol Line-based text data: text/html No. Time Source Destination Protocol Length Info 15430 205.973910 192.168.10.1 192.168.10.245 Syslog 320 LOCAL1.INFO: Oct 3 19:47:44 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.207 64.239.246.16 4601 80 msg="HTTP Request" proxy_act="HTTP-Client.EndUser" op="GET" dstname="update.gfi.com" arg="/ap/" sent_bytes="185" rcvd_bytes="12690" (HTTP-proxy.endusers-00) Frame 15430: 320 bytes on wire (2560 bits), 320 bytes captured (2560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:47:44 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.207 64.239.246.16 4601 80 msg="HTTP Request" proxy_act="HTTP-Client.EndUser" op="GET" dstname="update.gfi.co No. Time Source Destination Protocol Length Info 15431 205.977024 192.168.10.207 64.239.246.16 HTTP 521 POST /license/gfi.key HTTP/1.1 (application/x-www-form-urlencoded) Frame 15431: 521 bytes on wire (4168 bits), 521 bytes captured (4168 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: piranha2 (4601), Dst Port: http (80), Seq: 186, Ack: 13496, Len: 467 Hypertext Transfer Protocol Line-based text data: application/x-www-form-urlencoded No. Time Source Destination Protocol Length Info 15432 205.977061 64.239.246.16 192.168.10.207 TCP 60 http > piranha2 [ACK] Seq=13496 Ack=653 Win=65535 Len=0 Frame 15432: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 13496, Ack: 653, Len: 0 No. Time Source Destination Protocol Length Info 15433 205.977298 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15433: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12695, Ack: 127797, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15434 205.977331 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=129049 Ack=12722 Win=65061 Len=0 Frame 15434: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 129049, Ack: 12722, Len: 0 No. Time Source Destination Protocol Length Info 15435 205.982822 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15435: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12722, Ack: 127797, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15436 205.991064 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15436: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12749, Ack: 127797, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15437 205.991100 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=129049 Ack=12776 Win=65007 Len=0 Frame 15437: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 129049, Ack: 12776, Len: 0 No. Time Source Destination Protocol Length Info 15438 205.994682 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15438: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12776, Ack: 129049, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15439 206.000405 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 15439: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 129049, Ack: 12808, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 15440 206.000444 192.168.10.185 192.168.10.142 VNC 99 Authentication result Frame 15440: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 130309, Ack: 12808, Len: 45 Virtual Network Computing No. Time Source Destination Protocol Length Info 15441 206.008821 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 15441: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12835, Ack: 129049, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15442 206.008857 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15440#1] rfb > xrl [ACK] Seq=130354 Ack=12808 Win=64975 Len=0 SLE=12835 SRE=12862 Frame 15442: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 130354, Ack: 12808, Len: 0 No. Time Source Destination Protocol Length Info 15443 206.018487 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15443: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12862, Ack: 129049, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15444 206.018522 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15440#2] rfb > xrl [ACK] Seq=130354 Ack=12808 Win=64975 Len=0 SLE=12835 SRE=12889 Frame 15444: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 130354, Ack: 12808, Len: 0 No. Time Source Destination Protocol Length Info 15445 206.023511 64.239.246.16 192.168.10.207 HTTP 327 HTTP/1.1 302 Found Frame 15445: 327 bytes on wire (2616 bits), 327 bytes captured (2616 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 13496, Ack: 653, Len: 273 Hypertext Transfer Protocol No. Time Source Destination Protocol Length Info 15446 206.023658 192.168.10.1 192.168.10.245 Syslog 331 LOCAL1.INFO: Oct 3 19:47:44 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.207 64.239.246.16 4601 80 msg="HTTP Request" proxy_act="HTTP-Client.EndUser" op="POST" dstname="update.gfi.com" arg="/license/gfi.key" sent_bytes="275" rcvd_bytes="273" (HTTP-proxy.endusers-00) Frame 15446: 331 bytes on wire (2648 bits), 331 bytes captured (2648 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:47:44 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.207 64.239.246.16 4601 80 msg="HTTP Request" proxy_act="HTTP-Client.EndUser" op="POST" dstname="update.gfi.c No. Time Source Destination Protocol Length Info 15447 206.024366 192.168.10.207 64.239.246.16 HTTP 262 GET /ap/current_revision HTTP/1.1 Frame 15447: 262 bytes on wire (2096 bits), 262 bytes captured (2096 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: piranha2 (4601), Dst Port: http (80), Seq: 653, Ack: 13769, Len: 208 Hypertext Transfer Protocol No. Time Source Destination Protocol Length Info 15448 206.024402 64.239.246.16 192.168.10.207 TCP 60 http > piranha2 [ACK] Seq=13769 Ack=861 Win=65535 Len=0 Frame 15448: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 13769, Ack: 861, Len: 0 No. Time Source Destination Protocol Length Info 15449 206.034458 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15449: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12889, Ack: 129049, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15450 206.034494 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15440#3] rfb > xrl [ACK] Seq=130354 Ack=12808 Win=64975 Len=0 SLE=12835 SRE=12916 Frame 15450: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 130354, Ack: 12808, Len: 0 No. Time Source Destination Protocol Length Info 15451 206.038937 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=12916 Ack=130354 Win=64240 Len=0 Frame 15451: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12916, Ack: 130354, Len: 0 No. Time Source Destination Protocol Length Info 15452 206.039147 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15452: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12916, Ack: 130354, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15453 206.039176 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15440#4] rfb > xrl [ACK] Seq=130354 Ack=12808 Win=64975 Len=0 SLE=12835 SRE=12948 Frame 15453: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 130354, Ack: 12808, Len: 0 No. Time Source Destination Protocol Length Info 15454 206.039219 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15454: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12948, Ack: 130354, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15455 206.039247 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15440#5] rfb > xrl [ACK] Seq=130354 Ack=12808 Win=64975 Len=0 SLE=12835 SRE=12975 Frame 15455: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 130354, Ack: 12808, Len: 0 No. Time Source Destination Protocol Length Info 15456 206.042718 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15456: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12975, Ack: 130354, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15457 206.042751 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15440#6] rfb > xrl [ACK] Seq=130354 Ack=12808 Win=64975 Len=0 SLE=12835 SRE=13002 Frame 15457: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 130354, Ack: 12808, Len: 0 No. Time Source Destination Protocol Length Info 15458 206.042815 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 15458: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 12808, Ack: 130354, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15459 206.042904 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=130354 Ack=13002 Win=64781 Len=0 Frame 15459: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 130354, Ack: 13002, Len: 0 No. Time Source Destination Protocol Length Info 15460 206.047235 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15460: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13002, Ack: 130354, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15461 206.050627 192.168.10.185 192.168.10.142 VNC 757 Authentication result Frame 15461: 757 bytes on wire (6056 bits), 757 bytes captured (6056 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 130354, Ack: 13029, Len: 703 Virtual Network Computing No. Time Source Destination Protocol Length Info 15462 206.054668 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15462: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13029, Ack: 130354, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15463 206.061576 64.239.246.16 192.168.10.207 HTTP 346 HTTP/1.1 200 OK (text/plain) Frame 15463: 346 bytes on wire (2768 bits), 346 bytes captured (2768 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 13769, Ack: 861, Len: 292 Hypertext Transfer Protocol Line-based text data: text/plain No. Time Source Destination Protocol Length Info 15464 206.061761 192.168.10.1 192.168.10.245 Syslog 334 LOCAL1.INFO: Oct 3 19:47:44 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.207 64.239.246.16 4601 80 msg="HTTP Request" proxy_act="HTTP-Client.EndUser" op="GET" dstname="update.gfi.com" arg="/ap/current_revision" sent_bytes="208" rcvd_bytes="292" (HTTP-proxy.endusers-00) Frame 15464: 334 bytes on wire (2672 bits), 334 bytes captured (2672 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:47:44 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.207 64.239.246.16 4601 80 msg="HTTP Request" proxy_act="HTTP-Client.EndUser" op="GET" dstname="update.gfi.co No. Time Source Destination Protocol Length Info 15465 206.064857 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15465: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13056, Ack: 130354, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15466 206.064889 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=131057 Ack=13083 Win=64700 Len=0 Frame 15466: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 131057, Ack: 13083, Len: 0 No. Time Source Destination Protocol Length Info 15467 206.072833 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15467: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13083, Ack: 130354, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15468 206.075254 192.168.10.207 64.239.246.16 HTTP 239 GET /ap/ HTTP/1.1 Frame 15468: 239 bytes on wire (1912 bits), 239 bytes captured (1912 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: piranha2 (4601), Dst Port: http (80), Seq: 861, Ack: 14061, Len: 185 Hypertext Transfer Protocol No. Time Source Destination Protocol Length Info 15469 206.075289 64.239.246.16 192.168.10.207 TCP 60 http > piranha2 [ACK] Seq=14061 Ack=1046 Win=65535 Len=0 Frame 15469: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 14061, Ack: 1046, Len: 0 No. Time Source Destination Protocol Length Info 15470 206.088738 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 15470: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13142, Ack: 131057, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15471 206.088778 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=131057 Ack=13110 Win=64673 Len=0 SLE=13142 SRE=13169 Frame 15471: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 131057, Ack: 13110, Len: 0 No. Time Source Destination Protocol Length Info 15472 206.092741 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15472: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13169, Ack: 131057, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15473 206.092773 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15471#1] rfb > xrl [ACK] Seq=131057 Ack=13110 Win=64673 Len=0 SLE=13142 SRE=13196 Frame 15473: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 131057, Ack: 13110, Len: 0 No. Time Source Destination Protocol Length Info 15474 206.108986 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15474: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13196, Ack: 131057, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15475 206.109023 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15471#2] rfb > xrl [ACK] Seq=131057 Ack=13110 Win=64673 Len=0 SLE=13142 SRE=13223 Frame 15475: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 131057, Ack: 13110, Len: 0 No. Time Source Destination Protocol Length Info 15476 206.112904 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15476: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13223, Ack: 131057, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15477 206.112936 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15471#3] rfb > xrl [ACK] Seq=131057 Ack=13110 Win=64673 Len=0 SLE=13142 SRE=13250 Frame 15477: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 131057, Ack: 13110, Len: 0 No. Time Source Destination Protocol Length Info 15478 206.125207 64.239.246.16 192.168.10.207 TCP 1454 [TCP segment of a reassembled PDU] Frame 15478: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 14061, Ack: 1046, Len: 1400 No. Time Source Destination Protocol Length Info 15479 206.125236 64.239.246.16 192.168.10.207 TCP 137 [TCP segment of a reassembled PDU] Frame 15479: 137 bytes on wire (1096 bits), 137 bytes captured (1096 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 15461, Ack: 1046, Len: 83 No. Time Source Destination Protocol Length Info 15480 206.125324 192.168.10.207 64.239.246.16 TCP 60 piranha2 > http [ACK] Seq=1046 Ack=15544 Win=65535 Len=0 Frame 15480: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: piranha2 (4601), Dst Port: http (80), Seq: 1046, Ack: 15544, Len: 0 No. Time Source Destination Protocol Length Info 15481 206.125356 64.239.246.16 192.168.10.207 TCP 1454 [TCP segment of a reassembled PDU] Frame 15481: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 15544, Ack: 1046, Len: 1400 No. Time Source Destination Protocol Length Info 15482 206.125386 64.239.246.16 192.168.10.207 TCP 1454 [TCP segment of a reassembled PDU] Frame 15482: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 16944, Ack: 1046, Len: 1400 No. Time Source Destination Protocol Length Info 15483 206.125475 64.239.246.16 192.168.10.207 TCP 1454 [TCP segment of a reassembled PDU] Frame 15483: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 18344, Ack: 1046, Len: 1400 No. Time Source Destination Protocol Length Info 15484 206.125513 192.168.10.207 64.239.246.16 TCP 60 piranha2 > http [ACK] Seq=1046 Ack=18344 Win=65535 Len=0 Frame 15484: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: piranha2 (4601), Dst Port: http (80), Seq: 1046, Ack: 18344, Len: 0 No. Time Source Destination Protocol Length Info 15485 206.125545 64.239.246.16 192.168.10.207 TCP 1454 [TCP segment of a reassembled PDU] Frame 15485: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 19744, Ack: 1046, Len: 1400 No. Time Source Destination Protocol Length Info 15486 206.125628 192.168.10.207 64.239.246.16 TCP 60 piranha2 > http [ACK] Seq=1046 Ack=21144 Win=65535 Len=0 Frame 15486: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: piranha2 (4601), Dst Port: http (80), Seq: 1046, Ack: 21144, Len: 0 No. Time Source Destination Protocol Length Info 15487 206.128958 206.51.26.33 192.168.10.207 TCP 65 hp-pxpib > embrace-dp-c [PSH, ACK] Seq=34 Ack=45 Win=64693 Len=11 Frame 15487: 65 bytes on wire (520 bits), 65 bytes captured (520 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.51.26.33 (206.51.26.33), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: hp-pxpib (3101), Dst Port: embrace-dp-c (3198), Seq: 34, Ack: 45, Len: 11 Data (11 bytes) 0000 02 fd 00 00 00 05 49 00 00 12 3a ......I...: No. Time Source Destination Protocol Length Info 15488 206.136784 192.168.10.142 192.168.10.185 VNC 86 [TCP Retransmission] Authentication result Frame 15488: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13110, Ack: 131057, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15489 206.136817 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=131057 Ack=13250 Win=64533 Len=0 Frame 15489: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 131057, Ack: 13250, Len: 0 No. Time Source Destination Protocol Length Info 15490 206.144591 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 15490: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 131057, Ack: 13250, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 15491 206.144626 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 15491: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 132317, Ack: 13250, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 15492 206.144654 192.168.10.185 192.168.10.142 VNC 312 Authentication result Frame 15492: 312 bytes on wire (2496 bits), 312 bytes captured (2496 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 133577, Ack: 13250, Len: 258 Virtual Network Computing No. Time Source Destination Protocol Length Info 15493 206.165942 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 15493: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8653, Ack: 587146, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15494 206.165975 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=587146 Ack=8695 Win=46573 Len=0 Frame 15494: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 587146, Ack: 8695, Len: 0 No. Time Source Destination Protocol Length Info 15495 206.173420 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15495: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13250, Ack: 133835, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15496 206.196851 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15496: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13282, Ack: 133835, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15497 206.196886 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=133835 Ack=13309 Win=64474 Len=0 Frame 15497: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 133835, Ack: 13309, Len: 0 No. Time Source Destination Protocol Length Info 15498 206.199686 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 15498: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 133835, Ack: 13309, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 15499 206.199720 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 15499: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 135095, Ack: 13309, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 15500 206.199749 192.168.10.185 192.168.10.142 VNC 268 Authentication result Frame 15500: 268 bytes on wire (2144 bits), 268 bytes captured (2144 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136355, Ack: 13309, Len: 214 Virtual Network Computing No. Time Source Destination Protocol Length Info 15501 206.201030 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 15501: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13336, Ack: 133835, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15502 206.201062 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15500#1] rfb > xrl [ACK] Seq=136569 Ack=13309 Win=64474 Len=0 SLE=13336 SRE=13363 Frame 15502: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13309, Len: 0 No. Time Source Destination Protocol Length Info 15503 206.204858 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15503: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13363, Ack: 133835, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15504 206.204890 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15500#2] rfb > xrl [ACK] Seq=136569 Ack=13309 Win=64474 Len=0 SLE=13336 SRE=13390 Frame 15504: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13309, Len: 0 No. Time Source Destination Protocol Length Info 15505 206.212998 192.168.10.118 96.8.81.129 TCP 60 versatalk > http [FIN, ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 15505: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.118 (192.168.10.118), Dst: 96.8.81.129 (96.8.81.129) Transmission Control Protocol, Src Port: versatalk (3738), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 15506 206.235092 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 15506: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13309, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15507 206.235125 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 Frame 15507: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15508 206.235167 192.168.10.142 192.168.10.185 VNC 86 [TCP Previous segment lost] Authentication result Frame 15508: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13444, Ack: 136569, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15509 206.235196 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15507#1] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13444 SRE=13476 Frame 15509: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15510 206.235501 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15510: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13476, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15511 206.235533 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15507#2] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13444 SRE=13503 Frame 15511: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15512 206.307263 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 15512: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13584, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15513 206.307300 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#3] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13584 SRE=13611 SLE=13444 SRE=13503 Frame 15513: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15514 206.318991 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 15514: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13638, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15515 206.319026 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#4] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13638 SRE=13665 SLE=13584 SRE=13611 Frame 15515: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15516 206.326858 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15516: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13665, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15517 206.326892 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#5] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13638 SRE=13692 SLE=13584 SRE=13611 Frame 15517: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15518 206.343031 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 15518: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13719, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15519 206.343066 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#6] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=13746 SLE=13638 SRE=13692 Frame 15519: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15520 206.352858 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15520: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13746, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15521 206.352894 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#7] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=13773 SLE=13638 SRE=13692 Frame 15521: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15522 206.359027 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15522: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13773, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15523 206.359059 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#8] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=13800 SLE=13638 SRE=13692 Frame 15523: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15524 206.366142 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15524: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13800, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15525 206.366176 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#9] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=13827 SLE=13638 SRE=13692 Frame 15525: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15526 206.372577 192.168.10.207 206.51.26.33 TCP 60 embrace-dp-c > hp-pxpib [ACK] Seq=45 Ack=45 Win=64990 Len=0 Frame 15526: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.51.26.33 (206.51.26.33) Transmission Control Protocol, Src Port: embrace-dp-c (3198), Dst Port: hp-pxpib (3101), Seq: 45, Ack: 45, Len: 0 No. Time Source Destination Protocol Length Info 15527 206.372970 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15527: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13827, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15528 206.373001 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#10] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=13854 SLE=13638 SRE=13692 Frame 15528: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15529 206.382829 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15529: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13854, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15530 206.382862 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#11] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=13881 SLE=13638 SRE=13692 Frame 15530: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15531 206.393716 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 716183808, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 15531: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15532 206.393739 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 716183808, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 15532: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15533 206.393752 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 716183808, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 15533: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15534 206.393764 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 716183808, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 15534: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15535 206.404012 192.168.10.207 64.239.246.16 TCP 60 4857 > http [FIN, ACK] Seq=1 Ack=2 Win=65535 Len=0 Frame 15535: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: 4857 (4857), Dst Port: http (80), Seq: 1, Ack: 2, Len: 0 No. Time Source Destination Protocol Length Info 15536 206.411958 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2585264384, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 15536: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15537 206.411980 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2585264384, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 15537: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15538 206.411992 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2585264384, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 15538: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15539 206.412003 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2585264384, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 15539: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15540 206.446880 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15540: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13881, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15541 206.446930 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#12] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=13908 SLE=13638 SRE=13692 Frame 15541: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15542 206.455193 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15542: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13908, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15543 206.455228 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#13] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=13935 SLE=13638 SRE=13692 Frame 15543: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15544 206.462941 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15544: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13935, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15545 206.462972 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#14] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=13962 SLE=13638 SRE=13692 Frame 15545: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15546 206.471091 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15546: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13962, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15547 206.471124 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#15] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=13989 SLE=13638 SRE=13692 Frame 15547: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15548 206.478867 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15548: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13989, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15549 206.478899 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#16] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=14016 SLE=13638 SRE=13692 Frame 15549: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15550 206.486885 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15550: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14016, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15551 206.486919 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#17] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=14043 SLE=13638 SRE=13692 Frame 15551: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15552 206.496037 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15552: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14043, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15553 206.496070 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#18] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=14070 SLE=13638 SRE=13692 Frame 15553: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15554 206.503092 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15554: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14070, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15555 206.503125 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#19] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=14097 SLE=13638 SRE=13692 Frame 15555: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15556 206.513353 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15556: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14097, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15557 206.513388 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#20] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=14124 SLE=13638 SRE=13692 Frame 15557: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15558 206.519154 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15558: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14124, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15559 206.519186 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#21] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=14151 SLE=13638 SRE=13692 Frame 15559: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15560 206.527936 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 15560: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14659, Ack: 1048143, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15561 206.527969 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1048143 Ack=14701 Win=46657 Len=0 Frame 15561: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1048143, Ack: 14701, Len: 0 No. Time Source Destination Protocol Length Info 15562 206.531052 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15562: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14151, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15563 206.531085 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#22] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=14178 SLE=13638 SRE=13692 Frame 15563: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15564 206.539794 192.168.10.220 208.67.222.222 DNS 87 Standard query PTR 38.138.196.117.in-addr.arpa Frame 15564: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 65001 (65001), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 15565 206.541981 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15565: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14178, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15566 206.542014 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#23] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=14205 SLE=13638 SRE=13692 Frame 15566: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15567 206.555335 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15567: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14205, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15568 206.555369 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#24] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=14232 SLE=13638 SRE=13692 Frame 15568: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15569 206.578939 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15569: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14232, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15570 206.578975 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#25] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=14259 SLE=13638 SRE=13692 Frame 15570: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15571 206.600919 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15571: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14259, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15572 206.600952 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#26] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=14286 SLE=13638 SRE=13692 Frame 15572: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15573 206.605097 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15573: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14286, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15574 206.605133 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#27] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=14313 SLE=13638 SRE=13692 Frame 15574: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15575 206.605302 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15575: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14313, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15576 206.605337 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#28] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=14340 SLE=13638 SRE=13692 Frame 15576: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15577 206.614743 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15577: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14340, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15578 206.614779 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#29] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=14367 SLE=13638 SRE=13692 Frame 15578: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15579 206.624956 192.168.10.1 192.168.10.245 Syslog 222 LOCAL1.WARNING: Oct 3 19:47:44 MyFirewall firewall: Allow 1-Trusted 0-External 48 tcp 20 127 192.168.10.207 64.239.246.16 4601 80 offset 7 S 3120484134 win 65535 (HTTP-proxy.endusers-00) Frame 15579: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.WARNING: Oct 3 19:47:44 MyFirewall firewall: Allow 1-Trusted 0-External 48 tcp 20 127 192.168.10.207 64.239.246.16 4601 80 offset 7 S 3120484134 win 65535 (HTTP-proxy.endusers-00) No. Time Source Destination Protocol Length Info 15580 206.759960 192.168.10.118 96.8.81.129 TCP 62 vipremoteagent > http [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM=1 Frame 15580: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.118 (192.168.10.118), Dst: 96.8.81.129 (96.8.81.129) Transmission Control Protocol, Src Port: vipremoteagent (3752), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 15581 206.770773 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:18:27 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 15581: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:18:27 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 15582 206.780906 Watchgua_3c:4c:d8 Broadcast ARP 60 Who has 192.168.10.118? Tell 192.168.10.1 Frame 15582: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15583 206.780938 Watchgua_3c:4c:d8 Broadcast ARP 60 Who has 192.168.10.118? Tell 192.168.10.1 Frame 15583: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15584 206.780953 Lite-OnC_06:b6:8c Watchgua_3c:4c:d8 ARP 60 192.168.10.118 is at 00:02:e3:06:b6:8c Frame 15584: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15585 206.781022 96.8.81.129 192.168.10.118 TCP 60 http > vipremoteagent [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1400 Frame 15585: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c) Internet Protocol Version 4, Src: 96.8.81.129 (96.8.81.129), Dst: 192.168.10.118 (192.168.10.118) Transmission Control Protocol, Src Port: http (80), Dst Port: vipremoteagent (3752), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 15586 206.781066 192.168.10.118 96.8.81.129 TCP 60 vipremoteagent > http [ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 15586: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.118 (192.168.10.118), Dst: 96.8.81.129 (96.8.81.129) Transmission Control Protocol, Src Port: vipremoteagent (3752), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 15587 206.781275 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:47:44 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.118 96.8.81.129 3752 80 msg="Conn Begin" (HTTP-proxy.endusers-00) Frame 15587: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:47:44 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.118 96.8.81.129 3752 80 msg="Conn Begin" (HTTP-proxy.endusers-00) No. Time Source Destination Protocol Length Info 15588 206.781570 192.168.10.118 96.8.81.129 HTTP 252 GET /weather/local/32819?cc=*&ut=f&ud=mi&us=mph&up=in&ur=in&prod=bd_select&par=yahoowidgetxml HTTP/1.1 Frame 15588: 252 bytes on wire (2016 bits), 252 bytes captured (2016 bits) Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.118 (192.168.10.118), Dst: 96.8.81.129 (96.8.81.129) Transmission Control Protocol, Src Port: vipremoteagent (3752), Dst Port: http (80), Seq: 1, Ack: 1, Len: 198 Hypertext Transfer Protocol No. Time Source Destination Protocol Length Info 15589 206.781608 96.8.81.129 192.168.10.118 TCP 60 http > vipremoteagent [ACK] Seq=1 Ack=199 Win=65535 Len=0 Frame 15589: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c) Internet Protocol Version 4, Src: 96.8.81.129 (96.8.81.129), Dst: 192.168.10.118 (192.168.10.118) Transmission Control Protocol, Src Port: http (80), Dst Port: vipremoteagent (3752), Seq: 1, Ack: 199, Len: 0 No. Time Source Destination Protocol Length Info 15590 206.782045 208.67.222.222 192.168.10.220 DNS 87 Standard query response, No such name Frame 15590: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 65001 (65001) Domain Name System (response) No. Time Source Destination Protocol Length Info 15591 206.782707 192.168.10.203 117.196.138.38 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 15591: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 117.196.138.38 (117.196.138.38) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 15592 206.807232 192.168.10.12 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 15592: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Cisco-Li_0b:3f:f3 (00:18:f8:0b:3f:f3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.12 (192.168.10.12), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 15593 206.807466 192.168.10.12 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 15593: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Cisco-Li_0b:3f:f3 (00:18:f8:0b:3f:f3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.12 (192.168.10.12), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 15594 206.895008 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15594: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14367, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15595 206.895044 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#30] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=14394 SLE=13638 SRE=13692 Frame 15595: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15596 206.964965 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15596: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14394, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15597 206.964999 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15507#31] rfb > xrl [ACK] Seq=136569 Ack=13390 Win=64393 Len=0 SLE=13719 SRE=14421 SLE=13638 SRE=13692 Frame 15597: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 13390, Len: 0 No. Time Source Destination Protocol Length Info 15598 206.966733 192.168.10.142 192.168.10.185 VNC 1085 [TCP Fast Retransmission] Authentication result Frame 15598: 1085 bytes on wire (8680 bits), 1085 bytes captured (8680 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 13390, Ack: 136569, Len: 1031 Virtual Network Computing No. Time Source Destination Protocol Length Info 15599 206.979136 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15599: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14421, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15600 206.979169 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=136569 Ack=14448 Win=65535 Len=0 Frame 15600: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 14448, Len: 0 No. Time Source Destination Protocol Length Info 15601 206.980956 192.168.10.185 192.168.10.142 VNC 290 Authentication result Frame 15601: 290 bytes on wire (2320 bits), 290 bytes captured (2320 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136569, Ack: 14448, Len: 236 Virtual Network Computing No. Time Source Destination Protocol Length Info 15602 206.982958 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15602: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14448, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15603 206.992337 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15603: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14475, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15604 206.992370 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=136805 Ack=14502 Win=65481 Len=0 Frame 15604: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136805, Ack: 14502, Len: 0 No. Time Source Destination Protocol Length Info 15605 207.002273 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15605: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14502, Ack: 136569, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15606 207.005662 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=136805 Ack=14529 Win=65454 Len=0 Frame 15606: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136805, Ack: 14529, Len: 0 No. Time Source Destination Protocol Length Info 15607 207.008881 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15607: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14529, Ack: 136805, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15608 207.013615 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15608: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14561, Ack: 136805, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15609 207.013653 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=136805 Ack=14588 Win=65395 Len=0 Frame 15609: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136805, Ack: 14588, Len: 0 No. Time Source Destination Protocol Length Info 15610 207.017436 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15610: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14588, Ack: 136805, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15611 207.018726 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 15611: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 136805, Ack: 14615, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 15612 207.018759 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 15612: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 138065, Ack: 14615, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 15613 207.018789 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 15613: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 139325, Ack: 14615, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 15614 207.018817 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 15614: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 140585, Ack: 14615, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 15615 207.018846 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 15615: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 140901, Ack: 14615, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 15616 207.018878 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 15616: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 142161, Ack: 14615, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 15617 207.018907 192.168.10.185 192.168.10.142 VNC 60 Authentication result[Malformed Packet] Frame 15617: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 143421, Ack: 14615, Len: 2 Virtual Network Computing [Malformed Packet: VNC] No. Time Source Destination Protocol Length Info 15618 207.021188 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15618: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14615, Ack: 136805, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15619 207.021226 192.168.10.185 192.168.10.142 VNC 938 Authentication result Frame 15619: 938 bytes on wire (7504 bits), 938 bytes captured (7504 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 143423, Ack: 14642, Len: 884 Virtual Network Computing No. Time Source Destination Protocol Length Info 15620 207.045007 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 15620: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14669, Ack: 136805, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15621 207.045043 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15619#1] rfb > xrl [ACK] Seq=144307 Ack=14642 Win=65341 Len=0 SLE=14669 SRE=14696 Frame 15621: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144307, Ack: 14642, Len: 0 No. Time Source Destination Protocol Length Info 15622 207.053791 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15622: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14696, Ack: 136805, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15623 207.053823 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15619#2] rfb > xrl [ACK] Seq=144307 Ack=14642 Win=65341 Len=0 SLE=14669 SRE=14723 Frame 15623: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144307, Ack: 14642, Len: 0 No. Time Source Destination Protocol Length Info 15624 207.054005 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=14723 Ack=139325 Win=64240 Len=0 Frame 15624: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14723, Ack: 139325, Len: 0 No. Time Source Destination Protocol Length Info 15625 207.054086 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=14723 Ack=140585 Win=64240 Len=0 Frame 15625: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14723, Ack: 140585, Len: 0 No. Time Source Destination Protocol Length Info 15626 207.054123 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=14723 Ack=142161 Win=64240 Len=0 Frame 15626: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14723, Ack: 142161, Len: 0 No. Time Source Destination Protocol Length Info 15627 207.054203 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=14723 Ack=143423 Win=64240 Len=0 Frame 15627: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14723, Ack: 143423, Len: 0 No. Time Source Destination Protocol Length Info 15628 207.056882 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15628: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14723, Ack: 144307, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15629 207.056914 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15619#3] rfb > xrl [ACK] Seq=144307 Ack=14642 Win=65341 Len=0 SLE=14669 SRE=14750 Frame 15629: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144307, Ack: 14642, Len: 0 No. Time Source Destination Protocol Length Info 15630 207.060942 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15630: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14750, Ack: 144307, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15631 207.060974 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15619#4] rfb > xrl [ACK] Seq=144307 Ack=14642 Win=65341 Len=0 SLE=14669 SRE=14782 Frame 15631: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144307, Ack: 14642, Len: 0 No. Time Source Destination Protocol Length Info 15632 207.065109 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15632: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14782, Ack: 144307, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15633 207.065142 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15619#5] rfb > xrl [ACK] Seq=144307 Ack=14642 Win=65341 Len=0 SLE=14669 SRE=14809 Frame 15633: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144307, Ack: 14642, Len: 0 No. Time Source Destination Protocol Length Info 15634 207.072473 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15634: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14809, Ack: 144307, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15635 207.072506 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15619#6] rfb > xrl [ACK] Seq=144307 Ack=14642 Win=65341 Len=0 SLE=14669 SRE=14836 Frame 15635: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144307, Ack: 14642, Len: 0 No. Time Source Destination Protocol Length Info 15636 207.077834 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 15636: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14642, Ack: 144307, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15637 207.077868 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=144307 Ack=14836 Win=65147 Len=0 Frame 15637: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144307, Ack: 14836, Len: 0 No. Time Source Destination Protocol Length Info 15638 207.081019 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15638: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14836, Ack: 144307, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15639 207.087952 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15639: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14863, Ack: 144307, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15640 207.087984 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=144307 Ack=14890 Win=65093 Len=0 Frame 15640: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144307, Ack: 14890, Len: 0 No. Time Source Destination Protocol Length Info 15641 207.101181 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15641: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14890, Ack: 144307, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15642 207.150167 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 15642: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14701, Ack: 1048143, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15643 207.150202 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1048143 Ack=14743 Win=46636 Len=0 Frame 15643: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1048143, Ack: 14743, Len: 0 No. Time Source Destination Protocol Length Info 15644 207.150439 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=14743 Ack=1048143 Win=49386 Len=0 Frame 15644: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14743, Ack: 1048143, Len: 0 No. Time Source Destination Protocol Length Info 15645 207.150470 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 15644#1] smtp > 23308 [ACK] Seq=14743 Ack=1048143 Win=49386 Len=0 Frame 15645: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14743, Ack: 1048143, Len: 0 No. Time Source Destination Protocol Length Info 15646 207.150503 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15646: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1048143, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15647 207.150532 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15647: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1049523, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15648 207.150561 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15648: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1050903, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15649 207.150590 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15649: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1052283, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15650 207.150622 206.225.164.186 192.168.10.207 SMTP 770 C: DATA fragment, 716 bytes Frame 15650: 770 bytes on wire (6160 bits), 770 bytes captured (6160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1053663, Ack: 14743, Len: 716 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15651 207.150664 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=14743 Ack=1054379 Win=43150 Len=0 Frame 15651: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14743, Ack: 1054379, Len: 0 No. Time Source Destination Protocol Length Info 15652 207.150775 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15652: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1054379, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15653 207.150807 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15653: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1055759, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15654 207.150838 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15654: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1057139, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15655 207.150872 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15655: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1058519, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15656 207.150902 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15656: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1059899, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15657 207.150931 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=14743 Ack=1058519 Win=39010 Len=0 Frame 15657: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14743, Ack: 1058519, Len: 0 No. Time Source Destination Protocol Length Info 15658 207.150959 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=14743 Ack=1061279 Win=36250 Len=0 Frame 15658: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14743, Ack: 1061279, Len: 0 No. Time Source Destination Protocol Length Info 15659 207.150992 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15659: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1061279, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15660 207.151023 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15660: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1062659, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15661 207.151053 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15661: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1064039, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15662 207.151084 206.225.164.186 192.168.10.207 SMTP 583 C: DATA fragment, 529 bytes Frame 15662: 583 bytes on wire (4664 bits), 583 bytes captured (4664 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1065419, Ack: 14743, Len: 529 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15663 207.151114 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15663: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1065948, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15664 207.151145 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15664: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1067328, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15665 207.151181 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=14743 Ack=1065948 Win=31581 Len=0 Frame 15665: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14743, Ack: 1065948, Len: 0 No. Time Source Destination Protocol Length Info 15666 207.151210 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=14743 Ack=1068708 Win=28821 Len=0 Frame 15666: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14743, Ack: 1068708, Len: 0 No. Time Source Destination Protocol Length Info 15667 207.151240 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15667: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1068708, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15668 207.151280 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15668: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1070088, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15669 207.151311 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15669: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1071468, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15670 207.151340 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15670: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1072848, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15671 207.151370 206.225.164.186 192.168.10.207 SMTP 905 C: DATA fragment, 851 bytes Frame 15671: 905 bytes on wire (7240 bits), 905 bytes captured (7240 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1074228, Ack: 14743, Len: 851 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15672 207.151405 206.225.164.186 192.168.10.207 SMTP 1088 C: DATA fragment, 1034 bytes Frame 15672: 1088 bytes on wire (8704 bits), 1088 bytes captured (8704 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1075079, Ack: 14743, Len: 1034 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15673 207.151434 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=14743 Ack=1071468 Win=26061 Len=0 Frame 15673: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14743, Ack: 1071468, Len: 0 No. Time Source Destination Protocol Length Info 15674 207.151462 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=14743 Ack=1074228 Win=23301 Len=0 Frame 15674: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14743, Ack: 1074228, Len: 0 No. Time Source Destination Protocol Length Info 15675 207.151491 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15675: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1076113, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15676 207.151520 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=14743 Ack=1076113 Win=21416 Len=0 Frame 15676: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14743, Ack: 1076113, Len: 0 No. Time Source Destination Protocol Length Info 15677 207.151549 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15677: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1077493, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15678 207.151579 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15678: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1078873, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15679 207.151609 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15679: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1080253, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15680 207.151640 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15680: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1081633, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15681 207.151669 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=14743 Ack=1078873 Win=18656 Len=0 Frame 15681: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14743, Ack: 1078873, Len: 0 No. Time Source Destination Protocol Length Info 15682 207.151703 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15682: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1083013, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15683 207.151734 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15683: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1084393, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15684 207.151763 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=14743 Ack=1083013 Win=14516 Len=0 Frame 15684: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14743, Ack: 1083013, Len: 0 No. Time Source Destination Protocol Length Info 15685 207.151793 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15685: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1085773, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15686 207.151822 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15686: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1087153, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15687 207.151853 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15687: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1088533, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15688 207.151881 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=14743 Ack=1085773 Win=11756 Len=0 Frame 15688: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14743, Ack: 1085773, Len: 0 No. Time Source Destination Protocol Length Info 15689 207.151910 206.225.164.186 192.168.10.207 SMTP 518 C: DATA fragment, 464 bytes Frame 15689: 518 bytes on wire (4144 bits), 518 bytes captured (4144 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1089913, Ack: 14743, Len: 464 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15690 207.151939 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15690: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1090377, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15691 207.151968 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=14743 Ack=1088533 Win=8996 Len=0 Frame 15691: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14743, Ack: 1088533, Len: 0 No. Time Source Destination Protocol Length Info 15692 207.151997 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15692: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1091757, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15693 207.152026 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=14743 Ack=1090377 Win=7152 Len=0 Frame 15693: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14743, Ack: 1090377, Len: 0 No. Time Source Destination Protocol Length Info 15694 207.152055 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15694: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1093137, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15695 207.152084 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15695: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1094517, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15696 207.152115 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15696: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1095897, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15697 207.152146 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15697: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1097277, Ack: 14743, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15698 207.152174 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=14743 Ack=1093137 Win=4392 Len=0 Frame 15698: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14743, Ack: 1093137, Len: 0 No. Time Source Destination Protocol Length Info 15699 207.152202 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=14743 Ack=1095897 Win=1632 Len=0 Frame 15699: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14743, Ack: 1095897, Len: 0 No. Time Source Destination Protocol Length Info 15700 207.152232 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=14743 Ack=1097529 Win=0 Len=0 Frame 15700: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14743, Ack: 1097529, Len: 0 No. Time Source Destination Protocol Length Info 15701 207.168230 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 15701: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8695, Ack: 587146, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15702 207.168264 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=587146 Ack=8737 Win=46552 Len=0 Frame 15702: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 587146, Ack: 8737, Len: 0 No. Time Source Destination Protocol Length Info 15703 207.194280 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 15703: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 15704 207.199021 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 15704: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14944, Ack: 144307, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15705 207.199054 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=144307 Ack=14917 Win=65066 Len=0 SLE=14944 SRE=14971 Frame 15705: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144307, Ack: 14917, Len: 0 No. Time Source Destination Protocol Length Info 15706 207.205337 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15706: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14971, Ack: 144307, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15707 207.205372 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15705#1] rfb > xrl [ACK] Seq=144307 Ack=14917 Win=65066 Len=0 SLE=14944 SRE=14998 Frame 15707: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144307, Ack: 14917, Len: 0 No. Time Source Destination Protocol Length Info 15708 207.227102 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15708: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14998, Ack: 144307, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15709 207.227137 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15705#2] rfb > xrl [ACK] Seq=144307 Ack=14917 Win=65066 Len=0 SLE=14944 SRE=15025 Frame 15709: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144307, Ack: 14917, Len: 0 No. Time Source Destination Protocol Length Info 15710 207.237103 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15710: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15025, Ack: 144307, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15711 207.237136 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15705#3] rfb > xrl [ACK] Seq=144307 Ack=14917 Win=65066 Len=0 SLE=14944 SRE=15052 Frame 15711: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144307, Ack: 14917, Len: 0 No. Time Source Destination Protocol Length Info 15712 207.242966 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15712: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15052, Ack: 144307, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15713 207.242999 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15705#4] rfb > xrl [ACK] Seq=144307 Ack=14917 Win=65066 Len=0 SLE=14944 SRE=15079 Frame 15713: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144307, Ack: 14917, Len: 0 No. Time Source Destination Protocol Length Info 15714 207.247922 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15714: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15079, Ack: 144307, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15715 207.247963 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15705#5] rfb > xrl [ACK] Seq=144307 Ack=14917 Win=65066 Len=0 SLE=14944 SRE=15106 Frame 15715: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144307, Ack: 14917, Len: 0 No. Time Source Destination Protocol Length Info 15716 207.252986 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 15716: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 14917, Ack: 144307, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15717 207.253018 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=144307 Ack=15106 Win=64877 Len=0 Frame 15717: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144307, Ack: 15106, Len: 0 No. Time Source Destination Protocol Length Info 15718 207.256946 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15718: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15106, Ack: 144307, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15719 207.263085 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15719: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15133, Ack: 144307, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15720 207.263122 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=144307 Ack=15160 Win=64823 Len=0 Frame 15720: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144307, Ack: 15160, Len: 0 No. Time Source Destination Protocol Length Info 15721 207.271716 192.168.10.185 192.168.10.142 VNC 386 Authentication result Frame 15721: 386 bytes on wire (3088 bits), 386 bytes captured (3088 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144307, Ack: 15160, Len: 332 Virtual Network Computing No. Time Source Destination Protocol Length Info 15722 207.283054 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15722: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15160, Ack: 144307, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15723 207.295093 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15723: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15187, Ack: 144639, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15724 207.295128 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=144639 Ack=15219 Win=64764 Len=0 Frame 15724: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144639, Ack: 15219, Len: 0 No. Time Source Destination Protocol Length Info 15725 207.303094 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15725: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15219, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15726 207.313115 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.87? Tell 192.168.10.226 Frame 15726: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15727 207.313145 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.87? Tell 192.168.10.226 Frame 15727: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15728 207.313218 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 15728: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15729 207.313231 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 15729: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15730 207.313261 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 15730: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15731 207.313359 192.168.10.46 192.168.10.245 Syslog 214 LOCAL4.WARNING: Oct 03 2011 19:18:27 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n Frame 15731: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:18:27 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n No. Time Source Destination Protocol Length Info 15732 207.313380 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 15732: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15733 207.313394 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 15733: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15734 207.313405 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 15734: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15735 207.313415 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 15735: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15736 207.313425 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 15736: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15737 207.313435 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 15737: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15738 207.313446 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 15738: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15739 207.313462 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 15739: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15740 207.313495 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 15740: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15741 207.313506 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 15741: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15742 207.313516 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 15742: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15743 207.313525 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 15743: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15744 207.313558 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 15744: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15745 207.313568 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 15745: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15746 207.313579 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 15746: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15747 207.313589 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 15747: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15748 207.313599 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 15748: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15749 207.313609 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 15749: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15750 207.313619 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 15750: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15751 207.313629 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 15751: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15752 207.313639 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 15752: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15753 207.313649 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 15753: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15754 207.313660 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 15754: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15755 207.313670 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 15755: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15756 207.313680 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 15756: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15757 207.313690 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 15757: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15758 207.313700 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 15758: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15759 207.313711 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 15759: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15760 207.313721 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 15760: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15761 207.313731 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 15761: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15762 207.313741 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 15762: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15763 207.313757 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 15763: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15764 207.313767 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 15764: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15765 207.313777 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 15765: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15766 207.313787 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 15766: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15767 207.313797 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 15767: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15768 207.313807 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 15768: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15769 207.313818 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 15769: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15770 207.313887 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 15770: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15771 207.319407 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 15771: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 15772 207.388951 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 15772: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 15773 207.388982 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 15773: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 15774 207.402184 192.168.10.207 64.239.246.16 TCP 60 4857 > http [FIN, ACK] Seq=1 Ack=2 Win=65535 Len=0 Frame 15774: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: 4857 (4857), Dst Port: http (80), Seq: 1, Ack: 2, Len: 0 No. Time Source Destination Protocol Length Info 15775 207.409418 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 732961024, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 15775: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15776 207.409440 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 732961024, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 15776: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15777 207.409452 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 732961024, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 15777: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15778 207.409464 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 732961024, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 15778: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15779 207.427434 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2602041600, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 15779: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15780 207.427452 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2602041600, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 15780: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15781 207.427465 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2602041600, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 15781: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15782 207.427477 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2602041600, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 15782: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15783 207.443934 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 15783: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 15784 207.458810 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=144639 Ack=15246 Win=64737 Len=0 Frame 15784: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144639, Ack: 15246, Len: 0 No. Time Source Destination Protocol Length Info 15785 207.566282 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 15785: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 15786 207.592994 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 15786: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15327, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15787 207.593029 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15784#1] rfb > xrl [ACK] Seq=144639 Ack=15246 Win=64737 Len=0 SLE=15327 SRE=15354 Frame 15787: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144639, Ack: 15246, Len: 0 No. Time Source Destination Protocol Length Info 15788 207.607646 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15788: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15354, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15789 207.607682 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15784#2] rfb > xrl [ACK] Seq=144639 Ack=15246 Win=64737 Len=0 SLE=15327 SRE=15381 Frame 15789: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144639, Ack: 15246, Len: 0 No. Time Source Destination Protocol Length Info 15790 207.607723 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15790: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15381, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15791 207.607752 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15784#3] rfb > xrl [ACK] Seq=144639 Ack=15246 Win=64737 Len=0 SLE=15327 SRE=15408 Frame 15791: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144639, Ack: 15246, Len: 0 No. Time Source Destination Protocol Length Info 15792 207.613629 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15792: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15408, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15793 207.613667 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15784#4] rfb > xrl [ACK] Seq=144639 Ack=15246 Win=64737 Len=0 SLE=15327 SRE=15435 Frame 15793: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144639, Ack: 15246, Len: 0 No. Time Source Destination Protocol Length Info 15794 207.616977 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15794: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15435, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15795 207.617010 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15784#5] rfb > xrl [ACK] Seq=144639 Ack=15246 Win=64737 Len=0 SLE=15327 SRE=15462 Frame 15795: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144639, Ack: 15246, Len: 0 No. Time Source Destination Protocol Length Info 15796 207.624338 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15796: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15462, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15797 207.624372 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15784#6] rfb > xrl [ACK] Seq=144639 Ack=15246 Win=64737 Len=0 SLE=15327 SRE=15489 Frame 15797: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144639, Ack: 15246, Len: 0 No. Time Source Destination Protocol Length Info 15798 207.632674 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 15798: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15246, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15799 207.641095 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 15799: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15516, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15800 207.641130 192.168.10.185 192.168.10.142 TCP 74 rfb > xrl [ACK] Seq=144639 Ack=15273 Win=64710 Len=0 SLE=15516 SRE=15543 SLE=15327 SRE=15489 Frame 15800: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144639, Ack: 15273, Len: 0 No. Time Source Destination Protocol Length Info 15801 207.661429 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 15801: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15570, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15802 207.661465 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15800#1] rfb > xrl [ACK] Seq=144639 Ack=15273 Win=64710 Len=0 SLE=15570 SRE=15597 SLE=15516 SRE=15543 Frame 15802: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144639, Ack: 15273, Len: 0 No. Time Source Destination Protocol Length Info 15803 207.665042 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15803: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15597, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15804 207.665075 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15800#2] rfb > xrl [ACK] Seq=144639 Ack=15273 Win=64710 Len=0 SLE=15570 SRE=15624 SLE=15516 SRE=15543 Frame 15804: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144639, Ack: 15273, Len: 0 No. Time Source Destination Protocol Length Info 15805 207.672941 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15805: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15624, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15806 207.672974 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15800#3] rfb > xrl [ACK] Seq=144639 Ack=15273 Win=64710 Len=0 SLE=15570 SRE=15651 SLE=15516 SRE=15543 Frame 15806: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144639, Ack: 15273, Len: 0 No. Time Source Destination Protocol Length Info 15807 207.681466 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15807: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15651, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15808 207.681498 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15800#4] rfb > xrl [ACK] Seq=144639 Ack=15273 Win=64710 Len=0 SLE=15570 SRE=15678 SLE=15516 SRE=15543 Frame 15808: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144639, Ack: 15273, Len: 0 No. Time Source Destination Protocol Length Info 15809 207.699437 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15809: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15678, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15810 207.699469 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 15800#5] rfb > xrl [ACK] Seq=144639 Ack=15273 Win=64710 Len=0 SLE=15570 SRE=15705 SLE=15516 SRE=15543 Frame 15810: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144639, Ack: 15273, Len: 0 No. Time Source Destination Protocol Length Info 15811 207.703353 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 15811: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15273, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15812 207.703444 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 15812: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15489, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15813 207.703476 192.168.10.185 192.168.10.142 TCP 82 rfb > xrl [ACK] Seq=144639 Ack=15300 Win=64683 Len=0 SLE=15327 SRE=15516 SLE=15570 SRE=15705 SLE=15516 SRE=15543 Frame 15813: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144639, Ack: 15300, Len: 0 No. Time Source Destination Protocol Length Info 15814 207.703770 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 15814: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15543, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15815 207.703799 192.168.10.185 192.168.10.142 TCP 82 [TCP Dup ACK 15813#1] rfb > xrl [ACK] Seq=144639 Ack=15300 Win=64683 Len=0 SLE=15516 SRE=15570 SLE=15570 SRE=15705 SLE=15327 SRE=15516 Frame 15815: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144639, Ack: 15300, Len: 0 No. Time Source Destination Protocol Length Info 15816 207.703840 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15816: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15705, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15817 207.703869 192.168.10.185 192.168.10.142 TCP 82 [TCP Dup ACK 15813#2] rfb > xrl [ACK] Seq=144639 Ack=15300 Win=64683 Len=0 SLE=15570 SRE=15732 SLE=15516 SRE=15570 SLE=15327 SRE=15516 Frame 15817: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144639, Ack: 15300, Len: 0 No. Time Source Destination Protocol Length Info 15818 207.711750 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15818: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15732, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15819 207.711782 192.168.10.185 192.168.10.142 TCP 82 [TCP Dup ACK 15813#3] rfb > xrl [ACK] Seq=144639 Ack=15300 Win=64683 Len=0 SLE=15570 SRE=15759 SLE=15327 SRE=15516 SLE=15327 SRE=15516 Frame 15819: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144639, Ack: 15300, Len: 0 No. Time Source Destination Protocol Length Info 15820 207.724061 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15820: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15759, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15821 207.724095 192.168.10.185 192.168.10.142 TCP 82 [TCP Dup ACK 15813#4] rfb > xrl [ACK] Seq=144639 Ack=15300 Win=64683 Len=0 SLE=15570 SRE=15786 SLE=15327 SRE=15516 SLE=15327 SRE=15516 Frame 15821: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144639, Ack: 15300, Len: 0 No. Time Source Destination Protocol Length Info 15822 207.727136 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 15822: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15300, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15823 207.727169 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=144639 Ack=15786 Win=65535 Len=0 Frame 15823: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144639, Ack: 15786, Len: 0 No. Time Source Destination Protocol Length Info 15824 207.731248 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15824: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15786, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15825 207.737389 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15825: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15813, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15826 207.737423 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=144639 Ack=15840 Win=65481 Len=0 Frame 15826: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144639, Ack: 15840, Len: 0 No. Time Source Destination Protocol Length Info 15827 207.743731 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15827: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15840, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15828 207.756371 192.168.10.185 192.168.10.142 VNC 290 Authentication result Frame 15828: 290 bytes on wire (2320 bits), 290 bytes captured (2320 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144639, Ack: 15867, Len: 236 Virtual Network Computing No. Time Source Destination Protocol Length Info 15829 207.756975 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15829: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15867, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15830 207.767928 192.168.10.104 192.168.10.246 NBNS 110 Refresh NB BAIMOBILEPC2<20> Frame 15830: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 15831 207.769146 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 15831: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15921, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15832 207.769181 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=144875 Ack=15894 Win=65427 Len=0 SLE=15921 SRE=15948 Frame 15832: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 15894, Len: 0 No. Time Source Destination Protocol Length Info 15833 207.783169 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15833: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15948, Ack: 144639, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15834 207.783204 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15832#1] rfb > xrl [ACK] Seq=144875 Ack=15894 Win=65427 Len=0 SLE=15921 SRE=15975 Frame 15834: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 15894, Len: 0 No. Time Source Destination Protocol Length Info 15835 207.788621 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 15835: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15975, Ack: 144875, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 15836 207.788653 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15832#2] rfb > xrl [ACK] Seq=144875 Ack=15894 Win=65427 Len=0 SLE=15921 SRE=16007 Frame 15836: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 15894, Len: 0 No. Time Source Destination Protocol Length Info 15837 207.788698 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15837: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16007, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15838 207.788725 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15832#3] rfb > xrl [ACK] Seq=144875 Ack=15894 Win=65427 Len=0 SLE=15921 SRE=16034 Frame 15838: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 15894, Len: 0 No. Time Source Destination Protocol Length Info 15839 207.793217 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15839: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16034, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15840 207.793249 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15832#4] rfb > xrl [ACK] Seq=144875 Ack=15894 Win=65427 Len=0 SLE=15921 SRE=16061 Frame 15840: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 15894, Len: 0 No. Time Source Destination Protocol Length Info 15841 207.799260 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15841: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16061, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15842 207.799292 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15832#5] rfb > xrl [ACK] Seq=144875 Ack=15894 Win=65427 Len=0 SLE=15921 SRE=16088 Frame 15842: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 15894, Len: 0 No. Time Source Destination Protocol Length Info 15843 207.814684 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 15843: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 15894, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15844 207.814720 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=144875 Ack=16088 Win=65233 Len=0 Frame 15844: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16088, Len: 0 No. Time Source Destination Protocol Length Info 15845 207.819366 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 15845: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16115, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15846 207.819399 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15844#1] rfb > xrl [ACK] Seq=144875 Ack=16088 Win=65233 Len=0 SLE=16115 SRE=16142 Frame 15846: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16088, Len: 0 No. Time Source Destination Protocol Length Info 15847 207.823774 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15847: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16142, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15848 207.823808 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15844#2] rfb > xrl [ACK] Seq=144875 Ack=16088 Win=65233 Len=0 SLE=16115 SRE=16169 Frame 15848: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16088, Len: 0 No. Time Source Destination Protocol Length Info 15849 207.845259 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15849: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16169, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15850 207.845294 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15844#3] rfb > xrl [ACK] Seq=144875 Ack=16088 Win=65233 Len=0 SLE=16115 SRE=16196 Frame 15850: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16088, Len: 0 No. Time Source Destination Protocol Length Info 15851 207.849239 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 15851: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16088, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15852 207.849272 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=144875 Ack=16196 Win=65125 Len=0 Frame 15852: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16196, Len: 0 No. Time Source Destination Protocol Length Info 15853 207.853059 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15853: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16196, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15854 207.856605 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-19.geo.kaspersky.com Frame 15854: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 55399 (55399), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 15855 207.856752 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-19.geo.kaspersky.com Frame 15855: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 55399 (55399), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 15856 207.864702 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 15856: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14743, Ack: 1097529, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15857 207.864736 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1098657 Ack=14785 Win=46615 Len=0 Frame 15857: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1098657, Ack: 14785, Len: 0 No. Time Source Destination Protocol Length Info 15858 207.864768 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=14785 Ack=1097529 Win=0 Len=0 Frame 15858: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14785, Ack: 1097529, Len: 0 No. Time Source Destination Protocol Length Info 15859 207.905357 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 15859: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 15860 207.905388 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 15860: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 15861 207.990030 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=144875 Ack=16223 Win=65098 Len=0 Frame 15861: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16223, Len: 0 No. Time Source Destination Protocol Length Info 15862 208.188628 178.148.30.51 192.168.10.207 TCP 62 redstorm-info > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 15862: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 178.148.30.51 (178.148.30.51), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: redstorm-info (2348), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 15863 208.188705 192.168.10.207 178.148.30.51 TCP 62 smtp > redstorm-info [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 15863: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 178.148.30.51 (178.148.30.51) Transmission Control Protocol, Src Port: smtp (25), Dst Port: redstorm-info (2348), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 15864 208.216861 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 15864: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8737, Ack: 587146, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15865 208.216898 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=587146 Ack=8779 Win=46531 Len=0 Frame 15865: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 587146, Ack: 8779, Len: 0 No. Time Source Destination Protocol Length Info 15866 208.268649 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:18:28 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 15866: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:18:28 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 15867 208.282173 192.168.10.203 117.196.138.38 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 15867: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 117.196.138.38 (117.196.138.38) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 15868 208.401477 192.168.10.30 192.168.20.3 UDP 762 Source port: 34427 Destination port: apc-3052 Frame 15868: 762 bytes on wire (6096 bits), 762 bytes captured (6096 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (720 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 37 3a 32 33 0a 53 52 3d 31 42 0a =18:47:23.SR=1B. 0060 53 55 3d 37 42 31 33 33 43 46 39 0a 52 44 3d 38 SU=7B133CF9.RD=8 0070 32 45 39 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 2E9.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 0a 34 8.7E=00.3E=001.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 31 2e 30 C=207.3.50=041.0 00c0 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 37 2f .43=025.2.78=07/ 00d0 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 0a 34 25/06.6A=0023:.4 00e0 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 20 0a 7=S.63=BAI_UPS . 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 36 33 0.38=00.6E=NS063 0120 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 37 2f 1005398 .6D=07/ 0130 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 2d 55 25/06.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 52 4d 20 58 PS RT 10000 RM X 0150 4c 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d 32 30 L.46=60.00.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 35 3d 7.3.4E=204.4.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 3d 31 00.42=218.1.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e 33 33 C=034.0.2F=16.33 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 2e 33 0.09=60.00;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 0a 49 9=0.I0=2.I1=26.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a 49 38 5=0.I6=0.I7=1.I8 0250 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 0a 49 =Device 1.I9=0.I 0260 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d 30 0a A=Device 2.IB=0. 0270 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 30 0a IC=Relay 1.ID=0. 0280 53 48 3d 39 38 30 36 42 41 33 30 43 32 31 38 42 SH=9806BA30C218B 0290 39 43 46 45 36 45 42 42 45 37 30 32 33 31 41 36 9CFE6EBBE70231A6 02a0 35 42 42 0a 4d 44 3d 62 33 34 37 34 66 66 62 64 5BB.MD=b3474ffbd 02b0 37 61 66 34 63 34 37 30 65 35 31 65 39 31 63 38 7af4c470e51e91c8 02c0 35 38 66 36 64 30 62 0a 3c 2f 42 4f 44 59 3e 0a 58f6d0b.</BODY>. No. Time Source Destination Protocol Length Info 15869 208.401557 192.168.10.30 192.168.20.3 UDP 762 Source port: 34427 Destination port: apc-3052 Frame 15869: 762 bytes on wire (6096 bits), 762 bytes captured (6096 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (720 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 37 3a 32 33 0a 53 52 3d 31 42 0a =18:47:23.SR=1B. 0060 53 55 3d 37 42 31 33 33 43 46 39 0a 52 44 3d 38 SU=7B133CF9.RD=8 0070 32 45 39 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 2E9.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 0a 34 8.7E=00.3E=001.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 31 2e 30 C=207.3.50=041.0 00c0 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 37 2f .43=025.2.78=07/ 00d0 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 0a 34 25/06.6A=0023:.4 00e0 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 20 0a 7=S.63=BAI_UPS . 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 36 33 0.38=00.6E=NS063 0120 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 37 2f 1005398 .6D=07/ 0130 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 2d 55 25/06.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 52 4d 20 58 PS RT 10000 RM X 0150 4c 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d 32 30 L.46=60.00.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 35 3d 7.3.4E=204.4.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 3d 31 00.42=218.1.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e 33 33 C=034.0.2F=16.33 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 2e 33 0.09=60.00;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 0a 49 9=0.I0=2.I1=26.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a 49 38 5=0.I6=0.I7=1.I8 0250 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 0a 49 =Device 1.I9=0.I 0260 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d 30 0a A=Device 2.IB=0. 0270 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 30 0a IC=Relay 1.ID=0. 0280 53 48 3d 39 38 30 36 42 41 33 30 43 32 31 38 42 SH=9806BA30C218B 0290 39 43 46 45 36 45 42 42 45 37 30 32 33 31 41 36 9CFE6EBBE70231A6 02a0 35 42 42 0a 4d 44 3d 62 33 34 37 34 66 66 62 64 5BB.MD=b3474ffbd 02b0 37 61 66 34 63 34 37 30 65 35 31 65 39 31 63 38 7af4c470e51e91c8 02c0 35 38 66 36 64 30 62 0a 3c 2f 42 4f 44 59 3e 0a 58f6d0b.</BODY>. No. Time Source Destination Protocol Length Info 15870 208.401631 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:18:28 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS1/34427 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 15870: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:18:28 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS1/34427 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 15871 208.425001 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 749738240, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 15871: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15872 208.425025 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 749738240, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 15872: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15873 208.425038 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 749738240, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 15873: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15874 208.425051 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 749738240, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 15874: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15875 208.437846 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15875: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16223, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15876 208.443184 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2618818816, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 15876: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15877 208.443203 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2618818816, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 15877: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15878 208.443215 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2618818816, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 15878: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15879 208.443227 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2618818816, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 15879: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15880 208.449493 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15880: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16250, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15881 208.449532 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=144875 Ack=16277 Win=65044 Len=0 Frame 15881: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16277, Len: 0 No. Time Source Destination Protocol Length Info 15882 208.512389 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15882: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16277, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15883 208.535427 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15883: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16304, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15884 208.535463 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=144875 Ack=16331 Win=64990 Len=0 Frame 15884: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16331, Len: 0 No. Time Source Destination Protocol Length Info 15885 208.562856 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 15885: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16358, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15886 208.562890 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15884#1] rfb > xrl [ACK] Seq=144875 Ack=16331 Win=64990 Len=0 SLE=16358 SRE=16385 Frame 15886: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16331, Len: 0 No. Time Source Destination Protocol Length Info 15887 208.591307 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15887: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16385, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15888 208.591343 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15884#2] rfb > xrl [ACK] Seq=144875 Ack=16331 Win=64990 Len=0 SLE=16358 SRE=16412 Frame 15888: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16331, Len: 0 No. Time Source Destination Protocol Length Info 15889 208.605474 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 15889: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16412, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15890 208.605506 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 15884#3] rfb > xrl [ACK] Seq=144875 Ack=16331 Win=64990 Len=0 SLE=16358 SRE=16439 Frame 15890: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16331, Len: 0 No. Time Source Destination Protocol Length Info 15891 208.621594 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 15891: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16331, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 15892 208.621629 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=144875 Ack=16439 Win=64882 Len=0 Frame 15892: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16439, Len: 0 No. Time Source Destination Protocol Length Info 15893 208.834853 178.148.30.51 192.168.10.207 TCP 60 aplx > smtp [FIN, ACK] Seq=85 Ack=223 Win=93218 Len=0 Frame 15893: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 178.148.30.51 (178.148.30.51), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: aplx (1134), Dst Port: smtp (25), Seq: 85, Ack: 223, Len: 0 No. Time Source Destination Protocol Length Info 15894 208.834892 192.168.10.207 178.148.30.51 TCP 60 smtp > aplx [ACK] Seq=223 Ack=86 Win=65451 Len=0 Frame 15894: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 178.148.30.51 (178.148.30.51) Transmission Control Protocol, Src Port: smtp (25), Dst Port: aplx (1134), Seq: 223, Ack: 86, Len: 0 No. Time Source Destination Protocol Length Info 15895 208.835008 192.168.10.207 178.148.30.51 TCP 60 smtp > aplx [FIN, ACK] Seq=223 Ack=86 Win=65451 Len=0 Frame 15895: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 178.148.30.51 (178.148.30.51) Transmission Control Protocol, Src Port: smtp (25), Dst Port: aplx (1134), Seq: 223, Ack: 86, Len: 0 No. Time Source Destination Protocol Length Info 15896 208.835049 178.148.30.51 192.168.10.207 TCP 60 aplx > smtp [ACK] Seq=86 Ack=224 Win=93218 Len=0 Frame 15896: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 178.148.30.51 (178.148.30.51), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: aplx (1134), Dst Port: smtp (25), Seq: 86, Ack: 224, Len: 0 No. Time Source Destination Protocol Length Info 15897 208.835317 192.168.10.1 192.168.10.245 Syslog 201 LOCAL1.INFO: Oct 3 19:47:46 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 178.148.30.51 7x.x.x.3 1134 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 15897: 201 bytes on wire (1608 bits), 201 bytes captured (1608 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:47:46 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 178.148.30.51 7x.x.x.3 1134 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 15898 209.194280 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 15898: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 15899 209.239023 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 15899: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8779, Ack: 587146, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15900 209.239058 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=587146 Ack=8821 Win=46510 Len=0 Frame 15900: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 587146, Ack: 8821, Len: 0 No. Time Source Destination Protocol Length Info 15901 209.239287 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=8821 Ack=587146 Win=17732 Len=0 Frame 15901: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8821, Ack: 587146, Len: 0 No. Time Source Destination Protocol Length Info 15902 209.239318 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 15901#1] smtp > 9428 [ACK] Seq=8821 Ack=587146 Win=17732 Len=0 Frame 15902: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8821, Ack: 587146, Len: 0 No. Time Source Destination Protocol Length Info 15903 209.239352 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15903: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 587146, Ack: 8821, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15904 209.239381 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15904: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 588526, Ack: 8821, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15905 209.239411 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15905: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 589906, Ack: 8821, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15906 209.239441 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15906: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 591286, Ack: 8821, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15907 209.239470 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15907: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 592666, Ack: 8821, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15908 209.239499 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15908: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 594046, Ack: 8821, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15909 209.239532 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15909: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 595426, Ack: 8821, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15910 209.239561 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=8821 Ack=592666 Win=12212 Len=0 Frame 15910: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8821, Ack: 592666, Len: 0 No. Time Source Destination Protocol Length Info 15911 209.239594 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=8821 Ack=596806 Win=8072 Len=0 Frame 15911: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8821, Ack: 596806, Len: 0 No. Time Source Destination Protocol Length Info 15912 209.239623 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15912: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 596806, Ack: 8821, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15913 209.239682 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15913: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 598186, Ack: 8821, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15914 209.239714 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15914: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 599566, Ack: 8821, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15915 209.239744 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15915: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 600946, Ack: 8821, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15916 209.239774 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15916: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 602326, Ack: 8821, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15917 209.239803 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 15917: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 603706, Ack: 8821, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15918 209.239836 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=8821 Ack=602326 Win=2552 Len=0 Frame 15918: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8821, Ack: 602326, Len: 0 No. Time Source Destination Protocol Length Info 15919 209.239864 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=8821 Ack=604878 Win=0 Len=0 Frame 15919: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8821, Ack: 604878, Len: 0 No. Time Source Destination Protocol Length Info 15920 209.267914 192.168.10.104 192.168.10.246 NBNS 110 Refresh NB BAIMOBILEPC2<20> Frame 15920: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 15921 209.315624 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 15921: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 15922 209.387121 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 15922: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 15923 209.387152 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 15923: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 15924 209.420771 192.168.10.207 64.239.246.16 TCP 60 4857 > http [FIN, ACK] Seq=1 Ack=2 Win=65535 Len=0 Frame 15924: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: 4857 (4857), Dst Port: http (80), Seq: 1, Ack: 2, Len: 0 No. Time Source Destination Protocol Length Info 15925 209.440689 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 766515456, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 15925: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15926 209.440711 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 766515456, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 15926: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15927 209.440725 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 766515456, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 15927: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15928 209.440737 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 766515456, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 15928: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15929 209.443962 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 15929: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 15930 209.458672 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2635596032, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 15930: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15931 209.458696 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2635596032, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 15931: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15932 209.458709 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2635596032, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 15932: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15933 209.458721 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2635596032, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 15933: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15934 209.566211 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 15934: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 15935 209.595523 64.239.246.16 192.168.10.207 TCP 1454 [TCP segment of a reassembled PDU] Frame 15935: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 21144, Ack: 1046, Len: 1400 No. Time Source Destination Protocol Length Info 15936 209.595559 64.239.246.16 192.168.10.207 TCP 1454 [TCP segment of a reassembled PDU] Frame 15936: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 22544, Ack: 1046, Len: 1400 No. Time Source Destination Protocol Length Info 15937 209.595600 64.239.246.16 192.168.10.207 TCP 1454 [TCP segment of a reassembled PDU] Frame 15937: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 23944, Ack: 1046, Len: 1400 No. Time Source Destination Protocol Length Info 15938 209.595630 64.239.246.16 192.168.10.207 TCP 1454 [TCP segment of a reassembled PDU] Frame 15938: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 25344, Ack: 1046, Len: 1400 No. Time Source Destination Protocol Length Info 15939 209.595659 64.239.246.16 192.168.10.207 HTTP 866 HTTP/1.1 200 OK (text/html) Frame 15939: 866 bytes on wire (6928 bits), 866 bytes captured (6928 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 26744, Ack: 1046, Len: 812 [11 Reassembled TCP Segments (13495 bytes): #15478(1400), #15479(83), #15481(1400), #15482(1400), #15483(1400), #15485(1400), #15935(1400), #15936(1400), #15937(1400), #15938(1400), #15939(812)] Hypertext Transfer Protocol Line-based text data: text/html No. Time Source Destination Protocol Length Info 15940 209.595787 192.168.10.1 192.168.10.245 Syslog 319 LOCAL1.INFO: Oct 3 19:47:47 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.207 64.239.246.16 4601 80 msg="HTTP Request" proxy_act="HTTP-Client.EndUser" op="GET" dstname="update.gfi.com" arg="/ap/" sent_bytes="185" rcvd_bytes="9045" (HTTP-proxy.endusers-00) Frame 15940: 319 bytes on wire (2552 bits), 319 bytes captured (2552 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:47:47 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.207 64.239.246.16 4601 80 msg="HTTP Request" proxy_act="HTTP-Client.EndUser" op="GET" dstname="update.gfi.co No. Time Source Destination Protocol Length Info 15941 209.595831 192.168.10.207 64.239.246.16 TCP 60 piranha2 > http [ACK] Seq=1046 Ack=27556 Win=65535 Len=0 Frame 15941: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: piranha2 (4601), Dst Port: http (80), Seq: 1046, Ack: 27556, Len: 0 No. Time Source Destination Protocol Length Info 15942 209.598195 192.168.10.207 64.239.246.16 HTTP 514 POST /license/gfi.key HTTP/1.1 (application/x-www-form-urlencoded) Frame 15942: 514 bytes on wire (4112 bits), 514 bytes captured (4112 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: piranha2 (4601), Dst Port: http (80), Seq: 1046, Ack: 27556, Len: 460 Hypertext Transfer Protocol Line-based text data: application/x-www-form-urlencoded No. Time Source Destination Protocol Length Info 15943 209.598230 64.239.246.16 192.168.10.207 TCP 60 http > piranha2 [ACK] Seq=27556 Ack=1506 Win=65535 Len=0 Frame 15943: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 27556, Ack: 1506, Len: 0 No. Time Source Destination Protocol Length Info 15944 209.611613 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.CRIT: Oct 03 2011 19:18:30 ciscoasa : %ASA-2-106001: Inbound TCP connection denied from 212.116.151.11/57899 to 7x.x.x.5/110 flags SYN on interface outside\n Frame 15944: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.CRIT: Oct 03 2011 19:18:30 ciscoasa : %ASA-2-106001: Inbound TCP connection denied from 212.116.151.11/57899 to 7x.x.x.5/110 flags SYN on interface outside\n No. Time Source Destination Protocol Length Info 15945 209.640768 64.239.246.16 192.168.10.207 HTTP 320 HTTP/1.1 302 Found Frame 15945: 320 bytes on wire (2560 bits), 320 bytes captured (2560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 27556, Ack: 1506, Len: 266 Hypertext Transfer Protocol No. Time Source Destination Protocol Length Info 15946 209.641475 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=179876 Ack=2887 Win=1002 Len=1448 TSval=587658 TSecr=729405 Frame 15946: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 179876, Ack: 2887, Len: 1448 Data (1448 bytes) 0000 17 03 01 21 b0 41 0d f2 d4 54 6c fc 88 2c d8 d1 ...!.A...Tl..,.. 0010 26 ea 3e 63 80 a5 ff 40 20 74 89 2a 92 7d 23 d6 &.>c...@ t.*.}#. 0020 c4 e7 89 2c 2f e7 ee c1 b7 eb a2 ef 51 cc 82 d4 ...,/.......Q... 0030 bf 11 c0 f0 9a e4 b9 b6 41 ae d0 37 4a 19 96 45 ........A..7J..E 0040 65 64 a0 fe 8f e8 8f d6 06 b7 10 bb 63 ae fd f1 ed..........c... 0050 af 83 00 ac de 85 68 49 4a 78 bf 1c 7c 9f 87 30 ......hIJx..|..0 0060 88 12 44 11 02 be df 12 24 9f 05 ce 31 72 c5 bc ..D.....$...1r.. 0070 3b a8 53 a8 94 14 e7 85 64 93 14 9a 6d bc d1 c0 ;.S.....d...m... 0080 02 d2 66 eb e4 8a c4 d5 ec fc 42 25 d5 9a e5 43 ..f.......B%...C 0090 c5 d4 8d 33 0e 36 07 68 70 6e 2d 33 69 58 3b 3b ...3.6.hpn-3iX;; 00a0 0e f1 53 9f 6e f5 13 1d dd 26 ed ef 22 9c 0a 1b ..S.n....&.."... 00b0 00 dc 6e 30 a5 fe 27 c9 ad a6 c5 fc cd 6b b8 9e ..n0..'......k.. 00c0 84 75 72 c9 ba 3d 3d eb a9 4d 8d d1 82 bc 25 92 .ur..==..M....%. 00d0 83 4b 22 8f 4d 1d ee 11 70 21 48 cd 15 a9 12 7b .K".M...p!H....{ 00e0 f0 37 c0 0f c4 74 32 1c fd 0d 43 5d 3d 85 0b 6e .7...t2...C]=..n 00f0 7c df a7 a4 34 c6 c6 91 c3 97 46 c2 f4 76 bd ee |...4.....F..v.. 0100 88 c6 b8 dc 38 da 86 22 a7 d1 aa 97 1e e2 1c 30 ....8..".......0 0110 25 0e b2 40 ae c2 43 e3 ea 8e a5 c2 3b f4 b3 af %[email protected].....;... 0120 af f7 4a 4f 90 b0 79 89 e1 0e e0 7d 89 80 d9 f5 ..JO..y....}.... 0130 07 1e ea 5a 45 23 cf 62 2c 27 3c 59 50 bc c1 c2 ...ZE#.b,'<YP... 0140 55 65 0c 56 2c d8 db e4 14 9f e0 c8 8f 4f cd f4 Ue.V,........O.. 0150 9f 89 7f 67 cf 45 95 91 98 30 f6 d0 46 b3 fa 90 ...g.E...0..F... 0160 b2 fb 13 57 7b 17 88 7d cc 00 0f 50 4b 3a 79 14 ...W{..}...PK:y. 0170 da 5d 6f 73 b8 33 a7 fc 9b 91 db 56 14 76 51 bb .]os.3.....V.vQ. 0180 4d 52 52 95 a2 67 da 59 64 50 f7 fa 84 0e b8 6e MRR..g.YdP.....n 0190 2b d5 6b 3b ac 37 07 0c 3a dd 57 9f 74 2a 0d 88 +.k;.7..:.W.t*.. 01a0 8c 35 41 e8 29 69 5d 0b 3d c6 c8 08 56 8e a5 e6 .5A.)i].=...V... 01b0 00 28 89 1e fe 10 ec c3 b4 b7 f6 8f 6c 15 6c d2 .(..........l.l. 01c0 55 0d e1 a2 2f 73 41 41 06 21 4b f7 3b 92 78 2a U.../sAA.!K.;.x* 01d0 b3 ad de 2e 77 4c aa 3a be e2 0d c5 24 16 cb 13 ....wL.:....$... 01e0 0a f9 3c 3b 44 e3 16 c0 c0 e0 f9 da 9b a4 29 0f ..<;D.........). 01f0 d5 8d 41 2d 8d 91 c4 3e 03 df cc 36 36 7d ba 96 ..A-...>...66}.. 0200 ca c5 53 45 df 2d 2c 8d c5 48 39 f8 ef a6 61 d5 ..SE.-,..H9...a. 0210 2a 58 f7 bb f5 df 92 a8 c0 a7 0e 40 1e a4 ca a2 *X.........@.... 0220 20 f9 82 fd 9d 05 11 06 00 6a e3 60 e5 f7 76 e1 ........j.`..v. 0230 6c 2a 79 1b 86 ec 09 df 4d 70 a3 ce 8b 29 89 da l*y.....Mp...).. 0240 f1 b7 d6 76 bc 24 06 e4 08 d3 bf 26 9e 8c d3 41 ...v.$.....&...A 0250 14 b2 1b 60 3a 99 e4 f2 81 d3 f7 5b 99 34 2b 87 ...`:......[.4+. 0260 33 a5 a6 1b b9 33 b5 e7 3e 96 bd c3 18 37 72 18 3....3..>....7r. 0270 ac 86 39 45 7b 7a 1e 2f fe 9e e3 d2 4a d2 a5 90 ..9E{z./....J... 0280 b8 da 59 fb da 15 38 ad 08 58 29 cc 17 0d 5f 1c ..Y...8..X)..._. 0290 75 84 2c 1e b8 d8 2d 06 7c 37 fc d4 25 2d d9 88 u.,...-.|7..%-.. 02a0 5f 00 8c d1 7f 98 04 e1 58 92 78 c6 89 20 8d ac _.......X.x.. .. 02b0 94 01 5c aa bc c7 c1 ee 29 f7 e5 1c 0b d5 26 81 ..\.....).....&. 02c0 b6 d8 ea 31 f0 31 8c 30 95 5f 92 3c 16 10 ad 00 ...1.1.0._.<.... 02d0 b1 9c ae b4 af ed 8c d8 cb 4b d9 57 9f a2 49 df .........K.W..I. 02e0 ca 11 d4 3f 14 59 01 05 ff 1b 6e 86 2c 16 22 63 ...?.Y....n.,."c 02f0 cd 5e ea 1b bc 11 31 21 32 d8 3e 27 1b 91 f0 9f .^....1!2.>'.... 0300 2c eb 86 58 a1 79 3b b4 89 1a 22 a2 90 e0 e9 5a ,..X.y;..."....Z 0310 4c f0 14 48 27 04 84 33 2e 35 4a 8e 2f be 98 c7 L..H'..3.5J./... 0320 ee 21 53 a6 ba 2c 30 c2 2e bb ae a0 09 ef fd 68 .!S..,0........h 0330 7f 5e 38 69 43 93 ac 9a cd 59 41 e6 46 f5 a2 1c .^8iC....YA.F... 0340 03 3e 0e 5e a7 5a 05 3d 05 e0 b6 0c 69 fb e9 db .>.^.Z.=....i... 0350 0e 9c 3e 12 74 8c 74 47 b5 aa b3 78 c6 c7 c1 cf ..>.t.tG...x.... 0360 b9 67 1e 80 fa 9b 09 f3 13 f9 23 78 76 b1 e6 cf .g........#xv... 0370 13 08 cc 72 4c 50 4e 17 65 25 09 f9 24 7e aa 39 ...rLPN.e%..$~.9 0380 54 52 fb 79 8f e9 cb 92 11 0c b6 bd f2 f4 f7 4b TR.y...........K 0390 ad ff e4 4f ab 79 a5 21 ae 47 e9 e0 ac 3a 7b 3d ...O.y.!.G...:{= 03a0 ed 68 7b d2 e8 e1 10 28 a4 75 40 25 56 25 cf 9e .h{....(.u@%V%.. 03b0 1e c6 72 70 45 3b 3c 27 50 aa 68 46 1c d7 30 a7 ..rpE;<'P.hF..0. 03c0 44 26 15 ef 1e a1 d9 86 43 57 00 88 17 ea bd 9c D&......CW...... 03d0 ad ef 3a 9a d7 44 54 8f ed cd f0 cd e9 2b 51 86 ..:..DT......+Q. 03e0 80 e6 49 e6 88 eb 2a bb df 58 cf f3 bd ed cc 82 ..I...*..X...... 03f0 0e 4c 67 b0 0d 6c 1c 65 cb e9 4c 54 20 3a b5 46 .Lg..l.e..LT :.F 0400 30 9a 2b 9e f0 14 e7 45 d7 90 6b b0 e7 bf b4 a8 0.+....E..k..... 0410 05 16 4e 6d ed b9 88 0b f3 a3 8a ab d2 8a b3 3c ..Nm...........< 0420 eb bd a1 a0 02 81 bd cf 9e 5a cd 17 45 39 a9 5d .........Z..E9.] 0430 9b b0 bd 3a 2b ba 3b 8a b8 3e 53 de 26 90 29 00 ...:+.;..>S.&.). 0440 93 da 72 bd 4b 44 6d 94 c9 58 9a 4a 92 0e 04 fe ..r.KDm..X.J.... 0450 b2 a8 be b5 72 b1 bc 63 7d 72 2e 55 8d b7 2b d1 ....r..c}r.U..+. 0460 36 71 4c a6 4b 5b 84 24 de 6e 11 0c 7b 97 c5 4e 6qL.K[.$.n..{..N 0470 60 d0 08 b8 e2 dd 56 c1 47 b6 8a 63 3c dc 1f 1c `.....V.G..c<... 0480 41 cf be c8 53 be 1f cc 61 d1 f9 23 a4 0f 17 44 A...S...a..#...D 0490 83 4f bf be fc 9a 6b d5 21 42 73 fd c1 a0 3a 54 .O....k.!Bs...:T 04a0 f5 a1 7d d2 b4 1e 7c 16 8e a0 48 c2 b5 57 04 db ..}...|...H..W.. 04b0 48 f2 00 78 49 21 cb a1 b9 3d 4a 72 ce 0b b3 e4 H..xI!...=Jr.... 04c0 f5 5c 63 46 01 66 b0 cf 08 17 f7 a9 b9 32 31 70 .\cF.f.......21p 04d0 97 12 e2 20 21 62 a5 17 f0 7b e5 03 56 33 69 90 ... !b...{..V3i. 04e0 84 94 8e 25 fb 5e f2 b7 49 f4 dc 08 45 a9 d1 7b ...%.^..I...E..{ 04f0 fe e4 71 73 39 dc 61 54 05 f3 8e 4e 77 d4 85 0c ..qs9.aT...Nw... 0500 e3 66 19 27 48 ac ee ed 76 27 41 d8 65 55 a1 de .f.'H...v'A.eU.. 0510 7d 74 b2 9b 79 21 ed 35 f4 d8 ee 9f 2a 53 31 01 }t..y!.5....*S1. 0520 e7 e2 b4 f1 e5 5a 5f ca 2e 12 07 d8 24 82 07 77 .....Z_.....$..w 0530 3c b1 f1 a5 7d cd 0e c9 a4 99 8a 9c 0d f0 e8 b1 <...}........... 0540 0d 2e 51 f5 40 e2 8f 49 39 25 68 7f a0 aa e2 ea [email protected]%h..... 0550 86 5b 74 f2 92 5a 98 e5 e9 eb 0c 39 4f 34 5b c3 .[t..Z.....9O4[. 0560 c2 46 ad f2 7f 6d c9 8c 35 57 51 17 13 6e b8 fa .F...m..5WQ..n.. 0570 e5 aa 06 b0 ff 23 97 67 40 46 ad e4 93 2c 7d be .....#.g@F...,}. 0580 ef 3d 78 ff fc 77 6f 9a 53 22 05 42 08 b0 fa 04 .=x..wo.S".B.... 0590 f7 9c 87 b9 38 75 57 3d e6 96 2c f2 dd b1 38 0b ....8uW=..,...8. 05a0 3b 1e 44 74 0d e6 75 12 ;.Dt..u. No. Time Source Destination Protocol Length Info 15947 209.641598 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=181324 Ack=2887 Win=1002 Len=1448 TSval=587658 TSecr=729405 Frame 15947: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 181324, Ack: 2887, Len: 1448 Data (1448 bytes) 0000 a3 50 58 ff 05 48 18 d7 89 4c 5b cb a8 a7 84 5e .PX..H...L[....^ 0010 85 13 87 2d 22 05 89 1e f5 79 ab cd bc 6e 8e ae ...-"....y...n.. 0020 5e 75 c7 b2 b2 cf 96 15 f1 86 46 a8 22 2a 10 c9 ^u........F."*.. 0030 3f f6 b8 7c bd 3d 3c c4 ce 92 7e 7b 8b 61 79 e5 ?..|.=<...~{.ay. 0040 62 a0 d3 9c 2c 8b 69 32 cf 82 95 1e 63 9a 99 80 b...,.i2....c... 0050 2b 9a 01 73 52 df 8c 4c cd 3f 7d af 6e 6b 99 a0 +..sR..L.?}.nk.. 0060 ad 09 b7 fb f4 b8 c5 d3 2d 47 23 d9 1c 24 96 9b ........-G#..$.. 0070 3e 31 4e bf ce 0c 09 14 f5 b2 4c fd 95 a0 cf 15 >1N.......L..... 0080 04 03 6e d1 7b 79 6d df 0f a8 77 dc b8 94 82 39 ..n.{ym...w....9 0090 e6 f9 35 5c b3 c8 22 e9 5c d1 8f ae 79 ad 3b f3 ..5\..".\...y.;. 00a0 af e8 ea 44 36 79 96 1d 6b 00 58 ae 1f 5e ef 3f ...D6y..k.X..^.? 00b0 2a b9 a7 ff 99 f3 7e f7 09 70 03 d5 08 7f e6 78 *.....~..p.....x 00c0 c1 0c b7 3e d6 77 ff 71 e0 1d e0 82 1d f8 d6 bc ...>.w.q........ 00d0 0a 90 44 fb 58 47 49 a1 6b 03 c7 1f e0 5e 49 a7 ..D.XGI.k....^I. 00e0 fb 9a 71 78 a6 b2 ce 15 7b 62 b4 31 92 fa 8f 2f ..qx....{b.1.../ 00f0 74 20 48 ba cb f9 66 63 45 12 20 14 29 20 67 6a t H...fcE. .) gj 0100 24 60 1a bc 3c 02 99 33 05 bd 24 7d 30 ef 02 ea $`..<..3..$}0... 0110 84 33 42 65 84 7e 12 1e 51 8f 88 92 15 e9 15 ae .3Be.~..Q....... 0120 e2 da 06 64 d7 92 f4 5d 50 f0 8a 8c 18 78 37 39 ...d...]P....x79 0130 89 f9 fd 31 01 b8 76 77 4e d3 32 07 29 83 06 c0 ...1..vwN.2.)... 0140 59 bd c2 b6 3a 46 7b 2b 49 d8 0d 84 09 45 86 6f Y...:F{+I....E.o 0150 32 70 c1 20 6a 4a 5d a3 58 7c 66 5d 44 82 b3 52 2p. jJ].X|f]D..R 0160 60 25 c2 3e 57 13 14 0c 0f 62 d9 7e 32 7b e5 10 `%.>W....b.~2{.. 0170 c4 5c 70 f3 71 4e 1f 7b 6b 76 15 51 2b e8 ae 11 .\p.qN.{kv.Q+... 0180 2d f0 33 2c 57 07 57 6e be cd 3a 5c 15 02 c8 44 -.3,W.Wn..:\...D 0190 ea a7 bd a2 51 15 c7 66 e4 10 11 1d ad d7 cb 8e ....Q..f........ 01a0 1c 17 32 d9 c6 82 9d cd 02 35 aa b9 64 5b 96 53 ..2......5..d[.S 01b0 8a 74 ac d6 31 83 ec 69 99 d1 3a 3f c5 ee 9f bf .t..1..i..:?.... 01c0 a9 52 02 5d 84 0b d0 2a 73 80 39 41 48 0f 43 96 .R.]...*s.9AH.C. 01d0 3f c7 5e d9 b0 69 6a ad 65 28 da 47 2d 0a 07 da ?.^..ij.e(.G-... 01e0 58 ce 72 66 78 d4 e9 db 3d 3d 37 23 7d 41 3f 3c X.rfx...==7#}A?< 01f0 fe da 8d fc 1e 6b 23 a6 49 9b 60 34 70 a1 ad 2d .....k#.I.`4p..- 0200 8b fd 0d 94 22 4b ab c0 a2 69 b6 3a 8c 55 db a1 ...."K...i.:.U.. 0210 24 d6 2e ea 36 5e 7a ee db c1 50 c5 47 15 8d 03 $...6^z...P.G... 0220 12 58 3a 86 06 ca 20 a5 4a 11 ce ba d4 63 d8 ef .X:... .J....c.. 0230 60 d4 8a cc 7e 6b 10 99 ee fa 01 46 9e a4 7d a3 `...~k.....F..}. 0240 bb 15 9e 63 89 11 7a e7 f7 bc 2f 29 26 3b 5a 26 ...c..z.../)&;Z& 0250 a9 23 d3 69 9e 5c 06 e4 df 42 81 30 5d b7 5f 00 .#.i.\...B.0]._. 0260 0b 61 e9 f9 9c bb 33 8b 72 f7 d1 80 5d bd d0 a3 .a....3.r...]... 0270 ee ec 1e 70 cd f4 fd b7 87 37 77 3d 15 aa c1 69 ...p.....7w=...i 0280 58 3b dd aa b2 50 a6 34 3e 97 de ed 63 c2 ce 89 X;...P.4>...c... 0290 0c c9 03 12 04 a4 95 8e 1c de a9 3e 31 40 bb 9f ...........>1@.. 02a0 d4 16 ee 8f 59 7b 82 c8 93 60 b2 51 b1 73 c1 6d ....Y{...`.Q.s.m 02b0 3d d6 e0 a9 b5 94 ba ae 7f ce ef 55 a4 6d 46 4c =..........U.mFL 02c0 c2 60 18 5b 62 0c 6e b7 1d 74 a5 e0 9d 18 59 cc .`.[b.n..t....Y. 02d0 c0 b3 64 87 83 05 0b 28 49 ae 65 ca be 01 f8 ab ..d....(I.e..... 02e0 b2 cc 83 6b 0c 0e 17 e0 70 a4 aa d3 d1 56 eb 79 ...k....p....V.y 02f0 33 06 03 89 37 05 46 33 21 e0 81 5c f2 97 ef 09 3...7.F3!..\.... 0300 eb 49 cf 59 0b da 1f 54 88 d1 33 0c ed 12 e2 22 .I.Y...T..3...." 0310 64 7a 34 aa a7 93 01 f7 ec 44 a7 7b 5e 0b df 45 dz4......D.{^..E 0320 21 cf f9 70 0f 4f 9f ba 7d a3 11 19 08 2b c0 6b !..p.O..}....+.k 0330 0d 29 e6 2b a0 6c 20 e3 50 32 ee df ea 09 e3 1b .).+.l .P2...... 0340 c5 d8 02 ac 11 0d b9 56 74 80 b8 1e f2 a2 9e f3 .......Vt....... 0350 4d 46 e8 59 84 72 16 66 5d de 49 b5 cb 57 29 42 MF.Y.r.f].I..W)B 0360 81 5e 6b f6 e5 1f 06 cd 32 b4 ea b8 f5 d2 11 6e .^k.....2......n 0370 5d 66 0b 4f 69 80 f7 6d 56 e5 39 d9 c1 4a 56 4f ]f.Oi..mV.9..JVO 0380 13 17 0c 1c 5d 6a f6 b5 9d 8c 29 c9 62 df b5 ad ....]j....).b... 0390 78 64 75 f7 17 43 8c 31 c3 5f 20 da f9 c3 1d 38 xdu..C.1._ ....8 03a0 b3 c6 91 a9 db 2f e3 95 9f 5b 03 f6 11 96 f9 a0 ...../...[...... 03b0 04 98 ad 35 f2 a7 69 ce 5c ad 2d ee 61 e7 6e 90 ...5..i.\.-.a.n. 03c0 ab 93 36 e6 24 e8 df 74 95 1b cd c5 a3 4d f2 61 ..6.$..t.....M.a 03d0 6c 2f f5 a6 df f6 fb 55 14 b0 e9 e2 83 5a c7 91 l/.....U.....Z.. 03e0 1e 97 92 46 e1 c8 b7 2e 0a 26 de 48 cf 5f d2 bd ...F.....&.H._.. 03f0 f5 90 ff fb ef 81 7b 9b d4 48 16 42 ab 8c b8 02 ......{..H.B.... 0400 6d ea bd 0c ab 97 fa 54 00 9c 52 80 60 3a f5 70 m......T..R.`:.p 0410 cb 11 48 f1 ec 2c c5 23 96 5e 18 d1 fe 0c 04 49 ..H..,.#.^.....I 0420 bf 63 3d e2 2b 73 be 86 cc d9 75 39 5f 67 64 f4 .c=.+s....u9_gd. 0430 9d e0 6c ed 5d 27 b4 b2 a2 1d d5 4f 8e 0a c4 18 ..l.]'.....O.... 0440 b7 ea f3 f9 94 80 e9 e5 53 e1 26 20 6d 6c bb fb ........S.& ml.. 0450 b2 fe 05 da 08 8c 93 8f cc 66 6f 62 bc 10 23 a6 .........fob..#. 0460 0e 26 fd 73 35 ae fe f9 48 bb af de da 5d 4b 82 .&.s5...H....]K. 0470 10 03 4e 57 41 a9 46 e0 30 1c dd a3 46 27 c8 83 ..NWA.F.0...F'.. 0480 27 9e 08 da f6 32 79 f9 bc 3d 7d 1a 39 7e 6b 68 '....2y..=}.9~kh 0490 ca 8f f4 9b f9 5e 87 c8 75 0d 94 a6 43 ae f1 2c .....^..u...C.., 04a0 c6 c0 cb a4 8a c5 73 b3 26 d0 dc 3c 83 ea 11 ee ......s.&..<.... 04b0 41 c0 bf c7 ad 31 52 09 15 d1 22 fe 3b 1c 8a ee A....1R...".;... 04c0 13 d8 43 da c1 d7 c5 39 98 f1 37 dc f8 cc 92 94 ..C....9..7..... 04d0 66 c7 a7 50 e9 4e 82 ad 7a a3 38 2e 2c b4 8d f8 f..P.N..z.8.,... 04e0 07 b0 58 80 5d 5d 7e 07 6f 92 e8 2c 12 1a 27 01 ..X.]]~.o..,..'. 04f0 66 9f 1b 6d d1 e9 53 08 02 2d 03 4b 4f 31 a0 61 f..m..S..-.KO1.a 0500 16 b8 6e 53 c4 64 a1 97 c4 3c b0 f9 f1 c5 31 af ..nS.d...<....1. 0510 69 24 9d d4 3a a5 cb 95 99 21 18 e1 49 d1 ad 89 i$..:....!..I... 0520 66 27 f5 d7 91 57 e3 68 e2 e8 98 05 ce 7b d8 2b f'...W.h.....{.+ 0530 0c 13 92 e4 38 eb cf cf d1 2e e3 5d 6e bb 33 08 ....8......]n.3. 0540 1a 32 b0 ea 0b 8e 74 c0 b8 bf 92 14 5e 8b f5 19 .2....t.....^... 0550 0e d8 c7 1c a0 27 fb 4d 05 c1 10 47 c1 2e 15 09 .....'.M...G.... 0560 28 a1 81 72 71 2b f4 2e d0 81 61 6e e0 bc 36 ee (..rq+....an..6. 0570 d0 8c 43 6d 62 10 d1 2a be ac ed 2c c9 34 91 42 ..Cmb..*...,.4.B 0580 54 29 57 81 1a da 8b 02 b3 b7 8b d4 34 3e 89 07 T)W.........4>.. 0590 9b cc 01 99 4d 1a 3f 3c db 8e d4 ee 9e 25 e7 c1 ....M.?<.....%.. 05a0 7b fa 37 e9 0e 33 25 14 {.7..3%. No. Time Source Destination Protocol Length Info 15948 209.641705 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=182772 Ack=2887 Win=1002 Len=1448 TSval=587658 TSecr=729405 Frame 15948: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 182772, Ack: 2887, Len: 1448 Data (1448 bytes) 0000 86 f1 b5 4d 5e dd f4 e5 21 ab 11 d4 ec c1 69 bb ...M^...!.....i. 0010 70 53 a3 15 a0 12 03 9f 17 bc 80 a0 a8 cb 52 73 pS............Rs 0020 ed 0e 15 37 fb 9c 02 af 3b ef 4f ae 6e a0 74 8d ...7....;.O.n.t. 0030 89 91 32 08 d5 c5 a1 69 e5 d9 c4 8e 77 9c 0f 65 ..2....i....w..e 0040 b7 4c b1 f4 38 87 b7 cb aa d9 60 bf fc 03 03 d2 .L..8.....`..... 0050 74 a8 a3 c6 91 b2 cb 91 fa 6b 9a f5 d3 dc fd ac t........k...... 0060 6e 1e 25 8b 40 0b 6a 61 28 6d 2e e2 6e 56 fe 3e n.%[email protected](m..nV.> 0070 3d c2 6f 29 23 ce 27 fe 81 27 a2 57 10 fb ad 25 =.o)#.'..'.W...% 0080 46 35 c0 6b 21 8f d3 d9 ac f7 66 bb 41 51 a0 ee F5.k!.....f.AQ.. 0090 43 4e a5 61 c6 dd e5 4e 06 59 ce b3 f6 1f 42 f5 CN.a...N.Y....B. 00a0 06 d5 a5 93 54 81 45 e2 9a 11 8b 37 f2 ff 4e 18 ....T.E....7..N. 00b0 e6 b9 24 7e 30 ed 30 0c 3b 8f 9a 73 39 39 e8 4d ..$~0.0.;..s99.M 00c0 b4 e2 57 56 14 1a 31 e5 29 55 07 95 d7 d9 28 cc ..WV..1.)U....(. 00d0 48 cd c2 43 ee 97 2c 52 d3 79 91 7d 9c 95 03 3f H..C..,R.y.}...? 00e0 84 d6 53 3c bf 2a 29 d0 59 38 c3 21 39 e8 70 21 ..S<.*).Y8.!9.p! 00f0 bb e3 c9 76 ac cb 01 68 7f 0a 8a 51 fa 1a b3 f2 ...v...h...Q.... 0100 30 a1 59 fb fd e5 66 c4 a7 79 47 54 73 51 a6 c5 0.Y...f..yGTsQ.. 0110 f9 51 2b 61 39 aa ec e4 36 b3 bf e7 74 65 bf eb .Q+a9...6...te.. 0120 4e a7 6f cf ce 9a 89 c5 ad 4f dd c5 b1 0e 3b e9 N.o......O....;. 0130 c4 41 8e 5b ec 12 43 4d c7 65 f7 7f 32 98 2e 2d .A.[..CM.e..2..- 0140 76 b1 28 02 00 9d fa 6b e1 2a 81 d4 97 6f 52 af v.(....k.*...oR. 0150 3f da ad a5 a7 80 69 97 c2 2b bd d8 6e ac 0a 2b ?.....i..+..n..+ 0160 5d 54 65 56 fe b8 7f da c7 9c e8 58 78 61 54 46 ]TeV.......XxaTF 0170 5b 06 79 c2 4a 1a 7e 00 31 b9 f3 9e e0 78 fd 47 [.y.J.~.1....x.G 0180 21 75 99 ce 48 9a 5f 54 2a 95 44 e5 f9 48 7f 98 !u..H._T*.D..H.. 0190 ad 29 50 3a c2 06 16 de 1a 68 b7 b4 ec 09 ab b4 .)P:.....h...... 01a0 d8 26 1f 4b 2f 23 eb 44 c8 ee 85 88 ae e0 6d e1 .&.K/#.D......m. 01b0 36 b9 ee 80 43 86 50 97 6f ba 18 49 c0 86 46 62 6...C.P.o..I..Fb 01c0 0c b4 2b 9e 0b 62 9a aa 99 83 6e a3 df f8 c0 b6 ..+..b....n..... 01d0 fe 63 ae 8e 2d 59 da 7f 8d b3 18 be e1 d4 1d b1 .c..-Y.......... 01e0 ee 56 df 6f 62 8e 25 15 30 f4 93 b8 05 77 29 8e .V.ob.%.0....w). 01f0 47 07 34 ca bd f1 53 19 a5 11 32 8d 83 14 bb e2 G.4...S...2..... 0200 49 0e 41 29 69 e6 f9 c5 ce 12 4b 4a 26 71 e1 ff I.A)i.....KJ&q.. 0210 c9 cc f7 55 a5 e6 e1 7d 81 a5 55 99 59 ae 31 72 ...U...}..U.Y.1r 0220 48 83 0e f2 78 29 ad da 29 54 3b cd 59 b6 f9 33 H...x)..)T;.Y..3 0230 31 f0 c3 0c 42 1c 76 a5 ab 4f 2a 68 aa 79 f3 01 1...B.v..O*h.y.. 0240 fb d4 6c 07 03 9d c4 16 12 13 94 59 d7 f8 e2 84 ..l........Y.... 0250 9d 7c fc 08 d8 6a 3d 7d 15 7f df a1 2f 52 81 5a .|...j=}..../R.Z 0260 77 4c 98 bc 09 d2 de 35 c9 f0 ec 44 5f d0 12 7f wL.....5...D_... 0270 9f fb f7 b7 d0 3c 69 18 20 13 d1 d7 0c b5 39 12 .....<i. .....9. 0280 49 3b 23 6d 43 8f 55 76 75 4c d2 f6 46 87 ab 87 I;#mC.UvuL..F... 0290 f1 03 74 4a f9 5e 72 4d b7 7e 32 a9 c7 af 89 d8 ..tJ.^rM.~2..... 02a0 e9 46 5e 72 f8 12 04 5f b5 97 c7 4c 1d 87 db 67 .F^r..._...L...g 02b0 28 67 8b cc b8 ec 60 41 be 05 4f 5f 3e 3e bb da (g....`A..O_>>.. 02c0 16 f5 05 8a 55 57 78 77 ca 0b f0 dc 54 8e 3e 74 ....UWxw....T.>t 02d0 0d 35 45 47 0c 9e ad 92 b3 c2 31 62 ef fb 66 55 .5EG......1b..fU 02e0 ed f6 93 6b 58 3d fc f3 af 1e 3d 8a 45 b6 a5 a9 ...kX=....=.E... 02f0 35 0e c9 1b 74 98 ba 48 1a 67 3e 47 36 77 1d f9 5...t..H.g>G6w.. 0300 b3 5d 30 26 fc d3 1d 57 85 65 d6 4c 11 ea 23 4f .]0&...W.e.L..#O 0310 b3 d4 13 c2 83 d5 82 4e 06 fe 22 74 6b 4d 5c b3 .......N.."tkM\. 0320 c5 b0 8c 9b 0f 37 6b 47 49 3e c5 25 78 68 c6 f9 .....7kGI>.%xh.. 0330 8d eb d9 4c ac ab 76 1e f4 b0 e2 3f b1 e4 b6 e1 ...L..v....?.... 0340 b4 4a f8 68 df 4a a7 e5 ea 40 63 17 9b 74 21 9d [email protected]!. 0350 6c 56 05 97 80 41 fe 80 4e 2d b3 c2 8f 6b 5e de lV...A..N-...k^. 0360 99 df 32 e9 85 4a 09 69 d1 ca b5 5d 8e 3e 1c 80 ..2..J.i...].>.. 0370 2c f2 37 e2 7b 11 db 38 ee 65 29 e3 88 55 f8 b7 ,.7.{..8.e)..U.. 0380 ab 25 f1 1c 47 af af c9 82 09 b9 53 9a 5a bb 64 .%..G......S.Z.d 0390 e5 e2 a7 69 3f 89 9f d2 43 4b 3d b1 0e a4 4b 07 ...i?...CK=...K. 03a0 43 56 51 7b 99 a8 86 d9 4d f7 e6 af c7 d9 6f 7b CVQ{....M.....o{ 03b0 f0 74 0e ce 5e d1 b3 9e b7 13 38 12 ec 42 fb 81 .t..^.....8..B.. 03c0 99 d1 4f d4 21 b4 68 f8 01 36 87 f4 85 1c 95 23 ..O.!.h..6.....# 03d0 c1 e9 14 03 57 83 f9 f6 d2 e3 5d 0a 4c 20 35 1f ....W.....].L 5. 03e0 8d 50 48 4b 93 34 69 2f be 6e 03 23 0f e6 45 6c .PHK.4i/.n.#..El 03f0 fe 35 fa ca d3 80 fb e7 62 b2 ff 03 ec 8c 22 0f .5......b.....". 0400 16 07 7f 37 f2 c8 db bb f5 45 8b 04 66 95 e6 97 ...7.....E..f... 0410 22 ae f9 ac ec 70 b3 bf 83 20 ba cb f4 85 d9 1d "....p... ...... 0420 7c 0a 72 d8 ff be 7e 56 b6 66 e3 7c 70 77 57 f9 |.r...~V.f.|pwW. 0430 3d a8 db f4 2f 58 58 b8 86 9b cf a6 8f 44 10 c2 =.../XX......D.. 0440 d0 ec 28 6f b2 4f 80 9e e0 c7 6a bf ce 47 e8 a8 ..(o.O....j..G.. 0450 a1 9e 22 30 63 fe c4 a1 13 ff 4d b8 da ca 67 ed .."0c.....M...g. 0460 7c dd c7 5b ee 9f 8f 11 05 71 2a c1 c9 21 94 24 |..[.....q*..!.$ 0470 8c 82 d9 e7 d9 e0 f3 05 33 d4 50 1b ea ff 51 cf ........3.P...Q. 0480 3e 0a 4d 39 fe 49 20 9c 1e ab 74 25 95 25 72 83 >.M9.I ...t%.%r. 0490 d4 1c 17 e9 4c 8d 0f 3c 63 6f 0d c5 f7 76 a0 c5 ....L..<co...v.. 04a0 fa bc 08 d8 82 b9 cd 52 55 35 d1 3b 6c 61 a3 35 .......RU5.;la.5 04b0 f5 1d 59 f2 97 9a 23 29 43 07 22 bb e9 8d 70 59 ..Y...#)C."...pY 04c0 e5 eb ed 1d 8b fc 5c bf ea 7a 1e 8e da 76 2b a1 ......\..z...v+. 04d0 82 c6 de fe 55 c6 0c 2a 32 75 87 42 c2 0a c4 29 ....U..*2u.B...) 04e0 e3 e6 81 c6 f1 d3 43 19 fb 8f e3 ec c9 dd 54 c7 ......C.......T. 04f0 39 d0 33 8a 7a 74 3e db b4 62 b5 08 06 b0 06 2a 9.3.zt>..b.....* 0500 55 be 8a 58 54 29 27 8b 6d fb 01 02 70 68 3f 96 U..XT)'.m...ph?. 0510 b8 cc 36 7b 82 d9 9d 87 e5 79 b9 a4 93 1d b7 90 ..6{.....y...... 0520 16 c8 54 91 81 ca 63 34 86 3b f0 26 27 e4 8e 41 ..T...c4.;.&'..A 0530 bf 96 60 bc fb 6e 9c 20 74 1f bf 7b ba 8c f7 fd ..`..n. t..{.... 0540 a0 7f 1e 63 98 a0 53 89 24 00 51 34 a9 41 95 15 ...c..S.$.Q4.A.. 0550 35 89 f6 ce 63 cc 90 1f c6 f8 a9 be ba 88 8d e8 5...c........... 0560 2a 3e 3f 3a 67 87 57 24 a1 9a 63 ad ba 2e 9e 72 *>?:g.W$..c....r 0570 8a 80 6b 9e 28 9f 5e 4b 75 c7 88 79 a2 f7 d3 20 ..k.(.^Ku..y... 0580 21 2d f8 2d 71 d8 a0 94 b5 7b c1 3b 5b 7a 46 5e !-.-q....{.;[zF^ 0590 20 b0 6b cd 96 a0 95 af 07 8f 78 bb 3f 4b 48 70 .k.......x.?KHp 05a0 35 17 18 67 56 bd 2b 34 5..gV.+4 No. Time Source Destination Protocol Length Info 15949 209.641840 192.168.10.1 192.168.10.245 Syslog 331 LOCAL1.INFO: Oct 3 19:47:47 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.207 64.239.246.16 4601 80 msg="HTTP Request" proxy_act="HTTP-Client.EndUser" op="POST" dstname="update.gfi.com" arg="/license/gfi.key" sent_bytes="467" rcvd_bytes="266" (HTTP-proxy.endusers-00) Frame 15949: 331 bytes on wire (2648 bits), 331 bytes captured (2648 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:47:47 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.207 64.239.246.16 4601 80 msg="HTTP Request" proxy_act="HTTP-Client.EndUser" op="POST" dstname="update.gfi.c No. Time Source Destination Protocol Length Info 15950 209.641904 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2887 Ack=184220 Win=65535 Len=0 TSval=729579 TSecr=587658 Frame 15950: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2887, Ack: 184220, Len: 0 No. Time Source Destination Protocol Length Info 15951 209.642187 192.168.10.207 64.239.246.16 HTTP 255 GET /ap/rev375215 HTTP/1.1 Frame 15951: 255 bytes on wire (2040 bits), 255 bytes captured (2040 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: piranha2 (4601), Dst Port: http (80), Seq: 1506, Ack: 27822, Len: 201 Hypertext Transfer Protocol No. Time Source Destination Protocol Length Info 15952 209.642274 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=184220 Ack=2887 Win=1002 Len=1448 TSval=587658 TSecr=729579 Frame 15952: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 184220, Ack: 2887, Len: 1448 Data (1448 bytes) 0000 2f 8b 9f b8 ab 7c 0c 22 11 e3 8d 02 99 8f 76 b0 /....|."......v. 0010 72 98 e8 a3 fc 64 c2 ba 62 59 bd c9 36 de 21 6c r....d..bY..6.!l 0020 80 59 d8 6e 5b 09 03 18 cf 7c 25 a5 30 41 46 0a .Y.n[....|%.0AF. 0030 0a 0f aa 6b ec 7a 8f 46 83 0e c9 50 22 75 65 d9 ...k.z.F...P"ue. 0040 9e cb 89 b1 d9 fe 49 f0 cd 4a 1e 84 5e b0 7d 0a ......I..J..^.}. 0050 7a ac 08 e8 be e7 a3 96 4a 80 19 f8 cd 21 28 2e z.......J....!(. 0060 4a d9 2d cf 74 b8 a4 25 3f 68 99 b1 d9 f9 68 9b J.-.t..%?h....h. 0070 c8 5b d3 24 97 5d d5 fb d4 f0 af 03 63 25 88 5f .[.$.]......c%._ 0080 88 14 b6 be ea 94 bc 46 af 2b 46 c3 03 2a dd 04 .......F.+F..*.. 0090 56 58 f1 20 2a 55 17 12 28 49 cd e2 1f 80 6f 51 VX. *U..(I....oQ 00a0 62 35 82 cc 18 6c b2 87 98 cf 1c 79 92 ba cf 0a b5...l.....y.... 00b0 d3 9c 68 d5 71 46 42 92 58 43 c9 39 d1 7b 89 09 ..h.qFB.XC.9.{.. 00c0 72 34 6b 46 2b c0 7f fa 22 79 9f 13 91 85 33 73 r4kF+..."y....3s 00d0 79 9d 6b 75 96 2f b8 cc bb c2 d4 4f 35 80 9c 89 y.ku./.....O5... 00e0 b0 78 29 f0 70 dd 2e 71 c0 ab a2 3d d9 ab dd 6d .x).p..q...=...m 00f0 54 bd 3b 71 f6 4f 4b 4f ac 53 e5 b0 d8 03 28 31 T.;q.OKO.S....(1 0100 63 b4 1f 20 15 55 90 ba d3 d4 16 ba df 2f 61 75 c.. .U......./au 0110 78 3f 48 b6 94 6f d8 da 1a 5b 1d 80 3e 7c 24 f9 x?H..o...[..>|$. 0120 06 db 51 2b 47 b0 c3 03 a5 94 52 07 76 cd 02 37 ..Q+G.....R.v..7 0130 33 0d c9 f9 fd 2a 41 83 d3 b9 e6 a1 96 15 a7 13 3....*A......... 0140 f6 19 cd 4a c9 b9 ea 45 a8 2c 97 96 bf 7c 1f c1 ...J...E.,...|.. 0150 4a b9 a4 67 90 c9 c2 e3 0b e5 96 56 22 d7 9f 8f J..g.......V"... 0160 08 9c 71 4d fd 1b fe 32 ac a5 0e 59 97 e3 1c fb ..qM...2...Y.... 0170 9f 16 8a 87 f8 c4 6f 4a 96 2b 2a 6c 60 0a 6b 47 ......oJ.+*l`.kG 0180 9e 77 d1 e2 56 40 b6 c5 bc 2c 23 69 1b 99 be 42 .w..V@...,#i...B 0190 27 c2 28 2c a2 f9 2b bd b7 0b 20 69 98 e2 bc d3 '.(,..+... i.... 01a0 14 e1 61 c7 dc 86 67 a5 98 01 eb 75 0a 4a 50 19 ..a...g....u.JP. 01b0 74 3a 38 e4 e4 3b 54 02 65 51 2a 2c 20 14 c0 a7 t:8..;T.eQ*, ... 01c0 4b fe b3 dc b2 6a d4 1c 55 b5 77 96 a5 39 2c 86 K....j..U.w..9,. 01d0 52 79 91 0d ce 53 d6 67 fd 85 b0 9c 8a 32 86 10 Ry...S.g.....2.. 01e0 6c 4d 6b a8 3f b9 c1 07 9b ee a2 eb 11 52 98 41 lMk.?........R.A 01f0 ee 57 17 d8 19 62 17 8d 8a 09 43 df f3 5c 54 dc .W...b....C..\T. 0200 b0 63 fb 9b 4e 09 42 28 38 27 df 51 0d da 9c 53 .c..N.B(8'.Q...S 0210 8a f4 a7 f8 ad ff f9 68 a4 cc db 28 c5 9b 44 f9 .......h...(..D. 0220 34 fe 1c f6 94 00 ea 67 5b b9 4a bb c8 94 34 03 4......g[.J...4. 0230 e7 d9 7b 54 ed 04 4b c7 0b 60 e3 5e 32 80 7c 6d ..{T..K..`.^2.|m 0240 49 65 51 39 c8 f7 63 8d 4f af f0 7d f8 c4 77 e6 IeQ9..c.O..}..w. 0250 7f 0c 39 1a 34 b9 29 24 a6 10 4e f8 50 f0 ae e0 ..9.4.)$..N.P... 0260 fb 13 94 76 95 12 0c 9c e6 8e f9 be 77 10 8f 93 ...v........w... 0270 2a 35 76 5c 33 23 9d c6 56 ab 44 a2 0b 5a 1a c2 *5v\3#..V.D..Z.. 0280 0e 0a 2b 88 61 68 58 5d 87 57 2b c1 68 ab 35 e1 ..+.ahX].W+.h.5. 0290 5b dd d7 09 7e 9c f7 bc c7 bc 89 74 ad a5 ac 9e [...~......t.... 02a0 e2 19 af d6 29 a8 a5 14 16 78 c2 87 84 52 00 35 ....)....x...R.5 02b0 32 1d db 63 fe b0 66 88 b2 9c b5 f4 0d b9 e0 dd 2..c..f......... 02c0 9d 83 8a e9 b0 3c 5f 1d 61 5c eb 03 0f 19 b9 98 .....<_.a\...... 02d0 b2 fd 86 70 75 47 a4 66 98 ed 12 91 ec 73 7a f9 ...puG.f.....sz. 02e0 df a3 56 a7 93 22 bf e4 15 38 54 e6 e4 27 c1 a9 ..V.."...8T..'.. 02f0 6e f9 08 57 ac 5e 31 53 e6 46 e6 71 b0 20 b6 d8 n..W.^1S.F.q. .. 0300 67 55 68 d7 dc 13 03 04 1b 1b 21 c9 3c 51 f5 9e gUh.......!.<Q.. 0310 61 75 5c 80 ed fd 5b 59 46 8d e6 c1 9c 71 fc 55 au\...[YF....q.U 0320 f0 40 e9 30 c1 e6 25 93 ce 05 15 b3 af a1 87 c5 [email protected]..%......... 0330 a0 4d 44 7c 0a cd d9 c0 1b 17 06 e6 4c 2f 20 03 .MD|........L/ . 0340 31 00 cf 85 c7 59 9e a8 a4 e9 df 9b b0 4d 62 66 1....Y.......Mbf 0350 78 10 c0 fb 70 da 8a 31 e3 ef 53 e9 cd ff 69 27 x...p..1..S...i' 0360 4e e9 52 44 fa e2 67 44 f0 bb 31 14 24 92 75 96 N.RD..gD..1.$.u. 0370 b7 3c 7e eb 95 94 e5 eb db 95 02 81 61 fb b5 46 .<~.........a..F 0380 5f 9f 28 12 d7 a0 b8 e7 d2 dd 84 6c 00 43 f8 70 _.(........l.C.p 0390 dd b8 91 2e 9b 53 94 58 17 cb 2e 27 ca 45 ff 0c .....S.X...'.E.. 03a0 a3 c6 53 e6 1d 6b cc b5 9c 98 24 22 41 19 b9 f9 ..S..k....$"A... 03b0 63 d3 49 f8 02 b8 ac b9 9c ce aa b1 7f 74 63 67 c.I..........tcg 03c0 75 4f 6a f9 37 54 86 16 35 83 e0 f3 80 72 89 45 uOj.7T..5....r.E 03d0 cb 0f 01 57 71 92 79 ea a1 3a 17 51 9b a3 8f ea ...Wq.y..:.Q.... 03e0 5f 81 89 63 2b 0d 56 81 3c b9 49 b6 82 34 7b 70 _..c+.V.<.I..4{p 03f0 d0 35 3d 27 ee b7 27 e1 82 58 b5 56 f8 76 9a 7d .5='..'..X.V.v.} 0400 77 85 c9 7f a4 0a 52 47 28 a7 55 28 c3 08 45 cd w.....RG(.U(..E. 0410 70 99 7e 03 e9 82 ef 79 fc 5d 79 08 0a 26 fb 9a p.~....y.]y..&.. 0420 01 51 e0 93 76 ac 9c f0 15 49 ab 65 7d a8 ac c9 .Q..v....I.e}... 0430 fd 08 c0 a1 23 bf 30 05 45 3f 36 d0 cf 80 f4 ca ....#.0.E?6..... 0440 a3 1f 9a 96 3d fa 4d 35 d7 98 e5 f2 a9 c6 25 43 ....=.M5......%C 0450 3f 93 e5 43 70 3d 61 02 e4 1e f7 b1 49 8f b6 59 ?..Cp=a.....I..Y 0460 2e 7c 50 60 df 7e d0 df 73 86 78 9a 16 08 be f5 .|P`.~..s.x..... 0470 56 82 e2 a5 1d 45 29 8f c0 bb 33 70 01 bc c8 49 V....E)...3p...I 0480 ab 87 32 d8 0b 71 6d 7c f6 11 06 e6 9c 48 88 c4 ..2..qm|.....H.. 0490 67 36 20 1d 6f 7b e2 fe 77 9c 06 c1 bf eb ac 7f g6 .o{..w....... 04a0 56 89 dd 59 08 ca 85 7d 99 0b a5 46 d8 46 ac ab V..Y...}...F.F.. 04b0 49 04 49 00 5f d6 5e 16 06 53 97 b6 9e 6b 1a 0c I.I._.^..S...k.. 04c0 f9 ce b9 6c 1e 8f b2 71 49 f0 38 c8 e9 19 5e 57 ...l...qI.8...^W 04d0 c0 32 e1 43 f7 ce b1 fd be 4f 3e c7 b7 1a 3f 03 .2.C.....O>...?. 04e0 e8 b1 bd 2c 3b dc bb a3 ad ac a3 6a e3 09 ef 3f ...,;......j...? 04f0 b6 8e e8 27 8a b0 0c f9 6a 7f a5 e8 03 84 d1 e0 ...'....j....... 0500 68 d7 ed eb 29 16 6e e4 80 64 7b 77 a5 8a 0f 3e h...).n..d{w...> 0510 2d 29 fb 96 d5 0e f5 0b 49 97 ce df 37 84 8c 8c -)......I...7... 0520 a6 d5 62 7e 92 b6 fc d7 a7 ff e6 b5 de 27 22 a4 ..b~.........'". 0530 20 17 ab f9 88 a9 de 73 5d c2 08 37 0e 5c 4f fe ......s]..7.\O. 0540 5b 0c 9c 6e 03 e1 cf d7 f4 bb 80 0a eb 0e f9 ce [..n............ 0550 5b d9 b7 c4 67 9b 76 42 3a 0a 95 d3 f6 fe a7 5a [...g.vB:......Z 0560 28 47 90 74 d8 ba de 7e 10 9a 69 6b f6 11 06 dc (G.t...~..ik.... 0570 d1 d5 ce bc 94 51 3a 65 63 0f 9d cb c3 83 43 53 .....Q:ec.....CS 0580 ad e3 f1 1c 70 47 45 f3 e6 05 c0 ba 7b fd 05 2e ....pGE.....{... 0590 50 4c c9 71 1e c6 8a 88 e7 2e f3 83 d6 a6 f2 bd PL.q............ 05a0 4b 5d 19 17 09 63 e1 d1 K]...c.. No. Time Source Destination Protocol Length Info 15953 209.642355 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=185668 Ack=2887 Win=1002 Len=1448 TSval=587658 TSecr=729579 Frame 15953: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 185668, Ack: 2887, Len: 1448 Data (1448 bytes) 0000 b1 ef 83 ad 83 40 86 ea e7 46 62 0d e4 2e 95 5e [email protected]....^ 0010 2d 98 82 8e 63 6f 30 9b e5 b6 d6 9b 96 16 5e 78 -...co0.......^x 0020 ac 18 40 21 97 83 f1 af 84 be d3 6b d1 b0 4b 15 ..@!.......k..K. 0030 9c f3 21 24 12 15 21 7e 97 53 7c 6b 5b dd 67 00 ..!$..!~.S|k[.g. 0040 5f 4c a8 4a 80 f4 9b 55 96 74 5b e1 e8 9b 65 66 _L.J...U.t[...ef 0050 10 44 d8 5a 90 40 f6 56 9b f8 00 98 a6 75 31 f2 [email protected]. 0060 c3 7e 0f ea e2 2e df 4b 09 c6 a2 a8 36 db ad 7f .~.....K....6... 0070 b4 87 a9 39 19 58 61 c2 d3 2b 70 f8 7e 11 13 0c ...9.Xa..+p.~... 0080 54 f4 95 7a 95 36 b8 fa a4 ce e2 49 f2 7e 76 20 T..z.6.....I.~v 0090 a5 a5 85 7a 74 93 67 58 63 a3 46 5e 66 ea c1 9c ...zt.gXc.F^f... 00a0 d1 30 33 7f 1d 3b b2 00 83 97 a7 5f 3b a4 00 12 .03..;....._;... 00b0 92 4d 05 dc c2 6f 7a 3d 5f 6e 68 f0 67 6d 10 28 .M...oz=_nh.gm.( 00c0 47 5b 10 92 ee 4f 3d 42 1f b6 68 cb 55 31 27 2f G[...O=B..h.U1'/ 00d0 53 9c 79 ed a7 49 fb f0 52 d8 af ed 08 f5 e2 73 S.y..I..R......s 00e0 73 f6 b6 fa e0 af 83 2d d7 c6 71 a0 d4 c6 98 a3 s......-..q..... 00f0 9d 4f 08 b4 b3 3c 7d a9 0a 0e 4c 77 0a 75 48 d3 .O...<}...Lw.uH. 0100 20 0a ec d8 84 de f7 d7 30 04 9f 54 d0 5c 78 e9 .......0..T.\x. 0110 9d 95 8c a3 73 75 85 c4 36 c9 88 ed 87 c5 b1 b8 ....su..6....... 0120 e9 3d 2c 90 3c fc 4b 60 b2 39 01 71 b2 13 0a b4 .=,.<.K`.9.q.... 0130 ae c0 b0 10 80 38 8a be de 9d 42 c2 3d 9b d8 2f .....8....B.=../ 0140 f9 b9 47 4f 9b 70 82 43 b6 90 50 f2 1b 45 3a 5c ..GO.p.C..P..E:\ 0150 dc f7 70 0f 33 88 59 f5 cb 36 4a a2 40 47 f0 5c ..p.3.Y..6J.@G.\ 0160 76 7c ca a0 46 77 da be 69 82 09 55 db 09 d9 d7 v|..Fw..i..U.... 0170 75 39 a9 ae 5c b8 b3 33 42 5e 47 6d ee 08 12 cb u9..\..3B^Gm.... 0180 db 58 ab c2 86 42 fd d9 a5 c3 dc ca 5a 0d df 18 .X...B......Z... 0190 c6 e3 9d a4 b8 34 bc 61 8a ce a6 9d b5 f0 78 fe .....4.a......x. 01a0 88 a4 e1 aa 8f fd 6b 45 4b 4a 52 bb 74 2f 36 e5 ......kEKJR.t/6. 01b0 60 26 31 a4 46 7b 99 a3 f3 42 77 02 1f 4a 7d 8b `&1.F{...Bw..J}. 01c0 4d 95 9b 5d e9 ce 4a bc 17 12 e3 cd 2c d0 0c c8 M..]..J.....,... 01d0 a9 31 16 e3 70 10 59 8f 6f e1 68 af a6 6d 90 a9 .1..p.Y.o.h..m.. 01e0 32 77 b1 ce dc 6f 43 6b 26 f0 ed a3 8f f4 a1 cb 2w...oCk&....... 01f0 23 79 56 2c 26 55 a9 88 0e 18 f8 35 d2 64 21 39 #yV,&U.....5.d!9 0200 52 95 24 94 a2 e4 fb f3 5e 1f d4 74 17 03 8f ae R.$.....^..t.... 0210 c4 08 67 af bb 94 6c a2 fc 37 5c 6e dc 6b 5c ac ..g...l..7\n.k\. 0220 b1 3a e4 11 cb 28 fc aa dd b4 e9 8b 44 0d 4e b9 .:...(......D.N. 0230 78 47 c6 fb 37 1a cb ae 4f 81 cd 77 dc 94 95 c2 xG..7...O..w.... 0240 97 d8 4f bb ea 08 39 0f f0 93 4a 65 e2 03 1d 9b ..O...9...Je.... 0250 01 8e 4c 40 87 57 51 16 d2 0b 84 0a ce 1d 03 37 [email protected] 0260 f5 63 10 fa 51 35 2b e3 60 3b 93 3d 2a fe c0 bf .c..Q5+.`;.=*... 0270 95 04 49 83 1d b3 56 84 24 c8 43 62 6f 3d cf 9d ..I...V.$.Cbo=.. 0280 78 7c 86 a4 2d c3 f5 54 07 93 7a 7b 62 79 4a f9 x|..-..T..z{byJ. 0290 b2 a3 31 92 bc 32 38 e7 77 4f 57 b1 f5 f1 fa 29 ..1..28.wOW....) 02a0 95 d1 a0 f1 79 4f 04 ee 09 c4 f6 e4 f2 e8 e3 6c ....yO.........l 02b0 59 bf 5d 9c e3 03 d4 9c 66 ed d9 40 c0 7d 40 6d Y.].....f..@.}@m 02c0 02 34 87 b8 53 a1 94 ed 74 47 c2 63 65 39 86 6c .4..S...tG.ce9.l 02d0 fa 47 38 65 ca a3 ab 9a 08 50 db 70 8c 8b 9a 34 .G8e.....P.p...4 02e0 a5 cc ef a9 96 16 3e c2 49 c4 67 10 7d 74 61 be ......>.I.g.}ta. 02f0 dc c3 f0 4a 32 2e 07 12 11 de 06 43 d3 6a 97 1e ...J2......C.j.. 0300 7b 74 d4 95 f3 1c 94 1a 34 57 04 77 e0 61 51 51 {t......4W.w.aQQ 0310 7b c1 3f 1f 49 cf 57 8f f7 69 d8 b2 da 4a d8 55 {.?.I.W..i...J.U 0320 ed 80 51 5e 73 a9 2f 25 e6 b7 60 86 f6 77 43 ac ..Q^s./%..`..wC. 0330 22 18 fa cb df 79 0a 90 50 e5 de 35 38 d9 da ce "....y..P..58... 0340 4a e5 37 c3 f8 76 ab d3 f6 84 34 af b3 8f 02 b1 J.7..v....4..... 0350 01 f5 7e 37 41 14 b6 69 eb 1b 20 87 ea a2 85 b1 ..~7A..i.. ..... 0360 c5 b3 85 35 41 dd c4 f5 01 3d 2b 77 a9 3a 23 62 ...5A....=+w.:#b 0370 85 2a 9d 9c c5 98 03 c4 cf 76 96 3f 85 ca 5c 33 .*.......v.?..\3 0380 fc 9c 0a ca 10 12 da 7e 2f 86 32 40 2b ed 6d 96 .......~/.2@+.m. 0390 9f d7 34 35 68 0c 74 ac 23 54 80 3d bc 7a 2a d6 ..45h.t.#T.=.z*. 03a0 8e 2a 6c 5f ef 69 78 01 49 4a 27 7d 65 73 2d ae .*l_.ix.IJ'}es-. 03b0 2d 71 0d 65 0b 20 ce c9 1e 46 29 56 a5 da a6 fa -q.e. ...F)V.... 03c0 f8 3e 60 e9 3e 15 cc d3 fb e6 90 0f 82 9a 07 83 .>`.>........... 03d0 6a 00 c9 57 d0 29 ba 8b f3 d7 6c b3 1b d4 4c eb j..W.)....l...L. 03e0 9a 98 2b e1 5d 08 bd 76 65 16 77 df 76 72 50 9b ..+.]..ve.w.vrP. 03f0 22 db ce bb c8 40 c5 88 6c 1a 28 c1 b3 98 20 5c "[email protected].(... \ 0400 a1 40 2a ee 08 d9 64 79 64 25 9b 0a 3b b1 1d 75 .@*...dyd%..;..u 0410 81 68 11 33 fc 06 37 95 bf 89 e3 13 53 b7 aa 61 .h.3..7.....S..a 0420 38 df d1 10 34 ff 44 d9 ee 45 62 1b fe 60 de a8 8...4.D..Eb..`.. 0430 40 7f 8d 00 be d0 d9 6a 2a 0b 2d bc 16 b5 58 2e @......j*.-...X. 0440 ec f6 ca af 93 01 04 dc cc 80 4d ca a5 10 5b 4a ..........M...[J 0450 47 64 f8 63 12 db e9 20 42 e2 51 11 9c 38 96 f2 Gd.c... B.Q..8.. 0460 ce cc 5b b7 ff 7d 4e 6b 2f 60 b9 04 d7 44 7e 2c ..[..}Nk/`...D~, 0470 3a 72 5a 97 bf 72 19 9f 73 5f 68 b8 c2 41 04 e2 :rZ..r..s_h..A.. 0480 a2 be 61 ad 3e cf e9 11 50 da 5f e6 11 8a 93 91 ..a.>...P._..... 0490 f9 2d f3 f9 00 dd 5f 97 b9 b4 15 ae e2 10 84 d8 .-...._......... 04a0 9e bb d3 56 5e ab 52 59 59 39 a8 00 ae 89 36 a0 ...V^.RYY9....6. 04b0 16 9e cc d6 d5 2a c7 37 e9 6f 37 c7 57 fd c8 50 .....*.7.o7.W..P 04c0 7a 16 97 1e 5a 38 07 e5 94 9e e1 0d 75 ac e5 9e z...Z8......u... 04d0 d9 b7 64 08 05 1e b8 25 7e 1e 2e 66 10 53 e8 92 ..d....%~..f.S.. 04e0 6c 60 39 b7 90 57 02 f4 84 ee 1c 56 e7 cb e0 3c l`9..W.....V...< 04f0 4f 49 11 69 14 4c 05 30 b5 0c 89 13 93 43 32 94 OI.i.L.0.....C2. 0500 1f d7 1c 9a 5d e8 6e 11 60 40 63 b1 75 13 54 0c ....].n.`@c.u.T. 0510 2c 3f ea fd b5 50 f8 90 90 c4 83 55 fc fa 16 46 ,?...P.....U...F 0520 9c d4 ce 21 8b a7 07 5f 07 1e 0a 93 bf ea b1 9f ...!..._........ 0530 40 08 fa c2 a3 88 16 b3 7b c0 f7 c1 4a bd e0 60 @.......{...J..` 0540 a1 18 f3 ac be 61 e1 31 71 97 b2 74 3f b2 2c a1 .....a.1q..t?.,. 0550 08 58 ea ca d6 43 e2 53 e8 13 15 eb 53 b2 a6 0d .X...C.S....S... 0560 6c b4 3d 2b f4 d1 87 99 c2 fd a4 28 c4 55 3d 43 l.=+.......(.U=C 0570 b6 e3 c0 e3 72 63 c7 d9 f7 e7 4c 66 cd 35 ce df ....rc....Lf.5.. 0580 92 a8 f6 6d fe b1 01 ba 7f d3 4b c5 9c 86 f6 fa ...m......K..... 0590 cf 16 b5 8d be 40 c8 9b 8c 56 de 25 c6 43 b9 53 [email protected].%.C.S 05a0 fd 21 92 a0 16 c1 bc 94 .!...... No. Time Source Destination Protocol Length Info 15954 209.642440 192.168.10.1 192.168.10.203 TCP 1455 34433 > cds [PSH, ACK] Seq=187116 Ack=2887 Win=1002 Len=1389 TSval=587658 TSecr=729579 Frame 15954: 1455 bytes on wire (11640 bits), 1455 bytes captured (11640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 187116, Ack: 2887, Len: 1389 Data (1389 bytes) 0000 dc 09 be fa ed a6 3e aa f3 d6 3f 36 e1 eb 0a d0 ......>...?6.... 0010 be 07 28 a2 9a 2e 03 03 20 14 53 5f 46 a7 29 14 ..(..... .S_F.). 0020 f5 04 4c 7d 89 36 88 71 60 de 9b 89 54 41 6e f8 ..L}.6.q`...TAn. 0030 3c 13 23 51 9b 5a 85 17 42 40 b2 44 4c 8c 62 86 <.#[email protected]. 0040 08 43 f0 d9 17 79 a5 5e a9 d0 5d 34 26 ac 39 d1 .C...y.^..]4&.9. 0050 ce f6 a8 59 00 ae a8 1d a5 da 75 e7 93 9f c7 d0 ...Y......u..... 0060 87 4e 3f 21 23 7c e8 1e 25 0e 22 08 ae 94 25 93 .N?!#|..%."...%. 0070 eb 10 73 27 16 20 fd 54 e2 a3 da 94 fe d0 16 bd ..s'. .T........ 0080 fd 67 e5 14 13 45 d2 44 f2 8d 1c 7d 3a 71 1d e1 .g...E.D...}:q.. 0090 4f a6 27 9d c6 22 b7 0b ce 3c 1c 6f 35 24 1c 8c O.'.."...<.o5$.. 00a0 ea 71 3b 2c 86 d5 5f 8a 9b 24 f1 5f 89 a1 b6 57 .q;,.._..$._...W 00b0 6c 44 bf 98 a4 b6 fd d1 92 57 df de 90 f2 26 dd lD.......W....&. 00c0 e5 07 a8 1f c8 4f 4f a8 b3 87 ec 4e 3c 38 58 82 .....OO....N<8X. 00d0 e9 8c 66 46 56 26 2e e6 d2 6e b3 69 b1 f7 f6 50 ..fFV&...n.i...P 00e0 77 bd 8e 91 8b e8 45 e7 36 05 e3 9c a2 19 5e 5d w.....E.6.....^] 00f0 2e 16 ce 76 0c 70 3d 5e f9 b0 fe 35 7a e8 c3 24 ...v.p=^...5z..$ 0100 d7 74 37 24 65 22 2b 88 5e 99 ee cf 7d c2 d8 bf .t7$e"+.^...}... 0110 42 ea 38 5e 58 17 a2 7c fb 1a 2e 63 b0 8a 74 c9 B.8^X..|...c..t. 0120 e9 0e f1 5e e9 14 76 7e bf d7 56 bb 54 7a 2b dc ...^..v~..V.Tz+. 0130 9e 8d af 91 7a 59 8c 6f 58 67 71 a7 64 22 03 20 ....zY.oXgq.d". 0140 c8 e1 71 90 58 43 1e 5e ff 25 ee 39 7a 1a 79 1e ..q.XC.^.%.9z.y. 0150 ef df d5 7f ab 72 97 68 06 09 f1 b0 a1 67 9c c9 .....r.h.....g.. 0160 cc 19 aa 9e 4a 42 10 a8 43 48 d9 f3 42 0a 22 33 ....JB..CH..B."3 0170 15 c4 3a 8b 88 b6 a4 ee bd 28 98 0e db b0 d0 15 ..:......(...... 0180 e4 5f da da 42 a7 fd 9b fc 52 08 96 68 29 cb 40 ._..B....R..h).@ 0190 4a cd 8b d4 26 37 38 62 52 2c 8b c3 e4 53 9b 12 J...&78bR,...S.. 01a0 09 18 97 c3 ff 07 8e 5b 2b 9b 4b 4b 25 a2 0d eb .......[+.KK%... 01b0 85 50 e2 f4 54 b0 18 18 ca f5 17 4f e7 25 69 b2 .P..T......O.%i. 01c0 1d 35 7a 33 e0 1d 23 9e a3 ec e8 fd 4e 14 aa 29 .5z3..#.....N..) 01d0 be b4 11 74 32 d0 df 3b 2a 65 ed 92 b9 b1 2e 7c ...t2..;*e.....| 01e0 51 9b bd 9c 10 57 42 c6 6c af 26 0a 27 a3 fc 90 Q....WB.l.&.'... 01f0 36 10 b5 cc a7 a8 3f 63 6d b6 f8 82 a5 75 60 9c 6.....?cm....u`. 0200 29 c7 e8 15 2a 40 69 97 0b fe 2b 67 b9 7e a5 23 )...*@i...+g.~.# 0210 5d 56 60 f9 f2 59 e6 a1 d4 71 c7 42 7c 14 fb b7 ]V`..Y...q.B|... 0220 9c 80 93 c8 9a 9f ee ab c5 90 32 00 4c 6f fc 17 ..........2.Lo.. 0230 62 7f d5 24 37 ad 92 7b 59 7a eb ea 9a 7e a7 a2 b..$7..{Yz...~.. 0240 9b 22 b1 fb d0 fb 73 1f b3 bd 0a b5 be 7c bd 75 ."....s......|.u 0250 4e 2b e9 45 e8 8d e8 13 1c 1c e5 39 32 7f b0 63 N+.E.......92..c 0260 b5 b0 95 38 33 1e d9 31 bc 3c ff ec 06 ed 30 c9 ...83..1.<....0. 0270 f6 c4 7e cd 4c 09 52 d6 e7 61 24 cb ca 93 f7 98 ..~.L.R..a$..... 0280 f0 c0 86 1b 0e 27 dd 63 bb 12 5c 47 e4 ec 63 55 .....'.c..\G..cU 0290 26 2f ea 02 cc 03 80 d1 65 14 a1 86 29 ff 7b ae &/......e...).{. 02a0 a2 ad d8 69 dc 67 88 be 2b bd 5a 90 9d 56 8c 68 ...i.g..+.Z..V.h 02b0 27 92 8b 91 ef 5f a5 c9 d2 42 23 94 3d ec d1 1c '...._...B#.=... 02c0 79 4a d8 f1 9e 93 74 de ee 9a 37 be 86 33 34 bf yJ....t...7..34. 02d0 fb 41 3c 7d d4 ba 67 4e 4f c0 7f 14 e5 7f 85 55 .A<}..gNO......U 02e0 1a b2 17 fa 3b d4 a9 b0 fd 10 d5 8a 7e dd 92 e6 ....;.......~... 02f0 26 f3 9a 61 d9 13 1e ab 44 2a 29 44 e0 14 21 38 &..a....D*)D..!8 0300 7f 21 e6 e1 b4 2f 46 5c a8 d5 d2 26 45 a0 d9 d1 .!.../F\...&E... 0310 24 e3 ed 0d 0a 99 ee 8a 0e 6a 6d 11 92 3b 16 04 $........jm..;.. 0320 76 18 8a 71 b4 9f 0f 08 ce 65 be c9 54 96 c1 aa v..q.....e..T... 0330 b7 4e 66 82 13 65 a4 76 c0 58 2d 2f dc 18 b2 59 .Nf..e.v.X-/...Y 0340 fc 6e 77 51 1e 55 d7 ac ec e7 7d 35 e2 2b 75 26 .nwQ.U....}5.+u& 0350 ae dd 52 1d 04 8a c7 f9 08 09 00 c6 48 e2 96 a6 ..R.........H... 0360 e0 1e 62 f5 de 9e b8 a8 db e4 8f 89 cd 35 75 f5 ..b..........5u. 0370 28 52 a6 3e 33 e7 74 19 12 e6 e2 e7 af 53 d9 3e (R.>3.t......S.> 0380 fe 9b de 76 4f e6 b4 42 67 19 75 bd ea c1 95 70 ...vO..Bg.u....p 0390 e2 05 32 c1 b4 7d ea 3f bf 16 f9 7a f0 b7 a7 ef ..2..}.?...z.... 03a0 5e a1 18 bd 6e bf 32 c4 32 47 f9 15 a5 55 79 fb ^...n.2.2G...Uy. 03b0 fc 07 01 6e b4 cb 52 b4 7b 36 9f 01 6e 43 82 05 ...n..R.{6..nC.. 03c0 60 b0 68 3f 1b d5 10 7e 23 48 72 16 2c 7b fd 72 `.h?...~#Hr.,{.r 03d0 20 44 23 11 05 8c 38 d3 fb 2e 1e 83 77 5c c8 6b D#...8.....w\.k 03e0 55 b1 10 55 30 d2 50 67 a2 77 00 91 cc 3b 0b ae U..U0.Pg.w...;.. 03f0 0b 71 92 aa 25 74 fa dc de 65 9e e3 94 c0 8e 20 .q..%t...e..... 0400 72 9c d1 1b 65 21 83 17 62 40 16 71 60 52 6c 6d [email protected]`Rlm 0410 20 28 1e 87 93 82 89 a0 ee e4 2a e7 35 e0 2d 9a (........*.5.-. 0420 af fa d4 5a 9c 4f 84 d2 ee d0 a1 22 ed 51 2e 8a ...Z.O.....".Q.. 0430 f0 a0 71 ab 0b f0 1e 39 0e e5 48 78 9d 09 12 ea ..q....9..Hx.... 0440 4b 90 82 7d b6 73 35 77 06 ee 2e dc 76 ab 21 49 K..}.s5w....v.!I 0450 7a 58 a3 86 db bc 92 a3 12 dd 94 ee 57 e4 59 62 zX..........W.Yb 0460 65 ba 6f 47 08 85 0b de 01 26 b2 fe 4a 6a 7c 38 e.oG.....&..Jj|8 0470 42 33 da 35 08 b7 d2 45 d3 3b 06 f2 65 86 2e 0d B3.5...E.;..e... 0480 bd c0 0e e8 c3 d5 cf 4e df 16 5e dd a7 28 fa 0e .......N..^..(.. 0490 7e 43 b8 96 dd 80 e1 f0 44 60 1a f9 36 78 5b 58 ~C......D`..6x[X 04a0 06 9b c2 6d 33 44 c6 87 bd a2 41 3a b2 84 4d c1 ...m3D....A:..M. 04b0 b5 6a 65 9d 4d 87 b7 af 0f 89 ee 7f 22 b5 42 64 .je.M.......".Bd 04c0 4b 4a d8 df 28 c8 36 28 25 75 45 f0 6b fb 73 d0 KJ..(.6(%uE.k.s. 04d0 29 74 a8 fa f0 a6 2c 76 3d e1 a5 2f d0 2e 1d de )t....,v=../.... 04e0 49 d4 3e 88 d4 0a 5c 42 04 cd e7 4c 6b 9b 4d 09 I.>...\B...Lk.M. 04f0 7e ef 05 e5 54 20 7f 7e b9 04 3a af b7 b3 81 cf ~...T .~..:..... 0500 7a 38 2e 52 34 3c 80 6a d8 7e 88 5a 68 da f4 f4 z8.R4<.j.~.Zh... 0510 a5 0c 36 48 25 cf 6d 09 be a6 28 4e 65 bb 1e 03 ..6H%.m...(Ne... 0520 02 dd 5b 36 5a 37 8b f3 ac c0 e0 9b bd 00 a1 02 ..[6Z7.......... 0530 ef 84 d5 d8 fe c1 82 5c 0d 28 1f 86 5b ee fd 1c .......\.(..[... 0540 a2 53 9c 00 e0 87 09 ed c6 74 a7 19 3d fc 17 e7 .S.......t..=... 0550 70 29 6a a3 70 64 ce 38 b8 30 9d ea d2 2a c3 f0 p)j.pd.8.0...*.. 0560 34 f6 7a fc 6a a6 3f 84 23 40 af b1 0f 4.z.j.?.#@... No. Time Source Destination Protocol Length Info 15955 209.642498 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2887 Ack=187116 Win=65535 Len=0 TSval=729579 TSecr=587658 Frame 15955: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2887, Ack: 187116, Len: 0 No. Time Source Destination Protocol Length Info 15956 209.642529 64.239.246.16 192.168.10.207 TCP 60 http > piranha2 [ACK] Seq=27822 Ack=1707 Win=65535 Len=0 Frame 15956: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 27822, Ack: 1707, Len: 0 No. Time Source Destination Protocol Length Info 15957 209.679865 64.239.246.16 192.168.10.207 TCP 1454 [TCP segment of a reassembled PDU] Frame 15957: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 27822, Ack: 1707, Len: 1400 No. Time Source Destination Protocol Length Info 15958 209.679901 64.239.246.16 192.168.10.207 TCP 1454 [TCP segment of a reassembled PDU] Frame 15958: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 29222, Ack: 1707, Len: 1400 No. Time Source Destination Protocol Length Info 15959 209.679931 64.239.246.16 192.168.10.207 TCP 429 [TCP segment of a reassembled PDU] Frame 15959: 429 bytes on wire (3432 bits), 429 bytes captured (3432 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 30622, Ack: 1707, Len: 375 No. Time Source Destination Protocol Length Info 15960 209.679977 192.168.10.207 64.239.246.16 TCP 60 piranha2 > http [ACK] Seq=1707 Ack=30997 Win=65535 Len=0 Frame 15960: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: piranha2 (4601), Dst Port: http (80), Seq: 1707, Ack: 30997, Len: 0 No. Time Source Destination Protocol Length Info 15961 209.690518 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=2887 Ack=188505 Win=64146 Len=74 TSval=729579 TSecr=587658 Frame 15961: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2887, Ack: 188505, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 0f ac a0 e8 84 0f cb b0 13 b5 48 .... ..........H 0010 9c 40 a7 b9 e3 4e 9f 58 2e c1 86 82 c9 df 2c 55 [email protected]......,U 0020 8c 62 bf bc 75 17 03 01 00 20 87 ed 76 c0 04 bf .b..u.... ..v... 0030 44 42 10 85 25 24 42 36 0d d5 7d 50 f0 97 66 ed DB..%$B6..}P..f. 0040 14 ca 03 50 d9 95 49 ec c2 70 ...P..I..p No. Time Source Destination Protocol Length Info 15962 209.690591 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=188505 Ack=2961 Win=1002 Len=0 TSval=587670 TSecr=729579 Frame 15962: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 188505, Ack: 2961, Len: 0 No. Time Source Destination Protocol Length Info 15963 209.714213 64.239.246.16 192.168.10.207 TCP 1454 [TCP segment of a reassembled PDU] Frame 15963: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 30997, Ack: 1707, Len: 1400 No. Time Source Destination Protocol Length Info 15964 209.714313 64.239.246.16 192.168.10.207 HTTP 1415 HTTP/1.1 200 OK (text/plain) Frame 15964: 1415 bytes on wire (11320 bits), 1415 bytes captured (11320 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 64.239.246.16 (64.239.246.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: http (80), Dst Port: piranha2 (4601), Seq: 32397, Ack: 1707, Len: 1361 [5 Reassembled TCP Segments (5936 bytes): #15957(1400), #15958(1400), #15959(375), #15963(1400), #15964(1361)] Hypertext Transfer Protocol Line-based text data: text/plain No. Time Source Destination Protocol Length Info 15965 209.714454 192.168.10.1 192.168.10.245 Syslog 328 LOCAL1.INFO: Oct 3 19:47:47 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.207 64.239.246.16 4601 80 msg="HTTP Request" proxy_act="HTTP-Client.EndUser" op="GET" dstname="update.gfi.com" arg="/ap/rev375215" sent_bytes="201" rcvd_bytes="9830" (HTTP-proxy.endusers-00) Frame 15965: 328 bytes on wire (2624 bits), 328 bytes captured (2624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:47:47 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.207 64.239.246.16 4601 80 msg="HTTP Request" proxy_act="HTTP-Client.EndUser" op="GET" dstname="update.gfi.co No. Time Source Destination Protocol Length Info 15966 209.714497 192.168.10.207 64.239.246.16 TCP 60 piranha2 > http [ACK] Seq=1707 Ack=33758 Win=65535 Len=0 Frame 15966: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: piranha2 (4601), Dst Port: http (80), Seq: 1707, Ack: 33758, Len: 0 No. Time Source Destination Protocol Length Info 15967 209.768464 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:18:30 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 15967: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:18:30 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.12/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 15968 209.782095 192.168.10.203 117.196.138.38 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 15968: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 117.196.138.38 (117.196.138.38) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 15969 209.895523 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 15969: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 15970 209.895555 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 15970: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 15971 210.216540 192.168.10.207 206.225.164.186 SMTP 222 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 15971: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14743, Ack: 1097529, Len: 168 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15972 210.216592 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1098657 Ack=14911 Win=46552 Len=0 Frame 15972: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1098657, Ack: 14911, Len: 0 No. Time Source Destination Protocol Length Info 15973 210.216669 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=14911 Ack=1097529 Win=0 Len=0 Frame 15973: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14911, Ack: 1097529, Len: 0 No. Time Source Destination Protocol Length Info 15974 210.303226 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 15974: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8821, Ack: 604878, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 15975 210.303264 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=605086 Ack=8863 Win=46489 Len=0 Frame 15975: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 605086, Ack: 8863, Len: 0 No. Time Source Destination Protocol Length Info 15976 210.303301 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=8863 Ack=604878 Win=0 Len=0 Frame 15976: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8863, Ack: 604878, Len: 0 No. Time Source Destination Protocol Length Info 15977 210.413038 192.168.10.1 192.168.10.245 Syslog 225 LOCAL1.WARNING: Oct 3 19:47:48 MyFirewall firewall: Deny 0-External Firebox 48 tcp 20 113 212.116.151.11 7x.x.x.3 57899 110 offset 7 S 229488994 win 65535 (Unhandled External Packet-00) Frame 15977: 225 bytes on wire (1800 bits), 225 bytes captured (1800 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.WARNING: Oct 3 19:47:48 MyFirewall firewall: Deny 0-External Firebox 48 tcp 20 113 212.116.151.11 7x.x.x.3 57899 110 offset 7 S 229488994 win 65535 (Unhandled External Packet-00) No. Time Source Destination Protocol Length Info 15978 210.413098 192.168.10.1 192.168.10.245 Syslog 226 LOCAL1.WARNING: Oct 3 19:47:48 MyFirewall firewall: Deny 0-External Firebox 48 tcp 20 113 212.116.151.11 7x.x.x.2 57899 110 offset 7 S 2810409577 win 65535 (Unhandled External Packet-00) Frame 15978: 226 bytes on wire (1808 bits), 226 bytes captured (1808 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.WARNING: Oct 3 19:47:48 MyFirewall firewall: Deny 0-External Firebox 48 tcp 20 113 212.116.151.11 7x.x.x.2 57899 110 offset 7 S 2810409577 win 65535 (Unhandled External Packet-00) No. Time Source Destination Protocol Length Info 15979 210.456134 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 783292672, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 15979: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15980 210.456155 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 783292672, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 15980: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15981 210.456167 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 783292672, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 15981: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15982 210.456180 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 783292672, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 15982: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15983 210.474188 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2652373248, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 15983: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15984 210.474203 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2652373248, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 15984: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15985 210.474215 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2652373248, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 15985: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15986 210.474227 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2652373248, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 15986: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 15987 210.526869 Dell_98:1d:d9 Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.5 Frame 15987: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:d9 (00:19:b9:98:1d:d9), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15988 210.527173 Dell_98:1d:d9 Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.5 Frame 15988: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:d9 (00:19:b9:98:1d:d9), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15989 210.607133 192.168.10.240 192.168.10.255 BROWSER 243 Host Announcement CIRCE, Workstation, Server, SQL Server, NT Workstation, NT Server, Backup Browser, DFS server Frame 15989: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.240 (192.168.10.240), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 15990 210.607347 192.168.10.240 192.168.10.255 BROWSER 243 Host Announcement CIRCE, Workstation, Server, SQL Server, NT Workstation, NT Server, Backup Browser, DFS server Frame 15990: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.240 (192.168.10.240), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 15991 210.766764 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.186? Tell 192.168.10.226 Frame 15991: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15992 210.766798 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.186? Tell 192.168.10.226 Frame 15992: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15993 210.766820 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 15993: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15994 210.766831 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 15994: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15995 210.766841 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 15995: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15996 210.766851 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 15996: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 15997 210.766861 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 15997: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15998 210.766872 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 15998: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 15999 210.766882 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 15999: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16000 210.766893 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 16000: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16001 210.766907 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 16001: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16002 210.766923 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 16002: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16003 210.766957 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 16003: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16004 210.766966 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 16004: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16005 210.766994 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 16005: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16006 210.767005 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 16006: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16007 210.767015 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 16007: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16008 210.767025 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 16008: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16009 210.767036 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 16009: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16010 210.767046 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 16010: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16011 210.767065 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 16011: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16012 210.767075 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 16012: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16013 210.767085 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 16013: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16014 210.767095 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 16014: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16015 210.767106 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 16015: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16016 210.767115 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 16016: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16017 210.767126 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 16017: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16018 210.767136 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 16018: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16019 210.767146 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 16019: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16020 210.767156 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 16020: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16021 210.767166 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 16021: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16022 210.767176 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 16022: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16023 210.767186 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 16023: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16024 210.767196 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 16024: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16025 210.767206 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 16025: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16026 210.767216 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 16026: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16027 210.767226 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 16027: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16028 210.767237 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 16028: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16029 210.767250 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 16029: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16030 210.767260 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 16030: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16031 210.767270 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 16031: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16032 210.767280 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 16032: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16033 210.767290 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 16033: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16034 210.767341 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 16034: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16035 210.767608 192.168.10.104 192.168.10.246 NBNS 110 Refresh NB BAIMOBILEPC2<20> Frame 16035: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 16036 210.906557 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.201? Tell 192.168.10.32 Frame 16036: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16037 210.906589 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.201? Tell 192.168.10.32 Frame 16037: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16038 211.025511 192.168.10.118 96.8.81.129 TCP 60 versatalk > http [FIN, ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 16038: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.118 (192.168.10.118), Dst: 96.8.81.129 (96.8.81.129) Transmission Control Protocol, Src Port: versatalk (3738), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 16039 211.131968 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 16039: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16040 211.132000 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 16040: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16041 211.166819 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16041: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16439, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16042 211.175671 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16042: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16466, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16043 211.175706 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=144875 Ack=16493 Win=64828 Len=0 Frame 16043: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16493, Len: 0 No. Time Source Destination Protocol Length Info 16044 211.181815 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16044: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16493, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16045 211.184569 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 3 Port 42 TTL = 120 Frame 16045: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 16046 211.193436 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16046: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16520, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16047 211.193470 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=144875 Ack=16547 Win=64774 Len=0 Frame 16047: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16547, Len: 0 No. Time Source Destination Protocol Length Info 16048 211.194252 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 16048: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 16049 211.201659 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16049: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16547, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16050 211.216990 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16050: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16574, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16051 211.217024 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=144875 Ack=16601 Win=64720 Len=0 Frame 16051: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16601, Len: 0 No. Time Source Destination Protocol Length Info 16052 211.222221 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16052: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16601, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16053 211.234835 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 16053: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16655, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16054 211.234869 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=144875 Ack=16628 Win=64693 Len=0 SLE=16655 SRE=16682 Frame 16054: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16628, Len: 0 No. Time Source Destination Protocol Length Info 16055 211.239550 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16055: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16682, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16056 211.239583 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16054#1] rfb > xrl [ACK] Seq=144875 Ack=16628 Win=64693 Len=0 SLE=16655 SRE=16709 Frame 16056: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16628, Len: 0 No. Time Source Destination Protocol Length Info 16057 211.249528 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16057: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16709, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16058 211.249560 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16054#2] rfb > xrl [ACK] Seq=144875 Ack=16628 Win=64693 Len=0 SLE=16655 SRE=16736 Frame 16058: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16628, Len: 0 No. Time Source Destination Protocol Length Info 16059 211.257850 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16059: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16736, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16060 211.257882 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16054#3] rfb > xrl [ACK] Seq=144875 Ack=16628 Win=64693 Len=0 SLE=16655 SRE=16763 Frame 16060: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16628, Len: 0 No. Time Source Destination Protocol Length Info 16061 211.268469 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:18:31 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 16061: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:18:31 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 16062 211.281626 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 16062: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16628, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16063 211.281660 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=144875 Ack=16763 Win=64558 Len=0 Frame 16063: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16763, Len: 0 No. Time Source Destination Protocol Length Info 16064 211.281699 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 16064: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16817, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16065 211.281732 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16063#1] rfb > xrl [ACK] Seq=144875 Ack=16763 Win=64558 Len=0 SLE=16817 SRE=16844 Frame 16065: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16763, Len: 0 No. Time Source Destination Protocol Length Info 16066 211.288231 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16066: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16844, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16067 211.288264 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16063#2] rfb > xrl [ACK] Seq=144875 Ack=16763 Win=64558 Len=0 SLE=16817 SRE=16871 Frame 16067: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16763, Len: 0 No. Time Source Destination Protocol Length Info 16068 211.296934 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16068: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16871, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16069 211.296968 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16063#3] rfb > xrl [ACK] Seq=144875 Ack=16763 Win=64558 Len=0 SLE=16817 SRE=16898 Frame 16069: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16763, Len: 0 No. Time Source Destination Protocol Length Info 16070 211.303890 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16070: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16898, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16071 211.303923 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16063#4] rfb > xrl [ACK] Seq=144875 Ack=16763 Win=64558 Len=0 SLE=16817 SRE=16925 Frame 16071: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16763, Len: 0 No. Time Source Destination Protocol Length Info 16072 211.313532 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16072: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16925, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16073 211.313570 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16063#5] rfb > xrl [ACK] Seq=144875 Ack=16763 Win=64558 Len=0 SLE=16817 SRE=16952 Frame 16073: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16763, Len: 0 No. Time Source Destination Protocol Length Info 16074 211.315608 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 16074: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 16075 211.321679 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 16075: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16763, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16076 211.325476 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16076: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16952, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16077 211.325510 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=144875 Ack=16790 Win=64531 Len=0 SLE=16817 SRE=16979 Frame 16077: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16790, Len: 0 No. Time Source Destination Protocol Length Info 16078 211.329917 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16078: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16979, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16079 211.329961 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16077#1] rfb > xrl [ACK] Seq=144875 Ack=16790 Win=64531 Len=0 SLE=16817 SRE=17006 Frame 16079: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16790, Len: 0 No. Time Source Destination Protocol Length Info 16080 211.340140 192.168.10.220 208.67.222.222 DNS 86 Standard query PTR 14.62.177.122.in-addr.arpa Frame 16080: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 64883 (64883), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16081 211.346373 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16081: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17006, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16082 211.346406 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16077#2] rfb > xrl [ACK] Seq=144875 Ack=16790 Win=64531 Len=0 SLE=16817 SRE=17033 Frame 16082: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 16790, Len: 0 No. Time Source Destination Protocol Length Info 16083 211.367686 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 16083: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 16790, Ack: 144875, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16084 211.367719 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=144875 Ack=17033 Win=64288 Len=0 Frame 16084: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 17033, Len: 0 No. Time Source Destination Protocol Length Info 16085 211.381782 192.168.10.185 192.168.10.142 VNC 386 Authentication result Frame 16085: 386 bytes on wire (3088 bits), 386 bytes captured (3088 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 144875, Ack: 17033, Len: 332 Virtual Network Computing No. Time Source Destination Protocol Length Info 16086 211.400826 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 16086: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 16087 211.400858 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 16087: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 16088 211.404634 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 16088: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17033, Ack: 145207, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 16089 211.443825 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 16089: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 16090 211.471825 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 800069888, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 16090: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16091 211.471849 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 800069888, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 16091: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16092 211.471862 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 800069888, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 16092: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16093 211.471874 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 800069888, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 16093: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16094 211.489857 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2669150464, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 16094: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16095 211.489880 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2669150464, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 16095: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16096 211.489892 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2669150464, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 16096: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16097 211.489905 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2669150464, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 16097: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16098 211.566281 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 16098: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 16099 211.691440 Dell_f6:3f:45 Broadcast ARP 60 Who has 192.168.10.207? Tell 192.168.10.206 Frame 16099: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16100 211.691473 Dell_f6:3f:45 Broadcast ARP 60 Who has 192.168.10.207? Tell 192.168.10.206 Frame 16100: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_f6:3f:45 (00:13:72:f6:3f:45), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16101 211.708790 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=145207 Ack=17065 Win=65535 Len=0 Frame 16101: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 145207, Ack: 17065, Len: 0 No. Time Source Destination Protocol Length Info 16102 211.893770 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 16102: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 16103 211.893800 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 16103: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 16104 212.008192 192.168.10.142 192.168.10.220 DNS 83 Standard query A ksn7.kaspersky-labs.com Frame 16104: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 1109 (1109), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16105 212.008279 192.168.10.220 208.67.222.222 DNS 83 Standard query A ksn7.kaspersky-labs.com Frame 16105: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 65023 (65023), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16106 212.013036 192.168.10.142 192.168.10.220 DNS 83 Standard query A ksn1.kaspersky-labs.com Frame 16106: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: nfsd-keepalive (1110), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16107 212.013158 192.168.10.220 208.67.222.222 DNS 83 Standard query A ksn1.kaspersky-labs.com Frame 16107: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 51459 (51459), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16108 212.017941 192.168.10.142 192.168.10.220 DNS 83 Standard query A ksn4.kaspersky-labs.com Frame 16108: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: lmsocialserver (1111), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16109 212.018023 192.168.10.220 208.67.222.222 DNS 83 Standard query A ksn4.kaspersky-labs.com Frame 16109: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 59918 (59918), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16110 212.025810 208.67.222.222 192.168.10.220 DNS 307 Standard query response A 117.79.92.44 A 202.177.216.233 A 202.177.216.236 A 38.113.165.77 A 38.113.165.80 A 38.113.165.83 A 38.113.165.86 A 79.141.216.19 A 79.141.216.17 A 130.117.190.207 A 130.117.190.210 A 130.117.190.213 A 130.117.190.216 A 117.79.92.41 Frame 16110: 307 bytes on wire (2456 bits), 307 bytes captured (2456 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 65023 (65023) Domain Name System (response) No. Time Source Destination Protocol Length Info 16111 212.025905 192.168.10.220 192.168.10.142 DNS 307 Standard query response A 117.79.92.44 A 202.177.216.233 A 202.177.216.236 A 38.113.165.77 A 38.113.165.80 A 38.113.165.83 A 38.113.165.86 A 79.141.216.19 A 79.141.216.17 A 130.117.190.207 A 130.117.190.210 A 130.117.190.213 A 130.117.190.216 A 117.79.92.41 Frame 16111: 307 bytes on wire (2456 bits), 307 bytes captured (2456 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.142 (192.168.10.142) User Datagram Protocol, Src Port: domain (53), Dst Port: 1109 (1109) Domain Name System (response) No. Time Source Destination Protocol Length Info 16112 212.028931 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 Who has 192.168.10.220? Tell 192.168.10.1 Frame 16112: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16113 212.028948 Dell_ad:25:f6 Watchgua_3c:4c:d8 ARP 60 192.168.10.220 is at 00:22:19:ad:25:f6 Frame 16113: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16114 212.030661 208.67.222.222 192.168.10.220 DNS 515 Standard query response A 79.141.216.19 A 79.141.216.13 A 130.117.190.198 A 130.117.190.195 A 130.117.190.201 A 130.117.190.204 A 130.117.190.207 A 130.117.190.210 A 130.117.190.213 A 130.117.190.216 A 117.79.92.35 A 117.79.92.38 A 117.79.92.41 A 117.79.92.44 A 202.177.216.227 A 202.177.216.230 A 202.177.216.233 A 202.177.216.236 A 38.113.165.68 A 38.113.165.71 A 38.113.165.74 A 38.113.165.77 A 38.113.165.80 A 38.113.165.83 A 38.113.165.86 A 79.141.216.15 A 79.141.216.17 Frame 16114: 515 bytes on wire (4120 bits), 515 bytes captured (4120 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 51459 (51459) Domain Name System (response) No. Time Source Destination Protocol Length Info 16115 212.030804 192.168.10.220 192.168.10.142 DNS 515 Standard query response A 79.141.216.19 A 79.141.216.13 A 130.117.190.198 A 130.117.190.195 A 130.117.190.201 A 130.117.190.204 A 130.117.190.207 A 130.117.190.210 A 130.117.190.213 A 130.117.190.216 A 117.79.92.35 A 117.79.92.38 A 117.79.92.41 A 117.79.92.44 A 202.177.216.227 A 202.177.216.230 A 202.177.216.233 A 202.177.216.236 A 38.113.165.68 A 38.113.165.71 A 38.113.165.74 A 38.113.165.77 A 38.113.165.80 A 38.113.165.83 A 38.113.165.86 A 79.141.216.15 A 79.141.216.17 Frame 16115: 515 bytes on wire (4120 bits), 515 bytes captured (4120 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.142 (192.168.10.142) User Datagram Protocol, Src Port: domain (53), Dst Port: nfsd-keepalive (1110) Domain Name System (response) No. Time Source Destination Protocol Length Info 16116 212.035720 208.67.222.222 192.168.10.220 DNS 163 Standard query response A 79.141.216.15 A 79.141.216.17 A 79.141.216.19 A 79.141.216.29 A 79.141.216.13 Frame 16116: 163 bytes on wire (1304 bits), 163 bytes captured (1304 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 59918 (59918) Domain Name System (response) No. Time Source Destination Protocol Length Info 16117 212.035803 192.168.10.220 192.168.10.142 DNS 163 Standard query response A 79.141.216.15 A 79.141.216.17 A 79.141.216.19 A 79.141.216.29 A 79.141.216.13 Frame 16117: 163 bytes on wire (1304 bits), 163 bytes captured (1304 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.142 (192.168.10.142) User Datagram Protocol, Src Port: domain (53), Dst Port: lmsocialserver (1111) Domain Name System (response) No. Time Source Destination Protocol Length Info 16118 212.062285 192.168.10.142 192.168.10.220 DNS 83 Standard query AAAA ksn1.kaspersky-labs.com Frame 16118: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: mini-sql (1114), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16119 212.062359 192.168.10.220 208.67.222.222 DNS 83 Standard query AAAA ksn1.kaspersky-labs.com Frame 16119: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 49378 (49378), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16120 212.062582 192.168.10.142 192.168.10.220 DNS 83 Standard query AAAA ksn4.kaspersky-labs.com Frame 16120: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: ardus-trns (1115), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16121 212.062655 192.168.10.220 208.67.222.222 DNS 83 Standard query AAAA ksn4.kaspersky-labs.com Frame 16121: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 59087 (59087), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16122 212.080132 208.67.222.222 192.168.10.220 DNS 83 Standard query response Frame 16122: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 59087 (59087) Domain Name System (response) No. Time Source Destination Protocol Length Info 16123 212.080211 208.67.222.222 192.168.10.220 DNS 83 Standard query response Frame 16123: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 49378 (49378) Domain Name System (response) No. Time Source Destination Protocol Length Info 16124 212.080296 192.168.10.220 192.168.10.142 DNS 83 Standard query response Frame 16124: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.142 (192.168.10.142) User Datagram Protocol, Src Port: domain (53), Dst Port: ardus-trns (1115) Domain Name System (response) No. Time Source Destination Protocol Length Info 16125 212.080371 192.168.10.220 192.168.10.142 DNS 83 Standard query response Frame 16125: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.142 (192.168.10.142) User Datagram Protocol, Src Port: domain (53), Dst Port: mini-sql (1114) Domain Name System (response) No. Time Source Destination Protocol Length Info 16126 212.230262 192.168.10.207 178.148.30.51 TCP 62 smtp > redstorm-info [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 16126: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 178.148.30.51 (178.148.30.51) Transmission Control Protocol, Src Port: smtp (25), Dst Port: redstorm-info (2348), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 16127 212.230297 192.168.10.207 206.225.164.188 SMTP 138 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 16127: 138 bytes on wire (1104 bits), 138 bytes captured (1104 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8821, Ack: 604878, Len: 84 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16128 212.267601 192.168.10.104 192.168.10.246 NBNS 110 Refresh NB BAIMOBILEPC2<00> Frame 16128: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 16129 212.339950 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 14.62.177.122.in-addr.arpa Frame 16129: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 53981 (53981), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16130 212.339992 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=605086 Ack=8905 Win=46468 Len=0 Frame 16130: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 605086, Ack: 8905, Len: 0 No. Time Source Destination Protocol Length Info 16131 212.340023 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=8905 Ack=604878 Win=0 Len=0 Frame 16131: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8905, Ack: 604878, Len: 0 No. Time Source Destination Protocol Length Info 16132 212.340904 Watchgua_3c:4c:d8 Dell_39:5d:dd ARP 60 Who has 192.168.10.207? Tell 192.168.10.1 Frame 16132: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16133 212.340991 Dell_39:5d:dd Watchgua_3c:4c:d8 ARP 60 192.168.10.207 is at 00:18:8b:39:5d:dd Frame 16133: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16134 212.364256 192.168.10.31 192.168.10.255 UDP 778 Source port: 50764 Destination port: apc-3052 Frame 16134: 778 bytes on wire (6224 bits), 778 bytes captured (6224 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (736 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 35 31 3a 35 33 0a 53 52 3d 31 30 37 =19:51:53.SR=107 0060 43 0a 53 55 3d 32 44 38 33 30 38 44 45 0a 52 44 C.SU=2D8308DE.RD 0070 3d 44 31 43 39 0a 54 41 3d 31 39 32 2e 31 36 38 =D1C9.TA=192.168 0080 2e 31 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d .10.255.UC=1.SD= 0090 30 0a 53 4d 3d 32 0a 34 46 3d 32 30 37 2e 30 0a 0.SM=2.4F=207.0. 00a0 35 31 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 51=08.7E=00.3E=0 00b0 30 32 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 02.4C=207.3.50=0 00c0 33 35 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 35.0.43=029.1.78 00d0 3d 31 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 =11/19/07.6A=005 00e0 39 3a 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 9:.47=S.63=UPS_I 00f0 44 45 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d DEN.66=100.0.58= 0100 4e 4f 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a NO.56=5YW.39=FF. 0110 32 37 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 27=00.38=00.6E=I 0120 53 30 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 S0746005443 .6D 0130 3d 31 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 =11/19/07.01=Sma 0140 72 74 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 rt-UPS RT 10000 0150 58 4c 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 XL .46=60.00.4 0160 44 3d 32 30 37 2e 33 0a 34 45 3d 32 30 37 2e 33 D=207.3.4E=207.3 0170 0a 34 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 .45=336.75=229.6 0180 43 3d 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 C=146.65=00.6F=2 0190 30 38 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 08.71=02.70=020. 01a0 37 32 3d 30 30 30 0a 34 32 3d 32 31 36 2e 30 0a 72=000.42=216.0. 01b0 36 37 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 67=192.62=476.17 01c0 2e 57 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 .W.5C=028.0.2F=1 01d0 33 2e 37 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 3.77.16=A.05=000 01e0 30 30 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 00000.09=60.00;2 01f0 30 37 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 07.3.6B=0.81E2=A 0200 55 54 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 UTO .MC=1.E0=0.E 0210 31 3d 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 1=0.E2=0.E3=0.E8 0220 3d 30 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d =0.E9=0.I0=2.I1= 0230 30 30 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 00.I2=01.I3=0.I4 0240 3d 30 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d =0.I5=0.I6=0.I7= 0250 30 0a 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 0.I8=Int Contact 0260 20 31 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 1.I9=0.IA=Int C 0270 6f 6e 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 ontact 2.IB=0.IC 0280 3d 49 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a =Int Relay.ID=0. 0290 53 48 3d 43 34 44 45 45 43 35 36 43 45 41 36 30 SH=C4DEEC56CEA60 02a0 45 35 39 42 32 46 44 36 33 33 36 45 38 34 44 43 E59B2FD6336E84DC 02b0 46 37 39 0a 4d 44 3d 32 38 36 32 37 37 32 34 61 F79.MD=28627724a 02c0 37 65 32 36 39 34 64 65 63 35 32 35 38 31 36 62 7e2694dec525816b 02d0 34 61 37 66 37 62 64 0a 3c 2f 42 4f 44 59 3e 0a 4a7f7bd.</BODY>. No. Time Source Destination Protocol Length Info 16135 212.364420 192.168.10.31 192.168.10.255 UDP 778 Source port: 50764 Destination port: apc-3052 Frame 16135: 778 bytes on wire (6224 bits), 778 bytes captured (6224 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (736 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 35 31 3a 35 33 0a 53 52 3d 31 30 37 =19:51:53.SR=107 0060 43 0a 53 55 3d 32 44 38 33 30 38 44 45 0a 52 44 C.SU=2D8308DE.RD 0070 3d 44 31 43 39 0a 54 41 3d 31 39 32 2e 31 36 38 =D1C9.TA=192.168 0080 2e 31 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d .10.255.UC=1.SD= 0090 30 0a 53 4d 3d 32 0a 34 46 3d 32 30 37 2e 30 0a 0.SM=2.4F=207.0. 00a0 35 31 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 51=08.7E=00.3E=0 00b0 30 32 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 02.4C=207.3.50=0 00c0 33 35 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 35.0.43=029.1.78 00d0 3d 31 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 =11/19/07.6A=005 00e0 39 3a 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 9:.47=S.63=UPS_I 00f0 44 45 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d DEN.66=100.0.58= 0100 4e 4f 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a NO.56=5YW.39=FF. 0110 32 37 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 27=00.38=00.6E=I 0120 53 30 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 S0746005443 .6D 0130 3d 31 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 =11/19/07.01=Sma 0140 72 74 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 rt-UPS RT 10000 0150 58 4c 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 XL .46=60.00.4 0160 44 3d 32 30 37 2e 33 0a 34 45 3d 32 30 37 2e 33 D=207.3.4E=207.3 0170 0a 34 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 .45=336.75=229.6 0180 43 3d 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 C=146.65=00.6F=2 0190 30 38 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 08.71=02.70=020. 01a0 37 32 3d 30 30 30 0a 34 32 3d 32 31 36 2e 30 0a 72=000.42=216.0. 01b0 36 37 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 67=192.62=476.17 01c0 2e 57 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 .W.5C=028.0.2F=1 01d0 33 2e 37 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 3.77.16=A.05=000 01e0 30 30 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 00000.09=60.00;2 01f0 30 37 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 07.3.6B=0.81E2=A 0200 55 54 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 UTO .MC=1.E0=0.E 0210 31 3d 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 1=0.E2=0.E3=0.E8 0220 3d 30 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d =0.E9=0.I0=2.I1= 0230 30 30 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 00.I2=01.I3=0.I4 0240 3d 30 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d =0.I5=0.I6=0.I7= 0250 30 0a 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 0.I8=Int Contact 0260 20 31 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 1.I9=0.IA=Int C 0270 6f 6e 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 ontact 2.IB=0.IC 0280 3d 49 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a =Int Relay.ID=0. 0290 53 48 3d 43 34 44 45 45 43 35 36 43 45 41 36 30 SH=C4DEEC56CEA60 02a0 45 35 39 42 32 46 44 36 33 33 36 45 38 34 44 43 E59B2FD6336E84DC 02b0 46 37 39 0a 4d 44 3d 32 38 36 32 37 37 32 34 61 F79.MD=28627724a 02c0 37 65 32 36 39 34 64 65 63 35 32 35 38 31 36 62 7e2694dec525816b 02d0 34 61 37 66 37 62 64 0a 3c 2f 42 4f 44 59 3e 0a 4a7f7bd.</BODY>. No. Time Source Destination Protocol Length Info 16136 212.416423 178.148.30.51 192.168.10.207 TCP 60 redstorm-info > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 16136: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 178.148.30.51 (178.148.30.51), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: redstorm-info (2348), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 16137 212.416527 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:47:50 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 178.148.30.51 7x.x.x.3 2348 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 16137: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:47:50 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 178.148.30.51 7x.x.x.3 2348 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 16138 212.416563 192.168.10.207 178.148.30.51 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:47:25 -0400 Frame 16138: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 178.148.30.51 (178.148.30.51) Transmission Control Protocol, Src Port: smtp (25), Dst Port: redstorm-info (2348), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16139 212.416603 178.148.30.51 192.168.10.207 TCP 60 redstorm-info > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 16139: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 178.148.30.51 (178.148.30.51), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: redstorm-info (2348), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 16140 212.441185 176.44.103.137 192.168.10.207 TCP 62 15216 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 16140: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 176.44.103.137 (176.44.103.137), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 15216 (15216), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 16141 212.441262 192.168.10.207 176.44.103.137 TCP 62 smtp > 15216 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 16141: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 176.44.103.137 (176.44.103.137) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 15216 (15216), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 16142 212.487524 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 816847104, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 16142: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16143 212.487548 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 816847104, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 16143: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16144 212.487561 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 816847104, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 16144: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16145 212.487574 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 816847104, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 16145: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16146 212.505648 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2685927680, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 16146: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16147 212.505672 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2685927680, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 16147: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16148 212.505684 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2685927680, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 16148: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16149 212.505696 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2685927680, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 16149: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16150 212.575114 192.168.10.32 192.168.10.255 UDP 776 Source port: 38302 Destination port: apc-3052 Frame 16150: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 39 3a 33 34 0a 53 52 3d 30 31 31 =20:59:34.SR=011 0060 35 45 37 0a 53 55 3d 33 41 34 43 0a 52 44 3d 37 5E7.SU=3A4C.RD=7 0070 35 44 42 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 5DB.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 38 .4C=207.3.50=038 00c0 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 .0.43=028.5.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 31 3a 1/19/07.6A=0051: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 746005481 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d .46=60.00.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 207.3.4E=205.9.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 31 2e 30 0a 32 46 3d 31 35 2e .5C=031.0.2F=15. 01d0 32 35 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 25.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 000.09=59.99;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 43 36 32 46 33 41 39 41 33 31 30 38 31 46 43 =C62F3A9A31081FC 02a0 36 35 36 44 35 42 44 37 36 41 42 39 33 39 38 42 656D5BD76AB9398B 02b0 36 0a 4d 44 3d 63 64 66 61 38 63 66 62 65 38 61 6.MD=cdfa8cfbe8a 02c0 32 33 35 66 65 39 34 38 65 33 33 30 39 61 30 37 235fe948e3309a07 02d0 32 65 34 34 39 0a 3c 2f 42 4f 44 59 3e 0a 2e449.</BODY>. No. Time Source Destination Protocol Length Info 16151 212.575275 192.168.10.32 192.168.10.255 UDP 776 Source port: 38302 Destination port: apc-3052 Frame 16151: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 39 3a 33 34 0a 53 52 3d 30 31 31 =20:59:34.SR=011 0060 35 45 37 0a 53 55 3d 33 41 34 43 0a 52 44 3d 37 5E7.SU=3A4C.RD=7 0070 35 44 42 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 5DB.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 38 .4C=207.3.50=038 00c0 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 .0.43=028.5.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 31 3a 1/19/07.6A=0051: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 746005481 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d .46=60.00.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 207.3.4E=205.9.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 31 2e 30 0a 32 46 3d 31 35 2e .5C=031.0.2F=15. 01d0 32 35 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 25.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 000.09=59.99;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 43 36 32 46 33 41 39 41 33 31 30 38 31 46 43 =C62F3A9A31081FC 02a0 36 35 36 44 35 42 44 37 36 41 42 39 33 39 38 42 656D5BD76AB9398B 02b0 36 0a 4d 44 3d 63 64 66 61 38 63 66 62 65 38 61 6.MD=cdfa8cfbe8a 02c0 32 33 35 66 65 39 34 38 65 33 33 30 39 61 30 37 235fe948e3309a07 02d0 32 65 34 34 39 0a 3c 2f 42 4f 44 59 3e 0a 2e449.</BODY>. No. Time Source Destination Protocol Length Info 16152 212.671595 DellComp_f0:68:fd Broadcast ARP 60 Who has 192.168.10.23? Tell 192.168.10.15 Frame 16152: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: DellComp_f0:68:fd (00:b0:d0:f0:68:fd), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16153 212.671627 DellComp_f0:68:fd Broadcast ARP 60 Who has 192.168.10.23? Tell 192.168.10.15 Frame 16153: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: DellComp_f0:68:fd (00:b0:d0:f0:68:fd), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16154 212.672952 65.32.1.65 192.168.10.246 DNS 152 Standard query response PTR ABTS-North-Dynamic-014.62.177.122.airtelbroadband.in Frame 16154: 152 bytes on wire (1216 bits), 152 bytes captured (1216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 53981 (53981) Domain Name System (response) No. Time Source Destination Protocol Length Info 16155 212.711506 176.44.103.137 192.168.10.207 TCP 60 15216 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 16155: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 176.44.103.137 (176.44.103.137), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 15216 (15216), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 16156 212.711623 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:47:50 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 176.44.103.137 7x.x.x.3 15216 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 16156: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:47:50 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 176.44.103.137 7x.x.x.3 15216 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 16157 212.711659 192.168.10.207 176.44.103.137 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:47:25 -0400 Frame 16157: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 176.44.103.137 (176.44.103.137) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 15216 (15216), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16158 212.711699 176.44.103.137 192.168.10.207 TCP 60 15216 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 16158: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 176.44.103.137 (176.44.103.137), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 15216 (15216), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 16159 212.768500 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:18:33 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 16159: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:18:33 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 16160 212.812413 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 187.70.75.189.in-addr.arpa Frame 16160: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 51823 (51823), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16161 212.910452 178.148.30.51 192.168.10.207 SMTP 95 C: HELO cable-178-148-30-51.dynamic.sbb.rs Frame 16161: 95 bytes on wire (760 bits), 95 bytes captured (760 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 178.148.30.51 (178.148.30.51), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: redstorm-info (2348), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 41 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16162 212.910558 192.168.10.207 178.148.30.51 SMTP 102 S: 250 mail.mydomain.com Hello [178.148.30.51] Frame 16162: 102 bytes on wire (816 bits), 102 bytes captured (816 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 178.148.30.51 (178.148.30.51) Transmission Control Protocol, Src Port: smtp (25), Dst Port: redstorm-info (2348), Seq: 122, Ack: 42, Len: 48 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16163 212.910618 178.148.30.51 192.168.10.207 TCP 60 redstorm-info > smtp [ACK] Seq=42 Ack=170 Win=93270 Len=0 Frame 16163: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 178.148.30.51 (178.148.30.51), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: redstorm-info (2348), Dst Port: smtp (25), Seq: 42, Ack: 170, Len: 0 No. Time Source Destination Protocol Length Info 16164 212.982301 176.44.103.137 192.168.10.207 SMTP 75 C: HELO 176.44.103.137 Frame 16164: 75 bytes on wire (600 bits), 75 bytes captured (600 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 176.44.103.137 (176.44.103.137), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 15216 (15216), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 21 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16165 212.982341 192.168.10.207 176.44.103.137 SMTP 103 S: 250 mail.mydomain.com Hello [176.44.103.137] Frame 16165: 103 bytes on wire (824 bits), 103 bytes captured (824 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 176.44.103.137 (176.44.103.137) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 15216 (15216), Seq: 122, Ack: 22, Len: 49 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16166 212.982380 176.44.103.137 192.168.10.207 TCP 60 15216 > smtp [ACK] Seq=22 Ack=171 Win=93270 Len=0 Frame 16166: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 176.44.103.137 (176.44.103.137), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 15216 (15216), Dst Port: smtp (25), Seq: 22, Ack: 171, Len: 0 No. Time Source Destination Protocol Length Info 16167 212.997092 206.225.164.186 192.168.10.207 TCP 60 [TCP Dup ACK 15972#1] 23308 > smtp [ACK] Seq=1098657 Ack=14911 Win=46552 Len=0 Frame 16167: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1098657, Ack: 14911, Len: 0 No. Time Source Destination Protocol Length Info 16168 212.997125 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=14911 Ack=1097529 Win=0 Len=0 Frame 16168: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14911, Ack: 1097529, Len: 0 No. Time Source Destination Protocol Length Info 16169 213.094951 65.32.1.65 192.168.10.246 DNS 147 Standard query response PTR 189-75-70-187.gnace304.ipd.brasiltelecom.net.br Frame 16169: 147 bytes on wire (1176 bits), 147 bytes captured (1176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 51823 (51823) Domain Name System (response) No. Time Source Destination Protocol Length Info 16170 213.136685 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16170: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17065, Ack: 145207, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16171 213.150840 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16171: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17092, Ack: 145207, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16172 213.150881 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=145207 Ack=17119 Win=65481 Len=0 Frame 16172: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 145207, Ack: 17119, Len: 0 No. Time Source Destination Protocol Length Info 16173 213.161416 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16173: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17119, Ack: 145207, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16174 213.169930 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 53.36.195.188.in-addr.arpa Frame 16174: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 50089 (50089), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16175 213.172354 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16175: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17146, Ack: 145207, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16176 213.172389 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=145207 Ack=17173 Win=65427 Len=0 Frame 16176: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 145207, Ack: 17173, Len: 0 No. Time Source Destination Protocol Length Info 16177 213.175928 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16177: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17173, Ack: 145207, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16178 213.183897 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16178: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17200, Ack: 145207, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16179 213.183929 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=145207 Ack=17227 Win=65373 Len=0 Frame 16179: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 145207, Ack: 17227, Len: 0 No. Time Source Destination Protocol Length Info 16180 213.191688 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16180: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17227, Ack: 145207, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16181 213.194173 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 16181: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 16182 213.208583 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 16182: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17281, Ack: 145207, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16183 213.208620 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=145207 Ack=17254 Win=65346 Len=0 SLE=17281 SRE=17308 Frame 16183: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 145207, Ack: 17254, Len: 0 No. Time Source Destination Protocol Length Info 16184 213.216556 178.148.30.51 192.168.10.207 SMTP 97 C: MAIL FROM: <ecgsandstone@xxxxxxxxxxxx> Frame 16184: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 178.148.30.51 (178.148.30.51), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: redstorm-info (2348), Dst Port: smtp (25), Seq: 42, Ack: 170, Len: 43 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16185 213.216787 192.168.10.207 178.148.30.51 SMTP 107 S: 250 2.1.0 [email protected] OK Frame 16185: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 178.148.30.51 (178.148.30.51) Transmission Control Protocol, Src Port: smtp (25), Dst Port: redstorm-info (2348), Seq: 170, Ack: 85, Len: 53 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16186 213.216876 178.148.30.51 192.168.10.207 TCP 60 redstorm-info > smtp [ACK] Seq=85 Ack=223 Win=93218 Len=0 Frame 16186: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 178.148.30.51 (178.148.30.51), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: redstorm-info (2348), Dst Port: smtp (25), Seq: 85, Ack: 223, Len: 0 No. Time Source Destination Protocol Length Info 16187 213.220509 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16187: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17308, Ack: 145207, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16188 213.220545 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16183#1] rfb > xrl [ACK] Seq=145207 Ack=17254 Win=65346 Len=0 SLE=17281 SRE=17335 Frame 16188: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 145207, Ack: 17254, Len: 0 No. Time Source Destination Protocol Length Info 16189 213.224866 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16189: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17335, Ack: 145207, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16190 213.224899 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16183#2] rfb > xrl [ACK] Seq=145207 Ack=17254 Win=65346 Len=0 SLE=17281 SRE=17362 Frame 16190: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 145207, Ack: 17254, Len: 0 No. Time Source Destination Protocol Length Info 16191 213.232641 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16191: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17362, Ack: 145207, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16192 213.232675 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16183#3] rfb > xrl [ACK] Seq=145207 Ack=17254 Win=65346 Len=0 SLE=17281 SRE=17389 Frame 16192: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 145207, Ack: 17254, Len: 0 No. Time Source Destination Protocol Length Info 16193 213.240382 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16193: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17389, Ack: 145207, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16194 213.240418 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16183#4] rfb > xrl [ACK] Seq=145207 Ack=17254 Win=65346 Len=0 SLE=17281 SRE=17416 Frame 16194: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 145207, Ack: 17254, Len: 0 No. Time Source Destination Protocol Length Info 16195 213.248794 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16195: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17416, Ack: 145207, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16196 213.248830 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16183#5] rfb > xrl [ACK] Seq=145207 Ack=17254 Win=65346 Len=0 SLE=17281 SRE=17443 Frame 16196: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 145207, Ack: 17254, Len: 0 No. Time Source Destination Protocol Length Info 16197 213.253789 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 16197: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17254, Ack: 145207, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16198 213.253863 176.44.103.137 192.168.10.207 SMTP 96 C: MAIL FROM: <ofassertion@xxxxxxxxxxxx> Frame 16198: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 176.44.103.137 (176.44.103.137), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 15216 (15216), Dst Port: smtp (25), Seq: 22, Ack: 171, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16199 213.253892 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=145207 Ack=17443 Win=65157 Len=0 Frame 16199: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 145207, Ack: 17443, Len: 0 No. Time Source Destination Protocol Length Info 16200 213.254047 192.168.10.207 176.44.103.137 SMTP 106 S: 250 2.1.0 [email protected] OK Frame 16200: 106 bytes on wire (848 bits), 106 bytes captured (848 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 176.44.103.137 (176.44.103.137) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 15216 (15216), Seq: 171, Ack: 64, Len: 52 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16201 213.254087 176.44.103.137 192.168.10.207 TCP 60 15216 > smtp [ACK] Seq=64 Ack=223 Win=93218 Len=0 Frame 16201: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 176.44.103.137 (176.44.103.137), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 15216 (15216), Dst Port: smtp (25), Seq: 64, Ack: 223, Len: 0 No. Time Source Destination Protocol Length Info 16202 213.257752 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16202: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17443, Ack: 145207, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16203 213.265738 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16203: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17470, Ack: 145207, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16204 213.265770 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=145207 Ack=17497 Win=65103 Len=0 Frame 16204: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 145207, Ack: 17497, Len: 0 No. Time Source Destination Protocol Length Info 16205 213.271908 192.168.10.185 192.168.10.142 VNC 290 Authentication result Frame 16205: 290 bytes on wire (2320 bits), 290 bytes captured (2320 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 145207, Ack: 17497, Len: 236 Virtual Network Computing No. Time Source Destination Protocol Length Info 16206 213.280486 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16206: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17497, Ack: 145207, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16207 213.283852 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16207: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17524, Ack: 145207, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16208 213.283883 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=145443 Ack=17551 Win=65049 Len=0 Frame 16208: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 145443, Ack: 17551, Len: 0 No. Time Source Destination Protocol Length Info 16209 213.287799 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16209: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17551, Ack: 145207, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16210 213.293832 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 16210: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17578, Ack: 145443, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 16211 213.293864 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=145443 Ack=17610 Win=64990 Len=0 Frame 16211: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 145443, Ack: 17610, Len: 0 No. Time Source Destination Protocol Length Info 16212 213.294206 192.168.10.185 192.168.10.142 VNC 386 Authentication result Frame 16212: 386 bytes on wire (3088 bits), 386 bytes captured (3088 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 145443, Ack: 17610, Len: 332 Virtual Network Computing No. Time Source Destination Protocol Length Info 16213 213.303370 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16213: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17610, Ack: 145443, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16214 213.307717 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16214: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17637, Ack: 145443, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16215 213.307746 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=145775 Ack=17664 Win=64936 Len=0 Frame 16215: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 145775, Ack: 17664, Len: 0 No. Time Source Destination Protocol Length Info 16216 213.311920 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16216: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17664, Ack: 145443, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16217 213.313822 65.32.1.65 192.168.10.246 DNS 133 Standard query response PTR 188-195-36-53-dynip.superkabel.de Frame 16217: 133 bytes on wire (1064 bits), 133 bytes captured (1064 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 50089 (50089) Domain Name System (response) No. Time Source Destination Protocol Length Info 16218 213.315567 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 16218: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 16219 213.319535 192.168.10.220 208.67.222.222 DNS 77 Standard query A www.w3schools.com Frame 16219: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 62076 (62076), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16220 213.321826 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 16220: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17691, Ack: 145775, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 16221 213.321858 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=145775 Ack=17723 Win=64877 Len=0 Frame 16221: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 145775, Ack: 17723, Len: 0 No. Time Source Destination Protocol Length Info 16222 213.321900 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16222: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17723, Ack: 145775, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16223 213.322292 192.168.10.185 192.168.10.142 VNC 532 Authentication result Frame 16223: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 145775, Ack: 17750, Len: 478 Virtual Network Computing No. Time Source Destination Protocol Length Info 16224 213.328469 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16224: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17750, Ack: 145775, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16225 213.336826 208.67.222.222 192.168.10.220 DNS 93 Standard query response A 216.128.29.26 Frame 16225: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 62076 (62076) Domain Name System (response) No. Time Source Destination Protocol Length Info 16226 213.338472 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16226: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17777, Ack: 145775, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16227 213.338506 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=146253 Ack=17804 Win=64796 Len=0 Frame 16227: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146253, Ack: 17804, Len: 0 No. Time Source Destination Protocol Length Info 16228 213.359073 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16228: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17804, Ack: 145775, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16229 213.364331 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 16229: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17831, Ack: 146253, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 16230 213.364361 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=146253 Ack=17863 Win=64737 Len=0 Frame 16230: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146253, Ack: 17863, Len: 0 No. Time Source Destination Protocol Length Info 16231 213.364446 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16231: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17863, Ack: 146253, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16232 213.364533 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16232: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17890, Ack: 146253, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16233 213.364564 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=146253 Ack=17917 Win=64683 Len=0 Frame 16233: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146253, Ack: 17917, Len: 0 No. Time Source Destination Protocol Length Info 16234 213.365070 192.168.10.185 192.168.10.142 VNC 386 Authentication result Frame 16234: 386 bytes on wire (3088 bits), 386 bytes captured (3088 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146253, Ack: 17917, Len: 332 Virtual Network Computing No. Time Source Destination Protocol Length Info 16235 213.367815 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16235: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17917, Ack: 146253, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16236 213.376069 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16236: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17944, Ack: 146253, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16237 213.376101 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=146585 Ack=17971 Win=64629 Len=0 Frame 16237: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 17971, Len: 0 No. Time Source Destination Protocol Length Info 16238 213.383518 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 16238: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 16239 213.383546 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 16239: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 16240 213.383882 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16240: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17971, Ack: 146253, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16241 213.392058 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 16241: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 17998, Ack: 146585, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 16242 213.392094 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=146585 Ack=18030 Win=64570 Len=0 Frame 16242: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18030, Len: 0 No. Time Source Destination Protocol Length Info 16243 213.392136 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16243: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18030, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16244 213.400634 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16244: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18057, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16245 213.400668 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=146585 Ack=18084 Win=64516 Len=0 Frame 16245: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18084, Len: 0 No. Time Source Destination Protocol Length Info 16246 213.407738 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16246: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18084, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16247 213.415883 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16247: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18111, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16248 213.415917 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=146585 Ack=18138 Win=64462 Len=0 Frame 16248: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18138, Len: 0 No. Time Source Destination Protocol Length Info 16249 213.427384 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16249: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18138, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16250 213.433563 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16250: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18165, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16251 213.433596 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=146585 Ack=18192 Win=64408 Len=0 Frame 16251: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18192, Len: 0 No. Time Source Destination Protocol Length Info 16252 213.436524 192.168.10.207 64.239.246.16 TCP 60 4857 > http [FIN, ACK] Seq=1 Ack=2 Win=65535 Len=0 Frame 16252: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: 4857 (4857), Dst Port: http (80), Seq: 1, Ack: 2, Len: 0 No. Time Source Destination Protocol Length Info 16253 213.443903 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 16253: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 16254 213.444310 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16254: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18192, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16255 213.447387 192.168.10.246 65.32.1.65 DNS 87 Standard query PTR 177.72.160.118.in-addr.arpa Frame 16255: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 56079 (56079), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16256 213.483219 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 16256: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18300, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16257 213.483254 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=146585 Ack=18219 Win=64381 Len=0 SLE=18300 SRE=18327 Frame 16257: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18219, Len: 0 No. Time Source Destination Protocol Length Info 16258 213.497820 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 16258: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18354, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16259 213.497856 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16257#1] rfb > xrl [ACK] Seq=146585 Ack=18219 Win=64381 Len=0 SLE=18354 SRE=18381 SLE=18300 SRE=18327 Frame 16259: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18219, Len: 0 No. Time Source Destination Protocol Length Info 16260 213.503052 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 833624320, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 16260: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16261 213.503075 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 833624320, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 16261: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16262 213.503088 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 833624320, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 16262: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16263 213.503100 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 833624320, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 16263: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16264 213.506677 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16264: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18381, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16265 213.506720 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16257#2] rfb > xrl [ACK] Seq=146585 Ack=18219 Win=64381 Len=0 SLE=18354 SRE=18408 SLE=18300 SRE=18327 Frame 16265: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18219, Len: 0 No. Time Source Destination Protocol Length Info 16266 213.521267 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2702704896, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 16266: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16267 213.521291 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2702704896, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 16267: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16268 213.521304 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2702704896, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 16268: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16269 213.521316 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2702704896, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 16269: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16270 213.534229 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 16270: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18219, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16271 213.534276 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 16271: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18327, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16272 213.534306 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=146585 Ack=18246 Win=64354 Len=0 SLE=18300 SRE=18354 Frame 16272: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18246, Len: 0 No. Time Source Destination Protocol Length Info 16273 213.553884 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 16273: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18543, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16274 213.553918 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16272#1] rfb > xrl [ACK] Seq=146585 Ack=18246 Win=64354 Len=0 SLE=18543 SRE=18570 SLE=18300 SRE=18354 Frame 16274: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18246, Len: 0 No. Time Source Destination Protocol Length Info 16275 213.566332 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 16275: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 16276 213.591886 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 16276: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18597, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16277 213.591922 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16272#2] rfb > xrl [ACK] Seq=146585 Ack=18246 Win=64354 Len=0 SLE=18597 SRE=18624 SLE=18543 SRE=18570 Frame 16277: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18246, Len: 0 No. Time Source Destination Protocol Length Info 16278 213.591968 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16278: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18624, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16279 213.591997 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16272#3] rfb > xrl [ACK] Seq=146585 Ack=18246 Win=64354 Len=0 SLE=18597 SRE=18651 SLE=18543 SRE=18570 Frame 16279: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18246, Len: 0 No. Time Source Destination Protocol Length Info 16280 213.612502 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 16280: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18678, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16281 213.612539 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16272#4] rfb > xrl [ACK] Seq=146585 Ack=18246 Win=64354 Len=0 SLE=18678 SRE=18705 SLE=18597 SRE=18651 Frame 16281: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18246, Len: 0 No. Time Source Destination Protocol Length Info 16282 213.617896 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16282: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18705, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16283 213.617929 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16272#5] rfb > xrl [ACK] Seq=146585 Ack=18246 Win=64354 Len=0 SLE=18678 SRE=18732 SLE=18597 SRE=18651 Frame 16283: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18246, Len: 0 No. Time Source Destination Protocol Length Info 16284 213.617974 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 16284: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18246, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16285 213.621905 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 16285: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18408, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16286 213.621952 192.168.10.185 192.168.10.142 TCP 82 rfb > xrl [ACK] Seq=146585 Ack=18273 Win=64327 Len=0 SLE=18354 SRE=18435 SLE=18678 SRE=18732 SLE=18597 SRE=18651 Frame 16286: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18273, Len: 0 No. Time Source Destination Protocol Length Info 16287 213.621994 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 16287: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18570, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16288 213.622024 192.168.10.185 192.168.10.142 TCP 82 [TCP Dup ACK 16286#1] rfb > xrl [ACK] Seq=146585 Ack=18273 Win=64327 Len=0 SLE=18543 SRE=18597 SLE=18354 SRE=18435 SLE=18678 SRE=18732 Frame 16288: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18273, Len: 0 No. Time Source Destination Protocol Length Info 16289 213.625898 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16289: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18732, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16290 213.625930 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16286#2] rfb > xrl [ACK] Seq=146585 Ack=18273 Win=64327 Len=0 SLE=18678 SRE=18759 SLE=18543 SRE=18597 Frame 16290: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18273, Len: 0 No. Time Source Destination Protocol Length Info 16291 213.663901 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 16291: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18273, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16292 213.663945 192.168.10.185 192.168.10.142 TCP 74 rfb > xrl [ACK] Seq=146585 Ack=18435 Win=65535 Len=0 SLE=18678 SRE=18759 SLE=18543 SRE=18597 Frame 16292: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18435, Len: 0 No. Time Source Destination Protocol Length Info 16293 213.668488 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 16293: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18435, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16294 213.668536 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 16294: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18651, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16295 213.668566 192.168.10.185 192.168.10.142 TCP 74 rfb > xrl [ACK] Seq=146585 Ack=18462 Win=65508 Len=0 SLE=18597 SRE=18678 SLE=18543 SRE=18597 Frame 16295: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18462, Len: 0 No. Time Source Destination Protocol Length Info 16296 213.703842 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16296: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18759, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16297 213.703881 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16295#1] rfb > xrl [ACK] Seq=146585 Ack=18462 Win=65508 Len=0 SLE=18678 SRE=18786 SLE=18543 SRE=18597 Frame 16297: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18462, Len: 0 No. Time Source Destination Protocol Length Info 16298 213.712068 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16298: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18786, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16299 213.712102 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16295#2] rfb > xrl [ACK] Seq=146585 Ack=18462 Win=65508 Len=0 SLE=18678 SRE=18813 SLE=18543 SRE=18597 Frame 16299: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18462, Len: 0 No. Time Source Destination Protocol Length Info 16300 213.739828 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 16300: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18462, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16301 213.744870 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16301: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18813, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16302 213.744905 192.168.10.185 192.168.10.142 TCP 74 rfb > xrl [ACK] Seq=146585 Ack=18489 Win=65481 Len=0 SLE=18678 SRE=18840 SLE=18543 SRE=18597 Frame 16302: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18489, Len: 0 No. Time Source Destination Protocol Length Info 16303 213.744948 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16303: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18840, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16304 213.744984 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16302#1] rfb > xrl [ACK] Seq=146585 Ack=18489 Win=65481 Len=0 SLE=18678 SRE=18867 SLE=18543 SRE=18597 Frame 16304: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18489, Len: 0 No. Time Source Destination Protocol Length Info 16305 213.752975 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16305: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18867, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16306 213.753011 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16302#2] rfb > xrl [ACK] Seq=146585 Ack=18489 Win=65481 Len=0 SLE=18678 SRE=18894 SLE=18543 SRE=18597 Frame 16306: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18489, Len: 0 No. Time Source Destination Protocol Length Info 16307 213.759848 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16307: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18894, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16308 213.759881 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16302#3] rfb > xrl [ACK] Seq=146585 Ack=18489 Win=65481 Len=0 SLE=18678 SRE=18921 SLE=18543 SRE=18597 Frame 16308: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18489, Len: 0 No. Time Source Destination Protocol Length Info 16309 213.767536 192.168.10.104 192.168.10.246 NBNS 110 Refresh NB BAIMOBILEPC2<00> Frame 16309: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 16310 213.782076 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16310: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18921, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16311 213.782122 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16302#4] rfb > xrl [ACK] Seq=146585 Ack=18489 Win=65481 Len=0 SLE=18678 SRE=18948 SLE=18543 SRE=18597 Frame 16311: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18489, Len: 0 No. Time Source Destination Protocol Length Info 16312 213.786074 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 16312: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18489, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16313 213.786117 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16313: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18948, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16314 213.786151 192.168.10.185 192.168.10.142 TCP 74 rfb > xrl [ACK] Seq=146585 Ack=18516 Win=65454 Len=0 SLE=18678 SRE=18975 SLE=18543 SRE=18597 Frame 16314: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18516, Len: 0 No. Time Source Destination Protocol Length Info 16315 213.786191 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16315: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18975, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16316 213.786219 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16314#1] rfb > xrl [ACK] Seq=146585 Ack=18516 Win=65454 Len=0 SLE=18678 SRE=19002 SLE=18543 SRE=18597 Frame 16316: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18516, Len: 0 No. Time Source Destination Protocol Length Info 16317 213.797848 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16317: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19002, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16318 213.797893 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16314#2] rfb > xrl [ACK] Seq=146585 Ack=18516 Win=65454 Len=0 SLE=18678 SRE=19029 SLE=18543 SRE=18597 Frame 16318: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18516, Len: 0 No. Time Source Destination Protocol Length Info 16319 213.802944 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16319: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19029, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16320 213.802979 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16314#3] rfb > xrl [ACK] Seq=146585 Ack=18516 Win=65454 Len=0 SLE=18678 SRE=19056 SLE=18543 SRE=18597 Frame 16320: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 18516, Len: 0 No. Time Source Destination Protocol Length Info 16321 213.819983 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 16321: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 18516, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16322 213.820021 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=146585 Ack=19056 Win=64914 Len=0 Frame 16322: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 19056, Len: 0 No. Time Source Destination Protocol Length Info 16323 213.841334 208.67.222.222 192.168.10.220 DNS 86 Standard query response, Server failure Frame 16323: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 64883 (64883) Domain Name System (response) No. Time Source Destination Protocol Length Info 16324 213.841404 192.168.10.220 208.67.220.220 DNS 86 Standard query PTR 14.62.177.122.in-addr.arpa Frame 16324: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.220.220 (208.67.220.220) User Datagram Protocol, Src Port: 64883 (64883), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16325 213.854308 65.32.1.65 192.168.10.246 DNS 133 Standard query response PTR 118-160-72-177.dynamic.hinet.net Frame 16325: 133 bytes on wire (1064 bits), 133 bytes captured (1064 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 56079 (56079) Domain Name System (response) No. Time Source Destination Protocol Length Info 16326 213.899516 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 16326: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 16327 213.899557 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 16327: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 16328 213.962025 192.168.10.246 65.32.1.65 DNS 87 Standard query PTR 192.118.229.84.in-addr.arpa Frame 16328: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 58952 (58952), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16329 214.123132 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16329: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19056, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16330 214.124110 192.168.10.185 192.168.10.142 VNC 290 Authentication result Frame 16330: 290 bytes on wire (2320 bits), 290 bytes captured (2320 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146585, Ack: 19083, Len: 236 Virtual Network Computing No. Time Source Destination Protocol Length Info 16331 214.128122 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16331: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19083, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16332 214.145079 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16332: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19110, Ack: 146585, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16333 214.145115 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=146821 Ack=19137 Win=64833 Len=0 Frame 16333: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146821, Ack: 19137, Len: 0 No. Time Source Destination Protocol Length Info 16334 214.154664 192.168.10.142 192.168.10.185 VNC 86 [TCP Previous segment lost] Authentication result Frame 16334: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19164, Ack: 146821, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 16335 214.154696 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16333#1] rfb > xrl [ACK] Seq=146821 Ack=19137 Win=64833 Len=0 SLE=19164 SRE=19196 Frame 16335: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146821, Ack: 19137, Len: 0 No. Time Source Destination Protocol Length Info 16336 214.154741 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16336: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19196, Ack: 146821, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16337 214.154769 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16333#2] rfb > xrl [ACK] Seq=146821 Ack=19137 Win=64833 Len=0 SLE=19164 SRE=19223 Frame 16337: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146821, Ack: 19137, Len: 0 No. Time Source Destination Protocol Length Info 16338 214.161913 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16338: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19223, Ack: 146821, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16339 214.161946 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16333#3] rfb > xrl [ACK] Seq=146821 Ack=19137 Win=64833 Len=0 SLE=19164 SRE=19250 Frame 16339: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146821, Ack: 19137, Len: 0 No. Time Source Destination Protocol Length Info 16340 214.167943 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16340: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19250, Ack: 146821, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16341 214.167976 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16333#4] rfb > xrl [ACK] Seq=146821 Ack=19137 Win=64833 Len=0 SLE=19164 SRE=19277 Frame 16341: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146821, Ack: 19137, Len: 0 No. Time Source Destination Protocol Length Info 16342 214.175424 65.32.1.65 192.168.10.246 DNS 133 Standard query response PTR IGLD-84-229-118-192.inter.net.il Frame 16342: 133 bytes on wire (1064 bits), 133 bytes captured (1064 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 58952 (58952) Domain Name System (response) No. Time Source Destination Protocol Length Info 16343 214.177919 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16343: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19277, Ack: 146821, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16344 214.177951 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16333#5] rfb > xrl [ACK] Seq=146821 Ack=19137 Win=64833 Len=0 SLE=19164 SRE=19304 Frame 16344: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146821, Ack: 19137, Len: 0 No. Time Source Destination Protocol Length Info 16345 214.181908 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 16345: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19137, Ack: 146821, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16346 214.181941 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=146821 Ack=19304 Win=64666 Len=0 Frame 16346: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146821, Ack: 19304, Len: 0 No. Time Source Destination Protocol Length Info 16347 214.184826 192.168.10.185 192.168.10.142 VNC 386 Authentication result Frame 16347: 386 bytes on wire (3088 bits), 386 bytes captured (3088 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 146821, Ack: 19304, Len: 332 Virtual Network Computing No. Time Source Destination Protocol Length Info 16348 214.192105 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16348: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19304, Ack: 146821, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16349 214.204320 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16349: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19331, Ack: 146821, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16350 214.204369 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=147153 Ack=19358 Win=64612 Len=0 Frame 16350: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 147153, Ack: 19358, Len: 0 No. Time Source Destination Protocol Length Info 16351 214.209273 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16351: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19358, Ack: 147153, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16352 214.213892 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 16352: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19385, Ack: 147153, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 16353 214.213925 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=147153 Ack=19417 Win=64553 Len=0 Frame 16353: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 147153, Ack: 19417, Len: 0 No. Time Source Destination Protocol Length Info 16354 214.217906 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16354: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19417, Ack: 147153, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16355 214.234298 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16355: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19444, Ack: 147153, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16356 214.234333 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=147153 Ack=19471 Win=64499 Len=0 Frame 16356: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 147153, Ack: 19471, Len: 0 No. Time Source Destination Protocol Length Info 16357 214.238065 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16357: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19471, Ack: 147153, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16358 214.242742 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16358: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19498, Ack: 147153, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16359 214.242775 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=147153 Ack=19525 Win=64445 Len=0 Frame 16359: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 147153, Ack: 19525, Len: 0 No. Time Source Destination Protocol Length Info 16360 214.243435 192.168.10.185 192.168.10.142 VNC 290 Authentication result Frame 16360: 290 bytes on wire (2320 bits), 290 bytes captured (2320 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 147153, Ack: 19525, Len: 236 Virtual Network Computing No. Time Source Destination Protocol Length Info 16361 214.259907 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16361: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19525, Ack: 147153, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16362 214.265521 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16362: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19552, Ack: 147153, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16363 214.265556 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=147389 Ack=19579 Win=64391 Len=0 Frame 16363: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 147389, Ack: 19579, Len: 0 No. Time Source Destination Protocol Length Info 16364 214.265596 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16364: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19579, Ack: 147153, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16365 214.268666 192.168.10.46 192.168.10.245 Syslog 215 LOCAL4.WARNING: Oct 03 2011 19:18:34 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n Frame 16365: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:18:34 ciscoasa : %ASA-4-106023: Deny udp src dmz1:HuddleRoomPC/137 dst inside:192.168.10.13/137 by access-group "dmz_access_in" [0x5e2456ac, 0x2632c102]\n No. Time Source Destination Protocol Length Info 16366 214.273877 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 16366: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19606, Ack: 147389, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 16367 214.273910 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=147389 Ack=19638 Win=64332 Len=0 Frame 16367: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 147389, Ack: 19638, Len: 0 No. Time Source Destination Protocol Length Info 16368 214.273952 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16368: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19638, Ack: 147389, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16369 214.274531 192.168.10.185 192.168.10.142 VNC 386 Authentication result Frame 16369: 386 bytes on wire (3088 bits), 386 bytes captured (3088 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 147389, Ack: 19665, Len: 332 Virtual Network Computing No. Time Source Destination Protocol Length Info 16370 214.281394 192.168.10.246 65.32.1.65 DNS 87 Standard query PTR 252.178.191.75.in-addr.arpa Frame 16370: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 63190 (63190), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16371 214.281907 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16371: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19665, Ack: 147389, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16372 214.295271 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16372: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19692, Ack: 147389, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16373 214.295305 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=147721 Ack=19719 Win=65535 Len=0 Frame 16373: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 147721, Ack: 19719, Len: 0 No. Time Source Destination Protocol Length Info 16374 214.300015 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16374: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19719, Ack: 147389, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16375 214.304154 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 16375: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19746, Ack: 147721, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 16376 214.304188 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=147721 Ack=19778 Win=65476 Len=0 Frame 16376: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 147721, Ack: 19778, Len: 0 No. Time Source Destination Protocol Length Info 16377 214.315069 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16377: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19778, Ack: 147721, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16378 214.320562 192.168.10.142 192.168.10.220 DNS 83 Standard query A ksn1.kaspersky-labs.com Frame 16378: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: sacred (1118), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16379 214.320679 192.168.10.220 192.168.10.142 DNS 515 Standard query response A 79.141.216.19 A 79.141.216.13 A 130.117.190.198 A 130.117.190.195 A 130.117.190.201 A 130.117.190.204 A 130.117.190.207 A 130.117.190.210 A 130.117.190.213 A 130.117.190.216 A 117.79.92.35 A 117.79.92.38 A 117.79.92.41 A 117.79.92.44 A 202.177.216.227 A 202.177.216.230 A 202.177.216.233 A 202.177.216.236 A 38.113.165.68 A 38.113.165.71 A 38.113.165.74 A 38.113.165.77 A 38.113.165.80 A 38.113.165.83 A 38.113.165.86 A 79.141.216.15 A 79.141.216.17 Frame 16379: 515 bytes on wire (4120 bits), 515 bytes captured (4120 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.142 (192.168.10.142) User Datagram Protocol, Src Port: domain (53), Dst Port: sacred (1118) Domain Name System (response) No. Time Source Destination Protocol Length Info 16380 214.324476 192.168.10.142 192.168.10.220 DNS 83 Standard query A ksn2.kaspersky-labs.com Frame 16380: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: bnetgame (1119), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16381 214.324556 192.168.10.220 208.67.222.222 DNS 83 Standard query A ksn2.kaspersky-labs.com Frame 16381: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 55114 (55114), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16382 214.328071 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16382: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19805, Ack: 147721, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16383 214.328103 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=147721 Ack=19832 Win=65422 Len=0 Frame 16383: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 147721, Ack: 19832, Len: 0 No. Time Source Destination Protocol Length Info 16384 214.328143 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16384: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19832, Ack: 147721, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16385 214.336008 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16385: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19859, Ack: 147721, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16386 214.336040 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=147721 Ack=19886 Win=65368 Len=0 Frame 16386: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 147721, Ack: 19886, Len: 0 No. Time Source Destination Protocol Length Info 16387 214.341048 65.32.1.65 192.168.10.246 DNS 134 Standard query response PTR cpe-075-191-178-252.nc.res.rr.com Frame 16387: 134 bytes on wire (1072 bits), 134 bytes captured (1072 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 63190 (63190) Domain Name System (response) No. Time Source Destination Protocol Length Info 16388 214.341954 208.67.222.222 192.168.10.220 DNS 355 Standard query response A 79.141.216.65 A 79.141.216.66 A 79.141.216.67 A 79.141.216.68 A 130.117.190.198 A 130.117.190.201 A 117.79.92.35 A 117.79.92.38 A 202.177.216.227 A 202.177.216.230 A 38.113.165.68 A 38.113.165.71 A 38.113.165.74 A 79.141.216.13 A 130.117.190.195 A 79.141.216.15 A 79.141.216.64 Frame 16388: 355 bytes on wire (2840 bits), 355 bytes captured (2840 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 55114 (55114) Domain Name System (response) No. Time Source Destination Protocol Length Info 16389 214.342053 192.168.10.220 192.168.10.142 DNS 355 Standard query response A 79.141.216.65 A 79.141.216.66 A 79.141.216.67 A 79.141.216.68 A 130.117.190.198 A 130.117.190.201 A 117.79.92.35 A 117.79.92.38 A 202.177.216.227 A 202.177.216.230 A 38.113.165.68 A 38.113.165.71 A 38.113.165.74 A 79.141.216.13 A 130.117.190.195 A 79.141.216.15 A 79.141.216.64 Frame 16389: 355 bytes on wire (2840 bits), 355 bytes captured (2840 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.142 (192.168.10.142) User Datagram Protocol, Src Port: domain (53), Dst Port: bnetgame (1119) Domain Name System (response) No. Time Source Destination Protocol Length Info 16390 214.354291 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16390: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19886, Ack: 147721, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16391 214.360460 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16391: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19913, Ack: 147721, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16392 214.360498 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=147721 Ack=19940 Win=65314 Len=0 Frame 16392: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 147721, Ack: 19940, Len: 0 No. Time Source Destination Protocol Length Info 16393 214.361004 192.168.10.246 65.32.1.65 DNS 85 Standard query PTR 93.68.89.201.in-addr.arpa Frame 16393: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 59561 (59561), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16394 214.364490 192.168.10.142 192.168.10.220 DNS 83 Standard query AAAA ksn2.kaspersky-labs.com Frame 16394: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: rmpp (1121), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16395 214.364567 192.168.10.220 208.67.222.222 DNS 83 Standard query AAAA ksn2.kaspersky-labs.com Frame 16395: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 52994 (52994), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16396 214.371962 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16396: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19940, Ack: 147721, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16397 214.382158 208.67.222.222 192.168.10.220 DNS 83 Standard query response Frame 16397: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 52994 (52994) Domain Name System (response) No. Time Source Destination Protocol Length Info 16398 214.382241 192.168.10.220 192.168.10.142 DNS 83 Standard query response Frame 16398: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.142 (192.168.10.142) User Datagram Protocol, Src Port: domain (53), Dst Port: rmpp (1121) Domain Name System (response) No. Time Source Destination Protocol Length Info 16399 214.388262 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16399: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19967, Ack: 147721, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16400 214.388296 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=147721 Ack=19994 Win=65260 Len=0 Frame 16400: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 147721, Ack: 19994, Len: 0 No. Time Source Destination Protocol Length Info 16401 214.392092 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16401: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 19994, Ack: 147721, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16402 214.392164 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16402: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20021, Ack: 147721, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16403 214.392194 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=147721 Ack=20048 Win=65206 Len=0 Frame 16403: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 147721, Ack: 20048, Len: 0 No. Time Source Destination Protocol Length Info 16404 214.400573 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16404: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20048, Ack: 147721, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16405 214.408003 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16405: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20075, Ack: 147721, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16406 214.408043 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=147721 Ack=20102 Win=65152 Len=0 Frame 16406: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 147721, Ack: 20102, Len: 0 No. Time Source Destination Protocol Length Info 16407 214.518643 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 850401536, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 16407: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16408 214.518666 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 850401536, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 16408: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16409 214.518679 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 850401536, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 16409: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16410 214.518692 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 850401536, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 16410: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16411 214.536694 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2719482112, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 16411: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16412 214.536712 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2719482112, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 16412: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16413 214.536724 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2719482112, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 16413: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16414 214.536737 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2719482112, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 16414: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16415 214.548698 192.168.10.142 192.168.10.220 DNS 83 Standard query AAAA ksn3.kaspersky-labs.com Frame 16415: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: murray (1123), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16416 214.548764 192.168.10.220 208.67.222.222 DNS 83 Standard query AAAA ksn3.kaspersky-labs.com Frame 16416: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 53983 (53983), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16417 214.566516 208.67.222.222 192.168.10.220 DNS 83 Standard query response Frame 16417: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 53983 (53983) Domain Name System (response) No. Time Source Destination Protocol Length Info 16418 214.566586 192.168.10.220 192.168.10.142 DNS 83 Standard query response Frame 16418: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.142 (192.168.10.142) User Datagram Protocol, Src Port: domain (53), Dst Port: murray (1123) Domain Name System (response) No. Time Source Destination Protocol Length Info 16419 214.602368 192.168.10.142 192.168.10.220 DNS 83 Standard query A ksn3.kaspersky-labs.com Frame 16419: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: hpvmmagent (1125), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16420 214.602463 192.168.10.220 208.67.222.222 DNS 83 Standard query A ksn3.kaspersky-labs.com Frame 16420: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 51276 (51276), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16421 214.620368 208.67.222.222 192.168.10.220 DNS 323 Standard query response A 79.141.216.19 A 130.117.190.204 A 130.117.190.207 A 130.117.190.210 A 130.117.190.213 A 130.117.190.216 A 117.79.92.41 A 117.79.92.44 A 202.177.216.233 A 202.177.216.236 A 38.113.165.77 A 38.113.165.80 A 38.113.165.83 A 38.113.165.86 A 79.141.216.17 Frame 16421: 323 bytes on wire (2584 bits), 323 bytes captured (2584 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 51276 (51276) Domain Name System (response) No. Time Source Destination Protocol Length Info 16422 214.620455 192.168.10.220 192.168.10.142 DNS 323 Standard query response A 79.141.216.19 A 130.117.190.204 A 130.117.190.207 A 130.117.190.210 A 130.117.190.213 A 130.117.190.216 A 117.79.92.41 A 117.79.92.44 A 202.177.216.233 A 202.177.216.236 A 38.113.165.77 A 38.113.165.80 A 38.113.165.83 A 38.113.165.86 A 79.141.216.17 Frame 16422: 323 bytes on wire (2584 bits), 323 bytes captured (2584 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.142 (192.168.10.142) User Datagram Protocol, Src Port: domain (53), Dst Port: hpvmmagent (1125) Domain Name System (response) No. Time Source Destination Protocol Length Info 16423 214.647297 65.32.1.65 192.168.10.246 DNS 145 Standard query response PTR 201-89-68-93.ctame700.dsl.brasiltelecom.net.br Frame 16423: 145 bytes on wire (1160 bits), 145 bytes captured (1160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 59561 (59561) Domain Name System (response) No. Time Source Destination Protocol Length Info 16424 214.648425 192.168.10.142 192.168.10.220 DNS 83 Standard query AAAA ksn3.kaspersky-labs.com Frame 16424: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: hpvmmdata (1126), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16425 214.648490 192.168.10.220 208.67.222.222 DNS 83 Standard query AAAA ksn3.kaspersky-labs.com Frame 16425: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 59594 (59594), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16426 214.666201 208.67.222.222 192.168.10.220 DNS 83 Standard query response Frame 16426: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 59594 (59594) Domain Name System (response) No. Time Source Destination Protocol Length Info 16427 214.666271 192.168.10.220 192.168.10.142 DNS 83 Standard query response Frame 16427: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.142 (192.168.10.142) User Datagram Protocol, Src Port: domain (53), Dst Port: hpvmmdata (1126) Domain Name System (response) No. Time Source Destination Protocol Length Info 16428 214.667140 192.168.10.246 65.32.1.65 DNS 85 Standard query PTR 6.178.178.94.in-addr.arpa Frame 16428: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 61069 (61069), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16429 214.860440 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-00.geo.kaspersky.com Frame 16429: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 50262 (50262), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16430 214.868418 65.32.1.65 192.168.10.246 DNS 127 Standard query response PTR 6-178-178-94.pool.ukrtel.net Frame 16430: 127 bytes on wire (1016 bits), 127 bytes captured (1016 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 61069 (61069) Domain Name System (response) No. Time Source Destination Protocol Length Info 16431 214.997129 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 16130#1] 9428 > smtp [ACK] Seq=605086 Ack=8905 Win=46468 Len=0 Frame 16431: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 605086, Ack: 8905, Len: 0 No. Time Source Destination Protocol Length Info 16432 214.997164 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=8905 Ack=604878 Win=0 Len=0 Frame 16432: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8905, Ack: 604878, Len: 0 No. Time Source Destination Protocol Length Info 16433 215.002149 208.67.220.220 192.168.10.220 DNS 152 Standard query response PTR ABTS-North-Dynamic-014.62.177.122.airtelbroadband.in Frame 16433: 152 bytes on wire (1216 bits), 152 bytes captured (1216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.220.220 (208.67.220.220), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 64883 (64883) Domain Name System (response) No. Time Source Destination Protocol Length Info 16434 215.007110 192.168.10.246 65.32.1.65 DNS 87 Standard query PTR 30.130.117.115.in-addr.arpa Frame 16434: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 55289 (55289), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16435 215.044899 192.168.10.207 206.225.164.186 SMTP 558 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 16435: 558 bytes on wire (4464 bits), 558 bytes captured (4464 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 14743, Ack: 1097529, Len: 504 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16436 215.044934 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1098657 Ack=15247 Win=46384 Len=0 Frame 16436: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1098657, Ack: 15247, Len: 0 No. Time Source Destination Protocol Length Info 16437 215.044965 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=15247 Ack=1097529 Win=0 Len=0 Frame 16437: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15247, Ack: 1097529, Len: 0 No. Time Source Destination Protocol Length Info 16438 215.098948 192.168.10.240 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 16438: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.240 (192.168.10.240), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 16439 215.099180 192.168.10.240 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 16439: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.240 (192.168.10.240), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 16440 215.144179 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16440: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20102, Ack: 147721, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16441 215.152303 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16441: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20129, Ack: 147721, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16442 215.152337 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=147721 Ack=20156 Win=65098 Len=0 Frame 16442: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 147721, Ack: 20156, Len: 0 No. Time Source Destination Protocol Length Info 16443 215.194235 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 16443: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 16444 215.197332 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 16444: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20264, Ack: 147721, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16445 215.197366 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16442#1] rfb > xrl [ACK] Seq=147721 Ack=20156 Win=65098 Len=0 SLE=20264 SRE=20291 Frame 16445: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 147721, Ack: 20156, Len: 0 No. Time Source Destination Protocol Length Info 16446 215.211997 192.168.10.185 192.168.10.142 VNC 410 Authentication result Frame 16446: 410 bytes on wire (3280 bits), 410 bytes captured (3280 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 147721, Ack: 20156, Len: 356 Virtual Network Computing No. Time Source Destination Protocol Length Info 16447 215.226339 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 16447: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20372, Ack: 147721, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16448 215.226376 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16446#1] rfb > xrl [ACK] Seq=148077 Ack=20156 Win=65098 Len=0 SLE=20372 SRE=20399 SLE=20264 SRE=20291 Frame 16448: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148077, Ack: 20156, Len: 0 No. Time Source Destination Protocol Length Info 16449 215.242259 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 16449: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20458, Ack: 148077, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16450 215.242293 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16446#2] rfb > xrl [ACK] Seq=148077 Ack=20156 Win=65098 Len=0 SLE=20458 SRE=20485 SLE=20372 SRE=20399 Frame 16450: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148077, Ack: 20156, Len: 0 No. Time Source Destination Protocol Length Info 16451 215.254326 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 16451: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20156, Ack: 148077, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16452 215.254389 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 16452: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20291, Ack: 148077, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16453 215.254420 192.168.10.185 192.168.10.142 TCP 82 rfb > xrl [ACK] Seq=148077 Ack=20183 Win=65071 Len=0 SLE=20264 SRE=20318 SLE=20458 SRE=20485 SLE=20372 SRE=20399 Frame 16453: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148077, Ack: 20183, Len: 0 No. Time Source Destination Protocol Length Info 16454 215.258116 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 16454: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20512, Ack: 148077, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16455 215.258149 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16453#1] rfb > xrl [ACK] Seq=148077 Ack=20183 Win=65071 Len=0 SLE=20512 SRE=20539 SLE=20264 SRE=20318 Frame 16455: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148077, Ack: 20183, Len: 0 No. Time Source Destination Protocol Length Info 16456 215.267524 192.168.10.104 192.168.10.246 NBNS 110 Refresh NB BAIMOBILEPC2<00> Frame 16456: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 16457 215.296250 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.222? Tell 192.168.10.185 Frame 16457: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16458 215.296283 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.222? Tell 192.168.10.185 Frame 16458: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16459 215.315597 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 16459: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 16460 215.381813 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 16460: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 16461 215.381846 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 16461: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 16462 215.428044 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=8905 Ack=604878 Win=47803 Len=0 Frame 16462: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8905, Ack: 604878, Len: 0 No. Time Source Destination Protocol Length Info 16463 215.428065 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 16462#1] smtp > 9428 [ACK] Seq=8905 Ack=604878 Win=47803 Len=0 Frame 16463: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8905, Ack: 604878, Len: 0 No. Time Source Destination Protocol Length Info 16464 215.428086 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16464: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 605086, Ack: 8905, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16465 215.428105 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16465: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 606466, Ack: 8905, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16466 215.428122 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16466: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 607846, Ack: 8905, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16467 215.428141 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16467: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 609226, Ack: 8905, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16468 215.428158 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16468: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 610606, Ack: 8905, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16469 215.428174 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16469: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 611986, Ack: 8905, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16470 215.428193 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16470: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 613366, Ack: 8905, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16471 215.428214 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16471: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 614746, Ack: 8905, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16472 215.428236 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 16462#2] smtp > 9428 [ACK] Seq=8905 Ack=604878 Win=47803 Len=0 Frame 16472: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8905, Ack: 604878, Len: 0 No. Time Source Destination Protocol Length Info 16473 215.428253 192.168.10.207 206.225.164.188 SMTP 222 S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 16473: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 8905, Ack: 604878, Len: 168 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16474 215.428313 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=616126 Ack=9073 Win=46384 Len=0 Frame 16474: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 616126, Ack: 9073, Len: 0 No. Time Source Destination Protocol Length Info 16475 215.428332 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 16473#1] smtp > 9428 [ACK] Seq=9073 Ack=604878 Win=47803 Len=0 Frame 16475: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 604878, Len: 0 No. Time Source Destination Protocol Length Info 16476 215.428350 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 16473#2] smtp > 9428 [ACK] Seq=9073 Ack=604878 Win=47803 Len=0 Frame 16476: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 604878, Len: 0 No. Time Source Destination Protocol Length Info 16477 215.428367 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 16473#3] smtp > 9428 [ACK] Seq=9073 Ack=604878 Win=47803 Len=0 Frame 16477: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 604878, Len: 0 No. Time Source Destination Protocol Length Info 16478 215.428383 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 16473#4] smtp > 9428 [ACK] Seq=9073 Ack=604878 Win=47803 Len=0 Frame 16478: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 604878, Len: 0 No. Time Source Destination Protocol Length Info 16479 215.428401 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 16473#5] smtp > 9428 [ACK] Seq=9073 Ack=604878 Win=47803 Len=0 Frame 16479: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 604878, Len: 0 No. Time Source Destination Protocol Length Info 16480 215.428417 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 16473#6] smtp > 9428 [ACK] Seq=9073 Ack=604878 Win=47803 Len=0 Frame 16480: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 604878, Len: 0 No. Time Source Destination Protocol Length Info 16481 215.428443 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 16473#7] smtp > 9428 [ACK] Seq=9073 Ack=604878 Win=47803 Len=0 Frame 16481: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 604878, Len: 0 No. Time Source Destination Protocol Length Info 16482 215.428461 206.225.164.188 192.168.10.207 SMTP 262 [TCP Fast Retransmission] C: DATA fragment, 208 bytes Frame 16482: 262 bytes on wire (2096 bits), 262 bytes captured (2096 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 604878, Ack: 9073, Len: 208 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16483 215.428477 206.225.164.188 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 16483: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 605086, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16484 215.428494 206.225.164.188 192.168.10.207 SMTP 172 C: DATA fragment, 118 bytes Frame 16484: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 616126, Ack: 9073, Len: 118 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16485 215.428512 206.225.164.188 192.168.10.207 SMTP 196 C: DATA fragment, 142 bytes Frame 16485: 196 bytes on wire (1568 bits), 196 bytes captured (1568 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 616244, Ack: 9073, Len: 142 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16486 215.428528 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16486: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 616386, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16487 215.428546 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16487: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 617766, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16488 215.428589 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9073 Ack=616126 Win=36555 Len=0 Frame 16488: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 616126, Len: 0 No. Time Source Destination Protocol Length Info 16489 215.428608 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 16488#1] smtp > 9428 [ACK] Seq=9073 Ack=616126 Win=36555 Len=0 Frame 16489: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 616126, Len: 0 No. Time Source Destination Protocol Length Info 16490 215.428624 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9073 Ack=619146 Win=33535 Len=0 Frame 16490: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 619146, Len: 0 No. Time Source Destination Protocol Length Info 16491 215.428662 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16491: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 619146, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16492 215.428704 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16492: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 620526, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16493 215.428724 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16493: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 621906, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16494 215.428746 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16494: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 623286, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16495 215.428857 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9073 Ack=621906 Win=30775 Len=0 Frame 16495: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 621906, Len: 0 No. Time Source Destination Protocol Length Info 16496 215.428875 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9073 Ack=624666 Win=28015 Len=0 Frame 16496: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 624666, Len: 0 No. Time Source Destination Protocol Length Info 16497 215.428904 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16497: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 624666, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16498 215.428923 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16498: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 626046, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16499 215.428955 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16499: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 627426, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16500 215.428973 206.225.164.188 192.168.10.207 SMTP 1292 C: DATA fragment, 1238 bytes Frame 16500: 1292 bytes on wire (10336 bits), 1292 bytes captured (10336 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 628806, Ack: 9073, Len: 1238 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16501 215.429010 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16501: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 630044, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16502 215.429028 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9073 Ack=627426 Win=25255 Len=0 Frame 16502: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 627426, Len: 0 No. Time Source Destination Protocol Length Info 16503 215.429050 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9073 Ack=630044 Win=22637 Len=0 Frame 16503: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 630044, Len: 0 No. Time Source Destination Protocol Length Info 16504 215.429067 206.225.164.188 192.168.10.207 SMTP 583 C: DATA fragment, 529 bytes Frame 16504: 583 bytes on wire (4664 bits), 583 bytes captured (4664 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 631424, Ack: 9073, Len: 529 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16505 215.429085 206.225.164.188 192.168.10.207 SMTP 884 C: DATA fragment, 830 bytes Frame 16505: 884 bytes on wire (7072 bits), 884 bytes captured (7072 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 631953, Ack: 9073, Len: 830 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16506 215.429104 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16506: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 632783, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16507 215.429136 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16507: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 634163, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16508 215.429154 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16508: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 635543, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16509 215.429171 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9073 Ack=632783 Win=19898 Len=0 Frame 16509: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 632783, Len: 0 No. Time Source Destination Protocol Length Info 16510 215.429231 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9073 Ack=635543 Win=17138 Len=0 Frame 16510: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 635543, Len: 0 No. Time Source Destination Protocol Length Info 16511 215.429250 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16511: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 636923, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16512 215.429267 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16512: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 638303, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16513 215.429287 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16513: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 639683, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16514 215.429309 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16514: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 641063, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16515 215.429326 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9073 Ack=638303 Win=14378 Len=0 Frame 16515: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 638303, Len: 0 No. Time Source Destination Protocol Length Info 16516 215.429408 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16516: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 642443, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16517 215.429426 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16517: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 643823, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16518 215.429443 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16518: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 645203, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16519 215.429460 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9073 Ack=641063 Win=11618 Len=0 Frame 16519: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 641063, Len: 0 No. Time Source Destination Protocol Length Info 16520 215.429482 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16520: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 646583, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16521 215.429499 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9073 Ack=646583 Win=6098 Len=0 Frame 16521: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 646583, Len: 0 No. Time Source Destination Protocol Length Info 16522 215.429517 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16522: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 647963, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16523 215.429556 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16523: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 649343, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16524 215.429575 206.225.164.188 192.168.10.207 SMTP 522 C: DATA fragment, 468 bytes Frame 16524: 522 bytes on wire (4176 bits), 522 bytes captured (4176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 650723, Ack: 9073, Len: 468 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16525 215.429593 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16525: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 651191, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16526 215.429634 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16526: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 652571, Ack: 9073, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16527 215.429652 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9073 Ack=649343 Win=3338 Len=0 Frame 16527: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 649343, Len: 0 No. Time Source Destination Protocol Length Info 16528 215.429674 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9073 Ack=651191 Win=1490 Len=0 Frame 16528: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 651191, Len: 0 No. Time Source Destination Protocol Length Info 16529 215.429714 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=9073 Ack=652681 Win=0 Len=0 Frame 16529: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 652681, Len: 0 No. Time Source Destination Protocol Length Info 16530 215.443827 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 16530: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 16531 215.534273 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 867178752, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 16531: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16532 215.534289 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 867178752, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 16532: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16533 215.534297 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 867178752, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 16533: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16534 215.534305 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 867178752, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 16534: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16535 215.552275 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2736259328, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 16535: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16536 215.552295 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2736259328, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 16536: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16537 215.552307 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2736259328, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 16537: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16538 215.552319 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2736259328, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 16538: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16539 215.552414 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16539: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20539, Ack: 148077, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16540 215.552445 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16453#2] rfb > xrl [ACK] Seq=148077 Ack=20183 Win=65071 Len=0 SLE=20512 SRE=20566 SLE=20264 SRE=20318 Frame 16540: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148077, Ack: 20183, Len: 0 No. Time Source Destination Protocol Length Info 16541 215.566248 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 16541: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 16542 215.577111 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16542: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20566, Ack: 148077, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16543 215.577146 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16453#3] rfb > xrl [ACK] Seq=148077 Ack=20183 Win=65071 Len=0 SLE=20512 SRE=20593 SLE=20264 SRE=20318 Frame 16543: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148077, Ack: 20183, Len: 0 No. Time Source Destination Protocol Length Info 16544 215.584422 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 16544: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20183, Ack: 148077, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16545 215.588408 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 16545: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20318, Ack: 148077, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16546 215.588437 192.168.10.185 192.168.10.142 TCP 82 rfb > xrl [ACK] Seq=148077 Ack=20210 Win=65044 Len=0 SLE=20264 SRE=20345 SLE=20512 SRE=20593 SLE=20264 SRE=20318 Frame 16546: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148077, Ack: 20210, Len: 0 No. Time Source Destination Protocol Length Info 16547 215.588524 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 16547: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20399, Ack: 148077, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16548 215.588554 192.168.10.185 192.168.10.142 TCP 82 [TCP Dup ACK 16546#1] rfb > xrl [ACK] Seq=148077 Ack=20210 Win=65044 Len=0 SLE=20372 SRE=20426 SLE=20264 SRE=20345 SLE=20512 SRE=20593 Frame 16548: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148077, Ack: 20210, Len: 0 No. Time Source Destination Protocol Length Info 16549 215.600845 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 16549: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20485, Ack: 148077, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16550 215.600876 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16546#2] rfb > xrl [ACK] Seq=148077 Ack=20210 Win=65044 Len=0 SLE=20458 SRE=20512 SLE=20372 SRE=20426 Frame 16550: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148077, Ack: 20210, Len: 0 No. Time Source Destination Protocol Length Info 16551 215.606552 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16551: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20593, Ack: 148077, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16552 215.606582 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16546#3] rfb > xrl [ACK] Seq=148077 Ack=20210 Win=65044 Len=0 SLE=20512 SRE=20620 SLE=20372 SRE=20426 Frame 16552: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148077, Ack: 20210, Len: 0 No. Time Source Destination Protocol Length Info 16553 215.648535 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 16553: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20345, Ack: 148077, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16554 215.648558 192.168.10.185 192.168.10.142 TCP 82 [TCP Dup ACK 16546#4] rfb > xrl [ACK] Seq=148077 Ack=20210 Win=65044 Len=0 SLE=20264 SRE=20372 SLE=20458 SRE=20512 SLE=20372 SRE=20426 Frame 16554: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148077, Ack: 20210, Len: 0 No. Time Source Destination Protocol Length Info 16555 215.648594 192.168.10.142 192.168.10.185 VNC 86 [TCP Retransmission] Authentication result Frame 16555: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20426, Ack: 148077, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 16556 215.648617 192.168.10.185 192.168.10.142 TCP 82 [TCP Dup ACK 16546#5] rfb > xrl [ACK] Seq=148077 Ack=20210 Win=65044 Len=0 SLE=20372 SRE=20458 SLE=20458 SRE=20512 SLE=20264 SRE=20372 Frame 16556: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148077, Ack: 20210, Len: 0 No. Time Source Destination Protocol Length Info 16557 215.675513 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16557: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20620, Ack: 148077, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16558 215.675545 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16546#6] rfb > xrl [ACK] Seq=148077 Ack=20210 Win=65044 Len=0 SLE=20512 SRE=20647 SLE=20372 SRE=20458 Frame 16558: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148077, Ack: 20210, Len: 0 No. Time Source Destination Protocol Length Info 16559 215.702141 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16559: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20647, Ack: 148077, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16560 215.702174 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16546#7] rfb > xrl [ACK] Seq=148077 Ack=20210 Win=65044 Len=0 SLE=20512 SRE=20674 SLE=20264 SRE=20372 Frame 16560: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148077, Ack: 20210, Len: 0 No. Time Source Destination Protocol Length Info 16561 215.725593 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16561: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20674, Ack: 148077, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16562 215.725629 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16546#8] rfb > xrl [ACK] Seq=148077 Ack=20210 Win=65044 Len=0 SLE=20512 SRE=20701 SLE=20264 SRE=20372 Frame 16562: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148077, Ack: 20210, Len: 0 No. Time Source Destination Protocol Length Info 16563 215.860501 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-00.geo.kaspersky.com Frame 16563: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 50262 (50262), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16564 215.890281 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 16564: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 16565 215.890312 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 16565: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 16566 215.915006 192.168.10.1 192.168.10.245 Syslog 311 LOCAL1.INFO: Oct 3 19:47:53 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 176.44.103.137 7x.x.x.3 15216 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="ofassertion@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 16566: 311 bytes on wire (2488 bits), 311 bytes captured (2488 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:47:53 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 176.44.103.137 7x.x.x.3 15216 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 16567 215.987076 192.168.10.1 192.168.10.245 Syslog 310 LOCAL1.INFO: Oct 3 19:47:54 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 178.148.30.51 7x.x.x.3 2348 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="ecgsandstone@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 16567: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:47:54 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 178.148.30.51 7x.x.x.3 2348 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" No. Time Source Destination Protocol Length Info 16568 216.006826 192.168.10.220 208.67.222.222 DNS 87 Standard query PTR 30.130.117.115.in-addr.arpa Frame 16568: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 54162 (54162), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16569 216.082400 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16569: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20701, Ack: 148077, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16570 216.082439 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16546#9] rfb > xrl [ACK] Seq=148077 Ack=20210 Win=65044 Len=0 SLE=20512 SRE=20728 SLE=20264 SRE=20372 Frame 16570: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148077, Ack: 20210, Len: 0 No. Time Source Destination Protocol Length Info 16571 216.149718 178.148.30.51 192.168.10.207 TCP 60 redstorm-info > smtp [FIN, ACK] Seq=85 Ack=223 Win=93218 Len=0 Frame 16571: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 178.148.30.51 (178.148.30.51), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: redstorm-info (2348), Dst Port: smtp (25), Seq: 85, Ack: 223, Len: 0 No. Time Source Destination Protocol Length Info 16572 216.149755 192.168.10.207 178.148.30.51 TCP 60 smtp > redstorm-info [ACK] Seq=223 Ack=86 Win=65451 Len=0 Frame 16572: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 178.148.30.51 (178.148.30.51) Transmission Control Protocol, Src Port: smtp (25), Dst Port: redstorm-info (2348), Seq: 223, Ack: 86, Len: 0 No. Time Source Destination Protocol Length Info 16573 216.149835 192.168.10.207 178.148.30.51 TCP 60 smtp > redstorm-info [FIN, ACK] Seq=223 Ack=86 Win=65451 Len=0 Frame 16573: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 178.148.30.51 (178.148.30.51) Transmission Control Protocol, Src Port: smtp (25), Dst Port: redstorm-info (2348), Seq: 223, Ack: 86, Len: 0 No. Time Source Destination Protocol Length Info 16574 216.149877 178.148.30.51 192.168.10.207 TCP 60 redstorm-info > smtp [ACK] Seq=86 Ack=224 Win=93218 Len=0 Frame 16574: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 178.148.30.51 (178.148.30.51), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: redstorm-info (2348), Dst Port: smtp (25), Seq: 86, Ack: 224, Len: 0 No. Time Source Destination Protocol Length Info 16575 216.150319 192.168.10.1 192.168.10.245 Syslog 201 LOCAL1.INFO: Oct 3 19:47:54 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 178.148.30.51 7x.x.x.3 2348 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 16575: 201 bytes on wire (1608 bits), 201 bytes captured (1608 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:47:54 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 178.148.30.51 7x.x.x.3 2348 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 16576 216.153505 192.168.10.142 192.168.10.185 VNC 572 [TCP Retransmission] Authentication result Frame 16576: 572 bytes on wire (4576 bits), 572 bytes captured (4576 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20210, Ack: 148077, Len: 518 Virtual Network Computing No. Time Source Destination Protocol Length Info 16577 216.178314 192.168.10.185 192.168.10.142 VNC 243 Authentication result Frame 16577: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148077, Ack: 20728, Len: 189 Virtual Network Computing No. Time Source Destination Protocol Length Info 16578 216.184268 176.44.103.137 192.168.10.207 TCP 60 15216 > smtp [RST, ACK] Seq=64 Ack=223 Win=93218 Len=0 Frame 16578: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 176.44.103.137 (176.44.103.137), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 15216 (15216), Dst Port: smtp (25), Seq: 64, Ack: 223, Len: 0 No. Time Source Destination Protocol Length Info 16579 216.184396 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:47:54 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 176.44.103.137 7x.x.x.3 15216 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 16579: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:47:54 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 176.44.103.137 7x.x.x.3 15216 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 16580 216.200295 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16580: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20728, Ack: 148077, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16581 216.252459 208.67.222.222 192.168.10.220 DNS 140 Standard query response PTR 115.117.130.30.static-delhi.vsnl.net.in Frame 16581: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 54162 (54162) Domain Name System (response) No. Time Source Destination Protocol Length Info 16582 216.273042 192.168.10.220 208.67.222.222 DNS 84 Standard query PTR 82.203.2.92.in-addr.arpa Frame 16582: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 54346 (54346), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16583 216.320367 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 16583: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20787, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16584 216.320406 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=20787 SRE=20814 Frame 16584: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16585 216.328204 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16585: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20814, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16586 216.328243 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16584#1] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=20787 SRE=20841 Frame 16586: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16587 216.342341 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 16587: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20868, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16588 216.342380 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#2] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=20868 SRE=20895 SLE=20787 SRE=20841 Frame 16588: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16589 216.352323 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16589: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20895, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16590 216.352359 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#3] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=20868 SRE=20922 SLE=20787 SRE=20841 Frame 16590: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16591 216.371151 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 16591: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20841, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16592 216.371191 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16584#4] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=20787 SRE=20868 Frame 16592: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16593 216.376291 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16593: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20922, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16594 216.376324 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16584#5] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=20868 SRE=20949 Frame 16594: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16595 216.376368 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16595: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20949, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16596 216.376397 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16584#6] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=20868 SRE=20976 Frame 16596: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16597 216.382795 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16597: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20976, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16598 216.382827 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16584#7] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=20868 SRE=21003 Frame 16598: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16599 216.390352 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16599: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21003, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16600 216.390385 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16584#8] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=20868 SRE=21030 Frame 16600: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16601 216.400206 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16601: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21030, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16602 216.400247 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16584#9] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=20868 SRE=21057 Frame 16602: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16603 216.413926 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16603: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21057, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16604 216.413961 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16584#10] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=20868 SRE=21084 Frame 16604: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16605 216.418264 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16605: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21084, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16606 216.418297 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16584#11] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=20868 SRE=21111 Frame 16606: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16607 216.426596 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16607: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21111, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16608 216.426638 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16584#12] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=20868 SRE=21138 Frame 16608: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16609 216.432168 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16609: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21138, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16610 216.432201 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16584#13] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=20868 SRE=21165 Frame 16610: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16611 216.440205 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16611: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21165, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16612 216.440240 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16584#14] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=20868 SRE=21192 Frame 16612: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16613 216.456205 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 16613: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21219, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16614 216.456236 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#15] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21219 SRE=21246 SLE=20868 SRE=21192 Frame 16614: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16615 216.473515 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 16615: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21273, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16616 216.473545 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#16] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21300 SLE=21219 SRE=21246 Frame 16616: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16617 216.479097 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 16617: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 652681, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16618 216.479129 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=653951 Ack=9115 Win=46363 Len=0 Frame 16618: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 653951, Ack: 9115, Len: 0 No. Time Source Destination Protocol Length Info 16619 216.479211 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=9115 Ack=652681 Win=0 Len=0 Frame 16619: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9115, Ack: 652681, Len: 0 No. Time Source Destination Protocol Length Info 16620 216.483693 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16620: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21300, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16621 216.483722 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#17] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21327 SLE=21219 SRE=21246 Frame 16621: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16622 216.490365 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16622: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21327, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16623 216.490397 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#18] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21354 SLE=21219 SRE=21246 Frame 16623: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16624 216.500408 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16624: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21354, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16625 216.500459 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#19] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21381 SLE=21219 SRE=21246 Frame 16625: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16626 216.504375 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16626: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21381, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16627 216.504413 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#20] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21408 SLE=21219 SRE=21246 Frame 16627: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16628 216.510919 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16628: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21408, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16629 216.510952 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#21] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21435 SLE=21219 SRE=21246 Frame 16629: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16630 216.513815 208.67.222.222 192.168.10.220 DNS 126 Standard query response PTR host-92-2-203-82.as43234.net Frame 16630: 126 bytes on wire (1008 bits), 126 bytes captured (1008 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 54346 (54346) Domain Name System (response) No. Time Source Destination Protocol Length Info 16631 216.518637 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16631: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21435, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16632 216.518671 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#22] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21462 SLE=21219 SRE=21246 Frame 16632: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16633 216.528222 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16633: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21462, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16634 216.528256 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#23] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21489 SLE=21219 SRE=21246 Frame 16634: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16635 216.529489 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 16635: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16636 216.529518 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 16636: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16637 216.537052 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16637: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21489, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16638 216.537085 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#24] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21516 SLE=21219 SRE=21246 Frame 16638: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16639 216.544240 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16639: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21516, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16640 216.544272 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#25] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21543 SLE=21219 SRE=21246 Frame 16640: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16641 216.549884 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 883955968, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 16641: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16642 216.549902 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 883955968, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 16642: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16643 216.549914 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 883955968, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 16643: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16644 216.549926 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 883955968, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 16644: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16645 216.553444 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16645: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21543, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16646 216.553474 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#26] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21570 SLE=21219 SRE=21246 Frame 16646: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16647 216.560938 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16647: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21570, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16648 216.560966 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#27] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21597 SLE=21219 SRE=21246 Frame 16648: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16649 216.567008 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16649: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21597, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16650 216.567039 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#28] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21624 SLE=21219 SRE=21246 Frame 16650: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16651 216.567911 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2753036544, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 16651: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16652 216.567925 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2753036544, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 16652: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16653 216.567938 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2753036544, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 16653: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16654 216.567950 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2753036544, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 16654: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16655 216.580671 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16655: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21624, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16656 216.580705 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#29] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21651 SLE=21219 SRE=21246 Frame 16656: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16657 216.584207 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16657: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21651, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16658 216.584248 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#30] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21678 SLE=21219 SRE=21246 Frame 16658: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16659 216.592252 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16659: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21678, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16660 216.592285 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#31] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21705 SLE=21219 SRE=21246 Frame 16660: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16661 216.596732 192.168.10.142 192.168.10.220 DNS 83 Standard query A ksn3.kaspersky-labs.com Frame 16661: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: saphostctrl (1128), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16662 216.596870 192.168.10.220 192.168.10.142 DNS 323 Standard query response A 79.141.216.19 A 130.117.190.204 A 130.117.190.207 A 130.117.190.210 A 130.117.190.213 A 130.117.190.216 A 117.79.92.41 A 117.79.92.44 A 202.177.216.233 A 202.177.216.236 A 38.113.165.77 A 38.113.165.80 A 38.113.165.83 A 38.113.165.86 A 79.141.216.17 Frame 16662: 323 bytes on wire (2584 bits), 323 bytes captured (2584 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.142 (192.168.10.142) User Datagram Protocol, Src Port: domain (53), Dst Port: saphostctrl (1128) Domain Name System (response) No. Time Source Destination Protocol Length Info 16663 216.602231 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16663: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21705, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16664 216.602262 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#32] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21732 SLE=21219 SRE=21246 Frame 16664: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16665 216.606200 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16665: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21732, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16666 216.607308 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#33] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21759 SLE=21219 SRE=21246 Frame 16666: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16667 216.616577 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16667: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21759, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16668 216.616626 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#34] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21786 SLE=21219 SRE=21246 Frame 16668: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16669 216.620910 192.168.10.142 192.168.10.220 DNS 83 Standard query AAAA ksn3.kaspersky-labs.com Frame 16669: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: saphostctrls (1129), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16670 216.620988 192.168.10.220 208.67.222.222 DNS 83 Standard query AAAA ksn3.kaspersky-labs.com Frame 16670: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 52692 (52692), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16671 216.624680 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16671: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21786, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16672 216.624715 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#35] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21813 SLE=21219 SRE=21246 Frame 16672: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16673 216.638530 208.67.222.222 192.168.10.220 DNS 83 Standard query response Frame 16673: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 52692 (52692) Domain Name System (response) No. Time Source Destination Protocol Length Info 16674 216.638597 192.168.10.220 192.168.10.142 DNS 83 Standard query response Frame 16674: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 192.168.10.142 (192.168.10.142) User Datagram Protocol, Src Port: domain (53), Dst Port: saphostctrls (1129) Domain Name System (response) No. Time Source Destination Protocol Length Info 16675 216.647325 192.168.10.220 208.67.222.222 DNS 88 Standard query PTR 199.101.175.178.in-addr.arpa Frame 16675: 88 bytes on wire (704 bits), 88 bytes captured (704 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 60043 (60043), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16676 216.767635 192.168.10.104 192.168.10.246 NBNS 110 Refresh NB <01><02>__MSBROWSE__<02><01> Frame 16676: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 16677 216.860566 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-00.geo.kaspersky.com Frame 16677: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 50262 (50262), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16678 216.905349 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16678: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21813, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16679 216.905386 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#36] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21840 SLE=21219 SRE=21246 Frame 16679: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16680 216.918378 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16680: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21840, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16681 216.918416 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#37] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21867 SLE=21219 SRE=21246 Frame 16681: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16682 216.922657 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16682: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21867, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16683 216.922701 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#38] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21894 SLE=21219 SRE=21246 Frame 16683: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16684 216.939342 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16684: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21894, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16685 216.939377 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#39] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21921 SLE=21219 SRE=21246 Frame 16685: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16686 216.942415 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16686: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21921, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16687 216.942447 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#40] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21948 SLE=21219 SRE=21246 Frame 16687: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16688 216.955844 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16688: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21948, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16689 216.955879 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#41] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=21975 SLE=21219 SRE=21246 Frame 16689: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16690 216.961873 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16690: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 21975, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16691 216.961906 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#42] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=22002 SLE=21219 SRE=21246 Frame 16691: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16692 216.966560 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16692: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22002, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16693 216.966593 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#43] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=21273 SRE=22029 SLE=21219 SRE=21246 Frame 16693: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16694 216.984530 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 16694: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22056, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16695 216.984562 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#44] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=22056 SRE=22083 SLE=21273 SRE=22029 Frame 16695: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16696 216.997392 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16696: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22083, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16697 216.997424 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#45] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=22056 SRE=22110 SLE=21273 SRE=22029 Frame 16697: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16698 217.002372 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16698: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22110, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16699 217.002404 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#46] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=22056 SRE=22137 SLE=21273 SRE=22029 Frame 16699: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16700 217.010551 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16700: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22137, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16701 217.010593 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#47] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=22056 SRE=22164 SLE=21273 SRE=22029 Frame 16701: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16702 217.016353 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16702: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22164, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16703 217.016387 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#48] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=22056 SRE=22191 SLE=21273 SRE=22029 Frame 16703: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16704 217.024439 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16704: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22191, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16705 217.024473 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#49] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=22056 SRE=22218 SLE=21273 SRE=22029 Frame 16705: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16706 217.034530 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16706: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22218, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16707 217.034563 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#50] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=22056 SRE=22245 SLE=21273 SRE=22029 Frame 16707: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16708 217.050596 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16708: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22245, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16709 217.050639 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#51] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=22056 SRE=22272 SLE=21273 SRE=22029 Frame 16709: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16710 217.064440 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16710: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22272, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16711 217.064476 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#52] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=22056 SRE=22299 SLE=21273 SRE=22029 Frame 16711: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16712 217.128445 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16712: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22299, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16713 217.128481 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#53] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=22056 SRE=22326 SLE=21273 SRE=22029 Frame 16713: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16714 217.197400 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 16714: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 16715 217.243686 192.168.10.216 64.74.103.131 TLSv1 91 Application Data Frame 16715: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.216 (192.168.10.216), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: ovrimosdbman (2956), Dst Port: https (443), Seq: 260, Ack: 260, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 16716 217.243757 64.74.103.131 192.168.10.216 TCP 60 https > ovrimosdbman [ACK] Seq=260 Ack=297 Win=65535 Len=0 Frame 16716: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.216 (192.168.10.216) Transmission Control Protocol, Src Port: https (443), Dst Port: ovrimosdbman (2956), Seq: 260, Ack: 297, Len: 0 No. Time Source Destination Protocol Length Info 16717 217.245054 Watchgua_3c:4c:d8 IntelCor_36:19:60 ARP 60 Who has 192.168.10.216? Tell 192.168.10.1 Frame 16717: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16718 217.245124 IntelCor_36:19:60 Watchgua_3c:4c:d8 ARP 60 192.168.10.216 is at 00:13:20:36:19:60 Frame 16718: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16719 217.282211 192.168.10.226 192.168.10.65 ICMP 60 Echo (ping) request id=0x0400, seq=17138/62018, ttl=128 Frame 16719: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.65 (192.168.10.65) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 16720 217.282276 192.168.10.226 192.168.10.59 ICMP 60 Echo (ping) request id=0x0400, seq=17650/62020, ttl=128 Frame 16720: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.59 (192.168.10.59) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 16721 217.282332 192.168.10.65 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=17138/62018, ttl=128 Frame 16721: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.65 (192.168.10.65), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 16722 217.282390 192.168.10.59 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=17650/62020, ttl=128 Frame 16722: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Internet Protocol Version 4, Src: 192.168.10.59 (192.168.10.59), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 16723 217.282407 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 16723: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16724 217.282437 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 16724: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16725 217.282676 192.168.10.226 192.168.10.70 ICMP 60 Echo (ping) request id=0x0400, seq=21234/62034, ttl=128 Frame 16725: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.70 (192.168.10.70) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 16726 217.282728 192.168.10.226 192.168.10.65 ICMP 60 Echo (ping) request id=0x0400, seq=22258/62038, ttl=128 Frame 16726: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.65 (192.168.10.65) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 16727 217.282775 192.168.10.70 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=21234/62034, ttl=128 Frame 16727: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.70 (192.168.10.70), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 16728 217.282824 192.168.10.65 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=22258/62038, ttl=128 Frame 16728: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.65 (192.168.10.65), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 16729 217.282871 192.168.10.226 192.168.10.59 ICMP 60 Echo (ping) request id=0x0400, seq=22770/62040, ttl=128 Frame 16729: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.59 (192.168.10.59) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 16730 217.282920 192.168.10.59 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=22770/62040, ttl=128 Frame 16730: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.59 (192.168.10.59), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 16731 217.282932 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 16731: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16732 217.282942 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 16732: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16733 217.282955 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 16733: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16734 217.282965 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 16734: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16735 217.282976 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 16735: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16736 217.282986 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 16736: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16737 217.282998 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 16737: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16738 217.283062 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 16738: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16739 217.283111 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 16739: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16740 217.283124 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 16740: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16741 217.283140 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 16741: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16742 217.283173 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 16742: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16743 217.283184 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 16743: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16744 217.283193 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 16744: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16745 217.283224 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 16745: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16746 217.283234 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 16746: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16747 217.283244 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 16747: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16748 217.283255 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 16748: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16749 217.283265 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 16749: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16750 217.283274 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 16750: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16751 217.283289 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 16751: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16752 217.283300 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 16752: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16753 217.283314 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 16753: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16754 217.283324 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 16754: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16755 217.283334 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 16755: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16756 217.283344 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 16756: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16757 217.283362 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 16757: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16758 217.283376 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 16758: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16759 217.283388 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 16759: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16760 217.283402 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 16760: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16761 217.283415 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 16761: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16762 217.283429 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 16762: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16763 217.283442 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 16763: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16764 217.283455 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 16764: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16765 217.283468 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 16765: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16766 217.283481 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 16766: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16767 217.283494 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 16767: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16768 217.283505 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 16768: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16769 217.283515 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 16769: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16770 217.283524 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 16770: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16771 217.283538 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 16771: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16772 217.283548 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 16772: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16773 217.283558 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 16773: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16774 217.283569 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 16774: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16775 217.283579 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 16775: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16776 217.283588 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 16776: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16777 217.283598 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 16777: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16778 217.283608 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 16778: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16779 217.283619 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 16779: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16780 217.283629 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 16780: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16781 217.283639 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 16781: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16782 217.283649 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 16782: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16783 217.283659 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 16783: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16784 217.283713 192.168.10.226 192.168.10.70 ICMP 60 Echo (ping) request id=0x0400, seq=26354/62054, ttl=128 Frame 16784: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.70 (192.168.10.70) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 16785 217.283725 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 16785: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16786 217.283739 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 16786: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16787 217.283790 192.168.10.70 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=26354/62054, ttl=128 Frame 16787: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Internet Protocol Version 4, Src: 192.168.10.70 (192.168.10.70), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 16788 217.283838 192.168.10.226 192.168.10.65 ICMP 60 Echo (ping) request id=0x0400, seq=27378/62058, ttl=128 Frame 16788: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f3 (00:26:b9:52:f0:f3), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.65 (192.168.10.65) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 16789 217.283888 192.168.10.65 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=27378/62058, ttl=128 Frame 16789: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.65 (192.168.10.65), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 16790 217.283899 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 16790: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16791 217.283946 192.168.10.226 192.168.10.59 ICMP 60 Echo (ping) request id=0x0400, seq=27890/62060, ttl=128 Frame 16791: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.59 (192.168.10.59) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 16792 217.283957 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 16792: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16793 217.283967 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 16793: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16794 217.283977 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 16794: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16795 217.284031 192.168.10.59 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=27890/62060, ttl=128 Frame 16795: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.59 (192.168.10.59), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 16796 217.284042 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 16796: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16797 217.284052 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 16797: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16798 217.284062 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 16798: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16799 217.284078 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 16799: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16800 217.284088 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 16800: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16801 217.284099 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 16801: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16802 217.284109 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 16802: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16803 217.284133 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 16803: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16804 217.284143 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 16804: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16805 217.284152 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 16805: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16806 217.284174 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 16806: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16807 217.284185 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 16807: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16808 217.284195 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 16808: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16809 217.284206 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 16809: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16810 217.284218 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 16810: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16811 217.284228 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 16811: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16812 217.284239 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 16812: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16813 217.284249 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 16813: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16814 217.284259 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 16814: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16815 217.284270 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 16815: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16816 217.284281 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 16816: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16817 217.284291 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 16817: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16818 217.284302 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 16818: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16819 217.284322 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 16819: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16820 217.284332 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 16820: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16821 217.284343 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 16821: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16822 217.284353 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 16822: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16823 217.284363 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 16823: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16824 217.284374 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 16824: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16825 217.284384 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 16825: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16826 217.284395 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 16826: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16827 217.284405 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 16827: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16828 217.284416 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 16828: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16829 217.284426 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 16829: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16830 217.284437 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 16830: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16831 217.284447 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 16831: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16832 217.284458 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 16832: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16833 217.284468 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 16833: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16834 217.284521 192.168.10.226 192.168.10.70 ICMP 60 Echo (ping) request id=0x0400, seq=31474/62074, ttl=128 Frame 16834: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.70 (192.168.10.70) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 16835 217.284533 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 16835: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16836 217.284579 192.168.10.70 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=31474/62074, ttl=128 Frame 16836: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Internet Protocol Version 4, Src: 192.168.10.70 (192.168.10.70), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 16837 217.313241 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 16837: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22542, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16838 217.313277 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#54] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=22542 SRE=22569 SLE=22056 SRE=22326 Frame 16838: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16839 217.315580 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 16839: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 16840 217.334442 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 16840: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22596, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16841 217.334478 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#55] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=22596 SRE=22623 SLE=22542 SRE=22569 Frame 16841: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16842 217.387401 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 16842: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 16843 217.387433 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 16843: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 16844 217.444458 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 16844: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 16845 217.478208 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=15247 Ack=1097529 Win=16149 Len=0 Frame 16845: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15247, Ack: 1097529, Len: 0 No. Time Source Destination Protocol Length Info 16846 217.478242 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 16845#1] smtp > 23308 [ACK] Seq=15247 Ack=1097529 Win=16149 Len=0 Frame 16846: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15247, Ack: 1097529, Len: 0 No. Time Source Destination Protocol Length Info 16847 217.478272 206.225.164.186 192.168.10.207 SMTP 583 C: DATA fragment, 529 bytes Frame 16847: 583 bytes on wire (4664 bits), 583 bytes captured (4664 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1098657, Ack: 15247, Len: 529 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16848 217.478305 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16848: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1099186, Ack: 15247, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16849 217.478335 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16849: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1100566, Ack: 15247, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16850 217.478375 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16850: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1101946, Ack: 15247, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16851 217.478404 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16851: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1103326, Ack: 15247, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16852 217.478434 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16852: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1104706, Ack: 15247, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16853 217.478466 206.225.164.186 192.168.10.207 SMTP 746 C: DATA fragment, 692 bytes Frame 16853: 746 bytes on wire (5968 bits), 746 bytes captured (5968 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1106086, Ack: 15247, Len: 692 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16854 217.478495 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16854: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1106778, Ack: 15247, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16855 217.478524 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 16845#2] smtp > 23308 [ACK] Seq=15247 Ack=1097529 Win=16149 Len=0 Frame 16855: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15247, Ack: 1097529, Len: 0 No. Time Source Destination Protocol Length Info 16856 217.478589 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 16845#3] smtp > 23308 [ACK] Seq=15247 Ack=1097529 Win=16149 Len=0 Frame 16856: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15247, Ack: 1097529, Len: 0 No. Time Source Destination Protocol Length Info 16857 217.478617 192.168.10.207 206.225.164.186 SMTP 222 S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 16857: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15247, Ack: 1097529, Len: 168 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16858 217.478646 206.225.164.186 192.168.10.207 SMTP 1182 [TCP Out-Of-Order] C: DATA fragment, 1128 bytes Frame 16858: 1182 bytes on wire (9456 bits), 1182 bytes captured (9456 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1097529, Ack: 15247, Len: 1128 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16859 217.478676 206.225.164.186 192.168.10.207 SMTP 583 [TCP Out-Of-Order] C: DATA fragment, 529 bytes Frame 16859: 583 bytes on wire (4664 bits), 583 bytes captured (4664 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1098657, Ack: 15247, Len: 529 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16860 217.478705 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1108158 Ack=15415 Win=46300 Len=0 Frame 16860: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1108158, Ack: 15415, Len: 0 No. Time Source Destination Protocol Length Info 16861 217.478732 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 16857#1] smtp > 23308 [ACK] Seq=15415 Ack=1097529 Win=16149 Len=0 Frame 16861: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15415, Ack: 1097529, Len: 0 No. Time Source Destination Protocol Length Info 16862 217.478761 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 16857#2] smtp > 23308 [ACK] Seq=15415 Ack=1097529 Win=16149 Len=0 Frame 16862: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15415, Ack: 1097529, Len: 0 No. Time Source Destination Protocol Length Info 16863 217.478788 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 16857#3] smtp > 23308 [ACK] Seq=15415 Ack=1097529 Win=16149 Len=0 Frame 16863: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15415, Ack: 1097529, Len: 0 No. Time Source Destination Protocol Length Info 16864 217.478816 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 16857#4] smtp > 23308 [ACK] Seq=15415 Ack=1097529 Win=16149 Len=0 Frame 16864: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15415, Ack: 1097529, Len: 0 No. Time Source Destination Protocol Length Info 16865 217.478844 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 16857#5] smtp > 23308 [ACK] Seq=15415 Ack=1097529 Win=16149 Len=0 Frame 16865: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15415, Ack: 1097529, Len: 0 No. Time Source Destination Protocol Length Info 16866 217.478871 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 16857#6] smtp > 23308 [ACK] Seq=15415 Ack=1097529 Win=16149 Len=0 Frame 16866: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15415, Ack: 1097529, Len: 0 No. Time Source Destination Protocol Length Info 16867 217.478899 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=15415 Ack=1108158 Win=5520 Len=0 Frame 16867: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15415, Ack: 1108158, Len: 0 No. Time Source Destination Protocol Length Info 16868 217.478932 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16868: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1108158, Ack: 15415, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16869 217.478962 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16869: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1109538, Ack: 15415, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16870 217.478991 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16870: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1110918, Ack: 15415, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16871 217.479022 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 16871: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1112298, Ack: 15415, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16872 217.479050 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=15415 Ack=1112298 Win=1380 Len=0 Frame 16872: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15415, Ack: 1112298, Len: 0 No. Time Source Destination Protocol Length Info 16873 217.504501 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 16873: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22650, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16874 217.504537 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#56] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=22650 SRE=22677 SLE=22596 SRE=22623 Frame 16874: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16875 217.516667 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16875: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22677, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16876 217.516701 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#57] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=22650 SRE=22704 SLE=22596 SRE=22623 Frame 16876: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16877 217.526456 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16877: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22704, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16878 217.526487 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#58] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=22650 SRE=22731 SLE=22596 SRE=22623 Frame 16878: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16879 217.544597 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16879: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22731, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16880 217.544631 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#59] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=22650 SRE=22758 SLE=22596 SRE=22623 Frame 16880: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16881 217.549385 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16881: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22758, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16882 217.549417 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#60] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=22650 SRE=22785 SLE=22596 SRE=22623 Frame 16882: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16883 217.552467 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16883: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22785, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16884 217.552499 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#61] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=22650 SRE=22812 SLE=22596 SRE=22623 Frame 16884: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16885 217.565596 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 900733184, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 16885: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16886 217.565619 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 900733184, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 16886: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16887 217.565633 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 900733184, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 16887: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16888 217.565648 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 900733184, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 16888: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16889 217.566786 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 16889: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 16890 217.583631 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2769813760, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 16890: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16891 217.583654 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2769813760, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 16891: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16892 217.583667 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2769813760, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 16892: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16893 217.583679 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2769813760, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 16893: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 16894 217.584303 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 16894: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22839, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16895 217.584341 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#62] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=22839 SRE=22866 SLE=22650 SRE=22812 Frame 16895: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16896 217.588611 64.74.103.131 192.168.10.216 TLSv1 91 Application Data Frame 16896: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.216 (192.168.10.216) Transmission Control Protocol, Src Port: https (443), Dst Port: ovrimosdbman (2956), Seq: 260, Ack: 297, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 16897 217.599030 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16897: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22866, Ack: 148266, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16898 217.599063 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 16584#63] rfb > xrl [ACK] Seq=148266 Ack=20755 Win=64499 Len=0 SLE=22839 SRE=22893 SLE=22650 SRE=22812 Frame 16898: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 20755, Len: 0 No. Time Source Destination Protocol Length Info 16899 217.647366 192.168.10.246 65.32.1.65 DNS 88 Standard query PTR 199.101.175.178.in-addr.arpa Frame 16899: 88 bytes on wire (704 bits), 88 bytes captured (704 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 49265 (49265), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 16900 217.660146 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=15415 Ack=1113678 Win=0 Len=0 Frame 16900: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15415, Ack: 1113678, Len: 0 No. Time Source Destination Protocol Length Info 16901 217.712409 192.168.10.216 64.74.103.131 TCP 60 ovrimosdbman > https [ACK] Seq=297 Ack=297 Win=65424 Len=0 Frame 16901: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.216 (192.168.10.216), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: ovrimosdbman (2956), Dst Port: https (443), Seq: 297, Ack: 297, Len: 0 No. Time Source Destination Protocol Length Info 16902 217.786419 65.32.1.65 192.168.10.246 DNS 148 Standard query response, No such name Frame 16902: 148 bytes on wire (1184 bits), 148 bytes captured (1184 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 49265 (49265) Domain Name System (response) No. Time Source Destination Protocol Length Info 16903 217.787120 192.168.10.203 178.175.101.199 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 16903: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 178.175.101.199 (178.175.101.199) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 16904 217.789163 Watchgua_3c:4c:d8 Dell_44:d0:9e ARP 60 Who has 192.168.10.246? Tell 192.168.10.1 Frame 16904: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 16905 217.789177 Dell_44:d0:9e Watchgua_3c:4c:d8 ARP 60 192.168.10.246 is at 84:2b:2b:44:d0:9e Frame 16905: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 16906 217.798851 192.168.10.142 192.168.10.185 VNC 1314 [TCP Retransmission] Authentication result Frame 16906: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 20755, Ack: 148266, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16907 217.798887 192.168.10.185 192.168.10.142 TCP 74 rfb > xrl [ACK] Seq=148266 Ack=22029 Win=65535 Len=0 SLE=22839 SRE=22893 SLE=22650 SRE=22812 Frame 16907: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 22029, Len: 0 No. Time Source Destination Protocol Length Info 16908 217.832142 192.168.10.142 192.168.10.185 VNC 945 [TCP Retransmission] Authentication result Frame 16908: 945 bytes on wire (7560 bits), 945 bytes captured (7560 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22029, Ack: 148266, Len: 891 Virtual Network Computing No. Time Source Destination Protocol Length Info 16909 217.857803 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16909: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 148266, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16910 217.857840 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16910: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 149526, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16911 217.857877 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16911: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 150786, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16912 217.857907 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 16912: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 152046, Ack: 22920, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 16913 217.857937 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16913: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 152362, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16914 217.857970 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16914: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 153622, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16915 217.857999 192.168.10.185 192.168.10.142 VNC 60 Authentication result[Malformed Packet] Frame 16915: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 154882, Ack: 22920, Len: 2 Virtual Network Computing [Malformed Packet: VNC] No. Time Source Destination Protocol Length Info 16916 217.858032 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16916: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 154884, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16917 217.858063 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16917: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 156144, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16918 217.858092 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16918: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 157404, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16919 217.858121 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 16919: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 158664, Ack: 22920, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 16920 217.886379 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=22920 Ack=150786 Win=64240 Len=0 Frame 16920: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22920, Ack: 150786, Len: 0 No. Time Source Destination Protocol Length Info 16921 217.888469 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 16921: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 16922 217.888497 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 16922: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 16923 217.894426 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=22920 Ack=152046 Win=64240 Len=0 Frame 16923: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22920, Ack: 152046, Len: 0 No. Time Source Destination Protocol Length Info 16924 217.898634 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=22920 Ack=153622 Win=64240 Len=0 Frame 16924: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22920, Ack: 153622, Len: 0 No. Time Source Destination Protocol Length Info 16925 217.898729 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16925: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 158980, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16926 217.898758 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16926: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 160240, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16927 217.898788 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16927: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 161500, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16928 217.898817 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 16928: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 162760, Ack: 22920, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 16929 217.898857 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=22920 Ack=154884 Win=64240 Len=0 Frame 16929: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22920, Ack: 154884, Len: 0 No. Time Source Destination Protocol Length Info 16930 217.899267 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=22920 Ack=157404 Win=64240 Len=0 Frame 16930: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22920, Ack: 157404, Len: 0 No. Time Source Destination Protocol Length Info 16931 217.900002 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=22920 Ack=158664 Win=64240 Len=0 Frame 16931: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22920, Ack: 158664, Len: 0 No. Time Source Destination Protocol Length Info 16932 217.928333 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=22920 Ack=160240 Win=64240 Len=0 Frame 16932: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22920, Ack: 160240, Len: 0 No. Time Source Destination Protocol Length Info 16933 217.928418 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16933: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 163076, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16934 217.928451 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16934: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 164336, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16935 217.928481 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16935: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 165596, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16936 217.928512 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 16936: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 166856, Ack: 22920, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 16937 217.934372 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=22920 Ack=162760 Win=64240 Len=0 Frame 16937: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22920, Ack: 162760, Len: 0 No. Time Source Destination Protocol Length Info 16938 217.954254 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=22920 Ack=164336 Win=64240 Len=0 Frame 16938: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22920, Ack: 164336, Len: 0 No. Time Source Destination Protocol Length Info 16939 217.954344 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16939: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 167172, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16940 217.954374 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16940: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 168432, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16941 217.954403 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16941: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 169692, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16942 217.954432 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 16942: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 170952, Ack: 22920, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 16943 217.962299 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=22920 Ack=166856 Win=64240 Len=0 Frame 16943: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22920, Ack: 166856, Len: 0 No. Time Source Destination Protocol Length Info 16944 217.978455 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=22920 Ack=168432 Win=64240 Len=0 Frame 16944: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22920, Ack: 168432, Len: 0 No. Time Source Destination Protocol Length Info 16945 217.978512 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16945: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 171268, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16946 217.978530 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16946: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 172528, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16947 217.978548 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16947: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 173788, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16948 217.978566 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 16948: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 175048, Ack: 22920, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 16949 217.983934 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=22920 Ack=170952 Win=64240 Len=0 Frame 16949: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22920, Ack: 170952, Len: 0 No. Time Source Destination Protocol Length Info 16950 218.015336 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=22920 Ack=172528 Win=64240 Len=0 Frame 16950: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22920, Ack: 172528, Len: 0 No. Time Source Destination Protocol Length Info 16951 218.015363 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16951: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 175364, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16952 218.015382 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16952: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 176624, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16953 218.015399 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16953: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 177884, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16954 218.015416 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 16954: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 179144, Ack: 22920, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 16955 218.018312 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=22920 Ack=175048 Win=64240 Len=0 Frame 16955: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22920, Ack: 175048, Len: 0 No. Time Source Destination Protocol Length Info 16956 218.038516 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=22920 Ack=176624 Win=64240 Len=0 Frame 16956: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22920, Ack: 176624, Len: 0 No. Time Source Destination Protocol Length Info 16957 218.038543 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16957: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 179460, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16958 218.038560 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16958: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 180720, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16959 218.038578 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 16959: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 181980, Ack: 22920, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 16960 218.038595 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 16960: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183240, Ack: 22920, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 16961 218.042643 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=22920 Ack=179144 Win=64240 Len=0 Frame 16961: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22920, Ack: 179144, Len: 0 No. Time Source Destination Protocol Length Info 16962 218.070331 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=22920 Ack=180720 Win=64240 Len=0 Frame 16962: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22920, Ack: 180720, Len: 0 No. Time Source Destination Protocol Length Info 16963 218.074263 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=22920 Ack=183240 Win=64240 Len=0 Frame 16963: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22920, Ack: 183240, Len: 0 No. Time Source Destination Protocol Length Info 16964 218.074284 192.168.10.185 192.168.10.142 VNC 201 Authentication result Frame 16964: 201 bytes on wire (1608 bits), 201 bytes captured (1608 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183556, Ack: 22920, Len: 147 Virtual Network Computing No. Time Source Destination Protocol Length Info 16965 218.096349 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=22920 Ack=183703 Win=63777 Len=0 Frame 16965: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22920, Ack: 183703, Len: 0 No. Time Source Destination Protocol Length Info 16966 218.102584 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 16966: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22920, Ack: 183703, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 16967 218.124501 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 16967: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15415, Ack: 1113678, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 16968 218.124526 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1113678 Ack=15457 Win=46279 Len=0 Frame 16968: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1113678, Ack: 15457, Len: 0 No. Time Source Destination Protocol Length Info 16969 218.254285 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=183703 Ack=22952 Win=64612 Len=0 Frame 16969: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183703, Ack: 22952, Len: 0 No. Time Source Destination Protocol Length Info 16970 218.267577 192.168.10.104 192.168.10.246 NBNS 110 Refresh NB <01><02>__MSBROWSE__<02><01> Frame 16970: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 16971 218.321976 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16971: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22952, Ack: 183703, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16972 218.328696 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16972: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 22979, Ack: 183703, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16973 218.328732 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=183703 Ack=23006 Win=64558 Len=0 Frame 16973: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183703, Ack: 23006, Len: 0 No. Time Source Destination Protocol Length Info 16974 218.346473 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 16974: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23033, Ack: 183703, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16975 218.346492 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16973#1] rfb > xrl [ACK] Seq=183703 Ack=23006 Win=64558 Len=0 SLE=23033 SRE=23060 Frame 16975: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183703, Ack: 23006, Len: 0 No. Time Source Destination Protocol Length Info 16976 218.352440 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16976: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23060, Ack: 183703, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16977 218.352457 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16973#2] rfb > xrl [ACK] Seq=183703 Ack=23006 Win=64558 Len=0 SLE=23033 SRE=23087 Frame 16977: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183703, Ack: 23006, Len: 0 No. Time Source Destination Protocol Length Info 16978 218.366659 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16978: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23087, Ack: 183703, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16979 218.366678 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16973#3] rfb > xrl [ACK] Seq=183703 Ack=23006 Win=64558 Len=0 SLE=23033 SRE=23114 Frame 16979: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183703, Ack: 23006, Len: 0 No. Time Source Destination Protocol Length Info 16980 218.371603 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16980: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23114, Ack: 183703, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16981 218.371621 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16973#4] rfb > xrl [ACK] Seq=183703 Ack=23006 Win=64558 Len=0 SLE=23033 SRE=23141 Frame 16981: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183703, Ack: 23006, Len: 0 No. Time Source Destination Protocol Length Info 16982 218.376556 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 16982: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23006, Ack: 183703, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16983 218.376592 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=183703 Ack=23141 Win=64423 Len=0 Frame 16983: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183703, Ack: 23141, Len: 0 No. Time Source Destination Protocol Length Info 16984 218.384012 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16984: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23141, Ack: 183703, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16985 218.396690 192.168.10.185 192.168.10.142 VNC 290 Authentication result Frame 16985: 290 bytes on wire (2320 bits), 290 bytes captured (2320 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183703, Ack: 23168, Len: 236 Virtual Network Computing No. Time Source Destination Protocol Length Info 16986 218.416568 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 16986: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23249, Ack: 183703, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16987 218.416602 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16985#1] rfb > xrl [ACK] Seq=183939 Ack=23168 Win=64396 Len=0 SLE=23249 SRE=23276 Frame 16987: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183939, Ack: 23168, Len: 0 No. Time Source Destination Protocol Length Info 16988 218.416642 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16988: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23276, Ack: 183703, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16989 218.416671 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16985#2] rfb > xrl [ACK] Seq=183939 Ack=23168 Win=64396 Len=0 SLE=23249 SRE=23303 Frame 16989: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183939, Ack: 23168, Len: 0 No. Time Source Destination Protocol Length Info 16990 218.429575 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 16990: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23303, Ack: 183939, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 16991 218.429608 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16985#3] rfb > xrl [ACK] Seq=183939 Ack=23168 Win=64396 Len=0 SLE=23249 SRE=23335 Frame 16991: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183939, Ack: 23168, Len: 0 No. Time Source Destination Protocol Length Info 16992 218.429844 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16992: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23335, Ack: 183939, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16993 218.429873 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16985#4] rfb > xrl [ACK] Seq=183939 Ack=23168 Win=64396 Len=0 SLE=23249 SRE=23362 Frame 16993: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183939, Ack: 23168, Len: 0 No. Time Source Destination Protocol Length Info 16994 218.432579 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16994: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23362, Ack: 183939, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16995 218.432608 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16985#5] rfb > xrl [ACK] Seq=183939 Ack=23168 Win=64396 Len=0 SLE=23249 SRE=23389 Frame 16995: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183939, Ack: 23168, Len: 0 No. Time Source Destination Protocol Length Info 16996 218.441662 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 16996: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23168, Ack: 183939, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16997 218.441701 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16997: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23389, Ack: 183939, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 16998 218.441729 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=183939 Ack=23195 Win=64369 Len=0 SLE=23249 SRE=23416 Frame 16998: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183939, Ack: 23195, Len: 0 No. Time Source Destination Protocol Length Info 16999 218.448683 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 16999: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23416, Ack: 183939, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17000 218.448712 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16998#1] rfb > xrl [ACK] Seq=183939 Ack=23195 Win=64369 Len=0 SLE=23249 SRE=23443 Frame 17000: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183939, Ack: 23195, Len: 0 No. Time Source Destination Protocol Length Info 17001 218.456755 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17001: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23443, Ack: 183939, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17002 218.456788 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16998#2] rfb > xrl [ACK] Seq=183939 Ack=23195 Win=64369 Len=0 SLE=23249 SRE=23470 Frame 17002: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183939, Ack: 23195, Len: 0 No. Time Source Destination Protocol Length Info 17003 218.466004 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17003: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23470, Ack: 183939, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17004 218.466032 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16998#3] rfb > xrl [ACK] Seq=183939 Ack=23195 Win=64369 Len=0 SLE=23249 SRE=23497 Frame 17004: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183939, Ack: 23195, Len: 0 No. Time Source Destination Protocol Length Info 17005 218.474605 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17005: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23497, Ack: 183939, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17006 218.474623 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 16998#4] rfb > xrl [ACK] Seq=183939 Ack=23195 Win=64369 Len=0 SLE=23249 SRE=23524 Frame 17006: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183939, Ack: 23195, Len: 0 No. Time Source Destination Protocol Length Info 17007 218.481192 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 17007: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23195, Ack: 183939, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17008 218.484625 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17008: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23524, Ack: 183939, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17009 218.484649 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=183939 Ack=23222 Win=64342 Len=0 SLE=23249 SRE=23551 Frame 17009: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183939, Ack: 23222, Len: 0 No. Time Source Destination Protocol Length Info 17010 218.488657 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17010: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23551, Ack: 183939, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17011 218.488675 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17009#1] rfb > xrl [ACK] Seq=183939 Ack=23222 Win=64342 Len=0 SLE=23249 SRE=23578 Frame 17011: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183939, Ack: 23222, Len: 0 No. Time Source Destination Protocol Length Info 17012 218.496498 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17012: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23578, Ack: 183939, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17013 218.496517 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17009#2] rfb > xrl [ACK] Seq=183939 Ack=23222 Win=64342 Len=0 SLE=23249 SRE=23605 Frame 17013: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183939, Ack: 23222, Len: 0 No. Time Source Destination Protocol Length Info 17014 218.506488 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17014: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23605, Ack: 183939, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17015 218.506508 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17009#3] rfb > xrl [ACK] Seq=183939 Ack=23222 Win=64342 Len=0 SLE=23249 SRE=23632 Frame 17015: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183939, Ack: 23222, Len: 0 No. Time Source Destination Protocol Length Info 17016 218.514743 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17016: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23632, Ack: 183939, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17017 218.514776 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17009#4] rfb > xrl [ACK] Seq=183939 Ack=23222 Win=64342 Len=0 SLE=23249 SRE=23659 Frame 17017: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183939, Ack: 23222, Len: 0 No. Time Source Destination Protocol Length Info 17018 218.518965 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 17018: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23222, Ack: 183939, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17019 218.518994 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=183939 Ack=23659 Win=65535 Len=0 Frame 17019: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183939, Ack: 23659, Len: 0 No. Time Source Destination Protocol Length Info 17020 218.522568 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17020: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23659, Ack: 183939, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17021 218.524960 192.168.10.185 192.168.10.142 VNC 386 Authentication result Frame 17021: 386 bytes on wire (3088 bits), 386 bytes captured (3088 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 183939, Ack: 23686, Len: 332 Virtual Network Computing No. Time Source Destination Protocol Length Info 17022 218.530714 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17022: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23686, Ack: 183939, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17023 218.546841 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17023: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23713, Ack: 183939, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17024 218.546873 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=184271 Ack=23740 Win=65454 Len=0 Frame 17024: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 184271, Ack: 23740, Len: 0 No. Time Source Destination Protocol Length Info 17025 218.551499 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17025: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23740, Ack: 183939, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17026 218.554633 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 17026: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23767, Ack: 184271, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 17027 218.554664 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=184271 Ack=23799 Win=65395 Len=0 Frame 17027: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 184271, Ack: 23799, Len: 0 No. Time Source Destination Protocol Length Info 17028 218.554703 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17028: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23799, Ack: 184271, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17029 218.562707 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17029: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23826, Ack: 184271, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17030 218.562735 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=184271 Ack=23853 Win=65341 Len=0 Frame 17030: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 184271, Ack: 23853, Len: 0 No. Time Source Destination Protocol Length Info 17031 218.570991 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17031: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23853, Ack: 184271, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17032 218.579160 192.168.10.185 192.168.10.142 VNC 334 Authentication result Frame 17032: 334 bytes on wire (2672 bits), 334 bytes captured (2672 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 184271, Ack: 23880, Len: 280 Virtual Network Computing No. Time Source Destination Protocol Length Info 17033 218.581204 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 917510400, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 17033: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17034 218.581226 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 917510400, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 17034: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17035 218.581239 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 917510400, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 17035: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17036 218.581251 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 917510400, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 17036: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17037 218.582498 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17037: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23880, Ack: 184271, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17038 218.587180 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17038: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23907, Ack: 184271, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17039 218.587211 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=184551 Ack=23934 Win=65260 Len=0 Frame 17039: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 184551, Ack: 23934, Len: 0 No. Time Source Destination Protocol Length Info 17040 218.592677 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17040: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23934, Ack: 184271, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17041 218.599311 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2786590976, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 17041: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17042 218.599329 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2786590976, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 17042: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17043 218.599344 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2786590976, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 17043: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17044 218.599356 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2786590976, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 17044: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17045 218.604791 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17045: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23961, Ack: 184271, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17046 218.604822 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=184551 Ack=23988 Win=65206 Len=0 Frame 17046: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 184551, Ack: 23988, Len: 0 No. Time Source Destination Protocol Length Info 17047 218.604866 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 17047: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 23988, Ack: 184551, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 17048 218.610619 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17048: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24020, Ack: 184551, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17049 218.610649 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=184551 Ack=24047 Win=65147 Len=0 Frame 17049: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 184551, Ack: 24047, Len: 0 No. Time Source Destination Protocol Length Info 17050 218.616510 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17050: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24047, Ack: 184551, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17051 218.630857 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17051: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24074, Ack: 184551, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17052 218.630889 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=184551 Ack=24101 Win=65093 Len=0 Frame 17052: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 184551, Ack: 24101, Len: 0 No. Time Source Destination Protocol Length Info 17053 218.634995 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17053: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24101, Ack: 184551, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17054 218.641563 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 17054: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 184551, Ack: 24128, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 17055 218.641594 192.168.10.185 192.168.10.142 VNC 756 Authentication result Frame 17055: 756 bytes on wire (6048 bits), 756 bytes captured (6048 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 185811, Ack: 24128, Len: 702 Virtual Network Computing No. Time Source Destination Protocol Length Info 17056 218.642745 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17056: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24128, Ack: 184551, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17057 218.654247 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17057: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24155, Ack: 184551, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17058 218.654270 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=186513 Ack=24182 Win=65012 Len=0 Frame 17058: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 186513, Ack: 24182, Len: 0 No. Time Source Destination Protocol Length Info 17059 218.659406 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17059: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24182, Ack: 184551, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17060 218.664912 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17060: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24209, Ack: 184551, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17061 218.664943 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=186513 Ack=24236 Win=64958 Len=0 Frame 17061: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 186513, Ack: 24236, Len: 0 No. Time Source Destination Protocol Length Info 17062 218.679022 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=24236 Ack=186513 Win=64240 Len=0 Frame 17062: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24236, Ack: 186513, Len: 0 No. Time Source Destination Protocol Length Info 17063 218.679064 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 17063: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24236, Ack: 186513, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 17064 218.683834 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17064: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24268, Ack: 186513, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17065 218.683868 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=186513 Ack=24295 Win=64899 Len=0 Frame 17065: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 186513, Ack: 24295, Len: 0 No. Time Source Destination Protocol Length Info 17066 218.683911 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17066: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24295, Ack: 186513, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17067 218.688507 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17067: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24322, Ack: 186513, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17068 218.688540 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=186513 Ack=24349 Win=64845 Len=0 Frame 17068: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 186513, Ack: 24349, Len: 0 No. Time Source Destination Protocol Length Info 17069 218.690031 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 17069: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 186513, Ack: 24349, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 17070 218.690063 192.168.10.185 192.168.10.142 VNC 602 Authentication result Frame 17070: 602 bytes on wire (4816 bits), 602 bytes captured (4816 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 187773, Ack: 24349, Len: 548 Virtual Network Computing No. Time Source Destination Protocol Length Info 17071 218.696711 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17071: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24349, Ack: 186513, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17072 218.702968 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17072: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24376, Ack: 186513, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17073 218.703004 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=188321 Ack=24403 Win=64791 Len=0 Frame 17073: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 188321, Ack: 24403, Len: 0 No. Time Source Destination Protocol Length Info 17074 218.713658 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17074: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24403, Ack: 186513, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17075 218.722696 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=24430 Ack=188321 Win=64240 Len=0 Frame 17075: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24430, Ack: 188321, Len: 0 No. Time Source Destination Protocol Length Info 17076 218.722787 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 17076: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24430, Ack: 188321, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 17077 218.722819 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=188321 Ack=24462 Win=64732 Len=0 Frame 17077: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 188321, Ack: 24462, Len: 0 No. Time Source Destination Protocol Length Info 17078 218.722864 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17078: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24462, Ack: 188321, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17079 218.723289 192.168.10.185 192.168.10.142 VNC 290 Authentication result Frame 17079: 290 bytes on wire (2320 bits), 290 bytes captured (2320 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 188321, Ack: 24489, Len: 236 Virtual Network Computing No. Time Source Destination Protocol Length Info 17080 218.728756 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17080: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24489, Ack: 188321, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17081 218.741881 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 17081: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17082 218.741914 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 17082: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17083 218.741929 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 17083: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17084 218.741945 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 17084: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17085 218.741956 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 17085: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17086 218.741966 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 17086: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17087 218.741976 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 17087: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 17088 218.741987 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 17088: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 17089 218.741996 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 17089: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17090 218.742006 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 17090: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17091 218.742027 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 17091: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17092 218.742042 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 17092: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 17093 218.742077 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 17093: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17094 218.742087 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 17094: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17095 218.742097 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 17095: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 17096 218.742122 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 17096: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17097 218.742132 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 17097: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17098 218.742143 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 17098: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17099 218.742153 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 17099: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17100 218.742171 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 17100: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17101 218.742293 192.168.10.46 192.168.10.245 Syslog 214 LOCAL4.WARNING: Oct 03 2011 19:18:39 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n Frame 17101: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:18:39 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n No. Time Source Destination Protocol Length Info 17102 218.742306 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 17102: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17103 218.742317 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 17103: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 17104 218.742327 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 17104: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 17105 218.742337 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 17105: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17106 218.742348 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 17106: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17107 218.742358 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 17107: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17108 218.742368 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 17108: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17109 218.742378 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 17109: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 17110 218.742388 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 17110: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17111 218.742398 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 17111: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17112 218.742408 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 17112: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17113 218.742418 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 17113: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17114 218.742428 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 17114: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17115 218.742438 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 17115: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17116 218.742448 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 17116: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 17117 218.742459 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 17117: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 17118 218.742469 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 17118: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17119 218.742479 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 17119: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 17120 218.742489 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 17120: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17121 218.742499 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 17121: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17122 218.742509 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 17122: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 17123 218.742520 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 17123: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 17124 218.742530 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 17124: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 17125 218.742552 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 17125: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 17126 218.746892 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17126: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24516, Ack: 188321, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17127 218.746936 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=188557 Ack=24543 Win=64651 Len=0 Frame 17127: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 188557, Ack: 24543, Len: 0 No. Time Source Destination Protocol Length Info 17128 218.748840 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 17128: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15457, Ack: 1113678, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17129 218.748881 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1113678 Ack=15499 Win=46258 Len=0 Frame 17129: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1113678, Ack: 15499, Len: 0 No. Time Source Destination Protocol Length Info 17130 218.750630 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 17130: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24543, Ack: 188557, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 17131 218.761086 192.168.10.185 192.168.10.142 VNC 756 Authentication result Frame 17131: 756 bytes on wire (6048 bits), 756 bytes captured (6048 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 188557, Ack: 24575, Len: 702 Virtual Network Computing No. Time Source Destination Protocol Length Info 17132 218.774640 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17132: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24575, Ack: 188557, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17133 218.787009 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 17133: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24602, Ack: 189259, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 17134 218.787043 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=189259 Ack=24634 Win=64560 Len=0 Frame 17134: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 189259, Ack: 24634, Len: 0 No. Time Source Destination Protocol Length Info 17135 218.860628 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-00.geo.kaspersky.com Frame 17135: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 50262 (50262), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 17136 218.860816 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-00.geo.kaspersky.com Frame 17136: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 50262 (50262), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 17137 218.963084 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17137: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24634, Ack: 189259, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17138 218.976363 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 17138: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17139 218.976399 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 17139: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17140 219.016560 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17140: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24661, Ack: 189259, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17141 219.016600 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=189259 Ack=24688 Win=64506 Len=0 Frame 17141: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 189259, Ack: 24688, Len: 0 No. Time Source Destination Protocol Length Info 17142 219.150430 64.74.103.131 192.168.10.240 TLSv1 107 Application Data Frame 17142: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.240 (192.168.10.240) Transmission Control Protocol, Src Port: https (443), Dst Port: mentaserver (2118), Seq: 372, Ack: 372, Len: 53 Secure Sockets Layer No. Time Source Destination Protocol Length Info 17143 219.150541 192.168.10.240 64.74.103.131 TLSv1 107 Application Data Frame 17143: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.240 (192.168.10.240), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: mentaserver (2118), Dst Port: https (443), Seq: 372, Ack: 425, Len: 53 Secure Sockets Layer No. Time Source Destination Protocol Length Info 17144 219.150600 64.74.103.131 192.168.10.240 TCP 60 https > mentaserver [ACK] Seq=425 Ack=425 Win=65535 Len=0 Frame 17144: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.240 (192.168.10.240) Transmission Control Protocol, Src Port: https (443), Dst Port: mentaserver (2118), Seq: 425, Ack: 425, Len: 0 No. Time Source Destination Protocol Length Info 17145 219.153094 Watchgua_3c:4c:d8 Dell_ba:b4:3c ARP 60 Who has 192.168.10.240? Tell 192.168.10.1 Frame 17145: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17146 219.153130 Dell_ba:b4:3c Watchgua_3c:4c:d8 ARP 60 192.168.10.240 is at 00:1e:c9:ba:b4:3c Frame 17146: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 17147 219.186611 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17147: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24688, Ack: 189259, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17148 219.192556 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17148: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24715, Ack: 189259, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17149 219.192590 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=189259 Ack=24742 Win=64452 Len=0 Frame 17149: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 189259, Ack: 24742, Len: 0 No. Time Source Destination Protocol Length Info 17150 219.194787 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 17150: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 17151 219.207278 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 17151: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24769, Ack: 189259, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17152 219.207308 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17149#1] rfb > xrl [ACK] Seq=189259 Ack=24742 Win=64452 Len=0 SLE=24769 SRE=24796 Frame 17152: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 189259, Ack: 24742, Len: 0 No. Time Source Destination Protocol Length Info 17153 219.228089 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17153: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24796, Ack: 189259, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17154 219.228122 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17149#2] rfb > xrl [ACK] Seq=189259 Ack=24742 Win=64452 Len=0 SLE=24769 SRE=24823 Frame 17154: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 189259, Ack: 24742, Len: 0 No. Time Source Destination Protocol Length Info 17155 219.232747 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17155: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24823, Ack: 189259, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17156 219.232775 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17149#3] rfb > xrl [ACK] Seq=189259 Ack=24742 Win=64452 Len=0 SLE=24769 SRE=24850 Frame 17156: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 189259, Ack: 24742, Len: 0 No. Time Source Destination Protocol Length Info 17157 219.232827 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17157: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24850, Ack: 189259, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17158 219.232855 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17149#4] rfb > xrl [ACK] Seq=189259 Ack=24742 Win=64452 Len=0 SLE=24769 SRE=24877 Frame 17158: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 189259, Ack: 24742, Len: 0 No. Time Source Destination Protocol Length Info 17159 219.250882 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17159: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24877, Ack: 189259, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17160 219.250915 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17149#5] rfb > xrl [ACK] Seq=189259 Ack=24742 Win=64452 Len=0 SLE=24769 SRE=24904 Frame 17160: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 189259, Ack: 24742, Len: 0 No. Time Source Destination Protocol Length Info 17161 219.257333 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17161: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24904, Ack: 189259, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17162 219.257361 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17149#6] rfb > xrl [ACK] Seq=189259 Ack=24742 Win=64452 Len=0 SLE=24769 SRE=24931 Frame 17162: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 189259, Ack: 24742, Len: 0 No. Time Source Destination Protocol Length Info 17163 219.257426 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 17163: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24742, Ack: 189259, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17164 219.257456 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=189259 Ack=24931 Win=65535 Len=0 Frame 17164: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 189259, Ack: 24931, Len: 0 No. Time Source Destination Protocol Length Info 17165 219.260548 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17165: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24931, Ack: 189259, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17166 219.264532 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17166: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24958, Ack: 189259, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17167 219.264564 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=189259 Ack=24985 Win=65481 Len=0 Frame 17167: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 189259, Ack: 24985, Len: 0 No. Time Source Destination Protocol Length Info 17168 219.271685 192.168.10.185 192.168.10.142 VNC 386 Authentication result Frame 17168: 386 bytes on wire (3088 bits), 386 bytes captured (3088 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 189259, Ack: 24985, Len: 332 Virtual Network Computing No. Time Source Destination Protocol Length Info 17169 219.273022 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17169: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 24985, Ack: 189259, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17170 219.282873 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17170: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25012, Ack: 189259, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17171 219.282906 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=189591 Ack=25039 Win=65427 Len=0 Frame 17171: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 189591, Ack: 25039, Len: 0 No. Time Source Destination Protocol Length Info 17172 219.286811 192.168.10.203 178.175.101.199 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 17172: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 178.175.101.199 (178.175.101.199) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 17173 219.291173 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17173: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25039, Ack: 189259, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17174 219.295024 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 17174: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25066, Ack: 189591, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 17175 219.295057 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=189591 Ack=25098 Win=65368 Len=0 Frame 17175: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 189591, Ack: 25098, Len: 0 No. Time Source Destination Protocol Length Info 17176 219.295442 192.168.10.185 192.168.10.142 VNC 290 Authentication result Frame 17176: 290 bytes on wire (2320 bits), 290 bytes captured (2320 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 189591, Ack: 25098, Len: 236 Virtual Network Computing No. Time Source Destination Protocol Length Info 17177 219.309180 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17177: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25098, Ack: 189591, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17178 219.312921 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17178: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25125, Ack: 189591, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17179 219.312950 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=189827 Ack=25152 Win=65314 Len=0 Frame 17179: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 189827, Ack: 25152, Len: 0 No. Time Source Destination Protocol Length Info 17180 219.315608 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 17180: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 17181 219.316667 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17181: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25152, Ack: 189591, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17182 219.324601 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 17182: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25179, Ack: 189827, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 17183 219.324634 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=189827 Ack=25211 Win=65255 Len=0 Frame 17183: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 189827, Ack: 25211, Len: 0 No. Time Source Destination Protocol Length Info 17184 219.324673 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17184: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25211, Ack: 189827, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17185 219.325033 192.168.10.185 192.168.10.142 VNC 386 Authentication result Frame 17185: 386 bytes on wire (3088 bits), 386 bytes captured (3088 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 189827, Ack: 25238, Len: 332 Virtual Network Computing No. Time Source Destination Protocol Length Info 17186 219.337010 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17186: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25238, Ack: 189827, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17187 219.343705 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17187: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25265, Ack: 189827, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17188 219.343736 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=190159 Ack=25292 Win=65174 Len=0 Frame 17188: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 190159, Ack: 25292, Len: 0 No. Time Source Destination Protocol Length Info 17189 219.358748 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 17189: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25292, Ack: 190159, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 17190 219.362595 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17190: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25324, Ack: 190159, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17191 219.362626 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=190159 Ack=25351 Win=65115 Len=0 Frame 17191: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 190159, Ack: 25351, Len: 0 No. Time Source Destination Protocol Length Info 17192 219.362678 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17192: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25351, Ack: 190159, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17193 219.368719 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17193: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25378, Ack: 190159, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17194 219.368749 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=190159 Ack=25405 Win=65061 Len=0 Frame 17194: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 190159, Ack: 25405, Len: 0 No. Time Source Destination Protocol Length Info 17195 219.369285 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 17195: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 190159, Ack: 25405, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 17196 219.369314 192.168.10.185 192.168.10.142 VNC 482 Authentication result Frame 17196: 482 bytes on wire (3856 bits), 482 bytes captured (3856 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191419, Ack: 25405, Len: 428 Virtual Network Computing No. Time Source Destination Protocol Length Info 17197 219.378293 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 17197: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 17198 219.378321 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 17198: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 17199 219.383191 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17199: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25405, Ack: 190159, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17200 219.385245 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 17200: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15499, Ack: 1113678, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17201 219.385277 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1113678 Ack=15541 Win=46237 Len=0 Frame 17201: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1113678, Ack: 15541, Len: 0 No. Time Source Destination Protocol Length Info 17202 219.397211 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 17202: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25459, Ack: 190159, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17203 219.397241 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=191847 Ack=25432 Win=65034 Len=0 SLE=25459 SRE=25486 Frame 17203: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191847, Ack: 25432, Len: 0 No. Time Source Destination Protocol Length Info 17204 219.401917 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=25486 Ack=191847 Win=64240 Len=0 Frame 17204: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25486, Ack: 191847, Len: 0 No. Time Source Destination Protocol Length Info 17205 219.402091 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 17205: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25486, Ack: 191847, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 17206 219.402120 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17203#1] rfb > xrl [ACK] Seq=191847 Ack=25432 Win=65034 Len=0 SLE=25459 SRE=25518 Frame 17206: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191847, Ack: 25432, Len: 0 No. Time Source Destination Protocol Length Info 17207 219.406589 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17207: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25518, Ack: 191847, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17208 219.406619 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17203#2] rfb > xrl [ACK] Seq=191847 Ack=25432 Win=65034 Len=0 SLE=25459 SRE=25545 Frame 17208: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191847, Ack: 25432, Len: 0 No. Time Source Destination Protocol Length Info 17209 219.410875 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17209: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25545, Ack: 191847, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17210 219.410904 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17203#3] rfb > xrl [ACK] Seq=191847 Ack=25432 Win=65034 Len=0 SLE=25459 SRE=25572 Frame 17210: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191847, Ack: 25432, Len: 0 No. Time Source Destination Protocol Length Info 17211 219.428825 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 17211: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25432, Ack: 191847, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17212 219.428857 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=191847 Ack=25572 Win=64894 Len=0 Frame 17212: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191847, Ack: 25572, Len: 0 No. Time Source Destination Protocol Length Info 17213 219.444365 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 17213: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 17214 219.558983 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17214: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25572, Ack: 191847, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17215 219.566388 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 17215: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 17216 219.572308 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17216: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25599, Ack: 191847, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17217 219.572345 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=191847 Ack=25626 Win=64840 Len=0 Frame 17217: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191847, Ack: 25626, Len: 0 No. Time Source Destination Protocol Length Info 17218 219.576886 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17218: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25626, Ack: 191847, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17219 219.585340 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17219: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25653, Ack: 191847, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17220 219.585372 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=191847 Ack=25680 Win=64786 Len=0 Frame 17220: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191847, Ack: 25680, Len: 0 No. Time Source Destination Protocol Length Info 17221 219.592670 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17221: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25680, Ack: 191847, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17222 219.596734 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 934287616, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 17222: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17223 219.596754 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 934287616, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 17223: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17224 219.596767 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 934287616, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 17224: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17225 219.596779 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 934287616, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 17225: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17226 219.606822 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17226: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25707, Ack: 191847, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17227 219.606857 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=191847 Ack=25734 Win=64732 Len=0 Frame 17227: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191847, Ack: 25734, Len: 0 No. Time Source Destination Protocol Length Info 17228 219.611112 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17228: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25734, Ack: 191847, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17229 219.614941 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2803368192, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 17229: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17230 219.614962 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2803368192, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 17230: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17231 219.614974 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2803368192, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 17231: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17232 219.614987 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2803368192, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 17232: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17233 219.617099 Intel_a5:f5:44 Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.34 Frame 17233: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:44 (00:16:76:a5:f5:44), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17234 219.617126 Intel_a5:f5:44 Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.34 Frame 17234: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:44 (00:16:76:a5:f5:44), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17235 219.625076 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 17235: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25788, Ack: 191847, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17236 219.625110 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=191847 Ack=25761 Win=64705 Len=0 SLE=25788 SRE=25815 Frame 17236: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191847, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17237 219.632858 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17237: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25815, Ack: 191847, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17238 219.632893 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17236#1] rfb > xrl [ACK] Seq=191847 Ack=25761 Win=64705 Len=0 SLE=25788 SRE=25842 Frame 17238: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191847, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17239 219.641381 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17239: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25842, Ack: 191847, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17240 219.641416 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17236#2] rfb > xrl [ACK] Seq=191847 Ack=25761 Win=64705 Len=0 SLE=25788 SRE=25869 Frame 17240: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191847, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17241 219.654934 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17241: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25869, Ack: 191847, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17242 219.654970 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17236#3] rfb > xrl [ACK] Seq=191847 Ack=25761 Win=64705 Len=0 SLE=25788 SRE=25896 Frame 17242: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191847, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17243 219.656746 192.168.10.185 192.168.10.142 VNC 150 Authentication result Frame 17243: 150 bytes on wire (1200 bits), 150 bytes captured (1200 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191847, Ack: 25761, Len: 96 Virtual Network Computing No. Time Source Destination Protocol Length Info 17244 219.672938 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 17244: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25950, Ack: 191847, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17245 219.672974 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 17243#1] rfb > xrl [ACK] Seq=191943 Ack=25761 Win=64705 Len=0 SLE=25950 SRE=25977 SLE=25788 SRE=25896 Frame 17245: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17246 219.678870 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 17246: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25977, Ack: 191943, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 17247 219.678903 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 17243#2] rfb > xrl [ACK] Seq=191943 Ack=25761 Win=64705 Len=0 SLE=25950 SRE=26009 SLE=25788 SRE=25896 Frame 17247: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17248 219.682777 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17248: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 26009, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17249 219.682809 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 17243#3] rfb > xrl [ACK] Seq=191943 Ack=25761 Win=64705 Len=0 SLE=25950 SRE=26036 SLE=25788 SRE=25896 Frame 17249: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17250 219.712742 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 17250: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 26117, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17251 219.712777 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 17243#4] rfb > xrl [ACK] Seq=191943 Ack=25761 Win=64705 Len=0 SLE=26117 SRE=26144 SLE=25950 SRE=26036 Frame 17251: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17252 219.767589 192.168.10.104 192.168.10.246 NBNS 110 Refresh NB <01><02>__MSBROWSE__<02><01> Frame 17252: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 17253 219.831140 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 17253: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 26522, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17254 219.831175 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 17243#5] rfb > xrl [ACK] Seq=191943 Ack=25761 Win=64705 Len=0 SLE=26522 SRE=26549 SLE=26117 SRE=26144 Frame 17254: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17255 219.839012 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17255: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 26549, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17256 219.839047 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 17243#6] rfb > xrl [ACK] Seq=191943 Ack=25761 Win=64705 Len=0 SLE=26522 SRE=26576 SLE=26117 SRE=26144 Frame 17256: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17257 219.848884 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17257: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 26576, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17258 219.848917 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 17243#7] rfb > xrl [ACK] Seq=191943 Ack=25761 Win=64705 Len=0 SLE=26522 SRE=26603 SLE=26117 SRE=26144 Frame 17258: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17259 219.857030 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17259: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 26603, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17260 219.857063 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 17243#8] rfb > xrl [ACK] Seq=191943 Ack=25761 Win=64705 Len=0 SLE=26522 SRE=26630 SLE=26117 SRE=26144 Frame 17260: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17261 219.865189 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17261: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 26630, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17262 219.865221 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 17243#9] rfb > xrl [ACK] Seq=191943 Ack=25761 Win=64705 Len=0 SLE=26522 SRE=26657 SLE=26117 SRE=26144 Frame 17262: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17263 219.876990 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17263: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 26657, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17264 219.877022 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 17243#10] rfb > xrl [ACK] Seq=191943 Ack=25761 Win=64705 Len=0 SLE=26522 SRE=26684 SLE=26117 SRE=26144 Frame 17264: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17265 219.881114 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17265: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 26684, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17266 219.881146 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 17243#11] rfb > xrl [ACK] Seq=191943 Ack=25761 Win=64705 Len=0 SLE=26522 SRE=26711 SLE=26117 SRE=26144 Frame 17266: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17267 219.893007 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17267: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 26711, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17268 219.893042 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 17243#12] rfb > xrl [ACK] Seq=191943 Ack=25761 Win=64705 Len=0 SLE=26522 SRE=26738 SLE=26117 SRE=26144 Frame 17268: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17269 219.894213 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 17269: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 17270 219.894243 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 17270: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 17271 219.897458 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17271: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 26738, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17272 219.897491 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 17243#13] rfb > xrl [ACK] Seq=191943 Ack=25761 Win=64705 Len=0 SLE=26522 SRE=26765 SLE=26117 SRE=26144 Frame 17272: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17273 219.903007 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17273: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 26765, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17274 219.903040 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 17243#14] rfb > xrl [ACK] Seq=191943 Ack=25761 Win=64705 Len=0 SLE=26522 SRE=26792 SLE=26117 SRE=26144 Frame 17274: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17275 219.912792 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17275: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 26792, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17276 219.912825 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 17243#15] rfb > xrl [ACK] Seq=191943 Ack=25761 Win=64705 Len=0 SLE=26522 SRE=26819 SLE=26117 SRE=26144 Frame 17276: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17277 219.921143 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17277: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 26819, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17278 219.921174 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 17243#16] rfb > xrl [ACK] Seq=191943 Ack=25761 Win=64705 Len=0 SLE=26522 SRE=26846 SLE=26117 SRE=26144 Frame 17278: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17279 219.928726 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17279: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 26846, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17280 219.928758 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 17243#17] rfb > xrl [ACK] Seq=191943 Ack=25761 Win=64705 Len=0 SLE=26522 SRE=26873 SLE=26117 SRE=26144 Frame 17280: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17281 219.937027 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17281: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 26873, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17282 219.937059 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 17243#18] rfb > xrl [ACK] Seq=191943 Ack=25761 Win=64705 Len=0 SLE=26522 SRE=26900 SLE=26117 SRE=26144 Frame 17282: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17283 219.943173 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17283: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 26900, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17284 219.943218 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 17243#19] rfb > xrl [ACK] Seq=191943 Ack=25761 Win=64705 Len=0 SLE=26522 SRE=26927 SLE=26117 SRE=26144 Frame 17284: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17285 219.960544 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17285: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 26927, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17286 219.960579 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 17243#20] rfb > xrl [ACK] Seq=191943 Ack=25761 Win=64705 Len=0 SLE=26522 SRE=26954 SLE=26117 SRE=26144 Frame 17286: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17287 219.964794 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17287: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 26954, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17288 219.964828 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 17243#21] rfb > xrl [ACK] Seq=191943 Ack=25761 Win=64705 Len=0 SLE=26522 SRE=26981 SLE=26117 SRE=26144 Frame 17288: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17289 219.968931 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17289: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 26981, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17290 219.968964 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 17243#22] rfb > xrl [ACK] Seq=191943 Ack=25761 Win=64705 Len=0 SLE=26522 SRE=27008 SLE=26117 SRE=26144 Frame 17290: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 25761, Len: 0 No. Time Source Destination Protocol Length Info 17291 219.976606 192.168.10.142 192.168.10.185 VNC 1301 [TCP Fast Retransmission] Authentication result Frame 17291: 1301 bytes on wire (10408 bits), 1301 bytes captured (10408 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 25761, Ack: 191943, Len: 1247 Virtual Network Computing No. Time Source Destination Protocol Length Info 17292 219.985338 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17292: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27008, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17293 219.985371 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=191943 Ack=27035 Win=65535 Len=0 Frame 17293: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 27035, Len: 0 No. Time Source Destination Protocol Length Info 17294 219.991518 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17294: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27035, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17295 219.995223 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17295: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27062, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17296 219.995256 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=191943 Ack=27089 Win=65481 Len=0 Frame 17296: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 27089, Len: 0 No. Time Source Destination Protocol Length Info 17297 220.007034 192.168.10.115 64.74.103.129 TLSv1 91 Application Data Frame 17297: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.115 (192.168.10.115), Dst: 64.74.103.129 (64.74.103.129) Transmission Control Protocol, Src Port: cogsys-lm (3377), Dst Port: https (443), Seq: 260, Ack: 260, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 17298 220.007099 64.74.103.129 192.168.10.115 TCP 60 https > cogsys-lm [ACK] Seq=260 Ack=297 Win=65535 Len=0 Frame 17298: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Internet Protocol Version 4, Src: 64.74.103.129 (64.74.103.129), Dst: 192.168.10.115 (192.168.10.115) Transmission Control Protocol, Src Port: https (443), Dst Port: cogsys-lm (3377), Seq: 260, Ack: 297, Len: 0 No. Time Source Destination Protocol Length Info 17299 220.009207 Watchgua_3c:4c:d8 IntelCor_ed:1a:c9 ARP 60 Who has 192.168.10.115? Tell 192.168.10.1 Frame 17299: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17300 220.009220 IntelCor_ed:1a:c9 Watchgua_3c:4c:d8 ARP 60 192.168.10.115 is at 00:13:20:ed:1a:c9 Frame 17300: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 17301 220.009440 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 17301: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27116, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17302 220.009473 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17296#1] rfb > xrl [ACK] Seq=191943 Ack=27089 Win=65481 Len=0 SLE=27116 SRE=27143 Frame 17302: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 27089, Len: 0 No. Time Source Destination Protocol Length Info 17303 220.016087 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17303: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27143, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17304 220.016121 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17296#2] rfb > xrl [ACK] Seq=191943 Ack=27089 Win=65481 Len=0 SLE=27116 SRE=27170 Frame 17304: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 27089, Len: 0 No. Time Source Destination Protocol Length Info 17305 220.020634 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 17305: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15541, Ack: 1113678, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17306 220.020665 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1113678 Ack=15583 Win=46216 Len=0 Frame 17306: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1113678, Ack: 15583, Len: 0 No. Time Source Destination Protocol Length Info 17307 220.041094 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17307: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27170, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17308 220.041127 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17296#3] rfb > xrl [ACK] Seq=191943 Ack=27089 Win=65481 Len=0 SLE=27116 SRE=27197 Frame 17308: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 27089, Len: 0 No. Time Source Destination Protocol Length Info 17309 220.044973 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17309: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27197, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17310 220.045005 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17296#4] rfb > xrl [ACK] Seq=191943 Ack=27089 Win=65481 Len=0 SLE=27116 SRE=27224 Frame 17310: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 27089, Len: 0 No. Time Source Destination Protocol Length Info 17311 220.045307 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 17311: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27089, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17312 220.045349 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17312: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27224, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17313 220.045378 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=191943 Ack=27224 Win=65346 Len=0 Frame 17313: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 27224, Len: 0 No. Time Source Destination Protocol Length Info 17314 220.047545 192.168.10.185 192.168.10.142 VNC 159 Authentication result Frame 17314: 159 bytes on wire (1272 bits), 159 bytes captured (1272 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 191943, Ack: 27251, Len: 105 Virtual Network Computing No. Time Source Destination Protocol Length Info 17315 220.049002 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17315: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27251, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17316 220.054899 64.74.103.129 192.168.10.115 TLSv1 91 Application Data Frame 17316: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Internet Protocol Version 4, Src: 64.74.103.129 (64.74.103.129), Dst: 192.168.10.115 (192.168.10.115) Transmission Control Protocol, Src Port: https (443), Dst Port: cogsys-lm (3377), Seq: 260, Ack: 297, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 17317 220.064251 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17317: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27278, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17318 220.064293 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=27305 Win=65265 Len=0 Frame 17318: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 27305, Len: 0 No. Time Source Destination Protocol Length Info 17319 220.068822 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17319: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27305, Ack: 191943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17320 220.074368 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 17320: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27332, Ack: 192048, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 17321 220.074402 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=27364 Win=65206 Len=0 Frame 17321: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 27364, Len: 0 No. Time Source Destination Protocol Length Info 17322 220.082309 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17322: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27364, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17323 220.086808 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17323: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27391, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17324 220.086840 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=27418 Win=65152 Len=0 Frame 17324: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 27418, Len: 0 No. Time Source Destination Protocol Length Info 17325 220.091805 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17325: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27418, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17326 220.096806 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17326: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27445, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17327 220.096839 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=27472 Win=65098 Len=0 Frame 17327: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 27472, Len: 0 No. Time Source Destination Protocol Length Info 17328 220.112845 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17328: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27472, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17329 220.117687 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17329: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27499, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17330 220.117720 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=27526 Win=65044 Len=0 Frame 17330: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 27526, Len: 0 No. Time Source Destination Protocol Length Info 17331 220.120930 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17331: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27526, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17332 220.136726 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17332: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27553, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17333 220.136764 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=27580 Win=64990 Len=0 Frame 17333: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 27580, Len: 0 No. Time Source Destination Protocol Length Info 17334 220.265589 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 17334: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27607, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17335 220.265624 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17333#1] rfb > xrl [ACK] Seq=192048 Ack=27580 Win=64990 Len=0 SLE=27607 SRE=27634 Frame 17335: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 27580, Len: 0 No. Time Source Destination Protocol Length Info 17336 220.272658 192.168.10.115 64.74.103.129 TCP 60 cogsys-lm > https [ACK] Seq=297 Ack=297 Win=65313 Len=0 Frame 17336: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.115 (192.168.10.115), Dst: 64.74.103.129 (64.74.103.129) Transmission Control Protocol, Src Port: cogsys-lm (3377), Dst Port: https (443), Seq: 297, Ack: 297, Len: 0 No. Time Source Destination Protocol Length Info 17337 220.295074 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17337: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27634, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17338 220.295109 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17333#2] rfb > xrl [ACK] Seq=192048 Ack=27580 Win=64990 Len=0 SLE=27607 SRE=27661 Frame 17338: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 27580, Len: 0 No. Time Source Destination Protocol Length Info 17339 220.301158 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17339: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27661, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17340 220.301190 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17333#3] rfb > xrl [ACK] Seq=192048 Ack=27580 Win=64990 Len=0 SLE=27607 SRE=27688 Frame 17340: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 27580, Len: 0 No. Time Source Destination Protocol Length Info 17341 220.304848 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17341: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27688, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17342 220.304880 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17333#4] rfb > xrl [ACK] Seq=192048 Ack=27580 Win=64990 Len=0 SLE=27607 SRE=27715 Frame 17342: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 27580, Len: 0 No. Time Source Destination Protocol Length Info 17343 220.312864 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17343: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27715, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17344 220.312897 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17333#5] rfb > xrl [ACK] Seq=192048 Ack=27580 Win=64990 Len=0 SLE=27607 SRE=27742 Frame 17344: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 27580, Len: 0 No. Time Source Destination Protocol Length Info 17345 220.321331 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 17345: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27580, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17346 220.321364 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=27742 Win=64828 Len=0 Frame 17346: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 27742, Len: 0 No. Time Source Destination Protocol Length Info 17347 220.321722 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17347: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27742, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17348 220.331258 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17348: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27769, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17349 220.331293 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=27796 Win=64774 Len=0 Frame 17349: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 27796, Len: 0 No. Time Source Destination Protocol Length Info 17350 220.336832 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17350: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27796, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17351 220.343500 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17351: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27823, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17352 220.343535 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=27850 Win=64720 Len=0 Frame 17352: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 27850, Len: 0 No. Time Source Destination Protocol Length Info 17353 220.351309 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17353: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27850, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17354 220.361546 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17354: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27877, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17355 220.361580 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=27904 Win=64666 Len=0 Frame 17355: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 27904, Len: 0 No. Time Source Destination Protocol Length Info 17356 220.366891 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17356: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27904, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17357 220.376901 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17357: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27931, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17358 220.376935 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=27958 Win=64612 Len=0 Frame 17358: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 27958, Len: 0 No. Time Source Destination Protocol Length Info 17359 220.393622 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17359: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27958, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17360 220.397169 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17360: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 27985, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17361 220.397202 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=28012 Win=64558 Len=0 Frame 17361: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 28012, Len: 0 No. Time Source Destination Protocol Length Info 17362 220.402091 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17362: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28012, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17363 220.407026 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17363: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28039, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17364 220.407070 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=28066 Win=64504 Len=0 Frame 17364: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 28066, Len: 0 No. Time Source Destination Protocol Length Info 17365 220.416324 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17365: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28066, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17366 220.424799 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17366: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28093, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17367 220.424833 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=28120 Win=64450 Len=0 Frame 17367: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 28120, Len: 0 No. Time Source Destination Protocol Length Info 17368 220.437980 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 17368: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17369 220.438012 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 17369: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17370 220.439612 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17370: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28120, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17371 220.442960 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17371: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28147, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17372 220.442994 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=28174 Win=64396 Len=0 Frame 17372: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 28174, Len: 0 No. Time Source Destination Protocol Length Info 17373 220.448737 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17373: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28174, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17374 220.464955 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17374: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28201, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17375 220.464990 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=28228 Win=64342 Len=0 Frame 17375: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 28228, Len: 0 No. Time Source Destination Protocol Length Info 17376 220.481232 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17376: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28228, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17377 220.612410 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 951064832, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 17377: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17378 220.612435 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 951064832, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 17378: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17379 220.612448 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 951064832, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 17379: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17380 220.612460 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 951064832, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 17380: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17381 220.630418 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2820145408, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 17381: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17382 220.630437 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2820145408, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 17382: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17383 220.630449 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2820145408, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 17383: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17384 220.630461 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2820145408, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 17384: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17385 220.650592 192.168.10.118 96.8.81.129 TCP 60 versatalk > http [FIN, ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 17385: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.118 (192.168.10.118), Dst: 96.8.81.129 (96.8.81.129) Transmission Control Protocol, Src Port: versatalk (3738), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 17386 220.652438 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 17386: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15583, Ack: 1113678, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17387 220.652474 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1113678 Ack=15625 Win=46195 Len=0 Frame 17387: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1113678, Ack: 15625, Len: 0 No. Time Source Destination Protocol Length Info 17388 220.662009 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 17388: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17389 220.662039 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 17389: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17390 220.677645 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=28255 Win=64315 Len=0 Frame 17390: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 28255, Len: 0 No. Time Source Destination Protocol Length Info 17391 220.711375 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17391: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28255, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17392 220.736909 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17392: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28282, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17393 220.736943 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=28309 Win=65535 Len=0 Frame 17393: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 28309, Len: 0 No. Time Source Destination Protocol Length Info 17394 220.776949 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17394: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28309, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17395 220.786891 192.168.10.203 178.175.101.199 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 17395: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 178.175.101.199 (178.175.101.199) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 17396 220.792962 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17396: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28336, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17397 220.792996 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=28363 Win=65481 Len=0 Frame 17397: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 28363, Len: 0 No. Time Source Destination Protocol Length Info 17398 220.810381 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17398: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28363, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17399 220.826874 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17399: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28390, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17400 220.826908 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=28417 Win=65427 Len=0 Frame 17400: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 28417, Len: 0 No. Time Source Destination Protocol Length Info 17401 220.841248 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17401: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28417, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17402 220.851227 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17402: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28444, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17403 220.851263 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=28471 Win=65373 Len=0 Frame 17403: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 28471, Len: 0 No. Time Source Destination Protocol Length Info 17404 220.865006 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17404: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28471, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17405 220.882849 192.168.10.207 206.225.164.188 SMTP 264 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 17405: 264 bytes on wire (2112 bits), 264 bytes captured (2112 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 652681, Len: 210 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17406 220.882881 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=653951 Ack=9283 Win=46279 Len=0 Frame 17406: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 653951, Ack: 9283, Len: 0 No. Time Source Destination Protocol Length Info 17407 220.882945 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=9283 Ack=652681 Win=0 Len=0 Frame 17407: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9283, Ack: 652681, Len: 0 No. Time Source Destination Protocol Length Info 17408 220.992256 192.168.10.246 65.32.1.70 DNS 87 Standard query PTR 30.130.117.115.in-addr.arpa Frame 17408: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.70 (65.32.1.70) User Datagram Protocol, Src Port: 55289 (55289), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 17409 220.997291 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 17406#1] 9428 > smtp [ACK] Seq=653951 Ack=9283 Win=46279 Len=0 Frame 17409: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 653951, Ack: 9283, Len: 0 No. Time Source Destination Protocol Length Info 17410 220.997325 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=9283 Ack=652681 Win=0 Len=0 Frame 17410: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9283, Ack: 652681, Len: 0 No. Time Source Destination Protocol Length Info 17411 221.005751 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=28498 Win=65346 Len=0 Frame 17411: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 28498, Len: 0 No. Time Source Destination Protocol Length Info 17412 221.117097 Intel_a5:f5:44 Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.34 Frame 17412: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:44 (00:16:76:a5:f5:44), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17413 221.117128 Intel_a5:f5:44 Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.34 Frame 17413: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:44 (00:16:76:a5:f5:44), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17414 221.185118 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17414: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28498, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17415 221.194924 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 17415: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 17416 221.267608 192.168.10.104 192.168.10.246 NBNS 110 Refresh NB WORKGROUP<1d> Frame 17416: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 17417 221.275319 65.32.1.70 192.168.10.246 DNS 140 Standard query response PTR 115.117.130.30.static-delhi.vsnl.net.in Frame 17417: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.70 (65.32.1.70), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 55289 (55289) Domain Name System (response) No. Time Source Destination Protocol Length Info 17418 221.288271 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 17418: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15625, Ack: 1113678, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17419 221.288307 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1113678 Ack=15667 Win=46174 Len=0 Frame 17419: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1113678, Ack: 15667, Len: 0 No. Time Source Destination Protocol Length Info 17420 221.288541 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=15667 Ack=1113678 Win=49386 Len=0 Frame 17420: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15667, Ack: 1113678, Len: 0 No. Time Source Destination Protocol Length Info 17421 221.288572 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 17420#1] smtp > 23308 [ACK] Seq=15667 Ack=1113678 Win=49386 Len=0 Frame 17421: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15667, Ack: 1113678, Len: 0 No. Time Source Destination Protocol Length Info 17422 221.288601 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17422: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1113678, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17423 221.288630 206.225.164.186 192.168.10.207 SMTP 213 C: DATA fragment, 159 bytes Frame 17423: 213 bytes on wire (1704 bits), 213 bytes captured (1704 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1115058, Ack: 15667, Len: 159 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17424 221.288663 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17424: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1115217, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17425 221.288692 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17425: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1116597, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17426 221.288721 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17426: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1117977, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17427 221.288751 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17427: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1119357, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17428 221.288782 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17428: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1120737, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17429 221.288812 206.225.164.186 192.168.10.207 SMTP 1112 C: DATA fragment, 1058 bytes Frame 17429: 1112 bytes on wire (8896 bits), 1112 bytes captured (8896 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1122117, Ack: 15667, Len: 1058 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17430 221.288842 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17430: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1123175, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17431 221.288870 206.225.164.186 192.168.10.207 SMTP 933 C: DATA fragment, 879 bytes Frame 17431: 933 bytes on wire (7464 bits), 933 bytes captured (7464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1124555, Ack: 15667, Len: 879 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17432 221.288909 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=15667 Ack=1115217 Win=47847 Len=0 Frame 17432: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15667, Ack: 1115217, Len: 0 No. Time Source Destination Protocol Length Info 17433 221.288943 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17433: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1125434, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17434 221.288972 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=15667 Ack=1123175 Win=39889 Len=0 Frame 17434: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15667, Ack: 1123175, Len: 0 No. Time Source Destination Protocol Length Info 17435 221.289001 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17435: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1126814, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17436 221.289030 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17436: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1128194, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17437 221.289060 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17437: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1129574, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17438 221.289090 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=15667 Ack=1125434 Win=37630 Len=0 Frame 17438: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15667, Ack: 1125434, Len: 0 No. Time Source Destination Protocol Length Info 17439 221.289119 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17439: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1130954, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17440 221.289148 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17440: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1132334, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17441 221.289178 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17441: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1133714, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17442 221.289208 206.225.164.186 192.168.10.207 SMTP 1023 C: DATA fragment, 969 bytes Frame 17442: 1023 bytes on wire (8184 bits), 1023 bytes captured (8184 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1135094, Ack: 15667, Len: 969 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17443 221.289237 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17443: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1136063, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17444 221.289265 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=15667 Ack=1128194 Win=34870 Len=0 Frame 17444: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15667, Ack: 1128194, Len: 0 No. Time Source Destination Protocol Length Info 17445 221.289301 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17445: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1137443, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17446 221.289332 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17446: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1138823, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17447 221.289361 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=15667 Ack=1136063 Win=27001 Len=0 Frame 17447: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15667, Ack: 1136063, Len: 0 No. Time Source Destination Protocol Length Info 17448 221.289391 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17448: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1140203, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17449 221.289420 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17449: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1141583, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17450 221.289450 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17450: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1142963, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17451 221.289479 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=15667 Ack=1140203 Win=22861 Len=0 Frame 17451: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15667, Ack: 1140203, Len: 0 No. Time Source Destination Protocol Length Info 17452 221.289508 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17452: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1144343, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17453 221.289538 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17453: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1145723, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17454 221.289568 206.225.164.186 192.168.10.207 SMTP 770 C: DATA fragment, 716 bytes Frame 17454: 770 bytes on wire (6160 bits), 770 bytes captured (6160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1147103, Ack: 15667, Len: 716 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17455 221.289597 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17455: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1147819, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17456 221.289625 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=15667 Ack=1144343 Win=18721 Len=0 Frame 17456: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15667, Ack: 1144343, Len: 0 No. Time Source Destination Protocol Length Info 17457 221.289653 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17457: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1149199, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17458 221.289682 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17458: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1150579, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17459 221.289711 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=15667 Ack=1147103 Win=15961 Len=0 Frame 17459: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15667, Ack: 1147103, Len: 0 No. Time Source Destination Protocol Length Info 17460 221.289739 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17460: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1151959, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17461 221.289769 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17461: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1153339, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17462 221.289798 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=15667 Ack=1149199 Win=13865 Len=0 Frame 17462: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15667, Ack: 1149199, Len: 0 No. Time Source Destination Protocol Length Info 17463 221.289826 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17463: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1154719, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17464 221.289869 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17464: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1156099, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17465 221.289899 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17465: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1157479, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17466 221.289928 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17466: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1158859, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17467 221.289958 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 17467: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1160239, Ack: 15667, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17468 221.289986 206.225.164.186 192.168.10.207 SMTP 583 C: DATA fragment, 529 bytes Frame 17468: 583 bytes on wire (4664 bits), 583 bytes captured (4664 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1161619, Ack: 15667, Len: 529 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17469 221.290014 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=15667 Ack=1151959 Win=11105 Len=0 Frame 17469: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15667, Ack: 1151959, Len: 0 No. Time Source Destination Protocol Length Info 17470 221.290042 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=15667 Ack=1162148 Win=916 Len=0 Frame 17470: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15667, Ack: 1162148, Len: 0 No. Time Source Destination Protocol Length Info 17471 221.315603 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 17471: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 17472 221.333782 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=28525 Win=65319 Len=0 Frame 17472: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 28525, Len: 0 No. Time Source Destination Protocol Length Info 17473 221.376551 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 17473: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 17474 221.376583 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 17474: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 17475 221.386186 192.168.10.207 64.239.246.16 TCP 60 4857 > http [FIN, ACK] Seq=1 Ack=2 Win=65535 Len=0 Frame 17475: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 64.239.246.16 (64.239.246.16) Transmission Control Protocol, Src Port: 4857 (4857), Dst Port: http (80), Seq: 1, Ack: 2, Len: 0 No. Time Source Destination Protocol Length Info 17476 221.440307 192.168.10.30 192.168.10.255 UDP 764 Source port: 34427 Destination port: apc-3052 Frame 17476: 764 bytes on wire (6112 bits), 764 bytes captured (6112 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (722 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 37 3a 33 36 0a 53 52 3d 31 42 0a =18:47:36.SR=1B. 0060 53 55 3d 37 42 31 33 34 32 31 30 0a 52 44 3d 35 SU=7B134210.RD=5 0070 39 41 42 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 9AB.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 =08.7E=00.3E=001 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 .4C=207.3.50=040 00c0 2e 30 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 .0.43=025.2.78=0 00d0 37 2f 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 7/25/06.6A=0023: 00e0 0a 34 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 .47=S.63=BAI_UPS 00f0 20 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f .66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 =00.38=00.6E=NS0 0120 36 33 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 631005398 .6D=0 0130 37 2f 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 7/25/06.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 52 4d -UPS RT 10000 RM 0150 20 58 4c 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d XL.46=60.00.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 207.3.4E=204.4.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 =000.42=218.1.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e .5C=034.0.2F=16. 01d0 34 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 47.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 000.09=59.99;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 .E9=0.I0=2.I1=26 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a .I5=0.I6=0.I7=1. 0250 49 38 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 I8=Device 1.I9=0 0260 0a 49 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d .IA=Device 2.IB= 0270 30 0a 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 0.IC=Relay 1.ID= 0280 30 0a 53 48 3d 42 43 44 39 41 44 39 44 42 41 31 0.SH=BCD9AD9DBA1 0290 46 41 45 37 32 39 37 38 44 33 37 32 32 32 36 37 FAE72978D3722267 02a0 37 42 44 39 32 0a 4d 44 3d 66 36 65 30 66 33 62 7BD92.MD=f6e0f3b 02b0 37 31 39 61 65 30 37 36 64 63 62 62 34 36 64 35 719ae076dcbb46d5 02c0 37 63 66 65 30 31 66 34 39 0a 3c 2f 42 4f 44 59 7cfe01f49.</BODY 02d0 3e 0a >. No. Time Source Destination Protocol Length Info 17477 221.440449 192.168.10.30 192.168.10.255 UDP 764 Source port: 34427 Destination port: apc-3052 Frame 17477: 764 bytes on wire (6112 bits), 764 bytes captured (6112 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (722 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 37 3a 33 36 0a 53 52 3d 31 42 0a =18:47:36.SR=1B. 0060 53 55 3d 37 42 31 33 34 32 31 30 0a 52 44 3d 35 SU=7B134210.RD=5 0070 39 41 42 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 9AB.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 =08.7E=00.3E=001 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 .4C=207.3.50=040 00c0 2e 30 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 .0.43=025.2.78=0 00d0 37 2f 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 7/25/06.6A=0023: 00e0 0a 34 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 .47=S.63=BAI_UPS 00f0 20 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f .66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 =00.38=00.6E=NS0 0120 36 33 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 631005398 .6D=0 0130 37 2f 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 7/25/06.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 52 4d -UPS RT 10000 RM 0150 20 58 4c 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d XL.46=60.00.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 207.3.4E=204.4.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 =000.42=218.1.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e .5C=034.0.2F=16. 01d0 34 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 47.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 000.09=59.99;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 .E9=0.I0=2.I1=26 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a .I5=0.I6=0.I7=1. 0250 49 38 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 I8=Device 1.I9=0 0260 0a 49 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d .IA=Device 2.IB= 0270 30 0a 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 0.IC=Relay 1.ID= 0280 30 0a 53 48 3d 42 43 44 39 41 44 39 44 42 41 31 0.SH=BCD9AD9DBA1 0290 46 41 45 37 32 39 37 38 44 33 37 32 32 32 36 37 FAE72978D3722267 02a0 37 42 44 39 32 0a 4d 44 3d 66 36 65 30 66 33 62 7BD92.MD=f6e0f3b 02b0 37 31 39 61 65 30 37 36 64 63 62 62 34 36 64 35 719ae076dcbb46d5 02c0 37 63 66 65 30 31 66 34 39 0a 3c 2f 42 4f 44 59 7cfe01f49.</BODY 02d0 3e 0a >. No. Time Source Destination Protocol Length Info 17478 221.444437 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 17478: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 17479 221.465902 192.168.10.217 4.2.2.2 DNS 77 Standard query TXT _nfsv4idmapdomain Frame 17479: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.217 (192.168.10.217), Dst: 4.2.2.2 (4.2.2.2) User Datagram Protocol, Src Port: 51174 (51174), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 17480 221.472891 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17480: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28525, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17481 221.482570 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17481: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28552, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17482 221.482604 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=28579 Win=65265 Len=0 Frame 17482: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 28579, Len: 0 No. Time Source Destination Protocol Length Info 17483 221.484273 4.2.2.2 192.168.10.217 DNS 152 Standard query response, No such name Frame 17483: 152 bytes on wire (1216 bits), 152 bytes captured (1216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Oracle_86:77:66 (00:14:4f:86:77:66) Internet Protocol Version 4, Src: 4.2.2.2 (4.2.2.2), Dst: 192.168.10.217 (192.168.10.217) User Datagram Protocol, Src Port: domain (53), Dst Port: 51174 (51174) Domain Name System (response) No. Time Source Destination Protocol Length Info 17484 221.485289 Watchgua_3c:4c:d8 Oracle_86:77:66 ARP 60 Who has 192.168.10.217? Tell 192.168.10.1 Frame 17484: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Oracle_86:77:66 (00:14:4f:86:77:66) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17485 221.485305 Oracle_86:77:66 Watchgua_3c:4c:d8 ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 17485: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 17486 221.491115 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17486: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28579, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17487 221.505114 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17487: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28606, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17488 221.505147 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=28633 Win=65211 Len=0 Frame 17488: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 28633, Len: 0 No. Time Source Destination Protocol Length Info 17489 221.537381 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17489: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28633, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17490 221.566384 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 17490: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 17491 221.628044 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 967842048, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 17491: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17492 221.628068 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 967842048, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 17492: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17493 221.628080 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 967842048, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 17493: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17494 221.628093 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 967842048, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 17494: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17495 221.646091 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2836922624, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 17495: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17496 221.646115 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2836922624, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 17496: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17497 221.646127 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2836922624, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 17497: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17498 221.646142 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2836922624, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 17498: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17499 221.662022 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=28660 Win=65184 Len=0 Frame 17499: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 28660, Len: 0 No. Time Source Destination Protocol Length Info 17500 221.730225 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17500: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3101001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17501 221.730261 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17501: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3102401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17502 221.730321 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3103801 Win=65535 Len=0 Frame 17502: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3103801, Len: 0 No. Time Source Destination Protocol Length Info 17503 221.733153 Watchgua_3c:4c:d8 Dell_80:27:ab ARP 60 Who has 192.168.10.221? Tell 192.168.10.1 Frame 17503: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17504 221.733170 Dell_80:27:ab Watchgua_3c:4c:d8 ARP 60 192.168.10.221 is at 00:22:19:80:27:ab Frame 17504: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) [Duplicate IP address detected for 192.168.10.221 (00:22:19:80:27:ab) - also in use by 00:22:19:80:27:ad (frame 195)] Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 17505 221.746125 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 4 Port 45 TTL = 120 Frame 17505: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 17506 221.766593 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17506: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3103801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17507 221.766629 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17507: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3105201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17508 221.766680 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3106601 Win=65535 Len=0 Frame 17508: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3106601, Len: 0 No. Time Source Destination Protocol Length Info 17509 221.766711 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17509: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3106601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17510 221.785167 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17510: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3108001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17511 221.785203 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17511: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3109401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17512 221.785233 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17512: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3110801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17513 221.785262 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17513: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3112201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17514 221.785299 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17514: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3113601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17515 221.785344 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3109401 Win=65535 Len=0 Frame 17515: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3109401, Len: 0 No. Time Source Destination Protocol Length Info 17516 221.785373 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17516: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3115001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17517 221.785405 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17517: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3116401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17518 221.785435 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17518: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3117801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17519 221.785472 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3112201 Win=65535 Len=0 Frame 17519: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3112201, Len: 0 No. Time Source Destination Protocol Length Info 17520 221.785502 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17520: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3119201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17521 221.785532 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17521: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3120601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17522 221.785571 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3116401 Win=65535 Len=0 Frame 17522: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3116401, Len: 0 No. Time Source Destination Protocol Length Info 17523 221.785600 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17523: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3122001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17524 221.785630 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17524: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3123401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17525 221.785659 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17525: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3124801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17526 221.785696 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3120601 Win=65535 Len=0 Frame 17526: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3120601, Len: 0 No. Time Source Destination Protocol Length Info 17527 221.785725 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17527: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3126201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17528 221.785755 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17528: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3127601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17529 221.785794 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3123401 Win=65535 Len=0 Frame 17529: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3123401, Len: 0 No. Time Source Destination Protocol Length Info 17530 221.785829 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3127601 Win=65535 Len=0 Frame 17530: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3127601, Len: 0 No. Time Source Destination Protocol Length Info 17531 221.804631 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17531: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3129001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17532 221.804681 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3130401 Win=65535 Len=0 Frame 17532: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3130401, Len: 0 No. Time Source Destination Protocol Length Info 17533 221.804711 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17533: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3130401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17534 221.804741 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17534: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3131801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17535 221.804781 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3133201 Win=65535 Len=0 Frame 17535: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3133201, Len: 0 No. Time Source Destination Protocol Length Info 17536 221.804812 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17536: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3133201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17537 221.804844 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17537: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3134601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17538 221.804882 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3136001 Win=65535 Len=0 Frame 17538: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3136001, Len: 0 No. Time Source Destination Protocol Length Info 17539 221.821175 Dell_49:f2:ec Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.36 Frame 17539: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_49:f2:ec (00:14:22:49:f2:ec), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17540 221.821206 Dell_49:f2:ec Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.36 Frame 17540: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_49:f2:ec (00:14:22:49:f2:ec), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17541 221.822198 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17541: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3136001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17542 221.822432 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17542: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3137401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17543 221.822514 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3138801 Win=65535 Len=0 Frame 17543: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3138801, Len: 0 No. Time Source Destination Protocol Length Info 17544 221.822547 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17544: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3138801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17545 221.822700 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17545: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3140201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17546 221.822740 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3141601 Win=65535 Len=0 Frame 17546: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3141601, Len: 0 No. Time Source Destination Protocol Length Info 17547 221.822824 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17547: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3141601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17548 221.822887 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17548: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3143001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17549 221.822983 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3144401 Win=65535 Len=0 Frame 17549: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3144401, Len: 0 No. Time Source Destination Protocol Length Info 17550 221.840234 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17550: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3144401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17551 221.840333 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17551: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3145801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17552 221.840384 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3147201 Win=65535 Len=0 Frame 17552: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3147201, Len: 0 No. Time Source Destination Protocol Length Info 17553 221.840495 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17553: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3147201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17554 221.840611 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17554: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3148601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17555 221.840664 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3150001 Win=65535 Len=0 Frame 17555: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3150001, Len: 0 No. Time Source Destination Protocol Length Info 17556 221.840748 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17556: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3150001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17557 221.840849 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17557: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3151401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17558 221.840890 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3152801 Win=65535 Len=0 Frame 17558: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3152801, Len: 0 No. Time Source Destination Protocol Length Info 17559 221.873613 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17559: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28660, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17560 221.876941 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17560: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3152801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17561 221.876976 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17561: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3154201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17562 221.877012 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17562: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3155601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17563 221.877043 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17563: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3157001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17564 221.877072 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17564: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3158401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17565 221.877101 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17565: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3159801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17566 221.877145 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3155601 Win=65535 Len=0 Frame 17566: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3155601, Len: 0 No. Time Source Destination Protocol Length Info 17567 221.877175 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17567: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3161201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17568 221.877204 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17568: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3162601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17569 221.877241 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3158401 Win=65535 Len=0 Frame 17569: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3158401, Len: 0 No. Time Source Destination Protocol Length Info 17570 221.877271 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17570: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3164001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17571 221.877307 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3161201 Win=65535 Len=0 Frame 17571: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3161201, Len: 0 No. Time Source Destination Protocol Length Info 17572 221.877344 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3165401 Win=65535 Len=0 Frame 17572: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3165401, Len: 0 No. Time Source Destination Protocol Length Info 17573 221.877373 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17573: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3165401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17574 221.884998 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 17574: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 17575 221.885030 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 17575: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 17576 221.894650 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17576: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3166801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17577 221.894704 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3168201 Win=65535 Len=0 Frame 17577: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3168201, Len: 0 No. Time Source Destination Protocol Length Info 17578 221.894735 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17578: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3168201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17579 221.905239 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17579: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28687, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17580 221.905273 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=28714 Win=65130 Len=0 Frame 17580: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 28714, Len: 0 No. Time Source Destination Protocol Length Info 17581 221.908904 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 17581: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15667, Ack: 1162148, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17582 221.908936 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1162148 Ack=15709 Win=46153 Len=0 Frame 17582: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1162148, Ack: 15709, Len: 0 No. Time Source Destination Protocol Length Info 17583 221.913017 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17583: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3169601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17584 221.913064 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3171001 Win=65535 Len=0 Frame 17584: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3171001, Len: 0 No. Time Source Destination Protocol Length Info 17585 221.913094 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17585: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3171001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17586 221.913124 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17586: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3172401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17587 221.913166 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3173801 Win=65535 Len=0 Frame 17587: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3173801, Len: 0 No. Time Source Destination Protocol Length Info 17588 221.913213 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17588: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3173801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17589 221.913245 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17589: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3175201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17590 221.913288 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3176601 Win=65535 Len=0 Frame 17590: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3176601, Len: 0 No. Time Source Destination Protocol Length Info 17591 221.913320 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17591: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3176601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17592 221.931210 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17592: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3178001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17593 221.931261 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3179401 Win=65535 Len=0 Frame 17593: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3179401, Len: 0 No. Time Source Destination Protocol Length Info 17594 221.931292 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17594: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3179401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17595 221.931326 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17595: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3180801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17596 221.931367 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3182201 Win=65535 Len=0 Frame 17596: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3182201, Len: 0 No. Time Source Destination Protocol Length Info 17597 221.931399 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17597: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3182201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17598 221.931513 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17598: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3183601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17599 221.931555 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3185001 Win=65535 Len=0 Frame 17599: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3185001, Len: 0 No. Time Source Destination Protocol Length Info 17600 221.949257 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17600: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3185001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17601 221.949323 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17601: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3186401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17602 221.949371 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3187801 Win=65535 Len=0 Frame 17602: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3187801, Len: 0 No. Time Source Destination Protocol Length Info 17603 221.949442 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17603: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3187801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17604 221.950131 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17604: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3189201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17605 221.950174 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3190601 Win=65535 Len=0 Frame 17605: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3190601, Len: 0 No. Time Source Destination Protocol Length Info 17606 221.967117 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17606: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3190601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17607 221.967155 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17607: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3192001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17608 221.967257 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3193401 Win=65535 Len=0 Frame 17608: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3193401, Len: 0 No. Time Source Destination Protocol Length Info 17609 221.967326 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17609: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3193401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17610 221.967390 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17610: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3194801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17611 221.967436 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3196201 Win=65535 Len=0 Frame 17611: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3196201, Len: 0 No. Time Source Destination Protocol Length Info 17612 221.967526 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17612: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3196201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17613 221.985149 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17613: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3197601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17614 221.985214 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3199001 Win=65535 Len=0 Frame 17614: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3199001, Len: 0 No. Time Source Destination Protocol Length Info 17615 221.985247 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17615: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3199001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17616 221.985305 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17616: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3200401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17617 221.985397 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3201801 Win=65535 Len=0 Frame 17617: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3201801, Len: 0 No. Time Source Destination Protocol Length Info 17618 221.985466 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17618: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3201801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17619 221.985548 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17619: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3203201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17620 221.985587 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3204601 Win=65535 Len=0 Frame 17620: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3204601, Len: 0 No. Time Source Destination Protocol Length Info 17621 221.985665 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17621: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3204601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17622 221.985773 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17622: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3206001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17623 221.985857 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3207401 Win=65535 Len=0 Frame 17623: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3207401, Len: 0 No. Time Source Destination Protocol Length Info 17624 222.003539 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17624: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3207401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17625 222.003579 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17625: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3208801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17626 222.003632 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3210201 Win=65535 Len=0 Frame 17626: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3210201, Len: 0 No. Time Source Destination Protocol Length Info 17627 222.003697 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17627: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3210201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17628 222.003801 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17628: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3211601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17629 222.003862 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3213001 Win=65535 Len=0 Frame 17629: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3213001, Len: 0 No. Time Source Destination Protocol Length Info 17630 222.003947 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17630: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3213001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17631 222.004040 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17631: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3214401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17632 222.004113 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3215801 Win=65535 Len=0 Frame 17632: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3215801, Len: 0 No. Time Source Destination Protocol Length Info 17633 222.004202 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17633: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3215801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17634 222.004274 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17634: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3217201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17635 222.004356 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3218601 Win=65535 Len=0 Frame 17635: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3218601, Len: 0 No. Time Source Destination Protocol Length Info 17636 222.022213 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17636: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3218601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17637 222.022250 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17637: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3220001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17638 222.022307 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3221401 Win=65535 Len=0 Frame 17638: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3221401, Len: 0 No. Time Source Destination Protocol Length Info 17639 222.058040 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17639: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3221401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17640 222.058079 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17640: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3222801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17641 222.058109 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17641: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3224201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17642 222.058138 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17642: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3225601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17643 222.058169 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17643: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3227001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17644 222.058199 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17644: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3228401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17645 222.058244 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3224201 Win=65535 Len=0 Frame 17645: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3224201, Len: 0 No. Time Source Destination Protocol Length Info 17646 222.058278 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17646: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3229801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17647 222.058315 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3227001 Win=65535 Len=0 Frame 17647: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3227001, Len: 0 No. Time Source Destination Protocol Length Info 17648 222.058345 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17648: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3231201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17649 222.058374 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17649: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3232601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17650 222.058419 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3229801 Win=65535 Len=0 Frame 17650: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3229801, Len: 0 No. Time Source Destination Protocol Length Info 17651 222.058448 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17651: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3234001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17652 222.058477 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17652: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3235401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17653 222.058513 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3232601 Win=65535 Len=0 Frame 17653: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3232601, Len: 0 No. Time Source Destination Protocol Length Info 17654 222.058542 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17654: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3236801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17655 222.058572 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17655: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3238201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17656 222.058602 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17656: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3239601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17657 222.058638 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3235401 Win=65535 Len=0 Frame 17657: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3235401, Len: 0 No. Time Source Destination Protocol Length Info 17658 222.058677 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3239601 Win=64135 Len=0 Frame 17658: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3239601, Len: 0 No. Time Source Destination Protocol Length Info 17659 222.058706 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17659: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3241001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17660 222.058742 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3241001 Win=65535 Len=0 Frame 17660: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3241001, Len: 0 No. Time Source Destination Protocol Length Info 17661 222.058771 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17661: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3242401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17662 222.058807 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3243801 Win=65535 Len=0 Frame 17662: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3243801, Len: 0 No. Time Source Destination Protocol Length Info 17663 222.076035 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17663: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3243801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17664 222.076091 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17664: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3245201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17665 222.076180 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3246601 Win=65535 Len=0 Frame 17665: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3246601, Len: 0 No. Time Source Destination Protocol Length Info 17666 222.076364 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17666: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3246601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17667 222.093834 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17667: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3248001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17668 222.093877 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3249401 Win=65535 Len=0 Frame 17668: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3249401, Len: 0 No. Time Source Destination Protocol Length Info 17669 222.094097 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17669: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3249401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17670 222.094210 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17670: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3250801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17671 222.094279 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3252201 Win=65535 Len=0 Frame 17671: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3252201, Len: 0 No. Time Source Destination Protocol Length Info 17672 222.094369 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17672: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3252201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17673 222.094453 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17673: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3253601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17674 222.094493 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3255001 Win=65535 Len=0 Frame 17674: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3255001, Len: 0 No. Time Source Destination Protocol Length Info 17675 222.094722 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17675: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3255001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17676 222.094753 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17676: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3256401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17677 222.094793 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3257801 Win=65535 Len=0 Frame 17677: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3257801, Len: 0 No. Time Source Destination Protocol Length Info 17678 222.094824 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17678: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3257801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17679 222.112324 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17679: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3259201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17680 222.112379 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3260601 Win=65535 Len=0 Frame 17680: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3260601, Len: 0 No. Time Source Destination Protocol Length Info 17681 222.112648 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17681: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3260601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17682 222.112769 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17682: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3262001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17683 222.112850 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3263401 Win=65535 Len=0 Frame 17683: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3263401, Len: 0 No. Time Source Destination Protocol Length Info 17684 222.112932 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17684: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3263401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17685 222.113018 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17685: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3264801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17686 222.113057 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3266201 Win=65535 Len=0 Frame 17686: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3266201, Len: 0 No. Time Source Destination Protocol Length Info 17687 222.113139 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17687: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3266201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17688 222.130625 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17688: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3267601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17689 222.130666 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3269001 Win=65535 Len=0 Frame 17689: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3269001, Len: 0 No. Time Source Destination Protocol Length Info 17690 222.130706 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17690: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3269001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17691 222.130969 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17691: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3270401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17692 222.131016 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3271801 Win=65535 Len=0 Frame 17692: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3271801, Len: 0 No. Time Source Destination Protocol Length Info 17693 222.131091 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17693: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3271801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17694 222.131202 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17694: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3273201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17695 222.131272 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3274601 Win=65535 Len=0 Frame 17695: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3274601, Len: 0 No. Time Source Destination Protocol Length Info 17696 222.131369 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17696: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3274601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17697 222.131447 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17697: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3276001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17698 222.131485 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3277401 Win=65535 Len=0 Frame 17698: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3277401, Len: 0 No. Time Source Destination Protocol Length Info 17699 222.149364 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17699: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3277401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17700 222.149402 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17700: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3278801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17701 222.149450 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3280201 Win=65535 Len=0 Frame 17701: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3280201, Len: 0 No. Time Source Destination Protocol Length Info 17702 222.149483 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17702: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3280201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17703 222.149538 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17703: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3281601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17704 222.149579 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3283001 Win=65535 Len=0 Frame 17704: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3283001, Len: 0 No. Time Source Destination Protocol Length Info 17705 222.149667 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17705: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3283001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17706 222.149763 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17706: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3284401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17707 222.149807 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3285801 Win=65535 Len=0 Frame 17707: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3285801, Len: 0 No. Time Source Destination Protocol Length Info 17708 222.167125 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17708: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3285801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17709 222.167164 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17709: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3287201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17710 222.167213 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3288601 Win=65535 Len=0 Frame 17710: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3288601, Len: 0 No. Time Source Destination Protocol Length Info 17711 222.167333 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17711: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3288601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17712 222.167891 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17712: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3290001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17713 222.167939 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3291401 Win=65535 Len=0 Frame 17713: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3291401, Len: 0 No. Time Source Destination Protocol Length Info 17714 222.167968 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17714: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3291401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17715 222.167998 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17715: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3292801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17716 222.168040 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3294201 Win=65535 Len=0 Frame 17716: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3294201, Len: 0 No. Time Source Destination Protocol Length Info 17717 222.185523 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17717: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3294201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17718 222.185557 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17718: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3295601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17719 222.185602 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3297001 Win=65535 Len=0 Frame 17719: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3297001, Len: 0 No. Time Source Destination Protocol Length Info 17720 222.185632 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17720: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3297001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17721 222.185665 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17721: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3298401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17722 222.185702 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3299801 Win=65535 Len=0 Frame 17722: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3299801, Len: 0 No. Time Source Destination Protocol Length Info 17723 222.185733 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17723: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3299801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17724 222.185948 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17724: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3301201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17725 222.185997 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3302601 Win=65535 Len=0 Frame 17725: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3302601, Len: 0 No. Time Source Destination Protocol Length Info 17726 222.186030 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17726: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3302601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17727 222.186080 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17727: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3304001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17728 222.186172 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3305401 Win=65535 Len=0 Frame 17728: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3305401, Len: 0 No. Time Source Destination Protocol Length Info 17729 222.186251 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17729: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3305401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17730 222.222902 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17730: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3306801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17731 222.222938 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17731: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3308201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17732 222.222975 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17732: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3309601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17733 222.223004 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17733: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3311001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17734 222.223034 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17734: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3312401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17735 222.223081 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3308201 Win=65535 Len=0 Frame 17735: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3308201, Len: 0 No. Time Source Destination Protocol Length Info 17736 222.223113 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17736: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3313801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17737 222.223143 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17737: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3315201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17738 222.223181 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3311001 Win=65535 Len=0 Frame 17738: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3311001, Len: 0 No. Time Source Destination Protocol Length Info 17739 222.223211 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17739: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3316601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17740 222.223241 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17740: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3318001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17741 222.223278 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3313801 Win=65535 Len=0 Frame 17741: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3313801, Len: 0 No. Time Source Destination Protocol Length Info 17742 222.223315 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17742: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3319401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17743 222.223355 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3316601 Win=65535 Len=0 Frame 17743: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3316601, Len: 0 No. Time Source Destination Protocol Length Info 17744 222.223385 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17744: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3320801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17745 222.223415 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17745: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3322201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17746 222.223462 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3319401 Win=65535 Len=0 Frame 17746: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3319401, Len: 0 No. Time Source Destination Protocol Length Info 17747 222.223492 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17747: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3323601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17748 222.223522 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17748: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3325001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17749 222.223560 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3320801 Win=65535 Len=0 Frame 17749: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3320801, Len: 0 No. Time Source Destination Protocol Length Info 17750 222.223590 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17750: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3326401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17751 222.223627 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3323601 Win=65535 Len=0 Frame 17751: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3323601, Len: 0 No. Time Source Destination Protocol Length Info 17752 222.223656 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17752: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3327801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17753 222.223686 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17753: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3329201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17754 222.223722 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3326401 Win=65535 Len=0 Frame 17754: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3326401, Len: 0 No. Time Source Destination Protocol Length Info 17755 222.223752 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17755: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3330601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17756 222.223788 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3329201 Win=65535 Len=0 Frame 17756: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3329201, Len: 0 No. Time Source Destination Protocol Length Info 17757 222.223823 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3332001 Win=65535 Len=0 Frame 17757: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3332001, Len: 0 No. Time Source Destination Protocol Length Info 17758 222.240455 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17758: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3332001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17759 222.240495 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17759: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3333401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17760 222.240540 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3334801 Win=65535 Len=0 Frame 17760: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3334801, Len: 0 No. Time Source Destination Protocol Length Info 17761 222.240647 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17761: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3334801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17762 222.240682 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17762: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3336201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17763 222.240755 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3337601 Win=65535 Len=0 Frame 17763: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3337601, Len: 0 No. Time Source Destination Protocol Length Info 17764 222.241172 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17764: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3337601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17765 222.258876 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17765: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3339001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17766 222.258932 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3340401 Win=65535 Len=0 Frame 17766: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3340401, Len: 0 No. Time Source Destination Protocol Length Info 17767 222.258968 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17767: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3340401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17768 222.259005 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17768: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3341801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17769 222.259045 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3343201 Win=65535 Len=0 Frame 17769: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3343201, Len: 0 No. Time Source Destination Protocol Length Info 17770 222.259078 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17770: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3343201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17771 222.259137 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17771: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3344601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17772 222.259198 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3346001 Win=65535 Len=0 Frame 17772: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3346001, Len: 0 No. Time Source Destination Protocol Length Info 17773 222.259329 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17773: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3346001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17774 222.259442 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17774: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3347401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17775 222.259522 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3348801 Win=65535 Len=0 Frame 17775: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3348801, Len: 0 No. Time Source Destination Protocol Length Info 17776 222.259614 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17776: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3348801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17777 222.259666 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17777: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3350201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17778 222.259744 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3351601 Win=65535 Len=0 Frame 17778: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3351601, Len: 0 No. Time Source Destination Protocol Length Info 17779 222.276951 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17779: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3351601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17780 222.277236 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17780: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3353001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17781 222.277287 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3354401 Win=65535 Len=0 Frame 17781: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3354401, Len: 0 No. Time Source Destination Protocol Length Info 17782 222.277368 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17782: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3354401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17783 222.277599 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17783: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3355801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17784 222.277641 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3357201 Win=65535 Len=0 Frame 17784: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3357201, Len: 0 No. Time Source Destination Protocol Length Info 17785 222.277723 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17785: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3357201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17786 222.277838 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17786: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3358601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17787 222.277930 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3360001 Win=65535 Len=0 Frame 17787: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3360001, Len: 0 No. Time Source Destination Protocol Length Info 17788 222.296013 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17788: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3360001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17789 222.296047 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17789: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3361401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17790 222.296092 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3362801 Win=65535 Len=0 Frame 17790: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3362801, Len: 0 No. Time Source Destination Protocol Length Info 17791 222.296122 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17791: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3362801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17792 222.296155 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17792: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3364201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17793 222.296194 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3365601 Win=65535 Len=0 Frame 17793: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3365601, Len: 0 No. Time Source Destination Protocol Length Info 17794 222.296223 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17794: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3365601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17795 222.296259 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17795: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3367001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17796 222.296297 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3368401 Win=65535 Len=0 Frame 17796: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3368401, Len: 0 No. Time Source Destination Protocol Length Info 17797 222.296327 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17797: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3368401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17798 222.296357 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17798: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3369801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17799 222.296395 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3371201 Win=65535 Len=0 Frame 17799: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3371201, Len: 0 No. Time Source Destination Protocol Length Info 17800 222.306952 192.168.10.118 96.8.81.129 TCP 60 vipremoteagent > http [FIN, ACK] Seq=199 Ack=1 Win=65535 Len=0 Frame 17800: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.118 (192.168.10.118), Dst: 96.8.81.129 (96.8.81.129) Transmission Control Protocol, Src Port: vipremoteagent (3752), Dst Port: http (80), Seq: 199, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 17801 222.306986 96.8.81.129 192.168.10.118 TCP 60 http > vipremoteagent [ACK] Seq=1 Ack=200 Win=65535 Len=0 Frame 17801: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c) Internet Protocol Version 4, Src: 96.8.81.129 (96.8.81.129), Dst: 192.168.10.118 (192.168.10.118) Transmission Control Protocol, Src Port: http (80), Dst Port: vipremoteagent (3752), Seq: 1, Ack: 200, Len: 0 No. Time Source Destination Protocol Length Info 17802 222.307015 96.8.81.129 192.168.10.118 TCP 60 http > vipremoteagent [FIN, ACK] Seq=1 Ack=200 Win=65535 Len=0 Frame 17802: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c) Internet Protocol Version 4, Src: 96.8.81.129 (96.8.81.129), Dst: 192.168.10.118 (192.168.10.118) Transmission Control Protocol, Src Port: http (80), Dst Port: vipremoteagent (3752), Seq: 1, Ack: 200, Len: 0 No. Time Source Destination Protocol Length Info 17803 222.307054 192.168.10.118 96.8.81.129 TCP 60 vipremoteagent > http [ACK] Seq=200 Ack=2 Win=65535 Len=0 Frame 17803: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.118 (192.168.10.118), Dst: 96.8.81.129 (96.8.81.129) Transmission Control Protocol, Src Port: vipremoteagent (3752), Dst Port: http (80), Seq: 200, Ack: 2, Len: 0 No. Time Source Destination Protocol Length Info 17804 222.314132 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17804: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3371201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17805 222.314166 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17805: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3372601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17806 222.314212 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3374001 Win=65535 Len=0 Frame 17806: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3374001, Len: 0 No. Time Source Destination Protocol Length Info 17807 222.314245 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17807: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3374001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17808 222.314284 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17808: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3375401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17809 222.314320 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3376801 Win=65535 Len=0 Frame 17809: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3376801, Len: 0 No. Time Source Destination Protocol Length Info 17810 222.314349 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17810: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3376801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17811 222.314378 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17811: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3378201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17812 222.314418 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3379601 Win=65535 Len=0 Frame 17812: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3379601, Len: 0 No. Time Source Destination Protocol Length Info 17813 222.321233 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17813: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28714, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17814 222.327319 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17814: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28741, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17815 222.327357 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=28768 Win=65076 Len=0 Frame 17815: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 28768, Len: 0 No. Time Source Destination Protocol Length Info 17816 222.331981 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17816: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3379601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17817 222.332032 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17817: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3381001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17818 222.332122 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3382401 Win=65535 Len=0 Frame 17818: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3382401, Len: 0 No. Time Source Destination Protocol Length Info 17819 222.332200 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17819: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3382401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17820 222.332274 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17820: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3383801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17821 222.332313 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3385201 Win=65535 Len=0 Frame 17821: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3385201, Len: 0 No. Time Source Destination Protocol Length Info 17822 222.332402 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17822: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3385201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17823 222.332506 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17823: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3386601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17824 222.332551 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3388001 Win=65535 Len=0 Frame 17824: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3388001, Len: 0 No. Time Source Destination Protocol Length Info 17825 222.332642 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17825: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3388001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17826 222.336972 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17826: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28768, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17827 222.344148 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17827: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28795, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17828 222.344183 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=28822 Win=65022 Len=0 Frame 17828: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 28822, Len: 0 No. Time Source Destination Protocol Length Info 17829 222.350202 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17829: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3389401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17830 222.350254 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3390801 Win=65535 Len=0 Frame 17830: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3390801, Len: 0 No. Time Source Destination Protocol Length Info 17831 222.350287 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17831: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3390801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17832 222.350418 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17832: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3392201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17833 222.350459 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3393601 Win=65535 Len=0 Frame 17833: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3393601, Len: 0 No. Time Source Destination Protocol Length Info 17834 222.350491 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17834: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3393601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17835 222.350645 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17835: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3395001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17836 222.350688 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3396401 Win=65535 Len=0 Frame 17836: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3396401, Len: 0 No. Time Source Destination Protocol Length Info 17837 222.350740 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17837: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3396401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17838 222.350843 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17838: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3397801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17839 222.350929 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3399201 Win=65535 Len=0 Frame 17839: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3399201, Len: 0 No. Time Source Destination Protocol Length Info 17840 222.369109 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17840: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3399201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17841 222.369151 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17841: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3400601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17842 222.369197 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3402001 Win=65535 Len=0 Frame 17842: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3402001, Len: 0 No. Time Source Destination Protocol Length Info 17843 222.369227 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17843: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3402001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17844 222.369256 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17844: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3403401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17845 222.369300 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3404801 Win=65535 Len=0 Frame 17845: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3404801, Len: 0 No. Time Source Destination Protocol Length Info 17846 222.369339 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17846: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3404801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17847 222.369372 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17847: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3406201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17848 222.369414 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3407601 Win=65535 Len=0 Frame 17848: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3407601, Len: 0 No. Time Source Destination Protocol Length Info 17849 222.369453 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17849: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3407601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17850 222.369486 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17850: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3409001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17851 222.369525 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3410401 Win=65535 Len=0 Frame 17851: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3410401, Len: 0 No. Time Source Destination Protocol Length Info 17852 222.391780 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17852: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28822, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17853 222.404018 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17853: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28849, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17854 222.404050 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=28876 Win=64968 Len=0 Frame 17854: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 28876, Len: 0 No. Time Source Destination Protocol Length Info 17855 222.404093 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17855: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28876, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17856 222.408670 192.168.10.246 65.32.1.65 DNS 87 Standard query PTR 212.241.100.88.in-addr.arpa Frame 17856: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 63459 (63459), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 17857 222.413373 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17857: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28903, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17858 222.413407 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=28930 Win=64914 Len=0 Frame 17858: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 28930, Len: 0 No. Time Source Destination Protocol Length Info 17859 222.413445 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17859: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28930, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17860 222.413792 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17860: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28957, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17861 222.413824 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=28984 Win=64860 Len=0 Frame 17861: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 28984, Len: 0 No. Time Source Destination Protocol Length Info 17862 222.413864 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17862: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 28984, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17863 222.413915 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17863: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29011, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17864 222.413943 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=29038 Win=64806 Len=0 Frame 17864: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 29038, Len: 0 No. Time Source Destination Protocol Length Info 17865 222.422081 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17865: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29038, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17866 222.422980 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17866: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3410401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17867 222.423017 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17867: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3411801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17868 222.423047 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17868: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3413201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17869 222.423077 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17869: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3414601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17870 222.423107 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17870: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3416001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17871 222.423137 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17871: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3417401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17872 222.423166 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17872: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3418801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17873 222.423211 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3414601 Win=65535 Len=0 Frame 17873: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3414601, Len: 0 No. Time Source Destination Protocol Length Info 17874 222.423241 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17874: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3420201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17875 222.423270 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17875: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3421601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17876 222.423299 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17876: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3423001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17877 222.423338 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3417401 Win=65535 Len=0 Frame 17877: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3417401, Len: 0 No. Time Source Destination Protocol Length Info 17878 222.423367 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17878: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3424401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17879 222.423397 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17879: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3425801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17880 222.423426 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17880: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3427201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17881 222.423464 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3421601 Win=65535 Len=0 Frame 17881: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3421601, Len: 0 No. Time Source Destination Protocol Length Info 17882 222.423492 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17882: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3428601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17883 222.423531 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17883: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3430001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17884 222.423569 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3425801 Win=65535 Len=0 Frame 17884: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3425801, Len: 0 No. Time Source Destination Protocol Length Info 17885 222.423598 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17885: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3431401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17886 222.423628 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17886: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3432801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17887 222.423674 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3428601 Win=62735 Len=0 Frame 17887: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3428601, Len: 0 No. Time Source Destination Protocol Length Info 17888 222.423703 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17888: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3434201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17889 222.423740 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=3428601 Win=65535 Len=0 Frame 17889: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3428601, Len: 0 No. Time Source Destination Protocol Length Info 17890 222.423769 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17890: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3435601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17891 222.423798 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17891: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3437001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17892 222.423836 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3432801 Win=65535 Len=0 Frame 17892: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3432801, Len: 0 No. Time Source Destination Protocol Length Info 17893 222.423865 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17893: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3438401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17894 222.423895 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17894: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3439801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17895 222.423931 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3435601 Win=64135 Len=0 Frame 17895: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3435601, Len: 0 No. Time Source Destination Protocol Length Info 17896 222.423960 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17896: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3441201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17897 222.423996 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3438401 Win=61335 Len=0 Frame 17897: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3438401, Len: 0 No. Time Source Destination Protocol Length Info 17898 222.424031 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3441201 Win=58535 Len=0 Frame 17898: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3441201, Len: 0 No. Time Source Destination Protocol Length Info 17899 222.424060 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17899: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3442601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17900 222.424089 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17900: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3444001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17901 222.424124 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3442601 Win=60895 Len=0 Frame 17901: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3442601, Len: 0 No. Time Source Destination Protocol Length Info 17902 222.424160 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3444001 Win=65535 Len=0 Frame 17902: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3444001, Len: 0 No. Time Source Destination Protocol Length Info 17903 222.424188 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17903: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3445401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17904 222.424228 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3445401 Win=65535 Len=0 Frame 17904: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3445401, Len: 0 No. Time Source Destination Protocol Length Info 17905 222.427457 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17905: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29065, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17906 222.427489 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=29092 Win=64752 Len=0 Frame 17906: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 29092, Len: 0 No. Time Source Destination Protocol Length Info 17907 222.433312 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17907: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29092, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17908 222.449212 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17908: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29119, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17909 222.449248 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192048 Ack=29146 Win=64698 Len=0 Frame 17909: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 29146, Len: 0 No. Time Source Destination Protocol Length Info 17910 222.453668 192.168.10.185 192.168.10.142 VNC 762 Authentication result Frame 17910: 762 bytes on wire (6096 bits), 762 bytes captured (6096 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192048, Ack: 29146, Len: 708 Virtual Network Computing No. Time Source Destination Protocol Length Info 17911 222.457038 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 17911: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29173, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17912 222.457073 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17910#1] rfb > xrl [ACK] Seq=192756 Ack=29146 Win=64698 Len=0 SLE=29173 SRE=29200 Frame 17912: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192756, Ack: 29146, Len: 0 No. Time Source Destination Protocol Length Info 17913 222.465422 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17913: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29200, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17914 222.465455 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17910#2] rfb > xrl [ACK] Seq=192756 Ack=29146 Win=64698 Len=0 SLE=29173 SRE=29227 Frame 17914: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192756, Ack: 29146, Len: 0 No. Time Source Destination Protocol Length Info 17915 222.471031 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17915: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29227, Ack: 192048, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17916 222.471062 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17910#3] rfb > xrl [ACK] Seq=192756 Ack=29146 Win=64698 Len=0 SLE=29173 SRE=29254 Frame 17916: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192756, Ack: 29146, Len: 0 No. Time Source Destination Protocol Length Info 17917 222.478077 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17917: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3446801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17918 222.478115 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17918: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3448201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17919 222.478145 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17919: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3449601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17920 222.478175 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17920: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3451001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17921 222.478204 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17921: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3452401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17922 222.478250 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3448201 Win=65535 Len=0 Frame 17922: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3448201, Len: 0 No. Time Source Destination Protocol Length Info 17923 222.478287 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17923: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3453801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17924 222.478335 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3451001 Win=65535 Len=0 Frame 17924: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3451001, Len: 0 No. Time Source Destination Protocol Length Info 17925 222.478366 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17925: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3455201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17926 222.478445 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17926: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3456601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17927 222.478483 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3453801 Win=65535 Len=0 Frame 17927: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3453801, Len: 0 No. Time Source Destination Protocol Length Info 17928 222.478513 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17928: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3458001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17929 222.478543 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17929: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3459401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17930 222.478580 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3456601 Win=65535 Len=0 Frame 17930: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3456601, Len: 0 No. Time Source Destination Protocol Length Info 17931 222.478610 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17931: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3460801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17932 222.478641 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17932: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3462201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17933 222.478670 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 17933: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3463601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 17934 222.478707 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3459401 Win=65535 Len=0 Frame 17934: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3459401, Len: 0 No. Time Source Destination Protocol Length Info 17935 222.478744 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3462201 Win=65535 Len=0 Frame 17935: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3462201, Len: 0 No. Time Source Destination Protocol Length Info 17936 222.478780 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3465001 Win=65535 Len=0 Frame 17936: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3465001, Len: 0 No. Time Source Destination Protocol Length Info 17937 222.483636 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 17937: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29254, Ack: 192756, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 17938 222.483674 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17910#4] rfb > xrl [ACK] Seq=192756 Ack=29146 Win=64698 Len=0 SLE=29173 SRE=29286 Frame 17938: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192756, Ack: 29146, Len: 0 No. Time Source Destination Protocol Length Info 17939 222.493115 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17939: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29286, Ack: 192756, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17940 222.493149 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 17910#5] rfb > xrl [ACK] Seq=192756 Ack=29146 Win=64698 Len=0 SLE=29173 SRE=29313 Frame 17940: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192756, Ack: 29146, Len: 0 No. Time Source Destination Protocol Length Info 17941 222.493408 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 17941: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29146, Ack: 192756, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17942 222.493441 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192756 Ack=29313 Win=64531 Len=0 Frame 17942: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192756, Ack: 29313, Len: 0 No. Time Source Destination Protocol Length Info 17943 222.493481 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17943: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29313, Ack: 192756, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17944 222.497102 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17944: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29340, Ack: 192756, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17945 222.497135 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=192756 Ack=29367 Win=64477 Len=0 Frame 17945: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192756, Ack: 29367, Len: 0 No. Time Source Destination Protocol Length Info 17946 222.506050 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17946: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29367, Ack: 192756, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17947 222.509360 192.168.10.185 192.168.10.142 VNC 831 Authentication result Frame 17947: 831 bytes on wire (6648 bits), 831 bytes captured (6648 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 192756, Ack: 29394, Len: 777 Virtual Network Computing No. Time Source Destination Protocol Length Info 17948 222.515420 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17948: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29394, Ack: 192756, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17949 222.521466 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17949: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29421, Ack: 192756, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17950 222.521500 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=193533 Ack=29448 Win=64396 Len=0 Frame 17950: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 193533, Ack: 29448, Len: 0 No. Time Source Destination Protocol Length Info 17951 222.537581 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 17951: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15709, Ack: 1162148, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17952 222.537615 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1162148 Ack=15751 Win=46132 Len=0 Frame 17952: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1162148, Ack: 15751, Len: 0 No. Time Source Destination Protocol Length Info 17953 222.537720 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 17953: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15751, Ack: 1162148, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 17954 222.537754 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1162148 Ack=15793 Win=46111 Len=0 Frame 17954: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1162148, Ack: 15793, Len: 0 No. Time Source Destination Protocol Length Info 17955 222.568227 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17955: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29448, Ack: 192756, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17956 222.573084 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17956: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29475, Ack: 192756, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17957 222.573119 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=193533 Ack=29502 Win=64342 Len=0 Frame 17957: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 193533, Ack: 29502, Len: 0 No. Time Source Destination Protocol Length Info 17958 222.573361 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17958: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29502, Ack: 193533, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17959 222.573403 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 17959: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29529, Ack: 193533, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 17960 222.573432 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=193533 Ack=29561 Win=64283 Len=0 Frame 17960: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 193533, Ack: 29561, Len: 0 No. Time Source Destination Protocol Length Info 17961 222.584944 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 17961: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 193533, Ack: 29561, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 17962 222.584978 192.168.10.185 192.168.10.142 VNC 912 Authentication result Frame 17962: 912 bytes on wire (7296 bits), 912 bytes captured (7296 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 194793, Ack: 29561, Len: 858 Virtual Network Computing No. Time Source Destination Protocol Length Info 17963 222.603232 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17963: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29561, Ack: 193533, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17964 222.603276 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17964: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29588, Ack: 193533, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17965 222.603310 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=195651 Ack=29615 Win=65535 Len=0 Frame 17965: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 195651, Ack: 29615, Len: 0 No. Time Source Destination Protocol Length Info 17966 222.608070 190.174.146.198 192.168.10.207 TCP 62 13029 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 17966: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.174.146.198 (190.174.146.198), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13029 (13029), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 17967 222.608139 192.168.10.207 190.174.146.198 TCP 62 smtp > 13029 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 17967: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.174.146.198 (190.174.146.198) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 13029 (13029), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 17968 222.612660 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17968: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29615, Ack: 193533, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17969 222.617116 Intel_a5:f5:44 Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.34 Frame 17969: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:44 (00:16:76:a5:f5:44), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17970 222.617147 Intel_a5:f5:44 Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.34 Frame 17970: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:44 (00:16:76:a5:f5:44), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 17971 222.617624 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17971: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29642, Ack: 193533, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17972 222.617660 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=195651 Ack=29669 Win=65481 Len=0 Frame 17972: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 195651, Ack: 29669, Len: 0 No. Time Source Destination Protocol Length Info 17973 222.617703 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17973: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29669, Ack: 193533, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17974 222.617803 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17974: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29696, Ack: 193533, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17975 222.617837 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=195651 Ack=29723 Win=65427 Len=0 Frame 17975: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 195651, Ack: 29723, Len: 0 No. Time Source Destination Protocol Length Info 17976 222.617876 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17976: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29723, Ack: 193533, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17977 222.617914 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=29750 Ack=195651 Win=64240 Len=0 Frame 17977: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29750, Ack: 195651, Len: 0 No. Time Source Destination Protocol Length Info 17978 222.618109 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17978: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29750, Ack: 195651, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17979 222.618138 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=195651 Ack=29777 Win=65373 Len=0 Frame 17979: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 195651, Ack: 29777, Len: 0 No. Time Source Destination Protocol Length Info 17980 222.618178 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 17980: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29777, Ack: 195651, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 17981 222.618219 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17981: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29809, Ack: 195651, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17982 222.618247 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=195651 Ack=29836 Win=65314 Len=0 Frame 17982: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 195651, Ack: 29836, Len: 0 No. Time Source Destination Protocol Length Info 17983 222.623349 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17983: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29836, Ack: 195651, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17984 222.633771 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17984: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29863, Ack: 195651, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17985 222.633805 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=195651 Ack=29890 Win=65260 Len=0 Frame 17985: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 195651, Ack: 29890, Len: 0 No. Time Source Destination Protocol Length Info 17986 222.641568 192.168.10.185 192.168.10.142 VNC 1245 Authentication result Frame 17986: 1245 bytes on wire (9960 bits), 1245 bytes captured (9960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 195651, Ack: 29890, Len: 1191 Virtual Network Computing No. Time Source Destination Protocol Length Info 17987 222.642074 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17987: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29890, Ack: 195651, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17988 222.643617 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 984619264, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 17988: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17989 222.643637 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 984619264, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 17989: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17990 222.643650 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 984619264, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 17990: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17991 222.643662 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 984619264, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 17991: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17992 222.643787 192.168.10.220 208.67.220.220 DNS 88 Standard query PTR 199.101.175.178.in-addr.arpa Frame 17992: 88 bytes on wire (704 bits), 88 bytes captured (704 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.220.220 (208.67.220.220) User Datagram Protocol, Src Port: 60043 (60043), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 17993 222.652390 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17993: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29917, Ack: 195651, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17994 222.652428 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=196842 Ack=29944 Win=65206 Len=0 Frame 17994: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 196842, Ack: 29944, Len: 0 No. Time Source Destination Protocol Length Info 17995 222.657223 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 17995: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29944, Ack: 195651, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 17996 222.661790 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2853699840, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 17996: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17997 222.661812 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2853699840, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 17997: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17998 222.661824 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2853699840, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 17998: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 17999 222.661836 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2853699840, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 17999: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18000 222.666211 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18000: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29971, Ack: 195651, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18001 222.666244 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=196842 Ack=29998 Win=65152 Len=0 Frame 18001: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 196842, Ack: 29998, Len: 0 No. Time Source Destination Protocol Length Info 18002 222.673682 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 18002: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 29998, Ack: 196842, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 18003 222.673730 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18003: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30030, Ack: 196842, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18004 222.673759 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=196842 Ack=30057 Win=65093 Len=0 Frame 18004: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 196842, Ack: 30057, Len: 0 No. Time Source Destination Protocol Length Info 18005 222.675047 65.32.1.65 192.168.10.246 DNS 126 Standard query response PTR 212.241.broadband5.iol.cz Frame 18005: 126 bytes on wire (1008 bits), 126 bytes captured (1008 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 63459 (63459) Domain Name System (response) No. Time Source Destination Protocol Length Info 18006 222.684662 192.168.10.185 192.168.10.142 VNC 826 Authentication result Frame 18006: 826 bytes on wire (6608 bits), 826 bytes captured (6608 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 196842, Ack: 30057, Len: 772 Virtual Network Computing No. Time Source Destination Protocol Length Info 18007 222.684943 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18007: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30057, Ack: 196842, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18008 222.695182 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18008: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30084, Ack: 196842, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18009 222.695215 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=197614 Ack=30111 Win=65039 Len=0 Frame 18009: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 197614, Ack: 30111, Len: 0 No. Time Source Destination Protocol Length Info 18010 222.724834 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18010: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30111, Ack: 196842, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18011 222.724883 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18011: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30138, Ack: 196842, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18012 222.724913 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=197614 Ack=30165 Win=64985 Len=0 Frame 18012: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 197614, Ack: 30165, Len: 0 No. Time Source Destination Protocol Length Info 18013 222.729220 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 18013: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30165, Ack: 197614, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 18014 222.729262 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18014: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30197, Ack: 197614, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18015 222.729294 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=197614 Ack=30224 Win=64926 Len=0 Frame 18015: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 197614, Ack: 30224, Len: 0 No. Time Source Destination Protocol Length Info 18016 222.729634 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18016: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30224, Ack: 197614, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18017 222.729680 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18017: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30251, Ack: 197614, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18018 222.729710 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=197614 Ack=30278 Win=64872 Len=0 Frame 18018: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 197614, Ack: 30278, Len: 0 No. Time Source Destination Protocol Length Info 18019 222.736229 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18019: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3465001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18020 222.736261 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18020: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3466401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18021 222.736291 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18021: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3467801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18022 222.736323 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18022: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3469201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18023 222.736367 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3467801 Win=65535 Len=0 Frame 18023: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3467801, Len: 0 No. Time Source Destination Protocol Length Info 18024 222.736408 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3470601 Win=65535 Len=0 Frame 18024: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3470601, Len: 0 No. Time Source Destination Protocol Length Info 18025 222.754248 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18025: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3470601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18026 222.754394 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18026: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3472001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18027 222.754446 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3473401 Win=65535 Len=0 Frame 18027: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3473401, Len: 0 No. Time Source Destination Protocol Length Info 18028 222.754478 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18028: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3473401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18029 222.767724 192.168.10.104 192.168.10.246 NBNS 110 Refresh NB WORKGROUP<1d> Frame 18029: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 18030 222.768003 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18030: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30278, Ack: 197614, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18031 222.770016 208.67.220.220 192.168.10.220 DNS 88 Standard query response, No such name Frame 18031: 88 bytes on wire (704 bits), 88 bytes captured (704 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.220.220 (208.67.220.220), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 60043 (60043) Domain Name System (response) No. Time Source Destination Protocol Length Info 18032 222.772438 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18032: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3474801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18033 222.772490 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3476201 Win=65535 Len=0 Frame 18033: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3476201, Len: 0 No. Time Source Destination Protocol Length Info 18034 222.772526 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18034: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3476201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18035 222.772598 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18035: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3477601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18036 222.772644 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3479001 Win=65535 Len=0 Frame 18036: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3479001, Len: 0 No. Time Source Destination Protocol Length Info 18037 222.777084 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18037: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30305, Ack: 197614, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18038 222.777118 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=197614 Ack=30332 Win=64818 Len=0 Frame 18038: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 197614, Ack: 30332, Len: 0 No. Time Source Destination Protocol Length Info 18039 222.791105 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18039: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3479001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18040 222.791138 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18040: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3480401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18041 222.791184 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3481801 Win=65535 Len=0 Frame 18041: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3481801, Len: 0 No. Time Source Destination Protocol Length Info 18042 222.791214 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18042: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3481801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18043 222.791244 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18043: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3483201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18044 222.791286 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3484601 Win=65535 Len=0 Frame 18044: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3484601, Len: 0 No. Time Source Destination Protocol Length Info 18045 222.793220 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18045: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30332, Ack: 197614, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18046 222.809199 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18046: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3484601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18047 222.809232 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18047: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3486001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18048 222.809278 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3487401 Win=65535 Len=0 Frame 18048: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3487401, Len: 0 No. Time Source Destination Protocol Length Info 18049 222.809307 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18049: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3487401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18050 222.809336 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18050: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3488801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18051 222.809373 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3490201 Win=65535 Len=0 Frame 18051: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3490201, Len: 0 No. Time Source Destination Protocol Length Info 18052 222.809413 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18052: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3490201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18053 222.810994 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18053: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30359, Ack: 197614, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18054 222.811029 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=197614 Ack=30386 Win=64764 Len=0 Frame 18054: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 197614, Ack: 30386, Len: 0 No. Time Source Destination Protocol Length Info 18055 222.811068 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18055: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30386, Ack: 197614, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18056 222.819237 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18056: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30413, Ack: 197614, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18057 222.819269 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=197614 Ack=30440 Win=64710 Len=0 Frame 18057: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 197614, Ack: 30440, Len: 0 No. Time Source Destination Protocol Length Info 18058 222.821191 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 18058: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 197614, Ack: 30440, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 18059 222.821223 192.168.10.185 192.168.10.142 VNC 655 Authentication result Frame 18059: 655 bytes on wire (5240 bits), 655 bytes captured (5240 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 198874, Ack: 30440, Len: 601 Virtual Network Computing No. Time Source Destination Protocol Length Info 18060 222.823775 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18060: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30440, Ack: 197614, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18061 222.827190 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18061: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3491601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18062 222.827241 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3493001 Win=65535 Len=0 Frame 18062: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3493001, Len: 0 No. Time Source Destination Protocol Length Info 18063 222.827275 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18063: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3493001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18064 222.827339 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18064: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3494401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18065 222.827380 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3495801 Win=65535 Len=0 Frame 18065: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3495801, Len: 0 No. Time Source Destination Protocol Length Info 18066 222.827485 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18066: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3495801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18067 222.827566 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18067: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3497201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18068 222.827611 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3498601 Win=65535 Len=0 Frame 18068: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3498601, Len: 0 No. Time Source Destination Protocol Length Info 18069 222.827696 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18069: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3498601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18070 222.833185 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18070: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30467, Ack: 197614, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18071 222.833219 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=199475 Ack=30494 Win=64656 Len=0 Frame 18071: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 199475, Ack: 30494, Len: 0 No. Time Source Destination Protocol Length Info 18072 222.842308 190.174.146.198 192.168.10.207 TCP 60 13029 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 18072: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.174.146.198 (190.174.146.198), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13029 (13029), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 18073 222.842474 192.168.10.1 192.168.10.245 Syslog 206 LOCAL1.INFO: Oct 3 19:48:00 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.174.146.198 7x.x.x.3 13029 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 18073: 206 bytes on wire (1648 bits), 206 bytes captured (1648 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:00 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.174.146.198 7x.x.x.3 13029 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 18074 222.842507 192.168.10.207 190.174.146.198 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:47:35 -0400 Frame 18074: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.174.146.198 (190.174.146.198) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 13029 (13029), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18075 222.842550 190.174.146.198 192.168.10.207 TCP 60 13029 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 18075: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.174.146.198 (190.174.146.198), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13029 (13029), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 18076 222.845186 Watchgua_3c:4c:d8 SunrichT_19:cf:97 ARP 60 Who has 192.168.10.245? Tell 192.168.10.1 Frame 18076: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18077 222.845200 SunrichT_19:cf:97 Watchgua_3c:4c:d8 ARP 60 192.168.10.245 is at 00:0a:cd:19:cf:97 Frame 18077: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:97 (00:0a:cd:19:cf:97), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18078 222.845246 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18078: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3500001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18079 222.845292 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3501401 Win=65535 Len=0 Frame 18079: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3501401, Len: 0 No. Time Source Destination Protocol Length Info 18080 222.845432 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18080: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3501401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18081 222.845736 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18081: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3502801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18082 222.845781 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3504201 Win=65535 Len=0 Frame 18082: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3504201, Len: 0 No. Time Source Destination Protocol Length Info 18083 222.845813 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18083: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3504201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18084 222.845913 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18084: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3505601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18085 222.845955 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3507001 Win=65535 Len=0 Frame 18085: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3507001, Len: 0 No. Time Source Destination Protocol Length Info 18086 222.846022 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18086: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3507001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18087 222.850507 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18087: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30494, Ack: 197614, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18088 222.855222 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=30521 Ack=199475 Win=64240 Len=0 Frame 18088: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30521, Ack: 199475, Len: 0 No. Time Source Destination Protocol Length Info 18089 222.855310 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 18089: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30521, Ack: 199475, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 18090 222.855340 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=199475 Ack=30553 Win=64597 Len=0 Frame 18090: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 199475, Ack: 30553, Len: 0 No. Time Source Destination Protocol Length Info 18091 222.855383 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18091: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30553, Ack: 199475, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18092 222.855765 192.168.10.185 192.168.10.142 VNC 290 Authentication result Frame 18092: 290 bytes on wire (2320 bits), 290 bytes captured (2320 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 199475, Ack: 30580, Len: 236 Virtual Network Computing No. Time Source Destination Protocol Length Info 18093 222.859200 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18093: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30580, Ack: 199475, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18094 222.860452 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-00.geo.kaspersky.com Frame 18094: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 50262 (50262), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 18095 222.860597 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-00.geo.kaspersky.com Frame 18095: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 50262 (50262), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 18096 222.864177 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18096: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3508401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18097 222.864229 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3509801 Win=65535 Len=0 Frame 18097: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3509801, Len: 0 No. Time Source Destination Protocol Length Info 18098 222.864264 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18098: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3509801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18099 222.864294 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18099: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3511201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18100 222.864332 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3512601 Win=65535 Len=0 Frame 18100: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3512601, Len: 0 No. Time Source Destination Protocol Length Info 18101 222.864361 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18101: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3512601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18102 222.864394 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18102: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3514001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18103 222.864431 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3515401 Win=65535 Len=0 Frame 18103: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3515401, Len: 0 No. Time Source Destination Protocol Length Info 18104 222.864461 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18104: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3515401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18105 222.869169 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18105: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30607, Ack: 199475, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18106 222.869203 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=199711 Ack=30634 Win=64516 Len=0 Frame 18106: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 199711, Ack: 30634, Len: 0 No. Time Source Destination Protocol Length Info 18107 222.873359 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18107: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30634, Ack: 199475, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18108 222.882214 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18108: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3516801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18109 222.882261 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3518201 Win=65535 Len=0 Frame 18109: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3518201, Len: 0 No. Time Source Destination Protocol Length Info 18110 222.882291 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18110: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3518201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18111 222.882324 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18111: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3519601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18112 222.882361 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3521001 Win=65535 Len=0 Frame 18112: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3521001, Len: 0 No. Time Source Destination Protocol Length Info 18113 222.882392 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18113: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3521001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18114 222.882612 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18114: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3522401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18115 222.882668 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3523801 Win=65535 Len=0 Frame 18115: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3523801, Len: 0 No. Time Source Destination Protocol Length Info 18116 222.882700 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18116: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3523801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18117 222.882908 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18117: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3525201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18118 222.882948 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3526601 Win=65535 Len=0 Frame 18118: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3526601, Len: 0 No. Time Source Destination Protocol Length Info 18119 222.882977 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18119: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3526601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18120 222.883171 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 18120: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30661, Ack: 199711, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 18121 222.883204 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=199711 Ack=30693 Win=64457 Len=0 Frame 18121: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 199711, Ack: 30693, Len: 0 No. Time Source Destination Protocol Length Info 18122 222.883615 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18122: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30693, Ack: 199711, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18123 222.883647 192.168.10.185 192.168.10.142 VNC 386 Authentication result Frame 18123: 386 bytes on wire (3088 bits), 386 bytes captured (3088 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 199711, Ack: 30693, Len: 332 Virtual Network Computing No. Time Source Destination Protocol Length Info 18124 222.892897 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18124: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30720, Ack: 199711, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18125 222.892931 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=200043 Ack=30747 Win=64403 Len=0 Frame 18125: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 200043, Ack: 30747, Len: 0 No. Time Source Destination Protocol Length Info 18126 222.898831 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18126: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30747, Ack: 199711, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18127 222.900385 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18127: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3528001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18128 222.900428 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3529401 Win=65535 Len=0 Frame 18128: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3529401, Len: 0 No. Time Source Destination Protocol Length Info 18129 222.900478 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18129: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3529401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18130 222.900561 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18130: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3530801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18131 222.900601 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3532201 Win=65535 Len=0 Frame 18131: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3532201, Len: 0 No. Time Source Destination Protocol Length Info 18132 222.900693 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18132: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3532201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18133 222.901127 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18133: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3533601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18134 222.901171 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3535001 Win=65535 Len=0 Frame 18134: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3535001, Len: 0 No. Time Source Destination Protocol Length Info 18135 222.901210 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18135: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3535001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18136 222.901240 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18136: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3536401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18137 222.901277 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3537801 Win=65535 Len=0 Frame 18137: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3537801, Len: 0 No. Time Source Destination Protocol Length Info 18138 222.901803 192.168.10.246 65.32.1.65 DNS 85 Standard query PTR 36.181.69.88.in-addr.arpa Frame 18138: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 53081 (53081), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 18139 222.907205 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 18139: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30774, Ack: 200043, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 18140 222.907238 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=200043 Ack=30806 Win=64344 Len=0 Frame 18140: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 200043, Ack: 30806, Len: 0 No. Time Source Destination Protocol Length Info 18141 222.917609 192.168.10.185 192.168.10.142 VNC 466 Authentication result Frame 18141: 466 bytes on wire (3728 bits), 466 bytes captured (3728 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 200043, Ack: 30806, Len: 412 Virtual Network Computing No. Time Source Destination Protocol Length Info 18142 222.918869 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18142: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3537801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18143 222.918902 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18143: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3539201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18144 222.918945 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3540601 Win=65535 Len=0 Frame 18144: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3540601, Len: 0 No. Time Source Destination Protocol Length Info 18145 222.918975 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18145: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3540601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18146 222.919009 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18146: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3542001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18147 222.919046 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3543401 Win=65535 Len=0 Frame 18147: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3543401, Len: 0 No. Time Source Destination Protocol Length Info 18148 222.919074 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18148: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3543401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18149 222.919107 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18149: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3544801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18150 222.919143 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3546201 Win=65535 Len=0 Frame 18150: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3546201, Len: 0 No. Time Source Destination Protocol Length Info 18151 222.919175 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18151: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3546201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18152 222.919205 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18152: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3547601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18153 222.919244 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3549001 Win=65535 Len=0 Frame 18153: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3549001, Len: 0 No. Time Source Destination Protocol Length Info 18154 222.919290 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18154: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3549001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18155 222.937048 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18155: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3550401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18156 222.937104 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3551801 Win=65535 Len=0 Frame 18156: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3551801, Len: 0 No. Time Source Destination Protocol Length Info 18157 222.937136 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18157: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3551801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18158 222.937257 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18158: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3553201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18159 222.937348 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3554601 Win=65535 Len=0 Frame 18159: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3554601, Len: 0 No. Time Source Destination Protocol Length Info 18160 222.937380 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18160: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3554601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18161 222.937513 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18161: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3556001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18162 222.937554 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3557401 Win=65535 Len=0 Frame 18162: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3557401, Len: 0 No. Time Source Destination Protocol Length Info 18163 222.937607 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18163: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3557401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18164 222.937718 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18164: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3558801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18165 222.937804 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3560201 Win=65535 Len=0 Frame 18165: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3560201, Len: 0 No. Time Source Destination Protocol Length Info 18166 222.937886 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18166: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3560201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18167 222.951226 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 18167: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30806, Ack: 200455, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 18168 222.955423 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18168: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3561601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18169 222.955469 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3563001 Win=65535 Len=0 Frame 18169: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3563001, Len: 0 No. Time Source Destination Protocol Length Info 18170 222.955500 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18170: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3563001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18171 222.955646 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18171: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3564401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18172 222.955688 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3565801 Win=65535 Len=0 Frame 18172: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3565801, Len: 0 No. Time Source Destination Protocol Length Info 18173 222.955740 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18173: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3565801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18174 222.955851 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18174: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3567201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18175 222.955903 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3568601 Win=65535 Len=0 Frame 18175: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3568601, Len: 0 No. Time Source Destination Protocol Length Info 18176 222.955990 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18176: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3568601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18177 222.956085 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18177: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3570001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18178 222.956142 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3571401 Win=65535 Len=0 Frame 18178: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3571401, Len: 0 No. Time Source Destination Protocol Length Info 18179 222.956212 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18179: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3571401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18180 222.956360 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18180: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3572801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18181 222.956400 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3574201 Win=65535 Len=0 Frame 18181: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3574201, Len: 0 No. Time Source Destination Protocol Length Info 18182 222.956479 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18182: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3574201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18183 222.956554 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18183: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3575601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18184 222.956635 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3577001 Win=65535 Len=0 Frame 18184: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3577001, Len: 0 No. Time Source Destination Protocol Length Info 18185 222.973538 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18185: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3577001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18186 222.973577 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18186: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3578401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18187 222.973626 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3579801 Win=65535 Len=0 Frame 18187: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3579801, Len: 0 No. Time Source Destination Protocol Length Info 18188 222.973725 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18188: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3579801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18189 222.973819 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18189: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3581201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18190 222.973892 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3582601 Win=65535 Len=0 Frame 18190: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3582601, Len: 0 No. Time Source Destination Protocol Length Info 18191 222.973978 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18191: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3582601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18192 222.974047 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18192: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3584001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18193 222.974136 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3585401 Win=65535 Len=0 Frame 18193: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3585401, Len: 0 No. Time Source Destination Protocol Length Info 18194 222.974217 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18194: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3585401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18195 222.974278 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18195: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3586801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18196 222.974318 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3588201 Win=65535 Len=0 Frame 18196: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3588201, Len: 0 No. Time Source Destination Protocol Length Info 18197 222.974429 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18197: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3588201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18198 222.977220 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18198: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30838, Ack: 200455, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18199 222.977253 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=200455 Ack=30865 Win=64285 Len=0 Frame 18199: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 200455, Ack: 30865, Len: 0 No. Time Source Destination Protocol Length Info 18200 222.982351 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18200: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30865, Ack: 200455, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18201 222.982439 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18201: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30892, Ack: 200455, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18202 222.982501 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=200455 Ack=30919 Win=65535 Len=0 Frame 18202: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 200455, Ack: 30919, Len: 0 No. Time Source Destination Protocol Length Info 18203 222.987152 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18203: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30919, Ack: 200455, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18204 222.992027 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18204: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3589601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18205 222.992074 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3591001 Win=65535 Len=0 Frame 18205: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3591001, Len: 0 No. Time Source Destination Protocol Length Info 18206 222.992106 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18206: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3591001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18207 222.992315 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18207: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3592401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18208 222.992354 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3593801 Win=65535 Len=0 Frame 18208: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3593801, Len: 0 No. Time Source Destination Protocol Length Info 18209 222.992388 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18209: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3593801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18210 222.992444 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18210: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3595201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18211 222.992501 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3596601 Win=65535 Len=0 Frame 18211: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3596601, Len: 0 No. Time Source Destination Protocol Length Info 18212 222.992559 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18212: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3596601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18213 222.992678 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18213: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3598001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18214 222.992720 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3599401 Win=65535 Len=0 Frame 18214: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3599401, Len: 0 No. Time Source Destination Protocol Length Info 18215 222.992811 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18215: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3599401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18216 222.992918 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18216: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3600801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18217 222.992965 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3602201 Win=65535 Len=0 Frame 18217: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3602201, Len: 0 No. Time Source Destination Protocol Length Info 18218 222.993030 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18218: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3602201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18219 222.993150 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18219: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3603601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18220 222.993191 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3605001 Win=65535 Len=0 Frame 18220: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3605001, Len: 0 No. Time Source Destination Protocol Length Info 18221 222.993277 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18221: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3605001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18222 222.993322 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18222: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30946, Ack: 200455, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18223 222.993354 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=200455 Ack=30973 Win=65481 Len=0 Frame 18223: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 200455, Ack: 30973, Len: 0 No. Time Source Destination Protocol Length Info 18224 222.993385 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18224: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3606401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18225 222.993424 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3607801 Win=65535 Len=0 Frame 18225: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3607801, Len: 0 No. Time Source Destination Protocol Length Info 18226 223.001182 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18226: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 30973, Ack: 200455, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18227 223.006176 192.168.10.185 192.168.10.142 VNC 290 Authentication result Frame 18227: 290 bytes on wire (2320 bits), 290 bytes captured (2320 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 200455, Ack: 31000, Len: 236 Virtual Network Computing No. Time Source Destination Protocol Length Info 18228 223.009280 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18228: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31000, Ack: 200455, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18229 223.010387 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18229: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3607801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18230 223.010462 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18230: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3609201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18231 223.010557 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3610601 Win=65535 Len=0 Frame 18231: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3610601, Len: 0 No. Time Source Destination Protocol Length Info 18232 223.010622 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18232: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3610601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18233 223.010708 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18233: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3612001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18234 223.010748 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3613401 Win=65535 Len=0 Frame 18234: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3613401, Len: 0 No. Time Source Destination Protocol Length Info 18235 223.010837 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18235: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3613401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18236 223.010975 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18236: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3614801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18237 223.011024 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3616201 Win=65535 Len=0 Frame 18237: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3616201, Len: 0 No. Time Source Destination Protocol Length Info 18238 223.011059 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18238: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3616201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18239 223.011208 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18239: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3617601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18240 223.011248 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3619001 Win=65535 Len=0 Frame 18240: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3619001, Len: 0 No. Time Source Destination Protocol Length Info 18241 223.011333 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18241: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3619001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18242 223.011416 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18242: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3620401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18243 223.011495 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3621801 Win=65535 Len=0 Frame 18243: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3621801, Len: 0 No. Time Source Destination Protocol Length Info 18244 223.015126 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18244: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31027, Ack: 200455, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18245 223.015156 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=200691 Ack=31054 Win=65400 Len=0 Frame 18245: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 200691, Ack: 31054, Len: 0 No. Time Source Destination Protocol Length Info 18246 223.023128 65.32.1.65 192.168.10.246 DNS 138 Standard query response PTR dslb-088-069-181-036.pools.arcor-ip.net Frame 18246: 138 bytes on wire (1104 bits), 138 bytes captured (1104 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 53081 (53081) Domain Name System (response) No. Time Source Destination Protocol Length Info 18247 223.025460 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18247: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31054, Ack: 200455, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18248 223.028675 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18248: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3621801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18249 223.028830 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18249: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3623201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18250 223.028872 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3624601 Win=65535 Len=0 Frame 18250: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3624601, Len: 0 No. Time Source Destination Protocol Length Info 18251 223.028923 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18251: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3624601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18252 223.029026 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18252: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3626001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18253 223.029121 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3627401 Win=65535 Len=0 Frame 18253: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3627401, Len: 0 No. Time Source Destination Protocol Length Info 18254 223.029199 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18254: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3627401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18255 223.029281 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18255: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3628801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18256 223.029342 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3630201 Win=65535 Len=0 Frame 18256: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3630201, Len: 0 No. Time Source Destination Protocol Length Info 18257 223.029373 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18257: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3630201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18258 223.029535 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18258: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3631601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18259 223.029573 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3633001 Win=65535 Len=0 Frame 18259: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3633001, Len: 0 No. Time Source Destination Protocol Length Info 18260 223.029625 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18260: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3633001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18261 223.029780 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18261: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3634401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18262 223.029818 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3635801 Win=65535 Len=0 Frame 18262: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3635801, Len: 0 No. Time Source Destination Protocol Length Info 18263 223.029870 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18263: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3635801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18264 223.031807 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 18264: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31081, Ack: 200691, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 18265 223.031838 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=200691 Ack=31113 Win=65341 Len=0 Frame 18265: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 200691, Ack: 31113, Len: 0 No. Time Source Destination Protocol Length Info 18266 223.046626 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18266: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3637201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18267 223.046669 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3638601 Win=65535 Len=0 Frame 18267: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3638601, Len: 0 No. Time Source Destination Protocol Length Info 18268 223.046709 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18268: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3638601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18269 223.046916 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18269: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3640001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18270 223.046955 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3641401 Win=65535 Len=0 Frame 18270: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3641401, Len: 0 No. Time Source Destination Protocol Length Info 18271 223.046986 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18271: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3641401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18272 223.047400 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18272: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3642801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18273 223.047439 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3644201 Win=65535 Len=0 Frame 18273: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3644201, Len: 0 No. Time Source Destination Protocol Length Info 18274 223.047531 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18274: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3644201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18275 223.047594 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18275: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3645601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18276 223.047686 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3647001 Win=65535 Len=0 Frame 18276: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3647001, Len: 0 No. Time Source Destination Protocol Length Info 18277 223.047763 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18277: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3647001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18278 223.047837 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18278: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3648401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18279 223.047876 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3649801 Win=65535 Len=0 Frame 18279: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3649801, Len: 0 No. Time Source Destination Protocol Length Info 18280 223.047964 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18280: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3649801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18281 223.048068 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18281: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3651201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18282 223.048114 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3652601 Win=65535 Len=0 Frame 18282: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3652601, Len: 0 No. Time Source Destination Protocol Length Info 18283 223.048238 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18283: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3652601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18284 223.048315 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18284: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3654001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18285 223.048355 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3655401 Win=65535 Len=0 Frame 18285: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3655401, Len: 0 No. Time Source Destination Protocol Length Info 18286 223.048445 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18286: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3655401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18287 223.048538 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18287: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3656801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18288 223.048597 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3658201 Win=65535 Len=0 Frame 18288: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3658201, Len: 0 No. Time Source Destination Protocol Length Info 18289 223.065709 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18289: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3658201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18290 223.065815 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18290: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3659601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18291 223.065863 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3661001 Win=65535 Len=0 Frame 18291: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3661001, Len: 0 No. Time Source Destination Protocol Length Info 18292 223.065942 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18292: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3661001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18293 223.066048 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18293: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3662401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18294 223.066107 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3663801 Win=65535 Len=0 Frame 18294: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3663801, Len: 0 No. Time Source Destination Protocol Length Info 18295 223.066200 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18295: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3663801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18296 223.066322 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18296: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3665201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18297 223.066362 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3666601 Win=65535 Len=0 Frame 18297: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3666601, Len: 0 No. Time Source Destination Protocol Length Info 18298 223.066452 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18298: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3666601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18299 223.066524 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18299: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3668001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18300 223.066609 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3669401 Win=65535 Len=0 Frame 18300: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3669401, Len: 0 No. Time Source Destination Protocol Length Info 18301 223.066687 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18301: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3669401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18302 223.066772 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18302: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3670801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18303 223.066812 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3672201 Win=65535 Len=0 Frame 18303: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3672201, Len: 0 No. Time Source Destination Protocol Length Info 18304 223.066899 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18304: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3672201, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18305 223.067028 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18305: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3673601, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18306 223.067068 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3675001 Win=65535 Len=0 Frame 18306: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3675001, Len: 0 No. Time Source Destination Protocol Length Info 18307 223.067124 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18307: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3675001, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18308 223.067231 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18308: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3676401, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18309 223.067311 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3677801 Win=65535 Len=0 Frame 18309: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3677801, Len: 0 No. Time Source Destination Protocol Length Info 18310 223.067397 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU] Frame 18310: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3677801, Ack: 3042, Len: 1400 No. Time Source Destination Protocol Length Info 18311 223.067429 24.143.205.163 192.168.10.221 TCP 794 [TCP segment of a reassembled PDU] Frame 18311: 794 bytes on wire (6352 bits), 794 bytes captured (6352 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3679201, Ack: 3042, Len: 740 No. Time Source Destination Protocol Length Info 18312 223.067510 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3679941 Win=65535 Len=0 Frame 18312: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3679941, Len: 0 No. Time Source Destination Protocol Length Info 18313 223.067586 24.143.205.163 192.168.10.221 TCP 60 http > 4795 [FIN, ACK] Seq=3679941 Ack=3042 Win=65535 Len=0 Frame 18313: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3679941, Ack: 3042, Len: 0 No. Time Source Destination Protocol Length Info 18314 223.067625 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=3679942 Win=65535 Len=0 Frame 18314: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3679942, Len: 0 No. Time Source Destination Protocol Length Info 18315 223.067865 192.168.10.1 192.168.10.245 Syslog 537 LOCAL1.INFO: Oct 3 19:48:01 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.163 4795 80 msg="HTTP Request" proxy_act="HTTP-Client.EndUser" op="GET" dstname="akampr.fullproduct.download.microsoft.com" arg="/dl/download/release/5/8/0/SW_CD_Windows_XP_Professional_English_-2_1_w_SP2_ISO_MLF_X12-58046.ISO?LCID=1033\x26PGM=VLSC\x26TID=43206728\x26__gda__=1317771840_930cd5d71c60b9adfd653e6c18ca13e6" sent_bytes="3041" rcvd_bytes="3679940" (HTTP-proxy.endusers-00) Frame 18315: 537 bytes on wire (4296 bits), 537 bytes captured (4296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:01 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.163 4795 80 msg="HTTP Request" proxy_act="HTTP-Client.EndUser" op="GET" dstname="akampr.fullp No. Time Source Destination Protocol Length Info 18316 223.069469 192.168.10.221 24.143.205.163 TCP 60 4795 > http [FIN, ACK] Seq=3042 Ack=3679942 Win=65535 Len=0 Frame 18316: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163) Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 3679942, Len: 0 No. Time Source Destination Protocol Length Info 18317 223.069498 24.143.205.163 192.168.10.221 TCP 60 http > 4795 [ACK] Seq=3679942 Ack=3043 Win=65535 Len=0 Frame 18317: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221) Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 3679942, Ack: 3043, Len: 0 No. Time Source Destination Protocol Length Info 18318 223.069680 192.168.10.1 192.168.10.245 Syslog 204 LOCAL1.INFO: Oct 3 19:48:01 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.163 4795 80 msg="Conn End" (HTTP-proxy.endusers-00) Frame 18318: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:01 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.163 4795 80 msg="Conn End" (HTTP-proxy.endusers-00) No. Time Source Destination Protocol Length Info 18319 223.077299 190.174.146.198 192.168.10.207 SMTP 90 C: HELO 190-174-146-198.speedy.com.ar Frame 18319: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.174.146.198 (190.174.146.198), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13029 (13029), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 36 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18320 223.077471 192.168.10.207 190.174.146.198 SMTP 104 S: 250 mail.mydomain.com Hello [190.174.146.198] Frame 18320: 104 bytes on wire (832 bits), 104 bytes captured (832 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.174.146.198 (190.174.146.198) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 13029 (13029), Seq: 122, Ack: 37, Len: 50 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18321 223.077511 190.174.146.198 192.168.10.207 TCP 60 13029 > smtp [ACK] Seq=37 Ack=172 Win=93268 Len=0 Frame 18321: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.174.146.198 (190.174.146.198), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13029 (13029), Dst Port: smtp (25), Seq: 37, Ack: 172, Len: 0 No. Time Source Destination Protocol Length Info 18322 223.121592 192.168.10.246 65.32.1.65 DNS 84 Standard query PTR 60.124.80.2.in-addr.arpa Frame 18322: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 52981 (52981), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 18323 223.194927 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 18323: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18324 223.265322 65.32.1.65 192.168.10.246 DNS 124 Standard query response PTR bl19-124-60.dsl.telepac.pt Frame 18324: 124 bytes on wire (992 bits), 124 bytes captured (992 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 52981 (52981) Domain Name System (response) No. Time Source Destination Protocol Length Info 18325 223.266988 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18325: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31113, Ack: 200691, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18326 223.267031 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18326: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31140, Ack: 200691, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18327 223.267060 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=200691 Ack=31167 Win=65287 Len=0 Frame 18327: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 200691, Ack: 31167, Len: 0 No. Time Source Destination Protocol Length Info 18328 223.271543 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18328: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31167, Ack: 200691, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18329 223.271660 192.168.10.185 192.168.10.142 VNC 386 Authentication result Frame 18329: 386 bytes on wire (3088 bits), 386 bytes captured (3088 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 200691, Ack: 31194, Len: 332 Virtual Network Computing No. Time Source Destination Protocol Length Info 18330 223.282277 192.168.10.246 65.32.1.65 DNS 84 Standard query PTR 1.8.191.217.in-addr.arpa Frame 18330: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 51353 (51353), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 18331 223.283337 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18331: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31194, Ack: 200691, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18332 223.289379 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18332: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31221, Ack: 200691, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18333 223.289411 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=201023 Ack=31248 Win=65206 Len=0 Frame 18333: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 201023, Ack: 31248, Len: 0 No. Time Source Destination Protocol Length Info 18334 223.295190 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 18334: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31248, Ack: 201023, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 18335 223.302548 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=201023 Ack=31280 Win=65174 Len=0 Frame 18335: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 201023, Ack: 31280, Len: 0 No. Time Source Destination Protocol Length Info 18336 223.303220 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18336: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31280, Ack: 201023, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18337 223.307598 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18337: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31307, Ack: 201023, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18338 223.307631 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=201023 Ack=31334 Win=65120 Len=0 Frame 18338: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 201023, Ack: 31334, Len: 0 No. Time Source Destination Protocol Length Info 18339 223.315740 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 18339: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18340 223.317216 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18340: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31334, Ack: 201023, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18341 223.321178 Dell_49:f2:ec Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.36 Frame 18341: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_49:f2:ec (00:14:22:49:f2:ec), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18342 223.321209 Dell_49:f2:ec Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.36 Frame 18342: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_49:f2:ec (00:14:22:49:f2:ec), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18343 223.321994 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18343: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31361, Ack: 201023, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18344 223.322027 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=201023 Ack=31388 Win=65066 Len=0 Frame 18344: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 201023, Ack: 31388, Len: 0 No. Time Source Destination Protocol Length Info 18345 223.329203 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18345: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31388, Ack: 201023, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18346 223.339965 190.174.146.198 192.168.10.207 SMTP 96 C: MAIL FROM: <uqwpedigree@xxxxxxxxxxxx> Frame 18346: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.174.146.198 (190.174.146.198), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13029 (13029), Dst Port: smtp (25), Seq: 37, Ack: 172, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18347 223.340025 192.168.10.207 190.174.146.198 SMTP 106 S: 250 2.1.0 [email protected] OK Frame 18347: 106 bytes on wire (848 bits), 106 bytes captured (848 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.174.146.198 (190.174.146.198) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 13029 (13029), Seq: 172, Ack: 79, Len: 52 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18348 223.340138 190.174.146.198 192.168.10.207 TCP 60 13029 > smtp [ACK] Seq=79 Ack=224 Win=93216 Len=0 Frame 18348: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.174.146.198 (190.174.146.198), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13029 (13029), Dst Port: smtp (25), Seq: 79, Ack: 224, Len: 0 No. Time Source Destination Protocol Length Info 18349 223.344679 192.168.10.185 192.168.10.142 VNC 835 Authentication result Frame 18349: 835 bytes on wire (6680 bits), 835 bytes captured (6680 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 201023, Ack: 31415, Len: 781 Virtual Network Computing No. Time Source Destination Protocol Length Info 18350 223.355225 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 18350: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31469, Ack: 201023, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18351 223.355257 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18349#1] rfb > xrl [ACK] Seq=201804 Ack=31415 Win=65039 Len=0 SLE=31469 SRE=31496 Frame 18351: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 201804, Ack: 31415, Len: 0 No. Time Source Destination Protocol Length Info 18352 223.361851 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18352: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31496, Ack: 201023, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18353 223.361882 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18349#2] rfb > xrl [ACK] Seq=201804 Ack=31415 Win=65039 Len=0 SLE=31469 SRE=31523 Frame 18353: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 201804, Ack: 31415, Len: 0 No. Time Source Destination Protocol Length Info 18354 223.375350 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18354: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31523, Ack: 201804, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18355 223.375385 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18349#3] rfb > xrl [ACK] Seq=201804 Ack=31415 Win=65039 Len=0 SLE=31469 SRE=31550 Frame 18355: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 201804, Ack: 31415, Len: 0 No. Time Source Destination Protocol Length Info 18356 223.388219 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 18356: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31550, Ack: 201804, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 18357 223.388254 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18349#4] rfb > xrl [ACK] Seq=201804 Ack=31415 Win=65039 Len=0 SLE=31469 SRE=31582 Frame 18357: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 201804, Ack: 31415, Len: 0 No. Time Source Destination Protocol Length Info 18358 223.390776 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 18358: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18359 223.390805 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 18359: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18360 223.393221 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18360: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31582, Ack: 201804, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18361 223.393255 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18349#5] rfb > xrl [ACK] Seq=201804 Ack=31415 Win=65039 Len=0 SLE=31469 SRE=31609 Frame 18361: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 201804, Ack: 31415, Len: 0 No. Time Source Destination Protocol Length Info 18362 223.393561 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18362: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31609, Ack: 201804, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18363 223.393593 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18349#6] rfb > xrl [ACK] Seq=201804 Ack=31415 Win=65039 Len=0 SLE=31469 SRE=31636 Frame 18363: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 201804, Ack: 31415, Len: 0 No. Time Source Destination Protocol Length Info 18364 223.397415 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 18364: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31415, Ack: 201804, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18365 223.401852 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18365: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31636, Ack: 201804, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18366 223.401885 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=201804 Ack=31442 Win=65012 Len=0 SLE=31469 SRE=31663 Frame 18366: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 201804, Ack: 31442, Len: 0 No. Time Source Destination Protocol Length Info 18367 223.404426 65.32.1.65 192.168.10.246 DNS 130 Standard query response PTR blfd-d9bf0801.pool.mediaWays.net Frame 18367: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 51353 (51353) Domain Name System (response) No. Time Source Destination Protocol Length Info 18368 223.405680 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18368: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31663, Ack: 201804, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18369 223.405713 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18366#1] rfb > xrl [ACK] Seq=201804 Ack=31442 Win=65012 Len=0 SLE=31469 SRE=31690 Frame 18369: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 201804, Ack: 31442, Len: 0 No. Time Source Destination Protocol Length Info 18370 223.444455 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 18370: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18371 223.530756 192.168.10.246 65.32.1.65 DNS 87 Standard query PTR 188.211.225.88.in-addr.arpa Frame 18371: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 65453 (65453), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 18372 223.566365 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 18372: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18373 223.576859 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=188505 Ack=2961 Win=1002 Len=1448 TSval=591141 TSecr=729579 Frame 18373: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 188505, Ack: 2961, Len: 1448 Data (1448 bytes) 0000 17 03 01 21 20 23 eb 6d 5b d2 f3 af f2 72 3b 50 ...! #.m[....r;P 0010 15 cf 0f 47 d0 79 ac 81 d1 01 22 b1 cf 1b 8c c8 ...G.y...."..... 0020 0b ba 55 24 00 61 15 8f 94 fe 32 e5 8f 2e 9a 03 ..U$.a....2..... 0030 94 53 17 10 27 2a 43 22 be 65 16 f4 8b 28 eb 7d .S..'*C".e...(.} 0040 b3 38 24 b5 a4 28 2f 19 07 6b fc 39 ca a8 e6 aa .8$..(/..k.9.... 0050 8f 62 23 8b 0e a4 8b 29 66 8e 62 79 38 bd 3d d4 .b#....)f.by8.=. 0060 98 5f af 01 48 4f a5 4e 22 8e 5a 71 a1 69 eb a4 ._..HO.N".Zq.i.. 0070 e3 bd cf f3 91 8c e7 01 15 9b f7 db 26 35 44 92 ............&5D. 0080 48 f2 ed 53 8c 25 ae 1a e9 46 bd 85 69 d5 f5 cf H..S.%...F..i... 0090 a7 10 a0 a4 1d 50 86 9a e1 23 6d 28 05 b2 eb ae .....P...#m(.... 00a0 3c db 82 76 07 b2 dc 70 57 3c 0d 95 51 e3 3f de <..v...pW<..Q.?. 00b0 bb ad db 8b 0b 4c a9 cb 83 0e a1 37 3b b1 16 28 .....L.....7;..( 00c0 62 76 cf 1b 97 92 7f 7a f6 c4 c3 cc 6f f1 f5 0e bv.....z....o... 00d0 38 f0 ac cf 68 ac 50 07 5b 59 58 32 0a e2 65 e9 8...h.P.[YX2..e. 00e0 27 e1 78 58 94 4a f3 94 49 b6 b7 64 2e 51 fb da '.xX.J..I..d.Q.. 00f0 ac 66 76 e8 64 90 5b a8 0d 36 35 0c f6 4c 79 2b .fv.d.[..65..Ly+ 0100 e7 8d 93 32 25 73 53 5c 32 b7 c9 1c 0d 34 25 89 ...2%sS\2....4%. 0110 90 c8 4e 29 d5 c0 f7 7c 03 bd f4 27 da 97 4b e1 ..N)...|...'..K. 0120 ae a8 7a 97 f6 61 40 30 41 94 d3 ad 48 c4 a7 b5 [email protected]... 0130 e7 4b 2d f6 a2 5d 98 fd 26 ab f5 6e 82 0e b8 09 .K-..]..&..n.... 0140 73 0f c2 c2 8c 49 56 33 89 f9 e3 5e 1c 85 7e 02 s....IV3...^..~. 0150 3a f5 6a d4 20 48 e7 45 7d 0b 9e b3 e5 c1 22 94 :.j. H.E}.....". 0160 90 a4 8b 89 27 56 0c cd d1 00 b3 7b d0 7d 16 e5 ....'V.....{.}.. 0170 91 f8 7e e4 3e bd 5b 8a 45 52 eb 1c b9 57 da 66 ..~.>.[.ER...W.f 0180 18 c1 e4 93 32 2f 27 c5 f2 cc f9 c5 46 e4 61 7c ....2/'.....F.a| 0190 a2 40 e9 2a b6 1a a7 d9 0c 6c 3b a7 1f b7 4b 24 .@.*.....l;...K$ 01a0 5f a6 34 a0 48 0d d2 07 75 b8 dd e6 48 e1 2c 9a _.4.H...u...H.,. 01b0 54 ef b5 6d 40 c0 d4 2f a3 1d 99 5a 23 5f bf ba T..m@../...Z#_.. 01c0 9a 45 93 56 bf 56 53 f9 ed 0a d3 39 e4 77 7b 20 .E.V.VS....9.w{ 01d0 dc db 6e 61 40 73 b4 51 81 96 1f a1 01 b1 26 30 [email protected]......&0 01e0 96 61 75 4d 3f e8 8c ba b3 98 09 7f 24 7b a8 63 .auM?.......${.c 01f0 28 7f c5 e5 95 6a 25 17 27 0f e8 50 12 38 75 58 (....j%.'..P.8uX 0200 52 b7 a7 69 71 2b b4 88 6b 9e c9 a4 f1 6e 3e 2c R..iq+..k....n>, 0210 9a 41 a9 24 bf bb 55 a6 7d 8b b6 42 2f 48 63 42 .A.$..U.}..B/HcB 0220 d1 ce 66 ed 13 e9 7a 98 e4 3d f0 16 c6 ef 2f 1e ..f...z..=..../. 0230 04 17 17 23 41 48 2b 59 7e 9d c0 c7 c0 07 ec ea ...#AH+Y~....... 0240 81 84 ee bc 5d b4 a6 39 7b a1 bf 44 26 70 e1 cb ....]..9{..D&p.. 0250 e8 9b 87 55 60 b8 af 1d d2 80 fc 0b 40 d3 f6 33 ...U`[email protected] 0260 29 89 60 fa 84 49 87 de 3d 81 d2 58 75 8c 5d 37 ).`..I..=..Xu.]7 0270 8c 28 29 11 98 89 ec 3d a3 0a 2f bf a8 4a 3e 5a .()....=../..J>Z 0280 57 51 29 58 c9 d9 f5 86 74 4d 2e 3d 4f fd 1f c2 WQ)X....tM.=O... 0290 d2 25 d4 3b 72 4f c6 17 9e 0e ef af 4d 4d ad ba .%.;rO......MM.. 02a0 28 78 35 9f 26 db 68 c3 92 ee ec 26 a9 d4 52 3b (x5.&.h....&..R; 02b0 e6 29 96 2d 33 02 64 9a ee f7 7b d8 6d 05 24 86 .).-3.d...{.m.$. 02c0 9c 7a d4 3f 43 3e fc 68 61 ff ee 1e 42 9f bd 49 .z.?C>.ha...B..I 02d0 eb 5a 06 0b 08 9e 52 40 93 14 6f 37 eb 8d 9d 2a [email protected]...* 02e0 01 e2 d3 d0 5b 49 d1 43 7f ca 94 27 41 12 b7 cb ....[I.C...'A... 02f0 b7 27 59 d2 0c 6e e9 53 73 15 2c 4e fe 6e a0 85 .'Y..n.Ss.,N.n.. 0300 da 3e af 84 5c aa 2d 76 78 c4 a5 64 92 c5 25 0d .>..\.-vx..d..%. 0310 58 7a 2d 10 43 4e 33 37 d3 6a 78 c3 b0 3e 27 47 Xz-.CN37.jx..>'G 0320 62 9c 37 5b 1f c4 da 7a a2 70 36 8f d3 32 4a 3b b.7[...z.p6..2J; 0330 72 f6 47 d2 1a fa 46 a0 e5 65 18 a1 e4 86 cb 8f r.G...F..e...... 0340 54 df 83 1a 7a 81 21 04 d6 e8 90 66 6a 29 f8 a6 T...z.!....fj).. 0350 0e b2 28 fe 04 89 74 18 68 68 0b e8 e7 6c ea d6 ..(...t.hh...l.. 0360 4a 3c bc 6c 9d c5 29 f9 a0 46 1f 96 63 24 f5 e8 J<.l..)..F..c$.. 0370 33 51 fd 61 b0 e0 c5 49 0a d7 26 7f 5e ef 6d 31 3Q.a...I..&.^.m1 0380 21 18 be d4 7d 8e 5d ad 98 84 03 49 8e 8d dc f1 !...}.]....I.... 0390 f2 06 ea 16 1a 60 4d d8 15 c8 03 85 55 69 84 52 .....`M.....Ui.R 03a0 af 98 1d b7 3e 38 70 ca d3 1f 00 79 60 51 6d f9 ....>8p....y`Qm. 03b0 65 91 1d 57 57 cf cf 46 78 79 ad f3 1c e9 22 8d e..WW..Fxy....". 03c0 6f ce 72 41 32 0e 3d 6a bb 20 46 c1 47 8f 74 fd o.rA2.=j. F.G.t. 03d0 fb ec bb 91 73 5d 13 c7 15 a8 a8 85 bc e1 d9 e9 ....s].......... 03e0 a9 e2 e3 d6 6e 07 ab 93 72 69 8c 9e 59 eb fe 59 ....n...ri..Y..Y 03f0 45 51 e2 d5 d8 ae 61 41 29 ed 04 78 d5 58 d9 03 EQ....aA)..x.X.. 0400 06 4f a8 da 07 83 a0 6e 18 ee e3 88 cd 63 16 50 .O.....n.....c.P 0410 41 55 10 a7 41 11 62 41 d3 0d 87 89 c5 18 ff 70 AU..A.bA.......p 0420 6b 76 47 f4 0f 57 86 8e 21 a8 13 13 6a 9d 8e e9 kvG..W..!...j... 0430 8b 68 e4 4a a6 32 45 b0 1e 8e 4e 8d a4 c1 d5 70 .h.J.2E...N....p 0440 09 cc 17 d5 1a 8a 58 ed 67 1f 79 e5 6c a2 93 d6 ......X.g.y.l... 0450 c6 14 fa 91 92 3e d0 e3 58 f1 27 77 11 7f 53 a7 .....>..X.'w..S. 0460 02 ca d9 04 0b 91 41 2c 71 2d ee 96 65 4e fc b8 ......A,q-..eN.. 0470 77 ea 20 af c3 a1 8a 83 a2 7c 81 18 92 6f 15 09 w. ......|...o.. 0480 6d ab 07 ef a8 04 ab c2 89 76 4c c7 74 a3 d5 f2 m........vL.t... 0490 dc 72 a6 5e a2 b2 09 9c 3f a1 9b 07 81 14 75 61 .r.^....?.....ua 04a0 e6 b1 3c 87 ae 51 6f a3 4d 38 7e 05 d7 ea 8d df ..<..Qo.M8~..... 04b0 f4 1f 0b 41 31 59 2c b3 39 e4 5e a2 92 9c 7c 98 ...A1Y,.9.^...|. 04c0 1f 2d a5 26 3d f0 4d a8 be 87 bd 98 b2 88 a3 c8 .-.&=.M......... 04d0 84 ec af 4b 80 9f 35 6b 4d ad ef a2 a7 76 15 5c ...K..5kM....v.\ 04e0 74 6c 74 13 60 d5 2f eb c5 fc cb d5 e9 10 9a b1 tlt.`./......... 04f0 f7 7a a0 bb 9a 8f c4 7a 2f 5e 39 a8 90 94 c9 6b .z.....z/^9....k 0500 15 c2 f4 78 d6 e7 3d 04 15 40 18 68 a4 5c 0a 01 [email protected].\.. 0510 0d 35 a9 cc 4c 0a f5 90 74 e9 e8 e6 aa 66 b3 75 .5..L...t....f.u 0520 2a c2 88 3e af ff 43 c9 68 5e 38 0d 4c 9a 43 4e *..>..C.h^8.L.CN 0530 77 ac 53 e3 33 78 57 1d 95 c5 48 26 29 af 54 b8 w.S.3xW...H&).T. 0540 83 5a e2 c0 db 0b 8f 90 c5 bc da 84 24 13 ab 70 .Z..........$..p 0550 55 4a 09 40 f5 3d 40 ec 22 ea cf e3 1e 4d d5 16 UJ.@.=@."....M.. 0560 03 9c b0 ff 0c 2d 47 3a 67 38 12 0e 66 ec 45 95 .....-G:g8..f.E. 0570 10 74 28 31 6e 5a 9e ed 7d 00 eb 4f ab 1d 8f 47 .t(1nZ..}..O...G 0580 43 85 2c 10 5b 3b 57 d1 1d 99 1a 64 16 da e1 67 C.,.[;W....d...g 0590 0a c4 ab e2 bd ed ce c5 bc ef 78 37 89 aa 65 76 ..........x7..ev 05a0 11 76 57 6c b5 7c a7 80 .vWl.|.. No. Time Source Destination Protocol Length Info 18374 223.576963 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=189953 Ack=2961 Win=1002 Len=1448 TSval=591141 TSecr=729579 Frame 18374: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 189953, Ack: 2961, Len: 1448 Data (1448 bytes) 0000 c4 50 68 fc 4a 84 48 c6 bd a2 53 75 12 8a 2c 09 .Ph.J.H...Su..,. 0010 11 33 72 7c 81 bb cd aa 7d 2f 62 e8 06 e3 60 b3 .3r|....}/b...`. 0020 22 cb 53 87 c2 cf 78 ac 7a df 64 b2 bf 98 61 e2 ".S...x.z.d...a. 0030 c9 3b e6 05 eb 8d d1 43 45 39 40 3d 67 1b 70 9a .;.....CE9@=g.p. 0040 1d 76 58 c5 94 b7 bf 56 2d 91 67 5e d6 b5 8d 8b .vX....V-.g^.... 0050 a9 50 ab 42 13 35 31 e2 26 f1 6e 6a 28 09 c0 dc .P.B.51.&.nj(... 0060 3c b9 fd 5e ed 4e 43 6c 29 ce 98 b9 3f ce 98 42 <..^.NCl)...?..B 0070 98 e8 c1 ba ce 98 e5 5f 62 8a e7 b1 52 94 54 34 ......._b...R.T4 0080 17 76 58 aa 92 e3 88 76 3c a4 be c6 40 7e ca 61 .vX....v<...@~.a 0090 fb 3b c0 fb 98 26 69 db 67 79 a5 18 67 53 25 a3 .;...&i.gy..gS%. 00a0 5a 95 bf 29 ee 3d 56 45 4d 05 20 27 5a e0 31 39 Z..).=VEM. 'Z.19 00b0 8e 67 35 43 cf ee 99 c8 19 63 a2 b3 f5 45 ca cf .g5C.....c...E.. 00c0 48 71 f9 8c 26 f9 f9 75 68 f3 a6 1d 0a c8 30 b8 Hq..&..uh.....0. 00d0 b3 9a a9 0c 97 c7 85 54 5f a0 95 24 16 0d 47 7e .......T_..$..G~ 00e0 72 c4 75 c7 5a 77 a2 b5 b7 47 25 c7 18 25 ed 68 r.u.Zw...G%..%.h 00f0 95 b0 41 db 8e 2f f1 e1 66 54 75 79 b2 4d 3b d8 ..A../..fTuy.M;. 0100 c5 ab dc e7 7a 29 2f e3 de 26 77 3f a6 b0 9a 90 ....z)/..&w?.... 0110 4d 24 a1 cc a9 aa ed ea c6 6a 26 53 97 73 40 a7 M$.......j&S.s@. 0120 28 22 d2 13 ae a6 46 fd 14 bc e2 71 e2 09 68 4b ("....F....q..hK 0130 fc 13 f8 85 8a bb d4 1f 0b c7 4d 23 aa 31 ae ec ..........M#.1.. 0140 c9 5f b9 5f f9 5c fc ad 13 7d c9 f6 03 ef e1 01 ._._.\...}...... 0150 2b 83 87 d3 60 2e 90 b4 4a d8 c5 12 88 1e b1 87 +...`...J....... 0160 40 8e a5 22 85 4d bc 2a c4 71 91 c6 ea b2 01 b6 @..".M.*.q...... 0170 95 f7 b9 43 1a 29 87 51 a8 52 de 85 fa a9 eb 6e ...C.).Q.R.....n 0180 f4 0b 3c 67 7a 37 9a c7 bb 17 65 7a 4f 94 46 1f ..<gz7....ezO.F. 0190 70 20 6a 3a 4a d1 22 06 15 b0 6a 4b 18 be e9 4c p j:J."...jK...L 01a0 f2 08 65 b5 06 f2 b4 8f 5e 64 97 a2 fd c1 e3 9e ..e.....^d...... 01b0 ff aa ca d2 4c 6f a4 46 83 47 e5 d0 44 8b c2 88 ....Lo.F.G..D... 01c0 7b ae c0 2a da e8 dc 19 65 91 c5 0c 27 54 6c 4b {..*....e...'TlK 01d0 ab 71 6b a6 ff 50 77 46 40 2c b6 1b 83 05 81 91 .qk..PwF@,...... 01e0 bd 84 7a 3d 58 ce 56 61 f6 98 08 4a ac b4 66 3a ..z=X.Va...J..f: 01f0 61 08 88 d6 be 69 1a 34 4d 53 bd bb 54 b7 1d f2 a....i.4MS..T... 0200 f6 57 0a 8b f4 42 cb bc 78 6d a1 d9 8a bc 79 c5 .W...B..xm....y. 0210 ff 41 49 e9 91 3e 66 db 5b 6c b7 45 56 bb 4d bb .AI..>f.[l.EV.M. 0220 8f 42 47 9c 91 d5 9f 14 f6 36 01 94 d4 59 78 78 .BG......6...Yxx 0230 1c ec b7 97 37 cc a8 44 2e 45 95 32 22 16 36 39 ....7..D.E.2".69 0240 4f be 22 39 26 4f e0 c6 96 6c d2 3d bb b9 7d 48 O."9&O...l.=..}H 0250 f8 dc 03 c3 88 44 4c f0 c4 5e dc 97 b5 e7 01 e8 .....DL..^...... 0260 c7 5b 21 10 d6 5e d3 53 fa d6 b3 fc b3 df 43 75 .[!..^.S......Cu 0270 fa e5 80 35 2d 7b ae 14 51 97 28 f0 a1 c3 d5 ff ...5-{..Q.(..... 0280 a3 93 c2 9c 7a f9 4c a1 d6 89 e2 de ae fd b1 7c ....z.L........| 0290 85 74 24 f7 b1 4b 92 6c cc 9b 52 0d 14 75 63 3f .t$..K.l..R..uc? 02a0 b3 44 96 51 87 8b 0f 44 d3 25 5a 0a 4a 0d 79 15 .D.Q...D.%Z.J.y. 02b0 19 8b f7 41 61 bf 10 54 cb 4a 3f 86 57 f0 10 08 ...Aa..T.J?.W... 02c0 fc 8a b0 4a ee 1c 9d 8a 3b 72 2c 17 e3 9e 2e 9e ...J....;r,..... 02d0 9c 45 14 e5 19 32 ae 47 61 c9 e8 69 b0 69 16 8a .E...2.Ga..i.i.. 02e0 b3 8e b7 c6 a1 2e 19 5a 62 35 7b 70 66 7e 73 bd .......Zb5{pf~s. 02f0 5c 69 87 e4 2e 66 11 7b 64 79 ce 02 d0 8f 77 68 \i...f.{dy....wh 0300 ba b5 23 f0 49 b5 af 10 7f 0f 21 f4 3a 8d f0 ee ..#.I.....!.:... 0310 eb 23 a5 46 fb 91 e0 b8 90 37 8c 0d 89 9e ed f9 .#.F.....7...... 0320 bb a6 84 79 2c 7f 2b ca 90 71 70 66 25 94 62 17 ...y,.+..qpf%.b. 0330 00 b6 bf 03 e5 d7 1f 1c 4d 3a 50 e3 be eb 2a cb ........M:P...*. 0340 95 2f 6b 54 f3 da da 1f a8 99 00 cc 90 f8 55 47 ./kT..........UG 0350 eb ae d5 90 6e 70 15 2b 3e fe 2e 26 bf 39 39 03 ....np.+>..&.99. 0360 a0 85 14 7e ab 28 b6 02 25 10 7e d4 d9 e4 6e f8 ...~.(..%.~...n. 0370 8a f5 91 d0 00 03 f5 30 6e 55 03 a3 2c 5f 12 e3 .......0nU..,_.. 0380 24 84 76 6b ba 2e d3 f5 d3 b3 49 94 f8 b3 70 1a $.vk......I...p. 0390 be 89 a5 01 10 7b 84 ec 7f 12 6a 42 99 21 63 4b .....{....jB.!cK 03a0 6c 1b 07 d5 bf 30 29 0e 24 65 98 12 b4 c4 2a 1d l....0).$e....*. 03b0 32 30 3a 59 3e 48 4d 4b da a2 f0 aa ee c3 b9 41 20:Y>HMK.......A 03c0 82 8b 59 d2 5f 98 e0 ce 95 df 6d 70 b1 9c 02 bf ..Y._.....mp.... 03d0 c3 f4 b3 d6 92 0b af 7e b4 af 3c 31 24 68 5f 07 .......~..<1$h_. 03e0 d0 51 6d 95 75 1d 1d 02 ad 46 06 13 b4 29 3c e2 .Qm.u....F...)<. 03f0 b8 35 61 df e5 19 9c 0c a0 3e 15 cd 14 bf 51 02 .5a......>....Q. 0400 7d c3 c8 77 24 b5 dc 8b 33 67 3c b1 67 43 4c c6 }..w$...3g<.gCL. 0410 02 de 88 13 0f a2 e7 45 d3 21 9d b2 6e 79 bd 9f .......E.!..ny.. 0420 71 38 06 86 a9 cb 2d 3f 7b 7a 2e a6 da 71 9e 85 q8....-?{z...q.. 0430 72 c4 73 f8 7a 17 42 fc 6b 2f df a0 a7 ea e0 4e r.s.z.B.k/.....N 0440 49 d0 df b0 f8 8a be 7a 2c 00 57 5c 09 a7 38 09 I......z,.W\..8. 0450 c4 7c 9a 34 c1 bc 08 33 10 a5 2c 25 92 d6 77 51 .|.4...3..,%..wQ 0460 df 43 74 23 aa 66 c7 32 64 dd 03 3c b7 67 36 1c .Ct#.f.2d..<.g6. 0470 e8 69 9a 38 b0 5f 75 2e 5c d3 1f d2 db 4b cb 73 .i.8._u.\....K.s 0480 51 a8 0c 7e 29 7b b8 39 af c3 d4 96 48 f2 eb a9 Q..~){.9....H... 0490 7e 86 44 1d 90 95 93 7c fb 38 47 13 42 13 aa b7 ~.D....|.8G.B... 04a0 4a 3f f1 3c 15 65 23 00 41 5f 7d eb fb 1a 70 6c J?.<.e#.A_}...pl 04b0 87 79 ab 48 26 5e b6 ab e1 c9 20 33 c1 b2 a7 c7 .y.H&^.... 3.... 04c0 65 fb b6 d4 97 96 bd 9b 3c c5 76 b7 7e 8f 6b d2 e.......<.v.~.k. 04d0 37 57 1f 95 9f be fa 67 46 e0 ff 9f 03 7e f6 75 7W.....gF....~.u 04e0 35 90 ec f6 a0 fe 01 96 e8 11 4c 69 4a ce 61 c1 5.........LiJ.a. 04f0 02 ba c9 98 20 50 27 43 fe 6f 26 b3 ed 73 9f f0 .... P'C.o&..s.. 0500 f4 af 45 f3 a8 1f 02 b0 8b e7 c9 fc 6a 93 73 af ..E.........j.s. 0510 ea 0a f6 19 12 1e e4 e7 e7 ef 1d 0b a6 78 a3 cc .............x.. 0520 b8 3a ba 30 4c 65 20 dd 32 02 f1 a5 d7 bc 16 a7 .:.0Le .2....... 0530 c5 70 3b 10 fb 7b 06 c1 26 38 6a 89 2c 3f a7 b7 .p;..{..&8j.,?.. 0540 f8 9e c7 d2 ab 97 b0 95 91 4a 28 a0 28 39 b3 1d .........J(.(9.. 0550 85 15 f0 c8 f0 4c 40 ca 88 c9 0b dc 48 1b c7 0d [email protected]... 0560 fe f5 20 63 59 b7 15 43 b9 2b d1 cb 1c 9f 69 2f .. cY..C.+....i/ 0570 ff fe b4 d3 d0 d6 44 69 4e 5b 9d 03 bc aa 1d d6 ......DiN[...... 0580 90 89 cc 8f 87 c7 90 6f 83 f9 0a b0 57 a6 cd d0 .......o....W... 0590 01 9a 36 1a 8d 6a cd ad 70 3c 08 28 f7 20 53 9b ..6..j..p<.(. S. 05a0 a1 96 9c 18 6f b2 7b 3f ....o.{? No. Time Source Destination Protocol Length Info 18375 223.577047 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=191401 Ack=2961 Win=1002 Len=1448 TSval=591141 TSecr=729579 Frame 18375: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 191401, Ack: 2961, Len: 1448 Data (1448 bytes) 0000 d8 e7 31 ec 2b cd 11 49 fb 5e 23 c5 9a 27 6c e9 ..1.+..I.^#..'l. 0010 57 eb 45 da 58 80 08 4e 94 02 f2 02 0d 74 27 73 W.E.X..N.....t's 0020 5e 01 37 2d 61 d2 84 6c 16 13 5f 1d 4d 78 7e 93 ^.7-a..l.._.Mx~. 0030 20 00 a8 4f 5f 7d c5 b5 7c 3d e3 da ee d0 d3 bf ..O_}..|=...... 0040 a2 11 02 69 c8 7c 00 eb 13 3f de 8d 6d c3 ec 57 ...i.|...?..m..W 0050 7a 48 54 0b ba 33 28 c9 89 df a9 f9 21 54 7e 2b zHT..3(.....!T~+ 0060 2e de 29 50 43 12 98 4b 45 41 2b ba f2 7b 4c 1c ..)PC..KEA+..{L. 0070 74 dd 89 03 5c 35 10 36 1f ae b8 e6 b9 5e 9c db t...\5.6.....^.. 0080 a2 30 94 f5 7f 7e ae 1b 81 2b 64 42 a8 fe fc c2 .0...~...+dB.... 0090 93 ee c6 c8 33 99 76 18 5f 98 13 84 87 6e 18 22 ....3.v._....n." 00a0 ff 26 37 e5 29 63 ce 75 6a 76 63 2b 76 35 3d 91 .&7.)c.ujvc+v5=. 00b0 42 96 79 47 82 44 db cd ee f8 4c 4e 91 0f 07 a7 B.yG.D....LN.... 00c0 4c de 3c a1 50 70 78 d6 ed 8e ad 07 d5 0a 59 e7 L.<.Ppx.......Y. 00d0 c7 12 ea 2b 23 e8 13 e3 5d 01 8b b3 a4 16 3b 00 ...+#...].....;. 00e0 69 91 90 75 b0 80 77 a3 f0 00 83 cc b2 21 5d 35 i..u..w......!]5 00f0 3c 3d 36 87 8b c1 01 3a 8f 2b 5c c9 b6 87 8c fe <=6....:.+\..... 0100 af 91 e4 f5 bf 65 9c a1 f7 9a 9b d9 25 ff e1 7d .....e......%..} 0110 8b c6 3f 54 99 f3 bd b3 71 b1 98 51 1a 67 61 52 ..?T....q..Q.gaR 0120 f7 37 8d cf 4b b6 40 46 70 ab f1 59 85 22 85 d3 [email protected].".. 0130 3d 3c 7a 55 f9 d3 05 83 cd 13 72 56 99 f5 c3 a3 =<zU......rV.... 0140 8d 05 e9 ba 27 23 91 c5 48 29 31 18 ce e0 5b a2 ....'#..H)1...[. 0150 b7 e6 ab 31 96 92 6d be de 66 b2 3c 06 cd dd e5 ...1..m..f.<.... 0160 fa f4 6d 8c 8b b3 45 33 2d 2b a8 1a 00 b2 63 40 ..m...E3-+....c@ 0170 93 ae a7 9f 40 9b 78 6d c8 da e3 10 79 71 f3 1f [email protected].. 0180 a1 f8 86 72 bc 4d a1 df 82 d1 52 f6 af 66 16 76 ...r.M....R..f.v 0190 a3 33 d0 b8 39 3b 48 f7 cc 41 fd 80 fe e7 dd bb .3..9;H..A...... 01a0 1f a2 74 b7 03 1d ff dd 8c d0 21 5f 78 7d f1 c3 ..t.......!_x}.. 01b0 b9 66 86 3f aa 38 93 cd e9 47 1e 0a b3 61 83 68 .f.?.8...G...a.h 01c0 d3 83 73 b4 32 3e ea 99 a3 bd bb 4d 03 7a ac 90 ..s.2>.....M.z.. 01d0 35 5d 27 06 f9 bb 42 8c d2 f5 cd 2b db 52 d2 27 5]'...B....+.R.' 01e0 a4 a8 af b4 11 da c5 ec 0e 8a a7 d9 9f db 63 72 ..............cr 01f0 03 3b b4 fb 00 69 45 0e 0c b2 16 fe 37 97 db 54 .;...iE.....7..T 0200 a4 a6 d5 ec e3 9e f7 15 5c 53 5e 1e 6c 0d 9c 43 ........\S^.l..C 0210 56 ce 46 e8 dc 94 1c c3 60 90 46 e6 e2 09 e9 14 V.F.....`.F..... 0220 fd 68 48 1c 0d a4 84 93 c4 a2 f2 12 09 43 a8 ec .hH..........C.. 0230 65 64 d6 85 b5 d4 ce 6e 03 f4 50 df 5e 1e 10 78 ed.....n..P.^..x 0240 4e b0 85 67 22 77 4a e7 70 4a f0 81 f1 83 d5 6d N..g"wJ.pJ.....m 0250 45 96 9e ec b4 95 c7 f3 37 85 69 4c ae 61 f4 3e E.......7.iL.a.> 0260 a7 ae 85 d7 1b d3 08 21 41 68 55 50 65 3b 3c 95 .......!AhUPe;<. 0270 30 86 7e 78 b4 87 65 d9 bf 82 55 29 b7 f3 01 b9 0.~x..e...U).... 0280 d3 16 98 69 c9 aa a0 63 79 e6 11 b5 97 d0 5a 45 ...i...cy.....ZE 0290 a3 43 c6 c8 12 5e 96 b1 1e 3b 08 f0 ef c0 2a f4 .C...^...;....*. 02a0 e1 48 85 14 c3 f5 ed ec 01 12 5f d6 37 44 ab 98 .H........_.7D.. 02b0 4d 81 f6 d3 48 2a e4 28 5f 26 fa 37 72 18 bd 33 M...H*.(_&.7r..3 02c0 48 c2 0f 9f 32 f4 fc 6c 3a 1a 76 21 99 54 7f f2 H...2..l:.v!.T.. 02d0 14 55 19 c7 a9 24 d9 20 c9 dc 93 2b 43 e7 0b e2 .U...$. ...+C... 02e0 47 ed 43 98 26 57 0a 3d d4 6f 81 e2 f4 c6 2c a9 G.C.&W.=.o....,. 02f0 03 e7 26 5d b6 b8 85 8c f7 a5 18 b5 fc 03 b4 99 ..&]............ 0300 12 a2 40 1e f6 a0 e2 54 00 43 d3 d2 a5 54 60 57 [email protected]`W 0310 9d ac 42 9c 18 ec b0 eb 2a 0d d7 88 45 04 6c fa ..B.....*...E.l. 0320 ae b8 c9 64 73 dc 58 85 a3 62 27 02 32 79 97 85 ...ds.X..b'.2y.. 0330 4e 7a 70 34 7e 25 d6 85 f3 b1 dd 2b 08 d7 ff 19 Nzp4~%.....+.... 0340 ac 76 3d e7 08 80 81 a3 99 cf 07 9d 84 b2 b2 a1 .v=............. 0350 ae e2 30 70 f7 1a 76 ed 77 11 02 ee 73 50 2a cc ..0p..v.w...sP*. 0360 95 b3 19 98 ad 68 2a 3b 1f e6 eb ef 38 76 cf d1 .....h*;....8v.. 0370 fe 8b 01 50 e6 c1 4e 86 08 eb 5b 2f 39 20 1b 75 ...P..N...[/9 .u 0380 00 44 cd 57 1c fe 76 a7 15 d8 9d f7 75 f6 71 91 .D.W..v.....u.q. 0390 49 8b 7c ce 4b ba 7c a1 24 18 d9 69 a0 18 3f 3d I.|.K.|.$..i..?= 03a0 81 15 ec 94 8f 72 8e 8a 3e 93 66 73 8e dc 18 90 .....r..>.fs.... 03b0 a8 26 91 12 b4 14 0a 22 46 2b e1 4d 0a 19 36 f8 .&....."F+.M..6. 03c0 f2 c1 31 5e d4 33 ba 9a f8 d5 21 0d f1 63 7d 56 ..1^.3....!..c}V 03d0 97 26 60 af d7 bf 1a f1 ec 8b 9a cb 5e de 76 48 .&`.........^.vH 03e0 39 e3 ef f5 53 1b d8 57 31 13 e8 0f aa c6 c1 11 9...S..W1....... 03f0 97 00 e8 9e 6c 66 88 60 e9 3b 9e 0b 28 55 29 40 ....lf.`.;..(U)@ 0400 49 34 22 75 60 27 48 7a d7 e6 19 3f 22 73 f4 12 I4"u`'Hz...?"s.. 0410 2a 5a 61 d5 05 44 d5 9c 93 c4 05 3b 4e eb d3 3c *Za..D.....;N..< 0420 e1 cf ef ea 46 cd b7 71 e9 c8 28 3a fc 59 21 83 ....F..q..(:.Y!. 0430 42 c8 35 53 58 b1 05 41 d9 8b 8d 9c 10 1d 21 01 B.5SX..A......!. 0440 98 60 11 f5 95 b6 96 24 e6 03 7a 08 5f e6 58 58 .`.....$..z._.XX 0450 fd 30 c4 de d5 ef c8 5d 25 5f 04 f4 12 7b c7 50 .0.....]%_...{.P 0460 b9 08 4d 76 eb 31 75 33 95 d3 32 ae ef ce 34 59 ..Mv.1u3..2...4Y 0470 0c b9 d9 15 dd 08 e6 6a d4 62 55 cb 13 be 88 b5 .......j.bU..... 0480 d5 3c 5f 6e 8b 18 26 65 8a af e3 fc c6 46 6c 65 .<_n..&e.....Fle 0490 da 60 b8 bf 6f 34 9e 45 d9 b6 5e ec ac 02 d7 ac .`..o4.E..^..... 04a0 b6 79 17 28 d0 78 d5 42 27 4c e7 8d 0e 3d de 99 .y.(.x.B'L...=.. 04b0 bd d5 f9 c7 8e 11 0b f1 0b d5 e4 02 f6 9e 6a 8f ..............j. 04c0 9f 55 87 fd 12 7e 7e 33 03 b2 9e 0f 70 07 98 8a .U...~~3....p... 04d0 77 86 40 0a 34 2f d3 4f 5d a3 ca 85 29 ff b3 05 [email protected]/.O]...)... 04e0 50 72 f7 79 cd 68 45 72 b5 61 9a c2 ad f1 34 ad Pr.y.hEr.a....4. 04f0 58 28 06 34 f0 09 b5 4d e3 7a 99 41 c4 63 18 e0 X(.4...M.z.A.c.. 0500 3e 80 1f 56 d2 68 0e d7 d5 ca b7 a0 b0 2f bf bf >..V.h......./.. 0510 7c a3 90 0d 41 5f e0 36 dd 19 56 a1 07 59 73 ea |...A_.6..V..Ys. 0520 e2 d7 b0 4f 14 a0 c2 26 ba 56 e1 22 a1 93 27 a9 ...O...&.V."..'. 0530 d3 e8 a1 26 3c cc f5 3a 8b e4 e7 f4 10 11 71 36 ...&<..:......q6 0540 88 df 7d 88 42 f6 96 12 76 f5 3f d7 e8 db d7 b4 ..}.B...v.?..... 0550 98 d7 5b c0 f8 50 5b 87 19 d1 e1 de e4 03 45 6a ..[..P[.......Ej 0560 77 dd aa d3 47 4d e1 4b f4 91 1b 2d d3 50 18 e8 w...GM.K...-.P.. 0570 66 a7 81 4f aa 11 b3 32 1f e0 57 fb 77 0b 08 ad f..O...2..W.w... 0580 1a 08 77 b6 bc 07 7f c3 bb d6 c9 50 df 45 b1 3e ..w........P.E.> 0590 c0 01 a5 81 43 43 93 43 e6 d2 da 42 6d 33 b8 12 ....CC.C...Bm3.. 05a0 e0 45 34 57 20 18 af d1 .E4W ... No. Time Source Destination Protocol Length Info 18376 223.577153 192.168.10.1 192.168.10.245 Syslog 312 LOCAL1.INFO: Oct 3 19:48:01 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.174.146.198 7x.x.x.3 13029 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="uqwpedigree@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 18376: 312 bytes on wire (2496 bits), 312 bytes captured (2496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:01 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.174.146.198 7x.x.x.3 13029 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defau No. Time Source Destination Protocol Length Info 18377 223.577205 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2961 Ack=191401 Win=65535 Len=0 TSval=729718 TSecr=591141 Frame 18377: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2961, Ack: 191401, Len: 0 No. Time Source Destination Protocol Length Info 18378 223.577287 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=192849 Ack=2961 Win=1002 Len=1448 TSval=591141 TSecr=729718 Frame 18378: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 192849, Ack: 2961, Len: 1448 Data (1448 bytes) 0000 b6 90 18 77 ae de 81 4e d8 d3 77 c7 51 6d b4 40 ...w...N..w.Qm.@ 0010 35 aa 7b 17 35 31 85 e8 13 df f4 11 f7 c2 e8 05 5.{.51.......... 0020 b5 06 89 f3 7f 3c cf 65 78 74 7c 89 c7 6b 36 6d .....<.ext|..k6m 0030 71 d0 6f 48 a0 30 15 8d b5 ca a5 21 a7 bf 19 61 q.oH.0.....!...a 0040 d7 e5 f7 b5 f7 e7 71 6f 58 2e 2f 01 d9 60 cc 63 ......qoX./..`.c 0050 c7 3b f6 5e c5 c5 75 39 5c 7a 60 0c 00 e7 de e3 .;.^..u9\z`..... 0060 2d ce 9a d9 a5 81 9e bb 47 a3 dd a6 78 56 96 7e -.......G...xV.~ 0070 1c 6f 27 83 59 ba 34 66 fc f1 f6 a0 73 a4 0b c8 .o'.Y.4f....s... 0080 03 2b 1b 04 6f db 21 97 72 23 ac e7 b3 50 cf de .+..o.!.r#...P.. 0090 a2 25 76 63 08 e4 f2 42 72 95 ce 37 f3 2f 58 3f .%vc...Br..7./X? 00a0 11 3f 3e 6d b0 b5 a9 94 eb 15 42 b2 5e 0f b5 dd .?>m......B.^... 00b0 f1 9c 5b 60 67 fb f2 17 57 d5 af 33 98 60 2d bb ..[`g...W..3.`-. 00c0 f3 f0 09 b0 80 25 b0 8e 49 5a 08 5b 65 64 2e f2 .....%..IZ.[ed.. 00d0 30 d5 e0 5f 09 35 64 24 6c c0 38 7d b3 60 2a 9b 0.._.5d$l.8}.`*. 00e0 b6 58 a9 61 91 4e 4b 0e b4 27 98 b9 c6 a2 70 9e .X.a.NK..'....p. 00f0 b6 64 69 68 53 ab ed 65 28 e5 3d 68 ea 5c 67 44 .dihS..e(.=h.\gD 0100 68 36 39 68 5e 14 b9 36 d2 b7 92 9d 9c af f9 53 h69h^..6.......S 0110 93 4d 22 ba 9f 3b ad fa 89 6c d2 73 ba 0a 97 d3 .M"..;...l.s.... 0120 b6 df 3c 5a f1 56 85 f7 23 f2 60 fe 97 46 c5 0f ..<Z.V..#.`..F.. 0130 13 d4 3c d5 dd 16 e5 c1 02 18 a8 61 09 6f a5 6e ..<........a.o.n 0140 0e 3c 8d 5f 98 26 ea bb 6a 2e 21 37 07 71 56 d5 .<._.&..j.!7.qV. 0150 87 48 a2 e3 50 73 ab ae dd 65 95 0d 5c 55 3f 0c .H..Ps...e..\U?. 0160 27 5a 34 84 18 f3 fd a6 10 11 26 a7 08 4c 28 d3 'Z4.......&..L(. 0170 ef 36 a5 b9 81 0a 25 7d 3f 88 7c 8d 89 e7 f1 46 .6....%}?.|....F 0180 97 a2 30 c6 35 c0 87 53 aa 67 e2 42 c3 bd a8 77 ..0.5..S.g.B...w 0190 06 ca 35 46 73 84 4c bc 14 b4 77 47 f9 2a d8 3c ..5Fs.L...wG.*.< 01a0 6d ca 26 4e 0e 28 14 b0 68 9b 35 8b e3 bf 69 e7 m.&N.(..h.5...i. 01b0 79 31 0f f5 a6 17 00 65 09 da 26 69 1c 0b 7b 87 y1.....e..&i..{. 01c0 b7 14 f0 36 d9 09 b0 2f c5 5a f9 bc 44 c8 85 33 ...6.../.Z..D..3 01d0 b4 31 4d 89 08 1b 8e 3c 4c 2c b0 3a d4 4c c8 91 .1M....<L,.:.L.. 01e0 5c f1 47 ba c9 bb 70 35 45 2f 1d a0 b6 34 40 1b \.G...p5E/...4@. 01f0 b1 bb e7 cf 5f 11 7f f8 35 53 24 36 95 3c f6 c7 ...._...5S$6.<.. 0200 25 29 8e 7d 0d 00 88 83 6c 4f 4a 2b c7 9c 91 b2 %).}....lOJ+.... 0210 3a 8f 8b 37 e4 42 17 48 47 a0 6f 4f 2e 50 58 df :..7.B.HG.oO.PX. 0220 c5 21 52 a2 60 c1 66 3d d0 eb c4 d2 77 6c f1 f8 .!R.`.f=....wl.. 0230 46 b4 85 ac 4b f2 57 4a d6 f6 fb 25 52 9a b2 49 F...K.WJ...%R..I 0240 59 6f ee c9 d4 30 a0 e7 5f 94 4d 71 f5 50 bd cd Yo...0.._.Mq.P.. 0250 5b ff 1d 11 1c 2e 8e e0 3f b6 c6 9c 89 65 b3 b5 [.......?....e.. 0260 8d d7 bf 97 19 14 8f d8 ce 7b 15 fd cc bc 90 5d .........{.....] 0270 eb e6 a2 0f 8b ac 77 46 bf 35 09 24 46 a9 f7 14 ......wF.5.$F... 0280 b2 31 77 ed 36 cb 09 41 af d5 39 7d 96 ce c8 a0 .1w.6..A..9}.... 0290 e9 a4 aa 3d 3b f5 66 91 8a aa ae a6 16 19 d6 7c ...=;.f........| 02a0 6e 52 8f 44 ca a7 d2 de ca a4 a8 6f 7d 18 b6 30 nR.D.......o}..0 02b0 59 a6 74 b5 d2 ae 5a d1 32 a4 49 62 47 ea fc 52 Y.t...Z.2.IbG..R 02c0 bb f1 42 d7 45 f8 7d 26 9e 32 06 94 bb 92 c2 b5 ..B.E.}&.2...... 02d0 20 61 b4 f5 29 06 0e 7b ed 42 4f 92 23 f3 f6 21 a..)..{.BO.#..! 02e0 ca 72 ad d6 8b 12 dd 3d 34 4b e4 aa 23 47 17 2f .r.....=4K..#G./ 02f0 ec 9b 52 d3 1c 20 67 cd e1 07 68 38 85 26 b5 58 ..R.. g...h8.&.X 0300 39 d8 36 b1 50 2b 71 1e c0 c1 77 d5 05 64 d0 83 9.6.P+q...w..d.. 0310 4d e6 49 e7 44 da ce a1 09 0d 20 99 0e 4e 0a c4 M.I.D..... ..N.. 0320 23 49 eb 6a 49 14 27 60 18 c5 f8 23 fe 24 19 47 #I.jI.'`...#.$.G 0330 d3 b1 56 e5 4e bb 65 91 b5 24 fd ab ad 27 a4 7f ..V.N.e..$...'.. 0340 f6 1c bf a2 9f 83 62 a5 42 28 0b cc f3 2e 83 00 ......b.B(...... 0350 93 62 f5 ab df 61 6a f5 7e 63 2a 5a 62 34 dc 5f .b...aj.~c*Zb4._ 0360 ee 92 ff 26 bf d5 dd 5e 41 3d 2d de 6d fe 4b 95 ...&...^A=-.m.K. 0370 4a bb 93 d4 67 c8 20 ad ab 46 bb 0a 83 8c f8 30 J...g. ..F.....0 0380 a8 9c 38 3b 87 12 58 17 19 0e ea f7 5f 39 52 21 ..8;..X....._9R! 0390 ee e2 c9 9b d0 3c 36 5f 68 1d 30 ef 34 1c 5a 8e .....<6_h.0.4.Z. 03a0 a9 e1 47 fc 74 bf 6f 3c 92 65 74 21 97 d1 a2 b8 ..G.t.o<.et!.... 03b0 1b 0e 54 ff 4b 43 63 aa f9 cd 9a f2 fa 74 38 fe ..T.KCc......t8. 03c0 9a 0e 3d 79 97 19 20 81 12 e6 4e 98 3e 4c ad 76 ..=y.. ...N.>L.v 03d0 d2 51 08 5b c4 98 33 c6 f2 0c f0 1e 6e 34 70 95 .Q.[..3.....n4p. 03e0 c7 54 21 16 ef 5d 24 63 ea 34 78 e1 02 2a b6 24 .T!..]$c.4x..*.$ 03f0 53 ab e2 48 7e 78 65 b7 93 3b 43 31 aa 92 d3 aa S..H~xe..;C1.... 0400 da 5f 59 27 7d d1 c9 6f f2 74 6e a3 2c f1 cc 8a ._Y'}..o.tn.,... 0410 06 c6 fe 88 91 f8 83 41 41 ab 06 f6 7d 37 b7 fa .......AA...}7.. 0420 ce a6 d7 49 ff 19 e7 c4 01 3a fa 28 60 1e 4f 7b ...I.....:.(`.O{ 0430 3e bc e7 bd 59 85 26 f3 e0 ad e3 f8 9d 16 53 bc >...Y.&.......S. 0440 30 29 3b 55 86 6f 31 bc 53 b2 a1 9e f3 82 99 07 0);U.o1.S....... 0450 2e c2 2c 3d 43 11 ad bc cc 6b 91 21 e1 11 14 2b ..,=C....k.!...+ 0460 e4 98 34 88 76 24 37 35 90 d1 6f d5 46 b7 d1 14 ..4.v$75..o.F... 0470 fd 12 74 f7 2e 03 57 4e 36 b3 09 fd 1a ac 79 c5 ..t...WN6.....y. 0480 a3 cc f8 fa a9 14 fd 84 2f ad de 62 a8 c5 0b 0a ......../..b.... 0490 9b 9e be a3 8a 0b 3a f9 58 e5 d9 ce 91 ea 67 33 ......:.X.....g3 04a0 30 fd cd ab 68 6e d0 66 e1 80 3a cf 5f c2 38 be 0...hn.f..:._.8. 04b0 e7 52 f6 e6 05 d9 2c 41 d6 69 12 26 40 da 7c 8d .R....,A.i.&@.|. 04c0 b2 f2 c4 2f 3a 2e e1 42 54 53 58 ed aa 8e 58 a7 .../:..BTSX...X. 04d0 04 52 0f 39 ce 72 82 dd 9b 38 73 e9 c9 63 f0 3c .R.9.r...8s..c.< 04e0 ba eb 29 0a a8 0a f0 00 69 5d 1a ce d3 c2 9f c7 ..).....i]...... 04f0 76 3c 2c a2 51 8f c3 11 17 8d 84 34 8e 41 24 f9 v<,.Q......4.A$. 0500 f5 78 53 d2 46 8e 12 26 ca 70 cc aa ed d2 69 89 .xS.F..&.p....i. 0510 07 85 ad f1 c2 aa 25 51 62 ea fe 8d 58 ea ba e1 ......%Qb...X... 0520 e1 4c b2 cf 32 62 0e 34 ec d8 09 31 ae 4c e0 31 .L..2b.4...1.L.1 0530 ce a5 df b1 76 3f b6 35 e8 19 a7 7b 90 fd 00 f2 ....v?.5...{.... 0540 a0 36 c3 6f ae 31 29 57 43 b9 41 73 c7 e9 24 6a .6.o.1)WC.As..$j 0550 c7 f9 59 cf a3 13 a6 a4 45 b4 61 20 67 30 45 d9 ..Y.....E.a g0E. 0560 4d 79 61 34 bc 42 ee 3a 0d 88 51 e4 fb fa 1d 11 Mya4.B.:..Q..... 0570 4b 4b 28 4d 52 9e 96 1c 49 12 53 15 1e de 1c 6a KK(MR...I.S....j 0580 53 35 8e f6 4b 42 5b a8 ed ba c4 de 6e b2 eb 8d S5..KB[.....n... 0590 4c 18 c9 fa d7 76 51 57 91 ca e0 86 b6 0a 75 23 L....vQW......u# 05a0 ff f7 44 e8 e3 7e 5f 51 ..D..~_Q No. Time Source Destination Protocol Length Info 18379 223.577368 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=194297 Ack=2961 Win=1002 Len=1448 TSval=591141 TSecr=729718 Frame 18379: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 194297, Ack: 2961, Len: 1448 Data (1448 bytes) 0000 7f f9 3b 29 0b c9 7a d8 5a 2e 6c 7d 1d 1d 0d 13 ..;)..z.Z.l}.... 0010 c9 61 51 eb 68 83 dc 10 ea b1 e7 9e 03 dd 73 a2 .aQ.h.........s. 0020 3e fa f1 e0 e8 98 de b2 54 4c ff 44 18 35 8a b0 >.......TL.D.5.. 0030 30 7a 61 08 64 b1 48 c3 94 e6 c4 00 d4 a5 82 a9 0za.d.H......... 0040 e3 e8 a0 a1 d6 27 1a 13 16 09 0f 84 0c 38 db 85 .....'.......8.. 0050 4a 04 8a 2f a4 e0 bf 0d 67 fa d9 60 e2 2f f9 68 J../....g..`./.h 0060 cf bb c5 d2 80 d4 81 99 ea e7 c5 7f 04 6c 7c 21 .............l|! 0070 9b b2 8b fa 64 02 53 03 7c 95 12 40 37 dc 47 f0 ....d.S.|[email protected]. 0080 3c 02 e7 09 2b 5e 30 bd aa 3c a3 88 6e 23 14 5e <...+^0..<..n#.^ 0090 79 87 35 86 7f 9f be 26 4a 58 04 fa 77 d9 22 cd y.5....&JX..w.". 00a0 f2 a9 f4 55 19 b7 77 17 9b e7 93 9d 0d e5 42 67 ...U..w.......Bg 00b0 0f eb f1 ca 02 f4 ac bf 7a 6e 78 ce f9 42 67 ad ........znx..Bg. 00c0 cb da 16 cb 18 43 f0 eb 9d 7d f4 89 1c 15 6c 95 .....C...}....l. 00d0 cf be c5 ab 9d 6f 07 e2 c5 06 74 98 6b 70 65 c9 .....o....t.kpe. 00e0 24 42 04 36 f4 98 ec 88 05 86 b5 17 05 bd 33 61 $B.6..........3a 00f0 84 39 4c b6 35 6f bd d8 50 e4 75 a0 94 11 87 d9 .9L.5o..P.u..... 0100 4a 3b 78 c6 5f f9 c0 bd ca a1 8b 33 8e b8 65 ee J;x._......3..e. 0110 e0 24 8f 65 9b 0e 3f 82 3f 8b 26 f7 51 3e ad 8c .$.e..?.?.&.Q>.. 0120 53 4c a6 8a 30 a7 36 53 c7 f1 04 9b 83 e3 c3 88 SL..0.6S........ 0130 3a 7a b6 c2 02 4a e3 9b 53 3e 58 50 b4 56 9c fa :z...J..S>XP.V.. 0140 60 14 67 c3 ae 70 32 ae bc 1f bd ab 26 f2 01 67 `.g..p2.....&..g 0150 2f 14 2a ae 58 19 48 b7 bf 77 6f 23 20 a7 fe 07 /.*.X.H..wo# ... 0160 4b ad 90 b3 02 a0 aa 56 3e ca f1 bc 38 3b 65 96 K......V>...8;e. 0170 e9 d7 3b 95 a8 d2 82 25 46 56 52 eb 2e 35 d6 9a ..;....%FVR..5.. 0180 c0 e9 84 9b d6 eb 13 b4 22 4e fb 47 83 96 1e d2 ........"N.G.... 0190 c3 eb 5f 47 a3 92 7e e2 36 a0 52 01 f0 e7 9c cb .._G..~.6.R..... 01a0 43 7d b7 b2 ab 84 a1 d9 3b 35 36 90 b6 a3 82 da C}......;56..... 01b0 3c ea ea 1a 78 9a 53 05 c2 3d ba 32 fa 7c e6 22 <...x.S..=.2.|." 01c0 8a 20 da 3c 4b 34 cf 7c 46 ad 2a 6d c1 b5 09 4a . .<K4.|F.*m...J 01d0 9c c4 84 0b 97 61 bd 8a 4f a4 ae eb d0 8a 8a 4d .....a..O......M 01e0 cd 45 93 5f 7d fd 54 58 47 cf 7b a6 bd c6 71 c3 .E._}.TXG.{...q. 01f0 aa f1 50 32 37 bf 25 93 d3 59 3a 35 a1 50 36 10 ..P27.%..Y:5.P6. 0200 9b e2 1c d4 9e f8 36 e7 d9 be b5 43 23 76 85 dc ......6....C#v.. 0210 ce ff e1 69 5c 2b 36 22 77 9e f1 c0 e5 dd 31 52 ...i\+6"w.....1R 0220 e4 18 97 5a 2c 43 38 cb c8 cf 9e 85 60 74 63 86 ...Z,C8.....`tc. 0230 e5 7e 37 2e 39 be c1 c7 25 4f f9 25 39 51 fc 00 .~7.9...%O.%9Q.. 0240 81 68 95 d9 f2 32 4f 9f 59 d2 30 47 e4 4b 96 b3 .h...2O.Y.0G.K.. 0250 ee 1c cf 42 c0 df 56 67 76 e3 5b da c7 33 9b 09 ...B..Vgv.[..3.. 0260 83 71 8b 52 ec 40 69 cd 29 2e 12 01 27 67 c9 79 .q.R.@i.)...'g.y 0270 18 d7 61 4c c4 da 49 9f 1d d7 ab e5 0a 45 c3 97 ..aL..I......E.. 0280 a6 66 cd cc 1a 10 53 4a 8a e2 4c 48 41 b8 e3 30 .f....SJ..LHA..0 0290 17 15 c4 ea 76 37 fc 94 cc ac 25 6a b9 67 f7 98 ....v7....%j.g.. 02a0 47 cd a9 39 0f a2 6b f8 92 1d 7c 2d 3c 34 d5 64 G..9..k...|-<4.d 02b0 2d 53 3d 74 d9 5f 98 e7 57 c7 e3 fd 26 e6 ff 01 -S=t._..W...&... 02c0 ca 46 13 fa ce c9 69 ad b8 da 56 3b 1b f6 e2 b4 .F....i...V;.... 02d0 0e 88 a2 fa 77 91 1b 9a 4c df 55 1f f7 78 9a d1 ....w...L.U..x.. 02e0 fd ee fd 97 67 cc 3c ed c4 7b 49 df 75 e7 d0 e4 ....g.<..{I.u... 02f0 9e 0b 21 2e 43 16 60 8e b7 e4 36 b6 e6 b7 38 87 ..!.C.`...6...8. 0300 33 cc 7c 00 e8 c4 e0 c7 c7 54 1b 12 ae e4 1b 04 3.|......T...... 0310 75 36 99 3b 8e 8f f1 93 b7 e1 6a b0 06 b5 88 02 u6.;......j..... 0320 30 10 a8 88 d6 f6 3d 0a 62 b1 14 ef 64 a4 16 ca 0.....=.b...d... 0330 09 74 ae 44 c7 6d 0b 6b 58 fa 40 73 a8 de 87 b5 .t.D.m.kX.@s.... 0340 3c cc fe 71 6d ac be 34 8d 01 67 1a 3a 40 87 63 <..qm..4..g.:@.c 0350 73 43 90 46 3f 6f 08 84 4b 72 98 ec 21 7b dc 06 sC.F?o..Kr..!{.. 0360 16 89 61 2f 00 6e 05 f9 ac 79 03 29 f0 bc 8d 26 ..a/.n...y.)...& 0370 98 54 19 03 cd 83 89 b3 59 d1 e0 50 f2 0a bf 38 .T......Y..P...8 0380 6d 91 d0 2b 8f 5f 40 62 4d db 91 4a 9e 1a 19 67 [email protected] 0390 7a e6 a1 fc 15 0c 15 33 b5 c1 91 cb ae 13 c1 d7 z......3........ 03a0 96 77 61 c1 9d 09 96 be a3 57 52 67 e0 27 b2 fb .wa......WRg.'.. 03b0 9f fe 97 7d 16 ba 4a c2 dd 02 6f 46 ae 3c ce 3f ...}..J...oF.<.? 03c0 c7 ad d6 4c 1b 1e 2c 03 77 f4 71 8a aa 38 e4 dd ...L..,.w.q..8.. 03d0 fe da ca 5a 21 03 17 13 fa 34 d5 d9 62 bc a7 e8 ...Z!....4..b... 03e0 87 6d 1b 73 da 9a 37 dc a2 5a 4b eb 75 95 24 43 .m.s..7..ZK.u.$C 03f0 39 ef bd 58 f2 cf d9 b9 82 bb 75 ad 35 7a e7 a7 9..X......u.5z.. 0400 b3 00 ad 41 a6 00 7c 80 bc 58 f8 f9 7a 68 0b ef ...A..|..X..zh.. 0410 07 75 1a 64 c9 de a6 00 f0 12 9b 2c ff ab 46 26 .u.d.......,..F& 0420 c7 29 5b d2 d6 bf 30 d3 bd 17 b7 58 41 9d a2 82 .)[...0....XA... 0430 52 96 80 37 23 38 f2 d8 01 d0 a3 3a f2 b4 8e df R..7#8.....:.... 0440 f4 91 eb df bc 1b fb 03 bd 49 4a 28 fd 88 48 61 .........IJ(..Ha 0450 3d 63 6a c0 42 8d 46 af 7b bc 57 42 b9 6b 9c 0f =cj.B.F.{.WB.k.. 0460 58 ed 8d 3e ea 56 92 5d bd 02 54 06 d4 3d 37 6c X..>.V.]..T..=7l 0470 5f ae 12 5e 30 69 62 de be 9b 53 00 40 4b 57 f5 _..^0ib...S.@KW. 0480 ae cd 26 d1 f9 09 08 6c f1 a4 13 0f e3 7d 21 4c ..&....l.....}!L 0490 b2 f1 35 9e 0a d9 54 1f 09 3d 63 37 3f ea 14 a7 ..5...T..=c7?... 04a0 78 1d ba 93 21 05 9b 86 1e 3c 77 46 d3 fe 35 69 x...!....<wF..5i 04b0 ac 18 fc 62 6f b5 23 b4 07 b7 68 54 f3 79 b9 4d ...bo.#...hT.y.M 04c0 ce 4c 72 6d ba 41 d4 79 dd 73 25 4c f2 df 25 96 .Lrm.A.y.s%L..%. 04d0 44 a1 40 b4 8d be 11 19 fc 9e 5b a8 2a 67 ee 35 D.@.......[.*g.5 04e0 39 66 57 45 34 82 68 01 7f 21 2c a3 5c 2f db 3e 9fWE4.h..!,.\/.> 04f0 2d 56 ee 54 c8 b2 cc 49 9d ec db b0 0a 5c 79 f3 -V.T...I.....\y. 0500 fe ea 53 46 47 a9 4c fb 6d 9a 1b 2e 34 b9 4e d5 ..SFG.L.m...4.N. 0510 79 96 35 b7 88 4a 62 a9 d3 fe 53 c1 79 84 5a 82 y.5..Jb...S.y.Z. 0520 fb d7 ab 24 a8 a4 cd 5c 15 7b b2 ba e9 27 22 5b ...$...\.{...'"[ 0530 bb ec 91 2c 5f 66 96 2c 7f bd 3a b7 7e 7e 1e 17 ...,_f.,..:.~~.. 0540 72 9a 9b 58 f8 ae 92 c8 6c 0e 7f 92 f6 cc f1 e5 r..X....l....... 0550 63 87 10 19 50 a3 08 89 64 a6 36 89 f5 16 f1 2b c...P...d.6....+ 0560 08 e8 e6 91 29 b8 6b 4e 45 d8 1e 1d 15 7c 88 18 ....).kNE....|.. 0570 90 88 92 6d 27 9a 27 e7 ae 72 e5 f5 70 e6 52 34 ...m'.'..r..p.R4 0580 2b 7e f4 b1 33 94 7f db 53 0e 42 bb 17 1a 9f 5b +~..3...S.B....[ 0590 b2 b1 25 2d 80 ad e2 73 92 2a 3c e0 f6 cb 88 5c ..%-...s.*<....\ 05a0 a9 4f d0 f5 2c 73 08 ee .O..,s.. No. Time Source Destination Protocol Length Info 18380 223.577455 192.168.10.1 192.168.10.203 TCP 1311 34433 > cds [PSH, ACK] Seq=195745 Ack=2961 Win=1002 Len=1245 TSval=591141 TSecr=729718 Frame 18380: 1311 bytes on wire (10488 bits), 1311 bytes captured (10488 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 195745, Ack: 2961, Len: 1245 Data (1245 bytes) 0000 25 18 6c a0 b3 c2 06 24 9c 6e 9a a3 dc c7 8b c5 %.l....$.n...... 0010 fe 41 5f 56 17 c4 bc 9a c6 bf 5c b0 ad 95 e7 f5 .A_V......\..... 0020 ee a5 ba 4a 28 b2 fa a3 33 6d c1 0b fd b8 be 53 ...J(...3m.....S 0030 2e c8 a8 9c a0 d3 82 8b 8d 4d 1b 30 4f ea 72 e1 .........M.0O.r. 0040 25 7f 80 ea 71 83 6d 81 48 00 44 4c f8 30 45 eb %...q.m.H.DL.0E. 0050 2f f9 87 b6 e9 8a 64 36 95 02 d1 df b9 26 c1 b4 /.....d6.....&.. 0060 11 3d 1b 9e 14 4f b2 72 d0 61 bf f6 15 0f d0 11 .=...O.r.a...... 0070 08 83 30 cb 91 82 3f 79 93 0b 2b fe be 2e a8 ee ..0...?y..+..... 0080 9e b2 87 0a 87 70 9a c2 53 de d2 d7 3a a6 2c f5 .....p..S...:.,. 0090 14 c3 9e 1c af 62 e1 a9 56 5e e9 b2 72 8d 57 ba .....b..V^..r.W. 00a0 cb 32 ef 1e f7 5b 3a cd 88 7e 12 c1 44 68 f1 ee .2...[:..~..Dh.. 00b0 4d e0 4f cd 6e 8b d3 dc 51 72 a2 83 e5 f6 c1 6a M.O.n...Qr.....j 00c0 f2 86 ac 65 2f 37 b3 cc 72 4f 60 52 23 a6 3a 4f ...e/7..rO`R#.:O 00d0 ae 8c 71 11 5b 56 8e a0 ab 3e e6 4c d5 df 5d da ..q.[V...>.L..]. 00e0 55 64 35 23 66 14 d2 29 aa bd b8 4d c0 27 42 40 Ud5#f..)...M.'B@ 00f0 ff b9 4a ac 29 e2 37 1b a3 f5 9e c7 0e 52 10 9f ..J.).7......R.. 0100 91 05 30 33 49 9a df 21 43 6c 24 a6 78 2b 8f 39 ..03I..!Cl$.x+.9 0110 4d ff 09 58 78 10 de 1a cf 60 81 ab 29 3b b6 66 M..Xx....`..);.f 0120 a7 74 12 25 c1 d1 eb 7a fd 1a 0f 5a f6 f9 17 cb .t.%...z...Z.... 0130 28 03 e9 91 46 68 05 89 45 fd 0e 5d a0 1d 95 da (...Fh..E..].... 0140 2b b8 c3 d7 8f db f8 4e c8 c1 d3 dc 40 1a df 28 +......N....@..( 0150 d1 ae 32 83 7a 97 e6 85 73 bd e0 b9 86 a8 94 be ..2.z...s....... 0160 7c 9f ec d4 cc 1a ec 5c e7 fa fd f6 d3 cb 64 b9 |......\......d. 0170 b4 c8 44 2b 27 d9 b6 96 63 ee 60 23 e3 9e e4 45 ..D+'...c.`#...E 0180 b4 50 22 ea af f5 4b ef c6 b2 5f ba 00 6f 4e 96 .P"...K..._..oN. 0190 d4 6a c6 45 35 2d 67 cd 6a b1 0e 80 30 98 98 d1 .j.E5-g.j...0... 01a0 b4 d1 65 e2 f6 d5 84 5b 0e ab aa c8 00 56 a2 6f ..e....[.....V.o 01b0 4d 0f 1b 26 7f 3d 81 0a cf 4d 3a 6c 36 4a 0d 46 M..&.=...M:l6J.F 01c0 51 09 18 a9 6a fc 01 fc e8 f6 83 e5 bd 77 72 ef Q...j........wr. 01d0 f7 6c 50 f3 21 c4 f1 48 a7 22 9d 6b 87 8a f0 c3 .lP.!..H.".k.... 01e0 20 d9 bd 5d 33 35 a5 2a 43 e6 94 51 5a 44 a6 a7 ..]35.*C..QZD.. 01f0 42 6a bf 96 0a ba 1c 58 e5 bc 1f 86 3e a4 43 f1 Bj.....X....>.C. 0200 90 34 dd 40 5f c5 95 52 95 a5 61 7e cb 95 13 ab .4.@_..R..a~.... 0210 1b 7f b0 74 84 61 45 30 49 e2 a7 ae 85 ee c6 67 ...t.aE0I......g 0220 28 ca 7f 60 0f 74 b6 eb 0f ce 86 43 2c da 1a f7 (..`.t.....C,... 0230 90 c3 0b 47 c6 5e d4 6a 3a 6f f6 9e 41 92 7e b8 ...G.^.j:o..A.~. 0240 f5 3c a6 a6 bd 47 21 2a 8a 4d f7 74 ee 02 3f 40 .<...G!*.M.t..?@ 0250 4d d1 45 26 c5 9d 98 74 fd 49 f7 29 be ee da 52 M.E&...t.I.)...R 0260 ec d0 66 82 7c 9a 7b 8e 75 76 e2 6d aa df a5 d4 ..f.|.{.uv.m.... 0270 87 9f b4 a4 a1 32 f8 eb de 34 c5 72 a1 3f 00 f4 .....2...4.r.?.. 0280 4a 0f f3 a0 3c b3 90 f7 2f c2 c9 d0 87 52 e1 38 J...<.../....R.8 0290 a1 36 b6 79 75 1e a4 98 10 58 17 da ed c9 35 e7 .6.yu....X....5. 02a0 1f c1 50 4d 17 9a bd ac e7 ae 40 ee 30 d9 51 88 [email protected]. 02b0 ca 2c a0 ea 51 43 77 6f 25 c4 d6 22 0e b0 60 9f .,..QCwo%.."..`. 02c0 88 5c 2b dd 42 96 27 a8 88 23 e7 56 89 73 cc bd .\+.B.'..#.V.s.. 02d0 01 f6 68 2e 52 a7 d1 e1 d2 43 6a 7c b2 ae e6 84 ..h.R....Cj|.... 02e0 6b 15 d1 c0 a7 e2 89 6e c0 19 4c 2c 7d 59 d7 85 k......n..L,}Y.. 02f0 e8 37 c3 2b 20 7a 13 a4 69 df c5 df c8 e2 21 fc .7.+ z..i.....!. 0300 aa ab 19 c8 3a da aa 18 1e 82 cc 1b d3 2a 15 b6 ....:........*.. 0310 7c 26 72 d4 1b b6 f9 5b 11 c8 dc 5a a9 93 3b 6b |&r....[...Z..;k 0320 e8 57 2c 6f 85 32 e2 e7 47 dd 5e 61 69 09 a8 e7 .W,o.2..G.^ai... 0330 57 b7 97 89 52 ca 21 35 a7 e6 37 09 58 cd c7 ab W...R.!5..7.X... 0340 b7 bb ae 48 db 5f 5f 66 9d 98 f1 6a 2e 61 a5 97 ...H.__f...j.a.. 0350 2f cf 69 ff 3b 4e 26 c7 ad 4a 68 c2 51 ad 10 70 /.i.;N&..Jh.Q..p 0360 43 28 55 67 a1 79 7b 15 da 1e 5c 4d 83 46 06 6e C(Ug.y{...\M.F.n 0370 e1 c7 51 22 77 5c e4 ea 0d 8b 6c 80 b5 d9 72 52 ..Q"w\....l...rR 0380 38 f6 ee 33 20 61 93 f6 91 49 5f f8 13 93 33 e5 8..3 a...I_...3. 0390 96 ff f5 60 49 67 c7 98 01 8e e7 ae 8a cf 18 67 ...`Ig.........g 03a0 b9 1d 60 39 d7 b3 dd fc 63 e4 bb bf 25 85 08 a0 ..`9....c...%... 03b0 43 f9 ea 2c cd c2 bf fb 07 70 3e 52 0f 34 9c 24 C..,.....p>R.4.$ 03c0 e2 3c 9e 6b 66 2b 30 67 3c ed 43 10 59 dc e0 f5 .<.kf+0g<.C.Y... 03d0 c1 12 fd 64 05 37 40 5a c0 62 c8 b4 a6 8c 2f 1b [email protected]..../. 03e0 b4 38 e2 eb ea 10 5c f1 f7 9d 7e 91 81 47 f5 77 .8....\...~..G.w 03f0 97 20 ca be 6d b8 e8 0e 30 bd 94 a6 9e b4 e6 95 . ..m...0....... 0400 03 95 c3 d1 af 92 48 99 15 87 c7 ed fb 17 d3 ca ......H......... 0410 02 1e d5 39 db 52 52 d5 90 28 62 b8 22 f5 9c bf ...9.RR..(b."... 0420 ea 15 d1 55 01 5f 30 ad fa 4c b0 e5 2b 84 77 05 ...U._0..L..+.w. 0430 d0 f0 79 7b 96 92 c8 68 59 fc 5f 2b 0c fe ea 21 ..y{...hY._+...! 0440 fb 92 1e ed dd 80 e2 bb 5e 02 cd 5e 96 1a b1 5f ........^..^..._ 0450 1d fb 2c 7a c1 3f 2c 52 2f 30 f6 b0 89 d4 e2 7b ..,z.?,R/0.....{ 0460 f2 0c 00 0f 2a f2 67 da 99 a7 46 2f 29 6a 5e 86 ....*.g...F/)j^. 0470 88 ce a4 cc 8c 52 b6 53 15 60 2d 68 04 90 7b 39 .....R.S.`-h..{9 0480 91 33 af 6d f3 91 21 fe 85 1c 95 a3 fe bb 19 f9 .3.m..!......... 0490 d3 3d b7 cb 93 d9 2f 13 a7 c4 5c 93 20 68 e2 24 .=..../...\. h.$ 04a0 b9 18 f4 4c b9 78 29 c9 af 2b 0e d5 3a f6 4c f5 ...L.x)..+..:.L. 04b0 25 d9 a3 a8 39 f5 14 06 69 7e d5 72 f1 34 06 35 %...9...i~.r.4.5 04c0 e4 37 8d 9c da a0 56 5f ec 0c d8 4e b7 8e 29 c9 .7....V_...N..). 04d0 99 36 34 72 35 9e 04 b4 c2 bc e2 f6 2f .64r5......./ No. Time Source Destination Protocol Length Info 18381 223.577508 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2961 Ack=194297 Win=65535 Len=0 TSval=729718 TSecr=591141 Frame 18381: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2961, Ack: 194297, Len: 0 No. Time Source Destination Protocol Length Info 18382 223.577557 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=2961 Ack=196990 Win=65535 Len=0 TSval=729718 TSecr=591141 Frame 18382: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2961, Ack: 196990, Len: 0 No. Time Source Destination Protocol Length Info 18383 223.648608 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=2961 Ack=196990 Win=65535 Len=74 TSval=729719 TSecr=591141 Frame 18383: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 2961, Ack: 196990, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 3c 71 da d0 13 f9 56 4b 52 ff 00 .... <q....VKR.. 0010 6a f6 6d c6 1f e2 39 65 69 23 d0 59 ef 49 63 f7 j.m...9ei#.Y.Ic. 0020 e3 02 41 ed 2d 17 03 01 00 20 0d bd 19 2f 78 91 ..A.-.... .../x. 0030 bc a4 94 ac 64 18 a2 75 e7 68 90 ae 57 74 0b e2 ....d..u.h..Wt.. 0040 a9 39 39 51 e0 95 1e b0 3e d3 .99Q....>. No. Time Source Destination Protocol Length Info 18384 223.648671 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=196990 Ack=3035 Win=1002 Len=0 TSval=591159 TSecr=729719 Frame 18384: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 196990, Ack: 3035, Len: 0 No. Time Source Destination Protocol Length Info 18385 223.659188 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1001396480, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18385: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18386 223.659209 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1001396480, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18386: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18387 223.659222 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1001396480, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18387: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18388 223.659234 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1001396480, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18388: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18389 223.663077 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 3 Port 47 TTL = 120 Frame 18389: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 18390 223.677245 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2870477056, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18390: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18391 223.677271 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2870477056, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18391: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18392 223.677283 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2870477056, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18392: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18393 223.677295 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2870477056, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18393: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18394 223.758704 192.168.10.104 192.168.10.255 BROWSER 224 Become Backup Browser Frame 18394: 224 bytes on wire (1792 bits), 224 bytes captured (1792 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 18395 223.789918 192.168.10.190 64.74.103.148 TLSv1 91 Application Data Frame 18395: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.190 (192.168.10.190), Dst: 64.74.103.148 (64.74.103.148) Transmission Control Protocol, Src Port: wsmlb (3806), Dst Port: https (443), Seq: 260, Ack: 260, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 18396 223.789989 64.74.103.148 192.168.10.190 TCP 60 https > wsmlb [ACK] Seq=260 Ack=297 Win=65535 Len=0 Frame 18396: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Internet Protocol Version 4, Src: 64.74.103.148 (64.74.103.148), Dst: 192.168.10.190 (192.168.10.190) Transmission Control Protocol, Src Port: https (443), Dst Port: wsmlb (3806), Seq: 260, Ack: 297, Len: 0 No. Time Source Destination Protocol Length Info 18397 223.793259 Watchgua_3c:4c:d8 IntelCor_ed:1a:23 ARP 60 Who has 192.168.10.190? Tell 192.168.10.1 Frame 18397: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18398 223.793273 IntelCor_ed:1a:23 Watchgua_3c:4c:d8 ARP 60 192.168.10.190 is at 00:13:20:ed:1a:23 Frame 18398: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18399 223.810251 190.174.146.198 192.168.10.207 TCP 60 13029 > smtp [FIN, ACK] Seq=79 Ack=224 Win=93216 Len=0 Frame 18399: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.174.146.198 (190.174.146.198), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13029 (13029), Dst Port: smtp (25), Seq: 79, Ack: 224, Len: 0 No. Time Source Destination Protocol Length Info 18400 223.810285 192.168.10.207 190.174.146.198 TCP 60 smtp > 13029 [ACK] Seq=224 Ack=80 Win=65457 Len=0 Frame 18400: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.174.146.198 (190.174.146.198) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 13029 (13029), Seq: 224, Ack: 80, Len: 0 No. Time Source Destination Protocol Length Info 18401 223.810387 192.168.10.207 190.174.146.198 TCP 60 smtp > 13029 [FIN, ACK] Seq=224 Ack=80 Win=65457 Len=0 Frame 18401: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.174.146.198 (190.174.146.198) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 13029 (13029), Seq: 224, Ack: 80, Len: 0 No. Time Source Destination Protocol Length Info 18402 223.810430 190.174.146.198 192.168.10.207 TCP 60 13029 > smtp [ACK] Seq=80 Ack=225 Win=93216 Len=0 Frame 18402: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.174.146.198 (190.174.146.198), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13029 (13029), Dst Port: smtp (25), Seq: 80, Ack: 225, Len: 0 No. Time Source Destination Protocol Length Info 18403 223.810658 192.168.10.1 192.168.10.245 Syslog 204 LOCAL1.INFO: Oct 3 19:48:01 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.174.146.198 7x.x.x.3 13029 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 18403: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:01 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.174.146.198 7x.x.x.3 13029 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 18404 223.816276 65.32.1.65 192.168.10.246 DNS 136 Standard query response PTR static.dsl88-225-54204.ttnet.net.tr Frame 18404: 136 bytes on wire (1088 bits), 136 bytes captured (1088 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 65453 (65453) Domain Name System (response) No. Time Source Destination Protocol Length Info 18405 223.838019 64.74.103.148 192.168.10.190 TLSv1 91 Application Data Frame 18405: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Internet Protocol Version 4, Src: 64.74.103.148 (64.74.103.148), Dst: 192.168.10.190 (192.168.10.190) Transmission Control Protocol, Src Port: https (443), Dst Port: wsmlb (3806), Seq: 260, Ack: 297, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 18406 223.838103 192.168.10.246 65.32.1.65 DNS 85 Standard query PTR 69.19.63.200.in-addr.arpa Frame 18406: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 59081 (59081), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 18407 223.883236 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 18407: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18408 223.883267 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 18408: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18409 223.934231 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 18409: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15793, Ack: 1162148, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18410 223.934265 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1162148 Ack=15835 Win=46090 Len=0 Frame 18410: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1162148, Ack: 15835, Len: 0 No. Time Source Destination Protocol Length Info 18411 223.993006 192.168.10.190 64.74.103.148 TCP 60 wsmlb > https [ACK] Seq=297 Ack=297 Win=65350 Len=0 Frame 18411: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.190 (192.168.10.190), Dst: 64.74.103.148 (64.74.103.148) Transmission Control Protocol, Src Port: wsmlb (3806), Dst Port: https (443), Seq: 297, Ack: 297, Len: 0 No. Time Source Destination Protocol Length Info 18412 224.267741 192.168.10.104 192.168.10.246 NBNS 110 Refresh NB WORKGROUP<1d> Frame 18412: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 18413 224.315192 65.32.1.65 192.168.10.246 DNS 133 Standard query response PTR 69-19-63-200-ptr.ipbusiness.net.ar Frame 18413: 133 bytes on wire (1064 bits), 133 bytes captured (1064 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 59081 (59081) Domain Name System (response) No. Time Source Destination Protocol Length Info 18414 224.343180 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 14.254.25.186.in-addr.arpa Frame 18414: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 59571 (59571), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 18415 224.450236 65.32.1.65 192.168.10.246 DNS 138 Standard query response PTR 186-25-254-14.genericrev.telcel.net.ve Frame 18415: 138 bytes on wire (1104 bits), 138 bytes captured (1104 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 59571 (59571) Domain Name System (response) No. Time Source Destination Protocol Length Info 18416 224.568820 192.168.10.246 65.32.1.65 DNS 88 Standard query PTR 140.143.255.217.in-addr.arpa Frame 18416: 88 bytes on wire (704 bits), 88 bytes captured (704 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 59667 (59667), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 18417 224.577865 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 18417: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15835, Ack: 1162148, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18418 224.577898 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1162148 Ack=15877 Win=46069 Len=0 Frame 18418: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1162148, Ack: 15877, Len: 0 No. Time Source Destination Protocol Length Info 18419 224.674938 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1018173696, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18419: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18420 224.674962 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1018173696, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18420: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18421 224.674975 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1018173696, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18421: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18422 224.674986 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1018173696, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18422: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18423 224.693014 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2887254272, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18423: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18424 224.693035 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2887254272, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18424: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18425 224.693048 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2887254272, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18425: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18426 224.693060 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2887254272, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18426: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18427 224.790734 192.168.10.56 192.168.10.255 BROWSER 243 Host Announcement KTIGWELLXP, Workstation, Server, NT Workstation, Potential Browser Frame 18427: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Intel_d0:7a:ea (00:11:11:d0:7a:ea), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.56 (192.168.10.56), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 18428 224.790987 192.168.10.56 192.168.10.255 BROWSER 243 Host Announcement KTIGWELLXP, Workstation, Server, NT Workstation, Potential Browser Frame 18428: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Intel_d0:7a:ea (00:11:11:d0:7a:ea), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.56 (192.168.10.56), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 18429 224.821184 Dell_49:f2:ec Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.36 Frame 18429: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_49:f2:ec (00:14:22:49:f2:ec), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18430 224.821216 Dell_49:f2:ec Broadcast ARP 60 Who has 192.168.10.13? Tell 192.168.10.36 Frame 18430: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_49:f2:ec (00:14:22:49:f2:ec), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18431 224.831467 65.32.1.65 192.168.10.246 DNS 131 Standard query response PTR pD9FF8F8C.dip0.t-ipconnect.de Frame 18431: 131 bytes on wire (1048 bits), 131 bytes captured (1048 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 59667 (59667) Domain Name System (response) No. Time Source Destination Protocol Length Info 18432 224.966860 192.168.10.246 65.32.1.65 DNS 87 Standard query PTR 195.41.241.117.in-addr.arpa Frame 18432: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 65233 (65233), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 18433 225.015501 65.32.1.65 192.168.10.246 DNS 176 Standard query response, No such name Frame 18433: 176 bytes on wire (1408 bits), 176 bytes captured (1408 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 65233 (65233) Domain Name System (response) No. Time Source Destination Protocol Length Info 18434 225.016371 192.168.10.203 117.241.41.195 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 18434: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 117.241.41.195 (117.241.41.195) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 18435 225.194780 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 18435: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18436 225.196471 DellEsgP_e2:92:68 Broadcast ARP 60 Who has 192.168.10.224? Tell 192.168.10.16 Frame 18436: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: DellEsgP_e2:92:68 (00:0b:db:e2:92:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18437 225.196500 DellEsgP_e2:92:68 Broadcast ARP 60 Who has 192.168.10.224? Tell 192.168.10.16 Frame 18437: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: DellEsgP_e2:92:68 (00:0b:db:e2:92:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18438 225.251173 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 18438: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18439 225.251207 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 18439: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18440 225.251226 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 18440: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18441 225.251237 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 18441: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18442 225.251249 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 18442: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18443 225.251259 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 18443: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18444 225.251271 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 18444: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18445 225.251281 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 18445: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18446 225.251293 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 18446: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18447 225.251304 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 18447: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18448 225.251315 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 18448: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18449 225.251330 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 18449: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18450 225.251366 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 18450: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18451 225.251395 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 18451: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18452 225.251405 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 18452: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18453 225.251433 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 18453: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18454 225.251443 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 18454: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18455 225.251454 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 18455: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18456 225.251464 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 18456: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18457 225.251481 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 18457: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18458 225.251491 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 18458: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18459 225.251501 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 18459: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18460 225.251511 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 18460: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18461 225.251522 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 18461: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18462 225.251532 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 18462: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18463 225.251542 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 18463: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18464 225.251552 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 18464: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18465 225.251562 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 18465: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18466 225.251572 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 18466: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18467 225.251582 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 18467: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18468 225.251592 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 18468: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18469 225.251602 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 18469: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18470 225.251612 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 18470: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18471 225.251622 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 18471: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18472 225.251632 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 18472: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18473 225.251645 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 18473: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18474 225.251656 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 18474: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18475 225.251682 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 18475: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18476 225.251692 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 18476: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18477 225.251706 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 18477: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18478 225.251716 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 18478: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18479 225.251726 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 18479: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18480 225.251736 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 18480: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18481 225.251754 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 18481: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18482 225.251764 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 18482: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18483 225.251830 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 18483: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18484 225.318202 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 18484: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18485 225.359723 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18485: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31690, Ack: 201804, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18486 225.359760 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18366#2] rfb > xrl [ACK] Seq=201804 Ack=31442 Win=65012 Len=0 SLE=31469 SRE=31717 Frame 18486: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 201804, Ack: 31442, Len: 0 No. Time Source Destination Protocol Length Info 18487 225.371939 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18487: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31717, Ack: 201804, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18488 225.371975 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18366#3] rfb > xrl [ACK] Seq=201804 Ack=31442 Win=65012 Len=0 SLE=31469 SRE=31744 Frame 18488: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 201804, Ack: 31442, Len: 0 No. Time Source Destination Protocol Length Info 18489 225.373244 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 18489: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18490 225.373274 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 18490: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18491 225.377540 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18491: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31744, Ack: 201804, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18492 225.377575 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18366#4] rfb > xrl [ACK] Seq=201804 Ack=31442 Win=65012 Len=0 SLE=31469 SRE=31771 Frame 18492: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 201804, Ack: 31442, Len: 0 No. Time Source Destination Protocol Length Info 18493 225.381814 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 18493: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31442, Ack: 201804, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18494 225.381848 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=201804 Ack=31771 Win=64683 Len=0 Frame 18494: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 201804, Ack: 31771, Len: 0 No. Time Source Destination Protocol Length Info 18495 225.391730 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18495: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31771, Ack: 201804, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18496 225.395636 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18496: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31798, Ack: 201804, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18497 225.395670 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=201804 Ack=31825 Win=64629 Len=0 Frame 18497: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 201804, Ack: 31825, Len: 0 No. Time Source Destination Protocol Length Info 18498 225.403772 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18498: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31825, Ack: 201804, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18499 225.412359 192.168.10.185 192.168.10.142 VNC 290 Authentication result Frame 18499: 290 bytes on wire (2320 bits), 290 bytes captured (2320 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 201804, Ack: 31852, Len: 236 Virtual Network Computing No. Time Source Destination Protocol Length Info 18500 225.413407 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18500: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31852, Ack: 201804, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18501 225.419016 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18501: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31879, Ack: 201804, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18502 225.419053 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=202040 Ack=31906 Win=64548 Len=0 Frame 18502: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 202040, Ack: 31906, Len: 0 No. Time Source Destination Protocol Length Info 18503 225.423771 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18503: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31906, Ack: 201804, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18504 225.431581 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18504: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31933, Ack: 201804, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18505 225.431616 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=202040 Ack=31960 Win=64494 Len=0 Frame 18505: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 202040, Ack: 31960, Len: 0 No. Time Source Destination Protocol Length Info 18506 225.441826 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 18506: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31960, Ack: 202040, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 18507 225.444433 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 18507: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18508 225.446252 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18508: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 31992, Ack: 202040, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18509 225.446290 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=202040 Ack=32019 Win=64435 Len=0 Frame 18509: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 202040, Ack: 32019, Len: 0 No. Time Source Destination Protocol Length Info 18510 225.453762 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 18510: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 202040, Ack: 32019, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 18511 225.453796 192.168.10.185 192.168.10.142 VNC 227 Authentication result Frame 18511: 227 bytes on wire (1816 bits), 227 bytes captured (1816 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203300, Ack: 32019, Len: 173 Virtual Network Computing No. Time Source Destination Protocol Length Info 18512 225.457690 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18512: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 32019, Ack: 202040, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18513 225.462697 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18513: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 32046, Ack: 202040, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18514 225.462780 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=32073 Win=64381 Len=0 Frame 18514: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32073, Len: 0 No. Time Source Destination Protocol Length Info 18515 225.467483 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18515: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 32073, Ack: 202040, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18516 225.485872 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18516: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 32100, Ack: 202040, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18517 225.485913 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=32127 Win=64327 Len=0 Frame 18517: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32127, Len: 0 No. Time Source Destination Protocol Length Info 18518 225.489832 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=32127 Ack=203473 Win=64240 Len=0 Frame 18518: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 32127, Ack: 203473, Len: 0 No. Time Source Destination Protocol Length Info 18519 225.489948 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 18519: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 32127, Ack: 203473, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 18520 225.490038 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18520: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 32159, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18521 225.490071 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=32186 Win=65535 Len=0 Frame 18521: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32186, Len: 0 No. Time Source Destination Protocol Length Info 18522 225.497492 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18522: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 32186, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18523 225.503098 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18523: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 32213, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18524 225.503133 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=32240 Win=65481 Len=0 Frame 18524: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32240, Len: 0 No. Time Source Destination Protocol Length Info 18525 225.507869 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18525: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 32240, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18526 225.566291 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 18526: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18527 225.583616 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 18527: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 32294, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18528 225.583649 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=203473 Ack=32267 Win=65454 Len=0 SLE=32294 SRE=32321 Frame 18528: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32267, Len: 0 No. Time Source Destination Protocol Length Info 18529 225.649597 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18529: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 32321, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18530 225.649632 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18528#1] rfb > xrl [ACK] Seq=203473 Ack=32267 Win=65454 Len=0 SLE=32294 SRE=32348 Frame 18530: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32267, Len: 0 No. Time Source Destination Protocol Length Info 18531 225.665584 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18531: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 32348, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18532 225.665622 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18528#2] rfb > xrl [ACK] Seq=203473 Ack=32267 Win=65454 Len=0 SLE=32294 SRE=32375 Frame 18532: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32267, Len: 0 No. Time Source Destination Protocol Length Info 18533 225.677899 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18533: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 32375, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18534 225.677931 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18528#3] rfb > xrl [ACK] Seq=203473 Ack=32267 Win=65454 Len=0 SLE=32294 SRE=32402 Frame 18534: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32267, Len: 0 No. Time Source Destination Protocol Length Info 18535 225.690449 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1034950912, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18535: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18536 225.690469 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1034950912, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18536: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18537 225.690482 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1034950912, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18537: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18538 225.690494 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1034950912, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18538: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18539 225.708442 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2904031488, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18539: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18540 225.708461 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2904031488, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18540: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18541 225.708474 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2904031488, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18541: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18542 225.708486 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2904031488, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18542: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18543 225.714102 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 18543: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 32510, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18544 225.714136 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 18528#4] rfb > xrl [ACK] Seq=203473 Ack=32267 Win=65454 Len=0 SLE=32510 SRE=32537 SLE=32294 SRE=32402 Frame 18544: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32267, Len: 0 No. Time Source Destination Protocol Length Info 18545 225.767594 192.168.10.104 192.168.10.246 NBNS 110 Refresh NB WORKGROUP<1e> Frame 18545: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 18546 225.855643 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 18546: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 32969, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18547 225.855687 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 18528#5] rfb > xrl [ACK] Seq=203473 Ack=32267 Win=65454 Len=0 SLE=32969 SRE=32996 SLE=32510 SRE=32537 Frame 18547: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32267, Len: 0 No. Time Source Destination Protocol Length Info 18548 225.866144 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18548: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 32996, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18549 225.866178 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 18528#6] rfb > xrl [ACK] Seq=203473 Ack=32267 Win=65454 Len=0 SLE=32969 SRE=33023 SLE=32510 SRE=32537 Frame 18549: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32267, Len: 0 No. Time Source Destination Protocol Length Info 18550 225.875644 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18550: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33023, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18551 225.875678 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 18528#7] rfb > xrl [ACK] Seq=203473 Ack=32267 Win=65454 Len=0 SLE=32969 SRE=33050 SLE=32510 SRE=32537 Frame 18551: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32267, Len: 0 No. Time Source Destination Protocol Length Info 18552 225.882128 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18552: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33050, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18553 225.882166 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 18528#8] rfb > xrl [ACK] Seq=203473 Ack=32267 Win=65454 Len=0 SLE=32969 SRE=33077 SLE=32510 SRE=32537 Frame 18553: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32267, Len: 0 No. Time Source Destination Protocol Length Info 18554 225.888869 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 18554: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18555 225.888901 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 18555: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18556 225.891725 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18556: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33077, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18557 225.891758 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 18528#9] rfb > xrl [ACK] Seq=203473 Ack=32267 Win=65454 Len=0 SLE=32969 SRE=33104 SLE=32510 SRE=32537 Frame 18557: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32267, Len: 0 No. Time Source Destination Protocol Length Info 18558 225.902773 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18558: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33104, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18559 225.902810 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 18528#10] rfb > xrl [ACK] Seq=203473 Ack=32267 Win=65454 Len=0 SLE=32969 SRE=33131 SLE=32510 SRE=32537 Frame 18559: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32267, Len: 0 No. Time Source Destination Protocol Length Info 18560 225.907624 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18560: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33131, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18561 225.907658 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 18528#11] rfb > xrl [ACK] Seq=203473 Ack=32267 Win=65454 Len=0 SLE=32969 SRE=33158 SLE=32510 SRE=32537 Frame 18561: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32267, Len: 0 No. Time Source Destination Protocol Length Info 18562 225.912117 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18562: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33158, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18563 225.912154 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 18528#12] rfb > xrl [ACK] Seq=203473 Ack=32267 Win=65454 Len=0 SLE=32969 SRE=33185 SLE=32510 SRE=32537 Frame 18563: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32267, Len: 0 No. Time Source Destination Protocol Length Info 18564 225.914111 192.168.10.32 192.168.20.3 UDP 774 Source port: 38302 Destination port: apc-3052 Frame 18564: 774 bytes on wire (6192 bits), 774 bytes captured (6192 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (732 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 39 3a 34 37 0a 53 52 3d 30 31 31 =20:59:47.SR=011 0060 35 45 37 0a 53 55 3d 33 46 38 32 0a 52 44 3d 46 5E7.SU=3F82.RD=F 0070 32 36 31 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 261.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 0a 34 8.7E=00.3E=002.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 37 2e 30 C=207.3.50=037.0 00c0 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 31 2f .43=028.5.78=11/ 00d0 31 39 2f 30 37 0a 36 41 3d 30 30 35 30 3a 0a 34 19/07.6A=0050:.4 00e0 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 4e 0a 7=S.63=UPS_IDEN. 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 37 34 0.38=00.6E=IS074 0120 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 31 2f 6005481 .6D=11/ 0130 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 2d 55 19/07.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 58 4c 20 20 PS RT 10000 XL 0150 20 0a 34 36 3d 35 39 2e 39 38 0a 34 44 3d 32 30 .46=59.98.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 35 3d 7.3.4E=205.9.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 3d 31 00.42=217.0.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 30 2e 30 0a 32 46 3d 31 35 2e 31 32 C=030.0.2F=15.12 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 2e 33 0.09=59.99;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 0a 49 9=0.I0=2.I1=00.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a 49 38 5=0.I6=0.I7=0.I8 0250 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 0a 49 =Int Contact 1.I 0260 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e 74 61 9=0.IA=Int Conta 0270 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 6e 74 ct 2.IB=0.IC=Int 0280 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 3d 46 Relay.ID=0.SH=F 0290 31 44 42 33 30 35 32 31 31 42 32 35 33 42 35 35 1DB305211B253B55 02a0 38 43 33 42 46 41 45 30 33 45 36 32 34 30 43 0a 8C3BFAE03E6240C. 02b0 4d 44 3d 66 38 38 33 35 66 62 33 30 66 66 65 65 MD=f8835fb30ffee 02c0 66 66 35 33 64 66 31 61 39 31 30 62 30 36 62 35 ff53df1a910b06b5 02d0 62 62 62 0a 3c 2f 42 4f 44 59 3e 0a bbb.</BODY>. No. Time Source Destination Protocol Length Info 18565 225.914191 192.168.10.32 192.168.20.3 UDP 774 Source port: 38302 Destination port: apc-3052 Frame 18565: 774 bytes on wire (6192 bits), 774 bytes captured (6192 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (732 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 30 3a 35 39 3a 34 37 0a 53 52 3d 30 31 31 =20:59:47.SR=011 0060 35 45 37 0a 53 55 3d 33 46 38 32 0a 52 44 3d 46 5E7.SU=3F82.RD=F 0070 32 36 31 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 261.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 0a 34 8.7E=00.3E=002.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 37 2e 30 C=207.3.50=037.0 00c0 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 31 2f .43=028.5.78=11/ 00d0 31 39 2f 30 37 0a 36 41 3d 30 30 35 30 3a 0a 34 19/07.6A=0050:.4 00e0 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 4e 0a 7=S.63=UPS_IDEN. 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 37 34 0.38=00.6E=IS074 0120 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 31 2f 6005481 .6D=11/ 0130 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 2d 55 19/07.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 58 4c 20 20 PS RT 10000 XL 0150 20 0a 34 36 3d 35 39 2e 39 38 0a 34 44 3d 32 30 .46=59.98.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 35 3d 7.3.4E=205.9.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 3d 31 00.42=217.0.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 30 2e 30 0a 32 46 3d 31 35 2e 31 32 C=030.0.2F=15.12 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 2e 33 0.09=59.99;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 0a 49 9=0.I0=2.I1=00.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a 49 38 5=0.I6=0.I7=0.I8 0250 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 0a 49 =Int Contact 1.I 0260 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e 74 61 9=0.IA=Int Conta 0270 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 6e 74 ct 2.IB=0.IC=Int 0280 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 3d 46 Relay.ID=0.SH=F 0290 31 44 42 33 30 35 32 31 31 42 32 35 33 42 35 35 1DB305211B253B55 02a0 38 43 33 42 46 41 45 30 33 45 36 32 34 30 43 0a 8C3BFAE03E6240C. 02b0 4d 44 3d 66 38 38 33 35 66 62 33 30 66 66 65 65 MD=f8835fb30ffee 02c0 66 66 35 33 64 66 31 61 39 31 30 62 30 36 62 35 ff53df1a910b06b5 02d0 62 62 62 0a 3c 2f 42 4f 44 59 3e 0a bbb.</BODY>. No. Time Source Destination Protocol Length Info 18566 225.914279 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:18:46 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS3/38302 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 18566: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:18:46 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS3/38302 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 18567 225.917264 Watchgua_3c:4c:d8 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.1 Frame 18567: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18568 225.917307 Cisco_bb:96:6d Watchgua_3c:4c:d8 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 18568: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18569 225.924393 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18569: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33185, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18570 225.924429 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 18528#13] rfb > xrl [ACK] Seq=203473 Ack=32267 Win=65454 Len=0 SLE=32969 SRE=33212 SLE=32510 SRE=32537 Frame 18570: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32267, Len: 0 No. Time Source Destination Protocol Length Info 18571 225.933040 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18571: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33212, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18572 225.933074 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 18528#14] rfb > xrl [ACK] Seq=203473 Ack=32267 Win=65454 Len=0 SLE=32969 SRE=33239 SLE=32510 SRE=32537 Frame 18572: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32267, Len: 0 No. Time Source Destination Protocol Length Info 18573 225.934372 192.168.10.31 192.168.20.3 UDP 776 Source port: 50764 Destination port: apc-3052 Frame 18573: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 35 32 3a 30 37 0a 53 52 3d 31 30 37 =19:52:07.SR=107 0060 43 0a 53 55 3d 32 44 38 33 30 45 32 42 0a 52 44 C.SU=2D830E2B.RD 0070 3d 36 38 34 42 0a 54 41 3d 31 39 32 2e 31 36 38 =684B.TA=192.168 0080 2e 32 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a .20.3.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 37 2e 30 0a 35 31 SM=2.4F=207.0.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 33 .4C=207.3.50=033 00c0 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 3d 31 .0.43=029.1.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 37 3a 1/19/07.6A=0057: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 3d 31 746005443 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d .46=60.00.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 37 2e 33 0a 34 207.3.4E=207.3.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 33 2e .5C=028.0.2F=13. 01d0 37 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 77.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 000.09=59.99;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 44 39 39 34 30 34 41 44 42 43 45 43 30 35 39 =D99404ADBCEC059 02a0 46 34 31 42 36 31 42 35 44 43 32 31 45 46 32 39 F41B61B5DC21EF29 02b0 38 0a 4d 44 3d 38 63 32 33 35 35 30 61 34 31 32 8.MD=8c23550a412 02c0 61 30 30 65 38 36 64 64 61 32 62 33 39 38 38 64 a00e86dda2b3988d 02d0 33 32 61 32 64 0a 3c 2f 42 4f 44 59 3e 0a 32a2d.</BODY>. No. Time Source Destination Protocol Length Info 18574 225.934455 192.168.10.31 192.168.20.3 UDP 776 Source port: 50764 Destination port: apc-3052 Frame 18574: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 35 32 3a 30 37 0a 53 52 3d 31 30 37 =19:52:07.SR=107 0060 43 0a 53 55 3d 32 44 38 33 30 45 32 42 0a 52 44 C.SU=2D830E2B.RD 0070 3d 36 38 34 42 0a 54 41 3d 31 39 32 2e 31 36 38 =684B.TA=192.168 0080 2e 32 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a .20.3.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 37 2e 30 0a 35 31 SM=2.4F=207.0.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 33 .4C=207.3.50=033 00c0 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 3d 31 .0.43=029.1.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 37 3a 1/19/07.6A=0057: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 3d 31 746005443 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d .46=60.00.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 37 2e 33 0a 34 207.3.4E=207.3.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 33 2e .5C=028.0.2F=13. 01d0 37 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 77.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 000.09=59.99;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 44 39 39 34 30 34 41 44 42 43 45 43 30 35 39 =D99404ADBCEC059 02a0 46 34 31 42 36 31 42 35 44 43 32 31 45 46 32 39 F41B61B5DC21EF29 02b0 38 0a 4d 44 3d 38 63 32 33 35 35 30 61 34 31 32 8.MD=8c23550a412 02c0 61 30 30 65 38 36 64 64 61 32 62 33 39 38 38 64 a00e86dda2b3988d 02d0 33 32 61 32 64 0a 3c 2f 42 4f 44 59 3e 0a 32a2d.</BODY>. No. Time Source Destination Protocol Length Info 18575 225.934539 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:18:46 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS2/50764 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 18575: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:18:46 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS2/50764 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 18576 225.937641 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18576: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33239, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18577 225.937675 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 18528#15] rfb > xrl [ACK] Seq=203473 Ack=32267 Win=65454 Len=0 SLE=32969 SRE=33266 SLE=32510 SRE=32537 Frame 18577: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32267, Len: 0 No. Time Source Destination Protocol Length Info 18578 225.946333 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18578: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33266, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18579 225.946366 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 18528#16] rfb > xrl [ACK] Seq=203473 Ack=32267 Win=65454 Len=0 SLE=32969 SRE=33293 SLE=32510 SRE=32537 Frame 18579: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32267, Len: 0 No. Time Source Destination Protocol Length Info 18580 225.953836 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18580: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33293, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18581 225.953875 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 18528#17] rfb > xrl [ACK] Seq=203473 Ack=32267 Win=65454 Len=0 SLE=32969 SRE=33320 SLE=32510 SRE=32537 Frame 18581: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32267, Len: 0 No. Time Source Destination Protocol Length Info 18582 225.961666 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18582: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33320, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18583 225.961701 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 18528#18] rfb > xrl [ACK] Seq=203473 Ack=32267 Win=65454 Len=0 SLE=32969 SRE=33347 SLE=32510 SRE=32537 Frame 18583: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32267, Len: 0 No. Time Source Destination Protocol Length Info 18584 225.977570 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 18584: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33374, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18585 225.977606 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 18528#19] rfb > xrl [ACK] Seq=203473 Ack=32267 Win=65454 Len=0 SLE=33374 SRE=33401 SLE=32969 SRE=33347 Frame 18585: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32267, Len: 0 No. Time Source Destination Protocol Length Info 18586 225.984319 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18586: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33401, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18587 225.984353 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 18528#20] rfb > xrl [ACK] Seq=203473 Ack=32267 Win=65454 Len=0 SLE=33374 SRE=33428 SLE=32969 SRE=33347 Frame 18587: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 32267, Len: 0 No. Time Source Destination Protocol Length Info 18588 225.993361 192.168.10.142 192.168.10.185 VNC 1215 [TCP Fast Retransmission] Authentication result Frame 18588: 1215 bytes on wire (9720 bits), 1215 bytes captured (9720 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 32267, Ack: 203473, Len: 1161 Virtual Network Computing No. Time Source Destination Protocol Length Info 18589 226.001678 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18589: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33428, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18590 226.001712 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=33455 Win=65535 Len=0 Frame 18590: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 33455, Len: 0 No. Time Source Destination Protocol Length Info 18591 226.001761 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18591: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33455, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18592 226.009902 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18592: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33482, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18593 226.009935 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=33509 Win=65481 Len=0 Frame 18593: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 33509, Len: 0 No. Time Source Destination Protocol Length Info 18594 226.017717 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18594: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33509, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18595 226.027877 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18595: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33536, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18596 226.027915 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=33563 Win=65427 Len=0 Frame 18596: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 33563, Len: 0 No. Time Source Destination Protocol Length Info 18597 226.035621 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18597: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33563, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18598 226.041756 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18598: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33590, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18599 226.041799 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=33617 Win=65373 Len=0 Frame 18599: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 33617, Len: 0 No. Time Source Destination Protocol Length Info 18600 226.054567 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18600: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33617, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18601 226.062635 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18601: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33644, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18602 226.062668 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=33671 Win=65319 Len=0 Frame 18602: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 33671, Len: 0 No. Time Source Destination Protocol Length Info 18603 226.065710 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18603: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33671, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18604 226.074184 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18604: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33698, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18605 226.074217 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=33725 Win=65265 Len=0 Frame 18605: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 33725, Len: 0 No. Time Source Destination Protocol Length Info 18606 226.087741 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18606: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33725, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18607 226.255621 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=33752 Win=65238 Len=0 Frame 18607: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 33752, Len: 0 No. Time Source Destination Protocol Length Info 18608 226.292804 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 18608: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15877, Ack: 1162148, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18609 226.292854 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1162148 Ack=15919 Win=46048 Len=0 Frame 18609: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1162148, Ack: 15919, Len: 0 No. Time Source Destination Protocol Length Info 18610 226.516309 192.168.10.203 117.241.41.195 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 18610: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 117.241.41.195 (117.241.41.195) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 18611 226.706267 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1051728128, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18611: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18612 226.706291 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1051728128, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18612: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18613 226.706305 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1051728128, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18613: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18614 226.706317 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1051728128, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18614: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18615 226.724252 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2920808704, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18615: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18616 226.724275 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2920808704, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18616: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18617 226.724287 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2920808704, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18617: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18618 226.724299 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2920808704, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18618: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18619 226.929282 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 18619: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15919, Ack: 1162148, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18620 226.929318 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1162148 Ack=15961 Win=46720 Len=0 Frame 18620: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1162148, Ack: 15961, Len: 0 No. Time Source Destination Protocol Length Info 18621 226.997348 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 17406#2] 9428 > smtp [ACK] Seq=653951 Ack=9283 Win=46279 Len=0 Frame 18621: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 653951, Ack: 9283, Len: 0 No. Time Source Destination Protocol Length Info 18622 226.997386 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=9283 Ack=652681 Win=0 Len=0 Frame 18622: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9283, Ack: 652681, Len: 0 No. Time Source Destination Protocol Length Info 18623 227.147009 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 18623: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18624 227.147041 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 18624: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18625 227.194995 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 18625: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18626 227.267465 192.168.10.104 192.168.10.246 NBNS 110 Refresh NB WORKGROUP<1e> Frame 18626: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 18627 227.315660 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 18627: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18628 227.371273 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 18628: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18629 227.371304 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 18629: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18630 227.444438 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 18630: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18631 227.547514 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 18631: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 15961, Ack: 1162148, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18632 227.547550 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1162148 Ack=16003 Win=46699 Len=0 Frame 18632: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1162148, Ack: 16003, Len: 0 No. Time Source Destination Protocol Length Info 18633 227.566355 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 18633: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18634 227.600470 192.168.10.99 192.168.10.255 BROWSER 243 Host Announcement LANDERSONXP, Workstation, Server, NT Workstation, Potential Browser Frame 18634: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.99 (192.168.10.99), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 18635 227.600678 192.168.10.99 192.168.10.255 BROWSER 243 Host Announcement LANDERSONXP, Workstation, Server, NT Workstation, Potential Browser Frame 18635: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.99 (192.168.10.99), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 18636 227.721708 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1068505344, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18636: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18637 227.721732 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1068505344, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18637: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18638 227.721745 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1068505344, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18638: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18639 227.721757 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1068505344, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18639: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18640 227.739749 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2937585920, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18640: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18641 227.739771 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2937585920, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18641: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18642 227.739784 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2937585920, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18642: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18643 227.739796 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2937585920, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18643: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18644 227.879911 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 18644: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18645 227.879942 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 18645: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18646 228.016323 192.168.10.203 117.241.41.195 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 18646: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 117.241.41.195 (117.241.41.195) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 18647 228.190379 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 18647: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16003, Ack: 1162148, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18648 228.190414 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1162148 Ack=16045 Win=46678 Len=0 Frame 18648: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1162148, Ack: 16045, Len: 0 No. Time Source Destination Protocol Length Info 18649 228.464431 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 4 Port 48 TTL = 120 Frame 18649: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 18650 228.737339 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1085282560, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18650: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18651 228.737363 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1085282560, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18651: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18652 228.737376 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1085282560, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18652: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18653 228.737389 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1085282560, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18653: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18654 228.755448 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2954363136, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18654: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18655 228.755458 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2954363136, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18655: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18656 228.755466 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2954363136, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18656: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18657 228.755473 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2954363136, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18657: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18658 228.767434 192.168.10.104 192.168.10.246 NBNS 110 Refresh NB WORKGROUP<1e> Frame 18658: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 18659 228.859220 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 18659: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16045, Ack: 1162148, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18660 228.859252 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1162148 Ack=16087 Win=46657 Len=0 Frame 18660: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1162148, Ack: 16087, Len: 0 No. Time Source Destination Protocol Length Info 18661 229.194924 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 18661: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18662 229.219063 Dell_39:5d:dd Broadcast ARP 60 Who has 192.168.10.224? Tell 192.168.10.207 Frame 18662: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18663 229.219094 Dell_39:5d:dd Broadcast ARP 60 Who has 192.168.10.224? Tell 192.168.10.207 Frame 18663: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18664 229.229550 192.168.10.224 192.168.20.3 TCP 74 46693 > 5666 [SYN] Seq=0 Win=5840 Len=0 MSS=1460 SACK_PERM=1 TSval=72482500 TSecr=0 WS=128 Frame 18664: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.224 (192.168.10.224), Dst: 192.168.20.3 (192.168.20.3) Transmission Control Protocol, Src Port: 46693 (46693), Dst Port: 5666 (5666), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 18665 229.229750 192.168.10.46 192.168.10.245 Syslog 214 LOCAL4.INFO: Oct 03 2011 19:18:49 ciscoasa : %ASA-6-302013: Built outbound TCP connection 55 for dmz1:WebServer/5666 (WebServer/5666) to inside:Groundwork/46693 (Groundwork/46693)\n Frame 18665: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.INFO: Oct 03 2011 19:18:49 ciscoasa : %ASA-6-302013: Built outbound TCP connection 55 for dmz1:WebServer/5666 (WebServer/5666) to inside:Groundwork/46693 (Groundwork/46693)\n No. Time Source Destination Protocol Length Info 18666 229.229849 192.168.20.3 192.168.10.224 TCP 78 5666 > 46693 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1380 WS=1 TSval=0 TSecr=0 SACK_PERM=1 Frame 18666: 78 bytes on wire (624 bits), 78 bytes captured (624 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_42:b9:dc (00:21:9b:42:b9:dc) Internet Protocol Version 4, Src: 192.168.20.3 (192.168.20.3), Dst: 192.168.10.224 (192.168.10.224) Transmission Control Protocol, Src Port: 5666 (5666), Dst Port: 46693 (46693), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 18667 229.229896 192.168.10.224 192.168.20.3 TCP 66 46693 > 5666 [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSval=72482500 TSecr=0 Frame 18667: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.224 (192.168.10.224), Dst: 192.168.20.3 (192.168.20.3) Transmission Control Protocol, Src Port: 46693 (46693), Dst Port: 5666 (5666), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 18668 229.230286 192.168.10.224 192.168.20.3 TCP 128 46693 > 5666 [PSH, ACK] Seq=1 Ack=1 Win=5888 Len=62 TSval=72482500 TSecr=0 Frame 18668: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.224 (192.168.10.224), Dst: 192.168.20.3 (192.168.20.3) Transmission Control Protocol, Src Port: 46693 (46693), Dst Port: 5666 (5666), Seq: 1, Ack: 1, Len: 62 Data (62 bytes) 0000 16 03 01 00 39 01 00 00 35 03 01 4e 8a 4b 24 d1 ....9...5..N.K$. 0010 2a 76 09 a8 71 21 64 26 c1 a6 de e8 d7 35 fe b7 *v..q!d&.....5.. 0020 c4 5f 55 84 ee 9b 98 f8 3a 8e 82 00 00 0e 00 3a ._U.....:......: 0030 00 34 00 1b 00 1a 00 19 00 18 00 17 01 00 .4............ No. Time Source Destination Protocol Length Info 18669 229.296001 192.168.20.3 192.168.10.224 TCP 298 5666 > 46693 [PSH, ACK] Seq=1 Ack=63 Win=65473 Len=232 TSval=18494050 TSecr=72482500 Frame 18669: 298 bytes on wire (2384 bits), 298 bytes captured (2384 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_42:b9:dc (00:21:9b:42:b9:dc) Internet Protocol Version 4, Src: 192.168.20.3 (192.168.20.3), Dst: 192.168.10.224 (192.168.10.224) Transmission Control Protocol, Src Port: 5666 (5666), Dst Port: 46693 (46693), Seq: 1, Ack: 63, Len: 232 Data (232 bytes) 0000 16 03 01 00 4a 02 00 00 46 03 01 4e 8a 49 a0 e1 ....J...F..N.I.. 0010 a2 3f 7b 29 d4 ec eb a8 b2 69 ba 75 f5 6b 13 ba .?{).....i.u.k.. 0020 9c 26 e1 69 de fa 6d 26 f6 4d 32 20 20 86 b9 94 .&.i..m&.M2 ... 0030 ec 87 9f 9e 7b 5d b1 38 ab f9 67 29 df 6c 94 09 ....{].8..g).l.. 0040 49 9e a5 6c d8 85 3a 9d 6c 2b 95 7f 00 3a 00 16 I..l..:.l+...:.. 0050 03 01 00 8b 0c 00 00 87 00 40 cf ff 65 c2 c8 b4 [email protected]... 0060 d2 68 8c c1 80 b1 7b d6 e8 b3 62 59 62 ed a7 45 .h....{...bYb..E 0070 6a f8 e9 d8 be 3f 38 42 5f b2 a5 36 03 d3 06 27 j....?8B_..6...' 0080 81 c8 9b 88 50 3b 82 3d 31 45 2c b4 c5 a5 be 6a ....P;.=1E,....j 0090 e3 2e a6 86 fd 6a 7e 1e 6a 73 00 01 02 00 40 10 .....j~.js....@. 00a0 2a 6c 2f df 76 9c 39 b5 37 38 58 9f a6 84 bd 3f *l/.v.9.78X....? 00b0 41 b6 6c fa b9 7e ba ce 40 cf 62 ce fc e3 69 a5 [email protected]. 00c0 ea 7e a1 a3 ea 4b d9 37 c4 a5 a1 b8 92 74 82 53 .~...K.7.....t.S 00d0 8a 86 46 7d 29 03 31 84 f4 bb 61 c8 4e 4c 02 16 ..F}).1...a.NL.. 00e0 03 01 00 04 0e 00 00 00 ........ No. Time Source Destination Protocol Length Info 18670 229.296056 192.168.10.224 192.168.20.3 TCP 66 46693 > 5666 [ACK] Seq=63 Ack=233 Win=6912 Len=0 TSval=72482566 TSecr=18494050 Frame 18670: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.224 (192.168.10.224), Dst: 192.168.20.3 (192.168.20.3) Transmission Control Protocol, Src Port: 46693 (46693), Dst Port: 5666 (5666), Seq: 63, Ack: 233, Len: 0 No. Time Source Destination Protocol Length Info 18671 229.297427 192.168.10.224 192.168.20.3 TCP 200 46693 > 5666 [PSH, ACK] Seq=63 Ack=233 Win=6912 Len=134 TSval=72482567 TSecr=18494050 Frame 18671: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits) Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.224 (192.168.10.224), Dst: 192.168.20.3 (192.168.20.3) Transmission Control Protocol, Src Port: 46693 (46693), Dst Port: 5666 (5666), Seq: 63, Ack: 233, Len: 134 Data (134 bytes) 0000 16 03 01 00 46 10 00 00 42 00 40 a2 be 7a aa 0d [email protected].. 0010 b8 cb a8 1c ae 11 9a 3c 71 72 b9 ce 7e 89 a7 e6 .......<qr..~... 0020 af b4 b8 be cb 8e ad 74 b3 ec f0 b2 d6 45 19 8d .......t.....E.. 0030 b7 7d 73 36 50 83 99 60 a8 47 66 3a cf e2 b8 d6 .}s6P..`.Gf:.... 0040 4a 4f 2d c6 d3 80 e7 ee a4 ac 10 14 03 01 00 01 JO-............. 0050 01 16 03 01 00 30 97 42 39 f2 41 4d 32 f1 02 f4 .....0.B9.AM2... 0060 6f a6 16 a3 2e 09 55 38 82 41 7c de 8f e8 6d ec o.....U8.A|...m. 0070 ab 22 1e 1a 8c ff 72 5d ad 4b 2e fe 98 e4 bc 8b ."....r].K...... 0080 7f 23 6d 80 85 13 .#m... No. Time Source Destination Protocol Length Info 18672 229.315863 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 18672: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18673 229.376781 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 18673: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18674 229.376821 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 18674: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18675 229.406482 192.168.20.3 192.168.10.224 TCP 125 5666 > 46693 [PSH, ACK] Seq=233 Ack=197 Win=65339 Len=59 TSval=18494051 TSecr=72482567 Frame 18675: 125 bytes on wire (1000 bits), 125 bytes captured (1000 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_42:b9:dc (00:21:9b:42:b9:dc) Internet Protocol Version 4, Src: 192.168.20.3 (192.168.20.3), Dst: 192.168.10.224 (192.168.10.224) Transmission Control Protocol, Src Port: 5666 (5666), Dst Port: 46693 (46693), Seq: 233, Ack: 197, Len: 59 Data (59 bytes) 0000 14 03 01 00 01 01 16 03 01 00 30 a6 89 8c 37 da ..........0...7. 0010 65 34 a4 23 6b e1 5a 80 2f b6 de e2 1d 6d 97 92 e4.#k.Z./....m.. 0020 71 25 d5 b6 53 ed 80 3a 87 bf 18 10 81 75 b5 11 q%..S..:.....u.. 0030 4a 65 5a 7f 39 73 cf e2 61 eb 95 JeZ.9s..a.. No. Time Source Destination Protocol Length Info 18676 229.407465 192.168.10.224 192.168.20.3 TCP 1180 46693 > 5666 [PSH, ACK] Seq=197 Ack=292 Win=6912 Len=1114 TSval=72482678 TSecr=18494051 Frame 18676: 1180 bytes on wire (9440 bits), 1180 bytes captured (9440 bits) Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.224 (192.168.10.224), Dst: 192.168.20.3 (192.168.20.3) Transmission Control Protocol, Src Port: 46693 (46693), Dst Port: 5666 (5666), Seq: 197, Ack: 292, Len: 1114 Data (1114 bytes) 0000 17 03 01 00 20 00 fc 94 fc 7e 4e ca 99 fe dc 22 .... ....~N...." 0010 8c 62 54 29 b0 3b d2 de 29 1c 52 bc 08 8b d3 c6 .bT).;..).R..... 0020 b1 38 5c 85 de 17 03 01 04 30 98 88 5b 52 8d 26 .8\......0..[R.& 0030 e5 43 b5 e0 c7 d1 8f 42 8e 2b 69 77 a9 9e 73 b5 .C.....B.+iw..s. 0040 3f 5a 23 e5 2a fe 64 8d 4a fe 43 89 2f ff d0 8e ?Z#.*.d.J.C./... 0050 5a 7f d7 fc 16 40 72 0f 82 57 7e f1 9d ec af 09 [email protected]~..... 0060 31 87 68 7b cc b5 8e 1b 5a 9e 2c 9d 64 81 ec c9 1.h{....Z.,.d... 0070 82 ba e8 33 a1 5b 7b 69 13 36 10 20 59 1d 02 e6 ...3.[{i.6. Y... 0080 1f f9 83 28 56 bd bc e9 83 9d 07 96 27 88 62 0b ...(V.......'.b. 0090 8a 03 4a 8b 55 88 1f 0a e3 bb db 0d 06 8c 32 7e ..J.U.........2~ 00a0 99 78 b6 75 78 07 e9 bc 65 b9 ce b1 8e e7 b5 d1 .x.ux...e....... 00b0 ea 1b 44 32 33 f3 78 a2 c5 34 c5 e0 2a 34 cf 8f ..D23.x..4..*4.. 00c0 04 d4 9a ea 6f 7d 1a eb ff ef 9c fe 88 23 89 66 ....o}.......#.f 00d0 b9 a2 c9 94 4e eb 19 46 c1 3e 2c 27 22 c6 1c bf ....N..F.>,'"... 00e0 77 b1 d9 2d 2e 87 05 4c fb 59 50 21 fc e7 ca eb w..-...L.YP!.... 00f0 7e 37 86 8a 7a 04 59 f7 4f 48 64 1b 0d a1 b0 22 ~7..z.Y.OHd...." 0100 21 8c 78 0e cd 15 24 aa 5b d2 0f 34 1f 0d 77 d2 !.x...$.[..4..w. 0110 71 e4 75 58 1c cd 43 2f 27 78 79 7b 1e 3e ef 45 q.uX..C/'xy{.>.E 0120 bd a6 87 11 a0 ea 36 ab fd 64 58 cf 6c 06 29 a0 ......6..dX.l.). 0130 bf 2c 3f 63 da 99 ae 37 03 f4 fd ac 59 11 9f 00 .,?c...7....Y... 0140 4f 09 fe a3 cc a6 ce 47 46 bc 37 5e 6c d4 7f d1 O......GF.7^l... 0150 51 86 5f 86 9f 7a 59 c4 63 be a0 0e 8c f4 3c 3f Q._..zY.c.....<? 0160 3d ce 34 f7 d0 f7 18 5c a0 d5 d4 5a 62 46 79 5f =.4....\...ZbFy_ 0170 cd 42 11 64 8a a1 c7 ec 48 4c da 2c 7f 70 65 21 .B.d....HL.,.pe! 0180 62 a7 be 43 62 ad 1f 95 7a 3d 9e 51 26 60 a9 62 b..Cb...z=.Q&`.b 0190 4f a9 05 ad 7d f6 40 a8 0d 96 f3 88 58 71 7a 8b O...}[email protected]. 01a0 d1 f3 6c 89 77 c1 71 a5 81 42 9a 91 d5 fa fc bb ..l.w.q..B...... 01b0 16 56 20 fd 1c 20 81 d4 1e ab d2 84 76 bb b1 23 .V .. ......v..# 01c0 7d 96 ea 5b bf 16 57 69 6c ad ad 16 47 40 eb 9d }..[..Wil...G@.. 01d0 f5 cf c1 ee 21 a3 8e c7 23 fd 3d eb c2 3f 08 5b ....!...#.=..?.[ 01e0 a1 7f 7f f7 db 74 15 7b ec e0 ee d2 fd 12 d8 c2 .....t.{........ 01f0 24 d3 4c 9c bc 34 7b de b8 d5 4b cc 94 18 8d 37 $.L..4{...K....7 0200 fa 4d 4b be 08 4e f1 de a7 46 65 bf 96 3f e9 7a .MK..N...Fe..?.z 0210 da c7 f1 61 a9 0e 37 f7 0d 17 91 c8 39 7d 23 e7 ...a..7.....9}#. 0220 b4 79 5b 67 e7 9e a6 0c cf c4 5b 12 36 26 9a ab .y[g......[.6&.. 0230 80 ea 92 57 4d 7b 91 5e 8a ab 80 f8 bd 82 b3 8a ...WM{.^........ 0240 f7 69 bd 2b e9 ef be 5b 1d 56 50 a1 cf 5e 8a 05 .i.+...[.VP..^.. 0250 2a e8 1a 7e f8 20 32 c9 d7 f7 47 b5 bb 57 9c 56 *..~. 2...G..W.V 0260 fd bb 8e 0f f0 db ae 6f 24 ce c0 cd fc 3d d7 7b .......o$....=.{ 0270 8c d9 a0 4d 3b 8a b2 2d 95 bd e6 78 11 24 ed d4 ...M;..-...x.$.. 0280 56 f7 f1 65 4e 13 6f 44 25 c9 42 f9 83 9a 46 ad V..eN.oD%.B...F. 0290 ad f4 02 1c d1 9e 54 97 a0 af 91 4a ed 77 76 1f ......T....J.wv. 02a0 ec b3 d3 db d6 37 f9 88 03 50 3d 4b 35 d4 c6 00 .....7...P=K5... 02b0 4d 4d 2e ee f8 35 78 b6 7b 35 38 28 61 9d 80 a6 MM...5x.{58(a... 02c0 83 d2 d4 f4 ee ab a6 c1 28 30 d5 68 67 22 1b 3a ........(0.hg".: 02d0 f3 aa 32 24 d0 e2 3c 52 e7 2c 4e e9 ca f0 d5 86 ..2$..<R.,N..... 02e0 20 09 4d 7f 06 53 48 de bb cb 55 9f 59 e4 4e f2 .M..SH...U.Y.N. 02f0 9b 1b e1 82 07 98 f4 e8 09 c7 0f ab 85 cc 88 c7 ................ 0300 82 be 64 b5 89 ef fc a3 c9 78 6a 2a 08 45 6b 78 ..d......xj*.Ekx 0310 b1 9f ac 5f 85 8b bb 77 46 6e b8 54 de d0 70 e5 ..._...wFn.T..p. 0320 3a 10 fc 62 7e 58 cb 68 c5 6c e1 05 e4 61 de 86 :..b~X.h.l...a.. 0330 dd 00 49 f0 a3 46 a7 30 7b 53 78 2f 1e 74 f2 1e ..I..F.0{Sx/.t.. 0340 20 f3 52 26 ed 78 cb 83 2e 02 96 9b 83 da 1d 15 .R&.x.......... 0350 2d 05 a7 94 b6 68 54 8f b8 20 b1 8a f9 69 a6 17 -....hT.. ...i.. 0360 d3 1c 4f e0 c3 7f 87 3d 5f 11 71 80 cd 45 7b 19 ..O....=_.q..E{. 0370 77 e0 bc b6 26 f1 18 41 25 6f 19 c5 26 17 36 27 w...&..A%o..&.6' 0380 b0 b7 ec 1d 10 71 78 9b c0 42 69 a2 3d fc 41 5b .....qx..Bi.=.A[ 0390 c4 c6 43 45 8d 0b 44 e2 13 22 de 76 f7 04 8b f0 ..CE..D..".v.... 03a0 b0 22 e2 55 50 0b dc 35 18 5c f7 b6 94 bd 2e d2 .".UP..5.\...... 03b0 a3 45 7f 82 f4 4a 90 26 b9 30 5c bb 14 d1 c8 18 .E...J.&.0\..... 03c0 dc 66 42 31 a9 66 92 14 04 5c 68 85 ee 4c 0d 66 .fB1.f...\h..L.f 03d0 ee 08 cb 56 92 1a f0 27 cd 29 35 01 ad e0 fd 2a ...V...'.)5....* 03e0 45 db bb 5e 32 4b 82 f7 9b b8 69 5f af ed 59 28 E..^2K....i_..Y( 03f0 c7 25 b5 ad 47 22 5d 00 22 64 66 0a 3b 2b c9 b2 .%..G"]."df.;+.. 0400 8e 42 5f 16 3b 60 2c 61 76 8e 1c e3 73 14 59 30 .B_.;`,av...s.Y0 0410 5b a9 2f 6d 8c 85 8b 76 cd 22 53 a4 df 64 79 4f [./m...v."S..dyO 0420 8e 67 42 16 58 58 78 1e 3f c6 ee d7 21 dd 93 4c .gB.XXx.?...!..L 0430 7c c6 06 7e bc 40 f8 a9 32 10 cd 3c d6 d4 3c ef |[email protected]..<..<. 0440 cc cc 67 1a 5c 7c 46 b7 44 7c 44 81 91 30 57 4f ..g.\|F.D|D..0WO 0450 a3 37 68 87 5f 8f d6 6b 0a 66 .7h._..k.f No. Time Source Destination Protocol Length Info 18677 229.444405 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 18677: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18678 229.490495 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 18678: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16087, Ack: 1162148, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18679 229.490532 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1162148 Ack=16129 Win=46636 Len=0 Frame 18679: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1162148, Ack: 16129, Len: 0 No. Time Source Destination Protocol Length Info 18680 229.531149 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 42.67.195.117.in-addr.arpa Frame 18680: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 61040 (61040), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 18681 229.566318 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 18681: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18682 229.580117 65.32.1.65 192.168.10.246 DNS 175 Standard query response, No such name Frame 18682: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 61040 (61040) Domain Name System (response) No. Time Source Destination Protocol Length Info 18683 229.580721 192.168.10.203 117.195.67.42 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 18683: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 117.195.67.42 (117.195.67.42) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 18684 229.623687 192.168.20.3 192.168.10.224 TCP 66 5666 > 46693 [ACK] Seq=292 Ack=1311 Win=64225 Len=0 TSval=18494054 TSecr=72482678 Frame 18684: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_42:b9:dc (00:21:9b:42:b9:dc) Internet Protocol Version 4, Src: 192.168.20.3 (192.168.20.3), Dst: 192.168.10.224 (192.168.10.224) Transmission Control Protocol, Src Port: 5666 (5666), Dst Port: 46693 (46693), Seq: 292, Ack: 1311, Len: 0 No. Time Source Destination Protocol Length Info 18685 229.752991 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1102059776, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18685: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18686 229.753015 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1102059776, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18686: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18687 229.753028 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1102059776, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18687: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18688 229.753040 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1102059776, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18688: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18689 229.770944 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2971140352, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18689: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18690 229.770968 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2971140352, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18690: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18691 229.770980 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2971140352, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18691: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18692 229.770993 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2971140352, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18692: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18693 229.804761 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18693: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33752, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18694 229.834707 192.168.10.207 206.225.164.188 SMTP 558 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 18694: 558 bytes on wire (4464 bits), 558 bytes captured (4464 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9073, Ack: 652681, Len: 504 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18695 229.834752 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=653951 Ack=9577 Win=46132 Len=0 Frame 18695: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 653951, Ack: 9577, Len: 0 No. Time Source Destination Protocol Length Info 18696 229.834784 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=9577 Ack=652681 Win=0 Len=0 Frame 18696: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9577, Ack: 652681, Len: 0 No. Time Source Destination Protocol Length Info 18697 229.878061 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 18697: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18698 229.878093 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 18698: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18699 229.962412 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 18699: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33941, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18700 229.962447 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=203473 Ack=33779 Win=65211 Len=0 SLE=33941 SRE=33968 Frame 18700: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 33779, Len: 0 No. Time Source Destination Protocol Length Info 18701 229.972188 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18701: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33968, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18702 229.972225 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18700#1] rfb > xrl [ACK] Seq=203473 Ack=33779 Win=65211 Len=0 SLE=33941 SRE=33995 Frame 18702: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 33779, Len: 0 No. Time Source Destination Protocol Length Info 18703 229.972474 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18703: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33995, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18704 229.972506 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18700#2] rfb > xrl [ACK] Seq=203473 Ack=33779 Win=65211 Len=0 SLE=33941 SRE=34022 Frame 18704: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 33779, Len: 0 No. Time Source Destination Protocol Length Info 18705 229.976172 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18705: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34022, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18706 229.976204 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18700#3] rfb > xrl [ACK] Seq=203473 Ack=33779 Win=65211 Len=0 SLE=33941 SRE=34049 Frame 18706: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 33779, Len: 0 No. Time Source Destination Protocol Length Info 18707 229.976488 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18707: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34049, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18708 229.976523 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18700#4] rfb > xrl [ACK] Seq=203473 Ack=33779 Win=65211 Len=0 SLE=33941 SRE=34076 Frame 18708: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 33779, Len: 0 No. Time Source Destination Protocol Length Info 18709 229.976569 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18709: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34076, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18710 229.976598 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18700#5] rfb > xrl [ACK] Seq=203473 Ack=33779 Win=65211 Len=0 SLE=33941 SRE=34103 Frame 18710: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 33779, Len: 0 No. Time Source Destination Protocol Length Info 18711 229.976979 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18711: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34103, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18712 229.977011 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18700#6] rfb > xrl [ACK] Seq=203473 Ack=33779 Win=65211 Len=0 SLE=33941 SRE=34130 Frame 18712: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 33779, Len: 0 No. Time Source Destination Protocol Length Info 18713 229.977050 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18713: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34130, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18714 229.977081 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18700#7] rfb > xrl [ACK] Seq=203473 Ack=33779 Win=65211 Len=0 SLE=33941 SRE=34157 Frame 18714: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 33779, Len: 0 No. Time Source Destination Protocol Length Info 18715 229.977153 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18715: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34157, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18716 229.977185 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18700#8] rfb > xrl [ACK] Seq=203473 Ack=33779 Win=65211 Len=0 SLE=33941 SRE=34184 Frame 18716: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 33779, Len: 0 No. Time Source Destination Protocol Length Info 18717 229.977222 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18717: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34184, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18718 229.977266 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18700#9] rfb > xrl [ACK] Seq=203473 Ack=33779 Win=65211 Len=0 SLE=33941 SRE=34211 Frame 18718: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 33779, Len: 0 No. Time Source Destination Protocol Length Info 18719 229.994437 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 18719: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33779, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18720 230.267475 192.168.10.104 192.168.10.246 NBNS 110 Refresh NB WORKGROUP<00> Frame 18720: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 18721 230.302539 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=203473 Ack=33806 Win=65184 Len=0 SLE=33941 SRE=34211 Frame 18721: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 33806, Len: 0 No. Time Source Destination Protocol Length Info 18722 230.363727 192.168.20.3 192.168.10.224 TCP 1180 5666 > 46693 [PSH, ACK] Seq=292 Ack=1311 Win=64225 Len=1114 TSval=18494060 TSecr=72482678 Frame 18722: 1180 bytes on wire (9440 bits), 1180 bytes captured (9440 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_42:b9:dc (00:21:9b:42:b9:dc) Internet Protocol Version 4, Src: 192.168.20.3 (192.168.20.3), Dst: 192.168.10.224 (192.168.10.224) Transmission Control Protocol, Src Port: 5666 (5666), Dst Port: 46693 (46693), Seq: 292, Ack: 1311, Len: 1114 Data (1114 bytes) 0000 17 03 01 00 20 70 c9 ad 63 46 87 c4 bb fd a6 18 .... p..cF...... 0010 ce d8 8e e0 34 32 d1 2d 8b cf a9 b6 d2 f6 5d e1 ....42.-......]. 0020 c2 65 7a f8 9f 17 03 01 04 30 b8 4a 66 30 cc ef .ez......0.Jf0.. 0030 75 b4 ec 20 a8 be 97 6b da 12 3a b4 31 d1 39 49 u.. ...k..:.1.9I 0040 e3 69 75 22 62 85 35 01 36 6d d8 c4 d7 9e 8a 7b .iu"b.5.6m.....{ 0050 4d e9 27 5d 3f 95 d4 07 93 72 dd 12 81 0e 25 d1 M.']?....r....%. 0060 79 47 77 61 88 43 66 a0 90 94 b4 6c 86 74 46 12 yGwa.Cf....l.tF. 0070 df f5 e5 1b 0e 9f fa 53 c3 b4 87 38 f8 13 36 91 .......S...8..6. 0080 ad 96 90 2d 3f 97 a6 3f d6 0e 4b 81 ec a8 2e bd ...-?..?..K..... 0090 95 9f 01 9f 9a 43 00 ce 4b 9e 50 86 7b 60 e6 a2 .....C..K.P.{`.. 00a0 fc 66 8d f5 aa 0b 71 90 1e 51 24 e9 b2 23 53 37 .f....q..Q$..#S7 00b0 da 44 a1 aa f4 d5 f5 42 90 eb fc db 0e 0a 73 ca .D.....B......s. 00c0 4f 96 c3 e6 db 6e dd 26 8c ac e6 53 3c e4 38 b7 O....n.&...S<.8. 00d0 65 67 6d 90 7c 1f fa c3 97 ce 2c f7 d7 d9 a7 7b egm.|.....,....{ 00e0 01 db 6b 50 d8 5a ec 18 ae 6d e5 29 35 53 c3 b7 ..kP.Z...m.)5S.. 00f0 33 c4 f2 f0 ea e1 f7 2d 86 01 80 93 7a 3f 8e fb 3......-....z?.. 0100 c0 17 a3 7a a3 d8 83 20 c5 7a 48 48 e4 01 e1 a4 ...z... .zHH.... 0110 e0 80 af 03 ba 35 f7 1b 3f 1b 26 54 b6 83 24 71 .....5..?.&T..$q 0120 78 9e 24 f6 12 5b 7b 03 86 17 48 98 c6 0d 99 7c x.$..[{...H....| 0130 5c 30 91 38 e8 35 26 00 ca 2c 87 5c c0 8a 8c ef \0.8.5&..,.\.... 0140 b5 1f 33 f1 74 9f cf 46 46 e8 c8 18 c1 d6 8b b2 ..3.t..FF....... 0150 27 e5 19 18 74 e7 85 36 3c a5 a0 c4 5e f1 17 ba '...t..6<...^... 0160 6b 4a 83 37 3b 99 39 5b a9 16 db e6 36 b2 f6 41 kJ.7;.9[....6..A 0170 cd 15 e0 e2 02 d6 44 0b 4e 08 c5 1e 46 68 a7 d3 ......D.N...Fh.. 0180 d8 6d d8 61 28 34 78 8f 52 39 e7 69 4b 4f 97 85 .m.a(4x.R9.iKO.. 0190 3f 2e fb 06 4c 80 a5 75 8c 92 83 61 aa b3 94 10 ?...L..u...a.... 01a0 48 64 b0 2b 18 f6 a6 52 5b ac cc 78 f1 49 28 22 Hd.+...R[..x.I(" 01b0 97 f1 6e 23 2e 9f d3 6c b9 e7 ad 01 68 98 c2 56 ..n#...l....h..V 01c0 69 fc 15 43 a4 75 54 63 ae b3 e7 c9 a1 74 3d 1e i..C.uTc.....t=. 01d0 06 17 30 b2 ce 7c f6 80 93 0d 0f c1 75 34 3a 6a ..0..|......u4:j 01e0 00 5b af 68 1c 66 45 93 8d b0 68 ce d8 ea 3c 56 .[.h.fE...h...<V 01f0 55 d8 85 de c0 d3 4a da 65 d6 e0 a9 6d 22 6d fd U.....J.e...m"m. 0200 46 91 57 ce 64 1a 9a 5c 96 f8 d0 3c 57 f2 2e 35 F.W.d..\...<W..5 0210 4b 6b f6 2f 4a bd 49 6f 12 9c ff 02 8b 73 4d 2e Kk./J.Io.....sM. 0220 37 53 55 85 c1 47 c6 d8 3e 64 a4 14 17 d9 41 a8 7SU..G..>d....A. 0230 85 cd 42 4f 1a ca 88 9b 74 91 a5 d0 c5 b9 b8 e8 ..BO....t....... 0240 78 fb 89 3b 05 d7 1b c1 67 05 e5 a1 8a 7c bd 6b x..;....g....|.k 0250 a4 01 82 21 be 59 e7 5c 50 0f 2b 3d 58 04 f2 9e ...!.Y.\P.+=X... 0260 05 bf bd cc a6 b6 11 94 01 20 99 b9 33 c5 e5 f2 ......... ..3... 0270 11 d1 0c ee eb e1 27 65 00 55 6a c7 dc e6 7c 35 ......'e.Uj...|5 0280 23 9c 41 f9 ee 14 20 a7 33 27 39 12 f1 1d 06 fd #.A... .3'9..... 0290 b3 a9 68 bb 42 d1 e9 05 59 88 55 59 8d 19 e6 8d ..h.B...Y.UY.... 02a0 41 c0 22 27 c3 61 3d 7d 9e 79 82 dc 19 80 e3 57 A."'.a=}.y.....W 02b0 3b eb c7 23 94 05 1d 80 11 1c cf f3 26 07 ec fa ;..#........&... 02c0 c3 e0 92 d8 5f 50 fa b9 4e d2 b3 bf 2a 08 7f 47 ...._P..N...*..G 02d0 56 71 42 03 db 4d 16 a1 2c ac fd 37 9c 95 42 09 VqB..M..,..7..B. 02e0 1a 47 5f bb c1 58 93 13 eb 5a b8 a5 45 59 e6 03 .G_..X...Z..EY.. 02f0 9a f8 7e 38 b9 b3 3d 3b aa f4 1d 3e 05 01 a9 49 ..~8..=;...>...I 0300 45 f7 2d 50 54 69 03 c6 b1 34 18 13 a2 98 e7 3a E.-PTi...4.....: 0310 3e 55 9f 48 6d e8 2d 15 1a 27 1f 5b 65 7d e5 a5 >U.Hm.-..'.[e}.. 0320 ec 0f 04 63 2b 54 f4 6e dd 0b 53 b0 b1 ba ed 19 ...c+T.n..S..... 0330 7a 1d e5 23 88 c3 28 89 9d 8f 29 6e b9 6b dd 21 z..#..(...)n.k.! 0340 84 43 a0 ba 73 11 b9 6d f9 ac 07 d4 c0 57 2e a5 .C..s..m.....W.. 0350 2b 0f 8b c3 e6 d9 3f 8a 79 ea 15 e8 ed 34 e5 c0 +.....?.y....4.. 0360 5a 89 d3 ba e9 57 ca 50 26 59 66 a5 0b 68 f5 6a Z....W.P&Yf..h.j 0370 24 b9 75 44 91 7e 51 f0 bd b5 49 b9 48 1f f7 cc $.uD.~Q...I.H... 0380 49 5b e9 d1 cc 77 2d 8e 51 b4 f6 83 61 cc fb cc I[...w-.Q...a... 0390 ba f8 54 61 ba 54 3c 02 99 7d d6 25 6c 5f 31 28 ..Ta.T<..}.%l_1( 03a0 55 a3 3b 4f ba 3e 0b 0e 41 00 66 1e 26 45 f6 f8 U.;O.>..A.f.&E.. 03b0 9e 7c d8 07 a8 b2 90 c3 cf d5 dc b7 80 cb 75 9d .|............u. 03c0 55 00 1f bc a5 0e 50 1f b3 85 9b 42 9c 3e cc 94 U.....P....B.>.. 03d0 fa a9 4a bf 70 e5 d4 20 85 61 a3 97 fe f8 0f 92 ..J.p.. .a...... 03e0 17 55 f7 69 f0 24 48 1f 5b ee 36 af 91 f6 c6 1c .U.i.$H.[.6..... 03f0 12 77 a8 8c 51 78 80 fd 28 ee 6d fd a3 c3 67 bb .w..Qx..(.m...g. 0400 f7 22 4d c8 50 b9 84 2c 18 fc bd 16 f4 a2 4e ae ."M.P..,......N. 0410 68 45 29 cb 8d 75 28 26 31 7a 6d c2 3d 2a b3 9b hE)..u(&1zm.=*.. 0420 6e 95 1f d8 94 92 d6 9e bf 60 f2 61 75 3e 65 cd n........`.au>e. 0430 25 42 36 f0 ba 09 20 e0 2f 6a 95 d6 96 57 78 3b %B6... ./j...Wx; 0440 7d 99 f2 4b 48 8e 05 db a5 18 3d b2 92 a3 c1 98 }..KH.....=..... 0450 7d 89 c3 9d 0e 3e 18 7b 77 33 }....>.{w3 No. Time Source Destination Protocol Length Info 18723 230.363762 192.168.20.3 192.168.10.224 TCP 103 5666 > 46693 [FIN, PSH, ACK] Seq=1406 Ack=1311 Win=64225 Len=37 TSval=18494060 TSecr=72482678 Frame 18723: 103 bytes on wire (824 bits), 103 bytes captured (824 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_42:b9:dc (00:21:9b:42:b9:dc) Internet Protocol Version 4, Src: 192.168.20.3 (192.168.20.3), Dst: 192.168.10.224 (192.168.10.224) Transmission Control Protocol, Src Port: 5666 (5666), Dst Port: 46693 (46693), Seq: 1406, Ack: 1311, Len: 37 Data (37 bytes) 0000 15 03 01 00 20 a2 46 61 21 6d c7 b4 b5 9b 0d b6 .... .Fa!m...... 0010 ba b4 ce 3e c9 c3 48 7f 3d 7a 2d 41 f4 f0 93 87 ...>..H.=z-A.... 0020 82 5e bc a4 ef .^... No. Time Source Destination Protocol Length Info 18724 230.363813 192.168.10.224 192.168.20.3 TCP 66 46693 > 5666 [ACK] Seq=1311 Ack=1444 Win=9216 Len=0 TSval=72483634 TSecr=18494060 Frame 18724: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.224 (192.168.10.224), Dst: 192.168.20.3 (192.168.20.3) Transmission Control Protocol, Src Port: 46693 (46693), Dst Port: 5666 (5666), Seq: 1311, Ack: 1444, Len: 0 No. Time Source Destination Protocol Length Info 18725 230.363858 192.168.10.224 192.168.20.3 TCP 103 46693 > 5666 [PSH, ACK] Seq=1311 Ack=1444 Win=9216 Len=37 TSval=72483634 TSecr=18494060 Frame 18725: 103 bytes on wire (824 bits), 103 bytes captured (824 bits) Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.224 (192.168.10.224), Dst: 192.168.20.3 (192.168.20.3) Transmission Control Protocol, Src Port: 46693 (46693), Dst Port: 5666 (5666), Seq: 1311, Ack: 1444, Len: 37 Data (37 bytes) 0000 15 03 01 00 20 ee 1a c8 bb 69 b0 29 d9 08 9d 9b .... ....i.).... 0010 fb 64 8c f0 39 f5 96 4f e1 46 13 fc 84 c5 13 02 .d..9..O.F...... 0020 81 52 45 2c 21 .RE,! No. Time Source Destination Protocol Length Info 18726 230.363894 192.168.10.224 192.168.20.3 TCP 66 46693 > 5666 [RST, ACK] Seq=1348 Ack=1444 Win=9216 Len=0 TSval=72483634 TSecr=18494060 Frame 18726: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.224 (192.168.10.224), Dst: 192.168.20.3 (192.168.20.3) Transmission Control Protocol, Src Port: 46693 (46693), Dst Port: 5666 (5666), Seq: 1348, Ack: 1444, Len: 0 No. Time Source Destination Protocol Length Info 18727 230.364862 192.168.10.46 192.168.10.245 Syslog 209 LOCAL4.INFO: Oct 03 2011 19:18:50 ciscoasa : %ASA-6-302014: Teardown TCP connection 55 for dmz1:WebServer/5666 to inside:Groundwork/46693 duration 0:00:01 bytes 2789 TCP FINs\n Frame 18727: 209 bytes on wire (1672 bits), 209 bytes captured (1672 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.INFO: Oct 03 2011 19:18:50 ciscoasa : %ASA-6-302014: Teardown TCP connection 55 for dmz1:WebServer/5666 to inside:Groundwork/46693 duration 0:00:01 bytes 2789 TCP FINs\n No. Time Source Destination Protocol Length Info 18728 230.548447 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 18728: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16129, Ack: 1162148, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18729 230.548483 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1162148 Ack=16171 Win=46615 Len=0 Frame 18729: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1162148, Ack: 16171, Len: 0 No. Time Source Destination Protocol Length Info 18730 230.768562 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1118836992, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18730: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18731 230.768585 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1118836992, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18731: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18732 230.768599 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1118836992, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18732: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18733 230.768612 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1118836992, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18733: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18734 230.786583 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2987917568, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18734: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18735 230.786606 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 2987917568, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18735: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18736 230.786619 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2987917568, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18736: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18737 230.786631 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 2987917568, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18737: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18738 231.079673 192.168.10.203 117.195.67.42 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 18738: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 117.195.67.42 (117.195.67.42) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 18739 231.131839 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.32 Frame 18739: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18740 231.131871 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.32 Frame 18740: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18741 231.186368 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 18741: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16171, Ack: 1162148, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18742 231.186411 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1162148 Ack=16213 Win=46594 Len=0 Frame 18742: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1162148, Ack: 16213, Len: 0 No. Time Source Destination Protocol Length Info 18743 231.194987 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 18743: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18744 231.315757 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 18744: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18745 231.367882 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 18745: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18746 231.367914 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 18746: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18747 231.444490 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 18747: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18748 231.566321 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 18748: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18749 231.766911 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 18749: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18750 231.766946 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 18750: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18751 231.767033 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 18751: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18752 231.767046 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 18752: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18753 231.767060 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 18753: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18754 231.767070 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 18754: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18755 231.767081 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 18755: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18756 231.767091 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 18756: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18757 231.767103 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 18757: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18758 231.767212 192.168.10.46 192.168.10.245 Syslog 214 LOCAL4.WARNING: Oct 03 2011 19:18:52 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n Frame 18758: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:18:52 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n No. Time Source Destination Protocol Length Info 18759 231.767229 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 18759: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18760 231.767240 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 18760: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18761 231.767261 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 18761: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18762 231.767296 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 18762: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18763 231.767306 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 18763: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18764 231.767347 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 18764: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18765 231.767358 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 18765: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18766 231.767386 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 18766: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18767 231.767396 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 18767: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18768 231.767406 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 18768: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18769 231.767416 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 18769: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18770 231.767426 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 18770: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18771 231.767436 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 18771: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18772 231.767445 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 18772: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18773 231.767455 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 18773: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18774 231.767474 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 18774: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18775 231.767484 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 18775: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18776 231.767494 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 18776: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18777 231.767505 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 18777: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18778 231.767515 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 18778: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18779 231.767525 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 18779: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18780 231.767535 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 18780: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18781 231.767545 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 18781: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18782 231.767555 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 18782: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18783 231.767565 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 18783: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18784 231.767575 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 18784: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18785 231.767585 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 18785: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18786 231.767595 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 18786: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18787 231.767605 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 18787: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18788 231.767615 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 18788: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18789 231.767624 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 18789: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18790 231.767650 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 18790: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18791 231.767660 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 18791: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18792 231.767670 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 18792: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18793 231.767682 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 18793: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18794 231.767761 192.168.10.104 192.168.10.246 NBNS 110 Refresh NB WORKGROUP<00> Frame 18794: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 18795 231.784184 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1135614208, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18795: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18796 231.784207 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1135614208, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18796: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18797 231.784220 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1135614208, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18797: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18798 231.784233 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1135614208, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18798: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18799 231.802170 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3004694784, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18799: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18800 231.802193 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3004694784, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18800: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18801 231.802205 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3004694784, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18801: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18802 231.802218 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3004694784, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18802: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18803 231.815131 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 18803: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16213, Ack: 1162148, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18804 231.815166 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1162148 Ack=16255 Win=46573 Len=0 Frame 18804: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1162148, Ack: 16255, Len: 0 No. Time Source Destination Protocol Length Info 18805 231.883854 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 18805: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18806 231.883886 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 18806: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18807 232.278865 IntelCor_ed:1c:1c Broadcast ARP 60 Who has 192.168.10.16? Tell 192.168.10.225 Frame 18807: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1c:1c (00:13:20:ed:1c:1c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18808 232.278897 IntelCor_ed:1c:1c Broadcast ARP 60 Who has 192.168.10.16? Tell 192.168.10.225 Frame 18808: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1c:1c (00:13:20:ed:1c:1c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18809 232.337126 192.168.10.142 192.168.10.185 VNC 459 [TCP Retransmission] Authentication result Frame 18809: 459 bytes on wire (3672 bits), 459 bytes captured (3672 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 33806, Ack: 203473, Len: 405 Virtual Network Computing No. Time Source Destination Protocol Length Info 18810 232.459214 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 18810: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16255, Ack: 1162148, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18811 232.459250 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1162148 Ack=16297 Win=46552 Len=0 Frame 18811: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1162148, Ack: 16297, Len: 0 No. Time Source Destination Protocol Length Info 18812 232.461460 Watchgua_3c:4c:d8 Dell_39:5d:dd ARP 60 Who has 192.168.10.207? Tell 192.168.10.1 Frame 18812: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18813 232.461476 Dell_39:5d:dd Watchgua_3c:4c:d8 ARP 60 192.168.10.207 is at 00:18:8b:39:5d:dd Frame 18813: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 18814 232.490161 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=34211 Win=64779 Len=0 Frame 18814: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 34211, Len: 0 No. Time Source Destination Protocol Length Info 18815 232.544780 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 18815: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18816 232.544812 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 18816: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18817 232.579748 192.168.10.203 117.195.67.42 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 18817: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 117.195.67.42 (117.195.67.42) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 18818 232.799840 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1152391424, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18818: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18819 232.799864 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1152391424, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18819: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18820 232.799877 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1152391424, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18820: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18821 232.799889 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1152391424, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18821: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18822 232.817808 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3021472000, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18822: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18823 232.817830 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3021472000, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18823: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18824 232.817842 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3021472000, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18824: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18825 232.817855 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3021472000, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18825: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18826 232.877969 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-01.geo.kaspersky.com Frame 18826: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 55043 (55043), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 18827 232.997527 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 18695#1] 9428 > smtp [ACK] Seq=653951 Ack=9577 Win=46132 Len=0 Frame 18827: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 653951, Ack: 9577, Len: 0 No. Time Source Destination Protocol Length Info 18828 232.997566 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=9577 Ack=652681 Win=0 Len=0 Frame 18828: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9577, Ack: 652681, Len: 0 No. Time Source Destination Protocol Length Info 18829 233.100227 Dell_44:d0:a0 Broadcast ARP 60 Gratuitous ARP for 192.168.0.120 (Reply) Frame 18829: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:a0 (84:2b:2b:44:d0:a0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply/gratuitous ARP) No. Time Source Destination Protocol Length Info 18830 233.100258 Dell_44:d0:a0 Broadcast ARP 60 Gratuitous ARP for 192.168.0.120 (Reply) Frame 18830: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:a0 (84:2b:2b:44:d0:a0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply/gratuitous ARP) No. Time Source Destination Protocol Length Info 18831 233.103051 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 18831: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16297, Ack: 1162148, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18832 233.103084 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1162148 Ack=16339 Win=46531 Len=0 Frame 18832: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1162148, Ack: 16339, Len: 0 No. Time Source Destination Protocol Length Info 18833 233.103116 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=16339 Ack=1162148 Win=17065 Len=0 Frame 18833: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16339, Ack: 1162148, Len: 0 No. Time Source Destination Protocol Length Info 18834 233.103144 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 18833#1] smtp > 23308 [ACK] Seq=16339 Ack=1162148 Win=17065 Len=0 Frame 18834: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16339, Ack: 1162148, Len: 0 No. Time Source Destination Protocol Length Info 18835 233.103174 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 18835: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1162148, Ack: 16339, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18836 233.103204 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 18836: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1163528, Ack: 16339, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18837 233.103234 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 18837: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1164908, Ack: 16339, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18838 233.103276 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 18838: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1166288, Ack: 16339, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18839 233.103306 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 18839: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1167668, Ack: 16339, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18840 233.103335 206.225.164.186 192.168.10.207 SMTP 559 C: DATA fragment, 505 bytes Frame 18840: 559 bytes on wire (4472 bits), 559 bytes captured (4472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1169048, Ack: 16339, Len: 505 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18841 233.103367 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 18841: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1169553, Ack: 16339, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18842 233.103396 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 18842: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1170933, Ack: 16339, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18843 233.103425 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 18843: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1172313, Ack: 16339, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18844 233.103466 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 18844: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1173693, Ack: 16339, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18845 233.103496 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 18845: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1175073, Ack: 16339, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18846 233.103525 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=16339 Ack=1169553 Win=9660 Len=0 Frame 18846: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16339, Ack: 1169553, Len: 0 No. Time Source Destination Protocol Length Info 18847 233.103553 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 18847: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1176453, Ack: 16339, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18848 233.103581 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=16339 Ack=1175073 Win=4140 Len=0 Frame 18848: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16339, Ack: 1175073, Len: 0 No. Time Source Destination Protocol Length Info 18849 233.103610 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 18849: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1177833, Ack: 16339, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18850 233.103638 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=16339 Ack=1177833 Win=1380 Len=0 Frame 18850: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16339, Ack: 1177833, Len: 0 No. Time Source Destination Protocol Length Info 18851 233.194927 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 18851: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18852 233.251365 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=16339 Ack=1179213 Win=0 Len=0 Frame 18852: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16339, Ack: 1179213, Len: 0 No. Time Source Destination Protocol Length Info 18853 233.267483 192.168.10.104 192.168.10.246 NBNS 110 Refresh NB WORKGROUP<00> Frame 18853: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 18854 233.315692 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 18854: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18855 233.365922 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 18855: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18856 233.365954 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 18856: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18857 233.444419 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 18857: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18858 233.566327 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 18858: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18859 233.738770 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 18859: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16339, Ack: 1179213, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18860 233.738805 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1179213 Ack=16381 Win=46510 Len=0 Frame 18860: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1179213, Ack: 16381, Len: 0 No. Time Source Destination Protocol Length Info 18861 233.815395 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1169168640, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18861: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18862 233.815419 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1169168640, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18862: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18863 233.815433 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1169168640, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18863: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18864 233.815445 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1169168640, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18864: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18865 233.833316 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3038249216, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18865: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18866 233.833331 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3038249216, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18866: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18867 233.833345 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3038249216, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18867: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18868 233.833357 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3038249216, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18868: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18869 233.874405 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 18869: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18870 233.874430 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 18870: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18871 233.877868 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-01.geo.kaspersky.com Frame 18871: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 55043 (55043), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 18872 234.201652 192.168.10.246 65.32.1.65 DNS 85 Standard query PTR 72.98.246.41.in-addr.arpa Frame 18872: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 54923 (54923), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 18873 234.373130 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 18873: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16381, Ack: 1179213, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18874 234.373165 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1179213 Ack=16423 Win=46489 Len=0 Frame 18874: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1179213, Ack: 16423, Len: 0 No. Time Source Destination Protocol Length Info 18875 234.482038 65.32.1.65 192.168.10.246 DNS 129 Standard query response PTR dsl-246-98-72.telkomadsl.co.za Frame 18875: 129 bytes on wire (1032 bits), 129 bytes captured (1032 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 54923 (54923) Domain Name System (response) No. Time Source Destination Protocol Length Info 18876 234.612166 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 226.116.31.77.in-addr.arpa Frame 18876: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 60607 (60607), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 18877 234.780716 192.168.10.30 192.168.20.3 UDP 762 Source port: 34427 Destination port: apc-3052 Frame 18877: 762 bytes on wire (6096 bits), 762 bytes captured (6096 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (720 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 37 3a 35 30 0a 53 52 3d 31 42 0a =18:47:50.SR=1B. 0060 53 55 3d 37 42 31 33 34 37 34 37 0a 52 44 3d 42 SU=7B134747.RD=B 0070 38 44 31 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 8D1.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 0a 34 8.7E=00.3E=001.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 2e 30 C=207.3.50=040.0 00c0 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 37 2f .43=025.2.78=07/ 00d0 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 0a 34 25/06.6A=0023:.4 00e0 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 20 0a 7=S.63=BAI_UPS . 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 36 33 0.38=00.6E=NS063 0120 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 37 2f 1005398 .6D=07/ 0130 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 2d 55 25/06.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 52 4d 20 58 PS RT 10000 RM X 0150 4c 0a 34 36 3d 35 39 2e 39 38 0a 34 44 3d 32 30 L.46=59.98.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 35 3d 7.3.4E=204.4.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 3d 31 00.42=218.1.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e 34 37 C=034.0.2F=16.47 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 2e 33 0.09=59.99;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 0a 49 9=0.I0=2.I1=26.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a 49 38 5=0.I6=0.I7=1.I8 0250 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 0a 49 =Device 1.I9=0.I 0260 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d 30 0a A=Device 2.IB=0. 0270 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 30 0a IC=Relay 1.ID=0. 0280 53 48 3d 37 46 42 44 43 36 46 32 32 36 37 31 36 SH=7FBDC6F226716 0290 30 32 31 32 30 44 36 38 31 30 32 43 45 44 36 42 02120D68102CED6B 02a0 42 34 44 0a 4d 44 3d 33 31 36 37 35 62 39 38 37 B4D.MD=31675b987 02b0 38 32 63 66 65 32 39 36 61 31 61 61 38 33 36 66 82cfe296a1aa836f 02c0 64 66 31 36 63 30 66 0a 3c 2f 42 4f 44 59 3e 0a df16c0f.</BODY>. No. Time Source Destination Protocol Length Info 18878 234.780793 192.168.10.30 192.168.20.3 UDP 762 Source port: 34427 Destination port: apc-3052 Frame 18878: 762 bytes on wire (6096 bits), 762 bytes captured (6096 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (720 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00 0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 38 3a 34 37 3a 35 30 0a 53 52 3d 31 42 0a =18:47:50.SR=1B. 0060 53 55 3d 37 42 31 33 34 37 34 37 0a 52 44 3d 42 SU=7B134747.RD=B 0070 38 44 31 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 8D1.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 0a 34 8.7E=00.3E=001.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 2e 30 C=207.3.50=040.0 00c0 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 37 2f .43=025.2.78=07/ 00d0 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 0a 34 25/06.6A=0023:.4 00e0 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 20 0a 7=S.63=BAI_UPS . 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 36 33 0.38=00.6E=NS063 0120 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 37 2f 1005398 .6D=07/ 0130 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 2d 55 25/06.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 52 4d 20 58 PS RT 10000 RM X 0150 4c 0a 34 36 3d 35 39 2e 39 38 0a 34 44 3d 32 30 L.46=59.98.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 35 3d 7.3.4E=204.4.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 3d 31 00.42=218.1.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e 34 37 C=034.0.2F=16.47 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 35 39 2e 39 39 3b 32 30 37 2e 33 0.09=59.99;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 0a 49 9=0.I0=2.I1=26.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a 49 38 5=0.I6=0.I7=1.I8 0250 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 0a 49 =Device 1.I9=0.I 0260 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d 30 0a A=Device 2.IB=0. 0270 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 30 0a IC=Relay 1.ID=0. 0280 53 48 3d 37 46 42 44 43 36 46 32 32 36 37 31 36 SH=7FBDC6F226716 0290 30 32 31 32 30 44 36 38 31 30 32 43 45 44 36 42 02120D68102CED6B 02a0 42 34 44 0a 4d 44 3d 33 31 36 37 35 62 39 38 37 B4D.MD=31675b987 02b0 38 32 63 66 65 32 39 36 61 31 61 61 38 33 36 66 82cfe296a1aa836f 02c0 64 66 31 36 63 30 66 0a 3c 2f 42 4f 44 59 3e 0a df16c0f.</BODY>. No. Time Source Destination Protocol Length Info 18879 234.781016 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:18:55 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS1/34427 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 18879: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:18:55 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS1/34427 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 18880 234.807719 65.32.1.65 192.168.10.246 DNS 149 Standard query response, No such name Frame 18880: 149 bytes on wire (1192 bits), 149 bytes captured (1192 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 60607 (60607) Domain Name System (response) No. Time Source Destination Protocol Length Info 18881 234.808354 192.168.10.203 77.31.116.226 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 18881: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 77.31.116.226 (77.31.116.226) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 18882 234.831078 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1185945856, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18882: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18883 234.831101 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1185945856, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18883: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18884 234.831113 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1185945856, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18884: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18885 234.831126 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1185945856, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18885: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18886 234.849006 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3055026432, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18886: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18887 234.849031 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3055026432, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18887: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18888 234.849045 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3055026432, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18888: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18889 234.849057 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3055026432, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18889: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18890 234.877902 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-01.geo.kaspersky.com Frame 18890: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 55043 (55043), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 18891 234.991462 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 18891: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18892 234.991493 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 18892: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 18893 235.008357 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 18893: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16423, Ack: 1179213, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18894 235.008412 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1179213 Ack=16465 Win=46468 Len=0 Frame 18894: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1179213, Ack: 16465, Len: 0 No. Time Source Destination Protocol Length Info 18895 235.008503 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 18895: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16465, Ack: 1179213, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18896 235.008712 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1179213 Ack=16507 Win=46447 Len=0 Frame 18896: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1179213, Ack: 16507, Len: 0 No. Time Source Destination Protocol Length Info 18897 235.197413 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 18897: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18898 235.241104 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=9577 Ack=652681 Win=17732 Len=0 Frame 18898: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9577, Ack: 652681, Len: 0 No. Time Source Destination Protocol Length Info 18899 235.241126 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 18898#1] smtp > 9428 [ACK] Seq=9577 Ack=652681 Win=17732 Len=0 Frame 18899: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9577, Ack: 652681, Len: 0 No. Time Source Destination Protocol Length Info 18900 235.241195 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 18900: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 653951, Ack: 9577, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18901 235.241213 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 18901: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 655331, Ack: 9577, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18902 235.241233 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 18902: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 656711, Ack: 9577, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18903 235.241251 206.225.164.188 192.168.10.207 SMTP 1320 C: DATA fragment, 1266 bytes Frame 18903: 1320 bytes on wire (10560 bits), 1320 bytes captured (10560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 658091, Ack: 9577, Len: 1266 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18904 235.241269 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 18904: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 659357, Ack: 9577, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18905 235.241286 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 18905: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 660737, Ack: 9577, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18906 235.241306 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 18898#2] smtp > 9428 [ACK] Seq=9577 Ack=652681 Win=17732 Len=0 Frame 18906: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9577, Ack: 652681, Len: 0 No. Time Source Destination Protocol Length Info 18907 235.241329 192.168.10.207 206.225.164.188 SMTP 222 S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 18907: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9577, Ack: 652681, Len: 168 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18908 235.241347 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 18907#1] smtp > 9428 [ACK] Seq=9745 Ack=652681 Win=17732 Len=0 Frame 18908: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9745, Ack: 652681, Len: 0 No. Time Source Destination Protocol Length Info 18909 235.241364 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=662117 Ack=9745 Win=46048 Len=0 Frame 18909: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 662117, Ack: 9745, Len: 0 No. Time Source Destination Protocol Length Info 18910 235.241382 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 18907#2] smtp > 9428 [ACK] Seq=9745 Ack=652681 Win=17732 Len=0 Frame 18910: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9745, Ack: 652681, Len: 0 No. Time Source Destination Protocol Length Info 18911 235.241399 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 18907#3] smtp > 9428 [ACK] Seq=9745 Ack=652681 Win=17732 Len=0 Frame 18911: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9745, Ack: 652681, Len: 0 No. Time Source Destination Protocol Length Info 18912 235.241417 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 18907#4] smtp > 9428 [ACK] Seq=9745 Ack=652681 Win=17732 Len=0 Frame 18912: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9745, Ack: 652681, Len: 0 No. Time Source Destination Protocol Length Info 18913 235.241434 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 18907#5] smtp > 9428 [ACK] Seq=9745 Ack=652681 Win=17732 Len=0 Frame 18913: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9745, Ack: 652681, Len: 0 No. Time Source Destination Protocol Length Info 18914 235.241519 206.225.164.188 192.168.10.207 SMTP 1324 [TCP Fast Retransmission] C: DATA fragment, 1270 bytes Frame 18914: 1324 bytes on wire (10592 bits), 1324 bytes captured (10592 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 652681, Ack: 9745, Len: 1270 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18915 235.241538 206.225.164.188 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 18915: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 653951, Ack: 9745, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18916 235.241558 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 18916: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 662117, Ack: 9745, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18917 235.241576 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 18917: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 663497, Ack: 9745, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18918 235.241593 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9745 Ack=662117 Win=8296 Len=0 Frame 18918: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9745, Ack: 662117, Len: 0 No. Time Source Destination Protocol Length Info 18919 235.241611 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 18918#1] smtp > 9428 [ACK] Seq=9745 Ack=662117 Win=8296 Len=0 Frame 18919: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9745, Ack: 662117, Len: 0 No. Time Source Destination Protocol Length Info 18920 235.241628 206.225.164.188 192.168.10.207 SMTP 1385 C: DATA fragment, 1331 bytes Frame 18920: 1385 bytes on wire (11080 bits), 1385 bytes captured (11080 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 664877, Ack: 9745, Len: 1331 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18921 235.241648 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 18921: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 666208, Ack: 9745, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18922 235.241665 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9745 Ack=664877 Win=5536 Len=0 Frame 18922: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9745, Ack: 664877, Len: 0 No. Time Source Destination Protocol Length Info 18923 235.241703 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9745 Ack=667588 Win=2825 Len=0 Frame 18923: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9745, Ack: 667588, Len: 0 No. Time Source Destination Protocol Length Info 18924 235.241734 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 18924: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 667588, Ack: 9745, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18925 235.241754 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 18925: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 668968, Ack: 9745, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18926 235.241774 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 18926: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 670348, Ack: 9745, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18927 235.241875 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=9745 Ack=670413 Win=0 Len=0 Frame 18927: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9745, Ack: 670413, Len: 0 No. Time Source Destination Protocol Length Info 18928 235.315611 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 18928: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18929 235.373242 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 18929: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18930 235.373265 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 18930: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18931 235.383519 188.161.220.86 192.168.10.207 TCP 62 45100 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 18931: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45100 (45100), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 18932 235.383568 192.168.10.207 188.161.220.86 TCP 62 smtp > 45100 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 18932: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45100 (45100), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 18933 235.444392 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 18933: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18934 235.566300 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 18934: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 18935 235.572383 Oracle_c8:69:71 Broadcast ARP 60 Gratuitous ARP for 192.168.10.210 (Request) Frame 18935: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18936 235.572404 Oracle_c8:69:71 Broadcast ARP 60 Gratuitous ARP for 192.168.10.210 (Request) Frame 18936: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18937 235.700883 188.161.220.86 192.168.10.207 TCP 60 45100 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 18937: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45100 (45100), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 18938 235.701103 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:48:13 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45100 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 18938: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:13 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45100 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 18939 235.701124 192.168.10.207 188.161.220.86 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:47:48 -0400 Frame 18939: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45100 (45100), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18940 235.701147 188.161.220.86 192.168.10.207 TCP 60 45100 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 18940: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45100 (45100), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 18941 235.761708 180.243.236.205 192.168.10.207 TCP 62 unizensus > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 18941: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: unizensus (1151), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 18942 235.761747 192.168.10.207 180.243.236.205 TCP 62 smtp > unizensus [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 18942: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: unizensus (1151), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 18943 235.777542 46.115.18.50 192.168.10.207 TCP 62 14216 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 18943: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 46.115.18.50 (46.115.18.50), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 14216 (14216), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 18944 235.777581 192.168.10.207 46.115.18.50 TCP 62 smtp > 14216 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 18944: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 46.115.18.50 (46.115.18.50) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 14216 (14216), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 18945 235.803411 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18945: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34211, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18946 235.846645 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1202723072, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18946: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18947 235.846662 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1202723072, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 18947: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18948 235.846669 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1202723072, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18948: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18949 235.846677 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1202723072, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 18949: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18950 235.864595 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3071803648, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18950: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18951 235.864611 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3071803648, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 18951: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18952 235.864619 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3071803648, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18952: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18953 235.864627 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3071803648, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 18953: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 18954 235.872678 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 18954: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18955 235.872695 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 18955: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 18956 235.989999 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=34238 Win=64752 Len=0 Frame 18956: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 34238, Len: 0 No. Time Source Destination Protocol Length Info 18957 236.017188 46.115.18.50 192.168.10.207 TCP 60 14216 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 18957: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 46.115.18.50 (46.115.18.50), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 14216 (14216), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 18958 236.017306 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:48:14 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 46.115.18.50 7x.x.x.3 14216 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 18958: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:14 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 46.115.18.50 7x.x.x.3 14216 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 18959 236.017415 192.168.10.207 46.115.18.50 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:47:48 -0400 Frame 18959: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 46.115.18.50 (46.115.18.50) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 14216 (14216), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18960 236.017443 46.115.18.50 192.168.10.207 TCP 60 14216 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 18960: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 46.115.18.50 (46.115.18.50), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 14216 (14216), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 18961 236.057261 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18961: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34238, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18962 236.057745 188.161.220.86 192.168.10.207 SMTP 71 C: EHLO khcdqy.com Frame 18962: 71 bytes on wire (568 bits), 71 bytes captured (568 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45100 (45100), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 17 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18963 236.057956 192.168.10.207 188.161.220.86 SMTP 245 S: 250-mail.mydomain.com Hello [188.161.220.86] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 18963: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45100 (45100), Seq: 122, Ack: 18, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 18964 236.057984 188.161.220.86 192.168.10.207 TCP 60 45100 > smtp [ACK] Seq=18 Ack=313 Win=93128 Len=0 Frame 18964: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45100 (45100), Dst Port: smtp (25), Seq: 18, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 18965 236.058338 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:14 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45100 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 18965: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:14 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45100 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 18966 236.058427 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:14 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45100 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 18966: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:14 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45100 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 18967 236.058535 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:48:14 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45100 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 18967: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:14 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45100 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 18968 236.058671 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:48:14 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45100 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 18968: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:14 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45100 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 18969 236.058794 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:14 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45100 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 18969: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:14 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45100 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 18970 236.058921 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:14 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45100 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 18970: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:14 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45100 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 18971 236.066928 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18971: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34265, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18972 236.066953 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=34292 Win=64698 Len=0 Frame 18972: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 34292, Len: 0 No. Time Source Destination Protocol Length Info 18973 236.085048 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18973: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34292, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18974 236.092760 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18974: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34319, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18975 236.092782 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=34346 Win=64644 Len=0 Frame 18975: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 34346, Len: 0 No. Time Source Destination Protocol Length Info 18976 236.101520 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18976: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34346, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18977 236.110985 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18977: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34373, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18978 236.111009 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=34400 Win=64590 Len=0 Frame 18978: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 34400, Len: 0 No. Time Source Destination Protocol Length Info 18979 236.115779 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18979: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34400, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18980 236.121209 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18980: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34427, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18981 236.121230 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=34454 Win=64536 Len=0 Frame 18981: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 34454, Len: 0 No. Time Source Destination Protocol Length Info 18982 236.141273 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18982: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34454, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18983 236.145315 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18983: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34481, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18984 236.145340 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=34508 Win=64482 Len=0 Frame 18984: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 34508, Len: 0 No. Time Source Destination Protocol Length Info 18985 236.150827 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18985: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34508, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18986 236.158976 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18986: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34535, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18987 236.158998 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=34562 Win=64428 Len=0 Frame 18987: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 34562, Len: 0 No. Time Source Destination Protocol Length Info 18988 236.162969 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18988: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34562, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18989 236.173716 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18989: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34589, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18990 236.173737 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=34616 Win=64374 Len=0 Frame 18990: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 34616, Len: 0 No. Time Source Destination Protocol Length Info 18991 236.181615 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18991: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34616, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18992 236.188380 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18992: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34643, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18993 236.188402 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=34670 Win=64320 Len=0 Frame 18993: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 34670, Len: 0 No. Time Source Destination Protocol Length Info 18994 236.195247 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18994: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34670, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18995 236.208742 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=34697 Win=64293 Len=0 Frame 18995: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 34697, Len: 0 No. Time Source Destination Protocol Length Info 18996 236.211549 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 18996: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34724, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18997 236.211570 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18995#1] rfb > xrl [ACK] Seq=203473 Ack=34697 Win=64293 Len=0 SLE=34724 SRE=34751 Frame 18997: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 34697, Len: 0 No. Time Source Destination Protocol Length Info 18998 236.217021 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 18998: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34751, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 18999 236.217043 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18995#2] rfb > xrl [ACK] Seq=203473 Ack=34697 Win=64293 Len=0 SLE=34724 SRE=34778 Frame 18999: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 34697, Len: 0 No. Time Source Destination Protocol Length Info 19000 236.227208 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19000: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34778, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19001 236.227231 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18995#3] rfb > xrl [ACK] Seq=203473 Ack=34697 Win=64293 Len=0 SLE=34724 SRE=34805 Frame 19001: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 34697, Len: 0 No. Time Source Destination Protocol Length Info 19002 236.235150 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19002: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34805, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19003 236.235172 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 18995#4] rfb > xrl [ACK] Seq=203473 Ack=34697 Win=64293 Len=0 SLE=34724 SRE=34832 Frame 19003: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 34697, Len: 0 No. Time Source Destination Protocol Length Info 19004 236.241035 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 19004: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34697, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19005 236.241069 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=34832 Win=65535 Len=0 Frame 19005: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 34832, Len: 0 No. Time Source Destination Protocol Length Info 19006 236.245037 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19006: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34832, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19007 236.254014 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19007: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34859, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19008 236.254036 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=34886 Win=65481 Len=0 Frame 19008: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 34886, Len: 0 No. Time Source Destination Protocol Length Info 19009 236.265200 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19009: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34886, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19010 236.268776 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 19010: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16507, Ack: 1179213, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19011 236.268800 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1179213 Ack=16549 Win=46426 Len=0 Frame 19011: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1179213, Ack: 16549, Len: 0 No. Time Source Destination Protocol Length Info 19012 236.273259 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19012: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34913, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19013 236.273281 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=34940 Win=65427 Len=0 Frame 19013: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 34940, Len: 0 No. Time Source Destination Protocol Length Info 19014 236.277027 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19014: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34940, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19015 236.278315 46.115.18.50 192.168.10.207 SMTP 76 C: HELO flyifyou-737d9b Frame 19015: 76 bytes on wire (608 bits), 76 bytes captured (608 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 46.115.18.50 (46.115.18.50), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 14216 (14216), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 22 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19016 236.278477 192.168.10.207 46.115.18.50 SMTP 101 S: 250 mail.mydomain.com Hello [46.115.18.50] Frame 19016: 101 bytes on wire (808 bits), 101 bytes captured (808 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 46.115.18.50 (46.115.18.50) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 14216 (14216), Seq: 122, Ack: 23, Len: 47 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19017 236.278504 46.115.18.50 192.168.10.207 TCP 60 14216 > smtp [ACK] Seq=23 Ack=169 Win=93272 Len=0 Frame 19017: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 46.115.18.50 (46.115.18.50), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 14216 (14216), Dst Port: smtp (25), Seq: 23, Ack: 169, Len: 0 No. Time Source Destination Protocol Length Info 19018 236.283259 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19018: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34967, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19019 236.283283 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=34994 Win=65373 Len=0 Frame 19019: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 34994, Len: 0 No. Time Source Destination Protocol Length Info 19020 236.285406 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 19020: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9745, Ack: 670413, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19021 236.285429 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=671728 Ack=9787 Win=46720 Len=0 Frame 19021: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 671728, Ack: 9787, Len: 0 No. Time Source Destination Protocol Length Info 19022 236.285465 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=9787 Ack=670413 Win=0 Len=0 Frame 19022: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9787, Ack: 670413, Len: 0 No. Time Source Destination Protocol Length Info 19023 236.298190 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19023: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 34994, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19024 236.303026 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19024: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35021, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19025 236.303048 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=35048 Win=65319 Len=0 Frame 19025: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35048, Len: 0 No. Time Source Destination Protocol Length Info 19026 236.307036 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19026: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35048, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19027 236.308095 192.168.10.203 77.31.116.226 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 19027: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 77.31.116.226 (77.31.116.226) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 19028 236.314973 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19028: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35075, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19029 236.314999 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=35102 Win=65265 Len=0 Frame 19029: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35102, Len: 0 No. Time Source Destination Protocol Length Info 19030 236.331061 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19030: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35102, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19031 236.335087 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19031: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35129, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19032 236.335108 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=35156 Win=65211 Len=0 Frame 19032: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35156, Len: 0 No. Time Source Destination Protocol Length Info 19033 236.342481 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19033: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35156, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19034 236.357370 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 19034: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35210, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19035 236.357394 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=203473 Ack=35183 Win=65184 Len=0 SLE=35210 SRE=35237 Frame 19035: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35183, Len: 0 No. Time Source Destination Protocol Length Info 19036 236.363085 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19036: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35237, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19037 236.363142 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19035#1] rfb > xrl [ACK] Seq=203473 Ack=35183 Win=65184 Len=0 SLE=35210 SRE=35264 Frame 19037: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35183, Len: 0 No. Time Source Destination Protocol Length Info 19038 236.372579 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19038: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35264, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19039 236.372597 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19035#2] rfb > xrl [ACK] Seq=203473 Ack=35183 Win=65184 Len=0 SLE=35210 SRE=35291 Frame 19039: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35183, Len: 0 No. Time Source Destination Protocol Length Info 19040 236.382984 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19040: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35291, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19041 236.383007 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19035#3] rfb > xrl [ACK] Seq=203473 Ack=35183 Win=65184 Len=0 SLE=35210 SRE=35318 Frame 19041: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35183, Len: 0 No. Time Source Destination Protocol Length Info 19042 236.395878 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 19042: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35345, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19043 236.395896 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 19035#4] rfb > xrl [ACK] Seq=203473 Ack=35183 Win=65184 Len=0 SLE=35345 SRE=35372 SLE=35210 SRE=35318 Frame 19043: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35183, Len: 0 No. Time Source Destination Protocol Length Info 19044 236.408529 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 19044: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35183, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19045 236.408552 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=203473 Ack=35318 Win=65049 Len=0 SLE=35345 SRE=35372 Frame 19045: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35318, Len: 0 No. Time Source Destination Protocol Length Info 19046 236.426241 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19046: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35372, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19047 236.426264 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19045#1] rfb > xrl [ACK] Seq=203473 Ack=35318 Win=65049 Len=0 SLE=35345 SRE=35399 Frame 19047: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35318, Len: 0 No. Time Source Destination Protocol Length Info 19048 236.432839 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 19048: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35426, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19049 236.432858 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 19045#2] rfb > xrl [ACK] Seq=203473 Ack=35318 Win=65049 Len=0 SLE=35426 SRE=35453 SLE=35345 SRE=35399 Frame 19049: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35318, Len: 0 No. Time Source Destination Protocol Length Info 19050 236.432916 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19050: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35453, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19051 236.432943 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 19045#3] rfb > xrl [ACK] Seq=203473 Ack=35318 Win=65049 Len=0 SLE=35426 SRE=35480 SLE=35345 SRE=35399 Frame 19051: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35318, Len: 0 No. Time Source Destination Protocol Length Info 19052 236.443229 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19052: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35480, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19053 236.443246 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 19045#4] rfb > xrl [ACK] Seq=203473 Ack=35318 Win=65049 Len=0 SLE=35426 SRE=35507 SLE=35345 SRE=35399 Frame 19053: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35318, Len: 0 No. Time Source Destination Protocol Length Info 19054 236.447059 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19054: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35507, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19055 236.447077 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 19045#5] rfb > xrl [ACK] Seq=203473 Ack=35318 Win=65049 Len=0 SLE=35426 SRE=35534 SLE=35345 SRE=35399 Frame 19055: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35318, Len: 0 No. Time Source Destination Protocol Length Info 19056 236.453267 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 19056: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19057 236.453286 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 19057: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19058 236.467080 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 19058: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35318, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19059 236.467100 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=203473 Ack=35399 Win=64968 Len=0 SLE=35426 SRE=35534 Frame 19059: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35399, Len: 0 No. Time Source Destination Protocol Length Info 19060 236.472196 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 19060: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35399, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19061 236.472215 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=35534 Win=64833 Len=0 Frame 19061: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35534, Len: 0 No. Time Source Destination Protocol Length Info 19062 236.472514 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19062: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35534, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19063 236.472539 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19063: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35561, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19064 236.472563 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=35588 Win=64779 Len=0 Frame 19064: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35588, Len: 0 No. Time Source Destination Protocol Length Info 19065 236.494972 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19065: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35588, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19066 236.501101 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19066: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35615, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19067 236.501135 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=35642 Win=64725 Len=0 Frame 19067: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35642, Len: 0 No. Time Source Destination Protocol Length Info 19068 236.505317 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19068: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35642, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19069 236.517027 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19069: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35669, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19070 236.517049 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=35696 Win=64671 Len=0 Frame 19070: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35696, Len: 0 No. Time Source Destination Protocol Length Info 19071 236.523073 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19071: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35696, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19072 236.532499 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19072: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35723, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19073 236.532519 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=35750 Win=64617 Len=0 Frame 19073: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35750, Len: 0 No. Time Source Destination Protocol Length Info 19074 236.549041 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19074: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35750, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19075 236.553048 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19075: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35777, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19076 236.553065 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=35804 Win=64563 Len=0 Frame 19076: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35804, Len: 0 No. Time Source Destination Protocol Length Info 19077 236.558003 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19077: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35804, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19078 236.558412 46.115.18.50 192.168.10.207 SMTP 96 C: MAIL FROM: <uqksensible@xxxxxxxxxxxx> Frame 19078: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 46.115.18.50 (46.115.18.50), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 14216 (14216), Dst Port: smtp (25), Seq: 23, Ack: 169, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19079 236.558781 192.168.10.207 46.115.18.50 SMTP 106 S: 250 2.1.0 [email protected] OK Frame 19079: 106 bytes on wire (848 bits), 106 bytes captured (848 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 46.115.18.50 (46.115.18.50) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 14216 (14216), Seq: 169, Ack: 65, Len: 52 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19080 236.558807 46.115.18.50 192.168.10.207 TCP 60 14216 > smtp [ACK] Seq=65 Ack=221 Win=93220 Len=0 Frame 19080: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 46.115.18.50 (46.115.18.50), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 14216 (14216), Dst Port: smtp (25), Seq: 65, Ack: 221, Len: 0 No. Time Source Destination Protocol Length Info 19081 236.561127 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19081: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35831, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19082 236.561144 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=35858 Win=64509 Len=0 Frame 19082: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35858, Len: 0 No. Time Source Destination Protocol Length Info 19083 236.573519 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19083: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35858, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19084 236.577002 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19084: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35885, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19085 236.577019 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=35912 Win=64455 Len=0 Frame 19085: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35912, Len: 0 No. Time Source Destination Protocol Length Info 19086 236.599646 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19086: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35912, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19087 236.603274 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19087: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35939, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19088 236.603332 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=35966 Win=64401 Len=0 Frame 19088: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 35966, Len: 0 No. Time Source Destination Protocol Length Info 19089 236.603356 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19089: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35966, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19090 236.611306 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19090: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 35993, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19091 236.611323 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=36020 Win=64347 Len=0 Frame 19091: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 36020, Len: 0 No. Time Source Destination Protocol Length Info 19092 236.624612 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19092: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36020, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19093 236.629181 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19093: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36047, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19094 236.629198 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=36074 Win=64293 Len=0 Frame 19094: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 36074, Len: 0 No. Time Source Destination Protocol Length Info 19095 236.635252 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19095: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36074, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19096 236.641230 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19096: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36101, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19097 236.641251 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203473 Ack=36128 Win=65535 Len=0 Frame 19097: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 36128, Len: 0 No. Time Source Destination Protocol Length Info 19098 236.646571 192.168.10.185 192.168.10.142 VNC 386 Authentication result Frame 19098: 386 bytes on wire (3088 bits), 386 bytes captured (3088 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203473, Ack: 36128, Len: 332 Virtual Network Computing No. Time Source Destination Protocol Length Info 19099 236.659103 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 19099: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36155, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19100 236.659125 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19098#1] rfb > xrl [ACK] Seq=203805 Ack=36128 Win=65535 Len=0 SLE=36155 SRE=36182 Frame 19100: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203805, Ack: 36128, Len: 0 No. Time Source Destination Protocol Length Info 19101 236.667359 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19101: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36182, Ack: 203473, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19102 236.667382 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19098#2] rfb > xrl [ACK] Seq=203805 Ack=36128 Win=65535 Len=0 SLE=36155 SRE=36209 Frame 19102: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203805, Ack: 36128, Len: 0 No. Time Source Destination Protocol Length Info 19103 236.670992 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 19103: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36209, Ack: 203805, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 19104 236.671012 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19098#3] rfb > xrl [ACK] Seq=203805 Ack=36128 Win=65535 Len=0 SLE=36155 SRE=36241 Frame 19104: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203805, Ack: 36128, Len: 0 No. Time Source Destination Protocol Length Info 19105 236.675078 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19105: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36241, Ack: 203805, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19106 236.675096 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19098#4] rfb > xrl [ACK] Seq=203805 Ack=36128 Win=65535 Len=0 SLE=36155 SRE=36268 Frame 19106: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203805, Ack: 36128, Len: 0 No. Time Source Destination Protocol Length Info 19107 236.687335 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19107: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36268, Ack: 203805, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19108 236.687354 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19098#5] rfb > xrl [ACK] Seq=203805 Ack=36128 Win=65535 Len=0 SLE=36155 SRE=36295 Frame 19108: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203805, Ack: 36128, Len: 0 No. Time Source Destination Protocol Length Info 19109 236.697280 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 19109: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36128, Ack: 203805, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19110 236.697339 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203805 Ack=36295 Win=65368 Len=0 Frame 19110: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203805, Ack: 36295, Len: 0 No. Time Source Destination Protocol Length Info 19111 236.707631 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19111: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36295, Ack: 203805, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19112 236.708752 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 19112: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19113 236.708772 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 19113: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19114 236.732434 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19114: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36322, Ack: 203805, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19115 236.732454 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203805 Ack=36349 Win=65314 Len=0 Frame 19115: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203805, Ack: 36349, Len: 0 No. Time Source Destination Protocol Length Info 19116 236.745210 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19116: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36349, Ack: 203805, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19117 236.753514 IntelCor_ed:1c:1c Broadcast ARP 60 Who has 192.168.10.221? Tell 192.168.10.225 Frame 19117: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1c:1c (00:13:20:ed:1c:1c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19118 236.753533 IntelCor_ed:1c:1c Broadcast ARP 60 Who has 192.168.10.221? Tell 192.168.10.225 Frame 19118: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1c:1c (00:13:20:ed:1c:1c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19119 236.760189 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19119: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36376, Ack: 203805, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19120 236.760209 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203805 Ack=36403 Win=65260 Len=0 Frame 19120: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203805, Ack: 36403, Len: 0 No. Time Source Destination Protocol Length Info 19121 236.765112 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19121: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36403, Ack: 203805, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19122 236.771406 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19122: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36430, Ack: 203805, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19123 236.771424 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=203805 Ack=36457 Win=65206 Len=0 Frame 19123: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203805, Ack: 36457, Len: 0 No. Time Source Destination Protocol Length Info 19124 236.781639 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19124: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36457, Ack: 203805, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19125 236.787214 192.168.10.185 192.168.10.142 VNC 290 Authentication result Frame 19125: 290 bytes on wire (2320 bits), 290 bytes captured (2320 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 203805, Ack: 36484, Len: 236 Virtual Network Computing No. Time Source Destination Protocol Length Info 19126 236.788455 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19126: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36484, Ack: 203805, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19127 236.796694 192.168.10.1 192.168.10.245 Syslog 309 LOCAL1.INFO: Oct 3 19:48:14 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 46.115.18.50 7x.x.x.3 14216 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="uqksensible@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 19127: 309 bytes on wire (2472 bits), 309 bytes captured (2472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:14 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 46.115.18.50 7x.x.x.3 14216 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" No. Time Source Destination Protocol Length Info 19128 236.800002 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19128: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36511, Ack: 203805, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19129 236.800022 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204041 Ack=36538 Win=65125 Len=0 Frame 19129: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204041, Ack: 36538, Len: 0 No. Time Source Destination Protocol Length Info 19130 236.803035 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19130: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36538, Ack: 203805, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19131 236.823082 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19131: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36565, Ack: 204041, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19132 236.823107 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204041 Ack=36592 Win=65071 Len=0 Frame 19132: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204041, Ack: 36592, Len: 0 No. Time Source Destination Protocol Length Info 19133 236.827974 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 19133: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36592, Ack: 204041, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 19134 236.828205 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19134: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36624, Ack: 204041, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19135 236.828222 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204041 Ack=36651 Win=65012 Len=0 Frame 19135: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204041, Ack: 36651, Len: 0 No. Time Source Destination Protocol Length Info 19136 236.828287 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19136: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36651, Ack: 204041, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19137 236.835787 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19137: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36678, Ack: 204041, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19138 236.835805 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204041 Ack=36705 Win=64958 Len=0 Frame 19138: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204041, Ack: 36705, Len: 0 No. Time Source Destination Protocol Length Info 19139 236.841543 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19139: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36705, Ack: 204041, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19140 236.855166 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19140: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36732, Ack: 204041, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19141 236.855190 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204041 Ack=36759 Win=64904 Len=0 Frame 19141: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204041, Ack: 36759, Len: 0 No. Time Source Destination Protocol Length Info 19142 236.860036 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19142: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36759, Ack: 204041, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19143 236.862244 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1219500288, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 19143: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19144 236.862258 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1219500288, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 19144: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19145 236.862266 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1219500288, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 19145: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19146 236.862306 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1219500288, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 19146: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19147 236.865315 192.168.10.185 192.168.10.142 VNC 386 Authentication result Frame 19147: 386 bytes on wire (3088 bits), 386 bytes captured (3088 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204041, Ack: 36786, Len: 332 Virtual Network Computing No. Time Source Destination Protocol Length Info 19148 236.869087 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19148: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36786, Ack: 204041, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19149 236.877807 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-01.geo.kaspersky.com Frame 19149: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 55043 (55043), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 19150 236.877886 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-01.geo.kaspersky.com Frame 19150: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 55043 (55043), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 19151 236.879225 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19151: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36813, Ack: 204041, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19152 236.879243 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204373 Ack=36840 Win=64823 Len=0 Frame 19152: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 36840, Len: 0 No. Time Source Destination Protocol Length Info 19153 236.880181 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3088580864, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 19153: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19154 236.880192 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3088580864, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 19154: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19155 236.880201 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3088580864, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 19155: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19156 236.880208 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3088580864, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 19156: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19157 236.883250 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19157: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36840, Ack: 204041, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19158 236.892150 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 19158: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36867, Ack: 204373, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 19159 236.892170 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204373 Ack=36899 Win=64764 Len=0 Frame 19159: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 36899, Len: 0 No. Time Source Destination Protocol Length Info 19160 236.913357 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 19160: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16549, Ack: 1179213, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19161 236.913379 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1179213 Ack=16591 Win=46405 Len=0 Frame 19161: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1179213, Ack: 16591, Len: 0 No. Time Source Destination Protocol Length Info 19162 236.913470 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=16591 Ack=1179213 Win=48470 Len=0 Frame 19162: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16591, Ack: 1179213, Len: 0 No. Time Source Destination Protocol Length Info 19163 236.913487 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 19162#1] smtp > 23308 [ACK] Seq=16591 Ack=1179213 Win=48470 Len=0 Frame 19163: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16591, Ack: 1179213, Len: 0 No. Time Source Destination Protocol Length Info 19164 236.913607 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19164: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1179213, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19165 236.913624 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19165: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1180593, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19166 236.913645 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19166: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1181973, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19167 236.913662 206.225.164.186 192.168.10.207 SMTP 78 C: DATA fragment, 24 bytes Frame 19167: 78 bytes on wire (624 bits), 78 bytes captured (624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1183353, Ack: 16591, Len: 24 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19168 236.913679 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19168: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1183377, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19169 236.913696 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19169: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1184757, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19170 236.913712 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19170: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1186137, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19171 236.913731 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19171: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1187517, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19172 236.913748 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19172: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1188897, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19173 236.913765 206.225.164.186 192.168.10.207 SMTP 746 C: DATA fragment, 692 bytes Frame 19173: 746 bytes on wire (5968 bits), 746 bytes captured (5968 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1190277, Ack: 16591, Len: 692 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19174 236.913781 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19174: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1190969, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19175 236.913805 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19175: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1192349, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19176 236.913822 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=16591 Ack=1183377 Win=44306 Len=0 Frame 19176: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16591, Ack: 1183377, Len: 0 No. Time Source Destination Protocol Length Info 19177 236.913839 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=16591 Ack=1190969 Win=36714 Len=0 Frame 19177: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16591, Ack: 1190969, Len: 0 No. Time Source Destination Protocol Length Info 19178 236.913856 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19178: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1193729, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19179 236.913873 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19179: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1195109, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19180 236.913890 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19180: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1196489, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19181 236.913906 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=16591 Ack=1193729 Win=33954 Len=0 Frame 19181: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16591, Ack: 1193729, Len: 0 No. Time Source Destination Protocol Length Info 19182 236.913924 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19182: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1197869, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19183 236.913941 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19183: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1199249, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19184 236.913958 206.225.164.186 192.168.10.207 SMTP 1023 C: DATA fragment, 969 bytes Frame 19184: 1023 bytes on wire (8184 bits), 1023 bytes captured (8184 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1200629, Ack: 16591, Len: 969 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19185 236.913975 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19185: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1201598, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19186 236.913994 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19186: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1202978, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19187 236.914011 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=16591 Ack=1196489 Win=31194 Len=0 Frame 19187: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16591, Ack: 1196489, Len: 0 No. Time Source Destination Protocol Length Info 19188 236.914027 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19188: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1204358, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19189 236.914044 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19189: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1205738, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19190 236.914061 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19190: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1207118, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19191 236.914077 206.225.164.186 192.168.10.207 SMTP 213 C: DATA fragment, 159 bytes Frame 19191: 213 bytes on wire (1704 bits), 213 bytes captured (1704 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1208498, Ack: 16591, Len: 159 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19192 236.914095 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19192: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1208657, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19193 236.914112 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19193: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1210037, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19194 236.914144 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=16591 Ack=1201598 Win=26085 Len=0 Frame 19194: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16591, Ack: 1201598, Len: 0 No. Time Source Destination Protocol Length Info 19195 236.914277 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19195: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1211417, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19196 236.914294 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19196: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1212797, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19197 236.914313 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19197: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1214177, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19198 236.914329 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=16591 Ack=1211417 Win=16266 Len=0 Frame 19198: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16591, Ack: 1211417, Len: 0 No. Time Source Destination Protocol Length Info 19199 236.914346 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19199: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1215557, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19200 236.914365 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19200: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1216937, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19201 236.914381 206.225.164.186 192.168.10.207 SMTP 611 C: DATA fragment, 557 bytes Frame 19201: 611 bytes on wire (4888 bits), 611 bytes captured (4888 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1218317, Ack: 16591, Len: 557 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19202 236.914397 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=16591 Ack=1215557 Win=12126 Len=0 Frame 19202: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16591, Ack: 1215557, Len: 0 No. Time Source Destination Protocol Length Info 19203 236.914414 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19203: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1218874, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19204 236.914431 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19204: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1220254, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19205 236.914450 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19205: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1221634, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19206 236.914466 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19206: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1223014, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19207 236.914483 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19207: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1224394, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19208 236.914500 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 19208: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1225774, Ack: 16591, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19209 236.914518 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=16591 Ack=1221634 Win=6049 Len=0 Frame 19209: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16591, Ack: 1221634, Len: 0 No. Time Source Destination Protocol Length Info 19210 236.914581 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=16591 Ack=1227154 Win=529 Len=0 Frame 19210: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16591, Ack: 1227154, Len: 0 No. Time Source Destination Protocol Length Info 19211 236.977117 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19211: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36899, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19212 236.981734 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19212: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36926, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19213 236.981768 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204373 Ack=36953 Win=64710 Len=0 Frame 19213: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 36953, Len: 0 No. Time Source Destination Protocol Length Info 19214 236.995286 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19214: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36953, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19215 236.999085 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19215: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 36980, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19216 236.999104 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204373 Ack=37007 Win=64656 Len=0 Frame 19216: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 37007, Len: 0 No. Time Source Destination Protocol Length Info 19217 237.004129 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19217: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37007, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19218 237.017837 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19218: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37034, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19219 237.017858 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204373 Ack=37061 Win=64602 Len=0 Frame 19219: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 37061, Len: 0 No. Time Source Destination Protocol Length Info 19220 237.018222 46.115.18.50 192.168.10.207 TCP 60 14216 > smtp [FIN, ACK] Seq=65 Ack=221 Win=93220 Len=0 Frame 19220: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 46.115.18.50 (46.115.18.50), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 14216 (14216), Dst Port: smtp (25), Seq: 65, Ack: 221, Len: 0 No. Time Source Destination Protocol Length Info 19221 237.018269 192.168.10.207 46.115.18.50 TCP 60 smtp > 14216 [ACK] Seq=221 Ack=66 Win=65471 Len=0 Frame 19221: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 46.115.18.50 (46.115.18.50) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 14216 (14216), Seq: 221, Ack: 66, Len: 0 No. Time Source Destination Protocol Length Info 19222 237.018431 192.168.10.207 46.115.18.50 TCP 60 smtp > 14216 [FIN, ACK] Seq=221 Ack=66 Win=65471 Len=0 Frame 19222: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 46.115.18.50 (46.115.18.50) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 14216 (14216), Seq: 221, Ack: 66, Len: 0 No. Time Source Destination Protocol Length Info 19223 237.018452 46.115.18.50 192.168.10.207 TCP 60 14216 > smtp [ACK] Seq=66 Ack=222 Win=93220 Len=0 Frame 19223: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 46.115.18.50 (46.115.18.50), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 14216 (14216), Dst Port: smtp (25), Seq: 66, Ack: 222, Len: 0 No. Time Source Destination Protocol Length Info 19224 237.018687 192.168.10.1 192.168.10.245 Syslog 201 LOCAL1.INFO: Oct 3 19:48:15 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 46.115.18.50 7x.x.x.3 14216 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 19224: 201 bytes on wire (1608 bits), 201 bytes captured (1608 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:15 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 46.115.18.50 7x.x.x.3 14216 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 19225 237.049217 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19225: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37061, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19226 237.069863 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19226: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37088, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19227 237.069884 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204373 Ack=37115 Win=64548 Len=0 Frame 19227: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 37115, Len: 0 No. Time Source Destination Protocol Length Info 19228 237.074443 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19228: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37115, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19229 237.081543 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19229: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37142, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19230 237.081563 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204373 Ack=37169 Win=64494 Len=0 Frame 19230: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 37169, Len: 0 No. Time Source Destination Protocol Length Info 19231 237.089155 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19231: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37169, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19232 237.121268 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 19232: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37250, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19233 237.121289 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=204373 Ack=37196 Win=64467 Len=0 SLE=37250 SRE=37277 Frame 19233: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 37196, Len: 0 No. Time Source Destination Protocol Length Info 19234 237.125204 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19234: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37277, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19235 237.125222 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19233#1] rfb > xrl [ACK] Seq=204373 Ack=37196 Win=64467 Len=0 SLE=37250 SRE=37304 Frame 19235: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 37196, Len: 0 No. Time Source Destination Protocol Length Info 19236 237.137356 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 19236: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37331, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19237 237.137401 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 19233#2] rfb > xrl [ACK] Seq=204373 Ack=37196 Win=64467 Len=0 SLE=37331 SRE=37358 SLE=37250 SRE=37304 Frame 19237: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 37196, Len: 0 No. Time Source Destination Protocol Length Info 19238 237.145012 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19238: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37358, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19239 237.145031 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 19233#3] rfb > xrl [ACK] Seq=204373 Ack=37196 Win=64467 Len=0 SLE=37331 SRE=37385 SLE=37250 SRE=37304 Frame 19239: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 37196, Len: 0 No. Time Source Destination Protocol Length Info 19240 237.153581 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19240: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37385, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19241 237.153601 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 19233#4] rfb > xrl [ACK] Seq=204373 Ack=37196 Win=64467 Len=0 SLE=37331 SRE=37412 SLE=37250 SRE=37304 Frame 19241: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 37196, Len: 0 No. Time Source Destination Protocol Length Info 19242 237.161209 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 19242: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37196, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19243 237.161404 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 19243: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37304, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19244 237.161421 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=204373 Ack=37223 Win=64440 Len=0 SLE=37250 SRE=37331 Frame 19244: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 37223, Len: 0 No. Time Source Destination Protocol Length Info 19245 237.161459 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19245: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37412, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19246 237.161484 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19244#1] rfb > xrl [ACK] Seq=204373 Ack=37223 Win=64440 Len=0 SLE=37331 SRE=37439 Frame 19246: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 37223, Len: 0 No. Time Source Destination Protocol Length Info 19247 237.173141 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19247: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37439, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19248 237.173160 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19244#2] rfb > xrl [ACK] Seq=204373 Ack=37223 Win=64440 Len=0 SLE=37331 SRE=37466 Frame 19248: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 37223, Len: 0 No. Time Source Destination Protocol Length Info 19249 237.187413 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19249: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37466, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19250 237.187435 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19244#3] rfb > xrl [ACK] Seq=204373 Ack=37223 Win=64440 Len=0 SLE=37331 SRE=37493 Frame 19250: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 37223, Len: 0 No. Time Source Destination Protocol Length Info 19251 237.191102 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19251: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37493, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19252 237.191120 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19244#4] rfb > xrl [ACK] Seq=204373 Ack=37223 Win=64440 Len=0 SLE=37331 SRE=37520 Frame 19252: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 37223, Len: 0 No. Time Source Destination Protocol Length Info 19253 237.194177 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 19253: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 19254 237.195027 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19254: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37520, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19255 237.195052 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19244#5] rfb > xrl [ACK] Seq=204373 Ack=37223 Win=64440 Len=0 SLE=37331 SRE=37547 Frame 19255: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 37223, Len: 0 No. Time Source Destination Protocol Length Info 19256 237.204369 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 19256: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37223, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19257 237.204388 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204373 Ack=37547 Win=65535 Len=0 Frame 19257: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 37547, Len: 0 No. Time Source Destination Protocol Length Info 19258 237.209745 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19258: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37547, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19259 237.213121 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19259: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37574, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19260 237.213140 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204373 Ack=37601 Win=65481 Len=0 Frame 19260: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 37601, Len: 0 No. Time Source Destination Protocol Length Info 19261 237.218868 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19261: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37601, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19262 237.227295 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19262: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37628, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19263 237.227313 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204373 Ack=37655 Win=65427 Len=0 Frame 19263: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 37655, Len: 0 No. Time Source Destination Protocol Length Info 19264 237.237184 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19264: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37655, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19265 237.241312 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19265: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37682, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19266 237.241330 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204373 Ack=37709 Win=65373 Len=0 Frame 19266: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 37709, Len: 0 No. Time Source Destination Protocol Length Info 19267 237.253280 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19267: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37709, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19268 237.262076 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19268: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37736, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19269 237.262098 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204373 Ack=37763 Win=65319 Len=0 Frame 19269: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 37763, Len: 0 No. Time Source Destination Protocol Length Info 19270 237.282105 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19270: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37763, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19271 237.287322 192.168.10.185 192.168.10.142 VNC 290 Authentication result Frame 19271: 290 bytes on wire (2320 bits), 290 bytes captured (2320 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204373, Ack: 37790, Len: 236 Virtual Network Computing No. Time Source Destination Protocol Length Info 19272 237.297606 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19272: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37790, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19273 237.302481 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204609 Ack=37817 Win=65265 Len=0 Frame 19273: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204609, Ack: 37817, Len: 0 No. Time Source Destination Protocol Length Info 19274 237.309177 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19274: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37817, Ack: 204373, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19275 237.313139 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 19275: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37844, Ack: 204609, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 19276 237.313161 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204609 Ack=37876 Win=65206 Len=0 Frame 19276: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204609, Ack: 37876, Len: 0 No. Time Source Destination Protocol Length Info 19277 237.313228 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19277: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37876, Ack: 204609, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19278 237.315639 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 19278: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 19279 237.323188 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19279: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37903, Ack: 204609, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19280 237.323210 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204609 Ack=37930 Win=65152 Len=0 Frame 19280: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204609, Ack: 37930, Len: 0 No. Time Source Destination Protocol Length Info 19281 237.337140 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19281: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37930, Ack: 204609, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19282 237.337854 192.168.10.185 192.168.10.142 VNC 386 Authentication result Frame 19282: 386 bytes on wire (3088 bits), 386 bytes captured (3088 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204609, Ack: 37957, Len: 332 Virtual Network Computing No. Time Source Destination Protocol Length Info 19283 237.347123 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 19283: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37984, Ack: 204609, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19284 237.347142 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19282#1] rfb > xrl [ACK] Seq=204941 Ack=37957 Win=65125 Len=0 SLE=37984 SRE=38011 Frame 19284: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204941, Ack: 37957, Len: 0 No. Time Source Destination Protocol Length Info 19285 237.362283 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 19285: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 19286 237.362302 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 19286: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 19287 237.362865 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19287: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38011, Ack: 204609, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19288 237.362882 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19282#2] rfb > xrl [ACK] Seq=204941 Ack=37957 Win=65125 Len=0 SLE=37984 SRE=38038 Frame 19288: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204941, Ack: 37957, Len: 0 No. Time Source Destination Protocol Length Info 19289 237.367700 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 19289: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38038, Ack: 204941, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 19290 237.367721 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19282#3] rfb > xrl [ACK] Seq=204941 Ack=37957 Win=65125 Len=0 SLE=37984 SRE=38070 Frame 19290: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204941, Ack: 37957, Len: 0 No. Time Source Destination Protocol Length Info 19291 237.367826 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19291: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38070, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19292 237.367843 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19282#4] rfb > xrl [ACK] Seq=204941 Ack=37957 Win=65125 Len=0 SLE=37984 SRE=38097 Frame 19292: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204941, Ack: 37957, Len: 0 No. Time Source Destination Protocol Length Info 19293 237.371553 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19293: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38097, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19294 237.371571 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19282#5] rfb > xrl [ACK] Seq=204941 Ack=37957 Win=65125 Len=0 SLE=37984 SRE=38124 Frame 19294: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204941, Ack: 37957, Len: 0 No. Time Source Destination Protocol Length Info 19295 237.381523 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19295: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38124, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19296 237.381542 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19282#6] rfb > xrl [ACK] Seq=204941 Ack=37957 Win=65125 Len=0 SLE=37984 SRE=38151 Frame 19296: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204941, Ack: 37957, Len: 0 No. Time Source Destination Protocol Length Info 19297 237.391759 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 19297: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 37957, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19298 237.391779 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204941 Ack=38151 Win=64931 Len=0 Frame 19298: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204941, Ack: 38151, Len: 0 No. Time Source Destination Protocol Length Info 19299 237.395280 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 19299: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38178, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19300 237.395298 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19298#1] rfb > xrl [ACK] Seq=204941 Ack=38151 Win=64931 Len=0 SLE=38178 SRE=38205 Frame 19300: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204941, Ack: 38151, Len: 0 No. Time Source Destination Protocol Length Info 19301 237.403202 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19301: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38205, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19302 237.403228 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19298#2] rfb > xrl [ACK] Seq=204941 Ack=38151 Win=64931 Len=0 SLE=38178 SRE=38232 Frame 19302: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204941, Ack: 38151, Len: 0 No. Time Source Destination Protocol Length Info 19303 237.415121 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19303: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38232, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19304 237.415141 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19298#3] rfb > xrl [ACK] Seq=204941 Ack=38151 Win=64931 Len=0 SLE=38178 SRE=38259 Frame 19304: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204941, Ack: 38151, Len: 0 No. Time Source Destination Protocol Length Info 19305 237.419297 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19305: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38259, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19306 237.419315 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19298#4] rfb > xrl [ACK] Seq=204941 Ack=38151 Win=64931 Len=0 SLE=38178 SRE=38286 Frame 19306: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204941, Ack: 38151, Len: 0 No. Time Source Destination Protocol Length Info 19307 237.427207 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 19307: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38151, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19308 237.427226 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204941 Ack=38286 Win=64796 Len=0 Frame 19308: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204941, Ack: 38286, Len: 0 No. Time Source Destination Protocol Length Info 19309 237.432924 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19309: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38286, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19310 237.438383 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19310: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38313, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19311 237.438402 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204941 Ack=38340 Win=64742 Len=0 Frame 19311: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204941, Ack: 38340, Len: 0 No. Time Source Destination Protocol Length Info 19312 237.443847 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 19312: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 19313 237.451383 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19313: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38340, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19314 237.460109 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19314: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38367, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19315 237.460128 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204941 Ack=38394 Win=64688 Len=0 Frame 19315: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204941, Ack: 38394, Len: 0 No. Time Source Destination Protocol Length Info 19316 237.478689 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19316: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38394, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19317 237.491213 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19317: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38421, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19318 237.491231 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204941 Ack=38448 Win=64634 Len=0 Frame 19318: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204941, Ack: 38448, Len: 0 No. Time Source Destination Protocol Length Info 19319 237.515316 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19319: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38448, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19320 237.529344 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19320: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38475, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19321 237.529364 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204941 Ack=38502 Win=64580 Len=0 Frame 19321: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204941, Ack: 38502, Len: 0 No. Time Source Destination Protocol Length Info 19322 237.545456 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 19322: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16591, Ack: 1227154, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19323 237.545524 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1227154 Ack=16633 Win=46384 Len=0 Frame 19323: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1227154, Ack: 16633, Len: 0 No. Time Source Destination Protocol Length Info 19324 237.566254 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 19324: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 19325 237.587599 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19325: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38502, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19326 237.595444 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19326: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38529, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19327 237.595465 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204941 Ack=38556 Win=64526 Len=0 Frame 19327: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204941, Ack: 38556, Len: 0 No. Time Source Destination Protocol Length Info 19328 237.605516 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19328: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38556, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19329 237.605681 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19329: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38583, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19330 237.605699 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204941 Ack=38610 Win=64472 Len=0 Frame 19330: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204941, Ack: 38610, Len: 0 No. Time Source Destination Protocol Length Info 19331 237.605723 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19331: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38610, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19332 237.611873 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19332: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38637, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19333 237.611890 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204941 Ack=38664 Win=64418 Len=0 Frame 19333: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204941, Ack: 38664, Len: 0 No. Time Source Destination Protocol Length Info 19334 237.638016 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19334: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38664, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19335 237.808046 192.168.10.203 77.31.116.226 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 19335: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 77.31.116.226 (77.31.116.226) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 19336 237.836951 188.161.220.86 192.168.10.207 SMTP 97 C: MAIL FROM: <alexis.garrison@xxxxxxxxxxxx> Frame 19336: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45100 (45100), Dst Port: smtp (25), Seq: 18, Ack: 313, Len: 43 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19337 237.837148 192.168.10.207 188.161.220.86 SMTP 107 S: 250 2.1.0 [email protected] OK Frame 19337: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45100 (45100), Seq: 313, Ack: 61, Len: 53 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19338 237.837175 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19338: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38691, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19339 237.837198 188.161.220.86 192.168.10.207 TCP 60 45100 > smtp [ACK] Seq=61 Ack=366 Win=93074 Len=0 Frame 19339: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45100 (45100), Dst Port: smtp (25), Seq: 61, Ack: 366, Len: 0 No. Time Source Destination Protocol Length Info 19340 237.837215 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=204941 Ack=38718 Win=64364 Len=0 Frame 19340: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204941, Ack: 38718, Len: 0 No. Time Source Destination Protocol Length Info 19341 237.877850 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1236277504, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 19341: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19342 237.877867 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1236277504, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 19342: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19343 237.877875 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1236277504, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 19343: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19344 237.877882 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1236277504, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 19344: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19345 237.879812 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 19345: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 19346 237.879827 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 19346: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 19347 237.895780 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3105358080, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 19347: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19348 237.895795 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3105358080, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 19348: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19349 237.895802 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3105358080, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 19349: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19350 237.895811 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3105358080, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 19350: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19351 237.900641 192.168.10.185 192.168.10.142 VNC 385 Authentication result Frame 19351: 385 bytes on wire (3080 bits), 385 bytes captured (3080 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 204941, Ack: 38718, Len: 331 Virtual Network Computing No. Time Source Destination Protocol Length Info 19352 237.923486 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19352: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38718, Ack: 204941, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19353 237.927434 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 19353: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38745, Ack: 205272, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 19354 237.927455 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=205272 Ack=38777 Win=64305 Len=0 Frame 19354: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 205272, Ack: 38777, Len: 0 No. Time Source Destination Protocol Length Info 19355 237.961235 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19355: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38777, Ack: 205272, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19356 237.977382 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19356: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38804, Ack: 205272, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19357 237.977407 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=205272 Ack=38831 Win=65535 Len=0 Frame 19357: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 205272, Ack: 38831, Len: 0 No. Time Source Destination Protocol Length Info 19358 237.995262 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19358: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38831, Ack: 205272, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19359 238.013013 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19359: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38858, Ack: 205272, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19360 238.013046 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=205272 Ack=38885 Win=65481 Len=0 Frame 19360: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 205272, Ack: 38885, Len: 0 No. Time Source Destination Protocol Length Info 19361 238.013273 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19361: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 205272, Ack: 38885, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19362 238.013293 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19362: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 206532, Ack: 38885, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19363 238.013310 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19363: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 207792, Ack: 38885, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19364 238.013327 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 19364: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 209052, Ack: 38885, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 19365 238.013345 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19365: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 209368, Ack: 38885, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19366 238.013362 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19366: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 210628, Ack: 38885, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19367 238.013378 192.168.10.185 192.168.10.142 VNC 60 Authentication result[Malformed Packet] Frame 19367: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 211888, Ack: 38885, Len: 2 Virtual Network Computing [Malformed Packet: VNC] No. Time Source Destination Protocol Length Info 19368 238.017233 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19368: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38885, Ack: 205272, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19369 238.017386 192.168.10.185 192.168.10.142 VNC 1222 Authentication result Frame 19369: 1222 bytes on wire (9776 bits), 1222 bytes captured (9776 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 211890, Ack: 38912, Len: 1168 Virtual Network Computing No. Time Source Destination Protocol Length Info 19370 238.021415 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19370: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38912, Ack: 205272, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19371 238.035986 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19371: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38939, Ack: 205272, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19372 238.036007 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=213058 Ack=38966 Win=65400 Len=0 Frame 19372: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 213058, Ack: 38966, Len: 0 No. Time Source Destination Protocol Length Info 19373 238.039294 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19373: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38966, Ack: 205272, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19374 238.043231 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=38993 Ack=207792 Win=64240 Len=0 Frame 19374: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38993, Ack: 207792, Len: 0 No. Time Source Destination Protocol Length Info 19375 238.043396 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=38993 Ack=209052 Win=64240 Len=0 Frame 19375: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38993, Ack: 209052, Len: 0 No. Time Source Destination Protocol Length Info 19376 238.043453 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19376: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 38993, Ack: 209052, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19377 238.043489 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=213058 Ack=39020 Win=65346 Len=0 Frame 19377: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 213058, Ack: 39020, Len: 0 No. Time Source Destination Protocol Length Info 19378 238.051539 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=39020 Ack=210628 Win=64240 Len=0 Frame 19378: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39020, Ack: 210628, Len: 0 No. Time Source Destination Protocol Length Info 19379 238.051630 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=39020 Ack=211890 Win=64240 Len=0 Frame 19379: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39020, Ack: 211890, Len: 0 No. Time Source Destination Protocol Length Info 19380 238.051746 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 19380: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39020, Ack: 213058, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 19381 238.055456 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19381: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39052, Ack: 213058, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19382 238.055480 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=213058 Ack=39079 Win=65287 Len=0 Frame 19382: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 213058, Ack: 39079, Len: 0 No. Time Source Destination Protocol Length Info 19383 238.061051 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19383: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 213058, Ack: 39079, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19384 238.061074 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19384: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 214318, Ack: 39079, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19385 238.061096 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19385: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 215578, Ack: 39079, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19386 238.061113 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 19386: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 216838, Ack: 39079, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 19387 238.061130 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19387: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 217154, Ack: 39079, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19388 238.061147 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19388: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 218414, Ack: 39079, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19389 238.061165 192.168.10.185 192.168.10.142 VNC 60 Authentication result[Malformed Packet] Frame 19389: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 219674, Ack: 39079, Len: 1 Virtual Network Computing [Malformed Packet: VNC] No. Time Source Destination Protocol Length Info 19390 238.062146 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19390: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39079, Ack: 213058, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19391 238.062246 192.168.10.185 192.168.10.142 VNC 733 Authentication result Frame 19391: 733 bytes on wire (5864 bits), 733 bytes captured (5864 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 219675, Ack: 39106, Len: 679 Virtual Network Computing No. Time Source Destination Protocol Length Info 19392 238.075340 190.64.179.242 192.168.10.207 TCP 62 44375 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 19392: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.64.179.242 (190.64.179.242), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 44375 (44375), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 19393 238.075380 192.168.10.207 190.64.179.242 TCP 62 smtp > 44375 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 19393: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.64.179.242 (190.64.179.242) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 44375 (44375), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 19394 238.079422 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 19394: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39133, Ack: 213058, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19395 238.079484 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19391#1] rfb > xrl [ACK] Seq=220354 Ack=39106 Win=65260 Len=0 SLE=39133 SRE=39160 Frame 19395: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 220354, Ack: 39106, Len: 0 No. Time Source Destination Protocol Length Info 19396 238.089610 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19396: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39160, Ack: 213058, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19397 238.089634 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19391#2] rfb > xrl [ACK] Seq=220354 Ack=39106 Win=65260 Len=0 SLE=39133 SRE=39187 Frame 19397: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 220354, Ack: 39106, Len: 0 No. Time Source Destination Protocol Length Info 19398 238.093808 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=39187 Ack=215578 Win=64240 Len=0 Frame 19398: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39187, Ack: 215578, Len: 0 No. Time Source Destination Protocol Length Info 19399 238.094036 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=39187 Ack=216838 Win=64240 Len=0 Frame 19399: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39187, Ack: 216838, Len: 0 No. Time Source Destination Protocol Length Info 19400 238.094059 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=39187 Ack=218414 Win=64240 Len=0 Frame 19400: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39187, Ack: 218414, Len: 0 No. Time Source Destination Protocol Length Info 19401 238.094219 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=39187 Ack=219675 Win=64240 Len=0 Frame 19401: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39187, Ack: 219675, Len: 0 No. Time Source Destination Protocol Length Info 19402 238.094279 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19402: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39187, Ack: 220354, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19403 238.094297 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19391#3] rfb > xrl [ACK] Seq=220354 Ack=39106 Win=65260 Len=0 SLE=39133 SRE=39214 Frame 19403: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 220354, Ack: 39106, Len: 0 No. Time Source Destination Protocol Length Info 19404 238.101236 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 19404: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39214, Ack: 220354, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 19405 238.101256 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19391#4] rfb > xrl [ACK] Seq=220354 Ack=39106 Win=65260 Len=0 SLE=39133 SRE=39246 Frame 19405: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 220354, Ack: 39106, Len: 0 No. Time Source Destination Protocol Length Info 19406 238.101534 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19406: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39246, Ack: 220354, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19407 238.101551 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19391#5] rfb > xrl [ACK] Seq=220354 Ack=39106 Win=65260 Len=0 SLE=39133 SRE=39273 Frame 19407: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 220354, Ack: 39106, Len: 0 No. Time Source Destination Protocol Length Info 19408 238.105249 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19408: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39273, Ack: 220354, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19409 238.105267 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19391#6] rfb > xrl [ACK] Seq=220354 Ack=39106 Win=65260 Len=0 SLE=39133 SRE=39300 Frame 19409: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 220354, Ack: 39106, Len: 0 No. Time Source Destination Protocol Length Info 19410 238.116527 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 19410: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39106, Ack: 220354, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19411 238.116549 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=220354 Ack=39300 Win=65066 Len=0 Frame 19411: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 220354, Ack: 39300, Len: 0 No. Time Source Destination Protocol Length Info 19412 238.124707 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19412: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39300, Ack: 220354, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19413 238.124868 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19413: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39327, Ack: 220354, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19414 238.124903 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=220354 Ack=39354 Win=65012 Len=0 Frame 19414: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 220354, Ack: 39354, Len: 0 No. Time Source Destination Protocol Length Info 19415 238.129589 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19415: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 220354, Ack: 39354, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19416 238.129613 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19416: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 221614, Ack: 39354, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19417 238.129630 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19417: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 222874, Ack: 39354, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19418 238.129649 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 19418: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 224134, Ack: 39354, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 19419 238.129665 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19419: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 224450, Ack: 39354, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19420 238.129683 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19420: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 225710, Ack: 39354, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19421 238.129703 192.168.10.185 192.168.10.142 VNC 60 Authentication result[Malformed Packet] Frame 19421: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 226970, Ack: 39354, Len: 2 Virtual Network Computing [Malformed Packet: VNC] No. Time Source Destination Protocol Length Info 19422 238.130189 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19422: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 226972, Ack: 39354, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19423 238.130205 192.168.10.185 192.168.10.142 VNC 116 Authentication result Frame 19423: 116 bytes on wire (928 bits), 116 bytes captured (928 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 228232, Ack: 39354, Len: 62 Virtual Network Computing No. Time Source Destination Protocol Length Info 19424 238.133271 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19424: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39354, Ack: 220354, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19425 238.152244 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19425: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39381, Ack: 220354, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19426 238.152264 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=228294 Ack=39408 Win=64958 Len=0 Frame 19426: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 228294, Ack: 39408, Len: 0 No. Time Source Destination Protocol Length Info 19427 238.157382 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19427: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39408, Ack: 221614, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19428 238.169465 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=39435 Ack=224134 Win=64240 Len=0 Frame 19428: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39435, Ack: 224134, Len: 0 No. Time Source Destination Protocol Length Info 19429 238.169679 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=39435 Ack=225710 Win=64240 Len=0 Frame 19429: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39435, Ack: 225710, Len: 0 No. Time Source Destination Protocol Length Info 19430 238.169724 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=39435 Ack=226972 Win=64240 Len=0 Frame 19430: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39435, Ack: 226972, Len: 0 No. Time Source Destination Protocol Length Info 19431 238.169861 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=39435 Ack=228294 Win=64240 Len=0 Frame 19431: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39435, Ack: 228294, Len: 0 No. Time Source Destination Protocol Length Info 19432 238.170013 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 19432: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39435, Ack: 228294, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 19433 238.170030 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=228294 Ack=39467 Win=64899 Len=0 Frame 19433: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 228294, Ack: 39467, Len: 0 No. Time Source Destination Protocol Length Info 19434 238.173221 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19434: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39467, Ack: 228294, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19435 238.173358 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19435: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39494, Ack: 228294, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19436 238.173375 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=228294 Ack=39521 Win=64845 Len=0 Frame 19436: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 228294, Ack: 39521, Len: 0 No. Time Source Destination Protocol Length Info 19437 238.179366 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19437: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 228294, Ack: 39521, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19438 238.179385 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19438: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 229554, Ack: 39521, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19439 238.179403 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19439: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 230814, Ack: 39521, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19440 238.179426 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 19440: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 232074, Ack: 39521, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 19441 238.179445 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19441: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 232390, Ack: 39521, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19442 238.179463 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19442: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 233650, Ack: 39521, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19443 238.179483 192.168.10.185 192.168.10.142 VNC 60 Authentication result[Malformed Packet] Frame 19443: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 234910, Ack: 39521, Len: 2 Virtual Network Computing [Malformed Packet: VNC] No. Time Source Destination Protocol Length Info 19444 238.180969 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19444: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 234912, Ack: 39521, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19445 238.180988 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19445: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 236172, Ack: 39521, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19446 238.181005 192.168.10.185 192.168.10.142 VNC 565 Authentication result Frame 19446: 565 bytes on wire (4520 bits), 565 bytes captured (4520 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 237432, Ack: 39521, Len: 511 Virtual Network Computing No. Time Source Destination Protocol Length Info 19447 238.181892 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19447: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39521, Ack: 228294, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19448 238.185253 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19448: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39548, Ack: 228294, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19449 238.185278 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=237943 Ack=39575 Win=64791 Len=0 Frame 19449: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 237943, Ack: 39575, Len: 0 No. Time Source Destination Protocol Length Info 19450 238.195281 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19450: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39575, Ack: 228294, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19451 238.203752 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 19451: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16633, Ack: 1227154, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19452 238.203773 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1227154 Ack=16675 Win=46363 Len=0 Frame 19452: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1227154, Ack: 16675, Len: 0 No. Time Source Destination Protocol Length Info 19453 238.211300 192.168.10.142 192.168.10.185 TCP 60 [TCP Previous segment lost] xrl > rfb [ACK] Seq=39629 Ack=230814 Win=64240 Len=0 Frame 19453: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39629, Ack: 230814, Len: 0 No. Time Source Destination Protocol Length Info 19454 238.211465 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=39629 Ack=232074 Win=64240 Len=0 Frame 19454: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39629, Ack: 232074, Len: 0 No. Time Source Destination Protocol Length Info 19455 238.211488 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19455: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39629, Ack: 232390, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19456 238.211519 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=237943 Ack=39602 Win=64764 Len=0 SLE=39629 SRE=39656 Frame 19456: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 237943, Ack: 39602, Len: 0 No. Time Source Destination Protocol Length Info 19457 238.211566 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=39656 Ack=234910 Win=64240 Len=0 Frame 19457: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39656, Ack: 234910, Len: 0 No. Time Source Destination Protocol Length Info 19458 238.215733 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=39656 Ack=236172 Win=64240 Len=0 Frame 19458: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39656, Ack: 236172, Len: 0 No. Time Source Destination Protocol Length Info 19459 238.221505 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19459: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39656, Ack: 237943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19460 238.221522 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19456#1] rfb > xrl [ACK] Seq=237943 Ack=39602 Win=64764 Len=0 SLE=39629 SRE=39683 Frame 19460: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 237943, Ack: 39602, Len: 0 No. Time Source Destination Protocol Length Info 19461 238.221893 192.168.10.1 192.168.10.245 Syslog 313 LOCAL1.INFO: Oct 3 19:48:16 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45100 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eywreferendum@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 19461: 313 bytes on wire (2504 bits), 313 bytes captured (2504 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:16 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45100 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 19462 238.229254 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 19462: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39715, Ack: 237943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19463 238.229272 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 19456#2] rfb > xrl [ACK] Seq=237943 Ack=39602 Win=64764 Len=0 SLE=39715 SRE=39742 SLE=39629 SRE=39683 Frame 19463: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 237943, Ack: 39602, Len: 0 No. Time Source Destination Protocol Length Info 19464 238.241375 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19464: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39742, Ack: 237943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19465 238.241393 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 19456#3] rfb > xrl [ACK] Seq=237943 Ack=39602 Win=64764 Len=0 SLE=39715 SRE=39769 SLE=39629 SRE=39683 Frame 19465: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 237943, Ack: 39602, Len: 0 No. Time Source Destination Protocol Length Info 19466 238.253342 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 19466: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39602, Ack: 237943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19467 238.253362 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=237943 Ack=39683 Win=64683 Len=0 SLE=39715 SRE=39769 Frame 19467: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 237943, Ack: 39683, Len: 0 No. Time Source Destination Protocol Length Info 19468 238.253409 192.168.10.142 192.168.10.185 VNC 86 [TCP Retransmission] Authentication result Frame 19468: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39683, Ack: 237943, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 19469 238.253426 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=237943 Ack=39769 Win=64597 Len=0 Frame 19469: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 237943, Ack: 39769, Len: 0 No. Time Source Destination Protocol Length Info 19470 238.261377 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19470: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39769, Ack: 237943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19471 238.266232 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19471: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 237943, Ack: 39796, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19472 238.266252 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19472: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 239203, Ack: 39796, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19473 238.266271 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19473: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 240463, Ack: 39796, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19474 238.266291 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 19474: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 241723, Ack: 39796, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 19475 238.266314 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19475: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 242039, Ack: 39796, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19476 238.266338 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19476: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 243299, Ack: 39796, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19477 238.266356 192.168.10.185 192.168.10.142 VNC 60 Authentication result[Malformed Packet] Frame 19477: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 244559, Ack: 39796, Len: 2 Virtual Network Computing [Malformed Packet: VNC] No. Time Source Destination Protocol Length Info 19478 238.277290 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19478: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39796, Ack: 237943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19479 238.277361 192.168.10.185 192.168.10.142 VNC 1012 Authentication result Frame 19479: 1012 bytes on wire (8096 bits), 1012 bytes captured (8096 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 244561, Ack: 39823, Len: 958 Virtual Network Computing No. Time Source Destination Protocol Length Info 19480 238.282383 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 19480: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19481 238.282405 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 19481: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19482 238.282597 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 19482: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19483 238.282604 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 19483: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19484 238.282612 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 19484: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19485 238.282619 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 19485: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19486 238.282626 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 19486: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19487 238.282632 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 19487: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19488 238.282677 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 19488: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19489 238.282685 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 19489: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19490 238.282692 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 19490: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19491 238.282703 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 19491: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19492 238.282727 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 19492: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19493 238.282733 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 19493: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19494 238.282740 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 19494: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19495 238.282756 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 19495: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19496 238.282763 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 19496: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19497 238.282769 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 19497: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19498 238.282775 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 19498: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19499 238.282782 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 19499: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19500 238.282789 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 19500: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19501 238.282798 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 19501: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19502 238.282805 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 19502: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19503 238.282811 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 19503: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19504 238.282817 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 19504: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19505 238.282824 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 19505: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19506 238.282830 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 19506: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19507 238.282839 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 19507: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19508 238.282849 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 19508: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19509 238.282858 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 19509: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19510 238.282882 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 19510: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19511 238.282891 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 19511: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19512 238.282899 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 19512: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19513 238.282907 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 19513: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19514 238.282915 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 19514: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19515 238.282921 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 19515: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19516 238.282935 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 19516: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19517 238.282941 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 19517: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19518 238.282950 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 19518: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19519 238.282956 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 19519: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19520 238.282963 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 19520: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19521 238.282969 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 19521: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19522 238.282975 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 19522: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19523 238.282982 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 19523: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19524 238.282988 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 19524: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19525 238.282997 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 19525: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19526 238.283063 192.168.10.233 192.168.10.245 Syslog 178 LOCAL4.WARNING: :Oct 03 19:40:03 EDT: %PIX-session-4-405001: Received ARP request collision from 192.168.10.226/0026.b952.f0f3 on interface Inside\n Frame 19526: 178 bytes on wire (1424 bits), 178 bytes captured (1424 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.233 (192.168.10.233), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: :Oct 03 19:40:03 EDT: %PIX-session-4-405001: Received ARP request collision from 192.168.10.226/0026.b952.f0f3 on interface Inside\n No. Time Source Destination Protocol Length Info 19527 238.283073 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 19527: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19528 238.283081 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 19528: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19529 238.283087 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 19529: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19530 238.283148 192.168.10.226 192.168.10.66 ICMP 60 Echo (ping) request id=0x0400, seq=35314/62089, ttl=128 Frame 19530: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.66 (192.168.10.66) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 19531 238.283179 192.168.10.66 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=35314/62089, ttl=128 Frame 19531: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.66 (192.168.10.66), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 19532 238.283186 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 19532: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19533 238.283192 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 19533: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19534 238.283199 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 19534: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19535 238.283205 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 19535: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19536 238.283456 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 19536: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19537 238.283955 192.168.10.226 192.168.10.66 ICMP 60 Echo (ping) request id=0x0400, seq=40434/62109, ttl=128 Frame 19537: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.66 (192.168.10.66) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 19538 238.284027 192.168.10.66 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=40434/62109, ttl=128 Frame 19538: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.66 (192.168.10.66), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 19539 238.284650 192.168.10.226 192.168.10.66 ICMP 60 Echo (ping) request id=0x0400, seq=45554/62129, ttl=128 Frame 19539: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Internet Protocol Version 4, Src: 192.168.10.226 (192.168.10.226), Dst: 192.168.10.66 (192.168.10.66) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 19540 238.284678 192.168.10.66 192.168.10.226 ICMP 60 Echo (ping) reply id=0x0400, seq=45554/62129, ttl=128 Frame 19540: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Internet Protocol Version 4, Src: 192.168.10.66 (192.168.10.66), Dst: 192.168.10.226 (192.168.10.226) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 19541 238.289384 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19541: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39823, Ack: 237943, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19542 238.293199 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=39850 Ack=240463 Win=64240 Len=0 Frame 19542: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39850, Ack: 240463, Len: 0 No. Time Source Destination Protocol Length Info 19543 238.303402 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=39850 Ack=241723 Win=64240 Len=0 Frame 19543: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39850, Ack: 241723, Len: 0 No. Time Source Destination Protocol Length Info 19544 238.303573 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=39850 Ack=243299 Win=64240 Len=0 Frame 19544: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39850, Ack: 243299, Len: 0 No. Time Source Destination Protocol Length Info 19545 238.303626 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19545: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39850, Ack: 243299, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19546 238.303663 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=245519 Ack=39877 Win=64489 Len=0 Frame 19546: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 245519, Ack: 39877, Len: 0 No. Time Source Destination Protocol Length Info 19547 238.305923 190.64.179.242 192.168.10.207 TCP 60 44375 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 19547: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.64.179.242 (190.64.179.242), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 44375 (44375), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 19548 238.306158 192.168.10.207 190.64.179.242 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:47:51 -0400 Frame 19548: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.64.179.242 (190.64.179.242) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 44375 (44375), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19549 238.306553 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=196990 Ack=3035 Win=1002 Len=1448 TSval=594824 TSecr=729719 Frame 19549: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 196990, Ack: 3035, Len: 1448 Data (1448 bytes) 0000 17 03 01 22 30 c2 ca aa fe ec fd fc 04 58 23 58 ..."0........X#X 0010 e4 ca af a4 a6 55 6e c7 59 d3 e0 65 0b a1 5e 50 .....Un.Y..e..^P 0020 74 56 07 56 be e3 9d 6d 16 b1 2e e1 2e c7 af f0 tV.V...m........ 0030 25 e5 5f 6b 24 a7 f1 9b 3d 1e f0 1c 89 94 90 1b %._k$...=....... 0040 05 98 b5 35 95 e1 0d 74 fc f9 3f f7 49 83 f7 9d ...5...t..?.I... 0050 b5 5b dd 51 2e 3d 65 bf 1d 8a 7c 03 3c f4 34 56 .[.Q.=e...|.<.4V 0060 0c 78 cd 4f 27 4a 55 f0 b9 34 4d 95 00 db 6b e0 .x.O'JU..4M...k. 0070 67 ff 03 dd 13 54 ed 03 9e 50 24 ff 5b 5d ea 79 g....T...P$.[].y 0080 4a b1 cb 8c bd f0 27 db 04 28 49 d5 4f 8e 28 3c J.....'..(I.O.(< 0090 b0 cf 44 da 14 dd 4e d2 b4 0f 8c 84 c9 05 05 4f ..D...N........O 00a0 23 96 aa bc 5e e4 33 9c b8 3a 1a 9e 74 e8 c4 8a #...^.3..:..t... 00b0 fd 98 94 12 db 76 49 e0 17 40 3e 52 30 ad 55 68 .....vI..@>R0.Uh 00c0 90 64 64 59 5f c6 37 db 1e 59 3d 2d 63 7a 3f 1d .ddY_.7..Y=-cz?. 00d0 59 7c 17 e9 50 2d 05 20 f8 ba 22 0b a1 82 05 64 Y|..P-. .."....d 00e0 a4 95 4c 1f 87 89 9c bf 84 02 42 ef 60 2b 58 e3 ..L.......B.`+X. 00f0 2d ef b0 8b 2e 83 fe f8 d1 62 32 dc 35 0b 8d c8 -........b2.5... 0100 36 d5 1f 2c 27 cb c0 8a b1 08 fd d6 15 ee 31 f3 6..,'.........1. 0110 04 64 1d 02 06 5d 3b 3c 72 5b b6 c0 d3 7b cf 34 .d...];<r[...{.4 0120 64 9e 6f 55 71 90 32 fe cf b9 65 1f 0d bf 9b 40 d.oUq.2...e....@ 0130 da 7c e9 ff d5 e0 05 26 95 df 0d e6 03 cf f7 a6 .|.....&........ 0140 db d6 6b 64 fe 22 95 eb eb 54 f7 92 3b db 5a 06 ..kd."...T..;.Z. 0150 24 3d b5 11 93 a5 10 a3 55 86 83 c6 d2 11 b0 8b $=......U....... 0160 c9 4a 51 10 a0 65 6b 9a 33 bd 9e f1 36 3e 94 c4 .JQ..ek.3...6>.. 0170 cd 7d 3a 7b 22 4d ea bc 63 c7 eb a8 8c 89 41 9f .}:{"M..c.....A. 0180 98 e5 d8 f3 3c fc 61 47 3d 8a fb 18 10 1c e3 6e ....<.aG=......n 0190 d4 82 1f 79 71 ed 7e e9 7a 22 d1 8e 5c a3 22 37 ...yq.~.z"..\."7 01a0 f8 19 b3 06 37 9c 95 d8 9b 22 c5 b5 44 9d 61 62 ....7...."..D.ab 01b0 f5 8a 61 43 5b 88 03 85 aa d4 17 40 d4 cb 37 2b ..aC[[email protected]+ 01c0 df c5 13 48 ec 47 a6 f1 61 39 0c c8 06 57 49 ca ...H.G..a9...WI. 01d0 8d c3 6e bd 16 81 39 08 6e 7d b8 21 df a2 5a 61 ..n...9.n}.!..Za 01e0 df 26 8d b2 b1 6a 81 13 14 ed 71 d0 3a aa 7b c2 .&...j....q.:.{. 01f0 ae b7 28 c6 72 91 34 0f 29 be 48 af 8e 5c dd f9 ..(.r.4.).H..\.. 0200 73 31 36 ca f6 45 42 95 66 39 04 f2 92 d3 a4 4c s16..EB.f9.....L 0210 50 00 ab 2f bf 71 5b bf 23 9f e4 ce 6e 6e 8c 1c P../.q[.#...nn.. 0220 d6 d5 8e 85 48 9e 5e 90 64 f4 9c c8 f4 30 e9 6a ....H.^.d....0.j 0230 85 d2 a7 7d b7 1f d5 8d 8a 3e b3 c3 ef cc 2c 14 ...}.....>....,. 0240 1a 94 fc 85 04 2f ba 6d 22 2b 69 f1 e4 a5 90 b6 ...../.m"+i..... 0250 d9 ff 96 31 50 c5 4a f9 2e a8 0c 16 cc 78 4e 85 ...1P.J......xN. 0260 36 60 b0 67 a5 29 13 e5 99 e4 aa 1f 0f be 7d 36 6`.g.)........}6 0270 79 9a 16 75 09 ed 72 2e e4 7d b6 f4 c7 b7 76 5e y..u..r..}....v^ 0280 e0 9f 91 18 64 16 b3 31 9f 32 aa 83 94 84 d0 eb ....d..1.2...... 0290 36 db f8 ac 32 8c 31 2a 3e ea 2f 94 95 df 20 54 6...2.1*>./... T 02a0 07 ec 8d 14 b7 e1 35 74 87 13 9a ea a5 67 fe 78 ......5t.....g.x 02b0 01 98 75 ee 3e 73 dd 39 70 2c 56 1a ac af ba 9e ..u.>s.9p,V..... 02c0 c7 5a c8 08 19 ef 1d 3c e1 16 d9 1a 74 71 0e 34 .Z.....<....tq.4 02d0 65 16 33 dd 17 64 7d 1c 36 bd 17 cf 65 2e 85 e6 e.3..d}.6...e... 02e0 10 16 43 1a 51 44 cc 09 69 98 e1 0d 6f c2 ef 72 ..C.QD..i...o..r 02f0 d2 7e 14 ed 07 55 ec 0a fa 02 23 a4 69 f7 eb 60 .~...U....#.i..` 0300 53 f0 08 7c 46 5d a8 76 76 31 64 6a 8b 9f a6 63 S..|F].vv1dj...c 0310 d9 40 e9 03 6d 83 ef d6 de 9e 78 b3 a9 29 4f fb [email protected]..)O. 0320 32 a7 75 34 24 85 86 42 e8 97 42 fa 42 f9 e7 8f 2.u4$..B..B.B... 0330 ae d5 f9 5f bd ba 48 3c b9 84 66 96 df c0 9f ea ..._..H<..f..... 0340 b5 79 78 3d 49 48 85 4b b3 bc 74 21 d3 e8 a1 99 .yx=IH.K..t!.... 0350 86 58 24 0b 2b 48 f1 0f 71 5f e1 75 92 77 8d 57 .X$.+H..q_.u.w.W 0360 6c 7a 11 79 fa 23 b3 14 f3 2d 5e bf 79 02 94 71 lz.y.#...-^.y..q 0370 fc 2c e5 17 b4 29 3c 78 ae 0d 61 a3 a5 b1 c4 95 .,...)<x..a..... 0380 2a ec b7 33 ad a7 7c a0 78 d6 26 6f e1 e6 20 fe *..3..|.x.&o.. . 0390 8e 36 5d c1 47 df d7 0e 70 84 54 e5 6c 96 88 0f .6].G...p.T.l... 03a0 15 08 5f 6e e9 c3 30 14 a6 a0 0f b7 af 81 2f d4 .._n..0......./. 03b0 3a 14 bc df 66 ae 00 cf 63 a7 59 38 8f c6 66 b3 :...f...c.Y8..f. 03c0 7d e3 40 e1 ca 0a d2 a1 4b 18 22 c9 cb a9 60 45 }[email protected]."...`E 03d0 42 54 88 92 23 e4 82 2b 7c a8 8c 31 22 92 6d 16 BT..#..+|..1".m. 03e0 69 c4 9b a0 c5 50 60 38 fe 93 9a e0 66 a4 f7 c7 i....P`8....f... 03f0 a1 11 dd e7 60 7e 79 bb 9f f8 29 c7 ab c3 97 b3 ....`~y...)..... 0400 ce ee dc 69 86 be 26 58 70 7f c5 7d fe 22 24 12 ...i..&Xp..}."$. 0410 dc f5 4b b3 1f 26 88 4f c6 ef 8d a6 d2 26 10 ce ..K..&.O.....&.. 0420 62 c0 43 02 e0 3f 09 1a b0 a8 18 d6 59 a2 0d da b.C..?......Y... 0430 01 90 d9 5b 86 c9 77 9a 0b cf 74 e8 66 b4 20 dd ...[..w...t.f. . 0440 28 6c 28 57 82 87 71 74 b3 a4 cb d3 9b 01 f8 4f (l(W..qt.......O 0450 f0 54 d7 59 94 85 79 3d 0a 36 8e d7 ca 5e 18 b1 .T.Y..y=.6...^.. 0460 30 02 b3 61 a1 d0 1d 89 e8 2d a2 b6 ef 81 e5 6e 0..a.....-.....n 0470 43 fe d3 93 0a e6 b3 d6 a8 fc f5 2a ab 67 17 33 C..........*.g.3 0480 04 f9 0f bd cc 09 fe cd 94 79 5d 05 f8 06 bc 69 .........y]....i 0490 33 31 00 4d c2 c0 94 73 80 88 91 5d 35 ee 0a a2 31.M...s...]5... 04a0 99 b4 48 0c 34 c4 c1 85 5d 33 38 92 5a 29 af 97 ..H.4...]38.Z).. 04b0 21 1d 6e 72 bd 78 c4 3d 7c 4f a5 3e da 7e 02 c5 !.nr.x.=|O.>.~.. 04c0 3c 9c cf bb 81 a8 c2 46 ea e3 44 7f 67 a1 ce 7f <......F..D.g... 04d0 07 7c 87 e9 e6 80 18 37 56 35 f1 44 32 43 cc b5 .|.....7V5.D2C.. 04e0 80 84 d7 94 d8 b0 45 e1 99 cd 22 57 71 9d 00 64 ......E..."Wq..d 04f0 99 ee 92 20 2c 71 8b a7 02 92 26 34 2d c6 28 7c ... ,q....&4-.(| 0500 1d e4 df 1c dd 43 27 f0 76 52 2b d5 be 3c ef 46 .....C'.vR+..<.F 0510 4d 83 3f 82 c4 77 32 0a 3c f5 86 cb 64 38 86 90 M.?..w2.<...d8.. 0520 4f 6e 52 94 50 f6 ea a6 ae eb 06 6a 1b 07 f6 a1 OnR.P......j.... 0530 bd 4d 16 21 b3 7d 43 e2 87 b9 fc 57 ea e7 8e a1 .M.!.}C....W.... 0540 3e f9 73 25 a4 65 73 e3 de fd 36 d5 82 36 77 c2 >.s%.es...6..6w. 0550 7f 3d 33 d6 08 96 ce d0 a5 19 c4 3b ee 4a e0 26 .=3........;.J.& 0560 56 65 dc a2 16 3b b1 81 f0 79 b2 32 5f 67 08 31 Ve...;...y.2_g.1 0570 7f c9 6f e4 fd 4b e2 77 7a 86 9c 83 68 74 6c ee ..o..K.wz...htl. 0580 37 fc 90 4b 3f 7f da 46 2c 9f 80 4f 45 45 6b e1 7..K?..F,..OEEk. 0590 47 52 bb 61 11 36 5e ff 3c 26 a9 a6 29 75 14 83 GR.a.6^.<&..)u.. 05a0 ab 7d 96 c9 bc d0 8f c1 .}...... No. Time Source Destination Protocol Length Info 19550 238.306608 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=198438 Ack=3035 Win=1002 Len=1448 TSval=594824 TSecr=729719 Frame 19550: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 198438, Ack: 3035, Len: 1448 Data (1448 bytes) 0000 35 01 6e af b5 f3 55 d1 bb 16 a3 de af 68 49 07 5.n...U......hI. 0010 eb ca 99 3c e6 b7 60 d7 c0 41 72 0f b7 6d 67 27 ...<..`..Ar..mg' 0020 3b 38 65 2f fd a9 2d 55 ec 72 80 ec 4b 1d 3a 37 ;8e/..-U.r..K.:7 0030 1e 28 36 bc 99 8e 87 58 6a d8 4c 5a 7e f7 24 9f .(6....Xj.LZ~.$. 0040 68 85 01 12 45 88 df 6d bc c9 6c 55 ef 63 7c be h...E..m..lU.c|. 0050 6f 68 d5 85 1b 8b f5 d8 91 25 ac e7 5e 24 1a fb oh.......%..^$.. 0060 96 45 79 ac d4 6a 5a 54 82 d2 28 5f d6 29 ca 79 .Ey..jZT..(_.).y 0070 52 14 98 22 bd 5c 67 d4 a5 6b 8d 31 0d e4 3e f9 R..".\g..k.1..>. 0080 87 60 af d0 96 f0 64 95 e5 30 91 5f ab 4e ab cf .`....d..0._.N.. 0090 89 01 4c 2c bf 16 5f c7 67 e0 7f 14 99 4d 60 30 ..L,.._.g....M`0 00a0 2e 5a c5 6c 9b 6f 70 c5 df 7a 46 35 0a 0f 88 ce .Z.l.op..zF5.... 00b0 9e e1 ff c8 8a d1 14 55 9c fb 22 1d da f7 a9 00 .......U.."..... 00c0 bb 8b e0 56 1a 20 36 18 c2 a9 55 60 e3 ec 0c 8c ...V. 6...U`.... 00d0 98 44 25 b7 a6 5a a7 04 0e f6 3b d5 74 ff c6 e5 .D%..Z....;.t... 00e0 f5 0e f2 80 ab 76 35 00 03 b9 1c 5f 88 a3 09 85 .....v5...._.... 00f0 ec c3 66 8c 5f 19 d5 cf af 1a 45 2a 7e 66 75 68 ..f._.....E*~fuh 0100 0f 29 00 87 49 0d cf be 07 9d 87 24 ab 2b 97 f7 .)..I......$.+.. 0110 1f fd ed 76 5e 5f bd 82 7f f5 08 c9 f2 9e f3 ec ...v^_.......... 0120 5f f8 40 cc d3 85 12 cb 2c 27 03 b0 36 cb 27 7f _.@.....,'..6.'. 0130 7e da 01 3f fa 90 45 df 6b cb 27 c6 28 7f e7 43 ~..?..E.k.'.(..C 0140 06 c4 01 38 ac 6d ce 09 2b 61 ed 01 29 af c5 58 ...8.m..+a..)..X 0150 66 32 4a 07 e1 27 f8 95 64 12 8d aa 49 e5 0d 9a f2J..'..d...I... 0160 09 28 58 54 d3 f8 cd 48 85 df ed 59 88 9c f8 a3 .(XT...H...Y.... 0170 34 44 b4 ee fa e1 a5 1f 66 0a fe 21 54 b7 1e 02 4D......f..!T... 0180 1a 79 18 37 3c 43 0d 00 f5 c5 d0 12 ff ae 08 bd .y.7<C.......... 0190 42 70 d4 b0 7a de 03 ac 74 7c d3 73 f7 ca bf 80 Bp..z...t|.s.... 01a0 ce 98 71 9a cc a6 15 13 c9 f4 97 69 35 db 18 74 ..q........i5..t 01b0 82 64 32 b2 e9 82 71 fc 20 7f 72 b4 5f 7e f7 14 .d2...q. .r._~.. 01c0 51 18 1c 9a 9a 4e 87 a1 d2 2d e4 75 4a 93 3f 3b Q....N...-.uJ.?; 01d0 fa b0 ca 67 31 3c bc cc 71 ea b1 4c 6b e2 8b 1a ...g1<..q..Lk... 01e0 04 64 c0 4b 6e a5 8f 43 ad 82 0f 0a f7 5f 23 d2 .d.Kn..C....._#. 01f0 2d a4 b6 41 ce 65 7a 82 11 b9 fe 3e 2b eb 8e 3f -..A.ez....>+..? 0200 91 c5 81 62 c2 65 78 a9 2d 38 85 14 42 9b 64 8f ...b.ex.-8..B.d. 0210 21 f8 ab 72 b1 8b 87 0e 59 d4 45 05 f5 29 62 74 !..r....Y.E..)bt 0220 f9 df 16 31 d2 b8 76 1b f5 6b f4 6a f8 7a 9c ad ...1..v..k.j.z.. 0230 2f ab 74 2b 3a 5e cb 4f 34 96 b8 e7 76 fe dc bc /.t+:^.O4...v... 0240 f9 94 2e a7 72 5a be 7d f3 b4 9e a6 02 aa 34 74 ....rZ.}......4t 0250 31 76 4d 69 88 48 20 94 54 a5 3c 62 d9 c6 c2 3a 1vMi.H .T.<b...: 0260 d7 34 d1 78 f7 ce 7e ed d3 90 71 95 0c 09 c2 64 .4.x..~...q....d 0270 d4 ec 12 4f af 97 e5 99 8c bc 11 b4 be 1a 94 58 ...O...........X 0280 3b 7d ac 30 bb 85 a7 d8 a3 a3 f3 5b 6d 2f 1d 11 ;}.0.......[m/.. 0290 59 7d ce da be 29 55 3c 0e 37 70 e1 8b 6e 2e 8c Y}...)U<.7p..n.. 02a0 c3 26 52 0a 81 10 a1 82 3c b9 69 83 de 3a d6 9c .&R.....<.i..:.. 02b0 f1 b8 e4 e4 4c 19 9b bd d3 4a ac 5e 88 e8 7c ad ....L....J.^..|. 02c0 a9 44 12 00 ff 69 e3 e6 76 c3 a4 e9 bc 7e ec c3 .D...i..v....~.. 02d0 a7 33 a1 6e 53 e4 a5 80 30 0b b1 26 7f 2f e5 08 .3.nS...0..&./.. 02e0 79 09 46 61 d9 72 d1 1d c1 8f a6 ac 15 75 f5 d6 y.Fa.r.......u.. 02f0 74 ba 20 2f 36 44 ef 90 bd 71 3f b1 2b ff 53 79 t. /6D...q?.+.Sy 0300 0e 7a d3 af b7 7a a6 21 cd 34 fe 4a 68 39 6e 80 .z...z.!.4.Jh9n. 0310 6d aa 8f ba 39 45 4b a3 cf b0 77 b3 39 12 77 5b m...9EK...w.9.w[ 0320 85 1d d0 94 c6 1c 59 1c 34 ca 8f bf 3f 14 a4 bf ......Y.4...?... 0330 66 f7 13 6c 19 78 24 9d ac 24 1f fb 10 dc 08 02 f..l.x$..$...... 0340 93 22 58 53 07 bd ad 46 b5 77 8a 79 20 9d 09 ae ."XS...F.w.y ... 0350 6e 4e 62 69 fe 02 70 f3 8b 8f b3 8d 89 43 ee ce nNbi..p......C.. 0360 50 fd 63 38 e9 f7 57 29 7a e0 b8 0c 49 4e 0a 5f P.c8..W)z...IN._ 0370 86 a3 56 9c 55 04 f9 0c 80 88 ab d1 29 54 62 a8 ..V.U.......)Tb. 0380 56 e5 82 c3 04 bf a9 41 2a d4 9c 49 45 bc a7 56 V......A*..IE..V 0390 83 7f 98 01 05 ab 9e aa 5a b0 da ba fe d4 c1 b8 ........Z....... 03a0 d0 54 b4 d2 3f 6b a3 7f 4d e8 b9 69 e4 61 b7 1b .T..?k..M..i.a.. 03b0 64 18 8d a8 3b e1 30 12 1e 50 05 64 3e da 6d cc d...;.0..P.d>.m. 03c0 48 72 37 70 b7 56 89 a7 5e 9b d4 7a 77 35 ec 14 Hr7p.V..^..zw5.. 03d0 85 23 54 22 66 7c 40 77 1c 7d 28 d2 0f fb 2a 2c .#T"f|@w.}(...*, 03e0 e6 15 e0 9c 1b 67 d6 ca f9 dc ab 2c ba 1e 54 2b .....g.....,..T+ 03f0 65 35 49 60 eb ec 20 a3 11 93 d4 fb f4 66 e8 67 e5I`.. ......f.g 0400 6d af bb 24 1f cd e1 3b 69 6c 4b 71 da 32 7e a1 m..$...;ilKq.2~. 0410 f2 f5 08 7a 78 18 3c ca 18 02 1f 1a 1a 9a 3a 24 ...zx.<.......:$ 0420 eb bb b3 5c e5 19 85 2d bf c7 99 2e f6 73 cc 51 ...\...-.....s.Q 0430 dc 91 db 87 65 94 1d 71 1d 41 43 36 e7 bb 92 60 ....e..q.AC6...` 0440 c5 0d 10 45 e8 d9 b8 76 b3 f4 62 be 1c 46 32 ac ...E...v..b..F2. 0450 8a 5a c1 1d 9d d4 1d aa f1 04 24 7b 84 a6 2e 70 .Z........${...p 0460 bc a3 46 11 5f 2f 55 27 d0 e0 e6 e1 65 db 1b 27 ..F._/U'....e..' 0470 86 3a d0 a0 91 fb 25 1c b3 4c 65 fe fe bd 76 17 .:....%..Le...v. 0480 2f eb b4 7f f9 9b 2a 62 87 61 d3 e3 59 c2 04 9d /.....*b.a..Y... 0490 d0 5d 68 92 20 b1 2b 21 bc e0 c5 c4 91 c6 0a 72 .]h. .+!.......r 04a0 7a bb fb e0 dc 3c 7c 4e 6d 69 06 d9 d8 04 76 49 z....<|Nmi....vI 04b0 c3 2d ca f9 f2 92 51 a5 94 4e db 4a 1c 00 e7 9e .-....Q..N.J.... 04c0 4b f9 91 f7 1d a9 5b 33 7f 32 b5 c9 ff 57 bc 83 K.....[3.2...W.. 04d0 cb 84 c1 75 6c c5 5d 83 a4 ea 79 90 9e 85 cc a8 ...ul.]...y..... 04e0 a2 ff d4 0b 62 19 0b 74 45 0e c0 b8 93 e4 ad 44 ....b..tE......D 04f0 5f 28 6e c4 e7 26 16 ab 42 79 05 76 45 40 7f 9a _(n..&..By.vE@.. 0500 29 62 4b 4e b7 0a e9 a8 bf f4 0e f0 58 0e b9 47 )bKN........X..G 0510 83 b6 34 43 69 49 b5 07 00 fc 65 18 c9 2e 8d 88 ..4CiI....e..... 0520 a8 9a 71 16 bc 96 27 22 71 62 c4 e6 62 91 d2 e8 ..q...'"qb..b... 0530 a4 48 2f ed a5 ab 33 af c2 cc 0d ff 38 bd 23 27 .H/...3.....8.#' 0540 30 14 e0 bf 16 d8 01 fc 55 4e dc 23 25 9f 12 9e 0.......UN.#%... 0550 69 01 3a 84 70 81 44 bf 5d 0d ca 37 b6 5f ad f2 i.:.p.D.]..7._.. 0560 bc 42 9e 03 9a fe 00 f7 c5 21 ed 84 86 85 e8 ce .B.......!...... 0570 a6 3b 80 a9 74 71 55 4e 78 38 e6 aa f3 f0 5b ca .;..tqUNx8....[. 0580 70 0e 33 3a ed 62 81 37 2f 84 59 60 23 c4 8a d7 p.3:.b.7/.Y`#... 0590 8b 80 6e 06 b3 c5 34 78 04 ee 9c 4f 37 ce 2a 51 ..n...4x...O7.*Q 05a0 03 a7 59 31 40 e6 67 f4 [email protected]. No. Time Source Destination Protocol Length Info 19551 238.306658 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=199886 Ack=3035 Win=1002 Len=1448 TSval=594824 TSecr=729719 Frame 19551: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 199886, Ack: 3035, Len: 1448 Data (1448 bytes) 0000 e7 30 92 b5 e7 58 2e 6d 06 68 76 f7 62 59 ce a7 .0...X.m.hv.bY.. 0010 d3 3a 25 d8 97 1f f5 57 7f 2c c4 e8 bb f5 4d 8d .:%....W.,....M. 0020 bc c1 be b6 64 fe bd 4e 8b 7a 05 ad 76 34 54 cb ....d..N.z..v4T. 0030 df 96 b7 aa 5e bb 95 09 07 df 32 67 d2 bc 65 08 ....^.....2g..e. 0040 03 5e 77 22 ba e0 b5 dc 43 47 17 f7 5b 72 b2 8c .^w"....CG..[r.. 0050 6d 3a 5a 8b 01 1a 0d 38 c6 8c 91 24 82 d6 75 01 m:Z....8...$..u. 0060 6d 82 2c 03 97 49 71 3a 12 45 b8 b1 e2 c6 0b 16 m.,..Iq:.E...... 0070 bb 3b 69 dd d7 13 ce 15 7d f1 36 7a 0f 2d 8a 7a .;i.....}.6z.-.z 0080 53 15 86 b5 20 7c 6c 02 ca cd b7 af 27 a3 0f 91 S... |l.....'... 0090 c3 c9 f1 ae c3 50 0d df 49 97 29 30 4f 37 c4 67 .....P..I.)0O7.g 00a0 24 c0 e6 4f 32 d9 ce 5c 71 47 fe 52 8f 50 b5 f2 $..O2..\qG.R.P.. 00b0 b6 c8 80 2a a8 5e 2f bf 1b 36 27 d6 f7 24 de 41 ...*.^/..6'..$.A 00c0 94 34 e0 1b 03 f9 1d 4c 8f c8 14 e7 e3 25 c1 c7 .4.....L.....%.. 00d0 f0 b3 6e e6 3a 9f 34 74 02 92 08 65 57 b6 bb 67 ..n.:.4t...eW..g 00e0 c3 f3 a2 04 e5 90 ca aa 72 b6 d2 77 6f 7a f9 f6 ........r..woz.. 00f0 b2 6a 84 e2 8a a4 f0 85 e1 a1 2e 28 82 0c 08 c8 .j.........(.... 0100 e4 46 2a 75 fa 21 60 5c 7e 64 29 6d 2b 2f 86 8e .F*u.!`\~d)m+/.. 0110 64 52 8e 6c 3f f0 a8 34 e6 b2 0f bf fd 41 89 55 dR.l?..4.....A.U 0120 0a 28 f4 40 32 81 da a3 81 68 22 67 9f 26 e3 5e .([email protected]"g.&.^ 0130 e6 47 ff 89 97 de 8c 89 19 49 f0 ba a8 46 38 b8 .G.......I...F8. 0140 eb 07 f4 9b 65 16 8f 7d d1 fa 96 8c 1d 48 16 66 ....e..}.....H.f 0150 f6 f5 c6 08 62 ba f2 c8 01 d6 38 f3 1e aa ff dc ....b.....8..... 0160 6e c5 60 17 33 59 04 cf 3e 57 99 ed d3 21 6d be n.`.3Y..>W...!m. 0170 9f 9d fe 15 93 96 c2 50 10 36 e3 ce b2 df 3c 67 .......P.6....<g 0180 16 a9 d3 4c 3b 49 bd c5 73 26 cb 88 61 7c dc de ...L;I..s&..a|.. 0190 0f be b7 44 f7 eb b1 54 1a ad 47 2e 71 f1 43 a1 ...D...T..G.q.C. 01a0 6d 20 e5 ef 17 ad 1e a8 67 7e 65 e0 9a 78 67 d0 m ......g~e..xg. 01b0 7e c7 5f 17 08 95 f5 cc 9d 58 d2 8c e2 a0 36 3d ~._......X....6= 01c0 7d d7 35 01 13 00 c3 be 8c 0c 90 3a f5 87 32 6c }.5........:..2l 01d0 6c a6 e4 df 18 db 00 81 19 d1 dd 7b 7c f3 9b 60 l..........{|..` 01e0 4a 22 08 ba b6 0d 80 6a 00 9b ea c8 4e 06 e8 60 J".....j....N..` 01f0 df 53 14 3f 5e b1 2b 62 e5 58 6b e6 db 6c 44 40 .S.?^.+b.Xk..lD@ 0200 d0 5c c0 f1 67 4e c7 8e 47 49 5a be 92 4b 08 cd .\..gN..GIZ..K.. 0210 5b 90 04 18 31 b3 36 0d 0d 52 10 c8 45 bd c6 78 [...1.6..R..E..x 0220 e8 2f 87 12 5d c7 19 e8 d1 4f 91 91 80 1d 5f 19 ./..]....O...._. 0230 bd c3 29 00 f8 57 6c 7f 2c b1 c7 78 5f 04 3a 1c ..)..Wl.,..x_.:. 0240 6c 74 ce 1f ab bc 62 5b ce 73 81 77 05 62 a8 23 lt....b[.s.w.b.# 0250 05 57 21 53 a6 29 57 06 0a e3 87 75 ee 35 6b b2 .W!S.)W....u.5k. 0260 47 7c 8a e1 f7 51 8d 0c c8 af b9 1f f3 7b 68 d0 G|...Q.......{h. 0270 b6 ed 75 98 8c 56 32 8f 7f 8c 7c 32 1c e4 5d 56 ..u..V2...|2..]V 0280 9d 41 a6 08 58 1c de 3c 46 b4 e3 68 88 3f d7 fb .A..X..<F..h.?.. 0290 21 8c 86 d4 6b 7e 2d 66 71 1a e4 9c 4d 45 ce da !...k~-fq...ME.. 02a0 4b d1 f6 72 ef 10 8c 9a 1e da 95 ec c7 15 57 be K..r..........W. 02b0 18 f4 62 32 47 e1 55 0f 6d d8 b4 9d c7 5b e6 dd ..b2G.U.m....[.. 02c0 ef f4 1e 4a 4e 7b 7a 92 24 f1 f7 88 b0 14 a1 a6 ...JN{z.$....... 02d0 e3 5d 84 28 61 81 39 57 38 61 4b b9 12 b1 b3 fe .].(a.9W8aK..... 02e0 07 a5 65 55 77 82 a0 c7 45 cb 0b 11 9b 83 bb 1d ..eUw...E....... 02f0 7a 4d 62 71 54 83 26 bd 6e 99 78 c4 c6 0e bf e0 zMbqT.&.n.x..... 0300 52 ba 92 e0 3e 43 3b d6 82 5c b5 55 a7 c5 e3 dc R...>C;..\.U.... 0310 a6 1d 71 e2 f6 23 7a cb 8c a3 3b dd 18 ef 36 3c ..q..#z...;...6< 0320 f9 d9 8c a7 65 af cb 45 3f 83 c7 d2 d2 15 e7 85 ....e..E?....... 0330 9f 4c 52 de 3e 4e b0 20 13 a6 af 79 a4 93 9b 0e .LR.>N. ...y.... 0340 92 14 58 59 ac b2 96 d9 39 be ae b5 a0 90 16 90 ..XY....9....... 0350 43 4c 7d 30 4a 51 86 73 8a cb 66 d7 82 c1 19 24 CL}0JQ.s..f....$ 0360 e8 43 3e 77 14 52 cd 2b 37 31 82 dd 18 3f ec 36 .C>w.R.+71...?.6 0370 1c ff 57 3e 46 a4 64 b4 c6 83 2a 1d d3 63 d5 27 ..W>F.d...*..c.' 0380 9e ff e7 ba 26 3a 57 89 da 7c 80 7a 48 30 4c b0 ....&:W..|.zH0L. 0390 cc 8e 60 f0 a9 70 1e a9 54 59 a6 39 36 75 77 82 ..`..p..TY.96uw. 03a0 f6 06 25 9d a4 d5 0e 3e f4 22 bc 7d 23 24 14 4a ..%....>.".}#$.J 03b0 68 c7 75 59 e3 91 0d d1 64 0e 76 94 61 b3 87 cd h.uY....d.v.a... 03c0 77 70 57 5c 96 26 34 c7 49 ff 18 47 e8 f0 98 6b wpW\.&4.I..G...k 03d0 47 02 40 31 59 f1 d9 6f f0 8e b5 0f c6 55 26 a1 [email protected]&. 03e0 1d df 2e aa b3 25 bc 8d 4d ea 73 e4 85 15 fe 3d .....%..M.s....= 03f0 80 21 6e 51 af 8a eb 1f a7 80 80 96 cd 9b f8 61 .!nQ...........a 0400 4b 48 12 f5 71 0c 76 8c 37 6a 92 e7 7a 51 a8 db KH..q.v.7j..zQ.. 0410 44 77 65 6c 9b 02 23 9f 6b cc 19 e1 d4 93 19 5a Dwel..#.k......Z 0420 7c 31 21 79 db 59 4f fa fd a5 51 b5 e7 51 27 ee |1!y.YO...Q..Q'. 0430 b3 9e 18 58 c4 7c 2d 83 d5 9b 4a 85 d5 94 54 d7 ...X.|-...J...T. 0440 8b 48 c2 b0 c1 bb 80 ee cd b4 88 8e 07 49 f3 a9 .H...........I.. 0450 5a e8 72 67 03 aa d7 21 38 2a 6e 79 b3 f1 e4 32 Z.rg...!8*ny...2 0460 f4 70 59 7f 96 9f 78 9d 25 25 d1 7c e2 3b e7 7d .pY...x.%%.|.;.} 0470 18 7e be fe 0e 6c 0c d1 c3 04 fb c6 be 47 95 c5 .~...l.......G.. 0480 af 8a 84 48 c3 93 e2 d4 25 52 42 c0 2d 8b 15 d5 ...H....%RB.-... 0490 01 fd 5b e3 ec c0 54 5d 70 04 b4 fa 9c 63 8b 14 ..[...T]p....c.. 04a0 17 b4 32 a2 12 44 ab e3 0b 44 30 90 69 aa 1c bd ..2..D...D0.i... 04b0 f7 bc 43 5f 80 a7 b5 e2 e7 51 0a 18 4f 56 9f 57 ..C_.....Q..OV.W 04c0 e3 63 8f 5c 42 46 43 db 3a 7e 0b 0a d9 2a 6e 3d .c.\BFC.:~...*n= 04d0 f1 af a4 7b e0 e7 20 ca fa b2 16 86 1f 58 9d 61 ...{.. ......X.a 04e0 98 ab a3 ea 9b 12 67 f0 f0 65 38 0f 11 73 e3 f2 ......g..e8..s.. 04f0 4f b0 e1 5c eb fd ab b9 5e 24 1c 30 07 06 91 38 O..\....^$.0...8 0500 6d 2a b4 1c 7f 91 98 90 99 41 50 2a 70 79 dc 55 m*.......AP*py.U 0510 4f bd 8d 93 07 f2 9a d0 a6 aa 35 dd 2e 0d 59 a4 O.........5...Y. 0520 ea 8e 35 15 80 d1 f8 f4 2d 4c 74 57 92 64 a7 98 ..5.....-LtW.d.. 0530 12 43 a6 91 9a 25 a0 56 54 c3 ab 70 e1 bc a7 7b .C...%.VT..p...{ 0540 3d 65 1c 64 71 b9 ea 68 76 1a 79 51 29 17 59 33 =e.dq..hv.yQ).Y3 0550 46 47 c8 68 9a 93 c9 ef 7f 83 a8 8f 27 80 7d 56 FG.h........'.}V 0560 db dd 25 ff 84 4f 0e 29 b8 78 a6 bb 8f d4 09 fa ..%..O.).x...... 0570 f1 4c e7 db aa f1 5d 4c 6d 3d 66 38 05 ea e5 b3 .L....]Lm=f8.... 0580 50 47 d3 ed 2d 36 4d 76 0a a9 ee f0 1b bc 06 3f PG..-6Mv.......? 0590 38 00 73 1f 31 00 8c 98 78 1d 9c f8 7d 83 d4 ac 8.s.1...x...}... 05a0 8e 87 f7 61 ce 9a 7f b4 ...a.... No. Time Source Destination Protocol Length Info 19552 238.306707 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:48:16 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.64.179.242 7x.x.x.3 44375 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 19552: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:16 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.64.179.242 7x.x.x.3 44375 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 19553 238.306736 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=3035 Ack=201334 Win=65535 Len=0 TSval=729866 TSecr=594824 Frame 19553: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3035, Ack: 201334, Len: 0 No. Time Source Destination Protocol Length Info 19554 238.306789 192.168.10.1 192.168.10.203 RELOAD Frame 1514 ACK Frame 19554: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 201334, Ack: 3035, Len: 1448 REsource LOcation And Discovery Framing: ACK No. Time Source Destination Protocol Length Info 19555 238.306829 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=202782 Ack=3035 Win=1002 Len=1448 TSval=594824 TSecr=729866 Frame 19555: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 202782, Ack: 3035, Len: 1448 Data (1448 bytes) 0000 a4 2b b0 4c 8e 37 bb 07 da 3f ba 94 08 23 a7 43 .+.L.7...?...#.C 0010 a3 5f 25 d6 98 00 35 b3 88 a9 a3 63 9d 3d 81 27 ._%...5....c.=.' 0020 04 86 46 de 6e 59 f2 08 9d 5c 5b 43 d6 a0 0e 56 ..F.nY...\[C...V 0030 bf db 8a f7 76 db 3b e4 8e 47 35 be 05 b9 8e af ....v.;..G5..... 0040 f0 ff 29 8b a2 44 e0 41 15 fb e3 a1 88 75 93 9d ..)..D.A.....u.. 0050 a1 eb 79 d2 e2 e2 5d 2d 2b 4e 15 0d f6 a9 73 67 ..y...]-+N....sg 0060 fa f8 ef 7c 9c 80 0d ae 71 4f fa 1d 25 3d f1 dc ...|....qO..%=.. 0070 5e 53 95 83 92 99 fe e8 6d 7d 5c 25 67 35 35 2f ^S......m}\%g55/ 0080 1b 33 1a 11 02 3c 7c 5c 89 7f b9 55 82 d5 23 be .3...<|\...U..#. 0090 3a 93 72 52 a9 5f 84 58 1c 63 d6 13 5d 71 0f 5d :.rR._.X.c..]q.] 00a0 7a 99 70 a5 8d 86 f3 f1 e3 82 82 8f 6c b8 5c 86 z.p.........l.\. 00b0 ff c1 8a 95 82 10 70 e2 48 70 a0 68 31 ec 2e 06 ......p.Hp.h1... 00c0 72 d3 44 81 6e 11 8e 73 30 4a bb db e3 77 2a fc r.D.n..s0J...w*. 00d0 d8 6c 83 9c 8c 46 cd 56 bb e6 96 71 9d a3 0e be .l...F.V...q.... 00e0 c8 e9 fb 55 78 91 1e 12 a2 f2 0e 84 c7 da 7d 17 ...Ux.........}. 00f0 70 9b 06 82 d7 88 32 9f b2 2d e2 3c b2 04 01 f6 p.....2..-.<.... 0100 7a fa ea 26 e8 01 26 ca 12 6a c8 63 26 13 20 b1 z..&..&..j.c&. . 0110 d0 84 ec 4e d6 c5 cb 3d b3 77 df 34 52 d4 95 41 ...N...=.w.4R..A 0120 77 3a ce 50 45 f5 81 f0 fe c6 26 31 c9 51 a0 3e w:.PE.....&1.Q.> 0130 9a 08 8d 33 02 10 8a bb 49 f4 a3 be 67 4a 56 62 ...3....I...gJVb 0140 2b ad bc 14 f8 64 0f 82 7d 36 d8 55 51 e8 ca a4 +....d..}6.UQ... 0150 ab d2 df e8 3e ba b5 ee fd 70 f6 d6 07 33 c9 ac ....>....p...3.. 0160 4e 85 05 76 4b ea 86 da 77 42 b3 36 d7 7d fd 40 N..vK...wB.6.}.@ 0170 4e 74 96 89 f3 70 cb 35 20 6f e6 93 19 6f 24 16 Nt...p.5 o...o$. 0180 b1 6e f7 b5 ff 09 32 1f 81 33 7d e1 16 9c cf da .n....2..3}..... 0190 c1 ba ad 41 44 50 ee 5b ae 70 f0 49 66 c3 eb f7 ...ADP.[.p.If... 01a0 70 15 3d 83 d5 46 41 5b ee 16 36 af 84 62 53 37 p.=..FA[..6..bS7 01b0 77 0c b7 e4 d3 b2 c2 61 4e a2 ac 66 7f 86 ce 5c w......aN..f...\ 01c0 21 da 67 8c 6c e5 79 1e 8f 7c 3b 0f e8 d2 57 69 !.g.l.y..|;...Wi 01d0 1c 28 39 cd cf 4b a9 75 dc a3 9e c4 5a 01 93 e1 .(9..K.u....Z... 01e0 1d 9e 3b 97 fd 8a 19 bc 3d bb 36 fd 9b 5c 27 7d ..;.....=.6..\'} 01f0 68 64 1c a7 d3 98 1b 64 c9 62 62 8a 3d d1 e1 07 hd.....d.bb.=... 0200 14 6f a6 3b a9 59 08 1c 1f e5 54 d8 38 47 78 b2 .o.;.Y....T.8Gx. 0210 37 dc 45 94 2f 31 cf d8 f2 5a 7c 20 1b e9 c1 60 7.E./1...Z| ...` 0220 c4 9d ed 88 14 ed de ee 9a 8d 07 22 27 f8 a0 55 ..........."'..U 0230 ad d7 51 0e f4 ea 23 c9 cc 68 b4 cb 0c dc 44 37 ..Q...#..h....D7 0240 89 2b 08 93 fd 49 e8 ea 7d aa c9 1e c6 d9 9e e6 .+...I..}....... 0250 1a 87 bd 52 36 55 8e 45 0a b4 64 83 05 89 a2 d5 ...R6U.E..d..... 0260 9d 19 b4 a9 3f 52 23 bb 14 29 62 0e 2b ff dc 16 ....?R#..)b.+... 0270 e8 f6 9d c9 e0 52 8e e7 af 57 3a 0e 80 36 2c 6e .....R...W:..6,n 0280 1e b4 97 15 5b 97 60 a5 bc f7 8d 56 e6 f3 24 56 ....[.`....V..$V 0290 d1 d1 6a c6 6d 51 90 38 d1 88 71 1f 94 05 4d ee ..j.mQ.8..q...M. 02a0 e5 24 20 61 0b f2 18 9e a4 5c 3c 30 a0 a3 6d 24 .$ a.....\<0..m$ 02b0 00 82 e4 d8 4a 4b 73 0b 0d 95 7a 34 0a 63 b8 44 ....JKs...z4.c.D 02c0 16 0d e1 38 f3 11 57 63 6a 09 fd 7d 65 53 de 1d ...8..Wcj..}eS.. 02d0 4d 34 68 c1 56 a1 70 d3 01 24 66 dd 1f 4c dc cc M4h.V.p..$f..L.. 02e0 94 7e cb e5 be ae f7 95 30 1c 51 7c 1a d1 88 f5 .~......0.Q|.... 02f0 f4 13 74 42 1d f1 1e 4b 7f 2f 4c f2 d8 8c 27 73 ..tB...K./L...'s 0300 f0 68 da f3 df 7c 4e f9 db 73 b5 42 c0 fb a9 55 .h...|N..s.B...U 0310 1b 6a f8 90 e2 15 64 f8 35 5a ee f0 40 28 05 e1 .j....d.5Z..@(.. 0320 d0 12 ba 2a a0 a8 b8 bd c6 b7 e8 24 fc ce 34 29 ...*.......$..4) 0330 98 20 38 a7 76 67 9d 52 a5 ca 1e 16 4f cb c2 13 . 8.vg.R....O... 0340 19 33 a0 8a 59 ff 58 f4 ba 25 d0 24 ad 6a 27 74 .3..Y.X..%.$.j't 0350 68 6a fc 39 9c 22 91 d7 a6 6d a8 25 e5 83 95 76 hj.9."...m.%...v 0360 f5 ab de d4 a2 f6 b9 5f 1b a7 b1 97 09 c1 61 4d ......._......aM 0370 b6 d2 06 59 58 4d 71 9f 5e 8b a1 f4 d9 22 2d f9 ...YXMq.^...."-. 0380 ad 70 1f 44 14 58 5b f4 b3 a9 33 45 08 63 e2 6f .p.D.X[...3E.c.o 0390 cf 79 c2 41 1e 2a 0c ff 60 c7 ed 1d 55 e2 60 7d .y.A.*..`...U.`} 03a0 7e 7b 01 72 f1 89 d4 0a 65 23 2d 00 e9 6e 72 1c ~{.r....e#-..nr. 03b0 bd 84 17 c1 ab a6 df 1c 5b 09 1c 2b 8a 94 23 4e ........[..+..#N 03c0 13 21 59 80 be e7 0e 42 2d b7 16 b6 cb 4c 7d 5d .!Y....B-....L}] 03d0 71 31 86 9b b2 e9 72 6b f8 17 d1 8c 59 74 9c 1a q1....rk....Yt.. 03e0 dd 4f 8d 7a 44 a0 aa fd 30 e2 91 05 81 20 7a a7 .O.zD...0.... z. 03f0 ba 92 e6 1d a9 92 54 04 f0 8c 20 08 28 d9 74 9b ......T... .(.t. 0400 b2 67 95 64 0b d4 e8 d6 d0 29 2c 1c 06 c6 90 7b .g.d.....),....{ 0410 1a 04 9c 86 ad 38 2a c8 ec 65 f8 11 0c bb 0f 07 .....8*..e...... 0420 01 bf 78 8e 8c 61 9d c5 67 d9 88 e4 90 b3 7e a8 ..x..a..g.....~. 0430 cb 1c e6 2b cd c0 4d 16 7f ea be 35 15 62 e3 13 ...+..M....5.b.. 0440 4f d0 c9 6e 6e ef b8 87 b1 09 84 cf 50 dd c3 07 O..nn.......P... 0450 52 4e 4a da b6 0d ac 9d 27 dc 92 b9 a9 ee fe 7b RNJ.....'......{ 0460 77 99 63 db 29 97 c9 9d b8 c1 0c c8 9d d7 31 66 w.c.).........1f 0470 78 ea 9d 5f b2 a1 34 28 21 fc a8 36 da b2 0f 95 x.._..4(!..6.... 0480 f0 ab 7f d7 9e 5c 2a bc 01 d3 65 53 03 ac 31 8f .....\*...eS..1. 0490 cb dd 51 a0 9b 8b b2 09 61 03 99 9c 3d 0c 06 c1 ..Q.....a...=... 04a0 a0 bd 6b 66 10 7f da 8a ff 11 84 c3 8d 3c fe e7 ..kf.........<.. 04b0 03 7c 2a cf a3 ad eb 64 fc b5 18 1d 1e 7e ce 51 .|*....d.....~.Q 04c0 3e 34 f6 5c 41 80 c9 02 66 92 29 e3 45 64 21 50 >4.\A...f.).Ed!P 04d0 ac 2a fc 57 9b 9f 45 fd 1b 3a a8 fb f8 23 81 6f .*.W..E..:...#.o 04e0 91 79 a9 bd 59 c2 e0 08 f3 83 db ab 36 b1 e3 d7 .y..Y.......6... 04f0 b7 59 8f 20 67 8c db 43 d6 54 c9 52 20 d3 57 be .Y. g..C.T.R .W. 0500 d4 ff b8 cb e6 ca 10 55 d1 2c 12 26 c9 04 b2 72 .......U.,.&...r 0510 6c 4d 49 87 94 46 13 ce 0d 48 dd 78 04 27 a2 a1 lMI..F...H.x.'.. 0520 b4 b3 57 a6 f4 d8 b6 c4 ad f1 a8 81 5c 21 9a d4 ..W.........\!.. 0530 58 20 77 a2 bf 14 5b fe 9d 27 d2 95 88 54 cb 83 X w...[..'...T.. 0540 c3 67 2f 6d 0f eb d2 16 eb cf fb 47 99 20 69 c5 .g/m.......G. i. 0550 eb bc 6e 82 d4 f4 1e 01 9a 68 20 b0 f3 e9 b8 08 ..n......h ..... 0560 52 ea 61 15 f1 f3 cd ec 21 7b bf 13 10 88 14 af R.a.....!{...... 0570 22 08 3e d5 e4 fc db 9e 5d a4 69 04 38 5e 4e 30 ".>.....].i.8^N0 0580 e9 fb 35 74 f7 2a bf 65 6c a4 84 e8 57 89 71 41 ..5t.*.el...W.qA 0590 0a 97 18 58 78 94 f0 0b 3f ff 56 48 9d 03 9a f2 ...Xx...?.VH.... 05a0 2a e2 d0 b3 bd da 0d ea *....... No. Time Source Destination Protocol Length Info 19556 238.306873 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=204230 Ack=3035 Win=1002 Len=1448 TSval=594824 TSecr=729866 Frame 19556: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 204230, Ack: 3035, Len: 1448 Data (1448 bytes) 0000 48 fd 8a 13 db 33 59 ac d3 fd 61 32 f3 dd d0 6c H....3Y...a2...l 0010 3f 7f 38 63 a0 18 ee 81 13 dc 81 e4 65 ee b4 7c ?.8c........e..| 0020 b6 b6 56 45 61 21 90 aa f0 29 90 29 32 f6 91 68 ..VEa!...).)2..h 0030 20 a3 e0 80 67 1f 8b 67 7e 6e d9 83 56 95 32 69 ...g..g~n..V.2i 0040 c1 df d1 b9 98 e7 2b 28 b3 f7 81 49 40 09 5d fc ......+(...I@.]. 0050 48 0d 85 cd ff fb 96 53 c1 4c 53 16 f0 d0 ce 2c H......S.LS...., 0060 2e dd 99 4d 49 26 f0 6c 75 cd 85 da ba a7 67 96 ...MI&.lu.....g. 0070 a3 bc 45 b5 3d df fe 4e f4 31 42 a4 14 d2 3c 83 ..E.=..N.1B...<. 0080 31 11 63 2d 2d b4 d9 97 5e 7c fe 2d 41 da f9 d4 1.c--...^|.-A... 0090 44 67 9d 4d aa 6d 6d 00 60 0f 34 9e cc 51 fe d4 Dg.M.mm.`.4..Q.. 00a0 62 bd 0b 95 8c 67 d8 b4 d8 da d6 d2 00 2b 36 31 b....g.......+61 00b0 f8 df dc 89 72 b4 6f 23 fd 7f 3c ec 7f 00 60 98 ....r.o#..<...`. 00c0 72 1f a6 8b 46 00 48 ec 1a 00 ea 65 6b 98 10 8e r...F.H....ek... 00d0 86 b8 dd 02 05 be 09 2e 16 90 f3 9b cd 85 03 b9 ................ 00e0 96 65 d8 43 a7 09 df ee 13 80 22 bd 8c 3f f5 55 .e.C......"..?.U 00f0 55 80 e1 31 5c f0 6b aa a8 78 63 e8 77 84 f9 79 U..1\.k..xc.w..y 0100 bf 52 e3 7f ef b9 39 c8 f0 6a d8 9a 61 eb ca 0d .R....9..j..a... 0110 17 2d 65 4d 9a 9d 67 7d 9d 33 13 48 ae 36 6a 6c .-eM..g}.3.H.6jl 0120 64 8f 48 13 2e f9 73 00 8b 55 a2 5f 1c e8 c6 97 d.H...s..U._.... 0130 fd e7 9e 23 aa 2d b2 b0 25 03 5d 47 90 c3 8d b7 ...#.-..%.]G.... 0140 67 f3 41 16 bf d7 f2 3c 07 7f e8 42 69 3d 35 ac g.A....<...Bi=5. 0150 73 d1 1a 99 b2 c8 12 ca 09 be f9 aa 7e 8b 20 cd s...........~. . 0160 54 b1 84 0e 82 94 60 e9 25 97 a1 ae 82 1a e4 f9 T.....`.%....... 0170 f2 81 46 8a 04 44 e1 79 11 f1 24 0c bf 17 21 6c ..F..D.y..$...!l 0180 87 f9 38 2d b3 8c 52 fe 48 5b a0 e6 17 d4 36 93 ..8-..R.H[....6. 0190 88 48 fe a9 fd d9 d7 63 c4 bf ec f8 2f 94 43 71 .H.....c..../.Cq 01a0 c9 12 18 48 13 20 fb 7f 11 21 47 0e 71 08 ad a5 ...H. ...!G.q... 01b0 03 d5 d0 a8 5a 90 12 35 19 df 61 c0 b3 92 42 be ....Z..5..a...B. 01c0 54 e0 f1 23 1e a3 64 a7 b7 6b 76 90 6c 62 21 74 T..#..d..kv.lb!t 01d0 f4 50 f0 db d7 41 2e 34 3d 46 d2 4c cd 4f 2d 5e .P...A.4=F.L.O-^ 01e0 6a 26 3e af 22 ad 75 15 f1 91 80 93 2b f9 95 d8 j&>.".u.....+... 01f0 29 52 70 77 37 04 09 1a 1a 98 d4 ee 70 ce c9 5a )Rpw7.......p..Z 0200 5e 7a b0 4e 0d 2f e9 c5 b9 eb 4f 5c 52 0e d1 0b ^z.N./....O\R... 0210 fc 3a 40 0b f3 1a 3d 09 59 58 90 d9 b7 e8 71 ea .:@...=.YX....q. 0220 a1 0b fc 53 30 cd f9 9b ae eb 77 01 14 7e d6 eb ...S0.....w..~.. 0230 45 7e 01 f7 36 91 8a 6e bd 8b 06 95 7e 5b 50 f4 E~..6..n....~[P. 0240 09 fd 3a 2e 20 80 af 0a 9c cf 33 db 72 e4 98 79 ..:. .....3.r..y 0250 54 b0 8e 67 b3 01 18 27 ba b1 03 ca 10 2a d3 86 T..g...'.....*.. 0260 49 43 ac 2d 51 ca 4d 7f 89 4b aa 99 3d 57 fc ca IC.-Q.M..K..=W.. 0270 5e f9 94 37 1c 96 90 0d a1 75 e2 aa 44 08 aa 10 ^..7.....u..D... 0280 21 3f 92 f5 66 d7 18 6d 1b bb aa 44 a6 d0 32 b2 !?..f..m...D..2. 0290 27 f9 7c 97 71 a3 c8 db c6 92 1b ff db 89 8c 9e '.|.q........... 02a0 4d 1f 7a 1b 1d af 8c ab 8c bd 31 d7 a5 33 9d 96 M.z.......1..3.. 02b0 c7 66 e9 d1 ae 4f 88 22 5e 16 c6 33 6d 59 f9 e2 .f...O."^..3mY.. 02c0 87 81 4a 66 d9 80 6a e0 90 e6 aa 3d a1 4f 6c 61 ..Jf..j....=.Ola 02d0 7c 81 df 83 4e 10 c7 eb cc 06 e8 a2 d2 a2 35 56 |...N.........5V 02e0 25 f0 0c 3b 41 a0 ad 29 20 05 eb 56 35 9a 00 3e %..;A..) ..V5..> 02f0 16 61 02 68 18 a6 99 85 58 d9 f1 76 a6 bc 86 9d .a.h....X..v.... 0300 e4 2e 3f 67 3e f9 13 b9 7d d8 6c fc 15 71 f2 9b ..?g>...}.l..q.. 0310 af dd 40 f4 8c 74 d9 03 6c 7a 26 67 29 c6 c9 71 [email protected]&g)..q 0320 00 bc 1d 92 5a e5 96 1e 1b 7c fe 10 21 49 95 e4 ....Z....|..!I.. 0330 b2 85 f7 7b 7b 06 fe 10 2a 21 85 d2 65 28 01 97 ...{{...*!..e(.. 0340 4c 47 6d 90 82 10 37 67 cc bb e1 60 c6 db dc ae LGm...7g...`.... 0350 19 38 65 b0 ba 26 92 22 3a e0 19 fb df a2 87 d0 .8e..&.":....... 0360 ae 5b b6 90 cd 80 cc a8 41 98 4d b3 25 cc 55 af .[......A.M.%.U. 0370 31 f8 09 d1 e9 80 c9 eb 0e 80 2b 2a dd be a7 99 1.........+*.... 0380 2a 59 b7 5d a3 d8 5a c6 96 70 5a 6c 83 11 ee 81 *Y.]..Z..pZl.... 0390 aa 07 55 82 6d 32 23 26 a2 b8 3f ca 0a e8 a1 04 ..U.m2#&..?..... 03a0 bd b6 ed 15 f5 d8 46 87 55 d6 e8 b3 ff 7a 20 b6 ......F.U....z . 03b0 a9 4d a6 49 9c fc bd 28 fd 8a ac bf 48 06 5b e5 .M.I...(....H.[. 03c0 a3 f6 30 f3 a8 11 c0 3f df 2a 5c f4 58 13 e0 87 ..0....?.*\.X... 03d0 81 74 f9 3b fb da da 7a 16 27 d3 8b 2a 8d 39 65 .t.;...z.'..*.9e 03e0 d3 f1 c0 bc 4f cf 0e 30 c2 1c bc 35 de cc ac fc ....O..0...5.... 03f0 fc d1 09 cc 95 d6 b2 8a 5e cf 57 1a 67 17 77 4b ........^.W.g.wK 0400 fe a8 b1 4e 3f ac 8d 51 b4 e8 54 ec a7 e7 2a 2f ...N?..Q..T...*/ 0410 d4 bb a3 7a ff 01 f2 f1 57 50 0d e6 9d 5f 0c 8f ...z....WP..._.. 0420 73 da c4 56 f9 60 63 de 71 98 c6 cc 02 7d 9e 15 s..V.`c.q....}.. 0430 b0 8a fa fd 60 c9 5a 28 65 cf d5 0e b3 26 40 0e ....`.Z(e....&@. 0440 3f 43 97 db 2b 90 87 e0 50 14 f3 a1 c6 3d 2e 27 ?C..+...P....=.' 0450 72 87 54 e0 f2 da 26 b2 31 a9 45 cb ea ad f3 ed r.T...&.1.E..... 0460 71 06 c2 47 2d b5 92 8e be 9a 29 6c 9d c2 65 41 q..G-.....)l..eA 0470 5b 2a 92 3b 73 69 9e 5a 37 36 87 84 47 aa fd f8 [*.;si.Z76..G... 0480 49 f5 15 a5 d4 06 b6 8a 05 13 93 8b 26 d7 97 9f I...........&... 0490 e6 e2 21 a7 fc 8d 3a 63 08 8e f4 8b 84 4a 36 18 ..!...:c.....J6. 04a0 b3 d0 a9 1d c9 10 48 6b 86 bf a4 be 47 09 90 f8 ......Hk....G... 04b0 b2 b7 e8 d8 c0 2f a1 50 85 5c 44 c5 f9 c5 a5 2c ...../.P.\D...., 04c0 fe 2b 4b 0b 46 58 d1 15 f6 bf 65 a3 85 19 88 ec .+K.FX....e..... 04d0 d6 0d 41 6b c1 b3 24 5f 36 ac 02 57 6c 46 8e d6 ..Ak..$_6..WlF.. 04e0 6a a5 04 c4 b1 75 f1 0a ff af 02 ea ea 59 d3 34 j....u.......Y.4 04f0 85 f0 c0 c2 70 df f2 3b fa 82 7e 63 f1 3d 4b a6 ....p..;..~c.=K. 0500 56 0e f8 dd 15 09 ab 97 40 ae 1b 2a 25 1f bf d4 V.......@..*%... 0510 09 1b 5c 70 b4 63 22 8c 29 b6 bf 6f ff 88 50 61 ..\p.c".)..o..Pa 0520 c4 13 22 34 03 87 6a 75 fb 1d 6e 4b bb 46 49 88 .."4..ju..nK.FI. 0530 48 3b 85 33 c3 5c 93 ca df d5 8c 82 c2 57 a1 c2 H;.3.\.......W.. 0540 21 67 0d d7 f6 f4 49 a6 b8 76 b9 c7 e5 7a 90 c7 !g....I..v...z.. 0550 6b 61 55 8a 96 25 17 ed 9c 87 50 92 f5 97 fc 8c kaU..%....P..... 0560 0f f5 42 49 e3 70 13 e4 2a df b6 61 7c 8e 7c c0 ..BI.p..*..a|.|. 0570 da 62 50 be e5 0d f7 04 52 9a 59 fa 32 7a 63 80 .bP.....R.Y.2zc. 0580 1a d3 c9 2c 9e 6e 3d 7a 91 70 da 9c 08 19 7a fc ...,.n=z.p....z. 0590 2e f4 da 09 bd 95 de a2 0a d9 e3 28 18 a3 bb 4a ...........(...J 05a0 cb f9 13 0d 21 12 bc da ....!... No. Time Source Destination Protocol Length Info 19557 238.306902 192.168.10.1 192.168.10.203 TCP 135 34433 > cds [PSH, ACK] Seq=205678 Ack=3035 Win=1002 Len=69 TSval=594824 TSecr=729866 Frame 19557: 135 bytes on wire (1080 bits), 135 bytes captured (1080 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 205678, Ack: 3035, Len: 69 Data (69 bytes) 0000 c6 8c f9 7d 6a 99 51 87 e2 89 72 d3 53 39 eb 6a ...}j.Q...r.S9.j 0010 44 4e 89 97 e1 b1 45 0a e1 9a a4 ba 0a f3 e4 cf DN....E......... 0020 72 ff f2 e0 cf 14 0b 8c b2 01 49 30 dc 89 67 44 r.........I0..gD 0030 63 78 0a af ee 45 a9 f9 60 6b cd 7f e5 64 14 45 cx...E..`k...d.E 0040 90 5a 33 ec c9 .Z3.. No. Time Source Destination Protocol Length Info 19558 238.306929 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=3035 Ack=204230 Win=65535 Len=0 TSval=729866 TSecr=594824 Frame 19558: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3035, Ack: 204230, Len: 0 No. Time Source Destination Protocol Length Info 19559 238.306956 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=3035 Ack=205747 Win=65535 Len=0 TSval=729866 TSecr=594824 Frame 19559: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3035, Ack: 205747, Len: 0 No. Time Source Destination Protocol Length Info 19560 238.306979 190.64.179.242 192.168.10.207 TCP 60 44375 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 19560: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.64.179.242 (190.64.179.242), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 44375 (44375), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 19561 238.315253 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19561: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39877, Ack: 243299, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19562 238.321254 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=39904 Ack=244561 Win=64240 Len=0 Frame 19562: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39904, Ack: 244561, Len: 0 No. Time Source Destination Protocol Length Info 19563 238.325415 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19563: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39904, Ack: 245519, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19564 238.325435 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=245519 Ack=39931 Win=64435 Len=0 Frame 19564: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 245519, Ack: 39931, Len: 0 No. Time Source Destination Protocol Length Info 19565 238.333334 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 19565: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39931, Ack: 245519, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 19566 238.333405 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19566: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39963, Ack: 245519, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19567 238.333423 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=245519 Ack=39990 Win=64376 Len=0 Frame 19567: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 245519, Ack: 39990, Len: 0 No. Time Source Destination Protocol Length Info 19568 238.341962 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19568: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 245519, Ack: 39990, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19569 238.341987 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19569: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 246779, Ack: 39990, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19570 238.342004 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19570: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 248039, Ack: 39990, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19571 238.342020 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 19571: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 249299, Ack: 39990, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 19572 238.342037 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19572: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 249615, Ack: 39990, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19573 238.342053 192.168.10.185 192.168.10.142 VNC 365 Authentication result Frame 19573: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 250875, Ack: 39990, Len: 311 Virtual Network Computing No. Time Source Destination Protocol Length Info 19574 238.345410 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19574: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 39990, Ack: 245519, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19575 238.357468 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19575: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40017, Ack: 245519, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19576 238.357492 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=251186 Ack=40044 Win=64322 Len=0 Frame 19576: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 251186, Ack: 40044, Len: 0 No. Time Source Destination Protocol Length Info 19577 238.363362 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19577: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40044, Ack: 245519, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19578 238.368005 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=3035 Ack=205747 Win=65535 Len=74 TSval=729866 TSecr=594824 Frame 19578: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3035, Ack: 205747, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 73 e4 39 57 56 33 59 f6 d8 ee fb .... s.9WV3Y.... 0010 69 67 1c fa 80 39 9b 0c 00 a2 3c 6f ee ea 3c c5 ig...9....<o..<. 0020 46 9a 90 4a 59 17 03 01 00 20 39 b7 10 63 70 1d F..JY.... 9..cp. 0030 1e 8a 49 d4 62 fa 25 66 fb bb d6 88 7d 33 1f a3 ..I.b.%f....}3.. 0040 d8 8d f1 50 01 fa ef 85 79 d3 ...P....y. No. Time Source Destination Protocol Length Info 19579 238.368042 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=205747 Ack=3109 Win=1002 Len=0 TSval=594839 TSecr=729866 Frame 19579: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 205747, Ack: 3109, Len: 0 No. Time Source Destination Protocol Length Info 19580 238.371695 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=40071 Ack=248039 Win=64240 Len=0 Frame 19580: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40071, Ack: 248039, Len: 0 No. Time Source Destination Protocol Length Info 19581 238.375490 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=40071 Ack=249299 Win=64240 Len=0 Frame 19581: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40071, Ack: 249299, Len: 0 No. Time Source Destination Protocol Length Info 19582 238.375663 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=40071 Ack=250875 Win=64240 Len=0 Frame 19582: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40071, Ack: 250875, Len: 0 No. Time Source Destination Protocol Length Info 19583 238.375721 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 19583: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40071, Ack: 251186, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 19584 238.375740 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=251186 Ack=40103 Win=65535 Len=0 Frame 19584: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 251186, Ack: 40103, Len: 0 No. Time Source Destination Protocol Length Info 19585 238.384643 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19585: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 251186, Ack: 40103, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19586 238.384667 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19586: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 252446, Ack: 40103, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19587 238.384685 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19587: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 253706, Ack: 40103, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19588 238.384703 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 19588: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 254966, Ack: 40103, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 19589 238.384724 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19589: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 255282, Ack: 40103, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19590 238.384741 192.168.10.185 192.168.10.142 VNC 741 Authentication result Frame 19590: 741 bytes on wire (5928 bits), 741 bytes captured (5928 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 256542, Ack: 40103, Len: 687 Virtual Network Computing No. Time Source Destination Protocol Length Info 19591 238.414404 192.168.10.142 192.168.10.185 TCP 60 [TCP Previous segment lost] xrl > rfb [ACK] Seq=40130 Ack=253706 Win=64240 Len=0 Frame 19591: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40130, Ack: 253706, Len: 0 No. Time Source Destination Protocol Length Info 19592 238.421448 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=40130 Ack=254966 Win=64240 Len=0 Frame 19592: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40130, Ack: 254966, Len: 0 No. Time Source Destination Protocol Length Info 19593 238.421477 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=40130 Ack=256542 Win=64240 Len=0 Frame 19593: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40130, Ack: 256542, Len: 0 No. Time Source Destination Protocol Length Info 19594 238.425298 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 19594: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40130, Ack: 257229, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 19595 238.425318 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19590#1] rfb > xrl [ACK] Seq=257229 Ack=40103 Win=65535 Len=0 SLE=40130 SRE=40162 Frame 19595: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 257229, Ack: 40103, Len: 0 No. Time Source Destination Protocol Length Info 19596 238.545373 190.64.179.242 192.168.10.207 SMTP 105 C: HELO r190-64-179-242.dialup.adsl.anteldata.net.uy Frame 19596: 105 bytes on wire (840 bits), 105 bytes captured (840 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.64.179.242 (190.64.179.242), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 44375 (44375), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 51 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19597 238.545529 192.168.10.207 190.64.179.242 SMTP 103 S: 250 mail.mydomain.com Hello [190.64.179.242] Frame 19597: 103 bytes on wire (824 bits), 103 bytes captured (824 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.64.179.242 (190.64.179.242) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 44375 (44375), Seq: 122, Ack: 52, Len: 49 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19598 238.545574 190.64.179.242 192.168.10.207 TCP 60 44375 > smtp [ACK] Seq=52 Ack=171 Win=93270 Len=0 Frame 19598: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.64.179.242 (190.64.179.242), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 44375 (44375), Dst Port: smtp (25), Seq: 52, Ack: 171, Len: 0 No. Time Source Destination Protocol Length Info 19599 238.560898 188.161.220.86 192.168.10.207 SMTP 60 C: QUIT Frame 19599: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45100 (45100), Dst Port: smtp (25), Seq: 61, Ack: 366, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19600 238.560986 192.168.10.207 188.161.220.86 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 19600: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45100 (45100), Seq: 366, Ack: 67, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19601 238.561042 188.161.220.86 192.168.10.207 TCP 60 45100 > smtp [ACK] Seq=67 Ack=435 Win=93006 Len=0 Frame 19601: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45100 (45100), Dst Port: smtp (25), Seq: 67, Ack: 435, Len: 0 No. Time Source Destination Protocol Length Info 19602 238.561089 192.168.10.207 188.161.220.86 TCP 60 smtp > 45100 [FIN, ACK] Seq=435 Ack=67 Win=65469 Len=0 Frame 19602: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45100 (45100), Seq: 435, Ack: 67, Len: 0 No. Time Source Destination Protocol Length Info 19603 238.561136 188.161.220.86 192.168.10.207 TCP 60 45100 > smtp [ACK] Seq=67 Ack=436 Win=93006 Len=0 Frame 19603: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45100 (45100), Dst Port: smtp (25), Seq: 67, Ack: 436, Len: 0 No. Time Source Destination Protocol Length Info 19604 238.741638 192.168.10.32 192.168.10.255 UDP 776 Source port: 38302 Destination port: apc-3052 Frame 19604: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 31 3a 30 30 3a 30 30 0a 53 52 3d 30 31 31 =21:00:00.SR=011 0060 35 45 37 0a 53 55 3d 34 34 38 35 0a 52 44 3d 35 5E7.SU=4485.RD=5 0070 34 39 33 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 493.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 37 .4C=207.3.50=037 00c0 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 .0.43=028.5.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 30 3a 1/19/07.6A=0050: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 746005481 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 35 39 2e 39 38 0a 34 44 3d .46=59.98.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 207.3.4E=205.9.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 36 2e 30 0a 36 37 =000.42=216.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 31 2e 30 0a 32 46 3d 31 35 2e .5C=031.0.2F=15. 01d0 31 32 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 12.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 35 39 2e 39 38 3b 32 30 37 000.09=59.98;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 42 45 38 31 35 38 38 46 32 45 38 30 33 36 46 =BE81588F2E8036F 02a0 31 42 38 46 38 41 42 35 35 37 30 36 30 46 37 41 1B8F8AB557060F7A 02b0 37 0a 4d 44 3d 63 39 65 32 36 64 37 38 34 62 32 7.MD=c9e26d784b2 02c0 34 32 33 62 65 64 63 30 64 38 30 33 38 62 31 61 423bedc0d8038b1a 02d0 39 31 61 31 38 0a 3c 2f 42 4f 44 59 3e 0a 91a18.</BODY>. No. Time Source Destination Protocol Length Info 19605 238.741719 192.168.10.32 192.168.10.255 UDP 776 Source port: 38302 Destination port: apc-3052 Frame 19605: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 31 3a 30 30 3a 30 30 0a 53 52 3d 30 31 31 =21:00:00.SR=011 0060 35 45 37 0a 53 55 3d 34 34 38 35 0a 52 44 3d 35 5E7.SU=4485.RD=5 0070 34 39 33 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 493.TA=192.168.1 0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 37 .4C=207.3.50=037 00c0 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 .0.43=028.5.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 30 3a 1/19/07.6A=0050: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 746005481 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 35 39 2e 39 38 0a 34 44 3d .46=59.98.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 207.3.4E=205.9.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 36 2e 30 0a 36 37 =000.42=216.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 33 31 2e 30 0a 32 46 3d 31 35 2e .5C=031.0.2F=15. 01d0 31 32 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 12.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 35 39 2e 39 38 3b 32 30 37 000.09=59.98;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 42 45 38 31 35 38 38 46 32 45 38 30 33 36 46 =BE81588F2E8036F 02a0 31 42 38 46 38 41 42 35 35 37 30 36 30 46 37 41 1B8F8AB557060F7A 02b0 37 0a 4d 44 3d 63 39 65 32 36 64 37 38 34 62 32 7.MD=c9e26d784b2 02c0 34 32 33 62 65 64 63 30 64 38 30 33 38 62 31 61 423bedc0d8038b1a 02d0 39 31 61 31 38 0a 3c 2f 42 4f 44 59 3e 0a 91a18.</BODY>. No. Time Source Destination Protocol Length Info 19606 238.780020 190.64.179.242 192.168.10.207 SMTP 99 C: MAIL FROM: <uqucomposition@xxxxxxxxxxxx> Frame 19606: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.64.179.242 (190.64.179.242), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 44375 (44375), Dst Port: smtp (25), Seq: 52, Ack: 171, Len: 45 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19607 238.780266 192.168.10.207 190.64.179.242 SMTP 109 S: 250 2.1.0 [email protected] OK Frame 19607: 109 bytes on wire (872 bits), 109 bytes captured (872 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.64.179.242 (190.64.179.242) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 44375 (44375), Seq: 171, Ack: 97, Len: 55 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19608 238.780291 190.64.179.242 192.168.10.207 TCP 60 44375 > smtp [ACK] Seq=97 Ack=226 Win=93214 Len=0 Frame 19608: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.64.179.242 (190.64.179.242), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 44375 (44375), Dst Port: smtp (25), Seq: 97, Ack: 226, Len: 0 No. Time Source Destination Protocol Length Info 19609 238.793170 192.168.10.142 192.168.10.185 VNC 113 [TCP Retransmission] Authentication result Frame 19609: 113 bytes on wire (904 bits), 113 bytes captured (904 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40103, Ack: 257229, Len: 59 Virtual Network Computing No. Time Source Destination Protocol Length Info 19610 238.800016 192.168.10.185 192.168.10.142 VNC 145 Authentication result Frame 19610: 145 bytes on wire (1160 bits), 145 bytes captured (1160 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 257229, Ack: 40162, Len: 91 Virtual Network Computing No. Time Source Destination Protocol Length Info 19611 238.824844 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 19611: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40162, Ack: 257320, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 19612 238.848070 192.168.10.31 192.168.10.255 UDP 778 Source port: 50764 Destination port: apc-3052 Frame 19612: 778 bytes on wire (6224 bits), 778 bytes captured (6224 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (736 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 35 32 3a 32 30 0a 53 52 3d 31 30 37 =19:52:20.SR=107 0060 43 0a 53 55 3d 32 44 38 33 31 33 33 37 0a 52 44 C.SU=2D831337.RD 0070 3d 32 41 42 31 0a 54 41 3d 31 39 32 2e 31 36 38 =2AB1.TA=192.168 0080 2e 31 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d .10.255.UC=1.SD= 0090 30 0a 53 4d 3d 32 0a 34 46 3d 32 30 37 2e 30 0a 0.SM=2.4F=207.0. 00a0 35 31 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 51=08.7E=00.3E=0 00b0 30 32 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 02.4C=207.3.50=0 00c0 33 33 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 33.0.43=029.1.78 00d0 3d 31 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 =11/19/07.6A=005 00e0 37 3a 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 7:.47=S.63=UPS_I 00f0 44 45 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d DEN.66=100.0.58= 0100 4e 4f 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a NO.56=5YW.39=FF. 0110 32 37 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 27=00.38=00.6E=I 0120 53 30 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 S0746005443 .6D 0130 3d 31 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 =11/19/07.01=Sma 0140 72 74 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 rt-UPS RT 10000 0150 58 4c 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 XL .46=60.00.4 0160 44 3d 32 30 37 2e 33 0a 34 45 3d 32 30 37 2e 33 D=207.3.4E=207.3 0170 0a 34 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 .45=336.75=229.6 0180 43 3d 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 C=146.65=00.6F=2 0190 30 38 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 08.71=02.70=020. 01a0 37 32 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 72=000.42=217.0. 01b0 36 37 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 67=192.62=476.17 01c0 2e 57 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 .W.5C=028.0.2F=1 01d0 33 2e 39 30 0a 31 36 3d 41 0a 30 35 3d 30 30 30 3.90.16=A.05=000 01e0 30 30 30 30 30 0a 30 39 3d 35 39 2e 39 38 3b 32 00000.09=59.98;2 01f0 30 37 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 07.3.6B=0.81E2=A 0200 55 54 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 UTO .MC=1.E0=0.E 0210 31 3d 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 1=0.E2=0.E3=0.E8 0220 3d 30 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d =0.E9=0.I0=2.I1= 0230 30 30 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 00.I2=01.I3=0.I4 0240 3d 30 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d =0.I5=0.I6=0.I7= 0250 30 0a 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 0.I8=Int Contact 0260 20 31 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 1.I9=0.IA=Int C 0270 6f 6e 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 ontact 2.IB=0.IC 0280 3d 49 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a =Int Relay.ID=0. 0290 53 48 3d 33 34 46 33 38 36 45 46 39 41 46 41 43 SH=34F386EF9AFAC 02a0 42 38 33 39 31 44 36 36 37 44 36 36 36 30 36 42 B8391D667D66606B 02b0 39 41 33 0a 4d 44 3d 66 64 64 36 63 38 31 30 63 9A3.MD=fdd6c810c 02c0 32 39 65 36 66 38 65 65 38 66 33 34 35 39 33 30 29e6f8ee8f345930 02d0 66 37 31 30 33 35 65 0a 3c 2f 42 4f 44 59 3e 0a f71035e.</BODY>. No. Time Source Destination Protocol Length Info 19613 238.848148 192.168.10.31 192.168.10.255 UDP 778 Source port: 50764 Destination port: apc-3052 Frame 19613: 778 bytes on wire (6224 bits), 778 bytes captured (6224 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (736 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 35 32 3a 32 30 0a 53 52 3d 31 30 37 =19:52:20.SR=107 0060 43 0a 53 55 3d 32 44 38 33 31 33 33 37 0a 52 44 C.SU=2D831337.RD 0070 3d 32 41 42 31 0a 54 41 3d 31 39 32 2e 31 36 38 =2AB1.TA=192.168 0080 2e 31 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d .10.255.UC=1.SD= 0090 30 0a 53 4d 3d 32 0a 34 46 3d 32 30 37 2e 30 0a 0.SM=2.4F=207.0. 00a0 35 31 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 51=08.7E=00.3E=0 00b0 30 32 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 02.4C=207.3.50=0 00c0 33 33 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 33.0.43=029.1.78 00d0 3d 31 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 =11/19/07.6A=005 00e0 37 3a 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 7:.47=S.63=UPS_I 00f0 44 45 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d DEN.66=100.0.58= 0100 4e 4f 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a NO.56=5YW.39=FF. 0110 32 37 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 27=00.38=00.6E=I 0120 53 30 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 S0746005443 .6D 0130 3d 31 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 =11/19/07.01=Sma 0140 72 74 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 rt-UPS RT 10000 0150 58 4c 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 XL .46=60.00.4 0160 44 3d 32 30 37 2e 33 0a 34 45 3d 32 30 37 2e 33 D=207.3.4E=207.3 0170 0a 34 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 .45=336.75=229.6 0180 43 3d 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 C=146.65=00.6F=2 0190 30 38 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 08.71=02.70=020. 01a0 37 32 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 72=000.42=217.0. 01b0 36 37 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 67=192.62=476.17 01c0 2e 57 0a 35 43 3d 30 32 38 2e 30 0a 32 46 3d 31 .W.5C=028.0.2F=1 01d0 33 2e 39 30 0a 31 36 3d 41 0a 30 35 3d 30 30 30 3.90.16=A.05=000 01e0 30 30 30 30 30 0a 30 39 3d 35 39 2e 39 38 3b 32 00000.09=59.98;2 01f0 30 37 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 07.3.6B=0.81E2=A 0200 55 54 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 UTO .MC=1.E0=0.E 0210 31 3d 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 1=0.E2=0.E3=0.E8 0220 3d 30 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d =0.E9=0.I0=2.I1= 0230 30 30 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 00.I2=01.I3=0.I4 0240 3d 30 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d =0.I5=0.I6=0.I7= 0250 30 0a 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 0.I8=Int Contact 0260 20 31 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 1.I9=0.IA=Int C 0270 6f 6e 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 ontact 2.IB=0.IC 0280 3d 49 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a =Int Relay.ID=0. 0290 53 48 3d 33 34 46 33 38 36 45 46 39 41 46 41 43 SH=34F386EF9AFAC 02a0 42 38 33 39 31 44 36 36 37 44 36 36 36 30 36 42 B8391D667D66606B 02b0 39 41 33 0a 4d 44 3d 66 64 64 36 63 38 31 30 63 9A3.MD=fdd6c810c 02c0 32 39 65 36 66 38 65 65 38 66 33 34 35 39 33 30 29e6f8ee8f345930 02d0 66 37 31 30 33 35 65 0a 3c 2f 42 4f 44 59 3e 0a f71035e.</BODY>. No. Time Source Destination Protocol Length Info 19614 238.866130 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 19614: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16675, Ack: 1227154, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19615 238.866155 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1227154 Ack=16717 Win=46342 Len=0 Frame 19615: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1227154, Ack: 16717, Len: 0 No. Time Source Destination Protocol Length Info 19616 238.871963 188.161.220.86 192.168.10.207 TCP 60 45100 > smtp [RST, ACK] Seq=67 Ack=436 Win=93006 Len=0 Frame 19616: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45100 (45100), Dst Port: smtp (25), Seq: 67, Ack: 436, Len: 0 No. Time Source Destination Protocol Length Info 19617 238.872056 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:48:16 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45100 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 19617: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:16 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45100 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 19618 238.876719 188.161.220.86 192.168.10.207 TCP 62 45131 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 19618: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45131 (45131), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 19619 238.876760 192.168.10.207 188.161.220.86 TCP 62 smtp > 45131 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 19619: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45131 (45131), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 19620 238.893508 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1253054720, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 19620: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19621 238.893525 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1253054720, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 19621: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19622 238.893533 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1253054720, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 19622: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19623 238.893541 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1253054720, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 19623: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19624 238.894778 14.97.186.55 192.168.10.207 TCP 62 13573 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 19624: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13573 (13573), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 19625 238.894814 192.168.10.207 14.97.186.55 TCP 62 smtp > 13573 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 19625: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 14.97.186.55 (14.97.186.55) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 13573 (13573), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 19626 238.909855 192.168.10.207 180.243.236.205 TCP 62 smtp > unizensus [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 19626: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: unizensus (1151), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 19627 238.911428 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3122135296, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 19627: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19628 238.911442 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3122135296, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 19628: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19629 238.911450 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3122135296, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 19629: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19630 238.911458 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3122135296, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 19630: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19631 238.943107 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=257320 Ack=40194 Win=65444 Len=0 Frame 19631: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 257320, Ack: 40194, Len: 0 No. Time Source Destination Protocol Length Info 19632 239.019970 192.168.10.1 192.168.10.245 Syslog 314 LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.64.179.242 7x.x.x.3 44375 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="uqucomposition@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 19632: 314 bytes on wire (2512 bits), 314 bytes captured (2512 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.64.179.242 7x.x.x.3 44375 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 19633 239.181038 188.161.220.86 192.168.10.207 TCP 60 45131 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 19633: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45131 (45131), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 19634 239.181142 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45131 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 19634: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45131 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 19635 239.181235 192.168.10.207 188.161.220.86 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:47:51 -0400 Frame 19635: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45131 (45131), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19636 239.181335 188.161.220.86 192.168.10.207 TCP 60 45131 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 19636: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45131 (45131), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 19637 239.194181 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 19637: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 19638 239.209474 180.243.236.205 192.168.10.207 TCP 60 unizensus > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 19638: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: unizensus (1151), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 19639 239.209671 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1151 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 19639: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1151 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 19640 239.209733 192.168.10.207 180.243.236.205 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:47:51 -0400 Frame 19640: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: unizensus (1151), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19641 239.209796 180.243.236.205 192.168.10.207 TCP 60 unizensus > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 19641: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: unizensus (1151), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 19642 239.257421 190.64.179.242 192.168.10.207 TCP 60 44375 > smtp [FIN, ACK] Seq=97 Ack=226 Win=93214 Len=0 Frame 19642: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.64.179.242 (190.64.179.242), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 44375 (44375), Dst Port: smtp (25), Seq: 97, Ack: 226, Len: 0 No. Time Source Destination Protocol Length Info 19643 239.257482 192.168.10.207 190.64.179.242 TCP 60 smtp > 44375 [ACK] Seq=226 Ack=98 Win=65439 Len=0 Frame 19643: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.64.179.242 (190.64.179.242) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 44375 (44375), Seq: 226, Ack: 98, Len: 0 No. Time Source Destination Protocol Length Info 19644 239.257620 192.168.10.207 190.64.179.242 TCP 60 smtp > 44375 [FIN, ACK] Seq=226 Ack=98 Win=65439 Len=0 Frame 19644: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.64.179.242 (190.64.179.242) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 44375 (44375), Seq: 226, Ack: 98, Len: 0 No. Time Source Destination Protocol Length Info 19645 239.257668 190.64.179.242 192.168.10.207 TCP 60 44375 > smtp [ACK] Seq=98 Ack=227 Win=93214 Len=0 Frame 19645: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 190.64.179.242 (190.64.179.242), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 44375 (44375), Dst Port: smtp (25), Seq: 98, Ack: 227, Len: 0 No. Time Source Destination Protocol Length Info 19646 239.257871 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.64.179.242 7x.x.x.3 44375 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 19646: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.64.179.242 7x.x.x.3 44375 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 19647 239.315654 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 19647: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 19648 239.344457 192.168.10.246 65.32.1.65 DNS 87 Standard query PTR 11.231.152.119.in-addr.arpa Frame 19648: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 57740 (57740), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 19649 239.360546 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 19649: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 19650 239.360565 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 19650: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 19651 239.390717 Pronet_a6:aa:f5 Broadcast ARP 60 Gratuitous ARP for 192.168.10.40 (Request) Frame 19651: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Pronet_a6:aa:f5 (00:20:4a:a6:aa:f5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 19652 239.390739 Pronet_a6:aa:f5 Broadcast ARP 60 Gratuitous ARP for 192.168.10.40 (Request) Frame 19652: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Pronet_a6:aa:f5 (00:20:4a:a6:aa:f5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 19653 239.443891 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 19653: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 19654 239.463529 65.32.1.65 192.168.10.246 DNS 176 Standard query response, No such name Frame 19654: 176 bytes on wire (1408 bits), 176 bytes captured (1408 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 57740 (57740) Domain Name System (response) No. Time Source Destination Protocol Length Info 19655 239.464162 192.168.10.203 119.152.231.11 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 19655: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 119.152.231.11 (119.152.231.11) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 19656 239.465608 Watchgua_3c:4c:d8 Dell_44:d0:9e ARP 60 Who has 192.168.10.246? Tell 192.168.10.1 Frame 19656: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19657 239.465710 Dell_44:d0:9e Watchgua_3c:4c:d8 ARP 60 192.168.10.246 is at 84:2b:2b:44:d0:9e Frame 19657: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19658 239.490177 188.161.220.86 192.168.10.207 SMTP 70 C: EHLO udgqu.com Frame 19658: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45131 (45131), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 16 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19659 239.490331 192.168.10.207 188.161.220.86 SMTP 245 S: 250-mail.mydomain.com Hello [188.161.220.86] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 19659: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45131 (45131), Seq: 122, Ack: 17, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19660 239.490358 188.161.220.86 192.168.10.207 TCP 60 45131 > smtp [ACK] Seq=17 Ack=313 Win=93128 Len=0 Frame 19660: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45131 (45131), Dst Port: smtp (25), Seq: 17, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 19661 239.490664 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45131 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 19661: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45131 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 19662 239.490779 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45131 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 19662: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45131 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 19663 239.490904 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45131 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 19663: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45131 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 19664 239.491067 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45131 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 19664: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45131 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 19665 239.491164 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45131 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 19665: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45131 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 19666 239.491288 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45131 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 19666: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45131 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 19667 239.515298 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 19667: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16717, Ack: 1227154, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19668 239.515327 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1227154 Ack=16759 Win=46321 Len=0 Frame 19668: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1227154, Ack: 16759, Len: 0 No. Time Source Destination Protocol Length Info 19669 239.527562 180.243.236.205 192.168.10.207 SMTP 72 C: EHLO vbrvlgr.com Frame 19669: 72 bytes on wire (576 bits), 72 bytes captured (576 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: unizensus (1151), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 18 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19670 239.527658 192.168.10.207 180.243.236.205 SMTP 246 S: 250-mail.mydomain.com Hello [180.243.236.205] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 19670: 246 bytes on wire (1968 bits), 246 bytes captured (1968 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: unizensus (1151), Seq: 122, Ack: 19, Len: 192 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19671 239.527714 180.243.236.205 192.168.10.207 TCP 60 unizensus > smtp [ACK] Seq=19 Ack=314 Win=93126 Len=0 Frame 19671: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: unizensus (1151), Dst Port: smtp (25), Seq: 19, Ack: 314, Len: 0 No. Time Source Destination Protocol Length Info 19672 239.528011 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1151 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 19672: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1151 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 19673 239.528174 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1151 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 19673: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1151 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 19674 239.528702 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=205747 Ack=3109 Win=1002 Len=1448 TSval=595129 TSecr=729866 Frame 19674: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 205747, Ack: 3109, Len: 1448 Data (1448 bytes) 0000 17 03 01 22 b0 ce 24 49 b7 8c 88 6c 5d bf 2a e2 ..."..$I...l].*. 0010 af 87 fb 3d 54 c4 1c d3 de 0b e5 b2 a6 27 16 7d ...=T........'.} 0020 9c 16 59 a8 32 eb b9 01 99 ea 59 05 2c 52 62 8e ..Y.2.....Y.,Rb. 0030 ee 27 1e a2 ee e5 ab aa 14 82 a0 1b c1 f3 49 3d .'............I= 0040 63 6a 43 79 da d2 19 3c 97 8a f6 a2 5d 7c e0 fe cjCy...<....]|.. 0050 b7 92 f1 39 a3 e8 e5 88 14 4b 88 8c 16 24 a0 75 ...9.....K...$.u 0060 c9 c2 d8 63 fe 7f e3 cf 3b 49 de f0 2e b7 ab f0 ...c....;I...... 0070 4b fe 37 9c 4f 44 7c 46 e4 93 5a 0c 48 92 1a c0 K.7.OD|F..Z.H... 0080 9e 41 13 d1 dd 1b 6d 0a 27 1b cd 41 4f ca eb c1 .A....m.'..AO... 0090 90 df 6e 97 3f b1 fa 1d 04 6f 52 e3 43 5d d2 41 ..n.?....oR.C].A 00a0 c8 a5 60 61 67 65 39 91 e5 a1 8f 79 54 3f e5 d4 ..`age9....yT?.. 00b0 e0 4b ef 67 de 1e d5 96 e3 2c 3a 86 e6 d1 fc 98 .K.g.....,:..... 00c0 75 27 39 38 bf 4e 5a e4 15 9a 35 17 2c 12 40 a3 u'98.NZ...5.,.@. 00d0 6a b1 ac 5a 94 44 6e 0d ec ca a1 b1 a6 f1 4f a3 j..Z.Dn.......O. 00e0 1f 4c 8a d1 a2 73 ca 0c 7c 96 a2 21 cb ba 6a 40 .L...s..|..!..j@ 00f0 bb 08 6b 01 6c 61 bf 53 7b b3 b9 ba e9 41 0f be ..k.la.S{....A.. 0100 c9 08 47 c8 34 9b 02 8e c0 ff 1c 8f fb 8b 0a 8d ..G.4........... 0110 88 ce 09 56 e7 fe dc ba 0b 73 fb 10 45 93 45 b8 ...V.....s..E.E. 0120 e8 53 15 d3 45 f1 cd b4 75 a5 17 8f bd b0 2d 6e .S..E...u.....-n 0130 e1 b5 1f fd 65 1c c3 d9 c3 6c b8 c7 fa 2a e9 7a ....e....l...*.z 0140 32 db 39 77 6b 03 73 8c d9 d4 59 58 3e fd b6 6a 2.9wk.s...YX>..j 0150 78 46 95 8a c2 bb 81 da f3 a0 ba 6a 1c 87 a8 65 xF.........j...e 0160 e5 6f 84 ed 8e 18 95 6d a8 34 e4 60 b4 49 bc fe .o.....m.4.`.I.. 0170 cf ac f4 ee f9 fa 2f 23 c1 e0 d0 33 d1 78 20 30 ....../#...3.x 0 0180 f5 16 87 de 2e 2b c7 63 73 7f 45 93 48 7b 43 2e .....+.cs.E.H{C. 0190 ae 17 a8 78 b3 65 e0 9e 03 d6 e4 9d f0 8c 8a 3b ...x.e.........; 01a0 63 c5 be 37 4e 2d 9e 83 3a 2a f2 ec 20 31 7a 6c c..7N-..:*.. 1zl 01b0 01 4b d3 6e c7 09 36 5a b6 e4 7b 24 89 a5 04 c3 .K.n..6Z..{$.... 01c0 a1 7a 78 5a 90 dc 04 8c 8d af eb 42 53 68 0a 5a .zxZ.......BSh.Z 01d0 24 66 5e 29 fe 89 15 5e 41 94 3e 12 16 82 56 71 $f^)...^A.>...Vq 01e0 fd 9a bd 5a 46 cd d9 6e e4 8f 78 79 3a ff 77 c9 ...ZF..n..xy:.w. 01f0 5e b6 19 8f f6 34 ff 6c 05 3d be bd 54 3d b8 aa ^....4.l.=..T=.. 0200 b8 46 85 6e 51 81 24 4b 84 4e 85 53 6b ae 36 a2 .F.nQ.$K.N.Sk.6. 0210 83 fa 4b a3 9e 96 83 17 8a 1c 5d 5e 77 98 49 1a ..K.......]^w.I. 0220 57 6d fe 3d 23 16 27 fe a3 bf dc 30 ee 41 1b 5b Wm.=#.'....0.A.[ 0230 a6 32 55 b7 3e 96 a6 93 ac 9b 95 4c 7b 53 d6 6f .2U.>......L{S.o 0240 03 a5 b5 9a 58 a1 f9 d0 74 11 4b c0 6f fc e1 74 ....X...t.K.o..t 0250 fe bb 15 c2 40 27 76 89 64 bd 20 d0 1b f5 12 aa ....@'v.d. ..... 0260 b7 c4 6f 4b 29 e1 3d 7a ff 46 15 f6 8f d9 f9 6f ..oK).=z.F.....o 0270 81 2f 9a a6 77 cf f1 a2 d0 cd 73 c8 54 f0 a2 7a ./..w.....s.T..z 0280 85 e5 cd de b4 a8 bc 30 d8 ae d5 56 18 f2 65 43 .......0...V..eC 0290 db 0a 0d b6 95 eb 3d 4f d4 de 4e b0 c6 fa cc e2 ......=O..N..... 02a0 1e 65 5c 81 a8 07 e4 1f d8 f6 d3 f9 62 0d 66 4f .e\.........b.fO 02b0 b4 ca c8 37 a9 7a 94 0f 1d 53 f5 9e 1c b5 0a af ...7.z...S...... 02c0 9d 8c 6f 78 cb 85 da 18 fe f7 63 4b f1 82 89 9d ..ox......cK.... 02d0 c9 45 83 32 79 e2 ae 83 16 4e d1 20 2a 47 20 49 .E.2y....N. *G I 02e0 7a b7 9d 27 98 91 8e d1 7e c0 be 9d 51 a4 11 07 z..'....~...Q... 02f0 ba 27 4f 29 05 14 4b 13 a6 02 83 dd 60 a0 b4 94 .'O)..K.....`... 0300 ab 45 7e 00 e0 3e d4 74 25 64 b0 3f f9 d5 20 e5 .E~..>.t%d.?.. . 0310 f3 21 b7 30 f5 e0 bf f4 cf 0d 13 78 3d f1 e7 3d .!.0.......x=..= 0320 57 35 e5 da 2d 08 83 84 b0 af c4 a6 76 0e 6a 07 W5..-.......v.j. 0330 23 e6 ed 28 47 07 ba 8d bc 57 5b 87 41 0b d7 5c #..(G....W[.A..\ 0340 09 b9 d7 a1 a4 53 58 c2 54 fb 8a 44 ea 6c 1d 40 .....SX.T..D.l.@ 0350 39 3e b1 db ea 04 e7 02 da 11 cc 41 84 89 fa 0c 9>.........A.... 0360 4d 09 05 08 65 2f 64 63 5a ec 35 85 bd 45 35 b4 M...e/dcZ.5..E5. 0370 68 3c 46 17 67 c9 bb 8a 97 4c 28 27 a3 40 aa 2b h<F.g....L('.@.+ 0380 2b 6d da 12 b9 ea ae 06 f9 ed c3 80 60 11 68 f3 +m..........`.h. 0390 0d f0 61 f3 a8 4e eb 26 0d 4a a9 ae ad da e1 c2 ..a..N.&.J...... 03a0 89 ed 22 1f 45 31 a9 50 3c 01 ea e9 ce c2 c5 ec ..".E1.P<....... 03b0 bd d5 af b2 82 ec 88 37 57 d3 2b 5e 03 3b ca 82 .......7W.+^.;.. 03c0 ec 4c f9 51 b1 f1 e0 9e bf 9f dd 9e 24 2e eb 8c .L.Q........$... 03d0 17 cd 1e 75 6b 19 24 83 15 89 d9 0a 4b 48 65 fb ...uk.$.....KHe. 03e0 7d 1b d7 d6 ad ea 83 a8 24 ae 78 3b 34 31 5f fb }.......$.x;41_. 03f0 3e 91 fa f2 42 e2 8b 36 e1 1d ac 29 57 70 87 98 >...B..6...)Wp.. 0400 d4 96 2e 08 d8 28 3b e1 4f bd 23 bc 9d 39 51 e5 .....(;.O.#..9Q. 0410 5f 9d 89 95 ce 61 91 5e d5 7f d5 ac a2 08 33 ba _....a.^......3. 0420 b8 64 81 79 32 33 20 a6 61 44 39 8a 12 19 2d 15 .d.y23 .aD9...-. 0430 3f ac ce ca a2 58 92 74 fd f4 47 85 33 df 9d 7a ?....X.t..G.3..z 0440 55 c5 89 9f 76 95 38 ba ac b8 e7 93 cd 71 43 97 U...v.8......qC. 0450 96 ae d2 23 a5 44 fc 93 44 b1 24 ae 77 68 a5 dc ...#.D..D.$.wh.. 0460 d0 03 b6 ff e9 a5 b5 10 89 57 65 e5 31 c5 f8 bc .........We.1... 0470 af fd 7b 85 30 b3 da d1 d8 d7 58 82 a4 05 d9 4b ..{.0.....X....K 0480 ab 94 4f 82 7f c4 ae 23 2e 05 85 7c 32 cb 15 56 ..O....#...|2..V 0490 99 8a f7 3d 75 2d b0 51 60 8d 85 ee 86 78 59 02 ...=u-.Q`....xY. 04a0 91 3a 15 e9 75 a1 af e5 91 a8 43 58 6b ee f7 6e .:..u.....CXk..n 04b0 41 e3 12 ef 65 ef 53 07 c1 02 8b a0 5c de 6f 9d A...e.S.....\.o. 04c0 4b e7 e8 71 1e b9 a5 0f 30 a5 3f f6 b9 72 32 9e K..q....0.?..r2. 04d0 16 16 1f 3b b9 7e 53 14 67 4f 31 8f 1e ff c7 6e ...;.~S.gO1....n 04e0 b2 d2 ab 4c 09 5e cb 16 7b 78 8f b4 26 1b 32 b5 ...L.^..{x..&.2. 04f0 28 9e c4 d5 da fd 4b 67 4d 38 40 53 ef ec 9a cb (.....KgM8@S.... 0500 a2 86 df b2 96 ca 8a 30 43 2b b0 51 2d 7b ae a3 .......0C+.Q-{.. 0510 8b 5a a8 88 6f c3 fc 5f 59 74 96 56 85 2b d6 fc .Z..o.._Yt.V.+.. 0520 9f 74 fc bd 8c cc be 74 19 0f 60 0d fd 7e 5d 4c .t.....t..`..~]L 0530 a9 bd e3 c8 b1 00 3d 07 25 27 4b bf 03 b5 de 33 ......=.%'K....3 0540 0e ae 1f d2 95 ad 11 9b fa ff 44 b2 f5 62 08 ea ..........D..b.. 0550 26 39 b8 dd a5 0f 36 33 d1 53 00 d1 ba 64 11 98 &9....63.S...d.. 0560 d2 32 34 72 e4 5e 05 78 9b f6 6e b2 3d 31 31 e4 .24r.^.x..n.=11. 0570 6a f0 6d 00 50 e8 4b 45 fe 44 d4 9b d6 55 e9 0e j.m.P.KE.D...U.. 0580 76 b8 09 99 79 37 94 a5 10 8c d1 5d 4c a6 b6 aa v...y7.....]L... 0590 0a e0 d6 71 ac db 7a 7d 01 d2 d1 e0 89 4a 11 c4 ...q..z}.....J.. 05a0 d1 c8 42 79 f4 ef a6 84 ..By.... No. Time Source Destination Protocol Length Info 19675 239.528758 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=207195 Ack=3109 Win=1002 Len=1448 TSval=595129 TSecr=729866 Frame 19675: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 207195, Ack: 3109, Len: 1448 Data (1448 bytes) 0000 38 34 c5 d4 ba e0 15 40 55 eb 75 c5 e4 ac 58 9a [email protected]. 0010 47 1d 74 1c fe 98 e6 6c 13 09 41 0a eb b2 db cb G.t....l..A..... 0020 d3 d0 c5 ca 46 4e d5 8a 09 10 d5 f1 0c c3 74 75 ....FN........tu 0030 66 f0 2d 6f de ea a2 cd 49 b0 d2 d2 76 fe 1c 7f f.-o....I...v... 0040 6d c6 5c 80 51 d5 f8 6e 33 4a cf 17 4b a1 88 fd m.\.Q..n3J..K... 0050 0b 7a d9 34 f0 c2 03 3c d3 ef 60 b9 66 c2 5d de .z.4...<..`.f.]. 0060 b5 70 c6 b5 ef f9 fb b1 1f 5b af 99 98 6a fd 0c .p.......[...j.. 0070 8d 78 66 05 10 2e 6a 04 94 b4 2a 15 9c c3 c7 eb .xf...j...*..... 0080 31 93 8d 68 df f0 6f 60 5c fe 5a a8 12 b5 ae 70 1..h..o`\.Z....p 0090 9a 84 a9 87 7d de c8 7f ff 7b 64 f0 69 50 70 58 ....}....{d.iPpX 00a0 98 1c 89 d2 94 2a ea f8 1f ab 20 d1 85 ec cd 0d .....*.... ..... 00b0 23 08 93 34 cb e4 2e 50 c5 e2 5d 2c e2 90 fe 41 #..4...P..],...A 00c0 07 06 67 a3 c3 11 e9 6e a1 81 c8 f4 9d 2a 49 10 ..g....n.....*I. 00d0 d2 2d 8e 35 04 d4 6a df 68 0a 6a c9 b2 1f 82 cd .-.5..j.h.j..... 00e0 60 fe 39 13 17 44 3c 7d 9f a7 25 58 01 53 e6 4f `.9..D<}..%X.S.O 00f0 fe a1 bb 42 76 fa 2a 8a 10 80 46 a9 8a e7 91 2f ...Bv.*...F..../ 0100 2a df 59 a2 80 d6 b6 0e 77 26 66 1b 87 04 1c 8e *.Y.....w&f..... 0110 77 c3 4c 92 4c f0 cb a3 16 74 89 7a 37 a3 5e e3 w.L.L....t.z7.^. 0120 77 d9 e6 c6 ec 90 ca 36 04 49 67 4e 7c 9f 34 1f w......6.IgN|.4. 0130 a2 47 f5 42 cf 79 34 b8 ef 50 1f 2c e1 36 8a f7 .G.B.y4..P.,.6.. 0140 8e f6 7a f5 9c 2b 8d 88 a7 7d fe ad 06 fa 9f 87 ..z..+...}...... 0150 b7 13 03 7d 0c 4e 95 46 02 b9 66 fb f5 03 cb 82 ...}.N.F..f..... 0160 e8 cf e7 54 a6 60 83 67 25 40 5e 8a b7 44 98 2a ...T.`.g%@^..D.* 0170 b5 a8 a3 2b d3 c7 17 dd 14 b6 a0 00 be 7f ff c3 ...+............ 0180 08 af 89 d9 fd 6d 36 81 72 1a 67 6a a4 bc 52 c3 .....m6.r.gj..R. 0190 9c 66 62 71 d3 79 62 72 76 c3 87 80 fc 8a c0 38 .fbq.ybrv......8 01a0 83 24 05 90 1b 81 81 e9 f0 cc f1 29 e2 67 08 37 .$.........).g.7 01b0 43 4c 3c 87 c2 27 4d 8b 1b 64 b0 46 3e 12 9e e4 CL<..'M..d.F>... 01c0 08 f7 03 a6 46 36 3f 39 36 f9 ff 75 50 a3 31 1c ....F6?96..uP.1. 01d0 33 ef 8a 59 10 47 26 26 c7 86 f0 ef 03 1c 6f 4d 3..Y.G&&......oM 01e0 2b a5 45 9c cc d9 71 78 f1 1a 10 16 86 e7 3d 50 +.E...qx......=P 01f0 80 7c 13 71 0f 04 88 62 7c 3b 66 34 11 f0 3d 14 .|.q...b|;f4..=. 0200 27 a9 7e fc 23 0e ea 87 8f 34 87 2c e2 77 96 b0 '.~.#....4.,.w.. 0210 96 b6 d0 c0 16 6c 0e 63 16 16 fd b0 80 e5 07 72 .....l.c.......r 0220 6c cb 39 e2 ba d2 0d 4b 6b e8 2f 58 87 88 82 a2 l.9....Kk./X.... 0230 d3 68 c1 55 13 31 25 3f 37 a8 1f ec 4b be 3b 57 .h.U.1%?7...K.;W 0240 af ea 7b 0e a3 14 67 66 a6 3d f5 82 e9 d9 02 65 ..{...gf.=.....e 0250 29 fb 25 31 1f 2a 6c 3d 00 8c 87 1c 5c 07 5d d0 ).%1.*l=....\.]. 0260 32 c4 67 aa 24 1f dd a8 83 61 1a 1e 19 38 b5 3d 2.g.$....a...8.= 0270 51 47 34 e0 7a d6 9c 63 19 70 7b ac c2 2d f6 56 QG4.z..c.p{..-.V 0280 24 86 a3 79 30 57 22 aa 45 4a cb 14 af 64 71 1c $..y0W".EJ...dq. 0290 42 fb d3 f6 59 7c 82 1f cb a9 03 ce 07 b7 85 4f B...Y|.........O 02a0 a1 21 9c b3 2b fa 0d 7c 99 13 e7 ab 6f 04 aa 10 .!..+..|....o... 02b0 47 87 28 73 2b 61 cc 7c c2 f2 be 3e e4 a9 e6 dc G.(s+a.|...>.... 02c0 a8 6d ef 65 29 b7 a6 09 b0 fa 74 ab ba e3 e4 d1 .m.e).....t..... 02d0 a6 17 20 5d ee c5 74 49 30 be b2 0f 3e 52 42 c5 .. ]..tI0...>RB. 02e0 98 1e 21 69 6f 12 a8 ad 09 d7 2d a4 c4 8d 83 87 ..!io.....-..... 02f0 48 2b c5 23 11 8f 77 2e de 68 dd a7 4c 57 5e 9f H+.#..w..h..LW^. 0300 af 06 22 24 1c c8 78 c7 7e b4 ae 9b b0 3d 75 74 .."$..x.~....=ut 0310 21 e1 10 cf 4e ba 8f aa 5c 11 85 02 2c b3 72 d0 !...N...\...,.r. 0320 4f d5 43 d7 30 89 75 73 97 39 ae 6f da 84 ab c1 O.C.0.us.9.o.... 0330 58 61 3a 6e a1 ca fc 0a 97 1e 82 69 04 37 b4 04 Xa:n.......i.7.. 0340 91 cf f4 c2 65 6a 64 56 59 e0 41 2d dc 00 fd da ....ejdVY.A-.... 0350 b9 86 9f 16 e1 5c 89 9a ce 34 a4 8b 2a 3c 9e 40 .....\...4..*<.@ 0360 9c 66 8a 3b cf 4a 28 f1 8b 7c 70 22 cf fd d4 c7 .f.;.J(..|p".... 0370 8c 1e 1a 60 df 68 0c 76 2b 9b 22 80 27 70 77 00 ...`.h.v+.".'pw. 0380 7e 36 04 25 90 07 7a 79 de e2 d6 76 f2 1f 13 dc ~6.%..zy...v.... 0390 fc 81 1d 93 7f 79 9f ff de 34 20 08 59 84 5e b9 .....y...4 .Y.^. 03a0 88 2d ad 28 d4 23 d0 0a 4a 9c 6d 2b 84 72 7a 89 .-.(.#..J.m+.rz. 03b0 03 e3 a5 1b c1 7f fb f8 87 5e 99 69 7c 7f 99 f7 .........^.i|... 03c0 35 6c 4d 60 eb dd 08 a1 1f f3 e6 53 30 bb 38 e6 5lM`.......S0.8. 03d0 04 3f bc be f5 e6 e7 78 0a 61 86 45 1a 22 0d d0 .?.....x.a.E.".. 03e0 83 41 b9 51 d7 00 9a 93 49 6f 42 8c 7d 49 59 12 .A.Q....IoB.}IY. 03f0 d0 42 37 67 f8 d0 ad 89 2c 6f b6 c1 83 05 6b 1a .B7g....,o....k. 0400 52 fe 94 cb 94 a5 9d 05 73 5a 50 56 c0 e8 3e 18 R.......sZPV..>. 0410 00 f6 b3 d4 8a a5 57 bd 13 90 c7 c7 29 1c c9 36 ......W.....)..6 0420 d0 6d 98 54 b4 3c b7 a6 2c 3a 27 26 d1 3c 41 2b .m.T.<..,:'&.<A+ 0430 d4 57 5f d6 da 70 fa 10 be a7 fe 9e 4a c3 85 9b .W_..p......J... 0440 25 83 23 e2 fc 07 a3 da cf 83 b5 99 d4 a6 b5 80 %.#............. 0450 44 fc 6d 35 60 b4 24 b1 fe 36 0e 0f 4b 56 e2 e3 D.m5`.$..6..KV.. 0460 34 b7 66 2b e1 1e ff c7 52 5f 79 12 d0 37 18 11 4.f+....R_y..7.. 0470 e1 20 0c af dd af fd ab 00 79 49 37 8a 3a 9e 49 . .......yI7.:.I 0480 c7 64 79 71 a4 e4 92 ad 8f b6 64 51 97 b2 ef d2 .dyq......dQ.... 0490 4c 19 a4 fb 1d 15 3d b0 e5 db 08 c1 50 7b cc bc L.....=.....P{.. 04a0 ed 54 82 d5 4e 61 f9 32 a1 70 a3 e4 42 74 d4 03 .T..Na.2.p..Bt.. 04b0 44 87 5e 06 f0 8f f4 63 e1 ad c2 c9 d5 ed f5 e8 D.^....c........ 04c0 57 ca 77 09 42 dd 8e 7f 44 1d 6f a3 89 e6 52 03 W.w.B...D.o...R. 04d0 ff 8c 16 e4 01 a8 44 97 25 0f dd 9e 7f d7 3a 01 ......D.%.....:. 04e0 65 67 de a6 f7 96 be f5 1b ac 56 98 0f 5a e7 c7 eg........V..Z.. 04f0 d1 68 41 09 93 a2 ec ae e4 ed 5b b9 ac 3f 1a 9c .hA.......[..?.. 0500 11 f1 41 ff 4a 30 90 7e c5 29 6e 4c 43 ff 40 a1 ..A.J0.~.)nLC.@. 0510 25 52 1f 10 f9 95 62 75 f5 c5 86 78 6c fa e1 ef %R....bu...xl... 0520 b2 56 07 1d c4 73 f4 4a cc 52 a4 d4 2a 07 c1 3b .V...s.J.R..*..; 0530 57 a4 96 4d a8 fb 20 e3 4f 73 e6 d6 24 87 bc 70 W..M.. .Os..$..p 0540 06 23 44 dc 04 99 fa 0a 7e de 44 36 65 72 bc fe .#D.....~.D6er.. 0550 ff 78 2b 56 1f ec 8e 70 e1 5b 32 dc c5 12 bf 8c .x+V...p.[2..... 0560 7a 3b 68 41 59 18 02 b2 68 18 de f5 bb 7b 00 a4 z;hAY...h....{.. 0570 d7 04 71 22 11 60 04 60 9c 1d df ac b2 1d 1b 56 ..q".`.`.......V 0580 89 47 e1 b7 5a 1c d3 cf 20 54 d4 7c 17 fb 9b a8 .G..Z... T.|.... 0590 12 ee 64 21 78 b1 60 9e b9 3a 8d 1e 04 8a 38 f5 ..d!x.`..:....8. 05a0 77 27 ac b0 f6 5e 73 dc w'...^s. No. Time Source Destination Protocol Length Info 19676 239.528804 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=208643 Ack=3109 Win=1002 Len=1448 TSval=595129 TSecr=729866 Frame 19676: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 208643, Ack: 3109, Len: 1448 Data (1448 bytes) 0000 da f7 1a 10 2a a4 15 a4 f7 49 9a 95 c7 df be f7 ....*....I...... 0010 9f e1 e6 b6 f5 f2 e9 1e 8f 91 f6 71 78 d5 9d f4 ...........qx... 0020 b5 19 97 1f 6a 64 f1 4e 56 99 65 31 ed 3f b4 de ....jd.NV.e1.?.. 0030 d1 3a 5a 6a ea 17 d1 c7 02 df eb 68 50 59 9b 09 .:Zj.......hPY.. 0040 bb 42 ef 18 b6 50 81 ba 91 c8 5a 45 8a fd 71 33 .B...P....ZE..q3 0050 ee bb 07 b2 1f 09 af 0c 9f 88 28 a0 a1 6b ba d6 ..........(..k.. 0060 6b 02 2e 38 05 a2 2d eb a3 f8 df 33 e7 66 f7 95 k..8..-....3.f.. 0070 1f 5c e0 29 02 37 6d 82 55 52 e1 0f 2b 11 a8 f5 .\.).7m.UR..+... 0080 35 35 81 4c 6d ae 42 b6 28 8f c6 4c d3 99 c0 9e 55.Lm.B.(..L.... 0090 4a 60 02 8b b9 55 03 8f 9d a4 58 87 cc 0d 1d f8 J`...U....X..... 00a0 7a 0e a6 79 37 3f c7 86 1e 6e ac 28 9a 1c d4 65 z..y7?...n.(...e 00b0 63 c2 3d 67 0f 2d a8 a0 33 65 cd b6 87 76 eb ab c.=g.-..3e...v.. 00c0 a5 3b 39 fb 61 9f a8 d1 b8 f8 50 21 af 3a b6 c7 .;9.a.....P!.:.. 00d0 d0 5e 61 c1 4b 7b e5 a9 b7 ad 5f c7 0c 6f 62 20 .^a.K{...._..ob 00e0 6d 8c 19 a9 3a f1 32 06 8d ba 4d 96 b8 bd 8f 13 m...:.2...M..... 00f0 b1 0b 85 af cf 59 f3 b0 2d 52 0b c4 f5 1c 63 11 .....Y..-R....c. 0100 ae 59 d2 87 ac da 3a ef 1d 65 cb 26 3b e7 e8 49 .Y....:..e.&;..I 0110 60 0c dc c0 57 71 e7 d3 dc 2b 5e c7 34 7e fd 9c `...Wq...+^.4~.. 0120 2b ff 99 40 3a 1e 99 50 55 3d 2d c1 80 ed 9e 21 +..@:..PU=-....! 0130 62 c2 93 85 72 da b1 f1 85 ee ac a8 f9 02 e3 4a b...r..........J 0140 d1 93 88 2f 8c d0 05 79 3c fd b4 7f 91 3b 1b ea .../...y<....;.. 0150 2b d3 e0 ae 6e 6a 9d 4e a8 bc 83 f4 d5 36 cb 88 +...nj.N.....6.. 0160 ea 5f d5 49 8a 0c d6 ac eb 2e b0 33 f2 16 dc 72 ._.I.......3...r 0170 09 46 4b 98 69 f4 94 3c 0c 00 72 69 3d 21 e0 70 .FK.i..<..ri=!.p 0180 eb c9 b9 10 9b 15 17 14 e8 9a f7 cc c2 3d 56 59 .............=VY 0190 42 db 7d 8f 25 0e 7d b3 26 6e 23 c6 fa 20 10 d4 B.}.%.}.&n#.. .. 01a0 9e 1b ef 54 e2 80 d1 8f 60 72 fa cf 80 81 29 d8 ...T....`r....). 01b0 ec e7 65 3f 01 d8 7b b1 30 6c b7 70 e6 1d d2 9d ..e?..{.0l.p.... 01c0 a0 30 8f e1 17 f8 be 19 90 49 71 24 0a e4 aa 10 .0.......Iq$.... 01d0 d4 e6 bf 5f 5c d1 47 47 1b 12 9c cf d1 6c 59 62 ..._\.GG.....lYb 01e0 62 58 4b 01 22 6a 76 dc b4 f4 e4 64 2f 71 9a 82 bXK."jv....d/q.. 01f0 68 5a fa a8 fc 0b 45 4f 76 a9 40 db 84 30 47 01 [email protected]. 0200 29 07 c2 94 5e 61 ff 2c dd 82 63 52 1f a6 82 62 )...^a.,..cR...b 0210 d5 cc 9a b1 69 1c 04 09 6b 47 07 e2 3b 88 7f 0f ....i...kG..;... 0220 fb 45 74 b4 9d 1c 57 90 00 26 9c 22 24 46 89 5a .Et...W..&."$F.Z 0230 dc 4f ac 33 0d c5 9a 67 d3 45 74 73 84 a2 65 49 .O.3...g.Ets..eI 0240 0c e3 4e 31 98 bd c8 d9 0b 80 16 69 12 ac d9 64 ..N1.......i...d 0250 13 8a 8d 24 ab 23 93 af 1f 45 15 4a 60 1a 38 06 ...$.#...E.J`.8. 0260 b8 5f 97 e1 a4 22 c9 0a 51 bc b1 95 67 80 7c 24 ._..."..Q...g.|$ 0270 58 d5 66 7b 6a cc d9 57 76 ba 9c cc 89 2a 7a b2 X.f{j..Wv....*z. 0280 2a 28 b1 0c a3 e0 02 c7 48 d3 f1 46 b8 2f 05 f8 *(......H..F./.. 0290 17 49 c9 d7 d6 e4 22 8a 0c 46 ab df 64 b0 57 6e .I...."..F..d.Wn 02a0 cd 0f 2b a5 1f f0 33 05 b4 af 8e 29 06 99 44 54 ..+...3....)..DT 02b0 17 d0 11 50 3b 5a 85 0f d9 90 64 37 03 bc 59 d7 ...P;Z....d7..Y. 02c0 94 4d c8 a0 05 74 b0 37 c9 ab 5a 7a fd e4 28 78 .M...t.7..Zz..(x 02d0 ac f6 20 03 a8 16 12 f3 7d 6b b6 d3 43 0c bc 0f .. .....}k..C... 02e0 13 d1 9a e3 24 01 53 4a bf c9 1a 7b e0 22 e6 65 ....$.SJ...{.".e 02f0 4d 47 ea 31 86 04 30 d4 38 df 58 3d 53 b6 23 7f MG.1..0.8.X=S.#. 0300 63 35 99 05 5f de 10 0c ef 5f 87 b0 e9 f2 7e d7 c5.._...._....~. 0310 90 97 d2 ea 69 e3 e9 61 fe 53 c0 98 c0 03 8c 30 ....i..a.S.....0 0320 1f b8 0a 7e b9 86 7b 74 48 4d ac 37 7d 2b e8 9d ...~..{tHM.7}+.. 0330 c8 09 37 5f aa e6 55 68 e7 55 ce f0 96 8f ce 88 ..7_..Uh.U...... 0340 ed 2a 5d 9f 8d ca 41 06 59 0f 92 90 65 82 29 94 .*]...A.Y...e.). 0350 01 af d5 81 ad 15 a5 49 a8 73 77 aa 6b 75 f6 2e .......I.sw.ku.. 0360 f9 69 75 44 10 78 ef 9f 49 20 ee 92 f9 5f 6b d5 .iuD.x..I ..._k. 0370 bb e2 77 f8 70 05 18 2f f9 8f de e9 dc 95 fb bd ..w.p../........ 0380 f5 bd 01 15 32 d0 bb f8 21 62 b6 e9 d9 6b 7f 14 ....2...!b...k.. 0390 1d ee 86 94 b1 da c7 fb ba e3 f4 d0 82 6a ae c7 .............j.. 03a0 48 b6 8d 6c 1d 8b 60 a2 c7 3e 48 21 34 87 fd 2f H..l..`..>H!4../ 03b0 10 49 b6 ab 53 63 fb b5 bd 25 e2 4f a7 8c 4c fe .I..Sc...%.O..L. 03c0 07 90 69 bd 77 9a 66 e5 7c cb 61 50 74 53 a6 30 ..i.w.f.|.aPtS.0 03d0 6f c6 55 bb 54 a4 d7 bf d2 78 87 0d 9e 64 b9 59 o.U.T....x...d.Y 03e0 e0 f2 4f 6d b6 28 3d 5d cd e9 3d ca 82 7d a4 11 ..Om.(=]..=..}.. 03f0 3a e1 8e ad 0a 55 d2 e1 6f 1b 81 51 3f 92 19 d4 :....U..o..Q?... 0400 76 4d 34 54 54 80 76 02 9e b7 fe 2f 24 ee e4 40 vM4TT.v..../$..@ 0410 41 64 25 ce 0d ce c7 79 de ff 1e ed cb 91 e2 cb Ad%....y........ 0420 b5 cc 8e fa 2d 98 4c f8 2d be 36 d9 e1 58 7b 7f ....-.L.-.6..X{. 0430 79 a5 65 f1 96 01 21 72 69 36 6a 98 2e 7c 20 57 y.e...!ri6j..| W 0440 68 7e ab ea 0e e0 94 4a 56 5a cc 88 b9 ce 4d 94 h~.....JVZ....M. 0450 0c fd 00 ac d2 de 1d ec da 8e e8 44 3d 79 d2 a1 ...........D=y.. 0460 13 ea 8c 17 3d fb bb e2 9b ed 15 e2 cd df 5c c2 ....=.........\. 0470 14 e6 a7 89 2e f6 cd b0 08 0c 6c 69 0f f9 fd de ..........li.... 0480 cb 6a 50 cd f4 78 cc 9c 67 4c d8 8a ac 42 39 26 .jP..x..gL...B9& 0490 5a c3 78 f3 b2 ef 29 93 6a 10 3f 69 06 f5 c3 eb Z.x...).j.?i.... 04a0 b4 3d 58 f5 3c c9 12 a7 04 29 68 da 82 a6 0f 40 .=X.<....)h....@ 04b0 a8 3d 27 93 b8 68 e8 49 6a ab 7e b9 48 9a 49 82 .='..h.Ij.~.H.I. 04c0 27 b2 4c 85 01 f3 4e 94 ca 6a 0d 70 e5 5a 43 b7 '.L...N..j.p.ZC. 04d0 2c 92 27 d1 27 cb 47 c3 3f ff 87 c4 fb 85 c6 29 ,.'.'.G.?......) 04e0 3f 0e 71 f3 20 d8 95 76 5c c9 f7 d5 e3 81 14 d1 ?.q. ..v\....... 04f0 7f 41 d4 ab ee 16 fd 44 d6 4f a9 63 2c 42 e0 6d .A.....D.O.c,B.m 0500 a6 0c 90 0e cd 34 4c d0 34 e9 81 6a e4 a1 26 f0 .....4L.4..j..&. 0510 47 99 bf 7d 0e 05 11 bd cf e3 0d bf 2a c3 04 e2 G..}........*... 0520 d0 c1 e9 6d f0 cc 52 3a 8f 52 43 7e b2 49 9b 75 ...m..R:.RC~.I.u 0530 0c 35 d9 c2 4d 76 e4 b4 40 52 50 89 05 29 0d 8a .5..Mv..@RP..).. 0540 df 38 2a 34 8e 7b d8 fa bc ed 1d 9a 4d 0e ac 48 .8*4.{......M..H 0550 9a 02 1e 8c 93 a6 fe 63 73 45 a8 37 39 a5 9f be .......csE.79... 0560 d8 05 25 8e 4e ac 59 96 49 5b a6 f1 d2 70 e3 4f ..%.N.Y.I[...p.O 0570 22 bd ba ed 81 64 fb a3 0a 24 f3 9a e7 2a 2c 71 "....d...$...*,q 0580 50 a4 b2 9e 31 fa 9c d4 a1 1b a3 11 5b e0 1c 48 P...1.......[..H 0590 dd 7b 83 c6 d7 2c 70 3a a4 7e 27 54 7c 3b 4c 94 .{...,p:.~'T|;L. 05a0 88 09 7d 0c 04 78 08 06 ..}..x.. No. Time Source Destination Protocol Length Info 19677 239.528851 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1151 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 19677: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1151 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 19678 239.528884 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=3109 Ack=208643 Win=65535 Len=0 TSval=729878 TSecr=595129 Frame 19678: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3109, Ack: 208643, Len: 0 No. Time Source Destination Protocol Length Info 19679 239.528934 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=210091 Ack=3109 Win=1002 Len=1448 TSval=595129 TSecr=729878 Frame 19679: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 210091, Ack: 3109, Len: 1448 Data (1448 bytes) 0000 b8 38 bb b0 50 ea 7d 90 df 2f 62 c5 81 fc 2a 39 .8..P.}../b...*9 0010 05 b3 dc e7 e4 ec ef 95 fa 87 04 f2 0f 70 02 df .............p.. 0020 b3 df 05 8c 39 55 a1 34 aa 51 df d1 3c 53 4c 0c ....9U.4.Q..<SL. 0030 7d 14 9f d0 9b f1 c9 f8 41 24 64 eb 03 dd c3 1a }.......A$d..... 0040 95 cc 60 f5 10 a6 48 cf 1d fa a7 c3 dd 15 da 0a ..`...H......... 0050 fd 45 3d 08 9a ec e5 59 bb 93 4f 09 b4 4e 0a 20 .E=....Y..O..N. 0060 7f 8d b1 3c aa d0 12 3c 61 7e 07 f6 41 00 e9 d6 ...<...<a~..A... 0070 ec 6e 5d 14 60 9a 19 4e d5 79 0c 84 29 05 75 39 .n].`..N.y..).u9 0080 98 39 b5 60 6a 87 a4 a5 cb c3 49 e6 b2 d0 58 64 .9.`j.....I...Xd 0090 aa ce 29 a9 a1 48 e9 76 b8 e2 3f 39 07 05 53 8d ..)..H.v..?9..S. 00a0 51 90 50 fd 4f 6b c9 dd 92 14 70 bb 15 d8 31 ec Q.P.Ok....p...1. 00b0 13 bf cc 75 61 96 83 5e ee 55 cc 9a c9 00 91 5a ...ua..^.U.....Z 00c0 c4 7f 3e eb 8c 67 6b 78 41 53 4b a3 e9 fc 28 8e ..>..gkxASK...(. 00d0 dd 9a 5d 0c 08 9e 45 53 50 1e 0a c5 2b 89 f4 f7 ..]...ESP...+... 00e0 18 00 d9 60 0b b2 cc 9c db 07 00 45 ae b4 60 d3 ...`.......E..`. 00f0 5a 9d 4c 24 27 1e f3 13 53 1e 85 b2 90 90 8a 06 Z.L$'...S....... 0100 61 a5 68 1c 1c 93 c8 c4 fa f5 bf a5 01 50 67 a3 a.h..........Pg. 0110 82 f6 5d 5a c5 89 8e e6 05 57 41 7b 6e 2a 53 ba ..]Z.....WA{n*S. 0120 2d 54 ec 0b 1d 9c 96 57 ba 40 17 0c 46 bf 46 1b [email protected]. 0130 46 e3 25 88 e1 1d 9a 49 7f a5 ce fa ed 2c 57 59 F.%....I.....,WY 0140 36 9d 88 1a 2a 2f 56 94 78 3a fd 1d 79 73 1e 23 6...*/V.x:..ys.# 0150 9d bb 13 54 d8 4d f7 85 de 06 c1 29 b0 64 45 33 ...T.M.....).dE3 0160 bc 61 95 1f 44 c4 e4 1a 4d 77 65 5d a1 1d 3e 08 .a..D...Mwe]..>. 0170 c9 a9 3d bb c6 dc 1c 9c ef 9a a6 ac 30 13 20 85 ..=.........0. . 0180 f9 a2 b9 a5 3f ce 46 0e 92 02 25 58 4f 20 78 f2 ....?.F...%XO x. 0190 14 cf 85 16 4b 49 7d 58 6f cc 8b 87 b4 e1 1d 7d ....KI}Xo......} 01a0 75 f0 77 89 23 a9 ff 83 f2 bc 29 99 ed 4a 74 c2 u.w.#.....)..Jt. 01b0 e8 ca d3 c3 90 a8 3e 56 46 f8 75 71 0b 44 dc 65 ......>VF.uq.D.e 01c0 5b 3d d6 94 cd 09 53 2e 82 a7 ae bf 20 09 51 01 [=....S..... .Q. 01d0 25 40 73 57 06 37 34 bf 46 2e c4 c3 ba c1 b2 a8 %@sW.74.F....... 01e0 e1 20 c7 35 da 3f 47 8f 40 22 fe 86 c4 38 5d 4f . .5.?G.@"...8]O 01f0 38 7f 97 25 a7 49 b5 03 7f 51 83 b8 a0 77 ad aa 8..%.I...Q...w.. 0200 63 01 db 02 50 a4 b4 58 29 fd 21 19 b7 03 17 64 c...P..X).!....d 0210 26 fc 73 55 fa 98 5a b4 a6 1f 5a 41 93 69 32 62 &.sU..Z...ZA.i2b 0220 89 64 34 f0 f0 01 eb 4f 47 2a 08 8a 64 56 47 d8 .d4....OG*..dVG. 0230 d0 42 92 87 c7 9d 65 23 5e f9 2f 4a d7 0a 9e 41 .B....e#^./J...A 0240 8f 91 d2 ed 65 96 16 d9 3b 9c 58 48 3d 2b 04 fc ....e...;.XH=+.. 0250 ef 29 76 0d e0 3b b2 ee 0f f0 88 57 7e 98 04 ad .)v..;.....W~... 0260 cd 0f 55 31 4f 53 79 3f 86 29 42 56 d3 d8 3d 86 ..U1OSy?.)BV..=. 0270 5b 3b a8 52 b2 0b 47 ac 59 eb 09 35 e7 d6 26 cc [;.R..G.Y..5..&. 0280 50 81 f2 23 00 0a d6 ec b5 b5 48 80 03 62 04 6d P..#......H..b.m 0290 cb 13 a5 76 ca 2c 7d ca c4 d0 3f a3 49 31 2b 27 ...v.,}...?.I1+' 02a0 e1 9d 3b 69 6b 1d 36 31 5e 29 ec 24 16 a3 8e ef ..;ik.61^).$.... 02b0 3e 31 5f a9 63 1a be fa 5c 78 11 dd be 84 10 ad >1_.c...\x...... 02c0 23 df 67 4c ba 07 be 54 a6 56 fe b7 25 8d cd 79 #.gL...T.V..%..y 02d0 44 97 96 ab 25 15 53 42 ab 83 92 41 b7 b0 21 ac D...%.SB...A..!. 02e0 20 0d 91 b6 fc c0 e1 ac a4 fb ca 11 98 a8 04 0f ............... 02f0 3c 40 94 43 59 6a fe 69 ca 09 f4 a0 7f 00 39 4f <@.CYj.i......9O 0300 cf 87 2b 7c 39 bb f7 88 f3 fc 34 e7 7c 8d 59 4d ..+|9.....4.|.YM 0310 f0 36 cc 2c 33 1d 13 63 21 6e 52 de 19 6c 75 4d .6.,3..c!nR..luM 0320 3b af f7 0c 5b 01 1f a4 0d db 4d e7 60 db 76 c8 ;...[.....M.`.v. 0330 e8 fb 83 7e b5 4e 35 ee 0d 62 e7 5e 85 0e cc cf ...~.N5..b.^.... 0340 89 f2 0e c7 99 37 c5 9b 01 68 97 80 91 df c3 a1 .....7...h...... 0350 74 96 c2 91 60 b1 91 7a a1 1a 2c 02 b2 57 61 c8 t...`..z..,..Wa. 0360 62 49 03 df 2d 23 1e ad b4 09 b5 ce ae 57 d2 4e bI..-#.......W.N 0370 84 26 48 44 d5 c9 ab c4 56 71 a8 f9 65 d3 04 bd .&HD....Vq..e... 0380 6c 95 36 8d d8 44 30 41 33 9b 51 0e 6f 62 b6 ff l.6..D0A3.Q.ob.. 0390 ed 34 b1 8f 6c 53 ea e2 16 0b 25 00 08 2f 5f 37 .4..lS....%../_7 03a0 53 bb 62 2e 49 b4 06 f9 17 07 c8 17 39 60 ca c0 S.b.I.......9`.. 03b0 8a 1a d9 2d 1c 1f af 08 7b 3d cb 30 c5 9d 77 94 ...-....{=.0..w. 03c0 86 4b cc 70 d8 51 36 90 1d 53 a6 d7 d5 36 95 24 .K.p.Q6..S...6.$ 03d0 21 91 b7 f8 69 6e f4 95 9b 64 b3 20 f4 1e 26 79 !...in...d. ..&y 03e0 0e b2 c8 eb 40 d5 07 a7 08 d1 31 78 43 df 28 53 [email protected].(S 03f0 a1 f1 ae c7 04 a1 ff ac 43 dd e7 fa 7d 02 34 f3 ........C...}.4. 0400 50 84 55 e6 20 d2 ef 5f 1a 4a 77 6f 18 90 bd 0b P.U. .._.Jwo.... 0410 88 1c f4 1c b8 ac fa 97 16 df 7a 83 02 d0 19 c8 ..........z..... 0420 47 79 5a d0 48 8d 07 47 15 ca 44 64 2e 80 20 e0 GyZ.H..G..Dd.. . 0430 5d 41 d7 42 52 c1 7d f8 94 b7 6c 59 eb ae 63 59 ]A.BR.}...lY..cY 0440 a0 2d e7 e7 31 e7 bf 81 bd 6b 9f 68 ec c7 4f 9a .-..1....k.h..O. 0450 85 3b 5a 04 06 91 7c d8 f9 71 f1 9e 00 b5 4a 18 .;Z...|..q....J. 0460 44 16 22 39 ed 9a 3a 28 8d 09 4d ef 9e fb d3 92 D."9..:(..M..... 0470 95 7c 0b 60 81 86 a3 8c 6b 76 fd 06 79 b9 42 f2 .|.`....kv..y.B. 0480 e3 09 ce b3 a8 66 c4 ba bd dd 8c 18 e2 83 2a f1 .....f........*. 0490 4b ea f2 9c b9 8b 0a a0 8b 62 a9 a8 e6 93 5d d8 K........b....]. 04a0 61 ff 21 43 9a d6 2f 48 97 c1 78 23 2e 6d 4c 0e a.!C../H..x#.mL. 04b0 d1 0c 9e 51 08 79 89 6e 58 e2 b0 34 ff 99 63 35 ...Q.y.nX..4..c5 04c0 ae dd 9f e7 24 8b 78 81 c3 48 5b 8e b3 ab 89 96 ....$.x..H[..... 04d0 e2 d0 41 6f 85 5c 2a ee 31 21 4a c1 44 42 c5 46 ..Ao.\*.1!J.DB.F 04e0 bc 6e 68 6f 68 84 36 44 27 de d7 ee 69 bd 1c 2c .nhoh.6D'...i.., 04f0 2a de eb 57 a8 c8 4b 4a f7 7c 6f 1b 87 20 f6 cc *..W..KJ.|o.. .. 0500 1a 3f 19 d5 9d ba 01 ba 9b a7 d1 2e 0a 82 98 c6 .?.............. 0510 76 b3 30 e0 2d 08 69 7f b0 3e 03 fe 3f 3e f6 27 v.0.-.i..>..?>.' 0520 5b 3d 01 7a 6f 15 a8 66 a5 99 cc 17 e1 df ac a2 [=.zo..f........ 0530 96 42 bb 12 b1 14 14 d0 c9 07 e3 50 76 a4 15 29 .B.........Pv..) 0540 28 ff 72 42 c5 95 e6 78 c5 b5 ce ff d0 0f 82 bf (.rB...x........ 0550 5e 2b d7 0c eb a6 69 7c 6e 9e 5a a2 80 6a 4b 60 ^+....i|n.Z..jK` 0560 45 ad 2a 69 ad a1 58 cf 9e e1 45 ec 9f 4a f8 2e E.*i..X...E..J.. 0570 32 2d e2 67 32 f0 8f d2 3f 24 6e ee 15 8f 6c ef 2-.g2...?$n...l. 0580 e1 db 96 20 c0 2c 71 a7 73 d6 2d b7 58 14 dc 81 ... .,q.s.-.X... 0590 7c aa e3 3e 04 f4 24 c6 da 3b 37 e4 5e 4e b2 ca |..>..$..;7.^N.. 05a0 b8 b4 8e 48 fa 3f ce ab ...H.?.. No. Time Source Destination Protocol Length Info 19680 239.529020 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=211539 Ack=3109 Win=1002 Len=1448 TSval=595129 TSecr=729878 Frame 19680: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 211539, Ack: 3109, Len: 1448 Data (1448 bytes) 0000 13 5f f2 09 50 e3 03 f1 58 10 b1 fc fc de fe c0 ._..P...X....... 0010 d6 ad ce 46 ae 79 e5 06 95 73 e5 2f 9e 8b 98 f0 ...F.y...s./.... 0020 64 03 b0 eb eb f3 7c 11 52 73 f8 75 54 6f fc 15 d.....|.Rs.uTo.. 0030 cf 2a ef 20 2e 8a f5 c7 79 eb c9 9e 55 e9 d0 58 .*. ....y...U..X 0040 31 3f 2b 39 17 d9 59 f6 e8 a1 cd 16 08 41 68 c1 1?+9..Y......Ah. 0050 aa a9 22 d1 38 e2 42 56 27 6c 9c 19 a5 db 95 03 ..".8.BV'l...... 0060 5e b5 f4 bc 6d 98 3f 15 53 b0 29 06 a0 73 3a cd ^...m.?.S.)..s:. 0070 44 88 2d 2b 34 bd f9 e5 f0 70 e1 b3 cd bd 36 7b D.-+4....p....6{ 0080 d1 af f6 99 a7 e6 91 1e 6d eb 21 32 4d 1d 83 53 ........m.!2M..S 0090 f9 4d 1a 7a f5 97 49 45 f6 94 ec ef c5 e4 fd 3d .M.z..IE.......= 00a0 84 55 a0 1f 4d cd 07 65 f5 af ed 8b 54 83 13 aa .U..M..e....T... 00b0 4b 09 99 80 9f 54 33 e0 a5 8a a2 4a 08 dc d6 84 K....T3....J.... 00c0 a7 e1 bd ad 19 8d 39 73 fb 98 d3 27 57 ba b9 90 ......9s...'W... 00d0 cf 87 aa ed 81 c2 32 f1 7d f6 ce f6 5c cc 3e f6 ......2.}...\.>. 00e0 42 b3 96 a5 64 26 ac 6d 64 cd 9f 9a 53 4f 74 ea B...d&.md...SOt. 00f0 4b 89 3c e4 1f 86 10 c6 5d 3a e3 a8 bc 68 e5 1c K.<.....]:...h.. 0100 0b d3 c4 5e 45 92 1a 42 44 87 c9 db 40 07 61 a8 ...^[email protected]. 0110 70 88 2f e0 1d 53 43 f3 92 f7 41 24 a6 25 59 0c p./..SC...A$.%Y. 0120 d8 79 dd 96 15 4f 36 5d 68 9a e0 13 b8 c2 ae 00 .y...O6]h....... 0130 13 3a fc e3 1f ea 5f f6 ba 84 02 b1 cb ce 17 10 .:...._......... 0140 f3 16 2d ae 90 6a a4 5f 16 06 13 e9 83 a9 78 03 ..-..j._......x. 0150 f9 9f 7e 14 54 13 64 a3 55 59 03 00 c6 bd 9c 58 ..~.T.d.UY.....X 0160 4a 52 7e 34 22 6c bb e9 2f 97 4c 73 11 b7 e5 63 JR~4"l../.Ls...c 0170 0e 51 65 a9 98 93 6b 84 d8 82 18 3b 6a c6 58 b5 .Qe...k....;j.X. 0180 da 89 65 a5 ca c7 67 26 1c 77 4f fd 9d 13 0b e1 ..e...g&.wO..... 0190 de 3d 5a 46 79 cc 42 96 cf bd 3b 96 e9 f2 3a e7 .=ZFy.B...;...:. 01a0 e0 c0 b7 74 0f 79 ab 9f b3 b6 38 9b f1 64 b9 18 ...t.y....8..d.. 01b0 fb a0 78 4e 3b d3 86 10 28 18 89 9b 5a 32 63 fe ..xN;...(...Z2c. 01c0 53 79 62 d3 22 2c 8f d2 35 4d a6 9e e7 92 29 46 Syb.",..5M....)F 01d0 a7 ad 78 62 3f b6 b2 49 24 79 82 24 64 1a 1b 9f ..xb?..I$y.$d... 01e0 78 ea b8 08 e7 12 02 f7 12 cb a0 e2 b7 78 f1 8e x............x.. 01f0 db c0 0d 0a 57 25 79 02 1a 3b 33 89 91 4a d7 2b ....W%y..;3..J.+ 0200 2e 2b 8d 98 6f 30 ac 7a 8f b8 6a 4e 7c a3 a2 c0 .+..o0.z..jN|... 0210 59 98 ac fc 14 1e d1 0a 3a b5 98 be 88 c7 eb 62 Y.......:......b 0220 c7 64 35 dc 56 de 60 7f 85 04 a2 db a3 c1 60 c0 .d5.V.`.......`. 0230 2e 76 ff 3a bc fe ea 8a 02 0f 36 d9 71 95 cc 24 .v.:......6.q..$ 0240 da 75 8e d7 7e 96 ae 3c f5 90 bf 92 f1 5c 15 69 .u..~..<.....\.i 0250 7f ab ed da 12 78 21 d7 28 9d 7c 91 a9 dd 52 b4 .....x!.(.|...R. 0260 1b 74 b0 7d b3 c0 da 18 3f 7b 97 f8 d8 8b 44 a7 .t.}....?{....D. 0270 3f 0a 59 93 36 87 44 05 88 21 90 b2 91 ae bc f5 ?.Y.6.D..!...... 0280 7d e2 88 0d c0 2b 38 d1 fe 1c 9f 8d 91 e1 f6 bf }....+8......... 0290 19 be d6 4c 17 c6 f4 70 84 ae a3 a3 1f 29 f2 4e ...L...p.....).N 02a0 42 d0 46 9e 0f 4a ce 43 67 8d bd 90 ad 76 d3 60 B.F..J.Cg....v.` 02b0 f6 75 09 69 7a 82 98 ed 7e 85 79 68 4b 44 3b 61 .u.iz...~.yhKD;a 02c0 c6 60 aa 62 62 30 06 7d 85 60 f9 fb 2a d9 aa ef .`.bb0.}.`..*... 02d0 87 7a c1 7f 22 e6 4c 15 bb 08 99 85 4c ea f3 1a .z..".L.....L... 02e0 d4 ba 8c c9 5e 7e b5 b8 7c 6a 63 1f e6 6a 00 3b ....^~..|jc..j.; 02f0 b0 e5 8e 58 f3 f3 52 5e 35 29 8c e9 cc fd 7a bc ...X..R^5)....z. 0300 be 7c d7 7e e6 c8 8e e0 c1 04 6d b6 79 ff 29 e4 .|.~......m.y.). 0310 f7 f2 12 4b 98 0b f6 5b 59 7f 71 f9 06 fd 92 fe ...K...[Y.q..... 0320 04 71 ec 33 7f e9 bc 0a fc b0 6b 1b 4d 02 73 d8 .q.3......k.M.s. 0330 e4 8d 07 83 3e 77 f9 20 99 83 68 d0 f9 14 e0 14 ....>w. ..h..... 0340 8e b5 ad ed 99 05 39 c1 41 ec 6b 95 ae 0b ca 3f ......9.A.k....? 0350 e6 3a 35 5b fb d3 88 7f 17 40 c7 3c 6b 0a 60 4b .:5[.....@.<k.`K 0360 ea 03 18 91 1b 6d 4f 71 43 26 83 d6 fc c6 3e dc .....mOqC&....>. 0370 79 29 cb 09 27 50 c1 91 59 1f ae 77 b8 69 13 cd y)..'P..Y..w.i.. 0380 ff 0e 7a db 4e 3c 95 eb 96 97 92 5e 07 ee b3 61 ..z.N<.....^...a 0390 79 a2 4d 60 a3 c4 c9 c3 bc ec 77 ed 54 c0 ca df y.M`......w.T... 03a0 44 d2 77 39 b9 4b dd 22 f3 12 a8 b9 3e e5 e8 2b D.w9.K."....>..+ 03b0 a6 55 51 8c 0b b5 7a 2f 5e 1f 72 fb 2c 00 e8 09 .UQ...z/^.r.,... 03c0 3e 89 89 4d bc 75 f5 42 48 28 60 c0 91 3e 46 b4 >..M.u.BH(`..>F. 03d0 2c ad 53 a5 f7 6d 84 e6 c6 ae 26 33 d1 68 e7 f1 ,.S..m....&3.h.. 03e0 74 36 e4 3e 86 25 0f 22 97 e1 ae 3b 34 2f cf a2 t6.>.%."...;4/.. 03f0 03 f3 61 8c 1f b1 e4 e2 9c ef 12 7b 58 d3 1f 9f ..a........{X... 0400 ab 3a 48 6a c5 2c c3 f6 48 cd ff ff 98 f9 35 84 .:Hj.,..H.....5. 0410 b2 f1 07 b4 e2 c0 e0 ad 80 d0 3b 9f 0b 97 68 16 ..........;...h. 0420 67 bf 31 9c 3c b1 c7 ae a9 4a e8 3c 6c 80 a9 87 g.1.<....J.<l... 0430 42 07 a4 17 2c 3a 5f c1 19 37 cd 2f 64 ca 82 b1 B...,:_..7./d... 0440 50 95 85 d8 06 aa 1b 68 d7 da 71 62 5a 64 29 69 P......h..qbZd)i 0450 61 84 fd ea dc c8 80 7f fe ad 58 4a 2f 6f 66 dd a.........XJ/of. 0460 6e 8b 52 4c 2c 79 a3 03 ab c4 ab 02 ff 87 35 cd n.RL,y........5. 0470 b7 60 3e 78 64 eb 42 9d 4e d8 0b fe cc 1f b4 98 .`>xd.B.N....... 0480 11 82 71 c9 85 ba 6f 57 bf a8 2a de 25 c3 c2 fb ..q...oW..*.%... 0490 b7 4e 10 13 15 7c 37 be 80 3b 6b 70 69 39 1d c4 .N...|7..;kpi9.. 04a0 4e d7 90 04 9e 67 c3 17 bc e8 bc 59 09 22 87 5f N....g.....Y."._ 04b0 d9 5c ee d9 4b 36 72 15 6c f1 0a be bb 3f 88 46 .\..K6r.l....?.F 04c0 9b 44 b7 52 5c 74 b8 bd e8 1b bc 00 94 60 7c 7f .D.R\t.......`|. 04d0 14 b9 7d 7f a1 e8 1a 05 27 3e 59 ac 31 1e 12 a3 ..}.....'>Y.1... 04e0 69 ef 89 58 49 89 4b ab eb 5c e1 60 b9 7b a5 3d i..XI.K..\.`.{.= 04f0 43 7a a4 20 86 11 23 16 24 c5 f2 79 e4 e3 95 9e Cz. ..#.$..y.... 0500 f0 b0 06 46 7b 26 d1 37 00 cd c1 11 ae cb 2b 09 ...F{&.7......+. 0510 ba 66 9d e2 14 69 00 58 8a 4d 17 49 34 f0 06 c7 .f...i.X.M.I4... 0520 2b 67 6b b3 58 a5 78 c6 d9 30 10 d8 a4 65 8b 7b +gk.X.x..0...e.{ 0530 b6 27 15 b4 b4 a8 d6 68 65 49 11 65 e9 1c ea 6b .'.....heI.e...k 0540 ea 60 91 cb 67 4e fa 10 4e 92 79 b2 57 fb 8c 2c .`..gN..N.y.W.., 0550 cd ce b6 5a 1f 59 88 82 45 2b 5c 55 8b 27 68 b8 ...Z.Y..E+\U.'h. 0560 dd ce 9a ed b9 93 8e 05 6c 57 2c 6d b9 8b 2c 8e ........lW,m..,. 0570 52 90 f8 02 f6 66 46 96 06 3b 7a f9 2c c1 bf 7f R....fF..;z.,... 0580 7b e2 4f e9 24 74 08 03 b4 f2 6a bb 0b 53 1f f3 {.O.$t....j..S.. 0590 29 2f 40 1f 15 24 6f 94 44 65 85 52 0f 5f 71 12 )/@..$o.De.R._q. 05a0 cd a6 e0 b3 c8 5f f0 f7 ....._.. No. Time Source Destination Protocol Length Info 19681 239.529063 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=212987 Ack=3109 Win=1002 Len=1448 TSval=595129 TSecr=729878 Frame 19681: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 212987, Ack: 3109, Len: 1448 Data (1448 bytes) 0000 3c 1e fa 5b 84 fb e0 c9 0e d5 76 b9 f9 96 d3 e4 <..[......v..... 0010 8f 90 87 0d 39 1d 2f a5 59 16 c6 f4 16 0b 87 4b ....9./.Y......K 0020 39 94 8c c7 4e 5b 80 1d a0 17 98 43 b1 d6 c1 eb 9...N[.....C.... 0030 98 91 4b d2 91 d0 10 a7 da f4 4e b2 a5 c4 c0 c2 ..K.......N..... 0040 9a d8 a6 39 8f a8 70 75 7e b4 0e 27 5b ef 5f 7e ...9..pu~..'[._~ 0050 07 3c 54 38 38 0b bc 8c 30 8b 9e e4 88 44 34 81 .<T88...0....D4. 0060 5b 8e 7a 0f ac ee e9 1b 67 17 da 67 64 e0 22 94 [.z.....g..gd.". 0070 fc 82 cf ef e7 37 8d c0 ee ac 77 cf e6 f4 e2 72 .....7....w....r 0080 7e 3a 5d e7 5a 69 6a 30 fc df bf 18 f6 c4 89 79 ~:].Zij0.......y 0090 a9 e5 55 7a a4 19 b4 eb b5 43 8b 8a 05 53 7c 64 ..Uz.....C...S|d 00a0 b8 73 04 18 0d 20 41 c9 f8 fe 01 9f 98 8c 7c 21 .s... A.......|! 00b0 86 94 02 71 c2 4d 43 77 ef a7 88 69 a6 40 cb 60 ...q.MCw...i.@.` 00c0 c0 09 05 5e 3d 8e ec 54 a3 d6 d4 16 44 c1 0f ea ...^=..T....D... 00d0 2c fb e1 f8 c7 b2 eb cf c5 1b 26 6e 32 f3 48 f8 ,.........&n2.H. 00e0 d1 77 0d 49 fd c9 4c 0d 64 92 ab e0 fc 19 a0 51 .w.I..L.d......Q 00f0 4a 7e d6 64 ee 4b e9 16 58 f2 12 11 e7 ae b9 00 J~.d.K..X....... 0100 45 8e da de 8c b1 93 f2 08 0c ad 49 0e f2 e0 69 E..........I...i 0110 d2 de 61 af 5a 97 d8 87 9c 9f a7 e2 c6 a4 fa 03 ..a.Z........... 0120 a5 60 b0 67 d5 8e fc 7e d8 88 57 9d b3 6e 29 84 .`.g...~..W..n). 0130 71 14 ac f4 dd 70 db 1b 65 d8 13 80 1f 1f 27 08 q....p..e.....'. 0140 1a d6 e8 1f f7 8d 86 a9 64 42 7a eb e2 1d 53 25 ........dBz...S% 0150 cc c4 d5 c7 87 e1 45 b0 47 18 fd b2 c4 da b2 a9 ......E.G....... 0160 e3 86 53 a7 7f a7 f2 07 b9 ff 21 fb 20 b1 88 87 ..S.......!. ... 0170 c8 81 30 5e 5c ee 2a c5 83 f9 3a 88 f8 8c 2f 58 ..0^\.*...:.../X 0180 d3 83 2d b5 45 69 f8 a4 1f 23 6c ce 7e 98 58 38 ..-.Ei...#l.~.X8 0190 8f b4 e1 1d 6f f3 7d b2 4e 71 c0 3d a6 52 3c c8 ....o.}.Nq.=.R<. 01a0 fc 2b 85 24 7b 4b 34 c2 ae 00 77 40 f2 94 78 9c .+.${[email protected]. 01b0 0f f6 18 bc 49 c3 21 58 6e 0a 93 2a 7d 1b 02 ff ....I.!Xn..*}... 01c0 14 05 6e 3f 52 52 d5 68 c1 b2 31 f8 5e bd 10 de ..n?RR.h..1.^... 01d0 89 ac 7a fb 80 ae df e1 c9 00 b5 97 eb fe e8 b2 ..z............. 01e0 34 0a 3e 17 e3 e9 50 b2 4c 2e d4 a1 5e 10 52 c5 4.>...P.L...^.R. 01f0 b2 12 b4 ed 80 7c 68 1d 71 0c 4e 3c 48 6c 70 f8 .....|h.q.N<Hlp. 0200 49 8e 3c e7 94 85 6e b9 f1 48 f4 35 6b 8f 46 78 I.<...n..H.5k.Fx 0210 f5 5f 4e af 28 75 5b 33 4f 78 f0 9c 53 37 12 b5 ._N.(u[3Ox..S7.. 0220 94 c1 33 af 00 a2 e5 20 2f b0 fb 40 c7 81 71 de ..3.... /[email protected]. 0230 b8 fd 52 31 f4 f6 33 34 a9 d3 20 ad 77 5e c9 a1 ..R1..34.. .w^.. 0240 4f cd 98 f0 db f3 0c ec 54 0a 7e c2 5a f1 f8 df O.......T.~.Z... 0250 0c d8 f1 56 eb c2 65 4d d4 33 b9 be 56 53 1d 1d ...V..eM.3..VS.. 0260 1a 11 53 7d c6 c4 af e2 df 69 3d 37 d5 1f 41 49 ..S}.....i=7..AI 0270 94 c5 24 9b 82 c5 7c ef 70 33 86 cc 82 60 64 f7 ..$...|.p3...`d. 0280 37 e1 4b 64 81 b3 4f 81 99 ee c5 42 64 66 c8 4f 7.Kd..O....Bdf.O 0290 20 29 38 8c d3 79 b2 f8 a8 56 65 33 dc e4 c8 98 )8..y...Ve3.... 02a0 dc 79 2b a4 92 45 d2 6a 54 da 22 fb 63 08 d5 7a .y+..E.jT.".c..z 02b0 a9 e5 a1 62 08 b2 f5 c0 15 0f c6 25 cd b0 52 36 ...b.......%..R6 02c0 74 ff 0e 55 a2 49 52 04 a0 b4 30 4c e2 95 30 61 t..U.IR...0L..0a 02d0 21 36 62 6b 20 54 fd 23 0f ee 15 76 25 f7 1d 75 !6bk T.#...v%..u 02e0 7c c3 47 85 ec a5 c9 60 05 f3 04 53 b2 6b b2 bd |.G....`...S.k.. 02f0 4b c2 88 97 c4 dc 3a b9 21 29 ac 04 1e 79 47 64 K.....:.!)...yGd 0300 9c 29 ce 62 50 4b 6f 4c 73 b5 40 9e e1 ad b7 c3 .).bPKoLs.@..... 0310 68 c2 22 28 58 0a 9f b1 c3 17 10 2c e5 56 c8 b9 h."(X......,.V.. 0320 72 63 94 17 21 ee 96 de a8 1e fb b1 a0 98 24 bc rc..!.........$. 0330 5f f8 3f 37 b4 32 3c 0a 11 a9 da d9 3d 03 3c 6c _.?7.2<.....=.<l 0340 c3 9b 12 3a f3 94 98 89 86 3a 3b ee b6 33 e5 62 ...:.....:;..3.b 0350 42 5a 59 4c 71 db e6 3a 57 33 e7 3e 6f 7f 7e bb BZYLq..:W3.>o.~. 0360 3e c1 5d 87 6d 75 7f 5a b9 1c fe 38 43 4e d0 9a >.].mu.Z...8CN.. 0370 f9 dc f2 a8 64 ce 89 89 13 c4 50 74 c5 d0 4a 7f ....d.....Pt..J. 0380 4f bc cb 20 95 4b e8 10 9f a3 fc 4f a9 2a d2 83 O.. .K.....O.*.. 0390 ca d0 a2 77 f7 31 92 44 7f d2 01 6b 0b 30 79 c0 ...w.1.D...k.0y. 03a0 0c 80 07 fc bd a0 47 0a c4 b2 ca 67 03 09 17 70 ......G....g...p 03b0 c7 a7 d8 a9 04 f5 90 9d 2d 4b b9 58 74 b7 39 ac ........-K.Xt.9. 03c0 ed 63 77 ce 66 a7 83 46 ce 05 55 d2 5d 25 ec c5 .cw.f..F..U.]%.. 03d0 9e 1a c2 31 ef ed ee cc 99 75 8a 0b 93 8b 12 e5 ...1.....u...... 03e0 13 f5 d6 65 5e e5 03 5a 0e a4 2f 6e 2f 9f 6f d7 ...e^..Z../n/.o. 03f0 10 37 0b 87 ab d0 5b 3c 8d 5c 74 ab 9d 6f e3 08 .7....[<.\t..o.. 0400 98 7a 5e a5 dd a4 46 64 ad fc 57 0a 0a 47 7e ed .z^...Fd..W..G~. 0410 b9 15 0d 2a 2e 36 e0 98 a9 f6 a2 d7 e8 ba 23 71 ...*.6........#q 0420 f3 ba 90 29 eb 80 7d 28 17 9b 6f f8 0b 5c 2f 28 ...)..}(..o..\/( 0430 0a ca 4e 53 3f fc b3 b5 c5 c1 b7 96 04 7e 3d c9 ..NS?........~=. 0440 a1 40 29 65 ef 4a 33 d4 30 67 cb 1e 80 27 e8 da .@)e.J3.0g...'.. 0450 e4 49 77 eb 19 6a f6 ad 46 5b a6 e0 15 ee f2 26 .Iw..j..F[.....& 0460 78 d7 b8 77 ca a1 2f f3 2b fa 79 5b 72 0a 50 7c x..w../.+.y[r.P| 0470 9a 45 b3 ef 58 53 6a 3b 2c a2 51 68 13 68 6e 09 .E..XSj;,.Qh.hn. 0480 e8 c7 03 bf 0f 61 17 b1 b9 78 bb 6d e6 1d 31 7e .....a...x.m..1~ 0490 30 55 91 f2 6d d7 8b 67 af 68 f5 b4 c7 1b b0 c2 0U..m..g.h...... 04a0 b3 56 73 a2 ab cd 14 30 f3 ba 08 ac 59 81 5a bb .Vs....0....Y.Z. 04b0 36 2c 06 e6 c4 7d 61 6e 8e c5 54 3a 94 6e 74 2e 6,...}an..T:.nt. 04c0 d6 7f 81 0b 6a 19 16 b4 61 81 b1 f0 93 cf c2 c8 ....j...a....... 04d0 20 a3 8e 53 5f c6 8a 1a 16 f2 08 96 39 fa 80 7b ..S_.......9..{ 04e0 5f 5f 77 9d 26 dd 43 b2 55 db c1 b1 40 10 74 d3 __w.&[email protected]. 04f0 e2 f3 7e bb 99 b4 ca e6 73 4b f2 30 ed 40 d7 1e ..~.....sK.0.@.. 0500 1e 46 3a 7c 22 7b ae 4a 57 ae ac af 8e d8 75 a7 .F:|"{.JW.....u. 0510 7e 71 91 1c 7c 23 0c 59 67 0a 07 37 be 5b 01 96 ~q..|#.Yg..7.[.. 0520 bf 00 e6 bf 2f 71 26 0b a1 35 94 06 42 73 37 08 ..../q&..5..Bs7. 0530 38 6d ea 89 41 33 a9 42 bd f7 f9 f0 fd ad a6 c4 8m..A3.B........ 0540 5e 84 1f 07 19 1d b9 70 1c 6a 3b 36 23 a0 f3 2f ^......p.j;6#../ 0550 52 1e c5 7f e6 08 39 9a 65 14 01 14 74 69 25 a3 R.....9.e...ti%. 0560 20 4d a7 9b a0 c0 90 85 e8 14 65 56 fc bc 2c 92 M........eV..,. 0570 f8 8b df 1b a9 89 bd a6 e9 26 fc bc 08 f1 6e e5 .........&....n. 0580 82 0b 45 c1 9c 88 35 2a 83 0e 6e 66 75 17 6b 9f ..E...5*..nfu.k. 0590 2f 10 4f 07 df b3 3f 66 b1 b6 b3 24 e9 f7 66 83 /.O...?f...$..f. 05a0 e7 a1 2a b9 44 d2 f6 55 ..*.D..U No. Time Source Destination Protocol Length Info 19682 239.529091 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=3109 Ack=211539 Win=65535 Len=0 TSval=729878 TSecr=595129 Frame 19682: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3109, Ack: 211539, Len: 0 No. Time Source Destination Protocol Length Info 19683 239.529118 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=3109 Ack=214435 Win=65535 Len=0 TSval=729878 TSecr=595129 Frame 19683: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3109, Ack: 214435, Len: 0 No. Time Source Destination Protocol Length Info 19684 239.529147 192.168.10.1 192.168.10.203 TCP 263 34433 > cds [PSH, ACK] Seq=214435 Ack=3109 Win=1002 Len=197 TSval=595129 TSecr=729878 Frame 19684: 263 bytes on wire (2104 bits), 263 bytes captured (2104 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 214435, Ack: 3109, Len: 197 Data (197 bytes) 0000 f5 bc b5 0d bd e5 d6 5f 88 4b e6 03 58 82 b4 64 ......._.K..X..d 0010 5d 5d f9 20 f2 e9 32 2f f7 fd 9f ef c3 56 23 a6 ]]. ..2/.....V#. 0020 3d 52 8a c0 f1 fb 22 36 8f 37 77 66 30 ed c5 9d =R...."6.7wf0... 0030 b2 64 79 e6 18 57 0f 68 c4 0e b3 9d 0b 43 f8 f9 .dy..W.h.....C.. 0040 7f 17 ae 9d 1b e5 11 54 13 3f 30 ea 5c 25 8a e5 .......T.?0.\%.. 0050 fc 3b 19 9d e5 3b f4 65 23 52 bc 6e f8 08 d7 d4 .;...;.e#R.n.... 0060 28 f9 c4 4a a4 6c ed e8 d1 5c 73 70 f3 59 fd f5 (..J.l...\sp.Y.. 0070 61 49 10 e2 94 6b 9d 78 b2 4e 2c 8b fc 3a 56 67 aI...k.x.N,..:Vg 0080 78 be fd f7 42 26 c2 f6 88 b2 a1 00 b4 26 ae f8 x...B&.......&.. 0090 da 60 29 96 d3 eb 27 df 5c fb 01 7b 3f da a4 9a .`)...'.\..{?... 00a0 67 db a4 01 2e fe c4 59 92 a5 c0 34 1d 8b 91 45 g......Y...4...E 00b0 97 fb df 37 e2 6f 38 6f af 31 86 c0 69 37 25 94 ...7.o8o.1..i7%. 00c0 2b 7b a0 c1 38 +{..8 No. Time Source Destination Protocol Length Info 19685 239.529190 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1151 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 19685: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1151 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 19686 239.529229 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1151 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 19686: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1151 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 19687 239.529306 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=214632 Ack=3109 Win=1002 Len=1448 TSval=595129 TSecr=729878 Frame 19687: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 214632, Ack: 3109, Len: 1448 Data (1448 bytes) 0000 17 03 01 03 50 48 51 eb a4 78 b9 ad c7 03 b3 8d ....PHQ..x...... 0010 cc ad 45 a7 94 62 17 ad 86 27 a1 f5 42 9e 51 63 ..E..b...'..B.Qc 0020 48 1f 84 17 b2 55 ac 0e f2 96 2f 34 aa fd 81 c4 H....U..../4.... 0030 f3 ba a6 8f c2 9b 67 da 56 e2 8b 4e 5a ce ca e7 ......g.V..NZ... 0040 dd 17 3a 8a 44 98 06 3a 90 b8 65 6c 6a 48 c9 ca ..:.D..:..eljH.. 0050 f6 23 c2 1c fe 7b 1a e4 54 31 7b 0f 9d 76 3a a8 .#...{..T1{..v:. 0060 15 8f 39 34 e1 cc c5 67 d2 c3 71 d9 61 e2 2f 52 ..94...g..q.a./R 0070 fa 6f 92 dd 8a 8b 27 d6 11 b7 fe 14 6e e0 86 68 .o....'.....n..h 0080 db 35 98 18 3f a4 a5 29 04 2d 90 18 60 57 db 4a .5..?..).-..`W.J 0090 11 4a ca 0f 49 33 ed 19 86 58 dc 67 8b aa ea fd .J..I3...X.g.... 00a0 e5 42 0f 53 79 51 5b 25 44 5a c5 da 04 3f ae 70 .B.SyQ[%DZ...?.p 00b0 cc f6 c9 b8 f8 37 3d cd c8 9e 30 52 5d ff d3 86 .....7=...0R]... 00c0 be 6b 75 5d f9 ee 05 b7 0c 35 f2 6e 2e 33 7d 3d .ku].....5.n.3}= 00d0 84 e9 d7 6c 10 f4 ef bf a6 b1 a2 e6 94 03 3c 2c ...l..........<, 00e0 a9 1c eb ef 42 e1 84 15 d5 b3 f8 b5 60 76 dc 38 ....B.......`v.8 00f0 55 b1 eb b2 07 83 91 f4 e2 5d 85 4d ed 18 56 c6 U........].M..V. 0100 af 83 1d b6 87 85 98 e1 88 80 3c 56 e4 62 c3 b3 ..........<V.b.. 0110 5f 7d ed ec e4 30 b7 a9 e4 e4 0a e7 24 16 f4 16 _}...0......$... 0120 a7 19 6f ee 13 2a 82 77 83 61 57 63 61 68 d5 0d ..o..*.w.aWcah.. 0130 7f 3e ea 4a 71 25 01 4a 48 4b 33 97 a7 c8 49 42 .>.Jq%.JHK3...IB 0140 ae 8b 13 9f 4c 06 5b 2f 39 bb 2a f7 3a 2b 73 1e ....L.[/9.*.:+s. 0150 62 1c e7 3f d6 a0 60 91 25 49 c2 ec fe 50 73 0c b..?..`.%I...Ps. 0160 82 85 be 08 4b f1 4f f1 bd c3 48 e9 d7 14 68 05 ....K.O...H...h. 0170 f0 4e 56 f9 42 02 ae d9 fc 99 ee fb 82 12 2e 78 .NV.B..........x 0180 07 f3 1d 31 35 ba e0 93 53 6a b6 45 e5 ad 50 38 ...15...Sj.E..P8 0190 30 97 93 53 38 65 d3 30 bb 36 34 12 e5 43 60 dd 0..S8e.0.64..C`. 01a0 66 96 28 38 99 8b 8c 57 19 d1 3a 3a 1f 22 e3 68 f.(8...W..::.".h 01b0 93 b9 20 e7 6a c8 ec 46 c9 72 21 40 4f 7c 50 02 .. .j..F.r!@O|P. 01c0 92 9f 04 e6 34 aa bb 26 f7 63 2f 28 25 c3 15 88 ....4..&.c/(%... 01d0 f3 c4 da 41 81 d9 aa 54 59 03 a0 e2 a6 34 29 05 ...A...TY....4). 01e0 26 e2 78 b1 f9 ee 56 c4 7b d0 be ac ec 76 3a 87 &.x...V.{....v:. 01f0 28 3d 4b 19 81 84 69 13 34 af ad 8b e0 aa 04 9c (=K...i.4....... 0200 e3 70 63 de 73 7a d4 90 b1 34 04 04 23 e3 5a c1 .pc.sz...4..#.Z. 0210 09 df 4f ca e6 b2 e3 07 60 ed dc 6d 24 0e 15 d9 ..O.....`..m$... 0220 5a 37 fe ef 3d 8c f7 94 17 30 80 c1 43 29 4b f6 Z7..=....0..C)K. 0230 b2 0c 1d 8f 36 71 90 8a 6c c3 24 d4 8d 0c 0a 2b ....6q..l.$....+ 0240 ca f5 d6 87 5a 48 4d 8b a1 f6 d9 d9 e0 01 4b 78 ....ZHM.......Kx 0250 4c 56 4d 62 89 74 f6 ff 83 99 42 0c fa 91 83 56 LVMb.t....B....V 0260 fd e4 29 29 ae d0 17 37 5f 99 43 30 d1 3f 48 05 ..))...7_.C0.?H. 0270 db 49 e0 d0 d8 96 88 a1 40 8d 77 7a 60 58 f3 88 [email protected]`X.. 0280 eb 33 8d fb 77 2a ea cf 38 cf 82 5a 3c d9 86 a8 .3..w*..8..Z<... 0290 a5 d6 c5 4e 15 b6 31 8f 99 c9 c6 d7 e7 b6 e2 ef ...N..1......... 02a0 c4 e0 c8 e9 ae a6 20 b2 23 84 99 62 67 2f 84 d7 ...... .#..bg/.. 02b0 47 ce f9 3a ad 44 9e 45 59 95 b7 fc c9 ea 4f 9f G..:.D.EY.....O. 02c0 a2 bc 5f 07 1f 66 bc cd 63 e6 7f c2 8b ff 4a b5 .._..f..c.....J. 02d0 c4 57 79 70 53 bc c8 05 1d 9a 42 71 e0 21 fc 06 .WypS.....Bq.!.. 02e0 61 32 73 5c 6d 55 ba d8 c7 00 f9 03 88 83 80 21 a2s\mU.........! 02f0 21 00 68 51 a5 29 fd d7 a3 6d 80 bc 19 5f 53 f5 !.hQ.)...m..._S. 0300 fb 31 07 de 54 e2 73 50 40 42 ee f0 d7 55 f5 8f [email protected].. 0310 1e 4f 6f c3 01 0f d3 bb 49 a6 57 64 81 7f 90 40 .Oo.....I.Wd...@ 0320 2d 1d 1b fe 98 28 05 05 43 2f 2d 3c 43 c5 09 68 -....(..C/-<C..h 0330 49 57 3a 63 a7 46 b7 37 f9 05 7a 5c 22 7c aa 84 IW:c.F.7..z\"|.. 0340 c8 ac 91 9f f4 a8 5f ec 5d e5 80 ee 8f c4 4a da ......_.].....J. 0350 81 50 7b 3d 00 17 03 01 03 40 80 bb 6b e1 b2 21 .P{[email protected]..! 0360 e3 e2 84 58 86 94 98 38 8e 91 87 f7 52 d7 72 44 ...X...8....R.rD 0370 29 26 c3 01 78 c2 4c c5 1a 69 98 27 d9 04 df 41 )&..x.L..i.'...A 0380 a8 5f 15 e2 ad fd 2d d4 0d 21 6d e7 5f 02 1f 6f ._....-..!m._..o 0390 ba 2f 81 f5 d8 d1 a1 75 d0 2f 69 c3 a3 d2 3b 2f ./.....u./i...;/ 03a0 2e 0d 4f c0 f7 85 3f f4 4a b4 b0 df b5 af 83 d9 ..O...?.J....... 03b0 34 cb b2 2e 7b cd 7c b8 38 a6 ce fd 5a db cc dc 4...{.|.8...Z... 03c0 e4 6a d2 7e 83 a5 2d 7f e0 b1 5b a4 e9 34 2a 05 .j.~..-...[..4*. 03d0 d7 35 88 1c f4 fd 5d 74 9e a8 b8 ff 9e 19 9f de .5....]t........ 03e0 2f a4 f1 ab e4 30 f2 0f 8f 82 f7 69 59 a2 b4 08 /....0.....iY... 03f0 e6 b0 4d 55 8c 91 67 7b 35 3b 06 6f 3f ce 3c 17 ..MU..g{5;.o?.<. 0400 94 56 7e 56 40 22 d4 8e 7e 20 1e 8f a5 c6 fb 97 .V~V@"..~ ...... 0410 dd e1 f3 ea e8 0b 21 18 c9 12 ac ff 5d ee f8 8c ......!.....]... 0420 9b f2 b3 71 a5 c6 a5 cb 78 91 63 76 a5 1d b1 23 ...q....x.cv...# 0430 6c b5 5f c9 7e 48 b8 ba 22 99 3a 8a 33 66 4f 81 l._.~H..".:.3fO. 0440 b2 f5 bd 00 2f 27 bf 8a 64 06 49 33 f7 01 fc 7b ..../'..d.I3...{ 0450 20 b4 bf 6a de a1 b7 56 c3 ff d3 a9 9c 7b 0a 1b ..j...V.....{.. 0460 c9 01 b0 6b e0 e0 d0 fd ac 4d 57 02 16 21 75 aa ...k.....MW..!u. 0470 ef e7 7d e5 40 29 48 ef 55 83 a9 27 55 8a e2 89 ..}.@)H.U..'U... 0480 67 1f b7 55 7a 68 ab a2 d3 f4 aa 96 d9 76 08 c4 g..Uzh.......v.. 0490 14 2e 22 41 00 55 52 4a 30 01 b8 c1 92 59 30 3b .."A.URJ0....Y0; 04a0 a0 17 b8 37 24 f9 e6 de 46 6b a4 20 c7 39 44 ff ...7$...Fk. .9D. 04b0 e5 87 04 a5 62 46 4f 9e f8 f1 57 9f 02 f1 3c 87 ....bFO...W...<. 04c0 6a 64 65 90 cd 56 cf fe 0b 26 10 ec 78 33 18 2b jde..V...&..x3.+ 04d0 24 16 00 ae fb 52 96 34 3c 9b a5 6e a5 1a f3 c2 $....R.4<..n.... 04e0 ab fc 12 d4 d7 54 64 9d d3 2c da 9e 4f f6 94 e2 .....Td..,..O... 04f0 2a be 17 ad cf 20 5c 44 20 48 b4 d5 7a 7b ad 67 *.... \D H..z{.g 0500 16 33 25 d0 03 70 2f 51 13 04 f4 c6 64 61 cd a6 .3%..p/Q....da.. 0510 31 76 99 93 8f d6 a0 92 43 66 53 f2 68 d9 53 2e 1v......CfS.h.S. 0520 44 8b ed 35 31 3f c8 ef 0e 35 74 49 34 5a 74 6e D..51?...5tI4Ztn 0530 f7 b9 af 7e f0 56 43 24 60 7f b0 7e 0c ab 22 ec ...~.VC$`..~..". 0540 a8 54 c5 b3 ba 77 5d 5b 10 16 a1 fc e5 cc 3e af .T...w][......>. 0550 ea 43 36 88 34 78 a3 d2 56 d8 9f 81 a8 cc 55 ab .C6.4x..V.....U. 0560 b1 36 fa 01 4b 08 6c f0 ea 16 c0 59 f8 0e 9d 95 .6..K.l....Y.... 0570 4d 23 83 cc 69 19 75 51 f1 a9 b4 2d 07 3c e9 a9 M#..i.uQ...-.<.. 0580 f2 03 d0 35 05 c8 bf 0a da 9f e4 2d be 8e 97 80 ...5.......-.... 0590 24 01 2e 79 53 35 42 d1 16 5f 17 02 fa f2 dd 90 $..yS5B.._...... 05a0 65 0c 3b 5f 06 45 9d b1 e.;_.E.. No. Time Source Destination Protocol Length Info 19688 239.529336 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=3109 Ack=216080 Win=65535 Len=0 TSval=729878 TSecr=595129 Frame 19688: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3109, Ack: 216080, Len: 0 No. Time Source Destination Protocol Length Info 19689 239.529398 192.168.10.1 192.168.10.203 TCP 308 34433 > cds [PSH, ACK] Seq=216080 Ack=3109 Win=1002 Len=242 TSval=595129 TSecr=729878 Frame 19689: 308 bytes on wire (2464 bits), 308 bytes captured (2464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 216080, Ack: 3109, Len: 242 Data (242 bytes) 0000 87 61 48 14 08 93 88 fa 31 56 e1 9a 5b 9d 5e c6 .aH.....1V..[.^. 0010 94 4b 31 c6 27 86 8a 0f b0 09 78 ba d4 49 4f 32 .K1.'.....x..IO2 0020 5b 1e 43 17 5f 70 8c 12 35 ef fd 5d 66 c0 a9 cd [.C._p..5..]f... 0030 c5 c2 fb 84 97 47 22 6b 37 aa b0 8a 9e fc 20 2a .....G"k7..... * 0040 a2 9d b6 f3 2a 93 fd 8f 34 b8 d4 71 3f 68 27 d5 ....*...4..q?h'. 0050 95 e4 01 96 79 7e ec 4e 19 a8 51 e0 f0 bc 3d c2 ....y~.N..Q...=. 0060 c1 88 0c f8 91 b6 4c c7 bd a1 16 42 9e b1 a2 8c ......L....B.... 0070 bf 98 fd 15 a2 10 66 f3 a2 c1 a3 ec 64 81 31 fd ......f.....d.1. 0080 9c 08 58 b9 5f 00 d6 5f 07 ee a5 5f 89 43 74 e8 ..X._.._..._.Ct. 0090 c4 24 0c 64 4e e2 da 32 e8 d8 3f ee ce 67 fa 0d .$.dN..2..?..g.. 00a0 fd 5c ee af cc 36 7c 80 7a f8 02 1e f4 02 d0 f6 .\...6|.z....... 00b0 87 d3 c1 ef 8a 8f 50 2c 75 c7 f2 8f be 01 e6 05 ......P,u....... 00c0 69 65 29 2f 86 63 67 c6 cf 31 cc 6a 4d c5 17 a2 ie)/.cg..1.jM... 00d0 ad 20 c3 61 04 b1 24 b2 e0 de 82 ff fd 02 71 a0 . .a..$.......q. 00e0 64 75 89 d0 5f e2 af 27 27 81 5f 10 5a f7 6a db du.._..''._.Z.j. 00f0 a8 74 .t No. Time Source Destination Protocol Length Info 19690 239.529437 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1151 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 19690: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:17 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1151 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 19691 239.566311 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 19691: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 19692 239.576193 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=3109 Ack=216322 Win=65293 Len=74 TSval=729878 TSecr=595129 Frame 19692: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3109, Ack: 216322, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 d6 2b 3d 47 7f 73 21 96 67 c1 3c .... .+=G.s!.g.< 0010 38 7d 90 86 04 07 18 dd ec 17 70 4e 1f 17 c1 51 8}........pN...Q 0020 b4 6e fe 24 f6 17 03 01 00 20 58 45 24 2a 6b f6 .n.$..... XE$*k. 0030 4a 83 84 aa 4d 07 40 a3 fd dc 91 5e bc df d4 f2 J...M.@....^.... 0040 b1 bd b7 65 74 b8 49 6e 41 c5 ...et.InA. No. Time Source Destination Protocol Length Info 19693 239.576263 192.168.10.1 192.168.10.203 TCP 903 34433 > cds [PSH, ACK] Seq=216322 Ack=3183 Win=1002 Len=837 TSval=595141 TSecr=729878 Frame 19693: 903 bytes on wire (7224 bits), 903 bytes captured (7224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 216322, Ack: 3183, Len: 837 Data (837 bytes) 0000 17 03 01 03 40 a8 a7 69 2a 1e 4b 71 d2 0b 5c 44 [email protected]*.Kq..\D 0010 68 36 59 07 96 44 0c 1a 88 3f 46 ee 7d 29 91 3b h6Y..D...?F.}).; 0020 65 f9 1e de ef 94 80 0c 0f 98 30 83 34 94 1d 47 e.........0.4..G 0030 e7 88 ee 6a 3c 1f 22 de b6 a1 c6 06 6d db 5a 18 ...j<.".....m.Z. 0040 5a 12 4d 00 3e b3 53 fe a0 f8 65 75 28 fd c0 7c Z.M.>.S...eu(..| 0050 1d 0b e1 91 1f 0f fc ab cd 40 69 bf ea ed e5 5e .........@i....^ 0060 4d ce 95 68 59 bd 06 17 ad f3 0a 46 3f 5b c7 b0 M..hY......F?[.. 0070 08 db e1 ea 9f d9 ef aa d6 10 0f 00 e6 d0 91 79 ...............y 0080 bf 86 98 7e 39 45 4d 2e 8e 2d d8 65 f1 f9 71 68 ...~9EM..-.e..qh 0090 fc a3 08 4a 5d ee 44 38 a4 07 84 6d c1 33 7e f1 ...J].D8...m.3~. 00a0 02 44 7e dd 01 95 ed dc d7 31 84 2a 7f 0c e0 1a .D~......1.*.... 00b0 02 46 65 10 b6 da 8e ec e2 45 f9 43 dd 16 b3 49 .Fe......E.C...I 00c0 5c 69 8b f2 27 93 31 a7 60 fa a6 2e 10 8d 89 76 \i..'.1.`......v 00d0 32 7a 1b 27 2b 69 7c ff f7 45 ec 5c 9f f7 d4 17 2z.'+i|..E.\.... 00e0 62 b3 16 ad 51 c1 73 f3 26 51 42 90 d4 40 cd f2 b...Q.s.&QB..@.. 00f0 61 aa d2 07 9a 50 61 9c 0f 9e be ae 6c 16 3c 99 a....Pa.....l.<. 0100 fc 8f 2e 22 31 c1 3d bd bd a4 86 2a fe 6c 6d f2 ..."1.=....*.lm. 0110 ec 9d c0 dd ee e6 ba c0 96 56 d5 eb e9 0d 6a c8 .........V....j. 0120 1e 32 72 36 58 45 fd 51 bf eb 1c ea de f4 fb 07 .2r6XE.Q........ 0130 c4 19 d6 ab ff e7 9b ae 36 21 95 0a eb c3 c0 78 ........6!.....x 0140 00 96 42 7c b0 64 47 0a df 32 c0 c5 4d 1b 3e 09 ..B|.dG..2..M.>. 0150 7b b7 00 ed 34 e0 84 e3 a2 30 bc bd f4 a8 af dd {...4....0...... 0160 c7 26 d5 53 76 4b 45 35 ce 5d f3 8f b2 e9 ac 03 .&.SvKE5.]...... 0170 8e 74 e0 65 eb 2c 77 4e 72 1b 29 ee b2 20 a5 e2 .t.e.,wNr.).. .. 0180 14 da ed 43 99 25 f8 88 b3 9d c6 28 0e 76 7b 2b ...C.%.....(.v{+ 0190 3a f2 2f 68 dd 19 47 12 e6 51 74 b1 79 f9 9e 30 :./h..G..Qt.y..0 01a0 a3 39 78 62 b5 d2 14 1c 09 5d f4 76 f7 4f a2 cf .9xb.....].v.O.. 01b0 40 54 62 5d 36 e4 4a 9d 3c 55 71 81 2c 76 8a c0 @Tb]6.J.<Uq.,v.. 01c0 27 91 13 a4 3a 94 90 18 56 7c 45 7f 6f ec a3 a5 '...:...V|E.o... 01d0 c3 96 ab c0 07 20 ae 39 a7 88 f3 9d 3b 2f 59 27 ..... .9....;/Y' 01e0 65 54 f7 d9 32 96 90 31 48 ad bb fc 0d 98 84 d4 eT..2..1H....... 01f0 c1 6b b5 37 bc d5 03 ff 5c aa e2 5c b5 d6 d9 6e .k.7....\..\...n 0200 59 64 41 5c dd 78 9b d7 df cf 93 18 a7 19 f8 5f YdA\.x........._ 0210 65 b2 15 8d 62 00 b2 4f 15 fa 4b 32 0e 36 72 bd e...b..O..K2.6r. 0220 80 9c 22 1f 53 71 4a 90 09 7f 1e 0c 82 d9 02 14 ..".SqJ......... 0230 de e1 db 4c b5 60 b3 5b 42 d9 51 6f 32 cb 72 71 ...L.`.[B.Qo2.rq 0240 42 e0 e6 06 e4 a4 46 8c e4 db 77 03 1b 95 44 a3 B.....F...w...D. 0250 c8 cb 3f 96 d9 74 46 ea 6c cc 64 7c 4b dc 63 ce ..?..tF.l.d|K.c. 0260 ee 83 e2 4f cf 3a 79 b6 81 20 ca a4 db e8 b9 4f ...O.:y.. .....O 0270 8b 9f 6b 49 32 51 ab 33 26 38 61 50 69 f5 32 be ..kI2Q.3&8aPi.2. 0280 9e 72 3d be 16 2e 3f 58 26 c4 3e 3c 0d e8 41 c5 .r=...?X&.><..A. 0290 d2 e6 11 69 a1 6a a9 c3 d8 61 2c 2b 93 83 50 99 ...i.j...a,+..P. 02a0 17 4e 7e 55 ff 69 58 1b 11 40 46 67 6e 91 3f aa .N~U.iX..@Fgn.?. 02b0 58 fa 17 29 8b b4 5c cb ca 3a e8 90 20 fe 44 e9 X..)..\..:.. .D. 02c0 c8 15 93 4d de 15 47 26 d0 75 55 b9 c1 ea c6 a2 ...M..G&.uU..... 02d0 f9 9d 9e fa e4 4a 51 f9 f9 79 30 9e 7a be a7 81 .....JQ..y0.z... 02e0 7d b0 5d 2a 33 7d b0 e0 63 4a fd 63 e7 b0 dc af }.]*3}..cJ.c.... 02f0 ce f4 ee 72 33 93 5a a9 9b 73 00 31 87 46 77 4d ...r3.Z..s.1.FwM 0300 f1 46 8f 37 50 7c 21 b5 f4 5e 6b 20 62 cd 82 8a .F.7P|!..^k b... 0310 f9 84 95 41 b5 80 8a e4 0a ce 76 75 95 af 61 12 ...A......vu..a. 0320 09 18 f3 84 bf da 47 e4 fc 51 8b eb 8a da de d1 ......G..Q...... 0330 3a c3 ab ff 98 27 5f e4 2b 8b 8f f5 68 ce 92 57 :....'_.+...h..W 0340 e7 90 97 fb f3 ..... No. Time Source Destination Protocol Length Info 19694 239.579105 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=3183 Ack=217159 Win=64456 Len=74 TSval=729878 TSecr=595141 Frame 19694: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3183, Ack: 217159, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 72 6b 0e 6d 89 bf 67 bc ea 33 9f .... rk.m..g..3. 0010 85 61 5f 54 66 96 96 ba 1c 83 c1 f2 5f 4d 01 c4 .a_Tf......._M.. 0020 ca 88 1e 77 a3 17 03 01 00 20 88 b6 ca 59 65 57 ...w..... ...YeW 0030 b4 54 42 f7 20 65 5a 5c 5b ca c1 c9 4a 1a 18 ac .TB. eZ\[...J... 0040 14 69 30 fb 3f 53 d7 ff 4f 8b .i0.?S..O. No. Time Source Destination Protocol Length Info 19695 239.617728 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=217159 Ack=3257 Win=1002 Len=0 TSval=595152 TSecr=729878 Frame 19695: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 217159, Ack: 3257, Len: 0 No. Time Source Destination Protocol Length Info 19696 239.617777 192.168.10.203 192.168.10.1 TCP 214 cds > 34433 [PSH, ACK] Seq=3257 Ack=217159 Win=64456 Len=148 TSval=729879 TSecr=595152 Frame 19696: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3257, Ack: 217159, Len: 148 Data (148 bytes) 0000 17 03 01 00 20 99 c0 de 35 29 05 f6 a9 e2 1e f1 .... ...5)...... 0010 3e 28 4b 41 3e e1 13 af 6b 58 f1 8f 61 91 f4 8c >(KA>...kX..a... 0020 88 87 48 4f e4 17 03 01 00 20 d9 e1 2b db ed 0e ..HO..... ..+... 0030 27 ca a6 9c 42 ea 1e 76 9a a1 f4 be b3 9d e6 b7 '...B..v........ 0040 29 71 a4 20 77 8c 14 2b 90 fb 17 03 01 00 20 78 )q. w..+...... x 0050 ea 30 7a 27 09 03 04 36 2c 2d 04 9c 7b 10 db 44 .0z'...6,-..{..D 0060 a3 88 02 f7 e9 a4 b9 f5 8a aa c3 38 2f 6b 60 17 ...........8/k`. 0070 03 01 00 20 d4 2c d0 22 36 7c 0e 52 3f 76 fb fc ... .,."6|.R?v.. 0080 ef 94 6e ca 94 60 e8 cf 21 46 af c9 f1 1b 4e 57 ..n..`..!F....NW 0090 05 c5 96 0f .... No. Time Source Destination Protocol Length Info 19697 239.617806 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=217159 Ack=3405 Win=1002 Len=0 TSval=595152 TSecr=729879 Frame 19697: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 217159, Ack: 3405, Len: 0 No. Time Source Destination Protocol Length Info 19698 239.742009 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 19698: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19699 239.742034 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 19699: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19700 239.742088 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 19700: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19701 239.742095 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 19701: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19702 239.742102 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 19702: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19703 239.742110 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 19703: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19704 239.742116 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 19704: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19705 239.742124 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 19705: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19706 239.742159 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 19706: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19707 239.742167 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 19707: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19708 239.742210 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 19708: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19709 239.742223 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 19709: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19710 239.742246 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 19710: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19711 239.742253 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 19711: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19712 239.742260 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 19712: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19713 239.742279 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 19713: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19714 239.742285 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 19714: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19715 239.742292 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 19715: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19716 239.742298 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 19716: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19717 239.742305 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 19717: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19718 239.742311 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 19718: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19719 239.742318 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 19719: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19720 239.742324 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 19720: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19721 239.742331 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 19721: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19722 239.742342 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 19722: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19723 239.742348 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 19723: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19724 239.742355 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 19724: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19725 239.742361 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 19725: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19726 239.742367 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 19726: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19727 239.742374 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 19727: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19728 239.742380 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 19728: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19729 239.742387 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 19729: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19730 239.742393 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 19730: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19731 239.742400 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 19731: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19732 239.742408 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 19732: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19733 239.742415 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 19733: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19734 239.742423 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 19734: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19735 239.742429 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 19735: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19736 239.742437 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 19736: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19737 239.742467 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 19737: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19738 239.742475 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 19738: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19739 239.742482 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 19739: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 19740 239.742502 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 19740: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19741 239.742726 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 19741: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 19742 239.827125 188.161.220.86 192.168.10.207 SMTP 95 C: MAIL FROM: <natalie.ford@xxxxxxxxxxxxx> Frame 19742: 95 bytes on wire (760 bits), 95 bytes captured (760 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45131 (45131), Dst Port: smtp (25), Seq: 17, Ack: 313, Len: 41 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19743 239.827374 192.168.10.207 188.161.220.86 SMTP 105 S: 250 2.1.0 [email protected] OK Frame 19743: 105 bytes on wire (840 bits), 105 bytes captured (840 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45131 (45131), Seq: 313, Ack: 58, Len: 51 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19744 239.827399 188.161.220.86 192.168.10.207 TCP 60 45131 > smtp [ACK] Seq=58 Ack=364 Win=93076 Len=0 Frame 19744: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45131 (45131), Dst Port: smtp (25), Seq: 58, Ack: 364, Len: 0 No. Time Source Destination Protocol Length Info 19745 239.869181 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 19745: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 19746 239.869206 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 19746: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 19747 239.879973 180.243.236.205 192.168.10.207 SMTP 94 C: MAIL FROM: <adrianna.parson@xxxxxxxxx> Frame 19747: 94 bytes on wire (752 bits), 94 bytes captured (752 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: unizensus (1151), Dst Port: smtp (25), Seq: 19, Ack: 314, Len: 40 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19748 239.880160 192.168.10.207 180.243.236.205 SMTP 104 S: 250 2.1.0 [email protected] OK Frame 19748: 104 bytes on wire (832 bits), 104 bytes captured (832 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: unizensus (1151), Seq: 314, Ack: 59, Len: 50 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19749 239.880214 180.243.236.205 192.168.10.207 TCP 60 unizensus > smtp [ACK] Seq=59 Ack=364 Win=93076 Len=0 Frame 19749: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: unizensus (1151), Dst Port: smtp (25), Seq: 59, Ack: 364, Len: 0 No. Time Source Destination Protocol Length Info 19750 239.900436 192.168.10.118 96.8.81.129 TCP 60 versatalk > http [FIN, ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 19750: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.118 (192.168.10.118), Dst: 96.8.81.129 (96.8.81.129) Transmission Control Protocol, Src Port: versatalk (3738), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 19751 239.909086 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1269831936, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 19751: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19752 239.909103 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1269831936, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 19752: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19753 239.909111 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1269831936, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 19753: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19754 239.909118 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1269831936, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 19754: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19755 239.927056 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3138912512, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 19755: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19756 239.927074 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3138912512, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 19756: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19757 239.927082 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3138912512, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 19757: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19758 239.927089 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3138912512, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 19758: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19759 239.984389 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 3 Port 42 TTL = 120 Frame 19759: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 19760 240.023348 192.168.10.185 192.168.10.142 VNC 165 Authentication result Frame 19760: 165 bytes on wire (1320 bits), 165 bytes captured (1320 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 257320, Ack: 40194, Len: 111 Virtual Network Computing No. Time Source Destination Protocol Length Info 19761 240.033797 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19761: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40194, Ack: 257320, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19762 240.055566 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 19762: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40253, Ack: 257431, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19763 240.055587 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=257431 Ack=40221 Win=65417 Len=0 SLE=40253 SRE=40280 Frame 19763: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 257431, Ack: 40221, Len: 0 No. Time Source Destination Protocol Length Info 19764 240.075706 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19764: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40280, Ack: 257431, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19765 240.075728 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19763#1] rfb > xrl [ACK] Seq=257431 Ack=40221 Win=65417 Len=0 SLE=40253 SRE=40307 Frame 19765: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 257431, Ack: 40221, Len: 0 No. Time Source Destination Protocol Length Info 19766 240.079686 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19766: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40307, Ack: 257431, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19767 240.079704 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19763#2] rfb > xrl [ACK] Seq=257431 Ack=40221 Win=65417 Len=0 SLE=40253 SRE=40334 Frame 19767: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 257431, Ack: 40221, Len: 0 No. Time Source Destination Protocol Length Info 19768 240.083642 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19768: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40334, Ack: 257431, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19769 240.083662 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19763#3] rfb > xrl [ACK] Seq=257431 Ack=40221 Win=65417 Len=0 SLE=40253 SRE=40361 Frame 19769: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 257431, Ack: 40221, Len: 0 No. Time Source Destination Protocol Length Info 19770 240.103594 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 19770: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40388, Ack: 257431, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19771 240.103621 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 19763#4] rfb > xrl [ACK] Seq=257431 Ack=40221 Win=65417 Len=0 SLE=40388 SRE=40415 SLE=40253 SRE=40361 Frame 19771: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 257431, Ack: 40221, Len: 0 No. Time Source Destination Protocol Length Info 19772 240.103649 192.168.10.142 192.168.10.185 VNC 86 [TCP Fast Retransmission] Authentication result Frame 19772: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40221, Ack: 257431, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 19773 240.103669 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=257431 Ack=40361 Win=65277 Len=0 SLE=40388 SRE=40415 Frame 19773: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 257431, Ack: 40361, Len: 0 No. Time Source Destination Protocol Length Info 19774 240.112313 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19774: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40415, Ack: 257431, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19775 240.112336 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19773#1] rfb > xrl [ACK] Seq=257431 Ack=40361 Win=65277 Len=0 SLE=40388 SRE=40442 Frame 19775: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 257431, Ack: 40361, Len: 0 No. Time Source Destination Protocol Length Info 19776 240.120264 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19776: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40442, Ack: 257431, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19777 240.120285 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19773#2] rfb > xrl [ACK] Seq=257431 Ack=40361 Win=65277 Len=0 SLE=40388 SRE=40469 Frame 19777: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 257431, Ack: 40361, Len: 0 No. Time Source Destination Protocol Length Info 19778 240.125521 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19778: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40469, Ack: 257431, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19779 240.125546 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19773#3] rfb > xrl [ACK] Seq=257431 Ack=40361 Win=65277 Len=0 SLE=40388 SRE=40496 Frame 19779: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 257431, Ack: 40361, Len: 0 No. Time Source Destination Protocol Length Info 19780 240.139637 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19780: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40496, Ack: 257431, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19781 240.139697 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19773#4] rfb > xrl [ACK] Seq=257431 Ack=40361 Win=65277 Len=0 SLE=40388 SRE=40523 Frame 19781: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 257431, Ack: 40361, Len: 0 No. Time Source Destination Protocol Length Info 19782 240.143768 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19782: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40523, Ack: 257431, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19783 240.143790 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19773#5] rfb > xrl [ACK] Seq=257431 Ack=40361 Win=65277 Len=0 SLE=40388 SRE=40550 Frame 19783: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 257431, Ack: 40361, Len: 0 No. Time Source Destination Protocol Length Info 19784 240.143837 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 19784: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40361, Ack: 257431, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19785 240.143871 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=257431 Ack=40550 Win=65088 Len=0 Frame 19785: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 257431, Ack: 40550, Len: 0 No. Time Source Destination Protocol Length Info 19786 240.153887 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19786: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40550, Ack: 257431, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19787 240.157705 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19787: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40577, Ack: 257431, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19788 240.157726 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=257431 Ack=40604 Win=65034 Len=0 Frame 19788: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 257431, Ack: 40604, Len: 0 No. Time Source Destination Protocol Length Info 19789 240.158759 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 19789: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16759, Ack: 1227154, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19790 240.158778 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1227154 Ack=16801 Win=46300 Len=0 Frame 19790: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1227154, Ack: 16801, Len: 0 No. Time Source Destination Protocol Length Info 19791 240.161702 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19791: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40604, Ack: 257431, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19792 240.171595 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19792: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 257431, Ack: 40631, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19793 240.171615 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19793: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 258691, Ack: 40631, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19794 240.171637 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19794: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 259951, Ack: 40631, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19795 240.171653 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 19795: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 261211, Ack: 40631, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 19796 240.171669 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19796: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 261527, Ack: 40631, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19797 240.171688 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19797: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 262787, Ack: 40631, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19798 240.171707 192.168.10.185 192.168.10.142 VNC 60 Authentication result[Malformed Packet] Frame 19798: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 264047, Ack: 40631, Len: 2 Virtual Network Computing [Malformed Packet: VNC] No. Time Source Destination Protocol Length Info 19799 240.173335 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19799: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40631, Ack: 257431, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19800 240.173419 192.168.10.185 192.168.10.142 VNC 312 Authentication result Frame 19800: 312 bytes on wire (2496 bits), 312 bytes captured (2496 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 264049, Ack: 40658, Len: 258 Virtual Network Computing No. Time Source Destination Protocol Length Info 19801 240.173488 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19801: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 264307, Ack: 40658, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19802 240.173507 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19802: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 265567, Ack: 40658, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19803 240.173524 192.168.10.185 192.168.10.142 VNC 1003 Authentication result Frame 19803: 1003 bytes on wire (8024 bits), 1003 bytes captured (8024 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 266827, Ack: 40658, Len: 949 Virtual Network Computing No. Time Source Destination Protocol Length Info 19804 240.179630 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19804: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40658, Ack: 257431, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19805 240.187925 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19805: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40685, Ack: 257431, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19806 240.187945 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=267776 Ack=40712 Win=64926 Len=0 Frame 19806: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 267776, Ack: 40712, Len: 0 No. Time Source Destination Protocol Length Info 19807 240.201958 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19807: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40712, Ack: 257431, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19808 240.205641 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=40739 Ack=259951 Win=64240 Len=0 Frame 19808: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40739, Ack: 259951, Len: 0 No. Time Source Destination Protocol Length Info 19809 240.205806 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=40739 Ack=261211 Win=64240 Len=0 Frame 19809: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40739, Ack: 261211, Len: 0 No. Time Source Destination Protocol Length Info 19810 240.205828 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=40739 Ack=262787 Win=64240 Len=0 Frame 19810: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40739, Ack: 262787, Len: 0 No. Time Source Destination Protocol Length Info 19811 240.213551 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=40739 Ack=264049 Win=64240 Len=0 Frame 19811: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40739, Ack: 264049, Len: 0 No. Time Source Destination Protocol Length Info 19812 240.213703 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=40739 Ack=265567 Win=64240 Len=0 Frame 19812: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40739, Ack: 265567, Len: 0 No. Time Source Destination Protocol Length Info 19813 240.213748 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=40739 Ack=267776 Win=64240 Len=0 Frame 19813: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40739, Ack: 267776, Len: 0 No. Time Source Destination Protocol Length Info 19814 240.213880 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19814: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40739, Ack: 267776, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19815 240.213897 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=267776 Ack=40766 Win=64872 Len=0 Frame 19815: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 267776, Ack: 40766, Len: 0 No. Time Source Destination Protocol Length Info 19816 240.214182 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 19816: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40766, Ack: 267776, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 19817 240.214206 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19817: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40798, Ack: 267776, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19818 240.214223 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=267776 Ack=40825 Win=64813 Len=0 Frame 19818: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 267776, Ack: 40825, Len: 0 No. Time Source Destination Protocol Length Info 19819 240.219955 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19819: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40825, Ack: 267776, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19820 240.224417 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19820: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 267776, Ack: 40852, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19821 240.224440 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19821: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 269036, Ack: 40852, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19822 240.224460 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19822: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 270296, Ack: 40852, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19823 240.224479 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 19823: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 271556, Ack: 40852, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 19824 240.224500 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19824: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 271872, Ack: 40852, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19825 240.224519 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19825: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 273132, Ack: 40852, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19826 240.224536 192.168.10.185 192.168.10.142 VNC 60 Authentication result[Malformed Packet] Frame 19826: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 274392, Ack: 40852, Len: 2 Virtual Network Computing [Malformed Packet: VNC] No. Time Source Destination Protocol Length Info 19827 240.229626 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19827: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40852, Ack: 267776, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19828 240.229697 192.168.10.185 192.168.10.142 VNC 878 Authentication result Frame 19828: 878 bytes on wire (7024 bits), 878 bytes captured (7024 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 274394, Ack: 40879, Len: 824 Virtual Network Computing No. Time Source Destination Protocol Length Info 19829 240.233666 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19829: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40879, Ack: 267776, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19830 240.236347 192.168.10.1 192.168.10.245 Syslog 308 LOCAL1.INFO: Oct 3 19:48:18 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45131 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eywrapid@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 19830: 308 bytes on wire (2464 bits), 308 bytes captured (2464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:18 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45131 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 19831 240.239300 192.168.10.1 192.168.10.245 Syslog 314 LOCAL1.INFO: Oct 3 19:48:18 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1151 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eystatistician@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 19831: 314 bytes on wire (2512 bits), 314 bytes captured (2512 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:18 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1151 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 19832 240.253717 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 19832: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40933, Ack: 269036, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19833 240.253738 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=275218 Ack=40906 Win=64732 Len=0 SLE=40933 SRE=40960 Frame 19833: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 275218, Ack: 40906, Len: 0 No. Time Source Destination Protocol Length Info 19834 240.263526 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=40960 Ack=271556 Win=64240 Len=0 Frame 19834: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40960, Ack: 271556, Len: 0 No. Time Source Destination Protocol Length Info 19835 240.263554 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=40960 Ack=273132 Win=64240 Len=0 Frame 19835: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40960, Ack: 273132, Len: 0 No. Time Source Destination Protocol Length Info 19836 240.269990 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=40960 Ack=274394 Win=64240 Len=0 Frame 19836: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40960, Ack: 274394, Len: 0 No. Time Source Destination Protocol Length Info 19837 240.270061 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19837: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40960, Ack: 275218, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19838 240.270082 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19833#1] rfb > xrl [ACK] Seq=275218 Ack=40906 Win=64732 Len=0 SLE=40933 SRE=40987 Frame 19838: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 275218, Ack: 40906, Len: 0 No. Time Source Destination Protocol Length Info 19839 240.273578 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 19839: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40987, Ack: 275218, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 19840 240.273601 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19833#2] rfb > xrl [ACK] Seq=275218 Ack=40906 Win=64732 Len=0 SLE=40933 SRE=41019 Frame 19840: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 275218, Ack: 40906, Len: 0 No. Time Source Destination Protocol Length Info 19841 240.273659 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19841: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41019, Ack: 275218, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19842 240.273677 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19833#3] rfb > xrl [ACK] Seq=275218 Ack=40906 Win=64732 Len=0 SLE=40933 SRE=41046 Frame 19842: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 275218, Ack: 40906, Len: 0 No. Time Source Destination Protocol Length Info 19843 240.277555 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19843: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41046, Ack: 275218, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19844 240.277577 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19833#4] rfb > xrl [ACK] Seq=275218 Ack=40906 Win=64732 Len=0 SLE=40933 SRE=41073 Frame 19844: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 275218, Ack: 40906, Len: 0 No. Time Source Destination Protocol Length Info 19845 240.283633 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19845: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41073, Ack: 275218, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19846 240.283654 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19833#5] rfb > xrl [ACK] Seq=275218 Ack=40906 Win=64732 Len=0 SLE=40933 SRE=41100 Frame 19846: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 275218, Ack: 40906, Len: 0 No. Time Source Destination Protocol Length Info 19847 240.295828 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19847: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41100, Ack: 275218, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19848 240.295853 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19833#6] rfb > xrl [ACK] Seq=275218 Ack=40906 Win=64732 Len=0 SLE=40933 SRE=41127 Frame 19848: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 275218, Ack: 40906, Len: 0 No. Time Source Destination Protocol Length Info 19849 240.300628 14.97.186.55 192.168.10.207 TCP 60 13573 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 19849: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13573 (13573), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 19850 240.300756 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:48:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13573 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 19850: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13573 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 19851 240.300847 192.168.10.207 14.97.186.55 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:47:53 -0400 Frame 19851: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 14.97.186.55 (14.97.186.55) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 13573 (13573), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19852 240.300914 14.97.186.55 192.168.10.207 TCP 60 13573 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 19852: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13573 (13573), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 19853 240.303264 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19853: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41127, Ack: 275218, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19854 240.303283 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19833#7] rfb > xrl [ACK] Seq=275218 Ack=40906 Win=64732 Len=0 SLE=40933 SRE=41154 Frame 19854: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 275218, Ack: 40906, Len: 0 No. Time Source Destination Protocol Length Info 19855 240.303349 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 19855: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 40906, Ack: 275218, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19856 240.303384 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=275218 Ack=41154 Win=64484 Len=0 Frame 19856: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 275218, Ack: 41154, Len: 0 No. Time Source Destination Protocol Length Info 19857 240.315565 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19857: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 275218, Ack: 41154, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19858 240.315587 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19858: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 276478, Ack: 41154, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19859 240.315613 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19859: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 277738, Ack: 41154, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19860 240.315633 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 19860: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 278998, Ack: 41154, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 19861 240.315651 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19861: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 279314, Ack: 41154, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19862 240.315669 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19862: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 280574, Ack: 41154, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19863 240.315687 192.168.10.185 192.168.10.142 VNC 60 Authentication result[Malformed Packet] Frame 19863: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 281834, Ack: 41154, Len: 2 Virtual Network Computing [Malformed Packet: VNC] No. Time Source Destination Protocol Length Info 19864 240.316481 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19864: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 281836, Ack: 41154, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19865 240.316501 192.168.10.185 192.168.10.142 VNC 402 Authentication result Frame 19865: 402 bytes on wire (3216 bits), 402 bytes captured (3216 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 283096, Ack: 41154, Len: 348 Virtual Network Computing No. Time Source Destination Protocol Length Info 19866 240.316652 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19866: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41154, Ack: 275218, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19867 240.320012 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19867: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41181, Ack: 275218, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19868 240.320038 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=283444 Ack=41208 Win=64430 Len=0 Frame 19868: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 283444, Ack: 41208, Len: 0 No. Time Source Destination Protocol Length Info 19869 240.323695 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19869: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41208, Ack: 275218, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19870 240.331640 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19870: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41235, Ack: 275218, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19871 240.331661 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=283444 Ack=41262 Win=64376 Len=0 Frame 19871: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 283444, Ack: 41262, Len: 0 No. Time Source Destination Protocol Length Info 19872 240.341722 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19872: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41262, Ack: 275218, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19873 240.351607 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=41289 Ack=277738 Win=64240 Len=0 Frame 19873: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41289, Ack: 277738, Len: 0 No. Time Source Destination Protocol Length Info 19874 240.355953 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=41289 Ack=278998 Win=64240 Len=0 Frame 19874: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41289, Ack: 278998, Len: 0 No. Time Source Destination Protocol Length Info 19875 240.356048 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=41289 Ack=280574 Win=64240 Len=0 Frame 19875: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41289, Ack: 280574, Len: 0 No. Time Source Destination Protocol Length Info 19876 240.356155 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=41289 Ack=281836 Win=64240 Len=0 Frame 19876: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41289, Ack: 281836, Len: 0 No. Time Source Destination Protocol Length Info 19877 240.356283 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=41289 Ack=283444 Win=64240 Len=0 Frame 19877: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41289, Ack: 283444, Len: 0 No. Time Source Destination Protocol Length Info 19878 240.356516 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19878: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41289, Ack: 283444, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19879 240.356534 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=283444 Ack=41316 Win=64322 Len=0 Frame 19879: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 283444, Ack: 41316, Len: 0 No. Time Source Destination Protocol Length Info 19880 240.356599 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 19880: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41316, Ack: 283444, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 19881 240.356809 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19881: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41348, Ack: 283444, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19882 240.356827 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=283444 Ack=41375 Win=65535 Len=0 Frame 19882: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 283444, Ack: 41375, Len: 0 No. Time Source Destination Protocol Length Info 19883 240.360412 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19883: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 283444, Ack: 41375, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19884 240.360431 192.168.10.185 192.168.10.142 VNC 350 Authentication result Frame 19884: 350 bytes on wire (2800 bits), 350 bytes captured (2800 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 284704, Ack: 41375, Len: 296 Virtual Network Computing No. Time Source Destination Protocol Length Info 19885 240.365679 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19885: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41375, Ack: 283444, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19886 240.373036 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19886: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41402, Ack: 283444, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19887 240.373057 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=285000 Ack=41429 Win=65481 Len=0 Frame 19887: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 285000, Ack: 41429, Len: 0 No. Time Source Destination Protocol Length Info 19888 240.379601 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19888: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41429, Ack: 283444, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19889 240.383644 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=41456 Ack=285000 Win=64240 Len=0 Frame 19889: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41456, Ack: 285000, Len: 0 No. Time Source Destination Protocol Length Info 19890 240.394609 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 19890: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41488, Ack: 285000, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19891 240.394629 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=285000 Ack=41456 Win=65454 Len=0 SLE=41488 SRE=41515 Frame 19891: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 285000, Ack: 41456, Len: 0 No. Time Source Destination Protocol Length Info 19892 240.397624 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19892: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41515, Ack: 285000, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19893 240.397642 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19891#1] rfb > xrl [ACK] Seq=285000 Ack=41456 Win=65454 Len=0 SLE=41488 SRE=41542 Frame 19893: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 285000, Ack: 41456, Len: 0 No. Time Source Destination Protocol Length Info 19894 240.401629 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19894: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41542, Ack: 285000, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19895 240.401650 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19891#2] rfb > xrl [ACK] Seq=285000 Ack=41456 Win=65454 Len=0 SLE=41488 SRE=41569 Frame 19895: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 285000, Ack: 41456, Len: 0 No. Time Source Destination Protocol Length Info 19896 240.419532 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 19896: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41596, Ack: 285000, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19897 240.419553 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 19891#3] rfb > xrl [ACK] Seq=285000 Ack=41456 Win=65454 Len=0 SLE=41596 SRE=41623 SLE=41488 SRE=41569 Frame 19897: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 285000, Ack: 41456, Len: 0 No. Time Source Destination Protocol Length Info 19898 240.426249 192.168.10.142 192.168.10.185 VNC 86 [TCP Fast Retransmission] Authentication result Frame 19898: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41456, Ack: 285000, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 19899 240.426270 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=285000 Ack=41569 Win=65341 Len=0 SLE=41596 SRE=41623 Frame 19899: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 285000, Ack: 41569, Len: 0 No. Time Source Destination Protocol Length Info 19900 240.437750 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19900: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 285000, Ack: 41569, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19901 240.437772 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19901: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 286260, Ack: 41569, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19902 240.437793 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19902: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 287520, Ack: 41569, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19903 240.437811 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 19903: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 288780, Ack: 41569, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 19904 240.437828 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19904: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 289096, Ack: 41569, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19905 240.437845 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19905: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 290356, Ack: 41569, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19906 240.437862 192.168.10.185 192.168.10.142 VNC 60 Authentication result[Malformed Packet] Frame 19906: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 291616, Ack: 41569, Len: 2 Virtual Network Computing [Malformed Packet: VNC] No. Time Source Destination Protocol Length Info 19907 240.443889 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19907: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41623, Ack: 285000, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19908 240.443948 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19908: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41650, Ack: 285000, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19909 240.443965 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19906#1] rfb > xrl [ACK] Seq=291618 Ack=41569 Win=65341 Len=0 SLE=41596 SRE=41650 Frame 19909: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 291618, Ack: 41569, Len: 0 No. Time Source Destination Protocol Length Info 19910 240.443983 192.168.10.185 192.168.10.142 VNC 563 Authentication result Frame 19910: 563 bytes on wire (4504 bits), 563 bytes captured (4504 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 291618, Ack: 41569, Len: 509 Virtual Network Computing No. Time Source Destination Protocol Length Info 19911 240.444043 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19910#1] rfb > xrl [ACK] Seq=292127 Ack=41569 Win=65341 Len=0 SLE=41596 SRE=41677 Frame 19911: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 292127, Ack: 41569, Len: 0 No. Time Source Destination Protocol Length Info 19912 240.447846 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19912: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41677, Ack: 285000, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19913 240.447865 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19910#2] rfb > xrl [ACK] Seq=292127 Ack=41569 Win=65341 Len=0 SLE=41596 SRE=41704 Frame 19913: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 292127, Ack: 41569, Len: 0 No. Time Source Destination Protocol Length Info 19914 240.454197 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19914: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41704, Ack: 285000, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19915 240.454218 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19910#3] rfb > xrl [ACK] Seq=292127 Ack=41569 Win=65341 Len=0 SLE=41596 SRE=41731 Frame 19915: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 292127, Ack: 41569, Len: 0 No. Time Source Destination Protocol Length Info 19916 240.460060 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19916: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41731, Ack: 285000, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19917 240.460080 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19910#4] rfb > xrl [ACK] Seq=292127 Ack=41569 Win=65341 Len=0 SLE=41596 SRE=41758 Frame 19917: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 292127, Ack: 41569, Len: 0 No. Time Source Destination Protocol Length Info 19918 240.463560 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=41758 Ack=287520 Win=64240 Len=0 Frame 19918: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41758, Ack: 287520, Len: 0 No. Time Source Destination Protocol Length Info 19919 240.472205 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=41758 Ack=288780 Win=64240 Len=0 Frame 19919: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41758, Ack: 288780, Len: 0 No. Time Source Destination Protocol Length Info 19920 240.472239 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=41758 Ack=290356 Win=64240 Len=0 Frame 19920: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41758, Ack: 290356, Len: 0 No. Time Source Destination Protocol Length Info 19921 240.475909 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=41758 Ack=291618 Win=64240 Len=0 Frame 19921: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41758, Ack: 291618, Len: 0 No. Time Source Destination Protocol Length Info 19922 240.476084 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 19922: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41569, Ack: 292127, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19923 240.476103 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=292127 Ack=41758 Win=65152 Len=0 Frame 19923: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 292127, Ack: 41758, Len: 0 No. Time Source Destination Protocol Length Info 19924 240.476375 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19924: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41758, Ack: 292127, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19925 240.476401 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 19925: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41785, Ack: 292127, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 19926 240.476423 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=292127 Ack=41817 Win=65093 Len=0 Frame 19926: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 292127, Ack: 41817, Len: 0 No. Time Source Destination Protocol Length Info 19927 240.476485 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19927: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41817, Ack: 292127, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19928 240.481942 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19928: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41844, Ack: 292127, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19929 240.481964 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=292127 Ack=41871 Win=65039 Len=0 Frame 19929: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 292127, Ack: 41871, Len: 0 No. Time Source Destination Protocol Length Info 19930 240.487634 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19930: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 292127, Ack: 41871, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19931 240.487654 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19931: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 293387, Ack: 41871, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19932 240.487671 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19932: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 294647, Ack: 41871, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19933 240.487688 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 19933: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 295907, Ack: 41871, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 19934 240.503722 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 19934: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41898, Ack: 292127, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19935 240.503746 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19933#1] rfb > xrl [ACK] Seq=296223 Ack=41871 Win=65039 Len=0 SLE=41898 SRE=41925 Frame 19935: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 296223, Ack: 41871, Len: 0 No. Time Source Destination Protocol Length Info 19936 240.503765 192.168.10.185 192.168.10.142 VNC 1014 Authentication result Frame 19936: 1014 bytes on wire (8112 bits), 1014 bytes captured (8112 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 296223, Ack: 41871, Len: 960 Virtual Network Computing No. Time Source Destination Protocol Length Info 19937 240.513859 192.168.10.142 192.168.10.185 TCP 60 [TCP Previous segment lost] xrl > rfb [ACK] Seq=41952 Ack=294647 Win=64240 Len=0 Frame 19937: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41952, Ack: 294647, Len: 0 No. Time Source Destination Protocol Length Info 19938 240.521612 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=41952 Ack=295907 Win=64240 Len=0 Frame 19938: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41952, Ack: 295907, Len: 0 No. Time Source Destination Protocol Length Info 19939 240.527590 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19939: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41952, Ack: 296223, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19940 240.527611 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 19936#1] rfb > xrl [ACK] Seq=297183 Ack=41871 Win=65039 Len=0 SLE=41952 SRE=41979 SLE=41898 SRE=41925 Frame 19940: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 297183, Ack: 41871, Len: 0 No. Time Source Destination Protocol Length Info 19941 240.527876 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19941: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41979, Ack: 296223, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19942 240.527893 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 19936#2] rfb > xrl [ACK] Seq=297183 Ack=41871 Win=65039 Len=0 SLE=41952 SRE=42006 SLE=41898 SRE=41925 Frame 19942: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 297183, Ack: 41871, Len: 0 No. Time Source Destination Protocol Length Info 19943 240.531577 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 19943: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42006, Ack: 297183, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 19944 240.531597 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 19936#3] rfb > xrl [ACK] Seq=297183 Ack=41871 Win=65039 Len=0 SLE=41952 SRE=42038 SLE=41898 SRE=41925 Frame 19944: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 297183, Ack: 41871, Len: 0 No. Time Source Destination Protocol Length Info 19945 240.539663 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19945: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42038, Ack: 297183, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19946 240.539683 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 19936#4] rfb > xrl [ACK] Seq=297183 Ack=41871 Win=65039 Len=0 SLE=41952 SRE=42065 SLE=41898 SRE=41925 Frame 19946: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 297183, Ack: 41871, Len: 0 No. Time Source Destination Protocol Length Info 19947 240.553944 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 19947: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41871, Ack: 297183, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19948 240.553967 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=297183 Ack=41925 Win=64985 Len=0 SLE=41952 SRE=42065 Frame 19948: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 297183, Ack: 41925, Len: 0 No. Time Source Destination Protocol Length Info 19949 240.557663 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 19949: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 41925, Ack: 297183, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19950 240.557683 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=297183 Ack=42065 Win=64845 Len=0 Frame 19950: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 297183, Ack: 42065, Len: 0 No. Time Source Destination Protocol Length Info 19951 240.561583 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19951: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42065, Ack: 297183, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19952 240.562186 188.161.220.86 192.168.10.207 SMTP 60 C: QUIT Frame 19952: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45131 (45131), Dst Port: smtp (25), Seq: 58, Ack: 364, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19953 240.562368 192.168.10.207 188.161.220.86 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 19953: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45131 (45131), Seq: 364, Ack: 64, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19954 240.562392 188.161.220.86 192.168.10.207 TCP 60 45131 > smtp [ACK] Seq=64 Ack=433 Win=93008 Len=0 Frame 19954: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45131 (45131), Dst Port: smtp (25), Seq: 64, Ack: 433, Len: 0 No. Time Source Destination Protocol Length Info 19955 240.562492 192.168.10.207 188.161.220.86 TCP 60 smtp > 45131 [FIN, ACK] Seq=433 Ack=64 Win=65472 Len=0 Frame 19955: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45131 (45131), Seq: 433, Ack: 64, Len: 0 No. Time Source Destination Protocol Length Info 19956 240.562513 188.161.220.86 192.168.10.207 TCP 60 45131 > smtp [ACK] Seq=64 Ack=434 Win=93008 Len=0 Frame 19956: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45131 (45131), Dst Port: smtp (25), Seq: 64, Ack: 434, Len: 0 No. Time Source Destination Protocol Length Info 19957 240.566870 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19957: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 297183, Ack: 42092, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19958 240.566893 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19958: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 298443, Ack: 42092, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19959 240.566911 192.168.10.185 192.168.10.142 VNC 1258 Authentication result Frame 19959: 1258 bytes on wire (10064 bits), 1258 bytes captured (10064 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 299703, Ack: 42092, Len: 1204 Virtual Network Computing No. Time Source Destination Protocol Length Info 19960 240.585679 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19960: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42092, Ack: 297183, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19961 240.606055 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=42119 Ack=299703 Win=64240 Len=0 Frame 19961: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42119, Ack: 299703, Len: 0 No. Time Source Destination Protocol Length Info 19962 240.609830 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 19962: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42119, Ack: 300907, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 19963 240.609852 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=300907 Ack=42151 Win=64759 Len=0 Frame 19963: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 300907, Ack: 42151, Len: 0 No. Time Source Destination Protocol Length Info 19964 240.613877 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19964: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42151, Ack: 300907, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19965 240.620924 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 19965: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 300907, Ack: 42178, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 19966 240.620945 192.168.10.185 192.168.10.142 VNC 1078 Authentication result Frame 19966: 1078 bytes on wire (8624 bits), 1078 bytes captured (8624 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 302167, Ack: 42178, Len: 1024 Virtual Network Computing No. Time Source Destination Protocol Length Info 19967 240.643530 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=42178 Ack=303191 Win=64240 Len=0 Frame 19967: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42178, Ack: 303191, Len: 0 No. Time Source Destination Protocol Length Info 19968 240.654585 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 19968: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42178, Ack: 303191, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 19969 240.663069 180.243.236.205 192.168.10.207 SMTP 60 C: QUIT Frame 19969: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: unizensus (1151), Dst Port: smtp (25), Seq: 59, Ack: 364, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19970 240.663148 192.168.10.207 180.243.236.205 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 19970: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: unizensus (1151), Seq: 364, Ack: 65, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19971 240.663217 180.243.236.205 192.168.10.207 TCP 60 unizensus > smtp [ACK] Seq=65 Ack=433 Win=93008 Len=0 Frame 19971: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: unizensus (1151), Dst Port: smtp (25), Seq: 65, Ack: 433, Len: 0 No. Time Source Destination Protocol Length Info 19972 240.663236 192.168.10.207 180.243.236.205 TCP 60 smtp > unizensus [FIN, ACK] Seq=433 Ack=65 Win=65471 Len=0 Frame 19972: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: unizensus (1151), Seq: 433, Ack: 65, Len: 0 No. Time Source Destination Protocol Length Info 19973 240.663278 180.243.236.205 192.168.10.207 TCP 60 unizensus > smtp [ACK] Seq=65 Ack=434 Win=93008 Len=0 Frame 19973: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: unizensus (1151), Dst Port: smtp (25), Seq: 65, Ack: 434, Len: 0 No. Time Source Destination Protocol Length Info 19974 240.669613 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19974: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42210, Ack: 303191, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19975 240.669642 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=303191 Ack=42237 Win=64673 Len=0 Frame 19975: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 303191, Ack: 42237, Len: 0 No. Time Source Destination Protocol Length Info 19976 240.779706 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19976: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42237, Ack: 303191, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19977 240.802475 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=303191 Ack=42264 Win=64646 Len=0 Frame 19977: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 303191, Ack: 42264, Len: 0 No. Time Source Destination Protocol Length Info 19978 240.834825 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 19978: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16801, Ack: 1227154, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 19979 240.834845 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1227154 Ack=16843 Win=46279 Len=0 Frame 19979: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1227154, Ack: 16843, Len: 0 No. Time Source Destination Protocol Length Info 19980 240.877884 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-01.geo.kaspersky.com Frame 19980: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 55043 (55043), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 19981 240.878021 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-01.geo.kaspersky.com Frame 19981: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 55043 (55043), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 19982 240.901465 188.161.220.86 192.168.10.207 TCP 60 45131 > smtp [RST, ACK] Seq=64 Ack=434 Win=93008 Len=0 Frame 19982: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45131 (45131), Dst Port: smtp (25), Seq: 64, Ack: 434, Len: 0 No. Time Source Destination Protocol Length Info 19983 240.901544 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:48:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45131 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 19983: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45131 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 19984 240.905799 188.161.220.86 192.168.10.207 TCP 62 45142 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 19984: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45142 (45142), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 19985 240.905859 192.168.10.207 188.161.220.86 TCP 62 smtp > 45142 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 19985: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45142 (45142), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 19986 240.924749 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1286609152, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 19986: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19987 240.924767 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1286609152, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 19987: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19988 240.924779 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1286609152, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 19988: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19989 240.924792 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1286609152, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 19989: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19990 240.931732 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 19990: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42291, Ack: 303191, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19991 240.931762 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19977#1] rfb > xrl [ACK] Seq=303191 Ack=42264 Win=64646 Len=0 SLE=42291 SRE=42318 Frame 19991: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 303191, Ack: 42264, Len: 0 No. Time Source Destination Protocol Length Info 19992 240.942429 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19992: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42318, Ack: 303191, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19993 240.942449 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19977#2] rfb > xrl [ACK] Seq=303191 Ack=42264 Win=64646 Len=0 SLE=42291 SRE=42345 Frame 19993: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 303191, Ack: 42264, Len: 0 No. Time Source Destination Protocol Length Info 19994 240.942641 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3155689728, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 19994: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19995 240.942651 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3155689728, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 19995: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19996 240.942660 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3155689728, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 19996: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19997 240.942667 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3155689728, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 19997: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 19998 240.945780 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 19998: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42345, Ack: 303191, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 19999 240.945798 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19977#3] rfb > xrl [ACK] Seq=303191 Ack=42264 Win=64646 Len=0 SLE=42291 SRE=42372 Frame 19999: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 303191, Ack: 42264, Len: 0 No. Time Source Destination Protocol Length Info 20000 240.957741 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20000: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42372, Ack: 303191, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20001 240.957770 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19977#4] rfb > xrl [ACK] Seq=303191 Ack=42264 Win=64646 Len=0 SLE=42291 SRE=42399 Frame 20001: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 303191, Ack: 42264, Len: 0 No. Time Source Destination Protocol Length Info 20002 240.962986 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20002: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42399, Ack: 303191, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20003 240.963017 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 19977#5] rfb > xrl [ACK] Seq=303191 Ack=42264 Win=64646 Len=0 SLE=42291 SRE=42426 Frame 20003: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 303191, Ack: 42264, Len: 0 No. Time Source Destination Protocol Length Info 20004 240.963395 192.168.10.203 119.152.231.11 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 20004: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 119.152.231.11 (119.152.231.11) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 20005 240.976249 192.168.10.185 192.168.10.142 VNC 124 Authentication result Frame 20005: 124 bytes on wire (992 bits), 124 bytes captured (992 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 303191, Ack: 42264, Len: 70 Virtual Network Computing No. Time Source Destination Protocol Length Info 20006 240.979187 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 20006: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42264, Ack: 303191, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20007 240.979227 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=303261 Ack=42426 Win=64484 Len=0 Frame 20007: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 303261, Ack: 42426, Len: 0 No. Time Source Destination Protocol Length Info 20008 240.979268 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20008: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42426, Ack: 303191, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20009 240.983678 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20009: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42453, Ack: 303191, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20010 240.983707 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=303261 Ack=42480 Win=64430 Len=0 Frame 20010: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 303261, Ack: 42480, Len: 0 No. Time Source Destination Protocol Length Info 20011 240.987763 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20011: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42480, Ack: 303191, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20012 240.994444 14.97.186.55 192.168.10.207 SMTP 70 C: EHLO euecn.com Frame 20012: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13573 (13573), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 16 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20013 240.994609 192.168.10.207 14.97.186.55 SMTP 243 S: 250-mail.mydomain.com Hello [14.97.186.55] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 20013: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 14.97.186.55 (14.97.186.55) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 13573 (13573), Seq: 122, Ack: 17, Len: 189 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20014 240.994647 14.97.186.55 192.168.10.207 TCP 60 13573 > smtp [ACK] Seq=17 Ack=311 Win=93130 Len=0 Frame 20014: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13573 (13573), Dst Port: smtp (25), Seq: 17, Ack: 311, Len: 0 No. Time Source Destination Protocol Length Info 20015 240.994987 192.168.10.1 192.168.10.245 Syslog 270 LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13573 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 20015: 270 bytes on wire (2160 bits), 270 bytes captured (2160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13573 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" No. Time Source Destination Protocol Length Info 20016 240.995082 192.168.10.1 192.168.10.245 Syslog 276 LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13573 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 20016: 276 bytes on wire (2208 bits), 276 bytes captured (2208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13573 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELI No. Time Source Destination Protocol Length Info 20017 240.995184 192.168.10.1 192.168.10.245 Syslog 269 LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13573 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 20017: 269 bytes on wire (2152 bits), 269 bytes captured (2152 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13573 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 20018 240.995494 192.168.10.1 192.168.10.245 Syslog 285 LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13573 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 20018: 285 bytes on wire (2280 bits), 285 bytes captured (2280 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13573 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANC No. Time Source Destination Protocol Length Info 20019 240.995561 192.168.10.1 192.168.10.245 Syslog 276 LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13573 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 20019: 276 bytes on wire (2208 bits), 276 bytes captured (2208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13573 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARY No. Time Source Destination Protocol Length Info 20020 240.995626 192.168.10.1 192.168.10.245 Syslog 270 LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13573 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 20020: 270 bytes on wire (2160 bits), 270 bytes captured (2160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13573 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" No. Time Source Destination Protocol Length Info 20021 240.997051 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20021: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42507, Ack: 303191, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20022 240.997080 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=303261 Ack=42534 Win=64376 Len=0 Frame 20022: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 303261, Ack: 42534, Len: 0 No. Time Source Destination Protocol Length Info 20023 240.997688 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 19021#1] 9428 > smtp [ACK] Seq=671728 Ack=9787 Win=46720 Len=0 Frame 20023: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 671728, Ack: 9787, Len: 0 No. Time Source Destination Protocol Length Info 20024 240.997717 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=9787 Ack=670413 Win=0 Len=0 Frame 20024: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9787, Ack: 670413, Len: 0 No. Time Source Destination Protocol Length Info 20025 241.001779 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 20025: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42534, Ack: 303261, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 20026 241.006009 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20026: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42566, Ack: 303261, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20027 241.006040 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=303261 Ack=42593 Win=64317 Len=0 Frame 20027: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 303261, Ack: 42593, Len: 0 No. Time Source Destination Protocol Length Info 20028 241.013699 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20028: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42593, Ack: 303261, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20029 241.021891 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20029: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42620, Ack: 303261, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20030 241.021924 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=303261 Ack=42647 Win=65535 Len=0 Frame 20030: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 303261, Ack: 42647, Len: 0 No. Time Source Destination Protocol Length Info 20031 241.036078 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20031: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42647, Ack: 303261, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20032 241.045284 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 20032: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 303261, Ack: 42674, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 20033 241.045315 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 20033: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 304521, Ack: 42674, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 20034 241.045346 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 20034: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 305781, Ack: 42674, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 20035 241.045375 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 20035: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 307041, Ack: 42674, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 20036 241.045404 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 20036: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 307357, Ack: 42674, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 20037 241.045433 192.168.10.185 192.168.10.142 VNC 441 Authentication result Frame 20037: 441 bytes on wire (3528 bits), 441 bytes captured (3528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 308617, Ack: 42674, Len: 387 Virtual Network Computing No. Time Source Destination Protocol Length Info 20038 241.078008 180.243.236.205 192.168.10.207 TCP 60 unizensus > smtp [RST, ACK] Seq=65 Ack=434 Win=93008 Len=0 Frame 20038: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: unizensus (1151), Dst Port: smtp (25), Seq: 65, Ack: 434, Len: 0 No. Time Source Destination Protocol Length Info 20039 241.078080 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1151 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 20039: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1151 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 20040 241.079005 180.243.236.205 192.168.10.207 TCP 62 commlinx-avl > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 20040: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: commlinx-avl (1190), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 20041 241.079062 192.168.10.207 180.243.236.205 TCP 62 smtp > commlinx-avl [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 20041: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: commlinx-avl (1190), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 20042 241.120127 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 20042: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42701, Ack: 303261, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20043 241.120200 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20037#1] rfb > xrl [ACK] Seq=309004 Ack=42674 Win=65508 Len=0 SLE=42701 SRE=42728 Frame 20043: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 309004, Ack: 42674, Len: 0 No. Time Source Destination Protocol Length Info 20044 241.123950 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=42728 Ack=305781 Win=64240 Len=0 Frame 20044: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42728, Ack: 305781, Len: 0 No. Time Source Destination Protocol Length Info 20045 241.123988 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=42728 Ack=307041 Win=64240 Len=0 Frame 20045: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42728, Ack: 307041, Len: 0 No. Time Source Destination Protocol Length Info 20046 241.124027 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=42728 Ack=308617 Win=64240 Len=0 Frame 20046: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42728, Ack: 308617, Len: 0 No. Time Source Destination Protocol Length Info 20047 241.128225 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20047: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42728, Ack: 309004, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20048 241.128257 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20037#2] rfb > xrl [ACK] Seq=309004 Ack=42674 Win=65508 Len=0 SLE=42701 SRE=42755 Frame 20048: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 309004, Ack: 42674, Len: 0 No. Time Source Destination Protocol Length Info 20049 241.132669 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 20049: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42755, Ack: 309004, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 20050 241.132697 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20037#3] rfb > xrl [ACK] Seq=309004 Ack=42674 Win=65508 Len=0 SLE=42701 SRE=42787 Frame 20050: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 309004, Ack: 42674, Len: 0 No. Time Source Destination Protocol Length Info 20051 241.154588 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20051: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42787, Ack: 309004, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20052 241.154622 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20037#4] rfb > xrl [ACK] Seq=309004 Ack=42674 Win=65508 Len=0 SLE=42701 SRE=42814 Frame 20052: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 309004, Ack: 42674, Len: 0 No. Time Source Destination Protocol Length Info 20053 241.157739 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 20053: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42674, Ack: 309004, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20054 241.157767 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=309004 Ack=42814 Win=65368 Len=0 Frame 20054: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 309004, Ack: 42814, Len: 0 No. Time Source Destination Protocol Length Info 20055 241.165764 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20055: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42814, Ack: 309004, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20056 241.167768 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 20056: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 309004, Ack: 42841, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 20057 241.167798 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 20057: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 310264, Ack: 42841, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 20058 241.167826 192.168.10.185 192.168.10.142 VNC 310 Authentication result Frame 20058: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 311524, Ack: 42841, Len: 256 Virtual Network Computing No. Time Source Destination Protocol Length Info 20059 241.194319 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 20059: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 20060 241.199002 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=42841 Ack=311524 Win=64240 Len=0 Frame 20060: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42841, Ack: 311524, Len: 0 No. Time Source Destination Protocol Length Info 20061 241.204080 192.168.10.142 192.168.10.185 VNC 86 [TCP Previous segment lost] Authentication result Frame 20061: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42868, Ack: 311780, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 20062 241.204110 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20058#1] rfb > xrl [ACK] Seq=311780 Ack=42841 Win=65341 Len=0 SLE=42868 SRE=42900 Frame 20062: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 311780, Ack: 42841, Len: 0 No. Time Source Destination Protocol Length Info 20063 241.213183 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20063: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42900, Ack: 311780, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20064 241.213215 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20058#2] rfb > xrl [ACK] Seq=311780 Ack=42841 Win=65341 Len=0 SLE=42868 SRE=42927 Frame 20064: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 311780, Ack: 42841, Len: 0 No. Time Source Destination Protocol Length Info 20065 241.228061 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20065: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42927, Ack: 311780, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20066 241.228096 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20058#3] rfb > xrl [ACK] Seq=311780 Ack=42841 Win=65341 Len=0 SLE=42868 SRE=42954 Frame 20066: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 311780, Ack: 42841, Len: 0 No. Time Source Destination Protocol Length Info 20067 241.229761 188.161.220.86 192.168.10.207 TCP 60 45142 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 20067: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45142 (45142), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 20068 241.229844 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45142 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 20068: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45142 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 20069 241.229878 192.168.10.207 188.161.220.86 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:47:53 -0400 Frame 20069: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45142 (45142), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20070 241.229949 188.161.220.86 192.168.10.207 TCP 60 45142 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 20070: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45142 (45142), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 20071 241.241792 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20071: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42954, Ack: 311780, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20072 241.241827 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20058#4] rfb > xrl [ACK] Seq=311780 Ack=42841 Win=65341 Len=0 SLE=42868 SRE=42981 Frame 20072: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 311780, Ack: 42841, Len: 0 No. Time Source Destination Protocol Length Info 20073 241.245978 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 20073: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42841, Ack: 311780, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20074 241.246026 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=311780 Ack=42981 Win=65201 Len=0 Frame 20074: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 311780, Ack: 42981, Len: 0 No. Time Source Destination Protocol Length Info 20075 241.257120 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 20075: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 311780, Ack: 42981, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 20076 241.257156 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 20076: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 313040, Ack: 42981, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 20077 241.257188 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 20077: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 314300, Ack: 42981, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 20078 241.257217 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 20078: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 315560, Ack: 42981, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 20079 241.258309 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20079: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 42981, Ack: 311780, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20080 241.258344 192.168.10.185 192.168.10.142 VNC 1041 Authentication result Frame 20080: 1041 bytes on wire (8328 bits), 1041 bytes captured (8328 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 315876, Ack: 43008, Len: 987 Virtual Network Computing No. Time Source Destination Protocol Length Info 20081 241.282065 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=43008 Ack=314300 Win=64240 Len=0 Frame 20081: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43008, Ack: 314300, Len: 0 No. Time Source Destination Protocol Length Info 20082 241.299833 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=43008 Ack=315560 Win=64240 Len=0 Frame 20082: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43008, Ack: 315560, Len: 0 No. Time Source Destination Protocol Length Info 20083 241.300104 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20083: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43008, Ack: 315876, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20084 241.300147 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 20084: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43035, Ack: 316863, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 20085 241.300176 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=316863 Ack=43067 Win=65115 Len=0 Frame 20085: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 316863, Ack: 43067, Len: 0 No. Time Source Destination Protocol Length Info 20086 241.303729 192.168.10.185 192.168.10.142 VNC 539 Authentication result Frame 20086: 539 bytes on wire (4312 bits), 539 bytes captured (4312 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 316863, Ack: 43067, Len: 485 Virtual Network Computing No. Time Source Destination Protocol Length Info 20087 241.303778 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20087: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43067, Ack: 316863, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20088 241.307828 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20088: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43094, Ack: 316863, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20089 241.307860 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=317348 Ack=43121 Win=65061 Len=0 Frame 20089: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 317348, Ack: 43121, Len: 0 No. Time Source Destination Protocol Length Info 20090 241.313944 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20090: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43121, Ack: 316863, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20091 241.315773 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 20091: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 20092 241.340855 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 20092: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43148, Ack: 317348, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 20093 241.340893 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=317348 Ack=43180 Win=65002 Len=0 Frame 20093: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 317348, Ack: 43180, Len: 0 No. Time Source Destination Protocol Length Info 20094 241.345835 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20094: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43180, Ack: 317348, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20095 241.348642 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 20095: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 317348, Ack: 43207, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 20096 241.348674 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 20096: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 318608, Ack: 43207, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 20097 241.348704 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 20097: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 319868, Ack: 43207, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 20098 241.348732 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 20098: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 321128, Ack: 43207, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 20099 241.357804 180.243.236.205 192.168.10.207 TCP 60 commlinx-avl > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 20099: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: commlinx-avl (1190), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 20100 241.357969 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1190 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 20100: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1190 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 20101 241.358006 192.168.10.207 180.243.236.205 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:47:54 -0400 Frame 20101: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: commlinx-avl (1190), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20102 241.358048 180.243.236.205 192.168.10.207 TCP 60 commlinx-avl > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 20102: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: commlinx-avl (1190), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 20103 241.373749 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20103: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43207, Ack: 317348, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20104 241.373793 192.168.10.185 192.168.10.142 VNC 581 Authentication result Frame 20104: 581 bytes on wire (4648 bits), 581 bytes captured (4648 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 321444, Ack: 43234, Len: 527 Virtual Network Computing No. Time Source Destination Protocol Length Info 20105 241.374159 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 20105: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 20106 241.374186 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 20106: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 20107 241.388076 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=43234 Ack=321128 Win=64240 Len=0 Frame 20107: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43234, Ack: 321128, Len: 0 No. Time Source Destination Protocol Length Info 20108 241.401775 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 20108: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43234, Ack: 321971, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 20109 241.408765 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 20109: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 321971, Ack: 43266, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 20110 241.408798 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 20110: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 323231, Ack: 43266, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 20111 241.408827 192.168.10.185 192.168.10.142 VNC 555 Authentication result Frame 20111: 555 bytes on wire (4440 bits), 555 bytes captured (4440 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 324491, Ack: 43266, Len: 501 Virtual Network Computing No. Time Source Destination Protocol Length Info 20112 241.433724 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=43266 Ack=324491 Win=64240 Len=0 Frame 20112: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43266, Ack: 324491, Len: 0 No. Time Source Destination Protocol Length Info 20113 241.443993 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 20113: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 20114 241.477311 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 20114: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16843, Ack: 1227154, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20115 241.477349 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1227154 Ack=16885 Win=46258 Len=0 Frame 20115: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1227154, Ack: 16885, Len: 0 No. Time Source Destination Protocol Length Info 20116 241.484376 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=9787 Ack=670413 Win=47803 Len=0 Frame 20116: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9787, Ack: 670413, Len: 0 No. Time Source Destination Protocol Length Info 20117 241.484409 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 20116#1] smtp > 9428 [ACK] Seq=9787 Ack=670413 Win=47803 Len=0 Frame 20117: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9787, Ack: 670413, Len: 0 No. Time Source Destination Protocol Length Info 20118 241.484444 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20118: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 671728, Ack: 9787, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20119 241.484474 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20119: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 673108, Ack: 9787, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20120 241.484503 206.225.164.188 192.168.10.207 SMTP 632 C: DATA fragment, 578 bytes Frame 20120: 632 bytes on wire (5056 bits), 632 bytes captured (5056 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 674488, Ack: 9787, Len: 578 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20121 241.484532 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20121: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 675066, Ack: 9787, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20122 241.484565 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20122: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 676446, Ack: 9787, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20123 241.484606 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 20116#2] smtp > 9428 [ACK] Seq=9787 Ack=670413 Win=47803 Len=0 Frame 20123: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9787, Ack: 670413, Len: 0 No. Time Source Destination Protocol Length Info 20124 241.484636 192.168.10.207 206.225.164.188 SMTP 264 S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 20124: 264 bytes on wire (2112 bits), 264 bytes captured (2112 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9787, Ack: 670413, Len: 210 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20125 241.484664 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 20124#1] smtp > 9428 [ACK] Seq=9997 Ack=670413 Win=47803 Len=0 Frame 20125: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9997, Ack: 670413, Len: 0 No. Time Source Destination Protocol Length Info 20126 241.484693 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 20124#2] smtp > 9428 [ACK] Seq=9997 Ack=670413 Win=47803 Len=0 Frame 20126: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9997, Ack: 670413, Len: 0 No. Time Source Destination Protocol Length Info 20127 241.484721 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=677826 Ack=9997 Win=46615 Len=0 Frame 20127: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 677826, Ack: 9997, Len: 0 No. Time Source Destination Protocol Length Info 20128 241.484749 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 20124#3] smtp > 9428 [ACK] Seq=9997 Ack=670413 Win=47803 Len=0 Frame 20128: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9997, Ack: 670413, Len: 0 No. Time Source Destination Protocol Length Info 20129 241.484781 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 20124#4] smtp > 9428 [ACK] Seq=9997 Ack=670413 Win=47803 Len=0 Frame 20129: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9997, Ack: 670413, Len: 0 No. Time Source Destination Protocol Length Info 20130 241.484811 206.225.164.188 192.168.10.207 SMTP 1369 [TCP Fast Retransmission] C: DATA fragment, 1315 bytes Frame 20130: 1369 bytes on wire (10952 bits), 1369 bytes captured (10952 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 670413, Ack: 9997, Len: 1315 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20131 241.484841 206.225.164.188 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 20131: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 671728, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20132 241.484869 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9997 Ack=677826 Win=40390 Len=0 Frame 20132: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9997, Ack: 677826, Len: 0 No. Time Source Destination Protocol Length Info 20133 241.484899 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 20132#1] smtp > 9428 [ACK] Seq=9997 Ack=677826 Win=40390 Len=0 Frame 20133: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9997, Ack: 677826, Len: 0 No. Time Source Destination Protocol Length Info 20134 241.484927 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20134: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 677826, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20135 241.484958 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20135: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 679206, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20136 241.484987 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9997 Ack=680586 Win=37630 Len=0 Frame 20136: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9997, Ack: 680586, Len: 0 No. Time Source Destination Protocol Length Info 20137 241.485082 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20137: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 680586, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20138 241.485120 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20138: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 681966, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20139 241.485152 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20139: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 683346, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20140 241.485183 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9997 Ack=683346 Win=34870 Len=0 Frame 20140: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9997, Ack: 683346, Len: 0 No. Time Source Destination Protocol Length Info 20141 241.485370 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20141: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 684726, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20142 241.485400 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20142: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 686106, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20143 241.485428 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9997 Ack=686106 Win=32110 Len=0 Frame 20143: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9997, Ack: 686106, Len: 0 No. Time Source Destination Protocol Length Info 20144 241.485460 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20144: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 687486, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20145 241.485489 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20145: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 688866, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20146 241.485518 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20146: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 690246, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20147 241.485549 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9997 Ack=688866 Win=29350 Len=0 Frame 20147: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9997, Ack: 688866, Len: 0 No. Time Source Destination Protocol Length Info 20148 241.485586 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9997 Ack=691626 Win=26590 Len=0 Frame 20148: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9997, Ack: 691626, Len: 0 No. Time Source Destination Protocol Length Info 20149 241.485616 206.225.164.188 192.168.10.207 SMTP 583 C: DATA fragment, 529 bytes Frame 20149: 583 bytes on wire (4664 bits), 583 bytes captured (4664 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 691626, Ack: 9997, Len: 529 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20150 241.485646 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20150: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 692155, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20151 241.485676 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20151: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 693535, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20152 241.485709 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20152: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 694915, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20153 241.485738 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20153: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 696295, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20154 241.485766 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9997 Ack=693535 Win=24681 Len=0 Frame 20154: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9997, Ack: 693535, Len: 0 No. Time Source Destination Protocol Length Info 20155 241.485794 206.225.164.188 192.168.10.207 SMTP 697 C: DATA fragment, 643 bytes Frame 20155: 697 bytes on wire (5576 bits), 697 bytes captured (5576 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 697675, Ack: 9997, Len: 643 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20156 241.485823 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20156: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 698318, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20157 241.485854 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9997 Ack=697675 Win=20541 Len=0 Frame 20157: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9997, Ack: 697675, Len: 0 No. Time Source Destination Protocol Length Info 20158 241.485893 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20158: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 699698, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20159 241.485923 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20159: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 701078, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20160 241.485952 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9997 Ack=699698 Win=18518 Len=0 Frame 20160: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9997, Ack: 699698, Len: 0 No. Time Source Destination Protocol Length Info 20161 241.485981 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20161: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 702458, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20162 241.486010 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20162: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 703838, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20163 241.486049 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20163: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 705218, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20164 241.486078 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9997 Ack=703838 Win=14378 Len=0 Frame 20164: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9997, Ack: 703838, Len: 0 No. Time Source Destination Protocol Length Info 20165 241.486111 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20165: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 706598, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20166 241.486142 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20166: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 707978, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20167 241.486171 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20167: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 709358, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20168 241.486200 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9997 Ack=706598 Win=11618 Len=0 Frame 20168: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9997, Ack: 706598, Len: 0 No. Time Source Destination Protocol Length Info 20169 241.486230 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9997 Ack=709358 Win=8858 Len=0 Frame 20169: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9997, Ack: 709358, Len: 0 No. Time Source Destination Protocol Length Info 20170 241.486260 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20170: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 710738, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20171 241.486289 206.225.164.188 192.168.10.207 SMTP 522 C: DATA fragment, 468 bytes Frame 20171: 522 bytes on wire (4176 bits), 522 bytes captured (4176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 712118, Ack: 9997, Len: 468 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20172 241.486318 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20172: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 712586, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20173 241.486352 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20173: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 713966, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20174 241.486382 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20174: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 715346, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20175 241.486411 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9997 Ack=712586 Win=5630 Len=0 Frame 20175: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9997, Ack: 712586, Len: 0 No. Time Source Destination Protocol Length Info 20176 241.486440 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9997 Ack=715346 Win=2870 Len=0 Frame 20176: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9997, Ack: 715346, Len: 0 No. Time Source Destination Protocol Length Info 20177 241.486469 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20177: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 716726, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20178 241.486499 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 20178: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 718106, Ack: 9997, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20179 241.486535 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=9997 Ack=718106 Win=110 Len=0 Frame 20179: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9997, Ack: 718106, Len: 0 No. Time Source Destination Protocol Length Info 20180 241.566325 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 20180: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 20181 241.608927 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=9997 Ack=718216 Win=0 Len=0 Frame 20181: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9997, Ack: 718216, Len: 0 No. Time Source Destination Protocol Length Info 20182 241.635475 180.243.236.205 192.168.10.207 SMTP 73 C: EHLO uwthqjmn.com Frame 20182: 73 bytes on wire (584 bits), 73 bytes captured (584 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: commlinx-avl (1190), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 19 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20183 241.635686 192.168.10.207 180.243.236.205 SMTP 246 S: 250-mail.mydomain.com Hello [180.243.236.205] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 20183: 246 bytes on wire (1968 bits), 246 bytes captured (1968 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: commlinx-avl (1190), Seq: 122, Ack: 20, Len: 192 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20184 241.635727 180.243.236.205 192.168.10.207 TCP 60 commlinx-avl > smtp [ACK] Seq=20 Ack=314 Win=93126 Len=0 Frame 20184: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: commlinx-avl (1190), Dst Port: smtp (25), Seq: 20, Ack: 314, Len: 0 No. Time Source Destination Protocol Length Info 20185 241.636553 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=217159 Ack=3405 Win=1002 Len=1448 TSval=595656 TSecr=729879 Frame 20185: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 217159, Ack: 3405, Len: 1448 Data (1448 bytes) 0000 17 03 01 22 70 c6 51 e3 35 97 04 35 60 9c 79 34 ..."p.Q.5..5`.y4 0010 66 88 02 7c a3 87 95 9c 12 c1 ac c6 6f 0a 92 95 f..|........o... 0020 12 27 68 e4 19 ac 70 9f 89 f2 bd 0f ef b8 40 ec .'h...p.......@. 0030 97 55 80 7d 2c bc 94 b1 cf 81 fe b8 43 bf 95 b5 .U.},.......C... 0040 d5 43 cc c6 5e 36 52 74 ff ba ea 04 16 28 3a 86 .C..^6Rt.....(:. 0050 19 20 f2 f8 8e b5 4f f8 09 56 a3 9c 0e 32 79 76 . ....O..V...2yv 0060 86 f0 18 95 38 f2 d7 03 01 4b 63 76 14 1a 81 78 ....8....Kcv...x 0070 b5 59 fd 4a c1 99 38 af 7a 68 e0 05 8a db 73 10 .Y.J..8.zh....s. 0080 63 ed 89 6c 95 58 62 9a 12 ce 63 d6 20 6d 2c 3a c..l.Xb...c. m,: 0090 9c 95 eb c8 a1 09 e8 da 5d 4e b3 2f 10 31 4c 97 ........]N./.1L. 00a0 8b 60 83 53 71 97 b2 56 35 9e 81 40 42 f3 58 8d .`[email protected]. 00b0 9c ef 6b 59 21 03 ce 1d da db 36 d7 cf ce c6 90 ..kY!.....6..... 00c0 84 f9 55 d1 9c 53 f3 b7 26 4c 48 07 bb b3 06 17 ..U..S..&LH..... 00d0 74 4b f9 06 47 23 a3 66 a0 11 16 75 89 eb 9f cc tK..G#.f...u.... 00e0 1f cc a7 d3 e1 18 cc f9 18 d5 b0 45 81 46 e4 7b ...........E.F.{ 00f0 34 3e db ee f1 0a 29 bd b9 ee 66 e4 0e 36 b3 56 4>....)...f..6.V 0100 d7 94 b4 c8 b1 d5 60 58 74 b0 f2 40 6d 27 a3 d8 ......`Xt..@m'.. 0110 61 e3 e5 7a 81 73 fa fd 0d 29 9f 77 c1 49 0e f9 a..z.s...).w.I.. 0120 fc 12 7f 0c 64 85 91 fb c9 ec 19 57 7e 48 cc be ....d......W~H.. 0130 3e 64 79 5b 10 09 82 88 0e cb 43 cd 45 0a ed 7c >dy[......C.E..| 0140 c8 06 cf 77 a6 47 5c 89 79 0b 5b 41 e7 d6 a5 22 ...w.G\.y.[A..." 0150 33 b3 a6 e9 eb 21 6e 4b 8a e0 76 20 a5 a2 29 08 3....!nK..v ..). 0160 24 b9 9f e8 db 27 46 2e a4 5d e4 ae 04 00 ed aa $....'F..]...... 0170 19 21 62 1d c1 83 e0 e7 b6 19 df 2a 42 e0 89 47 .!b........*B..G 0180 b5 4b 86 90 ab bc 9e 5a 30 ed a5 27 be 0b 03 b9 .K.....Z0..'.... 0190 4f fc 7e 76 e0 39 0e 1c c8 bd 74 b6 18 95 7b 2b O.~v.9....t...{+ 01a0 53 fb cf 56 b3 e2 a9 8c 0f 8f 9f 0c be f4 c1 f9 S..V............ 01b0 f8 bb d7 f2 a7 b0 a5 f1 b5 c9 c3 0e 8e 8b 09 0f ................ 01c0 70 61 87 18 8b 5a 54 67 f2 a0 25 7c 7a 06 b6 ea pa...ZTg..%|z... 01d0 e5 31 cd 3c 7c 12 47 eb 06 f2 35 d5 f9 05 c9 8c .1.<|.G...5..... 01e0 66 76 72 84 91 27 0d f4 e7 84 10 7b 70 20 7c f0 fvr..'.....{p |. 01f0 5f 8c 60 0e 27 f7 17 0a e4 0a cc 2a 48 84 47 3c _.`.'......*H.G< 0200 a4 23 ab 90 09 30 62 93 d8 7b 29 87 47 11 c2 e1 .#...0b..{).G... 0210 fa f6 d9 ec b5 97 a0 5d f8 63 ba b9 d2 82 60 d6 .......].c....`. 0220 19 00 fd d2 f1 f1 0b be 36 9a 96 a7 a0 8a 66 88 ........6.....f. 0230 7a 03 31 c1 65 75 7b e3 32 40 01 b2 7f e8 d8 0d z.1.eu{.2@...... 0240 4f 22 5c d3 90 8b 38 10 32 5c 39 51 01 75 b9 79 O"\...8.2\9Q.u.y 0250 5c 94 5c 1e e3 92 cb 57 f0 04 7e c2 a1 73 b0 f6 \.\....W..~..s.. 0260 9e 80 a3 10 39 e8 78 29 d9 c0 83 1b 98 a0 c6 6d ....9.x).......m 0270 93 bb 1b 47 82 56 b6 78 67 0b 0b d2 8b c1 12 12 ...G.V.xg....... 0280 b5 f3 57 d8 a5 29 8d a8 d6 9e c9 b5 85 6d b3 ec ..W..).......m.. 0290 6a c6 63 98 3e 41 97 3d 57 0e dc b5 da f8 d4 57 j.c.>A.=W......W 02a0 17 0b 99 dd a2 22 d2 48 19 99 17 fd df fa 73 a6 .....".H......s. 02b0 f9 cb 51 fe ae e3 7f 30 3d 07 bd 25 59 ca 06 49 ..Q....0=..%Y..I 02c0 32 7b 51 90 fb 6f 0d 00 42 74 2e 51 62 12 64 83 2{Q..o..Bt.Qb.d. 02d0 27 38 c6 10 40 f8 23 cd d8 c0 02 41 70 e3 d0 1e '8..@.#....Ap... 02e0 60 94 fc a2 be 07 51 00 ab 82 48 99 b5 09 4f 08 `.....Q...H...O. 02f0 85 d4 2d 5b 0e db fd 6d 19 a4 d3 31 e7 27 93 b8 ..-[...m...1.'.. 0300 a0 51 e2 38 87 27 81 01 45 65 5d 49 ff 7c 99 7c .Q.8.'..Ee]I.|.| 0310 10 32 49 7e c6 01 96 34 7a 15 c1 ea 5e ac 1b 05 .2I~...4z...^... 0320 52 ed df 75 d9 63 29 aa 6e 64 5e 6f 5a f1 bf 84 R..u.c).nd^oZ... 0330 17 5b fd ef c4 c6 69 83 75 8c 0a 7c 3d 44 38 f1 .[....i.u..|=D8. 0340 fb 1d 1c 70 07 a4 14 e8 6c 1a 35 4c 24 f6 56 33 ...p....l.5L$.V3 0350 f3 64 5a 77 1d fd 61 5f c6 28 1f e1 23 1d 90 ca .dZw..a_.(..#... 0360 b1 35 55 0f 17 c0 0d 8e 18 13 c4 28 40 27 ad fc .5U........(@'.. 0370 ff 06 e1 cf 4f b3 ec 3f b9 64 d2 12 86 a3 8c f2 ....O..?.d...... 0380 17 69 44 b1 25 e3 e9 1f 9d 7f db 28 d2 93 1c 9b .iD.%......(.... 0390 16 1d 24 5f 23 cb e6 4e 1a df 72 f5 95 4b 63 e4 ..$_#..N..r..Kc. 03a0 2f 47 05 c9 9f 59 fe a6 dd dd 94 12 a5 c0 46 60 /G...Y........F` 03b0 3d 55 d4 78 5c 0b f9 1e f6 6d 55 53 74 af da 20 =U.x\....mUSt.. 03c0 2d ba 70 13 e1 0b b4 58 a1 06 97 cc c5 e0 f1 eb -.p....X........ 03d0 5e f2 1c f3 22 03 d3 6c fa fd b3 e1 fc f9 53 5f ^..."..l......S_ 03e0 89 ea 26 01 16 67 39 8c a0 0c 53 81 e8 0d d6 10 ..&..g9...S..... 03f0 c1 af 08 9d cb 02 32 d9 ac 06 f9 76 30 5b cc 95 ......2....v0[.. 0400 45 70 b8 7f 8d 6a 4f 3e 5e be 28 4e 6f 93 ef 63 Ep...jO>^.(No..c 0410 50 e8 bf 0e b9 ad 2e da b4 2d 2f f8 3d 08 51 3d P........-/.=.Q= 0420 8c 9f 7e 66 48 e8 64 83 af 03 14 3a e2 c4 b3 96 ..~fH.d....:.... 0430 fb f6 07 9d ff e2 e6 3c 4c 75 75 1e a1 52 1d 80 .......<Luu..R.. 0440 a3 48 93 e4 8a 56 0f 59 d3 d6 dd 5d 9a fd 3f 5b .H...V.Y...]..?[ 0450 9b 23 2c bb c2 02 bc 2d 9a ef 00 ea 8a 71 52 27 .#,....-.....qR' 0460 2d b5 be 7e eb b1 04 de 2b f2 82 71 78 e5 a0 fb -..~....+..qx... 0470 9d c3 c4 ac 2f 4c 96 97 03 d9 c1 9f 0c 24 84 56 ..../L.......$.V 0480 e8 9e e8 b0 44 9c 77 51 99 3c c2 4f 7c a8 7f 7c ....D.wQ.<.O|..| 0490 7a e5 3e dd 79 2f 3a 75 5b 37 20 29 50 67 4d b9 z.>.y/:u[7 )PgM. 04a0 29 16 4f 53 e8 e1 12 86 5b 89 5f 0a cc ad 15 f8 ).OS....[._..... 04b0 f6 50 f6 72 26 3c 12 54 86 7b 8e 33 d9 c0 44 a3 .P.r&<.T.{.3..D. 04c0 8a 1a e1 a3 83 e6 c2 c9 27 1c fc 8f ac 0f b6 26 ........'......& 04d0 3b ad 70 16 5e 66 2c 08 92 1a ab ad ad 84 c8 32 ;.p.^f,........2 04e0 d9 3e 21 7b 2c 94 38 74 bd 30 85 68 29 4e 66 aa .>!{,.8t.0.h)Nf. 04f0 5a cb 57 ca 89 b8 a4 74 4d 4b 24 7b 26 04 58 59 Z.W....tMK${&.XY 0500 3c 75 62 73 70 e5 0d 6e 87 e3 0b ee 5d bb 99 3b <ubsp..n....]..; 0510 0a 0e 23 12 48 38 cc ae fe 56 73 24 f9 96 3f 37 ..#.H8...Vs$..?7 0520 25 2f a5 15 18 3d 0c 48 31 0d 1c c8 66 2c e8 3a %/...=.H1...f,.: 0530 6b 60 a1 c3 fc 2d 23 ea ad 9f fe d8 24 27 96 72 k`...-#.....$'.r 0540 a4 3f 45 51 c9 91 b1 2c 12 01 5e da 1e 91 ff bc .?EQ...,..^..... 0550 79 7b 18 37 f9 bd d6 eb bc 58 04 16 80 f3 74 64 y{.7.....X....td 0560 18 9e c7 cb b0 29 7b 54 46 f6 62 a8 0d 84 a4 5a .....){TF.b....Z 0570 f5 c7 0a 8a 2b ae 49 7f 52 46 e7 8d 53 fe ae 73 ....+.I.RF..S..s 0580 c8 2a c3 11 a6 8d bd d0 5e 0f 10 5e 6b 5c 3b 2e .*......^..^k\;. 0590 3c e8 55 4a c2 0e f0 59 52 d5 3e ec 62 00 02 ce <.UJ...YR.>.b... 05a0 56 00 57 27 d2 02 93 4e V.W'...N No. Time Source Destination Protocol Length Info 20186 241.636643 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=218607 Ack=3405 Win=1002 Len=1448 TSval=595656 TSecr=729879 Frame 20186: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 218607, Ack: 3405, Len: 1448 Data (1448 bytes) 0000 a1 20 73 e6 c8 43 c2 02 19 6f 9b 8e 34 e7 c8 67 . s..C...o..4..g 0010 49 74 4d 9b ad 8d fd 80 c0 94 50 97 d8 11 88 86 ItM.......P..... 0020 c9 0d 08 98 b6 47 3c eb c7 56 42 65 fa 06 d1 94 .....G<..VBe.... 0030 16 c1 89 62 ca eb 24 fc 1b af 95 7e 02 fc 29 c4 ...b..$....~..). 0040 79 d6 0b 11 83 3d da 5e e1 df 13 0d f0 ad 62 2c y....=.^......b, 0050 ed 9b ad c3 7c e8 83 69 f8 69 81 b9 b1 7e ef 7e ....|..i.i...~.~ 0060 81 09 81 cb 6b c7 e2 7b ac 6a d0 92 b6 f5 47 76 ....k..{.j....Gv 0070 b6 99 08 ec 8f 7e c9 eb 72 47 f9 f8 3a bf 20 fa .....~..rG..:. . 0080 73 de ec 2a 76 cc 11 2e d3 2e 4b c7 8d 81 dd 2b s..*v.....K....+ 0090 2e 66 c5 e3 02 f8 d5 67 97 5a 7c 89 d1 e2 a7 da .f.....g.Z|..... 00a0 5f 60 33 e0 d7 b5 46 27 b2 27 09 e3 f0 bb 65 24 _`3...F'.'....e$ 00b0 64 52 69 56 a7 ba f5 45 51 b8 5b 12 89 6f 55 12 dRiV...EQ.[..oU. 00c0 75 ae 71 8e 38 14 ef 4b 4a 3f 73 93 95 ad 3c fb u.q.8..KJ?s...<. 00d0 b0 1a 6b 59 03 ed 37 50 6e d6 03 8c 47 58 85 c9 ..kY..7Pn...GX.. 00e0 53 fa fd 85 55 0b d9 6e 4e 5f 21 6d 87 88 0e ab S...U..nN_!m.... 00f0 5d 7a 88 c3 8d 04 db 05 e9 cf 66 af 59 7a d5 15 ]z........f.Yz.. 0100 4d ee fa d8 6b 68 65 55 9e f9 82 c8 e4 65 a7 7e M...kheU.....e.~ 0110 bb 7f e5 37 f4 db cd c0 3d 5e ac 1f dd 1e 03 0c ...7....=^...... 0120 f5 2a f2 74 c8 96 3c a5 4f c6 f4 a9 87 c4 d1 6f .*.t..<.O......o 0130 d5 92 bc 78 95 25 9d ba 7c 1c 06 dd 69 cf 7f b5 ...x.%..|...i... 0140 00 0e 28 5e af ea a0 65 50 d2 9c 0b 29 b2 da dd ..(^...eP...)... 0150 84 76 fc a7 e3 16 a3 cf 63 c2 0d 66 af 43 55 d4 .v......c..f.CU. 0160 fe 15 f8 c1 e1 85 27 a8 36 71 d1 e7 14 9d 99 8c ......'.6q...... 0170 56 22 04 a2 0f db 5c e5 d1 6a 9d 47 e5 d6 6b 24 V"....\..j.G..k$ 0180 fe 50 75 70 d7 66 5d 30 f0 4b 4f f1 f7 f0 ef 4c .Pup.f]0.KO....L 0190 1b 6e 09 e7 7a db 72 3e a1 26 ba 77 e4 ad 1d 7d .n..z.r>.&.w...} 01a0 c5 38 e5 44 d5 a2 01 48 fc ac ef 31 28 80 e0 f5 .8.D...H...1(... 01b0 be 9a db 2c 8d 00 33 d2 c1 1b c0 99 46 50 e6 f4 ...,..3.....FP.. 01c0 3d 9c 99 f2 ce 3e 55 71 23 9c 8e 89 26 b3 1e 56 =....>Uq#...&..V 01d0 e9 be 7c 0e c9 b3 24 e3 7e 49 39 dd 66 ef a2 71 ..|...$.~I9.f..q 01e0 f8 61 af 55 bc 57 cc 52 44 98 81 35 35 4f 9f 53 .a.U.W.RD..55O.S 01f0 95 76 4b 07 9c 26 f8 38 42 f2 aa ad aa 5e bf 97 .vK..&.8B....^.. 0200 75 db 88 bc 72 ea 3a 1c 36 08 43 77 bb 42 3f 54 u...r.:.6.Cw.B?T 0210 c1 75 b2 87 e8 7b 11 be f6 5f 6a 4b d6 d0 c6 f4 .u...{..._jK.... 0220 9c 57 39 3b c4 88 78 a0 80 59 a0 43 e2 08 e0 5e .W9;..x..Y.C...^ 0230 a1 0f 36 40 14 5d c9 4d 6f d6 a7 1a 9c e2 69 87 ..6@.].Mo.....i. 0240 1d bf bc c7 69 dc 7e 3e e6 df b2 04 50 0a e5 5c ....i.~>....P..\ 0250 ef f6 8c 53 a1 b4 a9 52 6b f4 07 d2 c7 9d f7 41 ...S...Rk......A 0260 e8 01 1b 54 55 85 5c f9 83 89 de 2b ef d3 cb 2e ...TU.\....+.... 0270 59 bd fa 2f d5 3e 88 17 7a ad 38 34 e2 e4 e4 9f Y../.>..z.84.... 0280 83 d8 91 52 12 75 d9 b0 df f6 93 bd 8d 6c f8 5f ...R.u.......l._ 0290 b2 20 04 f3 b2 0e 0c 9c 43 65 4b e6 20 72 ca 8f . ......CeK. r.. 02a0 85 f0 f4 b9 13 b2 69 18 ad 42 92 85 fa 4b d0 3a ......i..B...K.: 02b0 b5 e2 f2 8c d4 de be c9 53 0a 89 02 87 57 c4 c2 ........S....W.. 02c0 cd e9 c2 08 8c c9 14 12 03 fe 9d e3 e8 92 3e 95 ..............>. 02d0 26 d7 1f 45 43 b7 0e 18 6c 08 88 83 42 0c 18 af &..EC...l...B... 02e0 ed 6e b9 bc 22 d9 4b 33 89 f2 b3 36 e5 d4 51 17 .n..".K3...6..Q. 02f0 31 b3 d3 65 4d d0 35 c1 6a 4e a3 b3 2b e2 f2 37 1..eM.5.jN..+..7 0300 34 bd 04 81 50 0a cd 5e 8f ba 8f 6a 6c 23 84 9c 4...P..^...jl#.. 0310 bf 4d bd 68 57 c3 6e 90 76 53 3b 75 3a 7f e3 e6 .M.hW.n.vS;u:... 0320 03 5d 18 1d 83 8e c3 66 74 e6 53 60 50 0b 4c b8 .].....ft.S`P.L. 0330 b2 f0 1c bc cc 94 6c c5 2f bb 4a 33 bf 02 f3 e9 ......l./.J3.... 0340 4e 60 63 96 1f 10 79 d4 9d ee 0f 9b 07 3d 5b b4 N`c...y......=[. 0350 6f ec b2 c9 2e f7 42 60 43 3a 34 e1 3b 2c 9b b9 o.....B`C:4.;,.. 0360 87 d6 4b bc 46 55 ad 7a 97 4e 9e 42 0e 75 60 46 ..K.FU.z.N.B.u`F 0370 74 d6 09 06 6e a1 6e 6c af 33 45 dc d7 e1 b7 18 t...n.nl.3E..... 0380 05 fd 87 15 d1 d2 00 f4 9f 34 a4 c3 b7 81 bf 47 .........4.....G 0390 4a 88 96 da 11 f4 b4 3b bf 14 99 58 8c 12 60 5e J......;...X..`^ 03a0 9e 41 b9 d0 fc 85 12 23 3a 1a 38 82 00 ff 98 90 .A.....#:.8..... 03b0 2d 67 74 48 0c 1e d9 1f 0f 0d 43 4f 7f 47 0e 9f -gtH......CO.G.. 03c0 f7 34 4f ca f2 c9 99 d5 cf 7d 2f a8 c5 11 4a 4a .4O......}/...JJ 03d0 34 ff e6 46 e5 b2 e8 31 bd ea 53 02 92 82 a4 70 4..F...1..S....p 03e0 f2 51 7d df 3b fb 5d 78 5f d9 7f 4d 5d 58 e2 78 .Q}.;.]x_..M]X.x 03f0 b4 5b a7 1c 72 1a 1e 1f 00 12 40 03 2e 78 1d b3 .[[email protected].. 0400 15 c9 c2 0b 70 bd c3 76 51 3c f1 a4 fd 7e e2 89 ....p..vQ<...~.. 0410 f2 e1 dc 2b e6 03 d1 64 3b 87 63 f5 2e 50 46 af ...+...d;.c..PF. 0420 36 4c a4 1b b6 b3 fe 20 d9 b4 47 07 c2 5b 48 dc 6L..... ..G..[H. 0430 4f d1 72 38 fb b6 85 20 5b 0c 41 e5 ab 57 aa 65 O.r8... [.A..W.e 0440 88 3d 14 e2 cf 02 97 93 8d 14 67 f8 b4 3b 2e 6a .=........g..;.j 0450 87 39 f5 d0 5b 9e 3b 35 e4 44 2d 28 20 d6 d5 83 .9..[.;5.D-( ... 0460 37 9d 03 35 a1 e1 76 91 65 2f 10 89 d8 c8 ec a7 7..5..v.e/...... 0470 98 5f c6 69 56 6b 80 b0 5f 1f dc 1c 2b 2e ec cd ._.iVk.._...+... 0480 ec f5 c1 5c b1 b9 fa 1f 7e 8b 03 f8 2f 1b d9 b8 ...\....~.../... 0490 8e 14 57 7c ca 11 c0 6b 7b b9 4e 23 a1 f4 eb 8a ..W|...k{.N#.... 04a0 f0 b5 9b 2e 72 31 26 ed 7f 13 17 70 16 af 48 c8 ....r1&....p..H. 04b0 40 d7 ef 2b e7 b6 bc 91 27 57 40 56 57 60 c0 00 @..+....'W@VW`.. 04c0 bc e8 71 1a 24 47 9a fa b3 74 64 3b e8 55 c3 fc ..q.$G...td;.U.. 04d0 fd fc ee 2f f6 42 08 b9 15 07 27 ec 81 9c 53 9e .../.B....'...S. 04e0 bf a2 9b 60 4c e2 cc 3e 50 d6 cc 27 47 c8 eb 36 ...`L..>P..'G..6 04f0 39 b1 a4 cd c0 e9 96 99 8c be f0 95 4c da 2f 72 9...........L./r 0500 97 ef 02 b2 45 ee 67 46 98 d8 ac 7c 17 6d dd c7 ....E.gF...|.m.. 0510 a6 4c 04 86 d8 17 fb 74 98 35 0a 83 4b f1 1f e1 .L.....t.5..K... 0520 87 a2 8a 85 03 67 1c f6 84 de 9f d2 c9 d5 4a 28 .....g........J( 0530 13 89 bd 0b f4 a6 dc 61 eb d6 91 d1 9a 78 3e af .......a.....x>. 0540 64 3f a7 ec 5d 12 14 8e e4 0e 80 4e 93 f8 63 19 d?..]......N..c. 0550 8a 92 0a c7 db fe ef 45 88 74 d9 31 3c 19 46 5f .......E.t.1<.F_ 0560 1d b2 37 4d 3e 98 79 57 c3 92 c9 68 f2 16 0b 38 ..7M>.yW...h...8 0570 66 97 ec 92 46 00 47 6f 0d 7f 40 5a 90 45 fe 8f [email protected].. 0580 d3 12 bd d1 50 61 eb b1 ef 07 aa 50 d7 8b ee a0 ....Pa.....P.... 0590 51 31 83 31 48 2a 12 7a 19 64 57 e5 84 b1 e9 d9 Q1.1H*.z.dW..... 05a0 a2 19 bc f1 7d 16 f2 79 ....}..y No. Time Source Destination Protocol Length Info 20187 241.636727 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=220055 Ack=3405 Win=1002 Len=1448 TSval=595656 TSecr=729879 Frame 20187: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 220055, Ack: 3405, Len: 1448 Data (1448 bytes) 0000 29 d7 da aa a6 33 34 4d 00 00 ae 20 5b d2 ef cb )....34M... [... 0010 7f dd 63 f3 be fc 93 fb 2f 7b d8 a6 ca ab c3 81 ..c...../{...... 0020 7e 52 e9 d2 71 41 cc a7 46 2f cb 8b 37 8e 3e 51 ~R..qA..F/..7.>Q 0030 53 ea 0a 08 de 7d b0 9e 73 9e 48 af 09 c7 60 7e S....}..s.H...`~ 0040 2f 1d c3 db 8c 21 29 b5 61 d0 27 42 e7 46 e9 96 /....!).a.'B.F.. 0050 70 b6 c9 e8 6d 73 50 ac 18 91 47 5c d1 ed 9a 43 p...msP...G\...C 0060 ee 2a 16 bb 0a f9 77 f0 41 d0 de e8 4a 86 5d 00 .*....w.A...J.]. 0070 71 1e 7b a6 bd b7 2d 5e 2b 93 33 f1 7a af 1f af q.{...-^+.3.z... 0080 c7 7c c1 96 12 6f c6 b5 d8 96 42 87 ae 2d 9f 6a .|...o....B..-.j 0090 0f 42 e3 bd c7 59 e0 42 4b ae 43 d9 5e 77 ca 12 .B...Y.BK.C.^w.. 00a0 30 5e 08 f6 b1 d4 28 12 b9 1b eb 38 24 71 25 4f 0^....(....8$q%O 00b0 31 a9 af 8e 7c 07 a4 b2 d6 40 15 5c 8a 93 c0 97 1...|....@.\.... 00c0 f6 19 f3 1b 47 3b 11 e6 0c 27 a3 53 57 81 70 65 ....G;...'.SW.pe 00d0 28 07 97 ae 07 f9 f5 a5 77 8b 6a dd fb 18 7f de (.......w.j..... 00e0 c5 fd 7d 1e 3b 7b d5 1f 09 5b a8 2d 2f f5 80 6d ..}.;{...[.-/..m 00f0 f0 77 17 dd 28 7b 82 84 b4 12 55 39 88 ac 2d 86 .w..({....U9..-. 0100 2f 2d d0 0d 95 74 cc 44 b2 70 f9 2a 2e 36 1e 92 /-...t.D.p.*.6.. 0110 c1 4f 1f 69 a8 2a 5d 97 50 20 2d a5 b7 66 93 c0 .O.i.*].P -..f.. 0120 ab 57 46 d7 62 6a 6a 12 67 65 7e b6 2f 7a 06 19 .WF.bjj.ge~./z.. 0130 d2 51 8a ed d0 6a 8a 9d e3 26 68 5b ef db 0f c1 .Q...j...&h[.... 0140 06 eb dd b0 7e 6c 8b 14 4f e6 5e 31 a9 60 0d 09 ....~l..O.^1.`.. 0150 33 42 ed ba a0 ce ac d4 8e e1 c6 bc 79 86 6f 9f 3B..........y.o. 0160 9d e6 b6 99 53 d8 2a bd c1 84 c8 40 88 e2 e3 41 ....S.*[email protected] 0170 3c 5f ff 71 10 07 91 65 cb 7f 37 90 47 7c 4c 36 <_.q...e..7.G|L6 0180 8d 48 f6 b1 7e 9f 85 bc bb 79 03 66 28 0f ae 5c .H..~....y.f(..\ 0190 fe f6 e7 55 4a bd de 1a 9d 88 4c d6 76 a9 35 38 ...UJ.....L.v.58 01a0 b1 0a 5f 8d 04 15 42 c1 a8 f2 10 f0 97 ea 00 98 .._...B......... 01b0 0f 1b 25 11 3c 44 d2 95 54 df 5f 45 cd 0d 7e be ..%.<D..T._E..~. 01c0 e7 94 d4 97 0a ad 81 c7 58 75 0e cc 39 18 6a 37 ........Xu..9.j7 01d0 03 df a2 9d 4b d5 a9 4c cf cb 3e aa 14 54 8f 5c ....K..L..>..T.\ 01e0 2d 46 ef be 32 d6 b0 0a 6d 52 d0 73 ce 74 a5 a8 -F..2...mR.s.t.. 01f0 d8 87 f2 60 b2 49 c4 a5 c5 35 2f d8 e6 43 22 4c ...`.I...5/..C"L 0200 b9 92 36 60 dc a7 24 36 ec 48 55 4d 76 5c 0e ff ..6`..$6.HUMv\.. 0210 c7 00 1f 91 cd 70 85 63 4a 85 da 15 54 08 1a 6c .....p.cJ...T..l 0220 e3 af 54 28 f7 63 76 b5 4a 4a bb 90 3b 0d 88 98 ..T(.cv.JJ..;... 0230 ae c6 6c 89 9c 92 0f fb 1c 61 74 5f 47 06 55 fe ..l......at_G.U. 0240 ad 73 52 5c c0 2a f3 d2 7a 7a 36 75 c2 2f 8c a2 .sR\.*..zz6u./.. 0250 9d 93 8a 63 ec d4 fb b1 be f2 85 5c 52 95 92 1e ...c.......\R... 0260 d3 77 c5 27 6d b8 70 70 8c 88 b5 79 c2 05 6f cb .w.'m.pp...y..o. 0270 7a 7b 04 79 46 ba d8 0d 29 5b 0d 07 b9 9e b6 cf z{.yF...)[...... 0280 6a 3b d4 79 c1 ec 78 6a 37 11 0a 79 5a 96 7d 34 j;.y..xj7..yZ.}4 0290 d0 3f cf 3c a1 b6 e9 b4 c7 b9 b4 28 fb b8 15 73 .?.<.......(...s 02a0 41 04 c7 80 d3 cd 2e bb ea 1d 20 95 70 64 c7 af A......... .pd.. 02b0 a8 cd 1b 0e 75 5f b3 95 1c 7a 2a bf cf e8 9d 01 ....u_...z*..... 02c0 8a dc 58 67 a6 bc f9 23 47 34 ee 01 4e c6 e4 80 ..Xg...#G4..N... 02d0 70 c5 d7 53 44 3e 10 56 a7 15 33 0a a5 5b ad 7a p..SD>.V..3..[.z 02e0 e9 d0 e8 ba 9b ef 47 a7 73 34 f4 68 c4 df cd fd ......G.s4.h.... 02f0 ea 67 17 c5 e1 f1 d7 e4 50 d7 57 e4 91 58 f9 bb .g......P.W..X.. 0300 63 1f 69 01 76 b5 2e 2e 0e 20 43 5a 18 87 1e a7 c.i.v.... CZ.... 0310 3e 9a 77 34 ea 90 50 ea 22 f8 5c f3 25 f0 cd c5 >.w4..P.".\.%... 0320 54 89 62 3a 98 f5 cf d9 60 0a 48 52 c9 2b 27 59 T.b:....`.HR.+'Y 0330 68 39 1c 39 03 0e fa 69 3f 6b 4d 33 51 74 1a 55 h9.9...i?kM3Qt.U 0340 38 82 85 59 3f 71 e2 66 0c 58 89 92 1e 22 12 f6 8..Y?q.f.X...".. 0350 37 31 61 8d e0 2c 02 3e 2f 89 ab d5 2f 51 26 99 71a..,.>/.../Q&. 0360 3f d5 86 ef 3d ab fc 30 e4 dd 91 9a 96 8b c7 a3 ?...=..0........ 0370 fc d9 22 fc 7a 32 73 71 0a 5c ad 61 71 dd 4d a2 ..".z2sq.\.aq.M. 0380 23 a4 2e 58 9d ab fb ff 47 81 73 4d d5 69 8b 9f #..X....G.sM.i.. 0390 ee db 35 08 cf fe 18 63 be 13 4b a5 75 ba 80 ee ..5....c..K.u... 03a0 fa d0 18 23 83 19 12 34 8f 81 30 1a c7 6f 66 5a ...#...4..0..ofZ 03b0 ef 69 e7 24 12 da 8e 58 fa 22 2c a5 99 99 5b 4c .i.$...X.",...[L 03c0 6c 98 b3 75 e2 c1 cf a5 9f 7c f9 15 f2 59 3b e4 l..u.....|...Y;. 03d0 ae 17 51 3c 83 e1 8d 7a 6f 3a f6 ad 58 ed 9f dc ..Q<...zo:..X... 03e0 4e b5 ac b2 ab c0 af b2 df ac 9c 76 23 cd 23 c5 N..........v#.#. 03f0 34 23 d5 02 57 62 f8 16 a6 9a e4 00 5b d6 13 8b 4#..Wb......[... 0400 a1 c3 81 0f c9 a5 c5 91 de 05 44 39 19 91 ad c6 ..........D9.... 0410 08 bb 59 77 5f 67 08 c1 bf 91 0b 3d 95 b4 40 20 ..Yw_g.....=..@ 0420 63 8e 53 a1 3d 88 ae 27 da 57 24 aa 87 a3 9b b2 c.S.=..'.W$..... 0430 6d d8 8f e1 a5 70 ad f0 26 5a 8a 3d 85 d8 69 7e m....p..&Z.=..i~ 0440 ce 3d 86 90 63 bf f5 16 d3 dc 07 a5 4b 1a cc df .=..c.......K... 0450 6e 40 57 fe ba ef d2 56 eb df 74 cd 29 18 2c 94 [email protected].).,. 0460 18 b2 35 8f 89 e9 ee ce 52 ea 3a 29 5a 10 2f 6e ..5.....R.:)Z./n 0470 31 5e 68 1e d6 a5 52 5d 49 69 09 c6 cc 86 8d 5b 1^h...R]Ii.....[ 0480 a9 a8 c8 0d ac b6 8f 57 86 77 a7 5a f8 6e 3f 29 .......W.w.Z.n?) 0490 c6 44 71 e1 48 5b 8d 3d dd 16 0e 94 16 de e2 19 .Dq.H[.=........ 04a0 3d e9 e8 dc b9 ca f3 56 e6 d5 84 47 2b 38 79 48 =......V...G+8yH 04b0 a6 d9 19 a3 ca 40 af 78 17 81 15 d8 f6 28 42 8e [email protected].....(B. 04c0 d2 39 6c bc c0 d4 53 1a 3d 80 ec 03 48 9e b0 87 .9l...S.=...H... 04d0 16 b7 87 b1 6b 3f f3 69 57 9d 61 5c 8d 3b 1c b0 ....k?.iW.a\.;.. 04e0 3a 6b 06 b4 39 d2 5f 20 62 fa d8 b9 7b a2 22 da :k..9._ b...{.". 04f0 9d 54 af e9 d4 05 14 e9 35 e4 21 b9 de 1e 97 68 .T......5.!....h 0500 a8 a0 46 f0 4f 20 74 0c 7d 71 ed 75 2c 87 77 c0 ..F.O t.}q.u,.w. 0510 7b 72 e1 a9 ff 92 1f 78 e5 bd 62 fa 92 6e 11 24 {r.....x..b..n.$ 0520 bd aa 32 07 94 3a 01 52 18 ab 19 17 d1 5e fa 2c ..2..:.R.....^., 0530 c0 eb 45 7e 57 fd 4a 52 01 e9 ae e6 52 4c f1 c1 ..E~W.JR....RL.. 0540 96 37 ec a9 94 b6 a5 80 c7 fa a8 f9 9a 43 2f dc .7...........C/. 0550 d2 2e 98 10 cd 88 a1 a3 eb 9a 26 8a d4 34 6b 26 ..........&..4k& 0560 d7 c1 c4 53 52 d9 ae e5 49 a5 52 43 20 27 90 d1 ...SR...I.RC '.. 0570 30 c1 53 a7 71 ce e5 76 df 96 8d 91 64 db 0e 23 0.S.q..v....d..# 0580 e7 ff 63 a0 c6 ab f0 19 37 c1 72 98 d2 d4 8a 35 ..c.....7.r....5 0590 e9 ec 99 b4 45 22 3e 8f 74 3f 9a 8e 1f 5e 5d 67 ....E">.t?...^]g 05a0 3f 85 ba e3 74 a7 ed 94 ?...t... No. Time Source Destination Protocol Length Info 20188 241.636811 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1190 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 20188: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1190 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 20189 241.636862 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=3405 Ack=221503 Win=65535 Len=0 TSval=729899 TSecr=595656 Frame 20189: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3405, Ack: 221503, Len: 0 No. Time Source Destination Protocol Length Info 20190 241.636946 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=221503 Ack=3405 Win=1002 Len=1448 TSval=595656 TSecr=729899 Frame 20190: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 221503, Ack: 3405, Len: 1448 Data (1448 bytes) 0000 32 3d 25 75 4a 9c 4b 48 fe 2b 60 16 ec fc bf 81 2=%uJ.KH.+`..... 0010 46 9d e1 4b 1a 3b 42 c0 8a fc 4a 39 13 a8 c3 a3 F..K.;B...J9.... 0020 be 93 66 45 ef 99 36 a0 d4 ef 21 f0 8a 97 c2 4b ..fE..6...!....K 0030 5f 84 35 5f 75 75 65 be 82 6d 3b 88 c0 e8 2c 3a _.5_uue..m;...,: 0040 d7 8f 13 af c5 e5 6f 4c 7a 75 12 62 84 d6 23 e4 ......oLzu.b..#. 0050 25 b3 66 f9 42 2a 07 68 93 33 5c 70 f6 95 f6 52 %.f.B*.h.3\p...R 0060 15 46 16 62 28 ec 36 98 36 5a 9a 31 ca 6e 24 95 .F.b(.6.6Z.1.n$. 0070 c6 e6 37 79 77 72 98 2f 52 06 78 1e 93 60 28 0a ..7ywr./R.x..`(. 0080 2d 16 b6 f4 f9 13 54 18 cd 38 78 6f 8f 89 70 29 -.....T..8xo..p) 0090 1d e5 32 48 c5 ee 14 e3 c9 02 d4 43 84 71 39 88 ..2H.......C.q9. 00a0 29 06 88 aa 8d fc 58 d2 c6 35 97 50 c4 99 1f 04 ).....X..5.P.... 00b0 e3 15 93 18 d6 5c e7 3e 3a 7c d7 ab 71 de ce ae .....\.>:|..q... 00c0 d5 0c b7 ab 5c ee 2e 66 a6 7a 0d c6 56 53 d4 f4 ....\..f.z..VS.. 00d0 0c 42 c3 df 00 cc af 6f 6f 54 e4 94 1a c8 84 59 .B.....ooT.....Y 00e0 38 68 1b e1 c8 fc eb 68 88 77 9b 91 7c 76 ee 86 8h.....h.w..|v.. 00f0 7b 5e fc 57 f0 73 47 31 ac b8 29 0c a2 44 48 4a {^.W.sG1..)..DHJ 0100 79 6f 39 92 09 6d 4c 27 9a 74 54 26 42 62 57 96 yo9..mL'.tT&BbW. 0110 73 7c 61 1d c4 ef 1f c5 d8 a0 1c 05 3c 32 f1 75 s|a.........<2.u 0120 d9 24 c3 2a e1 19 21 7c 9d fd 4d 10 67 17 bf 7f .$.*..!|..M.g... 0130 20 e6 91 d3 7d 8b 01 02 70 df 50 21 a5 f1 86 9d ...}...p.P!.... 0140 48 5c 30 3f ff 34 26 2b 18 c9 08 f4 45 47 62 ae H\0?.4&+....EGb. 0150 67 01 c1 b8 0b 81 99 01 85 5b 02 11 d9 2c 93 91 g........[...,.. 0160 40 93 36 d5 e8 5e 84 ca 00 f6 2a a8 5b c9 0f a7 @.6..^....*.[... 0170 29 05 af 6c 2d c2 3f c9 f5 0c 16 56 1a 21 0e bf )..l-.?....V.!.. 0180 d7 87 67 58 23 95 d0 f7 40 6b 90 f9 43 4a ef 6c ..gX#[email protected] 0190 79 04 58 3d 97 0e ac d7 2f 83 2b 95 ff a2 d6 e4 y.X=..../.+..... 01a0 a8 d9 d7 ed c4 9e e7 56 16 92 61 aa 89 c2 af 14 .......V..a..... 01b0 a5 3a c7 f2 4d 0c 0d 10 71 59 19 74 a1 45 f5 76 .:..M...qY.t.E.v 01c0 f9 bf c7 ec bf d8 e2 95 5e dd ba 89 12 d7 26 70 ........^.....&p 01d0 a9 18 50 67 39 57 b2 75 f9 81 81 95 a9 a8 64 b4 ..Pg9W.u......d. 01e0 75 76 3f 50 9a 14 c1 03 46 19 3b f1 e6 17 cb 2f uv?P....F.;..../ 01f0 f0 2c 31 d8 8d 26 ac 6a 60 bd dd 93 a1 39 f8 c8 .,1..&.j`....9.. 0200 cb ab b0 b1 52 38 d8 f8 5a f8 1d 9e df e2 b6 10 ....R8..Z....... 0210 c6 a6 0c de 41 fb a7 2b 12 e6 c1 fa c3 65 52 5a ....A..+.....eRZ 0220 c5 88 37 84 86 36 02 02 78 67 ed 7b bc 30 11 f8 ..7..6..xg.{.0.. 0230 e6 23 c9 6d f7 b6 76 24 4e 73 2c b2 88 4e de 4a .#.m..v$Ns,..N.J 0240 56 c3 4c ff d6 78 aa a7 7f 52 f3 84 3b 45 6a 2d V.L..x...R..;Ej- 0250 f9 e5 a3 10 a8 c1 8a 1c 1b 4b 3c 49 7a 9e a8 7e .........K<Iz..~ 0260 5f d0 b1 a8 8a d7 60 c0 bf 37 39 bc 8d 98 6c 5e _.....`..79...l^ 0270 3f 12 ba fc 48 97 67 9b a6 06 33 5b df 2b c6 d6 ?...H.g...3[.+.. 0280 ca ae 89 6b 87 bc 40 4f 8c 0f 64 fc ee 74 f8 2f [email protected]./ 0290 17 1a 06 60 cc 65 21 f4 64 35 d0 59 59 68 88 42 ...`.e!.d5.YYh.B 02a0 f5 9e 4d 32 85 41 df dc 17 25 5f 31 bb 9b a6 6d ..M2.A...%_1...m 02b0 c2 1b 5c 5d 37 c6 ee 2a 73 52 95 be 3e 3f 30 d1 ..\]7..*sR..>?0. 02c0 0e 0f 9a 05 63 a0 5c b6 3d 78 a7 cb 06 d7 56 53 ....c.\.=x....VS 02d0 5b 41 57 43 83 af f5 7c 45 35 21 d3 c1 32 91 8d [AWC...|E5!..2.. 02e0 c6 8d 0b e6 05 5a 38 5d 3e 8d b5 dc 53 c2 2c 81 .....Z8]>...S.,. 02f0 ee c6 28 80 01 1b 91 de dd 35 29 15 b4 3b 52 1f ..(......5)..;R. 0300 b4 07 2d 99 6d 33 db df 76 b3 97 bb 43 aa 85 80 ..-.m3..v...C... 0310 2f 02 d7 d3 8b 3c f0 82 d4 09 91 95 ff 65 0f f6 /....<.......e.. 0320 65 34 12 f0 c8 57 f0 dc 41 33 31 e6 a0 71 03 c7 e4...W..A31..q.. 0330 17 36 f9 a2 c9 91 a5 b1 3b b5 00 19 d4 88 0a a1 .6......;....... 0340 72 84 82 fa b5 83 5e 89 45 f7 96 8a be 94 6c be r.....^.E.....l. 0350 a5 7b 2d ad 72 3b 62 72 08 e2 2b 4b a3 ec a7 88 .{-.r;br..+K.... 0360 fb 23 8d 47 ed 21 8e 19 09 e1 df 34 fd 97 35 72 .#.G.!.....4..5r 0370 db b1 96 0d e3 e5 44 7e 8b fc e7 ce 82 e9 89 bd ......D~........ 0380 b3 17 da 9e eb b1 7a ac 5b 72 4d bc 10 5b 89 7d ......z.[rM..[.} 0390 a9 54 82 c9 75 e2 e9 c9 fc ab 11 b2 f7 cc 55 0d .T..u.........U. 03a0 01 0f 9a 8d 19 82 1e 0e 25 08 e0 82 df c2 95 c6 ........%....... 03b0 19 d0 37 a6 d7 9a 3f fe 21 d5 95 df 88 8a 8a 35 ..7...?.!......5 03c0 02 e8 2e 8a 79 58 6e ed 07 2c e6 22 54 3b ad 89 ....yXn..,."T;.. 03d0 03 3f b0 8f 5c 09 7a 3a 37 13 47 7e 55 05 93 62 .?..\.z:7.G~U..b 03e0 ef 67 7f c4 40 58 55 a5 f8 53 f9 70 64 b9 24 99 .g..@xxxxxxxx.$. 03f0 bf 19 77 86 37 d9 cc c3 16 80 e9 84 52 2a da 4a ..w.7.......R*.J 0400 8b 88 1e 7e 68 f1 9b e1 c9 3e ae dd 6f 8c 90 a1 ...~h....>..o... 0410 ae 09 a0 48 28 6a cd a8 be 4c 96 55 38 ce 54 51 ...H(j...L.U8.TQ 0420 94 eb 62 35 ee c9 65 de 91 67 82 65 34 1f 79 3a ..b5..e..g.e4.y: 0430 cb 7a dd 46 f6 eb af 93 c0 6b f4 af a3 85 fc dc .z.F.....k...... 0440 89 f4 f1 8d ac 37 18 2f d9 5a 2d e6 31 17 71 71 .....7./.Z-.1.qq 0450 28 d7 36 2e 5a 0e 12 7a ed 4f d8 f6 bf 7a 84 af (.6.Z..z.O...z.. 0460 65 61 63 53 77 8c 2f 7b 8e fd 57 15 ad 71 c4 47 eacSw./{..W..q.G 0470 84 d3 9b 73 93 b7 8f 3d 1b 79 6e b9 54 29 6d 7f ...s...=.yn.T)m. 0480 a8 8a 4c 70 c1 56 65 64 ec 88 dd 11 92 4b 44 f6 ..Lp.Ved.....KD. 0490 de 71 9f bc e9 46 3d d3 e5 fe 6c 1f c5 ba 9e 11 .q...F=...l..... 04a0 c9 a2 ba 77 ca f4 23 27 36 70 f4 4d 26 66 f8 e8 ...w..#'6p.M&f.. 04b0 5e 1a d4 25 4e 1f 3e e6 04 17 32 2b 9e 65 59 4a ^..%N.>...2+.eYJ 04c0 ff 1b 87 e9 aa 80 68 62 e2 e5 d2 d3 a6 c7 73 09 ......hb......s. 04d0 5c 51 2f f4 89 de d1 b6 0a 20 5d d6 6f ba eb 0c \Q/...... ].o... 04e0 dd bf bb 06 e0 1e 27 4a 95 83 ad 37 44 fc bc 57 ......'J...7D..W 04f0 96 bf 03 85 39 ab 83 cb 34 91 a9 08 cc 9c ac f0 ....9...4....... 0500 fe cb e8 51 20 64 85 b2 f5 09 a1 6f bc 56 3e 00 ...Q d.....o.V>. 0510 a5 cf 4f 35 3c da e2 00 dc 39 ae 7a 84 42 b1 71 ..O5<....9.z.B.q 0520 7f 81 55 9b 82 9c fd 35 57 8f 3e 35 6f d4 c1 d9 ..U....5W.>5o... 0530 16 e7 11 df 02 72 86 4c 2f ad 1b 13 9b 63 53 8e .....r.L/....cS. 0540 da 9e 68 e5 23 b5 69 aa 53 cd 2b f8 6d 83 48 5e ..h.#.i.S.+.m.H^ 0550 7e 7b 68 29 eb 01 10 2c ef e8 37 c1 45 88 fb 80 ~{h)...,..7.E... 0560 4d a0 f4 0e 65 38 46 40 2e 6d 01 82 c1 b2 bc 16 [email protected]...... 0570 22 1c ef d6 dc 4d 61 02 5b 33 6e d9 e3 10 82 8c "....Ma.[3n..... 0580 ba 09 9a cf 51 a4 d3 98 82 44 da 81 b8 3d 0c d5 ....Q....D...=.. 0590 fa 7d ef 4f 32 55 86 c6 d5 7a ae 7b 2e 6d 2a 83 .}.O2U...z.{.m*. 05a0 85 9c 91 50 68 17 de 94 ...Ph... No. Time Source Destination Protocol Length Info 20191 241.637033 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=222951 Ack=3405 Win=1002 Len=1448 TSval=595656 TSecr=729899 Frame 20191: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 222951, Ack: 3405, Len: 1448 Data (1448 bytes) 0000 2e c8 27 43 8d d6 5b 64 42 53 c8 7d 2f d6 92 eb ..'C..[dBS.}/... 0010 d8 75 91 b7 9e 07 55 07 65 2c 8d 27 9e 65 56 d5 .u....U.e,.'.eV. 0020 9a 19 bc bb 02 b3 d0 ce 06 08 69 3a 8d 41 e4 aa ..........i:.A.. 0030 af 22 d1 5a c3 50 52 ca 7c 8f 7e 0e c3 0a fa 56 .".Z.PR.|.~....V 0040 8d ba 02 3f fa d4 49 00 64 11 3e a3 5d 61 24 a7 ...?..I.d.>.]a$. 0050 85 d8 70 ac 16 8b 08 be ec 1f fa 27 7d 18 3d b8 ..p........'}.=. 0060 2b fd 0d 05 b3 6e 1a 0e 9f 30 35 0b 6d 45 70 dd +....n...05.mEp. 0070 81 3b 5d 6e 26 03 2f 7a 69 c6 c0 69 fa 7f 59 b9 .;]n&./zi..i..Y. 0080 80 a4 ff 13 e8 7e 4f 90 6d 3d 44 81 95 8a 5f ce .....~O.m=D..._. 0090 91 10 f8 ae dc 77 da 81 9b c4 8b ad b2 26 29 e9 .....w.......&). 00a0 08 5d 95 ea 1e 63 4e 73 06 c8 b9 6f 65 b4 02 82 .]...cNs...oe... 00b0 96 16 37 dd 69 14 23 51 82 e6 9d 5b ce 36 22 04 ..7.i.#Q...[.6". 00c0 f1 3c 9e 3d 90 a8 43 32 e5 81 40 8d f6 d2 e2 20 .<.=..C2..@.... 00d0 94 81 e5 2a 15 9a 75 75 21 69 25 1e d0 45 1a bc ...*..uu!i%..E.. 00e0 ae 3b 31 fe 76 b2 87 f5 9b 49 18 47 e8 9a 70 a7 .;1.v....I.G..p. 00f0 79 03 e4 62 eb c6 11 6b d7 17 d0 ca 4a 0a 7e d5 y..b...k....J.~. 0100 f1 11 cd be f2 a2 b4 fc 86 f1 15 d6 97 31 83 ff .............1.. 0110 8a 30 86 79 44 e0 2b 29 d1 30 b2 5f f3 aa 1c b9 .0.yD.+).0._.... 0120 dc e7 9f 2b 52 62 26 f3 3f f1 b5 65 65 a0 f3 31 ...+Rb&.?..ee..1 0130 fc da 14 71 94 1d 26 40 ae 11 af aa 45 12 75 5d ...q..&@....E.u] 0140 9c 19 f2 46 45 a6 9c 35 f3 58 c5 6d 01 ed 8e a9 ...FE..5.X.m.... 0150 3a 78 c5 dc 31 d1 56 b4 a7 14 44 0b 69 af ca 34 :x..1.V...D.i..4 0160 3f f1 a7 18 ed 5f a4 16 b0 d3 7f 6c bf 92 23 98 ?...._.....l..#. 0170 26 3c 55 d5 0e 08 65 b6 c0 a3 19 27 31 96 54 10 &<U...e....'1.T. 0180 f2 a8 b2 a8 aa 66 9a 9f 16 53 83 72 62 57 4c 12 .....f...S.rbWL. 0190 0d d7 89 37 39 c2 86 b7 b8 c1 46 c7 08 83 5e 2c ...79.....F...^, 01a0 20 45 cf cf 69 a1 1e be 4f c1 97 31 81 69 3a 49 E..i...O..1.i:I 01b0 72 0c 08 d0 65 d7 74 db 8e d7 c4 3a 8a f6 66 f5 r...e.t....:..f. 01c0 ca 8a 39 2f 5b b0 35 b5 68 5b 7c 1e e3 03 81 0e ..9/[.5.h[|..... 01d0 e4 02 b2 24 12 a5 61 8f 88 0a 91 4b a7 33 b1 04 ...$..a....K.3.. 01e0 1c 77 3e 4b 82 44 72 bc 33 a5 0b 3d 23 28 f8 14 .w>K.Dr.3..=#(.. 01f0 fc e0 84 dd 16 18 46 39 20 52 6f 69 f7 fe 03 f9 ......F9 Roi.... 0200 3a fb a8 db 49 d8 69 a2 75 fc 29 a4 aa 4a 2c e9 :...I.i.u.)..J,. 0210 7d 72 45 72 e2 ec 12 e1 ed 7c 76 42 bf 20 67 48 }rEr.....|vB. gH 0220 74 96 b7 98 2d d3 fb 7b cd d6 79 ef 4a c2 d6 67 t...-..{..y.J..g 0230 11 4f 86 81 61 e9 c8 b8 d2 26 25 bd af fa ba 44 .O..a....&%....D 0240 ee ea 56 86 ee f4 8d d6 af b8 c9 06 2f 8c 74 bd ..V........./.t. 0250 4f 9e 57 50 7d 5e 35 f7 93 6a 21 9f 52 76 db 53 O.WP}^5..j!.Rv.S 0260 d6 df 61 41 8a 68 cb 8a c4 b8 34 42 02 53 02 76 ..aA.h....4B.S.v 0270 10 a2 b1 81 7d 1e 18 14 74 83 0c f7 fc e0 f5 1d ....}...t....... 0280 cd 9b dd 37 18 42 9f ff 8e 10 6d a1 b4 3a f2 87 ...7.B....m..:.. 0290 a2 92 00 f2 67 d6 52 23 79 c7 32 9b 68 1c 85 1b ....g.R#y.2.h... 02a0 c2 da 3a 64 55 58 fe a0 37 43 b6 43 52 d9 3e ee ..:dUX..7C.CR.>. 02b0 cd 99 e2 0f 8e bb 47 2a a4 6b 0f b3 8c 80 15 63 ......G*.k.....c 02c0 70 2b 1e e8 59 4e fd 87 98 a6 eb fe 07 48 69 f0 p+..YN.......Hi. 02d0 a6 d2 eb a3 63 c5 d2 12 8e 5d f0 89 e1 0c 76 14 ....c....]....v. 02e0 8d c5 83 6e eb 69 86 b8 32 6a b2 44 9c 35 f0 e6 ...n.i..2j.D.5.. 02f0 49 5f a5 6e d8 24 25 ff ef ce 8f 03 73 54 b1 1b I_.n.$%.....sT.. 0300 77 41 2d ad c3 f2 83 c3 dd 5e 78 bc 99 9d c1 4d wA-......^x....M 0310 f7 f5 75 32 e5 56 5e 62 de fa d9 41 d0 be 86 0e ..u2.V^b...A.... 0320 52 18 44 4e 7d 89 45 8f 23 30 35 dc 2d 48 2f 9e R.DN}.E.#05.-H/. 0330 a8 69 a2 c1 1a ad ae bc fb b6 e3 4b fd 0f 21 99 .i.........K..!. 0340 b0 6b 37 08 fd e6 c6 09 53 1c 17 96 ae fe 2a 61 .k7.....S.....*a 0350 df 08 f6 e8 e9 c1 11 4a 56 57 c7 b1 4d d6 b5 6e .......JVW..M..n 0360 8a 65 f3 9e 25 ba e1 2c 12 e3 b8 19 8d f5 e1 e8 .e..%..,........ 0370 33 36 72 6b 61 23 db 1e ab 07 01 c7 18 f5 03 6d 36rka#.........m 0380 36 bd 88 3d ec db 16 e9 bf c9 68 6b 68 23 b4 f5 6..=......hkh#.. 0390 2a 1f b0 ca c0 4e c4 fd 8c 8a 65 03 2b a3 8b 70 *....N....e.+..p 03a0 6e 09 ad 83 78 e4 d1 22 50 0e b8 c0 c4 2e 25 d5 n...x.."P.....%. 03b0 9d 1d 49 5a 17 28 4a b5 99 7a 0a 86 01 0e ec c0 ..IZ.(J..z...... 03c0 9e 3d 3a 90 d9 e8 a4 d8 2f d2 2a 0d 91 0b 9d dc .=:...../.*..... 03d0 d7 df 00 27 e8 77 0e ae b3 c7 6d 76 8b 9e 7f a1 ...'.w....mv.... 03e0 95 c2 35 93 08 5f 75 d5 5d 47 88 22 3c fb d8 d7 ..5.._u.]G."<... 03f0 19 af 12 7a c5 39 c6 ad 1e ca e9 6a 3b a4 98 44 ...z.9.....j;..D 0400 53 38 5b 00 fa 72 88 42 b3 1f 4b 9b 47 26 28 a7 S8[..r.B..K.G&(. 0410 fa f7 34 2d 17 3f cc bb b0 e6 a4 74 48 66 d3 f1 ..4-.?.....tHf.. 0420 d4 d1 94 68 84 a4 1a 3b 72 2c 3c 34 a6 16 a1 8d ...h...;r,<4.... 0430 74 c5 20 7f 57 94 07 ca 07 9d 98 91 d3 aa 5f 5f t. .W.........__ 0440 c8 1d db 5b 27 5f 4b c6 84 b1 14 d6 2c 51 05 4a ...['_K.....,Q.J 0450 a6 61 50 03 e7 f3 56 3b 10 d8 d3 45 36 a9 41 e3 .aP...V;...E6.A. 0460 db 3f 74 8b 75 e3 58 b0 40 45 ec a4 81 da 8f 0d .?t.u.X.@E...... 0470 4c c7 77 66 93 34 b9 41 bf 4a 7d b4 8c 4e 24 9a L.wf.4.A.J}..N$. 0480 9a 7b 7f 80 0f da f7 39 ab f4 bc 10 dd 9f f1 ec .{.....9........ 0490 83 72 ec 1f 9b e5 c6 ce a9 10 3a e0 9d c8 65 47 .r........:...eG 04a0 75 6f c9 e2 86 41 86 f0 4a fc 7d 64 e5 9c 6e a2 uo...A..J.}d..n. 04b0 6e 1e f0 8c 5d fa a0 a7 99 56 4f 98 d8 e8 21 e6 n...]....VO...!. 04c0 09 88 8c e9 a9 df fe 2a 2f 7d 36 ad 36 7f 6e b8 .......*/}6.6.n. 04d0 dd 76 39 5d 8e 8d dd 77 5e 48 e7 09 a5 56 4b fa .v9]...w^H...VK. 04e0 e4 49 76 43 fe 9c 62 4d 3e 79 6a 5b 37 ff 87 16 .IvC..bM>yj[7... 04f0 6d 2f d6 3e 72 e6 90 32 01 44 70 82 d5 1b 07 48 m/.>r..2.Dp....H 0500 12 29 06 eb fb 61 82 08 f4 8c 60 15 13 27 bb 20 .)...a....`..'. 0510 6a 25 b0 3d 84 85 ea 05 7c d2 6f 25 a4 62 30 6b j%.=....|.o%.b0k 0520 fe 99 99 57 0a df 70 cc 7d ee be 39 bc 8e bc b3 ...W..p.}..9.... 0530 db df 52 68 26 fb 3f 0a e1 b5 02 4e 5d a0 2e aa ..Rh&.?....N]... 0540 3e a6 27 e9 38 27 b3 10 1f f9 c1 8a 4d eb cf 37 >.'.8'......M..7 0550 08 28 bc cf af 47 03 89 13 4a 0c 7d 5b 31 d2 48 .(...G...J.}[1.H 0560 38 0f da 65 57 50 d1 be c7 f7 f9 98 82 d7 73 00 8..eWP........s. 0570 d0 a4 25 a2 3a 12 b4 bf ef 72 c8 bd 9b cc 6b ec ..%.:....r....k. 0580 09 08 68 84 99 43 fa 40 19 fe 42 85 51 3d 2d ae [email protected]=-. 0590 de bc e1 37 50 86 3c 16 a5 c3 97 b0 25 e6 24 4f ...7P.<.....%.$O 05a0 f5 a0 c9 35 31 8a f3 51 ...51..Q No. Time Source Destination Protocol Length Info 20192 241.637117 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=224399 Ack=3405 Win=1002 Len=1448 TSval=595656 TSecr=729899 Frame 20192: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 224399, Ack: 3405, Len: 1448 Data (1448 bytes) 0000 55 28 51 23 5d 3f 26 49 55 74 fa 4c b2 de fc 24 U(Q#]?&IUt.L...$ 0010 45 4e 1c d5 0a f6 83 7f 11 d3 41 b8 2b 31 79 21 EN........A.+1y! 0020 1a 91 36 bc 9c f5 11 de e6 68 3f b2 c1 0e 1d da ..6......h?..... 0030 de fe f7 39 f2 b5 ae f2 50 fd 2b 0b 38 bb 0f a3 ...9....P.+.8... 0040 43 b0 54 0a 54 80 2d d0 c1 86 02 2e 07 29 99 27 C.T.T.-......).' 0050 e6 e7 0e 50 c0 f2 95 b7 13 84 ed 68 18 5c 02 98 ...P.......h.\.. 0060 31 92 e1 e2 c6 1b 7e 92 1a 4a e5 72 5c 72 6d 4d 1.....~..J.r\rmM 0070 ce 73 7c a4 3d 9d cd 5c 5a c7 0b 04 69 26 94 3d .s|.=..\Z...i&.= 0080 f9 b4 71 6d b7 ce 92 44 7e 69 e9 47 6e c4 ce da ..qm...D~i.Gn... 0090 18 17 f4 09 68 58 7b 8d 64 39 b3 5e a9 e4 d5 49 ....hX{.d9.^...I 00a0 01 4f eb 73 3d c9 b5 e8 93 5d 16 30 f4 3d ca 2d .O.s=....].0.=.- 00b0 13 99 e7 7a 5c 6d 73 94 b1 0c fd 03 a5 d6 f5 1a ...z\ms......... 00c0 c1 58 40 3f b2 bb 0d 12 36 0d b0 c8 bf b2 19 d9 .X@?....6....... 00d0 85 18 97 4d bd d0 34 0e 8c 5e 62 99 f0 e8 7e 6e ...M..4..^b...~n 00e0 e4 ff f9 61 a4 bd e1 a7 20 71 4d ed 50 2e c2 4d ...a.... qM.P..M 00f0 3b df ef d1 49 f6 d4 e3 0e d0 0b 70 0d 93 03 db ;...I......p.... 0100 6a bf b6 88 d2 c5 14 f8 0d 0d 6b d6 68 dd ab ee j.........k.h... 0110 3a e4 34 45 f4 70 ff cc 80 72 46 f5 32 7c 95 94 :.4E.p...rF.2|.. 0120 29 4e 8b 06 b6 55 7b 07 a0 3d f0 31 10 6a 9d b5 )N...U{..=.1.j.. 0130 73 8a 80 3a 2c c7 b4 33 cb 3c 1d ac 64 92 83 9d s..:,..3.<..d... 0140 d9 ce 8a d6 4e 10 0a 35 b2 b9 b9 71 da 8a 7d ab ....N..5...q..}. 0150 8e 02 49 8d b7 b6 4e 0b 42 3b 45 c3 7a 66 55 4e ..I...N.B;E.zfUN 0160 11 f1 de f5 24 23 7f ec c4 22 73 37 b3 1f 6f 29 ....$#..."s7..o) 0170 dd 44 c4 0f 91 22 51 13 5c 18 9c 2a d8 9b 6b 56 .D..."Q.\..*..kV 0180 c4 a5 94 85 ce 44 6a 4d ba 3c 00 c7 5f 2b d0 82 .....DjM.<.._+.. 0190 bf d9 aa 3a 98 48 5b 79 9c 38 5e f6 68 26 01 cd ...:.H[y.8^.h&.. 01a0 17 49 e1 8c 43 31 96 9e 6e 68 6e b2 46 49 18 68 .I..C1..nhn.FI.h 01b0 96 4b cc 24 21 5a 9a 5d fe 5f 6f 38 dd ef 2f ea .K.$!Z.]._o8../. 01c0 a1 ac 01 e4 91 b5 88 f3 7f ae 3f a2 51 09 31 4f ..........?.Q.1O 01d0 9a b4 d4 8d cd f2 34 cf a7 20 23 b6 62 6d 48 7c ......4.. #.bmH| 01e0 ba 8b 60 25 e0 d7 5a e6 4d a1 07 d0 f7 58 dd c8 ..`%..Z.M....X.. 01f0 de bd e7 5f 38 81 11 45 c8 27 98 c8 0c 42 82 82 ..._8..E.'...B.. 0200 4e 07 a3 14 3a a5 da 88 7f 44 b7 a2 9e f0 76 ee N...:....D....v. 0210 af 7e 4e d2 b3 83 9c fa 95 2a 4f 7c cf 26 2e 32 .~N......*O|.&.2 0220 6e b8 76 7d 0a 2e cb 0b 43 dc 94 3f 18 0e 57 45 n.v}....C..?..WE 0230 7b 27 de b2 e5 39 c5 08 a7 13 70 fa d6 b3 f9 8a {'...9....p..... 0240 96 ab 99 e0 ad 2d 26 9a e0 eb a5 71 86 cc 4f 70 .....-&....q..Op 0250 8f 16 90 77 d0 d3 ca 1e 2f d2 bb 52 6d d1 a9 3a ...w..../..Rm..: 0260 95 b3 7f ef 40 35 3f 67 a5 16 06 b8 78 f1 f2 3b ....@5?g....x..; 0270 3f b2 4f 98 a0 6e 19 94 bf cc b7 99 b0 8e 8d 2e ?.O..n.......... 0280 d0 e6 b4 a5 a6 dc bc 55 84 cf cc 89 01 b7 e5 79 .......U.......y 0290 41 62 ee 68 13 4b 6a d7 57 a9 d8 f7 29 3a f4 3a Ab.h.Kj.W...):.: 02a0 55 f1 0d 07 b5 a2 06 91 94 16 ca f6 60 de af 39 U...........`..9 02b0 4f 9b 3a cf 24 f0 64 76 ec 61 7e 2c a1 1c 45 a8 O.:.$.dv.a~,..E. 02c0 8e 6a a8 3d 7e aa 82 a8 e2 86 07 7c 24 c4 3c 08 .j.=~......|$.<. 02d0 86 c0 d5 94 6e 9f 81 eb b0 78 4d 03 85 06 60 00 ....n....xM...`. 02e0 9a 69 9f 54 f2 a0 db a1 59 19 02 f6 96 d8 6c d9 .i.T....Y.....l. 02f0 04 7f 59 60 6c 40 7a aa b8 5a c9 e0 73 6d da 47 ..Y`[email protected] 0300 ca 0d 83 30 45 43 2a 03 91 d5 f7 9c 19 b9 5a 4b ...0EC*.......ZK 0310 65 ed 5b b1 67 9e 39 0a 4b 8f 2b 55 c1 fd fb 74 e.[.g.9.K.+U...t 0320 47 eb df 28 89 3f f0 71 20 0b bb 57 9a 0d 4b 26 G..(.?.q ..W..K& 0330 21 73 43 e1 77 1d c8 aa 80 e3 17 ed 2e 77 2e 8a !sC.w........w.. 0340 fb cb 0d b0 a2 96 01 b0 85 2a 22 39 fe b1 64 b4 .........*"9..d. 0350 ba f4 fc c5 c8 69 cc 3f 12 b4 11 96 c7 be 26 2c .....i.?......&, 0360 17 de 7a bd 02 8d 96 a3 1e 39 9a 4e dd c3 1f 72 ..z......9.N...r 0370 ea 6d dc c3 1e 60 cb 6a 1d c5 a5 dd 20 b9 9d f2 .m...`.j.... ... 0380 d5 09 37 b4 f5 56 c8 ff 98 34 bd 19 50 da ac 68 ..7..V...4..P..h 0390 50 68 21 2f 6c 76 39 af d4 9f 4f f4 e4 95 5b 74 Ph!/lv9...O...[t 03a0 ca 3f e1 c7 da fb 80 39 be 58 8e a0 32 18 74 f0 .?.....9.X..2.t. 03b0 4c 14 23 6e 3d f5 3c 0f fc ed 1c e8 ba 30 10 81 L.#n=.<......0.. 03c0 7f 3d 2e c3 c0 9b eb d4 ac 56 1d b3 cd 43 62 b1 .=.......V...Cb. 03d0 a9 08 dc ed 7d 80 02 9e d6 61 d8 80 72 36 00 a4 ....}....a..r6.. 03e0 24 98 3e a2 86 32 05 e8 96 c8 6e 61 c2 76 d7 f4 $.>..2....na.v.. 03f0 5e 0e a0 c0 71 61 57 f6 06 cc 7b 84 f1 14 a2 8e ^...qaW...{..... 0400 89 a1 b1 2a e9 45 09 9f 3a 78 be 24 b8 53 7e 7d ...*.E..:x.$.S~} 0410 ca 4d 17 03 90 1a d7 bd be b5 25 fb 0c ad 87 1a .M........%..... 0420 da 16 0c 15 04 6a 16 5d 3c 22 fe a9 36 aa b6 3b .....j.]<"..6..; 0430 5c c4 d6 19 67 a2 18 30 7b 47 f9 35 2f d4 20 09 \...g..0{G.5/. . 0440 52 ef 60 32 0a cb 6e 44 cf 2a 4e 99 eb d4 06 e5 R.`2..nD.*N..... 0450 26 d9 66 c9 9d 96 13 27 fa 42 cb b4 fd d5 d9 08 &.f....'.B...... 0460 f7 48 97 70 46 ea 6f 9f ae 3c 45 b1 0e 04 f0 55 .H.pF.o..<E....U 0470 dd f6 40 53 96 27 0c a7 54 07 a9 d8 e5 bd e6 bb ..@S.'..T....... 0480 1c 7e 02 a8 8a 60 bc cf 62 4d 03 08 10 93 b8 dc .~...`..bM...... 0490 2a 77 5e 4d 57 3e 9e c1 26 ef bf f2 5a c9 7c 2f *w^MW>..&...Z.|/ 04a0 cf 04 a6 37 46 5f 0d b8 ac 56 c4 b9 3d 88 b4 21 ...7F_...V..=..! 04b0 25 5b e9 ad 18 f1 1f 3b 43 83 7d d1 dc 6c 41 b0 %[.....;C.}..lA. 04c0 0a 03 20 55 7c c0 0d ed 8d 76 93 3a 33 ec cc b9 .. U|....v.:3... 04d0 2f 67 f1 80 32 49 40 e0 2e 35 a5 00 6a cf 5b 49 /[email protected].[I 04e0 86 a0 86 23 b2 00 f1 e8 30 df 0e da 29 dc 36 6a ...#....0...).6j 04f0 1d 51 9c 72 d4 56 f0 76 9c eb 61 ed 2d ee e7 cf .Q.r.V.v..a.-... 0500 95 4c b2 3c 8b 0c 2b ab 49 d2 24 c2 80 83 17 dd .L.<..+.I.$..... 0510 78 9a 3a 3c db 54 cb 31 ae a8 00 95 28 3e f9 e2 x.:<.T.1....(>.. 0520 ef c1 3e 86 2e c3 c9 c4 f0 6f 3d b3 29 bf 73 e6 ..>......o=.).s. 0530 9b 1d 1e b3 9f 90 e3 be 63 51 da b8 70 f7 73 6a ........cQ..p.sj 0540 b4 88 c6 71 a1 f8 8d e9 71 c5 e0 b1 4e e9 46 2f ...q....q...N.F/ 0550 1d bf 1b 71 46 2b 27 1f 22 1c e0 7d b0 b1 f4 27 ...qF+'."..}...' 0560 71 e2 a1 83 24 e9 e3 36 b6 8f c7 e2 3a b1 84 76 q...$..6....:..v 0570 b2 68 ee 71 6f 81 61 e9 10 19 de 8b 3c 57 dd 22 .h.qo.a.....<W." 0580 80 08 d7 07 9b 10 7f 9a 6e 6c 26 02 a8 17 38 6e ........nl&...8n 0590 8b e3 50 c7 3e 7e 6d ce 4e 19 74 39 36 57 0d 95 ..P.>~m.N.t96W.. 05a0 e6 7b 0b 4e 43 c0 62 75 .{.NC.bu No. Time Source Destination Protocol Length Info 20193 241.637170 192.168.10.1 192.168.10.203 TCP 199 34433 > cds [PSH, ACK] Seq=225847 Ack=3405 Win=1002 Len=133 TSval=595656 TSecr=729899 Frame 20193: 199 bytes on wire (1592 bits), 199 bytes captured (1592 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 225847, Ack: 3405, Len: 133 Data (133 bytes) 0000 00 ba 7b 8d 65 38 53 73 a7 89 ee 33 08 19 e7 c3 ..{.e8Ss...3.... 0010 42 52 01 17 fd 64 38 19 51 cd ef 98 57 f0 27 b6 BR...d8.Q...W.'. 0020 28 1b 4c 8e 54 4f 29 72 51 63 5b 2d 36 e5 cc 0e (.L.TO)rQc[-6... 0030 7f 4f 84 13 bb 72 d0 e0 71 88 91 f7 93 12 47 32 .O...r..q.....G2 0040 39 a3 e1 c0 c0 98 b3 0e ee 43 d7 0a 61 85 0b e1 9........C..a... 0050 0c c7 11 af 98 8e a7 41 a1 2a b7 b2 20 d5 ff d7 .......A.*.. ... 0060 32 7d 3d 64 8c 53 23 c6 56 bd 2a f0 ec 32 21 ad 2}=d.S#.V.*..2!. 0070 c0 5e e6 cb f7 da b3 69 5d c9 90 83 a6 37 d5 ae .^.....i]....7.. 0080 2d 0e 6a 5d a2 -.j]. No. Time Source Destination Protocol Length Info 20194 241.637219 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=3405 Ack=224399 Win=65535 Len=0 TSval=729899 TSecr=595656 Frame 20194: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3405, Ack: 224399, Len: 0 No. Time Source Destination Protocol Length Info 20195 241.637268 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=3405 Ack=225980 Win=65535 Len=0 TSval=729899 TSecr=595656 Frame 20195: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3405, Ack: 225980, Len: 0 No. Time Source Destination Protocol Length Info 20196 241.637336 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1190 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 20196: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1190 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 20197 241.637419 192.168.10.1 192.168.10.203 TCP 903 34433 > cds [PSH, ACK] Seq=225980 Ack=3405 Win=1002 Len=837 TSval=595656 TSecr=729899 Frame 20197: 903 bytes on wire (7224 bits), 903 bytes captured (7224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 225980, Ack: 3405, Len: 837 Data (837 bytes) 0000 17 03 01 03 40 29 aa 51 b7 60 23 cd 76 21 f1 aa ....@).Q.`#.v!.. 0010 9a da 94 32 9d 51 16 e6 81 08 58 d7 0a b7 db ff ...2.Q....X..... 0020 fe e1 28 df bc 0b 55 4f d3 fe 96 3c 3d 6e 6b 4b ..(...UO...<=nkK 0030 9f 2b 9a cf 9d af 3c bf 4b e4 e0 bb cd 80 7e 6d .+....<.K.....~m 0040 16 33 70 fa 2f d2 f3 96 5e e7 f4 42 1b 0f 55 fd .3p./...^..B..U. 0050 d1 3c 51 1f dd 65 7f cd 56 db 4a 5c bb 0b 57 bd .<Q..e..V.J\..W. 0060 ef 9d 01 f6 60 14 3a 79 65 90 37 ff f4 b7 cb c3 ....`.:ye.7..... 0070 98 a7 9d 7d a6 e4 8f 18 12 53 39 ac 19 f5 cb e9 ...}.....S9..... 0080 c8 d3 5e af 45 8b 69 37 d8 51 d0 22 00 0a 37 0d ..^.E.i7.Q."..7. 0090 5f c9 64 ab 45 e7 26 6e e5 12 fc da 92 c3 0c 7f _.d.E.&n........ 00a0 cb 51 d6 4e 44 34 c2 62 bb 17 4c b5 e4 06 07 d0 .Q.ND4.b..L..... 00b0 6c ee 71 bf 1b 2a 20 60 6c 6f 91 62 ec 03 6b 94 l.q..* `lo.b..k. 00c0 43 b9 a2 77 67 6f 39 36 bf 40 bc ee 9a b9 44 1a [email protected]. 00d0 7a 15 c8 c3 46 e9 e9 94 75 d8 40 bc d4 9c e8 95 z...F...u.@..... 00e0 a4 b3 b0 15 0f d8 b4 53 53 78 90 96 b9 79 5f aa .......SSx...y_. 00f0 55 c5 99 98 bc bb 14 4c 44 f6 67 7d 33 eb c3 f3 U......LD.g}3... 0100 44 5f 58 00 d3 3d 96 61 de c6 c6 94 aa db 20 81 D_X..=.a...... . 0110 83 e1 e5 ca 46 3d 19 4a 13 21 bf f2 a0 29 9e 47 ....F=.J.!...).G 0120 9b 53 8e db 45 bd 26 0d 62 81 4e 92 9c 0b ef 93 .S..E.&.b.N..... 0130 f6 6e 40 00 6a 5c 2f eb f0 d3 80 e5 44 2f c7 a8 [email protected]\/.....D/.. 0140 ef cb f7 7d 0b 16 09 83 35 3e 8b 4c 57 34 9a 3b ...}....5>.LW4.; 0150 92 90 4d cd ef 55 c6 35 c0 e2 0f db 97 4c 11 de ..M..U.5.....L.. 0160 bd 3f 56 80 bf 14 7b f3 8a ee 3c d8 d3 22 da a5 .?V...{...<..".. 0170 d5 ee 34 ea c0 77 01 9d 10 ba aa fc b3 d6 7f a9 ..4..w.......... 0180 dc d8 04 d4 27 10 e5 f3 3d a5 37 26 4d 4a e7 c7 ....'...=.7&MJ.. 0190 c7 b3 0a d5 fa 86 e1 ed 2c 69 ea 5e 3b ce 25 54 ........,i.^;.%T 01a0 e8 84 97 03 b2 7a 38 83 f2 05 3e c0 ec 8d 7d 7e .....z8...>...}~ 01b0 37 8a b9 e2 52 9a 1e 7f 79 11 cf 9e ec c5 f1 41 7...R...y......A 01c0 49 f6 32 58 b3 c8 71 7f 2a 7e db 4e 52 46 21 d4 I.2X..q.*~.NRF!. 01d0 9e 27 6d bb 23 93 a8 39 ee dc ea 7b 9e e5 f6 40 .'m.#..9...{...@ 01e0 3c e6 d6 5b ab f6 72 6f 04 4c 64 ce a4 8c a3 97 <..[..ro.Ld..... 01f0 5e 82 71 08 2e 22 c6 c5 fb 55 1f b1 73 5a c4 3c ^.q.."...U..sZ.< 0200 78 35 6a 16 1f 7a d3 69 37 fa 71 da ed d6 21 35 x5j..z.i7.q...!5 0210 c1 a6 63 36 44 43 c2 a7 6a 9e 5b a9 ee 2d c8 43 ..c6DC..j.[..-.C 0220 49 0f 2b 5a 54 a3 bc f9 51 32 81 b6 a2 fa 10 49 I.+ZT...Q2.....I 0230 56 36 01 83 45 4e 53 50 fd b9 28 63 62 7b ba 2c V6..ENSP..(cb{., 0240 84 40 c3 ff ef 22 01 26 9d 98 45 91 28 08 a2 67 .@...".&..E.(..g 0250 41 ff 95 bf 5c 09 92 99 54 19 f7 9a d4 8d fc 66 A...\...T......f 0260 97 49 65 51 64 5e 95 e4 2a 03 40 87 02 a8 61 45 .IeQd^..*[email protected] 0270 3c 5c 41 87 b6 55 c8 0e dd 1a cc 21 db 38 d7 fc <\A..U.....!.8.. 0280 0c 39 6e 6f 64 5f f8 fa 1e 75 ca 05 3b 68 ee 84 .9nod_...u..;h.. 0290 d2 98 82 13 8b 1d 8e 35 95 15 ea d2 30 87 94 3b .......5....0..; 02a0 3c fd 69 24 45 37 6b 11 89 ae 46 da 05 83 46 18 <.i$E7k...F...F. 02b0 be 39 44 f0 e2 a0 80 10 3c f9 76 64 d3 bb 75 99 .9D.....<.vd..u. 02c0 dc f9 9d fe 02 25 a7 f6 e3 66 1f ac 31 8b 2f 35 .....%...f..1./5 02d0 a0 38 28 89 34 eb b3 47 13 7c 2d 78 6b fe 0c 8f .8(.4..G.|-xk... 02e0 e9 ee 0b a3 02 02 b4 46 54 51 9c 99 79 3f ca 2f .......FTQ..y?./ 02f0 ef 1f 73 b2 f0 96 6d c7 63 5c 25 17 ea da 36 11 ..s...m.c\%...6. 0300 35 13 26 43 35 f1 fa 57 fd 3b 7c d3 c3 ec ce 89 5.&C5..W.;|..... 0310 01 d0 c9 12 b1 48 74 e4 d2 d5 af f7 29 8a 13 85 .....Ht.....)... 0320 06 68 30 a3 30 90 2b 6f 0c 57 7a 70 5d 01 56 7b .h0.0.+o.Wzp].V{ 0330 4f 55 76 f0 2c a7 f2 fe b9 70 7b b9 13 eb e6 b7 OUv.,....p{..... 0340 37 cf 7a 33 4a 7.z3J No. Time Source Destination Protocol Length Info 20198 241.637486 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1190 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 20198: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1190 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 20199 241.637556 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1190 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 20199: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1190 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 20200 241.637641 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=226817 Ack=3405 Win=1002 Len=1448 TSval=595656 TSecr=729899 Frame 20200: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 226817, Ack: 3405, Len: 1448 Data (1448 bytes) 0000 17 03 01 03 40 13 70 c5 70 ee f2 ff 80 a2 a0 3c [email protected]......< 0010 ee 4e 30 a6 80 40 75 89 5f 42 37 57 68 b9 00 ae .N0..@u._B7Wh... 0020 b5 f3 cc a9 75 6c c0 90 d0 42 65 cf 29 5b a8 08 ....ul...Be.)[.. 0030 06 13 19 62 76 f5 42 48 b0 8c 96 87 b2 62 95 76 ...bv.BH.....b.v 0040 bb 91 f6 b8 e4 25 03 12 2f 39 f6 f4 a9 89 04 63 .....%../9.....c 0050 46 4d 2c 10 75 48 d7 24 e5 ea 59 f7 a5 22 fc a1 FM,.uH.$..Y..".. 0060 a8 7b e7 17 ec 32 1c 9e 53 5e 21 4b f6 95 e3 34 .{...2..S^!K...4 0070 81 64 31 f6 d9 92 0e ba 16 eb 84 b9 ae b4 1f b8 .d1............. 0080 2c e2 f5 45 e9 26 b7 a7 a2 76 80 6e 38 47 1f 23 ,..E.&...v.n8G.# 0090 3c df e4 18 40 39 fa 81 2f f8 cf f1 50 7e c1 85 <...@9../...P~.. 00a0 45 db b5 34 59 d4 74 54 bc 4c 1b 5d c2 62 2c 92 E..4Y.tT.L.].b,. 00b0 a4 2a 7d e2 59 f8 8e 78 56 3b 17 f0 f0 28 85 03 .*}.Y..xV;...(.. 00c0 da 74 1d 20 6d 25 0e d8 35 0f da 36 2f c7 e1 9e .t. m%..5..6/... 00d0 55 2d 8b d7 16 9b 46 68 07 92 b0 9e 96 df be ab U-....Fh........ 00e0 2f 8b f6 f5 f6 8f a0 88 a7 68 db 8d 71 18 65 3d /........h..q.e= 00f0 27 1e 1a 46 b7 55 68 7b e5 c1 e8 b3 02 61 3c c3 '..F.Uh{.....a<. 0100 d3 64 5f 45 6c e6 4e b4 aa 80 20 b1 d2 1a 18 3f .d_El.N... ....? 0110 b0 a2 b8 36 5a da ab 68 90 d8 8f f5 97 a2 61 6d ...6Z..h......am 0120 4a b6 84 b6 89 8e 89 ce b3 4a fd ee df 76 16 78 J........J...v.x 0130 69 2c 89 10 d9 d6 58 33 f5 a2 81 1a 45 78 32 ee i,....X3....Ex2. 0140 1e b8 0c df ad 18 92 5e 05 5c 98 a8 37 6b a1 07 .......^.\..7k.. 0150 33 db f9 75 dc 0f d5 b2 33 64 4d bf 08 34 34 a7 3..u....3dM..44. 0160 ab 18 63 d2 c6 1a ec 76 22 9c b4 66 33 84 bf bb ..c....v"..f3... 0170 3a 16 09 a6 68 b1 82 4e 69 83 75 6d f5 53 5e a0 :...h..Ni.um.S^. 0180 95 19 ea 78 4e ff 68 b1 9b 0d 47 ae ab 57 09 5b ...xN.h...G..W.[ 0190 7e 87 67 67 96 35 e7 ea df 96 5e 27 8e a8 ae 3e ~.gg.5....^'...> 01a0 09 08 8c f6 3a ea 86 ef 70 6a c7 dc 29 5f 43 5a ....:...pj..)_CZ 01b0 9a 6e 89 12 55 53 bc c3 93 01 2e 88 74 67 21 9e .n..US......tg!. 01c0 ee ad 0e b8 0f 86 d7 b4 29 9c 9c 09 83 e3 07 b6 ........)....... 01d0 6e 6c ba 76 b4 b8 0b d7 cf e9 b3 92 96 6a fb 6a nl.v.........j.j 01e0 76 82 d5 ea 71 58 f8 49 d5 67 c2 b0 26 60 df 1e v...qX.I.g..&`.. 01f0 1e ae a7 0a 74 b2 78 76 bd f3 2f d2 a1 24 2e b6 ....t.xv../..$.. 0200 a0 6f 73 aa 4a ac 15 9a 55 bf 8c 10 80 c9 3d b0 .os.J...U.....=. 0210 5f 4a 7b 0a 88 51 64 de 9d 07 e4 12 2d 90 7f 91 _J{..Qd.....-... 0220 6b 1b fc 4c f4 33 64 4a 3f b9 87 82 b6 d8 1f 0c k..L.3dJ?....... 0230 e4 7f 51 ef 25 d6 8e 83 1d b4 52 5a 1f 6d 95 03 ..Q.%.....RZ.m.. 0240 e6 24 9a 13 70 29 e6 ca 6d 63 cc 3b 31 a8 0c 8c .$..p)..mc.;1... 0250 7b 82 60 64 91 a4 5c ee 54 7a f3 46 cb af 76 79 {.`d..\.Tz.F..vy 0260 49 00 ba f2 06 32 d7 0a 0c 50 cb 41 78 7b 8a cf I....2...P.Ax{.. 0270 b4 7e 66 07 d7 f2 83 9b 5f 90 ef a9 48 e8 cf 93 .~f....._...H... 0280 72 5c 9b e6 33 ae 9a f4 b8 f7 f8 6d 9e 6d 16 6e r\..3......m.m.n 0290 5d ac ce 77 fe 6a 70 03 24 d1 2a cd c9 33 40 ba ]..w.jp.$.*..3@. 02a0 84 f0 5e 63 76 ac 9a 66 25 bd c9 0b 88 c5 d4 a4 ..^cv..f%....... 02b0 69 dd e6 6d ca f4 27 78 06 1e 7a df 77 cd f0 ec i..m..'x..z.w... 02c0 b3 d0 6a e0 e7 fc f6 f5 05 05 71 ba 1d 87 77 ff ..j.......q...w. 02d0 72 d9 8b af 50 1a 2c e2 89 c2 ea 45 c5 aa 0b 5b r...P.,....E...[ 02e0 ce 31 99 b7 fd 8d 13 fd ca 5c 62 63 04 aa c9 cb .1.......\bc.... 02f0 3d dc 3f 58 7f 7c 0a 88 7f 38 1c f0 c7 0f 86 3e =.?X.|...8.....> 0300 7e 33 d5 3f 39 55 d0 c4 77 07 7c 0e 42 f5 2d c3 ~3.?9U..w.|.B.-. 0310 3f 7a 24 07 d4 21 fa 0a 45 68 6b 06 ff 1c f1 31 ?z$..!..Ehk....1 0320 f7 d9 19 b5 3d eb c9 13 60 2c a0 35 28 6e 47 0d ....=...`,.5(nG. 0330 b6 a8 e1 95 4d e6 80 1d 71 63 1c 29 e8 88 b0 be ....M...qc.).... 0340 81 19 2a ef 77 17 03 01 03 50 21 3d 4f f3 a5 f0 ..*.w....P!=O... 0350 31 54 8a 94 84 a0 2b 53 2c af 9e 9f 04 02 12 9f 1T....+S,....... 0360 1f 7f f0 46 9b 2b 09 0f 6e 8e e7 6a 28 cd c8 0a ...F.+..n..j(... 0370 a5 a6 ab 04 12 f0 f8 e2 69 17 8e ad 01 6e b7 f8 ........i....n.. 0380 5f 5e 5c 03 af 97 fc 33 5d 4f 34 e1 98 5a 9b e7 _^\....3]O4..Z.. 0390 69 83 01 64 a3 87 cf 9c 6f cb 1b b4 8b dc f4 aa i..d....o....... 03a0 a5 11 af 4a 6a c5 6c bb ef 83 5e 5b a3 41 db 61 ...Jj.l...^[.A.a 03b0 c3 23 73 37 ca c0 ec 4e d6 e3 e1 4d 15 59 fc 0c .#s7...N...M.Y.. 03c0 8a 13 f7 71 a2 09 b2 c0 07 bc 29 0f 53 bc 60 12 ...q......).S.`. 03d0 b3 f3 76 e1 ef c1 5b ef ef 4f 47 ee 26 96 7b d5 ..v...[..OG.&.{. 03e0 fb f7 4b fe 26 e7 d7 52 4b 52 da cc cc f1 ac f4 ..K.&..RKR...... 03f0 b1 c7 51 ad 10 4c 5b 41 e8 7d 0f 67 2a 0c b0 81 ..Q..L[A.}.g*... 0400 42 9b b7 63 5c ba 5d 38 8b f1 21 c7 c6 73 f8 3b B..c\.]8..!..s.; 0410 32 de 48 89 ec a0 1d ff 58 ec cd de 79 8e 39 06 2.H.....X...y.9. 0420 48 e9 54 fc 2b 03 af 08 20 b8 4c 98 19 57 22 fd H.T.+... .L..W". 0430 49 62 be ee 21 79 88 cb 0c 5b a0 e0 0c 4c 02 cd Ib..!y...[...L.. 0440 14 6f 92 ea 82 5d 16 9f 11 db aa 27 8e 57 48 2a .o...].....'.WH* 0450 34 7a 44 f8 bb d3 2b bc 51 0f 1b 25 f0 c8 a4 75 4zD...+.Q..%...u 0460 e3 b5 5c 74 c0 bc c7 72 c3 01 a6 c6 83 57 47 d9 ..\t...r.....WG. 0470 46 7d 84 74 92 23 12 22 ee 77 7a 30 26 de b1 36 F}.t.#.".wz0&..6 0480 43 3f c4 b3 7d 66 d1 98 7d e0 4b 5d 29 bd 5d 93 C?..}f..}.K]).]. 0490 fa 9d eb 11 76 09 08 a2 01 4a 2f c9 e7 48 0d e8 ....v....J/..H.. 04a0 61 69 e4 55 3b f8 ad a6 f9 e7 89 f8 97 c9 87 69 ai.U;..........i 04b0 57 82 99 71 db 9b ee e8 5e 21 a5 0d fd dd d0 16 W..q....^!...... 04c0 96 53 8a f9 eb c7 9a de 27 8c 44 8b a8 90 3a 1b .S......'.D...:. 04d0 76 a1 aa 7b 67 cb 5c b8 0b fd 91 2d df f4 cc 55 v..{g.\....-...U 04e0 5c 62 2f 88 bf 20 3d 33 7b 8d 3d 9e 88 11 60 af \b/.. =3{.=...`. 04f0 29 12 4f 6a e0 b2 e2 14 5f 2c 69 ad 18 2d 82 61 ).Oj...._,i..-.a 0500 cf c3 2b 3b 92 96 8e 31 b1 8a 4a af 95 0e 6e 3f ..+;...1..J...n? 0510 c8 11 b7 84 d4 af f1 be e9 2c c0 e0 cd 71 3e d9 .........,...q>. 0520 58 03 3a c1 03 18 54 d1 43 f0 f4 59 f9 68 b5 85 X.:...T.C..Y.h.. 0530 2c 40 74 dd 6a 15 28 cb 67 d7 40 d5 35 b1 e3 55 ,@t.j.([email protected] 0540 e4 e4 30 1d b0 ed f8 fa f3 1e 70 2f 9a bc fc 31 ..0.......p/...1 0550 cf d7 52 8a 8c ad ea de e1 6c 59 41 d3 5c d6 79 ..R......lYA.\.y 0560 9f 2a ac 3a f7 9c c3 81 bf 9f d0 93 52 af 22 16 .*.:........R.". 0570 6e 45 6e c5 0a ed 85 5c c4 a6 aa ca bb 84 53 59 nEn....\......SY 0580 e8 28 83 30 40 c4 7b 30 b3 ab ca bd a7 93 1f c2 .(.0@.{0........ 0590 33 75 a1 49 ad d2 64 40 03 2e bd fd 58 0a c0 e7 [email protected]... 05a0 f3 fa 14 54 14 69 b0 a8 ...T.i.. No. Time Source Destination Protocol Length Info 20201 241.637692 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=3405 Ack=228265 Win=65535 Len=0 TSval=729899 TSecr=595656 Frame 20201: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3405, Ack: 228265, Len: 0 No. Time Source Destination Protocol Length Info 20202 241.637753 192.168.10.1 192.168.10.203 TCP 308 34433 > cds [PSH, ACK] Seq=228265 Ack=3405 Win=1002 Len=242 TSval=595656 TSecr=729899 Frame 20202: 308 bytes on wire (2464 bits), 308 bytes captured (2464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 228265, Ack: 3405, Len: 242 Data (242 bytes) 0000 b6 c1 23 d8 2d 92 96 bc 9e d8 21 e8 da 11 e9 de ..#.-.....!..... 0010 e3 de e5 2c 4f 78 13 60 7a e7 b1 c9 e8 7e bf 6a ...,Ox.`z....~.j 0020 07 23 8e 0e b0 74 73 55 93 43 e0 f1 35 16 c7 ba .#...tsU.C..5... 0030 02 94 4b 8c e2 08 c3 60 70 aa f8 1b 62 0d db 3c ..K....`p...b..< 0040 4f d6 ed 6e b8 d5 83 65 90 30 54 b7 0d e7 12 87 O..n...e.0T..... 0050 20 54 8b 22 3b 68 96 e8 42 c9 7f 40 85 9e 10 28 T.";h..B..@...( 0060 67 fd e3 bb 40 dd df c8 dc d4 da 23 55 12 4a 9c g...@......#U.J. 0070 4c 79 2f a7 c6 f1 37 c7 11 b0 75 03 93 48 35 01 Ly/...7...u..H5. 0080 1e 32 36 12 0f 43 f4 e4 6b a6 b9 26 d1 da ef de .26..C..k..&.... 0090 30 b4 c2 96 e0 4c 41 6a 22 4a 84 0d 8a 56 7c fb 0....LAj"J...V|. 00a0 0e d1 9e 8f 37 a3 da 59 0d f6 5b 40 38 d0 46 66 ....7..Y..[@8.Ff 00b0 ef 60 85 9e 16 a9 50 98 16 d7 c3 f9 86 db 34 55 .`....P.......4U 00c0 f5 53 f5 c3 81 72 5a 49 e6 91 74 2f f8 a3 1a 26 .S...rZI..t/...& 00d0 a0 e6 d9 9d 31 48 22 52 29 9f af 9e 94 5d ac 53 ....1H"R)....].S 00e0 76 57 86 09 87 43 22 54 a1 c8 d1 b6 4a 48 3e 52 vW...C"T....JH>R 00f0 56 a2 V. No. Time Source Destination Protocol Length Info 20203 241.637820 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1190 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 20203: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1190 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 20204 241.637883 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1190 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 20204: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1190 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 20205 241.637967 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=228507 Ack=3405 Win=1002 Len=1448 TSval=595657 TSecr=729899 Frame 20205: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 228507, Ack: 3405, Len: 1448 Data (1448 bytes) 0000 17 03 01 03 40 ab 0c 28 72 ad 89 b4 84 2e d4 60 ....@..(r......` 0010 af 1c 3b ef 5a 1b 8b 53 a5 0d e7 87 fa 2b 26 4b ..;.Z..S.....+&K 0020 95 94 51 56 29 8c 46 89 d1 46 3e 92 e5 f9 64 9a ..QV).F..F>...d. 0030 ed 7a 4b 6c f4 17 85 de 58 3e 23 e2 5d 60 e5 28 .zKl....X>#.]`.( 0040 51 ce cf a9 fe 8b 18 b2 e0 ff 74 cb 21 ea d2 37 Q.........t.!..7 0050 f1 80 1b 1f e5 8d fe fb db 8f 67 4d 93 7b 60 e6 ..........gM.{`. 0060 63 7a dd 3f 86 0d ac a7 2e 72 a0 2c 58 40 84 61 cz.?.....r.,[email protected] 0070 b8 d2 f7 eb b5 99 f5 82 f7 9a 28 d5 81 53 24 de ..........(..S$. 0080 a2 09 ce fc 07 90 a2 da 7a d7 77 36 b6 18 c8 c6 ........z.w6.... 0090 1c 53 4a 57 5c 2e 9d e7 29 24 0a 4c cc 13 85 2e .SJW\...)$.L.... 00a0 3b e4 01 c6 fb aa a7 1f 01 cd e2 4d 03 4d 16 b3 ;..........M.M.. 00b0 df 34 fd 3e d0 c3 6c 08 8a 09 35 3c 3a b1 c1 ae .4.>..l...5<:... 00c0 fb b5 5e 65 3f f7 84 d9 49 37 61 c4 ce 50 42 5d ..^e?...I7a..PB] 00d0 4c fc 07 fd b6 17 e4 33 6e 24 13 4d 7a 15 44 b6 L......3n$.Mz.D. 00e0 55 72 26 70 da 8e f8 06 61 99 c4 20 31 be a9 1b Ur&p....a.. 1... 00f0 f3 ef 24 4e 92 b4 02 46 1a 34 2c 03 e3 33 5a de ..$N...F.4,..3Z. 0100 66 7b 84 94 00 1b bf 3a e4 6a a3 a8 6c f0 ec 4e f{.....:.j..l..N 0110 61 dd e8 e2 c9 74 8b a9 49 e0 2a f3 9e 82 94 cf a....t..I.*..... 0120 48 72 65 bc 48 e5 e0 e8 de 44 80 2a 14 3c 84 2c Hre.H....D.*.<., 0130 7e 3e 0f bd e8 07 71 94 85 bb 6d 14 90 d5 9e 8a ~>....q...m..... 0140 4c c9 c3 f7 59 68 9a 0a dc 9e b8 68 e4 a6 7b a6 L...Yh.....h..{. 0150 b6 b2 cf a3 fe 11 1a a7 3e 1b 58 0f db 00 65 49 ........>.X...eI 0160 5d 87 5b cd 5a a7 c4 db 55 6d f9 a4 1e b2 3d 60 ].[.Z...Um....=` 0170 07 4c 76 e6 9a 76 23 07 8d 4b 1a 30 bf ca 50 6c .Lv..v#..K.0..Pl 0180 31 fc b3 fe 7f fb 48 c0 92 50 38 e2 b5 97 fd d0 1.....H..P8..... 0190 2d f7 0f 8e 26 40 a5 51 a6 a8 ef 39 4a 0d fa 1b -...&@.Q...9J... 01a0 db 10 2c 64 5e 9c d2 f8 3a dc 44 8a 39 4d 0d 27 ..,d^...:.D.9M.' 01b0 64 17 fe 41 85 4d ce 8d ee 3a 47 c1 3f 72 bf b7 d..A.M...:G.?r.. 01c0 b1 25 6f f8 70 12 ac 4d 7e 9d 9d d5 e6 3e d9 de .%o.p..M~....>.. 01d0 5a 98 bd a4 4a 84 c1 71 25 ac ff 77 fc 49 e8 7d Z...J..q%..w.I.} 01e0 3c f3 f4 6d 45 80 e1 76 55 77 e2 4d 7a 67 48 0f <..mE..vUw.MzgH. 01f0 04 c7 86 19 8c 22 c1 c8 af 71 59 b2 a3 10 6d 80 ....."...qY...m. 0200 50 17 ee ef c2 02 9f 7d aa c3 5f 5d f0 e4 d7 08 P......}.._].... 0210 c6 d1 61 4f fb 57 98 65 ec a3 bb 9e ae a8 15 97 ..aO.W.e........ 0220 eb b2 e5 da bd 83 1a 77 6b 8c 1b 07 3d 45 76 0f .......wk...=Ev. 0230 fa b7 72 95 ed dc 03 a7 80 d4 61 dc 84 a3 c4 2a ..r.......a....* 0240 ab 78 29 46 16 ff bc 9f 47 93 3f 93 ff 4d 21 91 .x)F....G.?..M!. 0250 21 5b 50 20 d2 05 af 64 27 dc b5 a4 f4 3c de f4 ![P ...d'....<.. 0260 8d b3 3f 5d 92 d5 27 ac 9f de 41 c1 66 ac bb 1e ..?]..'...A.f... 0270 d7 23 e5 e5 bf fa 61 78 f1 dd 9d 54 a7 01 eb e9 .#....ax...T.... 0280 b8 fb c6 64 bd 3d 7a d1 bf 04 d9 ac 01 46 e2 d9 ...d.=z......F.. 0290 3a 3d 90 95 89 17 43 e8 ff c2 58 97 ff 28 33 e4 :=....C...X..(3. 02a0 69 12 80 d8 d8 70 76 b7 a1 a9 dd 84 1f c9 4f 4e i....pv.......ON 02b0 d4 38 4f 78 5f 9b 39 72 2d 02 eb e6 1c 6d 16 ae .8Ox_.9r-....m.. 02c0 8d 80 70 de a4 5c 4d 43 c5 2d e8 7d 79 6a ce c9 ..p..\MC.-.}yj.. 02d0 0e 1c 65 c4 61 b2 54 bf 52 61 0f 7c 47 34 b5 9f ..e.a.T.Ra.|G4.. 02e0 c9 8d 6e b5 51 9e 8c 3b e0 8c e4 4a 50 62 fe 50 ..n.Q..;...JPb.P 02f0 50 de 5f 1c 17 ed 8a 8e a8 ce 84 b9 b2 2e 07 f1 P._............. 0300 44 e1 c4 ad c7 d5 19 09 e2 0a f4 b7 11 c5 73 d0 D.............s. 0310 f8 ed 09 0f d9 dd 45 e2 37 91 c0 74 b0 1b a0 b3 ......E.7..t.... 0320 3a 4b c5 e4 cc d1 1e 5b 32 c2 35 e4 87 cb bc 2c :K.....[2.5...., 0330 90 7c c5 30 ad 1c 4e b0 79 8e 92 30 a9 d5 7c 2c .|.0..N.y..0..|, 0340 0c b4 63 49 54 17 03 01 03 40 d0 89 83 bd f1 73 [email protected] 0350 f2 af e0 94 ce 3d 69 ac f0 80 7b 42 bf bb 39 cc .....=i...{B..9. 0360 bf 92 c4 7a 8d a4 05 a6 12 07 09 82 4c 29 9f cc ...z........L).. 0370 80 1c 9c f7 ad 6b 8d 44 ba 2b bf e6 cd 0d 82 c6 .....k.D.+...... 0380 0e 54 f6 f9 64 02 4a 0d 91 b7 1e 98 3f 0a eb 6b .T..d.J.....?..k 0390 02 96 f7 37 59 f5 a6 60 a7 84 16 04 e8 01 87 60 ...7Y..`.......` 03a0 44 15 f1 4b a1 f8 fc c9 26 69 69 bd f1 f8 1d 79 D..K....&ii....y 03b0 97 04 49 3e 30 3f b3 52 00 a4 87 ea 75 b0 9e 01 ..I>0?.R....u... 03c0 b8 8f e6 9c 1e 8b 17 77 47 67 b1 d3 ca 37 30 66 .......wGg...70f 03d0 19 4d 4b 52 9d c6 bb 6c 38 d4 1a e7 64 19 cf b7 .MKR...l8...d... 03e0 5b 6e 7a 6e b3 be 09 0b 11 a1 c3 27 e4 f3 8c f9 [nzn.......'.... 03f0 59 94 e3 a9 03 d9 75 25 91 ed 1a a0 0d 51 b9 aa Y.....u%.....Q.. 0400 43 2b d6 a1 d5 94 a3 64 be f8 6b 6f b0 4f 14 74 C+.....d..ko.O.t 0410 51 e5 69 39 41 66 26 a1 9d 61 21 b0 5e f3 fe 04 Q.i9Af&..a!.^... 0420 7a 33 10 48 ac ee 7c 2a 11 cc 2b c1 2f d5 70 fc z3.H..|*..+./.p. 0430 79 f5 e1 3c 1d ea fa 7a d0 a0 0e 28 e4 aa 3a a0 y..<...z...(..:. 0440 a1 46 f4 91 30 03 f5 e1 f1 9d 43 b8 d6 e4 a1 5f .F..0.....C...._ 0450 ee 68 a4 a7 0a b2 bc 3c 75 c4 19 e6 7e 9a 9f 8a .h.....<u...~... 0460 04 a2 7d ba b5 8c 3c be 58 a8 14 03 d3 a6 f6 56 ..}...<.X......V 0470 3f ea 5e e6 ea 19 b6 6e 40 28 88 02 52 91 07 ba ?.^....n@(..R... 0480 ce fd 51 b1 ce 51 52 79 21 5d 94 25 da 81 32 81 ..Q..QRy!].%..2. 0490 31 03 22 bc 2d be 9f 34 f4 db 1d b7 f2 ba 82 7b 1.".-..4.......{ 04a0 29 9a 7a c5 48 07 9b 0b 5f 60 0f 11 3f 6f d8 d1 ).z.H..._`..?o.. 04b0 a4 5a 5a f1 25 f1 47 47 70 2f 4d e4 3d 1a 4e 22 .ZZ.%.GGp/M.=.N" 04c0 48 ce e5 e9 4d 5a c6 fa b8 ff 25 95 64 30 b8 1e H...MZ....%.d0.. 04d0 0e a5 b5 1f 15 89 d5 75 dc 6d 8f 37 0d 9a ff ba .......u.m.7.... 04e0 e6 b6 bc 6e f7 ca 83 b9 2b d0 09 95 00 ca 5e 2b ...n....+.....^+ 04f0 77 4d 0b 8d 69 c9 e6 6d a3 fa dc 6d b6 3f ee 08 wM..i..m...m.?.. 0500 93 1f ea c3 6c 8b 4f 6b 39 ea be e6 74 0c c5 a2 ....l.Ok9...t... 0510 81 f1 df 2c 87 af 45 aa 65 d0 6d a3 29 7a 81 d8 ...,..E.e.m.)z.. 0520 4f 1c fb 05 78 62 4c d6 49 cf 66 e6 d8 12 17 54 O...xbL.I.f....T 0530 e3 ec 42 6e a6 20 9a c1 86 ac 57 be 11 d1 02 e7 ..Bn. ....W..... 0540 34 2f 38 21 c5 02 38 01 19 2f 0a d6 25 1c cd ac 4/8!..8../..%... 0550 39 17 5a b2 4a f7 1a c1 f8 c7 24 dd 1d 6b 8e 84 9.Z.J.....$..k.. 0560 40 ec 3f b3 cc e9 29 bb db 62 df 61 0f 90 3d 9e @.?...)..b.a..=. 0570 d2 4d 4a c8 92 02 14 ae c1 0b 24 15 34 a4 a0 89 .MJ.......$.4... 0580 75 a1 55 1a 9e c9 7c 85 58 7b 6b 4a 6b 94 1c 3e u.U...|.X{kJk..> 0590 e0 2f fb e6 64 f8 4a ca 3e 90 85 14 8c d9 e2 39 ./..d.J.>......9 05a0 ac bc c8 fd 5e 31 39 04 ....^19. No. Time Source Destination Protocol Length Info 20206 241.638018 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=3405 Ack=229955 Win=65535 Len=0 TSval=729899 TSecr=595656 Frame 20206: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3405, Ack: 229955, Len: 0 No. Time Source Destination Protocol Length Info 20207 241.638071 192.168.10.1 192.168.10.203 TCP 292 34433 > cds [PSH, ACK] Seq=229955 Ack=3405 Win=1002 Len=226 TSval=595657 TSecr=729899 Frame 20207: 292 bytes on wire (2336 bits), 292 bytes captured (2336 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 229955, Ack: 3405, Len: 226 Data (226 bytes) 0000 75 d6 7d 3e 35 20 c9 c3 07 17 e8 c6 37 e0 fc c0 u.}>5 ......7... 0010 a0 b0 ed f3 59 82 04 88 b4 34 64 ed cf f7 fc c8 ....Y....4d..... 0020 00 79 bf 2b b9 61 9a 37 6d 2a f0 2e 06 b4 0b 81 .y.+.a.7m*...... 0030 c3 e3 7a 52 5f 24 eb 58 75 2b da 57 7b 03 4f 23 ..zR_$.Xu+.W{.O# 0040 c8 e5 04 ab 24 5e f0 1d 53 f2 9c f7 da 17 32 55 ....$^..S.....2U 0050 74 ca 20 7d 82 84 f7 4e f4 08 35 4d 42 e5 83 0e t. }...N..5MB... 0060 30 2a 6c d6 d1 36 b0 29 ae ba 8d 8b 94 fd 05 bd 0*l..6.)........ 0070 7a a8 79 a3 7b 53 45 c5 dc da 1b c4 0c 53 c4 2e z.y.{SE......S.. 0080 e6 e0 29 68 67 a2 2b 0b 8e c7 df c8 4a 8b ac 4d ..)hg.+.....J..M 0090 47 29 4e 19 35 17 e6 f8 64 be 0f b0 75 e4 1f ac G)N.5...d...u... 00a0 80 33 e0 ff 57 15 97 b0 49 13 be ba 2b 9a cb 66 .3..W...I...+..f 00b0 6b 4f e4 68 b1 b3 a7 d5 39 18 41 9a 4e dd 9e 80 kO.h....9.A.N... 00c0 b1 ed a8 b1 08 b2 89 68 f3 c6 ea ee 33 a7 86 12 .......h....3... 00d0 a2 71 f2 1f 99 f2 a1 50 2b da 3e 51 d9 61 a6 b2 .q.....P+.>Q.a.. 00e0 25 29 %) No. Time Source Destination Protocol Length Info 20208 241.699111 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=3405 Ack=230181 Win=65309 Len=74 TSval=729899 TSecr=595657 Frame 20208: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3405, Ack: 230181, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 9b 0a bc b2 9d d1 26 a2 5b c0 18 .... ......&.[.. 0010 14 4c 87 56 cc 58 8b b8 ab 9b 2c 4d a5 b2 42 f3 .L.V.X....,M..B. 0020 95 b4 94 31 60 17 03 01 00 20 fc 4a 9f 1a c4 4f ...1`.... .J...O 0030 ef 0a 25 d7 0c b5 71 09 5e f3 f3 59 5f fb 35 ab ..%...q.^..Y_.5. 0040 7c 11 a9 31 e3 f6 c1 1f dc e2 |..1...... No. Time Source Destination Protocol Length Info 20209 241.699181 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=230181 Ack=3479 Win=1002 Len=0 TSval=595672 TSecr=729899 Frame 20209: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 230181, Ack: 3479, Len: 0 No. Time Source Destination Protocol Length Info 20210 241.702031 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=3479 Ack=230181 Win=65309 Len=74 TSval=729899 TSecr=595672 Frame 20210: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3479, Ack: 230181, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 59 15 c0 f9 63 d2 01 3a 0e 57 fc .... Y...c..:.W. 0010 db df 45 22 de 42 84 aa 52 1e 4b 38 92 1b 09 56 ..E".B..R.K8...V 0020 ec 92 37 86 9f 17 03 01 00 20 ec a8 58 b1 9a c0 ..7...... ..X... 0030 4b 48 21 f5 42 23 98 01 d4 70 1c 25 13 d7 4a 72 KH!.B#...p.%..Jr 0040 5d ec 41 dd ef 04 60 4b 89 3d ].A...`K.= No. Time Source Destination Protocol Length Info 20211 241.702084 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=230181 Ack=3553 Win=1002 Len=0 TSval=595673 TSecr=729899 Frame 20211: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 230181, Ack: 3553, Len: 0 No. Time Source Destination Protocol Length Info 20212 241.704891 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=3553 Ack=230181 Win=65309 Len=74 TSval=729900 TSecr=595673 Frame 20212: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3553, Ack: 230181, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 5d c0 b4 9d 02 ec bb 00 2c 54 4d .... ].......,TM 0010 cd a9 c7 7b fa 3d 50 eb 9c 8c b5 1e 46 ad b3 84 ...{.=P.....F... 0020 b7 81 69 09 26 17 03 01 00 20 a5 4f 21 f9 2c a7 ..i.&.... .O!.,. 0030 64 75 c3 1c 81 91 85 a1 47 a2 00 62 28 6a 67 24 du......G..b(jg$ 0040 c9 6d 71 dc 9b 7c 50 10 b2 84 .mq..|P... No. Time Source Destination Protocol Length Info 20213 241.704957 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=230181 Ack=3627 Win=1002 Len=0 TSval=595673 TSecr=729900 Frame 20213: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 230181, Ack: 3627, Len: 0 No. Time Source Destination Protocol Length Info 20214 241.707664 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=3627 Ack=230181 Win=65309 Len=74 TSval=729900 TSecr=595673 Frame 20214: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3627, Ack: 230181, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 2c 91 ed fa 57 8f 67 e2 5d 0b dd .... ,...W.g.].. 0010 67 eb 1b b9 4d f5 c5 5f 18 4f 45 c4 74 f7 95 aa g...M.._.OE.t... 0020 1a 3a 0d b3 1d 17 03 01 00 20 50 8e d1 d0 fc 24 .:....... P....$ 0030 29 00 8d 36 1d d7 18 c7 4b d4 8d c0 ca df 67 f3 )..6....K.....g. 0040 b6 e7 15 a6 97 e7 be cb 7e a1 ........~. No. Time Source Destination Protocol Length Info 20215 241.707738 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=230181 Ack=3701 Win=1002 Len=0 TSval=595674 TSecr=729900 Frame 20215: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 230181, Ack: 3701, Len: 0 No. Time Source Destination Protocol Length Info 20216 241.710436 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=3701 Ack=230181 Win=65309 Len=74 TSval=729900 TSecr=595674 Frame 20216: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3701, Ack: 230181, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 7e 2d 7a 67 10 5f aa 1b 72 98 ee .... ~-zg._..r.. 0010 8c 7a bf 19 fa 6c 74 f1 23 7e a5 28 d8 a6 3d 33 .z...lt.#~.(..=3 0020 91 d9 68 14 52 17 03 01 00 20 79 78 aa 4a 9d a4 ..h.R.... yx.J.. 0030 2a af 36 f1 41 de 18 53 b0 79 e7 36 36 8e d9 b5 *.6.A..S.y.66... 0040 16 fc a9 b8 48 0f 70 85 98 cb ....H.p... No. Time Source Destination Protocol Length Info 20217 241.710501 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=230181 Ack=3775 Win=1002 Len=0 TSval=595675 TSecr=729900 Frame 20217: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 230181, Ack: 3775, Len: 0 No. Time Source Destination Protocol Length Info 20218 241.712811 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=3775 Ack=230181 Win=65309 Len=74 TSval=729900 TSecr=595675 Frame 20218: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3775, Ack: 230181, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 41 03 ad 30 2b 28 a3 10 2e 39 55 .... A..0+(...9U 0010 2a 21 08 32 90 a5 bc 55 9e d9 26 3a 06 e5 2a 42 *!.2...U..&:..*B 0020 50 19 b2 8f 57 17 03 01 00 20 20 e5 34 c3 4f c2 P...W.... .4.O. 0030 9c 20 43 f9 83 2f 2c c6 5c 19 45 43 d1 a1 6f fb . C../,.\.EC..o. 0040 98 7a e8 05 a9 7a a9 ad f2 df .z...z.... No. Time Source Destination Protocol Length Info 20219 241.712875 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=230181 Ack=3849 Win=1002 Len=0 TSval=595675 TSecr=729900 Frame 20219: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 230181, Ack: 3849, Len: 0 No. Time Source Destination Protocol Length Info 20220 241.867627 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 20220: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 20221 241.867658 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 20221: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 20222 241.896349 192.168.10.185 192.168.10.142 VNC 555 [TCP Retransmission] Authentication result Frame 20222: 555 bytes on wire (4440 bits), 555 bytes captured (4440 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 324491, Ack: 43266, Len: 501 Virtual Network Computing No. Time Source Destination Protocol Length Info 20223 241.915750 180.243.236.205 192.168.10.207 SMTP 95 C: MAIL FROM: <lillian.elmers@xxxxxxxxxxx> Frame 20223: 95 bytes on wire (760 bits), 95 bytes captured (760 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: commlinx-avl (1190), Dst Port: smtp (25), Seq: 20, Ack: 314, Len: 41 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20224 241.915848 192.168.10.207 180.243.236.205 SMTP 105 S: 250 2.1.0 [email protected] OK Frame 20224: 105 bytes on wire (840 bits), 105 bytes captured (840 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: commlinx-avl (1190), Seq: 314, Ack: 61, Len: 51 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20225 241.915892 180.243.236.205 192.168.10.207 TCP 60 commlinx-avl > smtp [ACK] Seq=61 Ack=365 Win=93076 Len=0 Frame 20225: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: commlinx-avl (1190), Dst Port: smtp (25), Seq: 61, Ack: 365, Len: 0 No. Time Source Destination Protocol Length Info 20226 241.923124 192.168.10.142 192.168.10.185 TCP 60 [TCP Previous segment lost] xrl > rfb [ACK] Seq=43298 Ack=324992 Win=63739 Len=0 Frame 20226: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43298, Ack: 324992, Len: 0 No. Time Source Destination Protocol Length Info 20227 241.940430 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1303386368, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 20227: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20228 241.940453 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1303386368, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 20228: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20229 241.940466 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1303386368, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 20229: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20230 241.940479 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1303386368, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 20230: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20231 241.958471 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3172466944, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 20231: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20232 241.958494 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3172466944, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 20232: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20233 241.958506 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3172466944, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 20233: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20234 241.958519 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3172466944, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 20234: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20235 241.966850 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20235: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43298, Ack: 324992, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20236 241.966884 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20222#1] rfb > xrl [ACK] Seq=324992 Ack=43266 Win=64916 Len=0 SLE=43298 SRE=43325 Frame 20236: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 324992, Ack: 43266, Len: 0 No. Time Source Destination Protocol Length Info 20237 241.972551 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20237: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43325, Ack: 324992, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20238 241.972588 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20222#2] rfb > xrl [ACK] Seq=324992 Ack=43266 Win=64916 Len=0 SLE=43298 SRE=43352 Frame 20238: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 324992, Ack: 43266, Len: 0 No. Time Source Destination Protocol Length Info 20239 241.990149 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20239: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43352, Ack: 324992, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20240 241.990182 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20222#3] rfb > xrl [ACK] Seq=324992 Ack=43266 Win=64916 Len=0 SLE=43298 SRE=43379 Frame 20240: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 324992, Ack: 43266, Len: 0 No. Time Source Destination Protocol Length Info 20241 242.002082 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20241: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43379, Ack: 324992, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20242 242.002115 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20222#4] rfb > xrl [ACK] Seq=324992 Ack=43266 Win=64916 Len=0 SLE=43298 SRE=43406 Frame 20242: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 324992, Ack: 43266, Len: 0 No. Time Source Destination Protocol Length Info 20243 242.007274 192.168.10.142 192.168.10.185 VNC 86 [TCP Fast Retransmission] Authentication result Frame 20243: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43266, Ack: 324992, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 20244 242.007305 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=324992 Ack=43406 Win=64776 Len=0 Frame 20244: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 324992, Ack: 43406, Len: 0 No. Time Source Destination Protocol Length Info 20245 242.007347 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20245: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43406, Ack: 324992, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20246 242.014515 192.168.10.185 192.168.10.142 VNC 493 Authentication result Frame 20246: 493 bytes on wire (3944 bits), 493 bytes captured (3944 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 324992, Ack: 43433, Len: 439 Virtual Network Computing No. Time Source Destination Protocol Length Info 20247 242.023987 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20247: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43433, Ack: 324992, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20248 242.027893 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20248: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43460, Ack: 324992, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20249 242.027927 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=325431 Ack=43487 Win=64695 Len=0 Frame 20249: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 325431, Ack: 43487, Len: 0 No. Time Source Destination Protocol Length Info 20250 242.036555 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 20250: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43487, Ack: 325431, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 20251 242.076660 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 20251: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 325431, Ack: 43519, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 20252 242.076700 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 20252: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 326691, Ack: 43519, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 20253 242.076730 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 20253: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 327951, Ack: 43519, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 20254 242.103524 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=43519 Ack=327951 Win=64240 Len=0 Frame 20254: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43519, Ack: 327951, Len: 0 No. Time Source Destination Protocol Length Info 20255 242.103639 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 20255: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 329211, Ack: 43519, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 20256 242.103680 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 20256: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 330471, Ack: 43519, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 20257 242.103713 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 20257: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 331731, Ack: 43519, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 20258 242.112108 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=43519 Ack=329211 Win=64240 Len=0 Frame 20258: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43519, Ack: 329211, Len: 0 No. Time Source Destination Protocol Length Info 20259 242.112143 192.168.10.185 192.168.10.142 VNC 235 Authentication result Frame 20259: 235 bytes on wire (1880 bits), 235 bytes captured (1880 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 332991, Ack: 43519, Len: 181 Virtual Network Computing No. Time Source Destination Protocol Length Info 20260 242.122534 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 20260: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16885, Ack: 1227154, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20261 242.122567 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1227154 Ack=16927 Win=46237 Len=0 Frame 20261: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1227154, Ack: 16927, Len: 0 No. Time Source Destination Protocol Length Info 20262 242.135694 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=43519 Ack=331731 Win=64240 Len=0 Frame 20262: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43519, Ack: 331731, Len: 0 No. Time Source Destination Protocol Length Info 20263 242.142401 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=43519 Ack=333172 Win=64240 Len=0 Frame 20263: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43519, Ack: 333172, Len: 0 No. Time Source Destination Protocol Length Info 20264 242.142447 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 20264: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43519, Ack: 333172, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 20265 242.192963 192.168.10.1 192.168.10.245 Syslog 308 LOCAL1.INFO: Oct 3 19:48:20 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1190 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eysverso@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 20265: 308 bytes on wire (2464 bits), 308 bytes captured (2464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:20 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1190 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 20266 242.333806 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333172 Ack=43551 Win=64631 Len=0 Frame 20266: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333172, Ack: 43551, Len: 0 No. Time Source Destination Protocol Length Info 20267 242.463374 192.168.10.203 119.152.231.11 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 20267: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 119.152.231.11 (119.152.231.11) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 20268 242.468888 180.243.236.205 192.168.10.207 SMTP 60 C: QUIT Frame 20268: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: commlinx-avl (1190), Dst Port: smtp (25), Seq: 61, Ack: 365, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20269 242.469090 192.168.10.207 180.243.236.205 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 20269: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: commlinx-avl (1190), Seq: 365, Ack: 67, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20270 242.469138 180.243.236.205 192.168.10.207 TCP 60 commlinx-avl > smtp [ACK] Seq=67 Ack=434 Win=93006 Len=0 Frame 20270: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: commlinx-avl (1190), Dst Port: smtp (25), Seq: 67, Ack: 434, Len: 0 No. Time Source Destination Protocol Length Info 20271 242.469170 192.168.10.207 180.243.236.205 TCP 60 smtp > commlinx-avl [FIN, ACK] Seq=434 Ack=67 Win=65469 Len=0 Frame 20271: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: commlinx-avl (1190), Seq: 434, Ack: 67, Len: 0 No. Time Source Destination Protocol Length Info 20272 242.469205 180.243.236.205 192.168.10.207 TCP 60 commlinx-avl > smtp [ACK] Seq=67 Ack=435 Win=93006 Len=0 Frame 20272: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: commlinx-avl (1190), Dst Port: smtp (25), Seq: 67, Ack: 435, Len: 0 No. Time Source Destination Protocol Length Info 20273 242.501390 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 20273: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9997, Ack: 718216, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20274 242.501424 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=719486 Ack=10039 Win=46594 Len=0 Frame 20274: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 719486, Ack: 10039, Len: 0 No. Time Source Destination Protocol Length Info 20275 242.501456 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=10039 Ack=718216 Win=0 Len=0 Frame 20275: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 10039, Ack: 718216, Len: 0 No. Time Source Destination Protocol Length Info 20276 242.538313 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20276: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43551, Ack: 333172, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20277 242.553034 192.168.10.185 192.168.10.142 VNC 290 Authentication result Frame 20277: 290 bytes on wire (2320 bits), 290 bytes captured (2320 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333172, Ack: 43578, Len: 236 Virtual Network Computing No. Time Source Destination Protocol Length Info 20278 242.598039 188.161.220.86 192.168.10.207 SMTP 72 C: EHLO jtxcvra.com Frame 20278: 72 bytes on wire (576 bits), 72 bytes captured (576 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45142 (45142), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 18 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20279 242.598226 192.168.10.207 188.161.220.86 SMTP 245 S: 250-mail.mydomain.com Hello [188.161.220.86] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 20279: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45142 (45142), Seq: 122, Ack: 19, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20280 242.598266 188.161.220.86 192.168.10.207 TCP 60 45142 > smtp [ACK] Seq=19 Ack=313 Win=93128 Len=0 Frame 20280: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45142 (45142), Dst Port: smtp (25), Seq: 19, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 20281 242.598603 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:20 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45142 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 20281: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:20 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45142 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 20282 242.598716 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:20 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45142 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 20282: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:20 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45142 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 20283 242.598826 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:48:20 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45142 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 20283: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:20 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45142 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 20284 242.598943 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:48:20 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45142 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 20284: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:20 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45142 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 20285 242.599071 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:20 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45142 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 20285: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:20 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45142 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 20286 242.599196 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:20 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45142 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 20286: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:20 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45142 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 20287 242.601675 Watchgua_3c:4c:d8 SunrichT_19:cf:97 ARP 60 Who has 192.168.10.245? Tell 192.168.10.1 Frame 20287: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20288 242.601687 SunrichT_19:cf:97 Watchgua_3c:4c:d8 ARP 60 192.168.10.245 is at 00:0a:cd:19:cf:97 Frame 20288: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:97 (00:0a:cd:19:cf:97), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20289 242.662247 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 20289: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43610, Ack: 333408, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20290 242.662282 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20277#1] rfb > xrl [ACK] Seq=333408 Ack=43578 Win=64604 Len=0 SLE=43610 SRE=43637 Frame 20290: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333408, Ack: 43578, Len: 0 No. Time Source Destination Protocol Length Info 20291 242.668255 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20291: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43637, Ack: 333408, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20292 242.668288 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20277#2] rfb > xrl [ACK] Seq=333408 Ack=43578 Win=64604 Len=0 SLE=43610 SRE=43664 Frame 20292: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333408, Ack: 43578, Len: 0 No. Time Source Destination Protocol Length Info 20293 242.680148 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20293: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43664, Ack: 333408, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20294 242.680181 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20277#3] rfb > xrl [ACK] Seq=333408 Ack=43578 Win=64604 Len=0 SLE=43610 SRE=43691 Frame 20294: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333408, Ack: 43578, Len: 0 No. Time Source Destination Protocol Length Info 20295 242.686053 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20295: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43691, Ack: 333408, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20296 242.686085 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20277#4] rfb > xrl [ACK] Seq=333408 Ack=43578 Win=64604 Len=0 SLE=43610 SRE=43718 Frame 20296: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333408, Ack: 43578, Len: 0 No. Time Source Destination Protocol Length Info 20297 242.692407 192.168.10.142 192.168.10.185 VNC 86 [TCP Fast Retransmission] Authentication result Frame 20297: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43578, Ack: 333408, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 20298 242.692441 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333408 Ack=43718 Win=64464 Len=0 Frame 20298: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333408, Ack: 43718, Len: 0 No. Time Source Destination Protocol Length Info 20299 242.692481 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20299: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43718, Ack: 333408, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20300 242.699071 192.168.10.185 192.168.10.142 VNC 235 Authentication result Frame 20300: 235 bytes on wire (1880 bits), 235 bytes captured (1880 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333408, Ack: 43745, Len: 181 Virtual Network Computing No. Time Source Destination Protocol Length Info 20301 242.712257 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20301: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43745, Ack: 333408, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20302 242.716986 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20302: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43772, Ack: 333408, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20303 242.717019 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=43799 Win=64383 Len=0 Frame 20303: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 43799, Len: 0 No. Time Source Destination Protocol Length Info 20304 242.722018 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20304: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43799, Ack: 333408, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20305 242.726278 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20305: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43826, Ack: 333408, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20306 242.726311 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=43853 Win=64329 Len=0 Frame 20306: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 43853, Len: 0 No. Time Source Destination Protocol Length Info 20307 242.732330 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 20307: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43853, Ack: 333589, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 20308 242.735952 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20308: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43885, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20309 242.735985 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=43912 Win=65535 Len=0 Frame 20309: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 43912, Len: 0 No. Time Source Destination Protocol Length Info 20310 242.759261 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 20310: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43966, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20311 242.759297 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20309#1] rfb > xrl [ACK] Seq=333589 Ack=43912 Win=65535 Len=0 SLE=43966 SRE=43993 Frame 20311: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 43912, Len: 0 No. Time Source Destination Protocol Length Info 20312 242.764066 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20312: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43993, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20313 242.764100 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20309#2] rfb > xrl [ACK] Seq=333589 Ack=43912 Win=65535 Len=0 SLE=43966 SRE=44020 Frame 20313: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 43912, Len: 0 No. Time Source Destination Protocol Length Info 20314 242.765992 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 20314: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16927, Ack: 1227154, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20315 242.766024 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1227154 Ack=16969 Win=46216 Len=0 Frame 20315: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1227154, Ack: 16969, Len: 0 No. Time Source Destination Protocol Length Info 20316 242.780000 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 20316: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44047, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20317 242.780034 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 20309#3] rfb > xrl [ACK] Seq=333589 Ack=43912 Win=65535 Len=0 SLE=44047 SRE=44074 SLE=43966 SRE=44020 Frame 20317: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 43912, Len: 0 No. Time Source Destination Protocol Length Info 20318 242.787265 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 20318: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43912, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20319 242.791358 180.243.236.205 192.168.10.207 TCP 60 commlinx-avl > smtp [RST, ACK] Seq=67 Ack=435 Win=93006 Len=0 Frame 20319: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: commlinx-avl (1190), Dst Port: smtp (25), Seq: 67, Ack: 435, Len: 0 No. Time Source Destination Protocol Length Info 20320 242.791439 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:48:20 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1190 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 20320: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:20 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1190 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 20321 242.792011 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20321: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44074, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20322 242.792044 192.168.10.185 192.168.10.142 TCP 74 rfb > xrl [ACK] Seq=333589 Ack=43939 Win=65508 Len=0 SLE=44047 SRE=44101 SLE=43966 SRE=44020 Frame 20322: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 43939, Len: 0 No. Time Source Destination Protocol Length Info 20323 242.793420 180.243.236.205 192.168.10.207 TCP 62 rsf-1 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 20323: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: rsf-1 (1195), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 20324 242.793491 192.168.10.207 180.243.236.205 TCP 62 smtp > rsf-1 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 20324: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: rsf-1 (1195), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 20325 242.795924 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20325: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44101, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20326 242.795960 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 20322#1] rfb > xrl [ACK] Seq=333589 Ack=43939 Win=65508 Len=0 SLE=44047 SRE=44128 SLE=43966 SRE=44020 Frame 20326: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 43939, Len: 0 No. Time Source Destination Protocol Length Info 20327 242.804008 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20327: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44128, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20328 242.804041 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 20322#2] rfb > xrl [ACK] Seq=333589 Ack=43939 Win=65508 Len=0 SLE=44047 SRE=44155 SLE=43966 SRE=44020 Frame 20328: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 43939, Len: 0 No. Time Source Destination Protocol Length Info 20329 242.812706 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20329: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44155, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20330 242.812739 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 20322#3] rfb > xrl [ACK] Seq=333589 Ack=43939 Win=65508 Len=0 SLE=44047 SRE=44182 SLE=43966 SRE=44020 Frame 20330: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 43939, Len: 0 No. Time Source Destination Protocol Length Info 20331 242.818254 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20331: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44182, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20332 242.818287 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 20322#4] rfb > xrl [ACK] Seq=333589 Ack=43939 Win=65508 Len=0 SLE=44047 SRE=44209 SLE=43966 SRE=44020 Frame 20332: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 43939, Len: 0 No. Time Source Destination Protocol Length Info 20333 242.828180 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 20333: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 43939, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20334 242.828212 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=333589 Ack=44020 Win=65427 Len=0 SLE=44047 SRE=44209 Frame 20334: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 44020, Len: 0 No. Time Source Destination Protocol Length Info 20335 242.832197 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20335: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44209, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20336 242.832229 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20334#1] rfb > xrl [ACK] Seq=333589 Ack=44020 Win=65427 Len=0 SLE=44047 SRE=44236 Frame 20336: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 44020, Len: 0 No. Time Source Destination Protocol Length Info 20337 242.837253 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20337: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44236, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20338 242.837285 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20334#2] rfb > xrl [ACK] Seq=333589 Ack=44020 Win=65427 Len=0 SLE=44047 SRE=44263 Frame 20338: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 44020, Len: 0 No. Time Source Destination Protocol Length Info 20339 242.850187 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20339: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44263, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20340 242.851280 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20334#3] rfb > xrl [ACK] Seq=333589 Ack=44020 Win=65427 Len=0 SLE=44047 SRE=44290 Frame 20340: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 44020, Len: 0 No. Time Source Destination Protocol Length Info 20341 242.854266 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20341: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44290, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20342 242.854298 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20334#4] rfb > xrl [ACK] Seq=333589 Ack=44020 Win=65427 Len=0 SLE=44047 SRE=44317 Frame 20342: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 44020, Len: 0 No. Time Source Destination Protocol Length Info 20343 242.859856 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20343: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44317, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20344 242.859890 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20334#5] rfb > xrl [ACK] Seq=333589 Ack=44020 Win=65427 Len=0 SLE=44047 SRE=44344 Frame 20344: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 44020, Len: 0 No. Time Source Destination Protocol Length Info 20345 242.864244 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 20345: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44020, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20346 242.864277 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=44344 Win=65103 Len=0 Frame 20346: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 44344, Len: 0 No. Time Source Destination Protocol Length Info 20347 242.868179 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20347: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44344, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20348 242.876029 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20348: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44371, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20349 242.876068 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=44398 Win=65049 Len=0 Frame 20349: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 44398, Len: 0 No. Time Source Destination Protocol Length Info 20350 242.882527 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20350: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44398, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20351 242.892068 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20351: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44425, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20352 242.892101 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=44452 Win=64995 Len=0 Frame 20352: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 44452, Len: 0 No. Time Source Destination Protocol Length Info 20353 242.906313 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 20353: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44479, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20354 242.906348 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20352#1] rfb > xrl [ACK] Seq=333589 Ack=44452 Win=64995 Len=0 SLE=44479 SRE=44506 Frame 20354: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 44452, Len: 0 No. Time Source Destination Protocol Length Info 20355 242.916153 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20355: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44506, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20356 242.916186 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20352#2] rfb > xrl [ACK] Seq=333589 Ack=44452 Win=64995 Len=0 SLE=44479 SRE=44533 Frame 20356: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 44452, Len: 0 No. Time Source Destination Protocol Length Info 20357 242.924100 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20357: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44533, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20358 242.924132 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20352#3] rfb > xrl [ACK] Seq=333589 Ack=44452 Win=64995 Len=0 SLE=44479 SRE=44560 Frame 20358: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 44452, Len: 0 No. Time Source Destination Protocol Length Info 20359 242.933225 188.161.220.86 192.168.10.207 SMTP 101 C: MAIL FROM: <gabriella.ferguson@xxxxxxxxxxxxx> Frame 20359: 101 bytes on wire (808 bits), 101 bytes captured (808 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45142 (45142), Dst Port: smtp (25), Seq: 19, Ack: 313, Len: 47 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20360 242.933332 192.168.10.207 188.161.220.86 SMTP 111 S: 250 2.1.0 [email protected] OK Frame 20360: 111 bytes on wire (888 bits), 111 bytes captured (888 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45142 (45142), Seq: 313, Ack: 66, Len: 57 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20361 242.933377 188.161.220.86 192.168.10.207 TCP 60 45142 > smtp [ACK] Seq=66 Ack=370 Win=93070 Len=0 Frame 20361: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45142 (45142), Dst Port: smtp (25), Seq: 66, Ack: 370, Len: 0 No. Time Source Destination Protocol Length Info 20362 242.937110 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20362: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44560, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20363 242.937143 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20352#4] rfb > xrl [ACK] Seq=333589 Ack=44452 Win=64995 Len=0 SLE=44479 SRE=44587 Frame 20363: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 44452, Len: 0 No. Time Source Destination Protocol Length Info 20364 242.944452 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 20364: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44452, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20365 242.944484 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=44587 Win=64860 Len=0 Frame 20365: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 44587, Len: 0 No. Time Source Destination Protocol Length Info 20366 242.944525 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20366: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44587, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20367 242.948254 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20367: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44614, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20368 242.948287 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=44641 Win=64806 Len=0 Frame 20368: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 44641, Len: 0 No. Time Source Destination Protocol Length Info 20369 242.955967 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1320163584, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 20369: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20370 242.955989 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1320163584, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 20370: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20371 242.956003 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1320163584, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 20371: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20372 242.956015 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1320163584, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 20372: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20373 242.956080 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20373: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44641, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20374 242.964248 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20374: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44668, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20375 242.964281 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=44695 Win=64752 Len=0 Frame 20375: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 44695, Len: 0 No. Time Source Destination Protocol Length Info 20376 242.972538 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20376: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44695, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20377 242.973939 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3189244160, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 20377: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20378 242.973960 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3189244160, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 20378: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20379 242.973973 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3189244160, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 20379: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20380 242.973985 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3189244160, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 20380: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20381 242.978048 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20381: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44722, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20382 242.978081 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=44749 Win=64698 Len=0 Frame 20382: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 44749, Len: 0 No. Time Source Destination Protocol Length Info 20383 242.986181 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20383: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44749, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20384 242.995941 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20384: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44776, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20385 242.995978 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=44803 Win=64644 Len=0 Frame 20385: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 44803, Len: 0 No. Time Source Destination Protocol Length Info 20386 243.003378 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20386: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44803, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20387 243.022129 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20387: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44830, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20388 243.022171 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=44857 Win=64590 Len=0 Frame 20388: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 44857, Len: 0 No. Time Source Destination Protocol Length Info 20389 243.026675 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20389: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44857, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20390 243.026723 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20390: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44884, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20391 243.026753 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=44911 Win=64536 Len=0 Frame 20391: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 44911, Len: 0 No. Time Source Destination Protocol Length Info 20392 243.034276 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20392: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44911, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20393 243.043973 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20393: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44938, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20394 243.044007 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=44965 Win=64482 Len=0 Frame 20394: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 44965, Len: 0 No. Time Source Destination Protocol Length Info 20395 243.058036 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20395: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44965, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20396 243.062303 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20396: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 44992, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20397 243.062337 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=45019 Win=64428 Len=0 Frame 20397: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45019, Len: 0 No. Time Source Destination Protocol Length Info 20398 243.082751 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20398: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45019, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20399 243.086488 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20399: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45046, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20400 243.086521 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=45073 Win=64374 Len=0 Frame 20400: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45073, Len: 0 No. Time Source Destination Protocol Length Info 20401 243.091283 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20401: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45073, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20402 243.092855 180.243.236.205 192.168.10.207 TCP 60 rsf-1 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 20402: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: rsf-1 (1195), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 20403 243.092950 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:48:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1195 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 20403: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1195 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 20404 243.092983 192.168.10.207 180.243.236.205 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:47:55 -0400 Frame 20404: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: rsf-1 (1195), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20405 243.093019 180.243.236.205 192.168.10.207 TCP 60 rsf-1 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 20405: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: rsf-1 (1195), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 20406 243.096083 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20406: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45100, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20407 243.096115 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=45127 Win=64320 Len=0 Frame 20407: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45127, Len: 0 No. Time Source Destination Protocol Length Info 20408 243.102130 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20408: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45127, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20409 243.120883 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20409: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45154, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20410 243.120919 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=45181 Win=65535 Len=0 Frame 20410: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45181, Len: 0 No. Time Source Destination Protocol Length Info 20411 243.124223 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20411: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45181, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20412 243.134744 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20412: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45208, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20413 243.134777 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=45235 Win=65481 Len=0 Frame 20413: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45235, Len: 0 No. Time Source Destination Protocol Length Info 20414 243.142394 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20414: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45235, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20415 243.156136 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 20415: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45289, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20416 243.156171 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=333589 Ack=45262 Win=65454 Len=0 SLE=45289 SRE=45316 Frame 20416: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45262, Len: 0 No. Time Source Destination Protocol Length Info 20417 243.162638 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 20417: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20418 243.162668 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 20418: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20419 243.164316 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20419: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45316, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20420 243.164349 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20416#1] rfb > xrl [ACK] Seq=333589 Ack=45262 Win=65454 Len=0 SLE=45289 SRE=45343 Frame 20420: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45262, Len: 0 No. Time Source Destination Protocol Length Info 20421 243.174668 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20421: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45343, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20422 243.174701 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20416#2] rfb > xrl [ACK] Seq=333589 Ack=45262 Win=65454 Len=0 SLE=45289 SRE=45370 Frame 20422: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45262, Len: 0 No. Time Source Destination Protocol Length Info 20423 243.180144 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20423: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45370, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20424 243.180176 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20416#3] rfb > xrl [ACK] Seq=333589 Ack=45262 Win=65454 Len=0 SLE=45289 SRE=45397 Frame 20424: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45262, Len: 0 No. Time Source Destination Protocol Length Info 20425 243.192589 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20425: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45397, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20426 243.192624 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20416#4] rfb > xrl [ACK] Seq=333589 Ack=45262 Win=65454 Len=0 SLE=45289 SRE=45424 Frame 20426: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45262, Len: 0 No. Time Source Destination Protocol Length Info 20427 243.194240 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 20427: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 20428 243.196290 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 20428: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45262, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20429 243.196323 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=45424 Win=65292 Len=0 Frame 20429: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45424, Len: 0 No. Time Source Destination Protocol Length Info 20430 243.204101 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20430: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45424, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20431 243.208815 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=45451 Win=65265 Len=0 Frame 20431: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45451, Len: 0 No. Time Source Destination Protocol Length Info 20432 243.224431 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20432: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45451, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20433 243.248042 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20433: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45478, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20434 243.248076 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=45505 Win=65211 Len=0 Frame 20434: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45505, Len: 0 No. Time Source Destination Protocol Length Info 20435 243.252229 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20435: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45505, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20436 243.262139 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20436: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45532, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20437 243.262174 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=45559 Win=65157 Len=0 Frame 20437: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45559, Len: 0 No. Time Source Destination Protocol Length Info 20438 243.270418 192.168.10.1 192.168.10.245 Syslog 307 LOCAL1.INFO: Oct 3 19:48:21 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45142 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eywnail@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 20438: 307 bytes on wire (2456 bits), 307 bytes captured (2456 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:21 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45142 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 20439 243.276095 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20439: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45559, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20440 243.280613 14.97.186.55 192.168.10.207 SMTP 97 C: MAIL FROM: <lily.hailey@xxxxxxxxxxxxxxxx> Frame 20440: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13573 (13573), Dst Port: smtp (25), Seq: 17, Ack: 311, Len: 43 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20441 243.280715 192.168.10.30 192.168.10.1 ICMP 98 Echo (ping) request id=0x9563, seq=0/0, ttl=64 Frame 20441: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.10.1 (192.168.10.1) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 20442 243.280750 192.168.10.207 14.97.186.55 SMTP 107 S: 250 2.1.0 [email protected] OK Frame 20442: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 14.97.186.55 (14.97.186.55) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 13573 (13573), Seq: 311, Ack: 60, Len: 53 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20443 243.280787 14.97.186.55 192.168.10.207 TCP 60 13573 > smtp [ACK] Seq=60 Ack=364 Win=93076 Len=0 Frame 20443: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13573 (13573), Dst Port: smtp (25), Seq: 60, Ack: 364, Len: 0 No. Time Source Destination Protocol Length Info 20444 243.281424 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20444: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45586, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20445 243.281456 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=45613 Win=65103 Len=0 Frame 20445: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45613, Len: 0 No. Time Source Destination Protocol Length Info 20446 243.281797 Watchgua_3c:4c:d8 Broadcast ARP 60 Who has 192.168.10.30? Tell 192.168.10.1 Frame 20446: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20447 243.281826 Watchgua_3c:4c:d8 Broadcast ARP 60 Who has 192.168.10.30? Tell 192.168.10.1 Frame 20447: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20448 243.286328 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20448: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45613, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20449 243.289825 American_80:cf:21 Watchgua_3c:4c:d8 ARP 60 192.168.10.30 is at 00:c0:b7:80:cf:21 Frame 20449: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20450 243.289939 192.168.10.1 192.168.10.30 ICMP 98 Echo (ping) reply id=0x9563, seq=0/0, ttl=64 Frame 20450: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: American_80:cf:21 (00:c0:b7:80:cf:21) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.30 (192.168.10.30) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 20451 243.292042 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20451: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45640, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20452 243.292075 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=45667 Win=65049 Len=0 Frame 20452: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45667, Len: 0 No. Time Source Destination Protocol Length Info 20453 243.315771 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 20453: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 20454 243.316180 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20454: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45667, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20455 243.357250 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 20455: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 20456 243.357281 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 20456: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 20457 243.402215 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20457: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45694, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20458 243.402250 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=45721 Win=64995 Len=0 Frame 20458: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45721, Len: 0 No. Time Source Destination Protocol Length Info 20459 243.413003 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 20459: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 16969, Ack: 1227154, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20460 243.413039 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1227154 Ack=17011 Win=46195 Len=0 Frame 20460: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1227154, Ack: 17011, Len: 0 No. Time Source Destination Protocol Length Info 20461 243.443898 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 20461: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 20462 243.566432 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 20462: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 20463 243.626552 180.243.236.205 192.168.10.207 SMTP 69 C: EHLO hmju.com Frame 20463: 69 bytes on wire (552 bits), 69 bytes captured (552 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: rsf-1 (1195), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 15 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20464 243.626681 192.168.10.207 180.243.236.205 SMTP 246 S: 250-mail.mydomain.com Hello [180.243.236.205] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 20464: 246 bytes on wire (1968 bits), 246 bytes captured (1968 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: rsf-1 (1195), Seq: 122, Ack: 16, Len: 192 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20465 243.626738 180.243.236.205 192.168.10.207 TCP 60 rsf-1 > smtp [ACK] Seq=16 Ack=314 Win=93126 Len=0 Frame 20465: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: rsf-1 (1195), Dst Port: smtp (25), Seq: 16, Ack: 314, Len: 0 No. Time Source Destination Protocol Length Info 20466 243.627287 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1195 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 20466: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1195 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 20467 243.627361 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1195 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 20467: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1195 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 20468 243.628059 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=230181 Ack=3849 Win=1002 Len=1448 TSval=596154 TSecr=729900 Frame 20468: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 230181, Ack: 3849, Len: 1448 Data (1448 bytes) 0000 17 03 01 21 00 c8 b0 c5 4c 12 c1 4a 45 2b 6d f9 ...!....L..JE+m. 0010 ff 71 18 2b 15 be 93 ef d5 ef 83 41 82 53 19 45 .q.+.......A.S.E 0020 15 c7 17 cb 37 3b 03 5f 78 20 c4 a1 10 83 47 55 ....7;._x ....GU 0030 53 8b 40 9c 8a 10 5b 0b 05 5a 6c df 06 43 d0 91 S.@...[..Zl..C.. 0040 81 27 b1 e4 c5 f5 61 51 55 14 5a 93 7a f8 34 79 .'....aQU.Z.z.4y 0050 bf 6c c8 96 65 e7 c8 8a d5 4d 1f c6 9a 24 93 12 .l..e....M...$.. 0060 b9 12 d3 8d 99 20 db 28 5a a8 b2 e9 96 db ea fb ..... .(Z....... 0070 ac 95 14 26 d6 eb b1 8b 23 0b 14 a6 12 03 8c 01 ...&....#....... 0080 86 92 03 a3 d8 92 54 0f c4 db c1 9b 35 40 ac a7 ......T.....5@.. 0090 8f 4e 5f 0f 44 e4 62 97 ae 87 f7 21 c2 73 5e 9b .N_.D.b....!.s^. 00a0 54 83 c8 7c 75 88 9c eb bd 0a 7c 69 62 94 3d f8 T..|u.....|ib.=. 00b0 06 1d 9b b3 70 7f 79 72 01 70 0a 76 47 fc 70 42 ....p.yr.p.vG.pB 00c0 50 52 8a 76 c0 40 0f e3 31 e1 29 0a b0 f8 b0 f8 [email protected].)..... 00d0 87 83 e0 80 b0 79 d3 80 f0 5d 73 67 4f 2a f6 d5 .....y...]sgO*.. 00e0 97 d5 cb 97 8b c9 14 b3 f2 5f b7 9c 2b ff ae 5c ........._..+..\ 00f0 ef e5 ae 81 fb 21 37 ba ca 5c 8e 34 69 9b 2b 04 .....!7..\.4i.+. 0100 cd a4 63 1b b8 a8 f0 4f 0a 3b 7d bb 43 30 56 15 ..c....O.;}.C0V. 0110 2d 3f ea 3e 70 a2 1f 7b dd 53 e8 c5 61 8b 1f 4d -?.>p..{.S..a..M 0120 a4 8e 91 e6 71 14 fc 6a 57 96 51 a9 f2 b0 c0 09 ....q..jW.Q..... 0130 80 34 25 f2 d6 ff fb ff b9 60 4e b1 41 b3 01 85 .4%......`N.A... 0140 f9 be 4a 37 50 a0 80 c1 5e 4e 86 9f c2 f4 be 16 ..J7P...^N...... 0150 12 48 29 81 d4 a2 a4 a1 75 1b 2c 83 ec db d1 56 .H).....u.,....V 0160 67 db 75 af cc 97 f2 89 92 0f e0 39 e9 db 06 78 g.u........9...x 0170 ad bd 7e d7 f5 84 36 32 5c 67 0d 29 ae 5a 2c 95 ..~...62\g.).Z,. 0180 4b 12 db eb 19 27 08 fe 5d 60 ee a3 8d 3b 9e 27 K....'..]`...;.' 0190 24 24 6c f2 89 ef 88 d5 96 52 16 72 13 3a f0 1d $$l......R.r.:.. 01a0 67 84 f2 3b 91 4d ca 0e e5 cc 3e c9 a3 83 cf 67 g..;.M....>....g 01b0 33 a8 48 80 e3 74 18 c3 d4 e8 79 9d 4e 86 db 0f 3.H..t....y.N... 01c0 6d ef 8a a0 2b 70 c2 80 ed cf bd 8e 13 70 13 f7 m...+p.......p.. 01d0 90 67 b4 35 c1 7c d5 ab b8 19 be 00 19 c2 0b 88 .g.5.|.......... 01e0 82 d4 6d ed 32 70 5b 29 d8 e5 94 7a 23 8f 80 07 ..m.2p[)...z#... 01f0 6e 44 9f 11 02 d6 ee 48 e8 df 15 d0 90 62 86 8a nD.....H.....b.. 0200 1c 16 c5 8c e8 86 8e f3 8f ca d9 3d 9f ef 18 a1 ...........=.... 0210 c4 eb d6 ce 43 df 98 6c 3b 8c 7a aa ba fa bf 0c ....C..l;.z..... 0220 f6 4f 05 22 31 98 bb 3e aa 57 24 d2 6e 0e bb 6d .O."1..>.W$.n..m 0230 9f bc fe fb c6 45 81 d7 d8 67 7b 9d 9b fa 4d 6f .....E...g{...Mo 0240 46 9e 6c f7 ab b7 af ef 30 c2 8f 76 31 80 f3 fd F.l.....0..v1... 0250 d7 95 c5 8a d5 d6 fc 57 9a d0 d9 9a 04 e4 c0 91 .......W........ 0260 da 46 dc 00 f7 b0 86 96 5c a9 13 99 f5 86 36 8f .F......\.....6. 0270 34 a8 f8 0e 66 bf 13 24 74 b0 2c 30 d3 85 32 d9 4...f..$t.,0..2. 0280 f2 f0 cc 46 76 2d 8a 07 62 a6 1b 4b 20 42 fe 6b ...Fv-..b..K B.k 0290 48 3f 9d d8 de dd b4 e7 85 a5 0f 05 68 e8 69 11 H?..........h.i. 02a0 2c 7b bc f4 f8 ff 64 f1 d8 37 c9 d8 57 b3 e6 ee ,{....d..7..W... 02b0 05 19 ba 43 2c 72 a0 7e 44 e1 2a e7 61 ea 93 63 ...C,r.~D.*.a..c 02c0 7f be 9a 75 73 f6 0d b3 a9 bc 47 be 2c 2c 07 5d ...us.....G.,,.] 02d0 7a 05 ca 20 3f 73 4e 6a e4 5a 08 d2 88 78 37 7f z.. ?sNj.Z...x7. 02e0 b2 cd 33 c2 92 f1 cb 84 59 a1 e1 7d 5a 1e 52 5f ..3.....Y..}Z.R_ 02f0 c2 f1 8a 63 17 71 ac fe 02 03 ca e8 60 a0 7b 74 ...c.q......`.{t 0300 c7 db 8f 36 1b 17 fa b3 e3 4c 91 a3 f5 1c 20 2f ...6.....L.... / 0310 f3 2e f1 9f 0a 77 3d 4e c8 55 09 4d f6 f3 c7 d7 .....w=N.U.M.... 0320 0d 90 c1 24 f8 b1 ca 95 91 ea e1 b3 1f 15 e9 b4 ...$............ 0330 21 bb 5e 4e f8 25 7a 0c 53 22 f1 7f f3 f6 08 22 !.^N.%z.S"....." 0340 fb 93 c4 89 e6 4e cb 1e ef 06 b6 0f 0c bd 87 d3 .....N.......... 0350 16 b3 27 d6 09 28 9a 22 9d a1 91 8d 73 36 78 e7 ..'..(."....s6x. 0360 ec 5a 7d 90 81 e9 24 67 1a 24 f5 b6 3e 1d b8 52 .Z}...$g.$..>..R 0370 4c 31 c3 68 4f 69 32 0f 56 33 4e e7 16 91 9b 69 L1.hOi2.V3N....i 0380 da fb 03 b7 ad f5 82 ff 45 36 48 4f 14 9d 9b 28 ........E6HO...( 0390 a2 db 48 fa fd aa 07 26 53 6b 7d 2f 04 1d 22 29 ..H....&Sk}/..") 03a0 d1 5d 43 00 60 fb 7a 07 65 8a 13 64 22 5c 29 50 .]C.`.z.e..d"\)P 03b0 21 21 0f e5 fa f2 bf ef 62 95 fd a4 f2 51 7c ec !!......b....Q|. 03c0 e8 f6 a0 0f 2d 2e 71 5b 72 97 3b 2e c3 27 a3 5d ....-.q[r.;..'.] 03d0 9f b9 3d 95 57 73 95 02 c5 d1 d8 cc 95 1a ce 77 ..=.Ws.........w 03e0 43 4b ac a4 7d 27 53 2c 36 32 e8 7a e2 1b 6c 03 CK..}'S,62.z..l. 03f0 2a fa 77 cd 07 ae 71 c9 88 2f a6 5e ba 90 52 f8 *.w...q../.^..R. 0400 2b 30 03 76 14 74 b0 93 e9 45 f9 4e 06 bc 5c fc +0.v.t...E.N..\. 0410 2d 39 0d 9a 9b af ff 02 f2 2c b6 7e 4a 40 de 90 -9.......,.~J@.. 0420 f3 7a 8c 23 fa 50 98 77 52 19 54 8c 30 c5 f1 7c .z.#.P.wR.T.0..| 0430 12 ae 62 ab 6a c6 7b f4 b0 8a ea b3 09 01 39 49 ..b.j.{.......9I 0440 16 ed 88 0c 39 f0 15 fa cf 38 bb 7e b2 30 82 5b ....9....8.~.0.[ 0450 5c 2d ac f3 54 09 49 d9 55 48 5e a0 c5 60 16 38 \-..T.I.UH^..`.8 0460 8c 67 7e dc 29 e5 7c 8e 9d 90 77 1a 04 b7 fe 53 .g~.).|...w....S 0470 17 8d e2 4f 75 cc 6c b9 5f fd 32 77 ac bc b9 5e ...Ou.l._.2w...^ 0480 ec 6e 35 1f c2 fa de b0 71 65 38 05 30 b9 95 4a .n5.....qe8.0..J 0490 89 09 82 5f 57 6e 37 8d b6 f8 02 b4 40 ed dd 66 [email protected] 04a0 7f 51 1e fd 27 c0 41 67 10 6e 54 d9 fc 59 ef ac .Q..'.Ag.nT..Y.. 04b0 36 6e 9e 97 15 84 63 6e 89 c3 df 60 a6 21 3b b0 6n....cn...`.!;. 04c0 be 07 98 0c 4a 80 d6 a7 27 7b 0b d3 72 5c 44 00 ....J...'{..r\D. 04d0 92 e4 6e 64 a7 a9 b5 dd e2 63 7d 5d f2 7d 3b b1 ..nd.....c}].};. 04e0 ec e9 0d 9b 44 be 62 f2 0a cf e5 b0 ca c9 8b 5d ....D.b........] 04f0 26 28 67 16 9e 02 34 55 50 7d cc fd ac d2 e7 73 &(g...4UP}.....s 0500 6f 0d 7a fa c5 3b d1 be 25 8c 49 6f e6 80 dd 69 o.z..;..%.Io...i 0510 12 30 cc d1 46 3d 98 f7 e8 e6 a3 11 f8 27 56 05 .0..F=.......'V. 0520 2e c6 25 72 90 33 17 cf f4 14 dd 74 b0 94 f4 9b ..%r.3.....t.... 0530 1e 23 f8 56 8c 1b 0e 0b 1f e0 40 e4 74 ec d8 79 .#[email protected] 0540 3a 66 58 ca c8 4f 4f 21 b8 70 8b 68 e7 43 01 16 :fX..OO!.p.h.C.. 0550 f1 69 81 a1 c3 c9 a0 03 ae 17 01 60 c7 71 f9 3f .i.........`.q.? 0560 1c 91 57 39 ca c6 19 44 2a 4b fc 8f 10 3f a2 dc ..W9...D*K...?.. 0570 e1 2a df f2 2a 64 48 97 73 e9 6f 31 3e 22 9d f4 .*..*dH.s.o1>".. 0580 a4 0d d2 40 f2 43 c8 c0 ba cc 0c d8 36 40 77 96 [email protected]@w. 0590 1f 9b 59 fd d6 7b fc ea 62 91 a2 c3 6a a6 2a 99 ..Y..{..b...j.*. 05a0 e8 e0 d7 ad 20 c5 f3 5a .... ..Z No. Time Source Destination Protocol Length Info 20469 243.628176 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=231629 Ack=3849 Win=1002 Len=1448 TSval=596154 TSecr=729900 Frame 20469: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 231629, Ack: 3849, Len: 1448 Data (1448 bytes) 0000 e1 31 cc 95 d8 d8 de ae 6c 21 db 79 cc 78 a8 34 .1......l!.y.x.4 0010 c9 35 3b d7 c8 14 f3 32 d3 e0 7b c3 9f 72 fd f4 .5;....2..{..r.. 0020 67 9f 7e 75 05 49 c4 85 7d 06 20 d2 08 2b 2d 48 g.~u.I..}. ..+-H 0030 a0 34 b8 9d c8 8b 2e a2 76 b3 22 44 55 fb a5 76 .4......v."DU..v 0040 e7 f8 d1 f2 d8 d2 ad da 4b 9a b9 56 90 31 e9 cd ........K..V.1.. 0050 84 a8 bc a3 58 35 98 2c ff 50 94 4a 01 8c 1e 50 ....X5.,.P.J...P 0060 7c 07 e1 36 34 54 af 32 f6 7d 15 19 41 eb 69 64 |..64T.2.}..A.id 0070 37 ba 22 31 d3 c1 e4 bb d7 77 f4 ec 75 ea 73 33 7."1.....w..u.s3 0080 51 bf 7d 9c c5 a3 a1 33 89 f9 58 e2 10 cc fc c5 Q.}....3..X..... 0090 c1 15 cd 00 58 20 9e 87 c8 01 d6 84 4f b0 4f 27 ....X ......O.O' 00a0 7c ab ab c9 e9 1e c3 dc 0a 90 96 dd 2f 84 a8 61 |.........../..a 00b0 1b f0 27 52 77 c5 86 f8 de 8d 41 f3 b4 2d 10 c8 ..'Rw.....A..-.. 00c0 38 13 59 52 73 b7 05 ff 4f ae 2a 16 ff 81 e1 c4 8.YRs...O.*..... 00d0 a4 0c 90 4b cd 70 db a4 73 4a 6d c4 d2 e5 da 66 ...K.p..sJm....f 00e0 f6 72 9c 45 e9 f9 d3 c5 46 97 7b ce 6d 60 79 7d .r.E....F.{.m`y} 00f0 e2 b9 76 2f 9b c4 d9 10 2a c2 ba 67 f1 c1 71 dc ..v/....*..g..q. 0100 a3 4c 00 0f 5e 89 91 d4 94 45 d3 f2 f0 ac 1b 40 .L..^....E.....@ 0110 74 70 64 ef ac ec 18 70 f9 ff eb 6a 94 98 aa 96 tpd....p...j.... 0120 92 df f7 0e 54 1b 5f d1 f7 da d0 9d 25 8e 6b 43 ....T._.....%.kC 0130 dc cb 4e bb bd e0 81 0c ac 59 a2 6e a4 6a b4 cb ..N......Y.n.j.. 0140 25 d4 78 12 3a 32 43 cd f9 3d cc aa 4b 24 c0 9f %.x.:2C..=..K$.. 0150 ad 2f c0 b8 8e ce 1a 22 4d a8 00 8a cb e3 bb 78 ./....."M......x 0160 c5 58 4e 47 5e 27 82 76 23 e3 cb 2b 73 b4 47 5b .XNG^'.v#..+s.G[ 0170 30 89 89 3a 36 21 20 60 5b 89 c5 17 cc 30 b6 14 0..:6! `[....0.. 0180 ce 55 dd fd 1c 8a d3 94 8d 17 93 06 94 06 29 ee .U............). 0190 d6 2e 11 db 2f 21 b7 ec 5c 12 79 61 70 ff 6a 00 ..../!..\.yap.j. 01a0 f1 3f 06 bf 3a a4 9e 39 e0 ca 87 52 96 80 e1 09 .?..:..9...R.... 01b0 8f 81 52 92 e9 f6 de 23 8f 8e 19 f9 bf 98 58 2f ..R....#......X/ 01c0 78 1c 71 9c 82 ee f6 e7 61 ac dc 99 11 79 e2 9c x.q.....a....y.. 01d0 b9 8a 1b c8 2e 91 0a 05 c5 76 e3 fa b9 01 a9 55 .........v.....U 01e0 ca e8 3b ee ef 5b 6d 3e de 4c 39 31 13 33 3e 8f ..;..[m>.L91.3>. 01f0 29 39 4a e8 15 36 e8 9a a3 b1 8f 95 76 8d f8 7b )9J..6......v..{ 0200 2c 7e 1b 75 3d d2 ca 1c d9 97 ab 87 5e c8 3e 5f ,~.u=.......^.>_ 0210 f3 1b 06 09 42 6e 79 d7 4c 00 e2 39 c5 63 2d f4 ....Bny.L..9.c-. 0220 e4 ab 24 a7 92 39 0a a3 84 72 85 40 83 48 52 d8 [email protected]. 0230 c3 55 58 46 b3 dc c5 6e 93 63 ed e6 13 35 5b 90 .UXF...n.c...5[. 0240 9b c0 eb 15 26 0f ad af 9c d3 25 36 45 2b 72 81 ....&.....%6E+r. 0250 42 3d a9 33 ff 96 a3 0b b1 dc f2 89 bf fb bd 93 B=.3............ 0260 de 15 bd 89 33 be 48 1b 43 d1 21 47 b9 ca 13 67 ....3.H.C.!G...g 0270 9e cf 84 d3 41 39 f2 90 6a c9 1a f8 b6 46 83 94 ....A9..j....F.. 0280 d9 90 7f 38 70 0c 40 ab 64 6c e5 15 97 5d 72 68 [email protected]...]rh 0290 61 04 37 c6 1d 4e 21 3e 58 09 7b c5 5d 54 43 23 a.7..N!>X.{.]TC# 02a0 a8 71 d6 ca 05 8e d5 5b ee 2d d1 11 c6 79 dd fe .q.....[.-...y.. 02b0 f9 32 99 4e 0c 8c d0 b5 af 18 00 57 dd b2 7f 41 .2.N.......W...A 02c0 e6 2c 56 c3 9c 0d bc 79 39 d7 ef f3 80 5d 09 73 .,V....y9....].s 02d0 47 20 f6 2f cf 50 30 8c 63 6f 50 d0 0b 16 ab e4 G ./.P0.coP..... 02e0 2b 4b 43 53 95 70 bc c9 a2 e9 a4 77 4a 0b 76 72 +KCS.p.....wJ.vr 02f0 4e dc 69 e4 2b 44 f0 fc 5f 88 e2 74 ec 26 3e db N.i.+D.._..t.&>. 0300 15 35 52 e1 a5 2e 9c c1 88 df ee 3e f5 44 41 dc .5R........>.DA. 0310 af 93 a3 2e 52 c7 d6 d4 3e b0 ce 45 ba f8 34 c8 ....R...>..E..4. 0320 6b be 89 bc 49 fa 14 5d 51 a3 49 9e 65 e7 12 bc k...I..]Q.I.e... 0330 1b f0 02 8a d9 c3 30 cb f6 5b af 23 98 dd e3 08 ......0..[.#.... 0340 1b 5f 5c 52 26 1b ed 65 9d a2 89 72 65 fd 26 7d ._\R&..e...re.&} 0350 05 8f ca a2 72 50 0a 2b 19 cc 5c cf 41 38 d6 ef ....rP.+..\.A8.. 0360 eb cc 44 75 9b 9e 34 69 33 45 aa 0f a5 03 01 07 ..Du..4i3E...... 0370 d2 e8 05 8f 71 2c ea d4 a8 a8 ac 13 bc 55 18 aa ....q,.......U.. 0380 8a d9 08 a6 03 9a 83 8e 8f ce cd 34 48 ba 9a 65 ...........4H..e 0390 ba 97 77 2e c1 12 d1 4a 2e ad 8c 8d 79 ae 8c aa ..w....J....y... 03a0 9b 18 fa 63 32 a9 24 40 f5 f7 19 27 9a 10 f5 92 ...c2.$@...'.... 03b0 92 64 5f 32 74 f1 df 35 b0 b5 26 d7 44 fe e0 7c .d_2t..5..&.D..| 03c0 cf 56 75 72 e1 60 2c 71 1d e5 0d a1 73 3b f8 8a .Vur.`,q....s;.. 03d0 db 66 93 d2 23 37 c0 86 03 61 71 25 a2 6b bc ce .f..#7...aq%.k.. 03e0 39 bf 29 dc 10 35 cd 1a a5 ea 18 e9 2c 89 2a 71 9.)..5......,.*q 03f0 a2 df 01 c4 ae 4d d1 08 0d db ec 94 58 3a 80 c8 .....M......X:.. 0400 bc 93 72 37 d0 6f c6 25 fc 83 03 f8 07 9a 02 a5 ..r7.o.%........ 0410 4a d2 a4 19 78 f2 43 26 76 0c f4 78 9b 00 06 9d J...x.C&v..x.... 0420 87 12 d8 8c d4 b9 39 28 5c a4 4f e1 a4 f2 41 7f ......9(\.O...A. 0430 f4 24 08 39 47 e7 cc fd 57 20 ff 3f 17 ff 49 4a .$.9G...W .?..IJ 0440 1a 76 fa e6 eb f1 ed 29 fb 87 10 a1 e0 6b 72 37 .v.....).....kr7 0450 7f 5b 5d 44 25 49 10 ce aa 3a dc 44 a9 9a 89 87 .[]D%I...:.D.... 0460 03 f5 e5 33 ed 85 60 b8 06 1b f2 41 87 12 81 40 ...3..`....A...@ 0470 21 66 0e c9 6d a0 97 2e 0c f1 d0 11 ee cc b3 17 !f..m........... 0480 42 65 a7 00 f0 07 50 7e 46 21 8a e5 ec 04 37 63 Be....P~F!....7c 0490 80 c1 a5 c6 50 bc 99 cd 96 48 d8 39 78 d9 ca f5 ....P....H.9x... 04a0 6a d4 12 1c 94 a1 f0 f8 66 ec 6e 1e 24 9f 4d bc j.......f.n.$.M. 04b0 3d b9 91 d5 7d 5b 13 fa a3 40 12 60 80 b6 ca 40 =...}[...@.`...@ 04c0 32 5c 77 d1 91 d5 8e a1 3c e5 8c bc f3 b3 be 93 2\w.....<....... 04d0 2e 1b 17 a3 b5 dd bf 46 a6 dd 8c 1a 2a f7 52 49 .......F....*.RI 04e0 c3 0c c1 23 37 c0 28 34 15 aa 17 5e 9d 2b 69 fd ...#7.(4...^.+i. 04f0 60 8c 63 c5 47 90 0b 70 43 8d cf b3 a6 2e 97 47 `.c.G..pC......G 0500 f7 97 40 af 43 d3 d5 f1 a3 39 86 46 77 d0 c6 94 [email protected]... 0510 2d 6e b3 65 ce 3f fb cc e8 b8 45 fd 7d da e7 cb -n.e.?....E.}... 0520 ee d2 45 74 de 7a 15 14 b6 a8 da 71 84 80 f8 ff ..Et.z.....q.... 0530 7a 6e 80 e9 e1 5c a8 2d f7 06 df f3 b5 7f 33 fd zn...\.-......3. 0540 04 b6 be ab 69 6a aa 2d 65 76 c1 9c a2 35 93 74 ....ij.-ev...5.t 0550 ce dd ee 99 7d 4e 09 3e f2 44 9c 77 9b 18 fb e5 ....}N.>.D.w.... 0560 50 86 7f 62 6d c6 a3 65 c8 2b 3b ed 41 9f f4 20 P..bm..e.+;.A.. 0570 e0 de 22 ea 2d 9f 75 f5 c4 ab 93 8f 37 10 45 35 ..".-.u.....7.E5 0580 8a 44 47 26 fb b6 67 52 c0 6f de 14 c7 0f d3 45 .DG&..gR.o.....E 0590 0f 03 0b de d3 7e 76 74 7d dd 11 ba d7 3a 0d 15 .....~vt}....:.. 05a0 7d 2f ff f8 79 a8 f0 29 }/..y..) No. Time Source Destination Protocol Length Info 20470 243.628280 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=233077 Ack=3849 Win=1002 Len=1448 TSval=596154 TSecr=729900 Frame 20470: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 233077, Ack: 3849, Len: 1448 Data (1448 bytes) 0000 48 aa 90 a7 3b 38 4e 7a 5b 03 0e 05 b0 5f f7 6e H...;8Nz[...._.n 0010 a5 c9 ea 04 8b 08 1d e5 8d 64 ff 2f 91 16 03 b2 .........d./.... 0020 e8 42 81 41 9f 43 f0 47 a1 ef 3f 98 77 e5 96 69 .B.A.C.G..?.w..i 0030 ce d1 7d 67 8e 73 33 fd 19 d3 89 13 e6 a4 a3 17 ..}g.s3......... 0040 3d 53 5d 82 8b 4f 93 3a 6d 21 4e 26 51 2d c9 f4 =S]..O.:m!N&Q-.. 0050 5a e7 43 23 3e 57 dd d0 d8 d5 de 66 ec 22 3b df Z.C#>W.....f.";. 0060 1a fd fa 2f 59 bf 5e 37 03 82 79 66 9c ad 93 bb .../Y.^7..yf.... 0070 91 fa b6 1d 1f 95 69 aa 39 48 ce 38 5d 46 34 62 ......i.9H.8]F4b 0080 a7 17 ac ce 03 94 21 2c 22 15 2a 5a 07 fe c1 f9 ......!,".*Z.... 0090 ef 26 eb aa 14 79 c1 87 a3 df b9 22 fc ed 16 88 .&...y.....".... 00a0 3f be 79 e0 94 a9 4c 22 46 a4 44 d5 04 f2 a2 53 ?.y...L"F.D....S 00b0 77 fd 44 4c f1 c8 b1 5f 47 ed 19 26 82 2e 65 e5 w.DL..._G..&..e. 00c0 17 d5 9e db 29 d5 8a ca 71 45 ca 47 50 0b f4 ea ....)...qE.GP... 00d0 c9 b0 33 fe 9d 10 72 8e 24 34 ed 96 39 04 dc a1 ..3...r.$4..9... 00e0 6b f1 f6 e5 ae d8 c4 dc 13 b5 6e d7 a6 d2 0e 50 k.........n....P 00f0 5b 02 fb c6 78 ca 08 09 8a 77 09 34 90 8d b3 76 [...x....w.4...v 0100 1f cd f3 f5 5a 8c 2b 92 00 96 9b d0 00 66 3f cb ....Z.+......f?. 0110 80 10 40 60 69 19 46 7e 94 e3 c9 e7 68 8d 16 24 ..@`i.F~....h..$ 0120 3b 20 f3 0a d8 c3 c0 ba 74 9a 16 95 1a 4d f9 be ; ......t....M.. 0130 d9 ad 6a cb 19 e0 cf 97 ff 89 50 08 eb 6f ab a7 ..j.......P..o.. 0140 9c 10 eb 54 e7 a4 ea 0a 40 1a f3 f2 22 c1 14 ab ...T....@..."... 0150 30 70 fc 1f 7e 4e d1 14 c1 a9 31 d1 fb 65 8d 4e 0p..~N....1..e.N 0160 d3 af a0 8e 12 07 ef d5 40 69 33 0d d8 3d c3 8d ........@i3..=.. 0170 82 5b 4e d6 ef 07 b7 24 00 cd a9 b9 28 fa 82 98 .[N....$....(... 0180 34 2f 74 ab e9 45 5b 24 b7 59 b4 7a cc 0d 1d 88 4/t..E[$.Y.z.... 0190 a9 cf 5d 44 43 bf e8 60 11 a0 40 46 2e 21 70 8d ..]DC..`..@F.!p. 01a0 a4 48 59 f3 3b dd 6d 4f 81 17 e4 06 56 91 c3 8e .HY.;.mO....V... 01b0 b3 00 7f 47 87 65 46 b3 6a ec 82 ec ae 5c af 12 ...G.eF.j....\.. 01c0 57 c4 b2 79 4e b6 b7 eb 06 38 ab 4f 95 d6 b8 99 W..yN....8.O.... 01d0 b4 20 18 c3 e9 2e d1 fd e9 5f 26 1e 8b ad 46 59 . ......._&...FY 01e0 a4 65 a3 2d 4c 5a 7a 3f 24 8d 36 57 38 f8 46 e6 .e.-LZz?$.6W8.F. 01f0 fb b6 f1 32 17 02 fc ee 85 31 23 77 01 24 70 1b ...2.....1#w.$p. 0200 d4 6e 00 9d 6f 59 7c 16 e7 10 cf 73 75 f7 39 b1 .n..oY|....su.9. 0210 8d 44 3f 31 08 21 5c f3 c1 41 e9 fb e5 c7 79 5f .D?1.!\..A....y_ 0220 19 65 1d 87 b7 c1 a8 b0 85 00 59 94 44 72 51 2a .e........Y.DrQ* 0230 26 a7 e4 c5 08 db f6 46 11 e5 2c 8f d8 e1 71 30 &......F..,...q0 0240 e6 3c 8a bb 75 0e a5 1c 71 0a 3f 93 10 bd 76 65 .<..u...q.?...ve 0250 37 38 16 7d ce 9d 55 b3 b7 f4 c1 eb d8 a6 ae 2d 78.}..U........- 0260 80 fd 61 b4 ec eb df 33 36 71 56 77 df bf e8 f2 ..a....36qVw.... 0270 63 70 be f3 0b 1d 5a a0 38 21 6b a4 45 a8 df 51 cp....Z.8!k.E..Q 0280 a9 32 a4 1d 71 1d 7a c4 9b 2d 62 63 81 a3 52 48 .2..q.z..-bc..RH 0290 f7 05 26 b3 04 b6 30 5c 7c 45 7a 36 b8 6c 0f 22 ..&...0\|Ez6.l." 02a0 3a 07 a3 b0 ab 9d d5 a6 f1 93 57 ce dc 2a 80 3c :.........W..*.< 02b0 89 d2 06 cd 49 77 19 62 5f 3e 54 4f 8e 1a fe d4 ....Iw.b_>TO.... 02c0 36 76 4c a1 b6 48 72 ad b3 5d 09 9f ef df 61 a4 6vL..Hr..]....a. 02d0 76 61 9c 2a b4 10 94 a0 b5 11 44 d5 5e bd 65 2c va.*......D.^.e, 02e0 21 f5 1c 2d 06 a9 0b 94 6f 85 3f 8d db 11 e5 cd !..-....o.?..... 02f0 d9 1e f1 b7 c0 02 87 10 fc 9d 9b 9d 33 ba d8 f0 ............3... 0300 b2 3f 1b f6 65 3c 41 72 39 e0 2e dc c4 da 7b 77 .?..e<Ar9.....{w 0310 5f f8 8b 31 24 b5 e6 0d 50 bd db a2 f8 73 3a 12 _..1$...P....s:. 0320 e1 4c 7a e0 cb 72 a5 ab 48 44 02 b3 37 58 a6 96 .Lz..r..HD..7X.. 0330 bd a1 0c 25 c1 5e e0 ec 5c 80 cf 1d c2 59 d2 d3 ...%.^..\....Y.. 0340 b4 25 07 f6 87 d8 af 7a 22 ec cd 9f c7 76 2f eb .%.....z"....v/. 0350 04 f7 d2 0a 52 1d 70 18 61 4c a1 48 17 c2 7d a6 ....R.p.aL.H..}. 0360 7c 56 cc 9a 4f 81 d2 ac 7e 83 26 92 50 27 82 23 |V..O...~.&.P'.# 0370 9f dd cc 2c 94 b4 35 f7 18 b9 5e ab 9a cc bd 96 ...,..5...^..... 0380 2a f9 42 60 40 57 7a e1 aa da 30 1f 49 1a 14 20 *.B`@Wz...0.I.. 0390 bc 35 13 8f 27 1e 54 23 c8 9f 4b a2 ac 9f 83 d8 .5..'.T#..K..... 03a0 e1 69 8c 4e 56 ff 76 c9 08 8a b5 61 a3 2c e1 5e .i.NV.v....a.,.^ 03b0 b4 23 e0 ef 85 14 3d 2e 22 ad be 7f af a6 4c d7 .#....=.".....L. 03c0 6c 9f da d3 c4 ed 7c 72 6d c7 37 87 0e 2f cd 27 l.....|rm.7../.' 03d0 c8 44 98 96 18 2d c0 6f fd c1 af 55 13 f8 5f fb .D...-.o...U.._. 03e0 4b 23 31 0e 94 6c 27 db 3a 23 4b 59 e8 ca 87 4c K#1..l'.:#KY...L 03f0 5e e1 93 11 a9 5a 69 38 02 eb 2d 31 c9 c0 a5 ea ^....Zi8..-1.... 0400 9f ca ee e3 02 71 ca 25 4d 03 57 e8 33 62 1b 4f .....q.%M.W.3b.O 0410 f0 f1 bb dc 08 1a e6 60 46 90 b6 f8 c4 a0 0b 3a .......`F......: 0420 ac 40 8f 1d e7 94 d4 a9 ab 37 22 de 41 b4 75 19 [email protected]".A.u. 0430 cb e4 73 31 ed 16 2e 44 c0 b1 36 ad 77 89 49 b7 ..s1...D..6.w.I. 0440 5a 12 88 b8 a2 e5 17 0a 9d cc 34 2e cd d5 73 b9 Z.........4...s. 0450 30 48 0d 5c 9b e4 a3 5b fb 4b c2 59 1b fe 42 70 0H.\...[.K.Y..Bp 0460 27 21 09 88 a2 ec 79 d9 81 5c fa 05 36 9e 33 7a '!....y..\..6.3z 0470 c1 d7 3d 80 f4 05 18 3c fd 44 21 05 85 1f cc e9 ..=....<.D!..... 0480 64 d3 04 57 e5 2a 35 b8 7d a5 90 da d4 db 70 dc d..W.*5.}.....p. 0490 59 b9 d2 f0 ed d3 d5 91 f3 9f 9c 54 f5 a0 3e 5c Y..........T..>\ 04a0 c8 10 7e d6 86 49 dd f4 a6 1b 9e 44 f6 56 4e aa ..~..I.....D.VN. 04b0 5c cc 05 eb 19 d6 8d bd 64 c6 1b ea 2b 5e 62 76 \.......d...+^bv 04c0 f7 66 a0 f6 0d 88 75 60 79 b5 97 17 36 ed 5d f4 .f....u`y...6.]. 04d0 7d 91 ed ee 5a e7 e7 5a b5 5c ca 29 8e 2f 08 c3 }...Z..Z.\.)./.. 04e0 93 c3 fb 20 86 63 9c e6 d1 b6 d8 19 d9 66 20 7f ... .c.......f . 04f0 e8 fd ad 45 f4 bd b7 3e 8c c7 9b 1a 2a 48 f2 da ...E...>....*H.. 0500 60 33 86 0d 4a e2 a4 b9 92 5e 4c 70 67 a4 62 52 `3..J....^Lpg.bR 0510 b2 32 f2 e0 2c 8c 1e b2 79 75 c2 c8 4e 00 75 3e .2..,...yu..N.u> 0520 af 0b b3 b6 81 01 07 64 36 eb 60 4a 6f a2 f8 06 .......d6.`Jo... 0530 3b 0b f5 13 93 b9 45 19 85 e7 e6 4b 75 1d 5d 0e ;.....E....Ku.]. 0540 3a 6d f9 ff 94 96 3d 90 86 c8 ed 65 8a b8 73 f9 :m....=....e..s. 0550 66 8c 42 34 35 42 76 6e 5b e9 67 b3 13 ab 05 1b f.B45Bvn[.g..... 0560 8c 5b 33 46 27 a5 86 d7 1d f0 1c 9b 79 08 15 62 .[3F'.......y..b 0570 d8 f8 d9 c0 76 cc d2 ad 1b 3a 8f 2d e3 a4 a5 4e ....v....:.-...N 0580 0f 34 9b b4 21 47 16 d0 e1 34 a3 17 71 87 97 42 .4..!G...4..q..B 0590 79 96 94 32 57 73 0c 43 15 b4 05 05 de 0c 20 49 y..2Ws.C...... I 05a0 9b 95 72 35 f5 a4 0e ae ..r5.... No. Time Source Destination Protocol Length Info 20471 243.628366 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:48:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1195 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 20471: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1195 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 20472 243.628430 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=3849 Ack=233077 Win=65535 Len=0 TSval=729919 TSecr=596154 Frame 20472: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3849, Ack: 233077, Len: 0 No. Time Source Destination Protocol Length Info 20473 243.628488 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=3849 Ack=234525 Win=65535 Len=0 TSval=729919 TSecr=596154 Frame 20473: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3849, Ack: 234525, Len: 0 No. Time Source Destination Protocol Length Info 20474 243.628594 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=234525 Ack=3849 Win=1002 Len=1448 TSval=596154 TSecr=729919 Frame 20474: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 234525, Ack: 3849, Len: 1448 Data (1448 bytes) 0000 a2 03 e2 ee ac fe 22 4c 53 c4 df 86 a2 92 9f ca ......"LS....... 0010 69 0c 12 f2 f2 81 68 99 f3 4d 69 67 dc 82 04 b8 i.....h..Mig.... 0020 b4 8e 88 1a 12 0e 5e b4 4a e7 3f a8 fb b7 21 74 ......^.J.?...!t 0030 7d 8b e3 24 79 43 95 92 df c0 c2 f4 65 82 28 93 }..$yC......e.(. 0040 1e f0 5d 71 01 29 63 d6 92 2f d9 51 2e 6f 76 a3 ..]q.)c../.Q.ov. 0050 f8 68 bc ed 3b 49 74 1d d9 22 74 34 fc 46 15 3a .h..;It.."t4.F.: 0060 5b 5c a6 22 d7 96 ff ce 2f c4 b8 31 97 2c d8 a7 [\."..../..1.,.. 0070 58 0f 8b f9 6a 55 16 5b 76 75 90 d7 72 7d b7 f1 X...jU.[vu..r}.. 0080 98 d3 17 81 00 c3 15 33 71 7b 4c 5e ae 94 35 c2 .......3q{L^..5. 0090 d7 33 38 c8 33 ea f5 a2 6a 92 6b 7a 93 9b a4 94 .38.3...j.kz.... 00a0 05 86 11 5d f4 6d 6a 5a 05 0d 5a 6e 98 9d f5 b0 ...].mjZ..Zn.... 00b0 a6 c2 ce ab 12 6e 69 42 43 38 4f 49 a8 f3 d7 6e .....niBC8OI...n 00c0 77 6c 9e 93 51 0b 41 c6 33 97 6a d9 fc dd 25 3f wl..Q.A.3.j...%? 00d0 96 3b ed 76 96 b4 86 40 93 d4 06 9c 9e e7 f2 e7 .;.v...@........ 00e0 0e a7 59 8c e5 3b 7f 7d c8 a0 79 70 e2 85 67 d6 ..Y..;.}..yp..g. 00f0 0b 30 0b 57 59 30 c7 fd 0f c9 53 e7 ce c9 aa 0d .0.WY0....S..... 0100 18 a5 c9 ac 86 d9 62 bd f0 c6 ee b2 92 2e 98 25 ......b........% 0110 ed b3 dd 28 e6 eb 3a 4c 0b c9 65 2a cc 1f c7 34 ...(..:L..e*...4 0120 b6 4a 74 05 b1 a9 3c 11 d4 85 62 cf c5 f3 4f c7 .Jt...<...b...O. 0130 c7 2f 77 f7 92 5d 57 af cb d7 95 d6 59 eb a4 5b ./w..]W.....Y..[ 0140 86 4d 99 07 87 a7 2f 50 ee 7c 13 18 4e 8b b4 a0 .M..../P.|..N... 0150 ea 39 61 b0 0e 9c 33 75 a7 0b a4 54 bf d1 5f 71 .9a...3u...T.._q 0160 28 e8 7f 1f 94 cf a8 34 be ee d8 ab 29 1e 41 d7 (......4....).A. 0170 25 2c 8f 0f 66 bb df f8 ff cf 2f 4c 6f 36 0e 42 %,..f...../Lo6.B 0180 2e e0 ae 0f 16 ac 1c a8 b2 96 88 c1 4b 78 ec 85 ............Kx.. 0190 55 5e 7b 6d d9 d8 e2 5e 02 77 00 11 78 1a 44 9b U^{m...^.w..x.D. 01a0 e5 f7 52 5b 51 ca cc f0 49 0e a6 8a 90 17 be 2c ..R[Q...I......, 01b0 db 43 42 0c dc ac 43 5a 90 f4 09 e9 eb 0b 6c 0e .CB...CZ......l. 01c0 9a 68 09 63 14 6c af ac 09 7f 37 6f 0a 62 09 cb .h.c.l....7o.b.. 01d0 14 90 79 49 c5 44 cc 55 13 31 26 32 b8 7a 19 9d ..yI.D.U.1&2.z.. 01e0 f9 4f 6c f0 17 c2 d6 69 1a 79 c2 9b 7c 65 ba d1 .Ol....i.y..|e.. 01f0 8b 22 12 fe 94 14 f2 0a 39 71 cd 49 1e d3 56 ea ."......9q.I..V. 0200 44 1f 11 ee 15 a8 db 4e bf 84 f7 91 31 d0 c9 66 D......N....1..f 0210 53 1c f0 b3 18 ce 7e 1e e6 13 6b 95 fb 2e cc 8f S.....~...k..... 0220 ea 7b 3b b8 11 f6 e9 25 81 cf 92 4e f6 0e ec 25 .{;....%...N...% 0230 15 65 45 ce a7 77 4c 43 ca ad f1 67 ab a7 bd d6 .eE..wLC...g.... 0240 29 14 9a cb 72 e5 57 44 dc 8b e1 2c 8a 96 e8 9e )...r.WD...,.... 0250 23 fd a9 f0 a5 51 2f 92 17 e8 dc 3e 72 b0 a9 4f #....Q/....>r..O 0260 8b 6c 97 f8 08 b7 ee f6 90 b3 54 5a 72 61 9b b6 .l........TZra.. 0270 49 d4 00 8d f5 8b 26 fb 11 c7 63 cd 94 77 91 f2 I.....&...c..w.. 0280 e0 d6 26 68 a7 4b 00 c2 3e 2c eb 10 cc 26 64 9d ..&h.K..>,...&d. 0290 1b 6c be bc 29 1b 09 9c a7 38 65 9c a6 a8 e2 5f .l..)....8e...._ 02a0 2c 62 bb 70 29 92 38 92 76 1e 7a 77 c8 ef 21 9d ,b.p).8.v.zw..!. 02b0 ae 4b a4 af d6 05 ba 92 6d b0 71 74 ba ca 4b f0 .K......m.qt..K. 02c0 2b d9 d5 8a e9 9e e3 40 83 d7 e9 0b 66 56 7d b5 [email protected]}. 02d0 fa b8 68 dd b3 23 e9 f7 47 ac 1b 24 88 9e ee 1c ..h..#..G..$.... 02e0 1f 7f 95 26 c6 e7 71 06 56 55 38 cf c7 c7 e1 cc ...&..q.VU8..... 02f0 ae 3b 77 8c 76 b5 6f 01 3e b1 96 e0 8f 98 43 f5 .;w.v.o.>.....C. 0300 51 e4 dd 7e 4f 96 cf 5a 6e 88 48 7e 05 5d 02 43 Q..~O..Zn.H~.].C 0310 81 e9 4b c7 47 53 66 20 3c 28 a8 a8 78 e6 31 97 ..K.GSf <(..x.1. 0320 26 14 b7 1a 69 fd b8 96 59 10 2f 9f 99 c1 3e 8a &...i...Y./...>. 0330 ab 13 ef 2f e0 d1 3e 2f 14 36 ae 4a f7 96 2c ab .../..>/.6.J..,. 0340 55 e4 a5 d5 97 a9 a3 6c 95 9a 0e 28 aa 1f 86 a2 U......l...(.... 0350 4c 74 d1 70 60 ee b4 7e 20 69 7f e3 fb cc 9f 5f Lt.p`..~ i....._ 0360 de e8 71 a9 a8 e8 3e 22 8c 10 b1 2e cc c7 d4 b9 ..q...>"........ 0370 92 c0 1f 35 97 6b 7e d4 3f a2 3c cd 0f 8a c0 c2 ...5.k~.?.<..... 0380 37 01 b2 ea 4b 69 36 9e 28 30 aa 79 6c 68 54 f6 7...Ki6.(0.ylhT. 0390 a1 63 36 d6 16 78 37 58 1b 33 80 d4 db 6f b8 23 .c6..x7X.3...o.# 03a0 cd 2c 85 ca 15 cb f2 c3 d9 40 25 ed ac 56 8f aa .,.......@%..V.. 03b0 c8 87 a0 79 6d 99 8f a2 b4 a4 7c ac cd 42 aa bf ...ym.....|..B.. 03c0 09 37 0d 9d f0 7c 3d 25 ce 05 1b ea 75 93 97 db .7...|=%....u... 03d0 75 df e0 e2 4d c1 f8 1b fe bd e5 04 d9 5d e3 8e u...M........].. 03e0 7d 97 45 3d 5e d2 be 02 d1 36 f0 e2 33 a4 ea 7f }.E=^....6..3... 03f0 5e 90 79 32 ac cb 6b 9c 3f 3c 06 89 b0 5b d8 17 ^.y2..k.?<...[.. 0400 66 94 f4 f6 a2 eb 88 6e 77 53 6d 40 bb 8f 4a 47 f......nwSm@xxxx 0410 32 67 d6 b0 7f a6 b8 f4 b9 19 9a be f5 29 b6 cb 2g...........).. 0420 68 84 d2 9e 65 a4 90 d4 71 21 6a 35 2c 41 0f 24 h...e...q!j5,A.$ 0430 0c 06 53 d6 cd fa 5e 51 ce 3e a8 4a fc ed 61 5c ..S...^Q.>.J..a\ 0440 9e 64 bf 46 27 f4 e4 12 c0 e8 ac 51 e2 3f f5 a2 .d.F'......Q.?.. 0450 f8 c7 a0 71 38 7d 0b 56 f3 d7 80 f3 7d b4 02 89 ...q8}.V....}... 0460 0a 6d 84 d3 67 ef c3 4b e5 23 db d9 95 51 ab b1 .m..g..K.#...Q.. 0470 37 40 26 65 6b a2 4a 53 c8 37 bc 4d c8 7d a0 62 7@&ek.JS.7.M.}.b 0480 16 35 ac 9b 64 1a 8d 41 d6 10 6a fa 58 06 7b 8c .5..d..A..j.X.{. 0490 81 5f f5 58 fa e0 59 a1 bc fd bf 94 d9 e0 35 d1 ._.X..Y.......5. 04a0 3d 85 22 c9 ac 05 69 16 79 9b a5 29 42 56 36 99 =."...i.y..)BV6. 04b0 97 6a f8 06 d7 f8 4d 4d d9 fe f7 db 7a 34 ea da .j....MM....z4.. 04c0 90 f7 89 6a 16 ec 0d f1 d0 91 0d 95 97 0a 40 18 ...j..........@. 04d0 b8 9f ab 52 5d 6a a6 21 db ea f6 29 c7 f1 30 5d ...R]j.!...)..0] 04e0 4a 31 cd eb 6b 8a 82 13 05 c9 63 1e 66 21 1b 85 J1..k.....c.f!.. 04f0 64 2e 54 c3 fd 76 f3 69 04 1b 03 ec 35 52 a0 fc d.T..v.i....5R.. 0500 b5 3f e3 c9 da 46 3f 60 ae 08 ad 43 91 81 1e a0 .?...F?`...C.... 0510 63 b9 3b c7 75 8a 0e ab 80 6d ba a7 84 10 a0 a5 c.;.u....m...... 0520 3e bd 25 94 da b5 8a b7 6e 03 b3 32 bf 45 92 a5 >.%.....n..2.E.. 0530 5e 8f b1 5a ef b7 72 14 4d 87 59 ce bc 3b 0b c7 ^..Z..r.M.Y..;.. 0540 98 fb 14 dc 58 64 20 d8 8e 2c 6d 58 a1 d7 04 a9 ....Xd ..,mX.... 0550 f1 cc c8 63 6c 36 24 91 cd de 33 22 83 85 07 7f ...cl6$...3".... 0560 ba 01 3a 9d 92 ff e6 58 e7 e3 a0 09 fe 60 c4 57 ..:....X.....`.W 0570 66 81 4f 89 46 45 4d 1e 36 cf 07 66 f1 57 62 36 f.O.FEM.6..f.Wb6 0580 ac 14 47 b6 34 5c e5 fc b8 7a cb 82 d9 0c e3 e8 ..G.4\...z...... 0590 52 e4 4a 1d 5c b3 2b 45 2c 11 74 f3 73 91 fc 4c R.J.\.+E,.t.s..L 05a0 4f cd 33 d0 59 67 31 9c O.3.Yg1. No. Time Source Destination Protocol Length Info 20475 243.628702 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=235973 Ack=3849 Win=1002 Len=1448 TSval=596154 TSecr=729919 Frame 20475: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 235973, Ack: 3849, Len: 1448 Data (1448 bytes) 0000 6e 0b 90 0b cb 7f 67 33 2b 6d 16 bc b0 a9 5c 5a n.....g3+m....\Z 0010 db a6 7c 3b 29 f8 4c d7 91 c3 5f bc ca f5 62 7d ..|;).L..._...b} 0020 11 4f f8 2c 72 7b 93 06 d0 de db d2 12 f5 32 4a .O.,r{........2J 0030 2f a2 77 0a ef 56 97 dc 6a f4 78 d6 8e 6d f8 71 /.w..V..j.x..m.q 0040 bd 3d c5 aa 85 fb 70 70 7d 1a ef d1 8e 8c 2f b8 .=....pp}...../. 0050 53 0f 5e 66 fe b1 fe f2 b8 58 55 4c 00 9e 70 e9 S.^f.....XUL..p. 0060 a0 d4 9b db b1 6b fd e8 b4 3a fe 4c 81 66 86 1c .....k...:.L.f.. 0070 c0 65 7a 57 71 ef ab 7d 19 11 07 40 ff ed 18 20 .ezWq..}...@... 0080 2b 11 d1 cb cf 3d ad cb 15 be 0b de 86 05 e4 de +....=.......... 0090 a8 ef 8d 23 b3 9d 53 49 9f ff a5 93 81 ec 2b 90 ...#..SI......+. 00a0 88 53 1c 0d 6a 17 ac a7 e4 cb 75 9f 1e 71 7a 66 .S..j.....u..qzf 00b0 1c ee 5d 08 74 9a 3a 8f 96 1b 6f 29 d5 81 ad 03 ..].t.:...o).... 00c0 df af e6 7b 50 a3 d3 e9 0c 11 e5 2a 4e b0 08 4d ...{P......*N..M 00d0 1d 0c ba 8c 14 d4 96 cf a2 7b cd 2f 82 b5 2f f5 .........{./../. 00e0 46 3c f7 a9 7a 26 37 04 bc 9d 54 d8 1d 02 75 78 F<..z&7...T...ux 00f0 04 2a cc 87 12 02 08 0c 16 52 96 24 34 cf 63 5a .*.......R.$4.cZ 0100 09 c4 6a 96 0e ef 5d f3 7e 71 81 4f 58 52 23 95 ..j...].~q.OXR#. 0110 de 2e 57 a7 20 7d 79 d7 f7 df 1b ca 11 aa 3a c8 ..W. }y.......:. 0120 45 94 fa 51 4c 3c c3 98 2b 09 be a4 0d 1f d8 b1 E..QL<..+....... 0130 a1 4a 0c ad e4 6e 0d 77 22 d8 46 14 11 5f a8 5b .J...n.w".F.._.[ 0140 8a 9e d7 ab c4 ad 5b d9 96 12 03 5a 15 da bd 12 ......[....Z.... 0150 0b 4e 25 7f 6d b4 c2 d6 c1 5e 37 d8 3e 98 f9 22 .N%.m....^7.>.." 0160 3e df 90 f4 39 7e cd 30 cc 0f a7 64 5d 18 1d fc >...9~.0...d]... 0170 72 6e cc d6 b7 2d 2f 65 53 67 84 6d f8 4d 3b 43 rn...-/eSg.m.M;C 0180 45 93 5e f4 c8 b5 9b 67 39 c3 db 14 04 3b 23 2d E.^....g9....;#- 0190 e7 44 d3 66 89 d8 ac 47 23 54 ee 2a 63 54 3c cb .D.f...G#T.*cT<. 01a0 30 76 3c 31 22 d4 df 3a 3b 55 29 c2 0a 56 45 73 0v<1"..:;U)..VEs 01b0 3b 46 30 ef cb a2 bb b1 a6 5e c5 9f 58 dc c6 71 ;F0......^..X..q 01c0 d1 99 a5 71 f2 04 ee 2e 26 00 62 88 62 d9 3a de ...q....&.b.b.:. 01d0 ea 65 d1 b3 fd b2 18 7b bb 9a 0c 69 06 e0 15 f5 .e.....{...i.... 01e0 60 51 93 04 ac 5a fa e7 fe 17 30 34 ce 42 6b 85 `Q...Z....04.Bk. 01f0 52 69 af 47 1b c7 e8 1a f9 92 fd 7d 00 23 92 fa Ri.G.......}.#.. 0200 f5 e0 ec 61 ec a3 d1 67 47 15 3e ed a1 99 f7 37 ...a...gG.>....7 0210 0a ed 6a af 67 42 de 3b 8a fc 33 05 18 41 82 f0 ..j.gB.;..3..A.. 0220 47 6a af 17 55 9e 80 e3 3b f5 fe 5f 2f 48 97 c0 Gj..U...;.._/H.. 0230 a4 84 f6 73 66 fd 74 58 9c ba 1f 3f f5 02 5d e3 ...sf.tX...?..]. 0240 e8 e2 19 eb 10 81 61 0a fd 6b 58 9a 93 f2 db 58 ......a..kX....X 0250 82 75 40 92 3d 4e 15 e0 59 be ec e2 61 c2 db cf .u@.=N..Y...a... 0260 8d fa e8 ee cc b7 14 d6 60 69 67 60 92 63 13 97 ........`ig`.c.. 0270 76 d2 d6 e8 ec 25 94 f2 a7 95 3a e2 55 bb dd 6e v....%....:.U..n 0280 38 42 76 03 9e 9b e0 4e ce 82 ae 1f cf 8f 73 da 8Bv....N......s. 0290 b6 b5 a3 ba 7e c5 b7 13 90 5f b2 e4 87 a4 48 73 ....~...._....Hs 02a0 57 f6 8c 73 ef 1d 92 8e cd ec 62 8b 8a 6e ea bd W..s......b..n.. 02b0 08 f8 72 fc 7f 3c 27 2c 00 0f 14 9a 44 63 58 5b ..r..<',....DcX[ 02c0 67 c2 ff cf 30 10 6a eb f8 fd d9 9b e7 c6 1d ee g...0.j......... 02d0 82 c1 2e 4c c5 91 9c e6 f7 72 c7 eb f1 26 82 a5 ...L.....r...&.. 02e0 99 f9 87 74 69 c3 55 a4 35 07 f8 1b e9 49 d4 9f ...ti.U.5....I.. 02f0 a0 a2 7c cb 19 a2 fb 71 22 10 8f 21 73 49 e5 ba ..|....q"..!sI.. 0300 59 9f 10 3c e4 8d db 08 63 6d 95 08 62 33 29 92 Y..<....cm..b3). 0310 ec 59 61 6a 05 12 89 d4 f0 c5 47 2b b1 10 40 39 .Yaj......G+..@9 0320 f9 62 98 ae dd c2 f1 c8 fd 69 17 74 a0 c8 26 e9 .b.......i.t..&. 0330 24 9d e1 27 7f 90 c0 7c 08 10 90 22 8e 98 dc ee $..'...|...".... 0340 17 11 e4 bc 22 bd ee 56 1e c9 a0 12 f6 c8 7f 72 ...."..V.......r 0350 6a ef 21 4d f0 9b cf eb 71 03 b7 92 fe 93 71 27 j.!M....q.....q' 0360 25 10 08 cf cd 2d 3d 99 bf 03 88 7a 34 d5 77 73 %....-=....z4.ws 0370 2e 8e ea ca 43 57 06 30 f1 88 2d c2 62 58 71 91 ....CW.0..-.bXq. 0380 2f 00 f0 ef 8b 64 e1 98 e2 9a fd 22 63 bb 6b 9c /....d....."c.k. 0390 37 5a a8 35 fa 65 51 e1 a8 0f 5b c4 24 13 98 f9 7Z.5.eQ...[.$... 03a0 bf c5 e7 08 e9 c4 54 ac 29 37 ac d9 48 23 cf 73 ......T.)7..H#.s 03b0 5f b9 f7 c2 4d c8 96 af ad 38 88 32 57 73 c7 bf _...M....8.2Ws.. 03c0 62 2a ee c1 d4 be 4f dd 1b c7 8e aa c4 92 3d 87 b*....O.......=. 03d0 be d5 43 62 1e 6b 61 08 27 e4 d6 72 71 a9 72 f3 ..Cb.ka.'..rq.r. 03e0 b6 8d 36 22 77 48 d0 46 3b 82 aa 80 c4 45 9e bf ..6"wH.F;....E.. 03f0 a2 0d d7 30 95 74 6e 6d aa e7 f2 77 5f 21 dd 69 ...0.tnm...w_!.i 0400 f8 ca c6 0a 65 ab 52 1c 34 bd 32 0b eb d2 b9 14 ....e.R.4.2..... 0410 a7 c0 2b 1c 23 3f c5 73 ca ee ad 8e 80 71 47 63 ..+.#?.s.....qGc 0420 47 1e 93 32 04 20 3f 0c 5b 38 e1 92 f5 9e 73 2b G..2. ?.[8....s+ 0430 b1 03 19 41 b3 63 fd b0 2a e5 76 65 b8 f2 13 05 ...A.c..*.ve.... 0440 0c 29 af 00 de 86 45 c6 7e 7e 2f b9 a9 33 30 10 .)....E.~~/..30. 0450 ac 67 a1 19 3e a4 b6 0d 4f 1f 68 cf 5a 9f dc 74 .g..>...O.h.Z..t 0460 fe 66 25 9c 04 9a f3 50 b1 e4 a6 f0 ab aa fa 95 .f%....P........ 0470 e8 ef 75 5e 6d c9 d9 5d 43 14 ef 69 63 72 49 d8 ..u^m..]C..icrI. 0480 b5 89 20 b2 3c 7b c5 4b 4d b6 94 57 7f 7c d9 a7 .. .<{.KM..W.|.. 0490 12 ee b1 93 4c 10 23 4e fd 27 f5 05 fe 08 08 a6 ....L.#N.'...... 04a0 9f 29 4c 3a c5 16 e7 e2 d0 96 ac 16 e1 1b 59 1d .)L:..........Y. 04b0 f8 6f 07 24 8a c0 76 fb 41 51 e5 2f ad d3 5b 78 .o.$..v.AQ./..[x 04c0 be 6d 34 59 18 f0 af 3f e7 d6 7e dc 4d a6 15 53 .m4Y...?..~.M..S 04d0 1d 30 6b 50 d1 dd 5d 6d 8b 7b f4 5b 19 cb 46 96 .0kP..]m.{.[..F. 04e0 a1 e9 a0 3c 12 d8 9d 08 c9 c9 46 8b 06 a8 9c da ...<......F..... 04f0 9c d8 37 fb 6f bc 5d 43 2c 15 fa d5 a0 d0 d7 87 ..7.o.]C,....... 0500 17 1b 46 84 a5 07 b6 43 e3 37 89 29 f4 ab 51 16 ..F....C.7.)..Q. 0510 97 34 a1 54 e6 e2 cd c0 c3 78 ef c5 a4 2d e1 3b .4.T.....x...-.; 0520 92 7a f1 7a 5e cf 9a 8f e4 3d bc f8 4e 49 14 29 .z.z^....=..NI.) 0530 d9 64 ae 85 ae bd e6 b8 65 b5 16 93 d8 2f 11 78 .d......e..../.x 0540 00 4f 45 1c a1 78 db 65 c5 0d 20 64 70 96 dc de .OE..x.e.. dp... 0550 3b a0 42 c6 c2 a1 53 08 ba ac 87 f7 c7 07 c3 75 ;.B...S........u 0560 85 92 ca 3d cc 98 f9 7c 31 5c 6d 3e 6c fc bc f9 ...=...|1\m>l... 0570 38 d6 d0 a5 c4 b5 bd 51 f1 87 c7 cc a0 f6 91 4d 8......Q.......M 0580 1d 74 f7 52 02 f0 bb 54 bf 2b 33 6c 02 f7 0f 63 .t.R...T.+3l...c 0590 f9 d5 be 5a 69 d0 82 7d aa 7e 2c b2 ca db 9c 4b ...Zi..}.~,....K 05a0 5e 09 6b cd 52 85 cd 6f ^.k.R..o No. Time Source Destination Protocol Length Info 20476 243.628789 192.168.10.1 192.168.10.203 TCP 1279 34433 > cds [PSH, ACK] Seq=237421 Ack=3849 Win=1002 Len=1213 TSval=596154 TSecr=729919 Frame 20476: 1279 bytes on wire (10232 bits), 1279 bytes captured (10232 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 237421, Ack: 3849, Len: 1213 Data (1213 bytes) 0000 13 68 de 5c cb 89 5e a9 94 cb d1 ae f2 10 84 72 .h.\..^........r 0010 a8 83 c8 63 6b 74 f6 8d 80 48 d6 64 ee ff 46 96 ...ckt...H.d..F. 0020 5a b8 6d 92 ae d9 e0 03 27 18 cc fa 83 8d 74 c7 Z.m.....'.....t. 0030 3d 5c ba 99 04 b5 e0 fd 93 5a 7a 30 f6 f2 f8 c5 =\.......Zz0.... 0040 51 eb 43 10 67 1c e7 3d e6 9c b5 31 de 8d 0d dd Q.C.g..=...1.... 0050 50 78 ac 43 4f 47 71 1b 15 20 bb 72 d9 32 88 dd Px.COGq.. .r.2.. 0060 f5 a0 ea 1a 46 ac 8f 55 ad 4e d0 93 a4 ca d1 f2 ....F..U.N...... 0070 8c 58 6f 88 72 fc 69 5c 53 7a 56 ee 28 48 8e 8a .Xo.r.i\SzV.(H.. 0080 52 e6 a5 1e 55 e8 74 c3 f7 1b e4 fa e9 a1 bf 70 R...U.t........p 0090 db 4f 72 5d c4 3a c3 cb fb ab 80 6f 6a d6 34 5e .Or].:.....oj.4^ 00a0 b9 c2 c8 28 0f eb e1 87 02 33 2e 0c 7c 71 b9 1d ...(.....3..|q.. 00b0 ff 00 6e 9c 4a 6f e3 6e 41 1e 13 81 f4 56 66 f5 ..n.Jo.nA....Vf. 00c0 11 05 a1 6d 20 39 fb 44 9e 40 ac 1c c4 29 01 eb ...m 9.D.@...).. 00d0 23 dd 96 d9 84 9c 9e 22 20 83 94 1d 40 bb df 3d #......" ...@..= 00e0 32 0f 76 1a bd c8 3e 68 db 32 7e 6f 67 b9 c1 50 2.v...>h.2~og..P 00f0 15 84 62 d5 dc 83 8e 00 7d 3d 41 06 6b 7f 6d c3 ..b.....}=A.k.m. 0100 dd 25 73 e4 a7 1b 61 16 cc cc 75 32 3c f5 76 b5 .%s...a...u2<.v. 0110 b7 85 25 1f c0 4a 35 74 4d eb a5 8b af 81 c9 33 ..%..J5tM......3 0120 42 aa 04 56 0a bd 9f 8e 23 ef 47 ed 1b 40 1a 3c B..V....#.G..@.< 0130 0e 90 49 26 dc c5 16 a5 36 8e 98 9c 55 de ea 14 ..I&....6...U... 0140 77 8f b6 65 44 53 4a fd 4b 98 7b bc e1 b0 a6 f5 w..eDSJ.K.{..... 0150 e7 16 79 89 51 86 72 9c 39 2c 83 c8 21 1d 15 e1 ..y.Q.r.9,..!... 0160 0f 3e 3e dd 5f 83 20 95 8a ad 0b ec 43 e7 3f 9e .>>._. .....C.?. 0170 ff 91 d9 02 33 06 07 1f 4b 46 b2 e2 f5 88 fa 9c ....3...KF...... 0180 85 41 67 a5 90 29 e7 a9 0d 7a a7 07 98 6f c6 31 .Ag..)...z...o.1 0190 32 38 71 08 86 b7 48 1e 12 ff 4a a8 a2 b1 36 4c 28q...H...J...6L 01a0 4e 46 61 9e 9d 4a c0 c0 2e 26 6f c8 56 99 1c 3e NFa..J...&o.V..> 01b0 fa c4 4e e2 5c e3 c7 c8 72 53 9c be 09 c4 dd bd ..N.\...rS...... 01c0 55 f3 83 fe dc 67 fd 16 2a a3 d7 23 87 da 83 a6 U....g..*..#.... 01d0 5c 3b 31 72 13 83 81 c1 4a 96 ec 80 33 4b b8 78 \;1r....J...3K.x 01e0 a4 90 57 b5 00 8b 26 5c 53 7d a7 f1 7c 40 af 9f ..W...&\S}..|@.. 01f0 4a 44 82 0b a8 9a 95 ae a0 83 49 9d 65 21 00 2d JD........I.e!.- 0200 fe 4a 72 a4 a1 c2 42 00 7e 2c 41 3d 7c 18 61 9a .Jr...B.~,A=|.a. 0210 ca 05 56 33 a1 36 3c 59 d5 de 54 f9 06 f4 bc 9a ..V3.6<Y..T..... 0220 26 ea 4c 90 2d 95 f3 d1 f3 dd 14 ad c1 13 fe 01 &.L.-........... 0230 ff 6c de 0a b1 0e c4 a9 0a a8 3d c7 27 eb b0 e7 .l........=.'... 0240 69 d9 93 ee e7 d3 40 d2 7b 70 2c 37 36 5d 81 3a i.....@.{p,76].: 0250 c3 be 7a 40 5b 9b b7 61 c4 7b a0 01 14 36 ea b0 ..z@[..a.{...6.. 0260 15 d0 5f dc ed f0 e1 2a 8b da 6a c5 34 69 06 11 .._....*..j.4i.. 0270 16 1e 0a 53 4e 70 ea 6f 4b c6 e5 0b 7e db 25 61 ...SNp.oK...~.%a 0280 df c0 81 29 12 fd 4b ba 98 c8 01 51 7e b0 2d 76 ...)..K....Q~.-v 0290 56 f7 6b df be 32 e0 66 0c bb 94 e5 10 eb 49 53 V.k..2.f......IS 02a0 43 34 4a c9 e5 44 ee c5 06 df 1c 36 d7 2d f9 14 C4J..D.....6.-.. 02b0 24 c9 9f 2f c2 84 e0 7f 6d fd 31 b8 67 4f df 42 $../....m.1.gO.B 02c0 c7 6b c1 8b 4c da 19 11 11 08 5c 89 4d 03 58 c0 .k..L.....\.M.X. 02d0 cf 00 ec c4 57 a0 3a 87 7b 8a dd b2 c1 ce 54 06 ....W.:.{.....T. 02e0 ea 49 54 82 ec 78 95 5c 24 eb 41 5f 51 7b d1 5f .IT..x.\$.A_Q{._ 02f0 e2 ff 0a c8 7b a3 41 df 91 63 7b ed e3 bf 53 7d ....{.A..c{...S} 0300 82 e1 57 35 ee cc 46 a2 ee 62 64 b3 13 c0 6b 32 ..W5..F..bd...k2 0310 71 65 d4 d6 c3 73 18 bb 7f 8f 2b d3 03 79 cb ab qe...s....+..y.. 0320 04 a8 79 c5 97 4f ba 01 d2 39 27 96 a8 55 4f d0 ..y..O...9'..UO. 0330 5c f9 c2 31 d1 7b 21 18 df a4 66 58 db e3 cf 35 \..1.{!...fX...5 0340 c1 87 25 e5 a6 5b ba b1 fc 25 ff 4d 6c 9a 9c bd ..%..[...%.Ml... 0350 a0 72 ae 59 77 28 1a b5 3f 13 de 93 f0 ed 26 c7 .r.Yw(..?.....&. 0360 b0 4a 56 57 01 10 91 34 d9 9f d5 75 d1 e4 dc 61 .JVW...4...u...a 0370 ad 18 17 25 69 26 ab 49 9c 72 a6 7a ed aa 68 2e ...%i&.I.r.z..h. 0380 c7 7a 06 b4 20 ff d3 3f 66 a7 64 11 f4 71 4f bd .z.. ..?f.d..qO. 0390 a4 c0 63 22 1a b6 20 8c 97 bc 7b 5a af e9 5d 77 ..c".. ...{Z..]w 03a0 8e e3 e7 34 78 4a d7 5f 14 65 86 14 57 d5 39 5b ...4xJ._.e..W.9[ 03b0 72 d3 58 c2 88 6d cf f3 06 77 89 a7 df 5a 77 8b r.X..m...w...Zw. 03c0 4c ec 84 df 0f 66 56 c9 c3 81 0c 48 52 d0 4c 65 L....fV....HR.Le 03d0 e2 77 75 af 3c 34 9e 46 62 7b b8 32 53 f3 9d 37 .wu.<4.Fb{.2S..7 03e0 d4 6a 0b 4c 45 fe 6a 0f cd 3e 25 2e b6 c7 8f 6a .j.LE.j..>%....j 03f0 5c 9b c0 cb be f4 32 6b b7 fc 78 a1 41 ca 7d dd \.....2k..x.A.}. 0400 5a bb 5e 51 c6 68 0d a2 22 7d 2f 58 97 52 96 98 Z.^Q.h.."}/X.R.. 0410 7c 87 ff 6c 1a 3a f1 25 b8 36 06 3e ff 9c a0 56 |..l.:.%.6.>...V 0420 22 20 4a 5d e4 e2 da 65 2e 27 6f 22 8c 8b 44 92 " J]...e.'o"..D. 0430 84 65 98 c0 8a 98 ec bf 08 60 4b 3d 23 a0 c1 ed .e.......`K=#... 0440 da 47 dd 5e 87 24 e7 d7 6c 70 9a 73 1e 26 b9 87 .G.^.$..lp.s.&.. 0450 13 a0 89 f4 25 7c c0 ae b9 4b 4d aa 14 f5 e3 8f ....%|...KM..... 0460 f2 88 09 e7 9b 61 1a 30 ee c6 f3 cc cd e8 0b 35 .....a.0.......5 0470 e8 28 58 31 c5 9a a6 86 a0 43 47 67 a8 36 53 ef .(X1.....CGg.6S. 0480 54 84 53 56 f8 b7 11 07 b4 1f 37 c3 ff 7b 90 7f T.SV......7..{.. 0490 96 57 23 52 61 e4 60 e4 7c ee e8 29 98 86 b2 0e .W#Ra.`.|..).... 04a0 ec b1 79 cc c4 7e a1 bb 2b 87 f1 2b 3d bd a8 72 ..y..~..+..+=..r 04b0 0d c7 06 46 3d 4b fd c1 68 c1 ef a6 34 ...F=K..h...4 No. Time Source Destination Protocol Length Info 20477 243.628840 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=3849 Ack=237421 Win=65535 Len=0 TSval=729919 TSecr=596154 Frame 20477: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3849, Ack: 237421, Len: 0 No. Time Source Destination Protocol Length Info 20478 243.628921 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:48:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1195 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 20478: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1195 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 20479 243.628987 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1195 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 20479: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1195 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 20480 243.629071 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=238634 Ack=3849 Win=1002 Len=1448 TSval=596154 TSecr=729919 Frame 20480: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 238634, Ack: 3849, Len: 1448 Data (1448 bytes) 0000 17 03 01 03 50 f3 0e a6 fb 22 3c 93 b7 eb 1e 5d ....P...."<....] 0010 10 29 42 bf 6f d9 60 14 1c ad 20 3f 49 1f c3 c0 .)B.o.`... ?I... 0020 59 ba 4b fe 4f 8c 82 21 75 da 90 ce 71 e7 fc c0 Y.K.O..!u...q... 0030 1e 2e a0 22 e9 05 0c 06 74 53 0a da 98 4b 6b b7 ..."....tS...Kk. 0040 73 a2 5b 62 7b f2 83 4d 2d de 60 8b 59 b0 4d 11 s.[b{..M-.`.Y.M. 0050 d4 1e d5 d3 d5 6f 40 bf 7a 27 2f 86 36 75 ed cc [email protected]'/.6u.. 0060 44 2a 39 1b 43 fa 07 a7 52 a5 be 2c 4c b6 00 81 D*9.C...R..,L... 0070 3a eb e4 0a f6 70 b1 40 34 93 b7 02 35 5b ba 58 :[email protected][.X 0080 9c 7f 44 ca 57 c4 b5 c6 d8 34 e4 75 b3 32 88 eb ..D.W....4.u.2.. 0090 c9 d3 ae 63 10 63 91 6f f9 7e b4 a2 52 5a 8a 55 ...c.c.o.~..RZ.U 00a0 da 33 e0 12 fb c9 44 3f 1e dc c4 ec 30 d7 5a de .3....D?....0.Z. 00b0 c2 6a f7 11 82 72 75 28 fc 62 57 16 21 93 8a 22 .j...ru(.bW.!.." 00c0 e2 48 f3 0b 45 1f d1 79 7f b9 71 25 30 6e 3c d1 .H..E..y..q%0n<. 00d0 b2 a8 f3 4e 2a 7d 9a c3 aa d5 96 ec fb be 6c 78 ...N*}........lx 00e0 a6 73 a7 1f 9c e1 22 b6 c1 40 a4 68 8e 68 0f 0f .s...."[email protected].. 00f0 dd b1 50 5e c8 d8 bf 35 cb 5e 62 27 1d 36 5e cd ..P^...5.^b'.6^. 0100 f8 90 05 38 3f 4d d1 1d 17 07 0b fd 80 ab eb ce ...8?M.......... 0110 48 99 3b 00 f2 ec eb 28 47 7a b1 22 a3 a9 b1 73 H.;....(Gz."...s 0120 ef 77 f4 ed 72 ef 05 26 6d 68 88 cf b4 19 49 e1 .w..r..&mh....I. 0130 57 28 ba 55 1f d1 66 37 f6 87 86 6a 4f b5 af ea W(.U..f7...jO... 0140 5e b3 ca 70 5e 16 b1 e3 c0 df d4 dd 88 35 c5 83 ^..p^........5.. 0150 04 3f 02 f6 80 c8 3f 9c 1c 5e b4 11 d0 be d2 6e .?....?..^.....n 0160 b9 0c 0b 26 42 a5 4e 45 17 cb 36 be bc b3 66 16 ...&B.NE..6...f. 0170 b6 6b 9b c5 dd 2e bd 47 d5 cb 1d f0 95 68 00 d7 .k.....G.....h.. 0180 3b 6a 0e 36 94 7c b9 87 f2 0f 83 42 f7 0d 47 be ;j.6.|.....B..G. 0190 cd cc 5a 4d 1d f7 0e 95 28 c9 6a 74 5d 24 7d 08 ..ZM....(.jt]$}. 01a0 d0 bb 9d 55 5e 93 28 62 1c b7 fd f0 47 8e 6a 92 ...U^.(b....G.j. 01b0 8e af 7e 55 8f 36 64 e3 27 6c 90 78 91 f9 59 1e ..~U.6d.'l.x..Y. 01c0 b1 41 07 94 03 9a 95 99 ac e5 a0 f1 2c 99 4e 0a .A..........,.N. 01d0 da 07 36 01 3a 81 ff 6c 0f ba 70 86 11 86 a5 a1 ..6.:..l..p..... 01e0 7a a1 bd 4a 99 1e a6 cc 37 f2 21 e3 f5 32 52 aa z..J....7.!..2R. 01f0 a1 53 bf 1b ac 6a 19 8c 70 3f 82 ff 86 79 1c 69 .S...j..p?...y.i 0200 25 61 c6 ec 30 b3 b9 f0 72 ef c9 71 77 4d 21 e4 %a..0...r..qwM!. 0210 e4 6a b9 36 6b c0 46 bc 0a 95 70 f3 64 10 14 11 .j.6k.F...p.d... 0220 8f fe d2 b8 e3 74 72 b3 f7 67 c3 77 a9 13 39 a4 .....tr..g.w..9. 0230 ba c0 70 9b b8 59 b9 f2 13 29 59 9a c3 cc 84 70 ..p..Y...)Y....p 0240 56 aa 3e b5 7f dc f0 c7 1d 73 eb 21 fa e0 13 30 V.>......s.!...0 0250 a5 73 25 0c 00 1f 18 fd 90 fb 9a fc 2b 89 2f ea .s%.........+./. 0260 47 01 0b 18 4f 53 9b e1 de ce fc 6d e1 67 b2 bf G...OS.....m.g.. 0270 d2 7b 84 47 ce 3d d3 55 cc 5f 5b 2d ac 9b 42 a6 .{.G.=.U._[-..B. 0280 3c 6a 3e 74 f6 ba bb 01 83 c8 69 3c d2 80 78 a4 <j>t......i<..x. 0290 35 87 bd 41 c1 98 31 dd 16 08 7a b8 24 ac 5f 5d 5..A..1...z.$._] 02a0 e6 c8 23 3e d7 b3 99 4f 3a 69 1d aa 33 3e 40 c5 ..#>...O:i..3>@. 02b0 47 ab 39 ef 12 ea a3 ba 27 0c 23 bc 09 1b 3b 35 G.9.....'.#...;5 02c0 4f a0 1f 44 33 4d 4b f8 b3 4e 54 fe e1 15 66 9e O..D3MK..NT...f. 02d0 99 3b d0 78 5c 2f 44 4d 00 7e d4 2a 1c a3 83 a5 .;.x\/DM.~.*.... 02e0 88 67 44 9d 88 36 8b fa 1e 8f 41 b0 27 c3 63 c2 .gD..6....A.'.c. 02f0 82 62 03 d4 6e b1 1f ac b8 dd 44 91 59 a4 9a 2f .b..n.....D.Y../ 0300 30 d4 f9 43 62 d3 3b 4c 6b f0 bc 47 80 c8 9e a7 0..Cb.;Lk..G.... 0310 ae 69 9a c9 95 aa 60 f2 08 a5 5f 96 67 c8 a7 27 .i....`..._.g..' 0320 3c 3d b1 d5 0a a5 53 2d 05 fc 24 1a f5 3f d5 67 <=....S-..$..?.g 0330 a3 4d ad bc a2 d5 b0 98 a8 ac 83 9c 75 13 cb 3c .M..........u..< 0340 f8 fb 86 b6 be bb 7b 2d 10 be 82 bf 7a aa ee 51 ......{-....z..Q 0350 a1 bd fe aa 4d 17 03 01 03 40 83 53 f2 ad 52 18 [email protected]. 0360 f6 89 ea b0 1c bc 4e c4 34 55 76 d1 01 3e 32 af ......N.4Uv..>2. 0370 cf 77 4c 57 1b f4 b3 e6 73 8a f5 06 f5 0f 12 00 .wLW....s....... 0380 69 3b d1 4b dc f4 8b c1 18 bf 4e b5 de b4 a6 8c i;.K......N..... 0390 6b f2 86 f8 2f 37 8b 37 82 90 c8 c5 09 ff 4b 27 k.../7.7......K' 03a0 48 09 29 e2 96 61 ef 0b e4 43 05 79 5f 01 05 8d H.)..a...C.y_... 03b0 10 6d b1 68 16 16 0c 6f 7b 57 29 53 e4 2d 28 1e .m.h...o{W)S.-(. 03c0 3e f3 a7 92 dc 8b b6 f6 26 e7 16 f9 15 ee 08 4a >.......&......J 03d0 78 28 ef ea bd 23 8c 7e 10 06 b7 ea dc 9c 42 8e x(...#.~......B. 03e0 52 f7 1a d2 66 47 37 46 2f 60 59 78 fe 7a e7 52 R...fG7F/`Yx.z.R 03f0 0b a8 8f 87 81 96 9e 43 90 ec 32 76 42 fd 65 dc .......C..2vB.e. 0400 42 78 7e 3e 7c b4 26 77 e1 33 12 3d db 1c 89 a2 Bx~>|.&w.3.=.... 0410 63 90 9a 94 f8 1d 74 df ee db 9b 7c ee c3 72 60 c.....t....|..r` 0420 8d 81 98 d5 92 f0 4f cc 97 01 f7 99 0d 29 2d f2 ......O......)-. 0430 9b 7e b2 52 ee a0 f9 5a b8 1a 7b f7 08 5c 21 41 .~.R...Z..{..\!A 0440 c0 35 46 bf 21 47 c8 30 1f 45 7d b8 34 b9 e5 03 .5F.!G.0.E}.4... 0450 6e ae f9 42 b7 bb 14 3b 63 08 1b 81 83 de cb 3c n..B...;c......< 0460 49 4f 7b fc 14 dd 7a 3f d3 46 2c b5 d4 56 6c 13 IO{...z?.F,..Vl. 0470 69 e6 cc 65 bf 89 59 2b 1b 1d e7 d9 b2 7b ab 20 i..e..Y+.....{. 0480 65 26 2f 63 36 44 62 5a 0d f0 31 5d b8 75 b5 13 e&/c6DbZ..1].u.. 0490 46 0b 1b 46 5c cd f5 f4 cd a6 65 51 22 f6 97 c5 F..F\.....eQ"... 04a0 a9 9d 0d b9 c2 bd dd 69 c5 a7 19 61 e3 d6 a2 40 .......i...a...@ 04b0 00 45 de 2b 94 64 12 35 1c c7 e5 c0 ac 1c 79 9f .E.+.d.5......y. 04c0 3d 1c 79 91 fc a5 8e 71 1f 15 ed 97 0a 8c 67 bb =.y....q......g. 04d0 b6 5b 1d 7a 67 2f da f7 22 d7 88 e0 46 6f e8 75 .[.zg/.."...Fo.u 04e0 80 4f 82 ad a4 ed 61 78 20 08 e8 9c 2f f3 e1 d7 .O....ax .../... 04f0 17 79 94 f8 3e 6f bb a8 e1 9d 9d a6 71 44 52 72 .y..>o......qDRr 0500 90 ee 68 64 b0 4d 87 a0 73 42 61 ce 5c 18 35 6f ..hd.M..sBa.\.5o 0510 8b 66 af 1e 0d f9 e5 d8 33 17 3b 95 79 95 d4 9e .f......3.;.y... 0520 06 fa 86 4d fa 51 c5 0e f0 d4 eb bc 51 12 a5 7f ...M.Q......Q... 0530 dc 87 1a dc c4 80 e0 f8 c4 76 3c 2a 94 46 fe e9 .........v<*.F.. 0540 5a 32 f8 0e cd 8c 9b f0 8d 89 22 da 97 29 ab e7 Z2........"..).. 0550 ed df 1c 09 35 3a 80 5f ee 9b 2d 4d 05 e5 a9 40 ....5:._..-M...@ 0560 33 16 cf 2e b3 7b 6c 28 d3 ff 05 5c a4 41 2c 09 3....{l(...\.A,. 0570 61 ba 59 ee 33 00 ee 36 20 9e 0b 6c e2 6f 79 b4 a.Y.3..6 ..l.oy. 0580 2b eb 24 7e d1 a6 04 c8 18 9d 45 bb 20 f9 ea 8c +.$~......E. ... 0590 33 66 88 1a 19 83 b5 f8 01 12 08 50 c8 a6 c0 5c 3f.........P...\ 05a0 d8 05 c6 3a 24 3f d6 2a ...:$?.* No. Time Source Destination Protocol Length Info 20481 243.629121 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=3849 Ack=240082 Win=65535 Len=0 TSval=729919 TSecr=596154 Frame 20481: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3849, Ack: 240082, Len: 0 No. Time Source Destination Protocol Length Info 20482 243.629176 192.168.10.1 192.168.10.203 TCP 308 34433 > cds [PSH, ACK] Seq=240082 Ack=3849 Win=1002 Len=242 TSval=596154 TSecr=729919 Frame 20482: 308 bytes on wire (2464 bits), 308 bytes captured (2464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 240082, Ack: 3849, Len: 242 Data (242 bytes) 0000 1e e7 26 49 c9 f6 10 50 87 e8 64 59 46 5f ce ee ..&I...P..dYF_.. 0010 7a ad ab 2f 4a 3c 5b 37 2e 75 c4 1c a5 6f f0 71 z../J<[7.u...o.q 0020 a2 ef 37 95 2c d3 4c 75 48 74 b3 84 38 a8 37 06 ..7.,.LuHt..8.7. 0030 ae 04 f8 bd 17 31 1b e0 f2 b9 3a 75 3b ef 4b 4b .....1....:u;.KK 0040 49 3b cd 75 a9 dc ed ef 59 f2 d3 80 34 09 fb 08 I;.u....Y...4... 0050 c5 b4 52 ff 42 aa 58 ad d8 a9 a7 3a ff ab 4c c3 ..R.B.X....:..L. 0060 84 9a 1d 3b 5a 23 01 d8 6b 22 17 1b 7c f8 d7 6e ...;Z#..k"..|..n 0070 9f 5e 36 56 f3 f1 d3 b9 1b 87 ca 0c 79 30 e9 18 .^6V........y0.. 0080 d1 3a 29 97 b0 85 e4 6c b6 90 3d 55 8d b4 d1 15 .:)....l..=U.... 0090 e5 0e 5e 17 b1 b3 99 70 b5 c2 de e7 0d 74 e8 2a ..^....p.....t.* 00a0 c1 4c 6f b6 2d be 53 4f b1 12 51 5d f6 6a 15 33 .Lo.-.SO..Q].j.3 00b0 ba ac 24 39 20 36 b5 7a f5 be e6 71 4e 2c 74 0a ..$9 6.z...qN,t. 00c0 42 77 76 c4 06 4b aa 4c 2c 14 2b 7e ed 87 95 20 Bwv..K.L,.+~... 00d0 98 6a f6 1c f2 6e c8 47 ae 75 ca c2 3c 58 8c 2b .j...n.G.u..<X.+ 00e0 68 95 9e 0b 66 15 0d 20 7b 57 49 62 de 16 19 43 h...f.. {WIb...C 00f0 f8 4f .O No. Time Source Destination Protocol Length Info 20483 243.629242 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1195 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 20483: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1195 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 20484 243.661694 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=3849 Ack=240324 Win=65293 Len=74 TSval=729919 TSecr=596154 Frame 20484: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3849, Ack: 240324, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 36 14 76 0e 7a 5a 94 60 74 a0 ca .... 6.v.zZ.`t.. 0010 c7 ce da d1 ac 5c d6 f1 a3 93 b2 86 95 76 e2 9a .....\.......v.. 0020 91 56 cd bd 81 17 03 01 00 20 28 47 b6 ce 54 98 .V....... (G..T. 0030 98 07 ef db b0 d8 9d 8e fb f4 50 e9 16 b1 4e 5a ..........P...NZ 0040 37 0a ce 3d b3 28 54 19 4c 25 7..=.(T.L% No. Time Source Destination Protocol Length Info 20485 243.661819 192.168.10.1 192.168.10.203 TCP 903 34433 > cds [PSH, ACK] Seq=240324 Ack=3923 Win=1002 Len=837 TSval=596162 TSecr=729919 Frame 20485: 903 bytes on wire (7224 bits), 903 bytes captured (7224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 240324, Ack: 3923, Len: 837 Data (837 bytes) 0000 17 03 01 03 40 b5 b6 81 fc 9d ad 85 ce dc 9f a1 ....@........... 0010 18 98 16 9a 01 f7 fa f7 03 9f 19 33 79 1a 9b 7b ...........3y..{ 0020 33 00 c3 8c 39 0f 15 db ee 2d ec 26 6e 3e a3 d6 3...9....-.&n>.. 0030 08 9e 9b 9d 74 8c b0 50 10 70 26 05 b2 5b 0b 72 ....t..P.p&..[.r 0040 0c 93 e8 eb f2 50 21 bb 55 05 bf 3d 4c cc a0 99 .....P!.U..=L... 0050 2a 8a 90 69 0f bd dc 8c c9 f0 19 0a 21 89 d4 24 *..i........!..$ 0060 e3 54 b2 11 e3 b3 17 7b 0c 25 63 ab 67 73 03 d1 .T.....{.%c.gs.. 0070 fb 51 fc 09 f3 f2 81 19 54 c1 19 48 af b2 41 5a .Q......T..H..AZ 0080 78 1a 66 58 aa 20 16 7b 9b 96 2f 8d 28 81 65 4b x.fX. .{../.(.eK 0090 fa 55 aa 9e e2 aa 18 20 72 8b 68 f6 37 53 31 c9 .U..... r.h.7S1. 00a0 0c b3 23 a5 b7 63 b4 4c df 03 4c 84 9c 2e 12 8d ..#..c.L..L..... 00b0 5c 63 08 03 de f7 ed d2 49 d8 0c d3 8a 2f 2e 02 \c......I..../.. 00c0 24 84 77 1a 57 63 63 fc 04 50 d5 f0 46 4f 89 35 $.w.Wcc..P..FO.5 00d0 0e ee 5c 7d d4 43 1e 97 a9 49 ff eb 6d 4a 21 84 ..\}.C...I..mJ!. 00e0 48 41 b4 2f e3 ee aa 0a 7c 5e 65 57 3c e7 0f 57 HA./....|^eW<..W 00f0 75 24 c2 8f a9 43 08 3d be ba 2e 0a 12 1e 24 10 u$...C.=......$. 0100 71 19 83 1d 15 82 59 05 5f f4 a8 cf e9 03 a6 10 q.....Y._....... 0110 40 2f 21 79 a2 78 12 06 d6 0c 48 94 e8 9f 51 99 @/!y.x....H...Q. 0120 4f 6a 40 68 0c e5 fa 63 19 9a 3b 84 41 ac 48 d6 [email protected]..;.A.H. 0130 3b 7c 2e 7a eb 68 0c be 62 0a 82 7d 10 14 f0 a3 ;|.z.h..b..}.... 0140 a4 bd a1 a7 f6 52 69 65 60 78 7c 47 3c 29 5b b9 .....Rie`x|G<)[. 0150 69 11 00 a6 18 f4 04 59 a3 43 bf 6d e6 ae 48 97 i......Y.C.m..H. 0160 de 77 56 d7 3c 72 a0 8e 94 d5 2c 24 13 9d 3a 2c .wV.<r....,$..:, 0170 21 7a 60 21 9f e9 7f 62 b7 47 ff 7e da 53 b2 50 !z`!...b.G.~.S.P 0180 81 61 b1 ca 46 74 6c 2a 1d 89 bb 4b 93 c5 00 97 .a..Ftl*...K.... 0190 a2 77 72 fe 93 e1 20 60 cc b9 49 4f dc e0 13 88 .wr... `..IO.... 01a0 6e a0 b7 5a 77 31 00 af 8b 4b cd bc 7e d7 2b d7 n..Zw1...K..~.+. 01b0 b3 9e 10 61 d1 ed eb 8b 71 11 cf 13 22 c3 c4 73 ...a....q..."..s 01c0 0e 9e 42 85 62 bf 89 c3 2c 3c f8 f7 a3 ed 4d a8 ..B.b...,<....M. 01d0 8f 4b d5 49 66 aa 71 ff 13 ff 07 77 37 f8 a3 38 .K.If.q....w7..8 01e0 8e 22 92 c4 a0 6c 4b 28 82 9d 1c 00 89 a1 55 9f ."...lK(......U. 01f0 83 07 04 73 2b 6e 12 c8 b9 d0 b7 90 a7 76 94 bd ...s+n.......v.. 0200 a1 54 ca c2 f0 77 cb d6 ee 68 ea 63 83 a8 2d 16 .T...w...h.c..-. 0210 78 e9 21 81 d7 cd f8 e8 2c c8 6d ed fa f2 c6 5b x.!.....,.m....[ 0220 e2 53 be 18 89 cf 62 0e 0a 36 99 76 3b 75 9b 27 .S....b..6.v;u.' 0230 39 a8 0c d6 f7 57 49 11 46 94 44 a0 7a 34 92 5d 9....WI.F.D.z4.] 0240 0b 21 f5 f5 12 f5 d8 d2 03 9a e7 7b a3 eb 33 20 .!.........{..3 0250 8e 0b c7 62 6f ea 9f a2 9a 96 f0 e0 7b 94 4d 61 ...bo.......{.Ma 0260 f7 7a fc 71 a9 51 14 9c 89 16 e8 08 a0 14 7b f4 .z.q.Q........{. 0270 fc ea 55 17 58 ad d5 a2 23 a3 f5 d6 bd 92 7a e6 ..U.X...#.....z. 0280 87 23 8d 21 88 9d a8 e5 27 48 84 17 cd 98 20 54 .#.!....'H.... T 0290 9a cb 87 91 94 ea a8 61 a9 2a 20 99 f9 64 78 11 .......a.* ..dx. 02a0 33 c6 f0 55 c6 7b be b1 4f df f8 3d 10 8e fb 93 3..U.{..O..=.... 02b0 05 f8 54 75 d8 75 7d c1 a7 43 9c 8e 28 9e 01 89 ..Tu.u}..C..(... 02c0 f9 0c ae 9b 9a 2b fd 49 a6 67 40 02 aa 57 e3 03 [email protected].. 02d0 eb db c9 8b 4f 5b ec 31 9b c4 d7 70 b4 0d 05 51 ....O[.1...p...Q 02e0 43 d6 72 9d 9f 1c 18 70 f4 bb 30 f6 0e 17 74 28 C.r....p..0...t( 02f0 ea 2c 7b 56 8d 2a 63 69 d9 37 6b d3 3b 9d a1 2c .,{V.*ci.7k.;.., 0300 b1 c2 a3 7e 71 10 3e ff d3 88 98 7c 88 12 bc 6c ...~q.>....|...l 0310 85 da 2b b2 15 1f 44 2c f4 46 bc fb 01 71 61 31 ..+...D,.F...qa1 0320 db 07 f6 30 5d 32 a1 a2 23 6f 0c 7f ff b8 0f e2 ...0]2..#o...... 0330 b2 1e 72 7b 50 e9 aa e8 f2 e5 23 b9 06 7e cf a1 ..r{P.....#..~.. 0340 57 c4 f7 f0 93 W.... No. Time Source Destination Protocol Length Info 20486 243.665083 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=3923 Ack=241161 Win=64456 Len=74 TSval=729919 TSecr=596162 Frame 20486: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3923, Ack: 241161, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 08 13 98 d2 21 52 13 9f 6f e3 0f .... ....!R..o.. 0010 72 69 8f 1b d9 ad 16 5b 93 70 b0 71 81 da 66 20 ri.....[.p.q..f 0020 04 67 db f3 3a 17 03 01 00 20 12 d5 bc e9 e2 88 .g..:.... ...... 0030 2f a8 e4 9f 55 76 f2 0f 9d e0 6f 0a 1d 8b 44 8e /...Uv....o...D. 0040 60 80 0b c5 ad eb ac ab a7 f1 `......... No. Time Source Destination Protocol Length Info 20487 243.672927 192.168.10.1 192.168.10.245 Syslog 313 LOCAL1.INFO: Oct 3 19:48:21 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13573 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eyvmicrobiology@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 20487: 313 bytes on wire (2504 bits), 313 bytes captured (2504 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:21 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13573 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" No. Time Source Destination Protocol Length Info 20488 243.701878 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=241161 Ack=3997 Win=1002 Len=0 TSval=596173 TSecr=729919 Frame 20488: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 241161, Ack: 3997, Len: 0 No. Time Source Destination Protocol Length Info 20489 243.701947 192.168.10.203 192.168.10.1 TCP 214 cds > 34433 [PSH, ACK] Seq=3997 Ack=241161 Win=64456 Len=148 TSval=729919 TSecr=596173 Frame 20489: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 3997, Ack: 241161, Len: 148 Data (148 bytes) 0000 17 03 01 00 20 fa fa 58 29 bf d0 11 52 c6 ad c1 .... ..X)...R... 0010 ee bf bf ff 21 f0 2c 5a e0 f4 44 07 70 94 02 28 ....!.,Z..D.p..( 0020 d3 3c c5 63 39 17 03 01 00 20 94 e1 45 05 40 a4 .<.c9.... ..E.@. 0030 96 1c ea da 5e 12 cd a3 cc 72 18 ee 2b 1f 35 3d ....^....r..+.5= 0040 ff 15 a7 54 0d 19 1f 8a e8 bd 17 03 01 00 20 50 ...T.......... P 0050 4c 9e 1b 63 e6 2f 51 60 36 45 5d c5 5e 4b 06 4a L..c./Q`6E].^K.J 0060 88 b3 f9 e0 95 16 25 fb 0b 11 c1 9a 8e b4 34 17 ......%.......4. 0070 03 01 00 20 00 ff 3f 8d 06 22 f3 51 fd 8a 1c bd ... ..?..".Q.... 0080 99 af f4 3a 34 4b 23 fb c4 02 04 32 c6 ff ac dc ...:4K#....2.... 0090 92 0c e6 53 ...S No. Time Source Destination Protocol Length Info 20490 243.702002 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=241161 Ack=4145 Win=1002 Len=0 TSval=596173 TSecr=729919 Frame 20490: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 241161, Ack: 4145, Len: 0 No. Time Source Destination Protocol Length Info 20491 243.873104 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 20491: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 20492 243.873136 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 20492: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 20493 243.971648 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1336940800, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 20493: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20494 243.971672 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1336940800, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 20494: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20495 243.971684 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1336940800, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 20495: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20496 243.971697 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1336940800, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 20496: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20497 243.989564 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3206021376, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 20497: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20498 243.989582 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3206021376, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 20498: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20499 243.989594 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3206021376, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 20499: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20500 243.989607 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3206021376, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 20500: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20501 243.998347 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 186.86.230.80.in-addr.arpa Frame 20501: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 50921 (50921), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 20502 244.043004 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 20502: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17011, Ack: 1227154, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20503 244.043043 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1227154 Ack=17053 Win=46174 Len=0 Frame 20503: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1227154, Ack: 17053, Len: 0 No. Time Source Destination Protocol Length Info 20504 244.275633 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20504: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45721, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20505 244.292207 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20505: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45748, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20506 244.292243 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=45775 Win=64941 Len=0 Frame 20506: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45775, Len: 0 No. Time Source Destination Protocol Length Info 20507 244.314704 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20507: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45775, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20508 244.323415 65.32.1.65 192.168.10.246 DNS 131 Standard query response PTR IGLD-80-230-86-186.inter.net.il Frame 20508: 131 bytes on wire (1048 bits), 131 bytes captured (1048 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 50921 (50921) Domain Name System (response) No. Time Source Destination Protocol Length Info 20509 244.330341 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20509: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45802, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20510 244.330375 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=45829 Win=64887 Len=0 Frame 20510: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45829, Len: 0 No. Time Source Destination Protocol Length Info 20511 244.338313 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20511: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45829, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20512 244.345670 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 150.183.26.85.in-addr.arpa Frame 20512: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 50733 (50733), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 20513 244.348238 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20513: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45856, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20514 244.348271 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=45883 Win=64833 Len=0 Frame 20514: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45883, Len: 0 No. Time Source Destination Protocol Length Info 20515 244.356447 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20515: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45883, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20516 244.364262 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20516: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45910, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20517 244.364295 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=45937 Win=64779 Len=0 Frame 20517: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45937, Len: 0 No. Time Source Destination Protocol Length Info 20518 244.376178 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20518: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45937, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20519 244.392970 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 20519: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45991, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20520 244.393009 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=333589 Ack=45964 Win=64752 Len=0 SLE=45991 SRE=46018 Frame 20520: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45964, Len: 0 No. Time Source Destination Protocol Length Info 20521 244.394637 65.32.1.65 192.168.10.246 DNS 146 Standard query response, No such name Frame 20521: 146 bytes on wire (1168 bits), 146 bytes captured (1168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 50733 (50733) Domain Name System (response) No. Time Source Destination Protocol Length Info 20522 244.395339 192.168.10.203 85.26.183.150 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 20522: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 85.26.183.150 (85.26.183.150) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 20523 244.397474 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20523: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46018, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20524 244.397508 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20520#1] rfb > xrl [ACK] Seq=333589 Ack=45964 Win=64752 Len=0 SLE=45991 SRE=46045 Frame 20524: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45964, Len: 0 No. Time Source Destination Protocol Length Info 20525 244.402210 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20525: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46045, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20526 244.402243 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20520#2] rfb > xrl [ACK] Seq=333589 Ack=45964 Win=64752 Len=0 SLE=45991 SRE=46072 Frame 20526: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45964, Len: 0 No. Time Source Destination Protocol Length Info 20527 244.412397 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20527: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46072, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20528 244.412432 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20520#3] rfb > xrl [ACK] Seq=333589 Ack=45964 Win=64752 Len=0 SLE=45991 SRE=46099 Frame 20528: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45964, Len: 0 No. Time Source Destination Protocol Length Info 20529 244.416085 188.161.220.86 192.168.10.207 SMTP 60 C: QUIT Frame 20529: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45142 (45142), Dst Port: smtp (25), Seq: 66, Ack: 370, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20530 244.416221 192.168.10.207 188.161.220.86 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 20530: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45142 (45142), Seq: 370, Ack: 72, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20531 244.416266 188.161.220.86 192.168.10.207 TCP 60 45142 > smtp [ACK] Seq=72 Ack=439 Win=93002 Len=0 Frame 20531: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45142 (45142), Dst Port: smtp (25), Seq: 72, Ack: 439, Len: 0 No. Time Source Destination Protocol Length Info 20532 244.416297 192.168.10.207 188.161.220.86 TCP 60 smtp > 45142 [FIN, ACK] Seq=439 Ack=72 Win=65464 Len=0 Frame 20532: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45142 (45142), Seq: 439, Ack: 72, Len: 0 No. Time Source Destination Protocol Length Info 20533 244.416337 188.161.220.86 192.168.10.207 TCP 60 45142 > smtp [ACK] Seq=72 Ack=440 Win=93002 Len=0 Frame 20533: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45142 (45142), Dst Port: smtp (25), Seq: 72, Ack: 440, Len: 0 No. Time Source Destination Protocol Length Info 20534 244.418388 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20534: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46099, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20535 244.418421 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20520#4] rfb > xrl [ACK] Seq=333589 Ack=45964 Win=64752 Len=0 SLE=45991 SRE=46126 Frame 20535: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 45964, Len: 0 No. Time Source Destination Protocol Length Info 20536 244.424258 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 20536: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 45964, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20537 244.424291 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=46126 Win=64590 Len=0 Frame 20537: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 46126, Len: 0 No. Time Source Destination Protocol Length Info 20538 244.433478 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20538: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46126, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20539 244.438261 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20539: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46153, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20540 244.438293 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=46180 Win=64536 Len=0 Frame 20540: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 46180, Len: 0 No. Time Source Destination Protocol Length Info 20541 244.446349 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20541: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46180, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20542 244.460338 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20542: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46207, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20543 244.460375 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=46234 Win=64482 Len=0 Frame 20543: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 46234, Len: 0 No. Time Source Destination Protocol Length Info 20544 244.460613 14.97.186.55 192.168.10.207 SMTP 60 C: QUIT Frame 20544: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13573 (13573), Dst Port: smtp (25), Seq: 60, Ack: 364, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20545 244.460683 192.168.10.207 14.97.186.55 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 20545: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 14.97.186.55 (14.97.186.55) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 13573 (13573), Seq: 364, Ack: 66, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20546 244.460775 14.97.186.55 192.168.10.207 TCP 60 13573 > smtp [ACK] Seq=66 Ack=433 Win=93008 Len=0 Frame 20546: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13573 (13573), Dst Port: smtp (25), Seq: 66, Ack: 433, Len: 0 No. Time Source Destination Protocol Length Info 20547 244.460804 192.168.10.207 14.97.186.55 TCP 60 smtp > 13573 [FIN, ACK] Seq=433 Ack=66 Win=65470 Len=0 Frame 20547: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 14.97.186.55 (14.97.186.55) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 13573 (13573), Seq: 433, Ack: 66, Len: 0 No. Time Source Destination Protocol Length Info 20548 244.460842 14.97.186.55 192.168.10.207 TCP 60 13573 > smtp [ACK] Seq=66 Ack=434 Win=93008 Len=0 Frame 20548: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13573 (13573), Dst Port: smtp (25), Seq: 66, Ack: 434, Len: 0 No. Time Source Destination Protocol Length Info 20549 244.572267 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20549: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46234, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20550 244.584414 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20550: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46261, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20551 244.584448 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=46288 Win=64428 Len=0 Frame 20551: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 46288, Len: 0 No. Time Source Destination Protocol Length Info 20552 244.598357 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20552: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46288, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20553 244.606279 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20553: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46315, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20554 244.606313 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=46342 Win=64374 Len=0 Frame 20554: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 46342, Len: 0 No. Time Source Destination Protocol Length Info 20555 244.622944 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20555: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46342, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20556 244.628712 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20556: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46369, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20557 244.628748 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=46396 Win=64320 Len=0 Frame 20557: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 46396, Len: 0 No. Time Source Destination Protocol Length Info 20558 244.637210 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20558: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46396, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20559 244.644407 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20559: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46423, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20560 244.644443 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=46450 Win=65535 Len=0 Frame 20560: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 46450, Len: 0 No. Time Source Destination Protocol Length Info 20561 244.658335 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20561: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46450, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20562 244.662236 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20562: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46477, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20563 244.662270 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=46504 Win=65481 Len=0 Frame 20563: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 46504, Len: 0 No. Time Source Destination Protocol Length Info 20564 244.668954 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20564: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46504, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20565 244.676833 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20565: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46531, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20566 244.676868 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=46558 Win=65427 Len=0 Frame 20566: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 46558, Len: 0 No. Time Source Destination Protocol Length Info 20567 244.694558 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20567: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46558, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20568 244.699647 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20568: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46585, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20569 244.699681 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=46612 Win=65373 Len=0 Frame 20569: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 46612, Len: 0 No. Time Source Destination Protocol Length Info 20570 244.700642 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 20570: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17053, Ack: 1227154, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20571 244.700677 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1227154 Ack=17095 Win=46153 Len=0 Frame 20571: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1227154, Ack: 17095, Len: 0 No. Time Source Destination Protocol Length Info 20572 244.705105 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20572: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46612, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20573 244.714319 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20573: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46639, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20574 244.714352 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=46666 Win=65319 Len=0 Frame 20574: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 46666, Len: 0 No. Time Source Destination Protocol Length Info 20575 244.724363 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20575: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46666, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20576 244.742612 188.161.220.86 192.168.10.207 TCP 60 45142 > smtp [RST, ACK] Seq=72 Ack=440 Win=93002 Len=0 Frame 20576: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45142 (45142), Dst Port: smtp (25), Seq: 72, Ack: 440, Len: 0 No. Time Source Destination Protocol Length Info 20577 244.742707 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:48:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45142 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 20577: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45142 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 20578 244.747027 188.161.220.86 192.168.10.207 TCP 62 45168 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 20578: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45168 (45168), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 20579 244.747091 192.168.10.207 188.161.220.86 TCP 62 smtp > 45168 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 20579: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45168 (45168), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 20580 244.747502 180.243.236.205 192.168.10.207 SMTP 99 C: MAIL FROM: <allison.kingsman@xxxxxxxxxxxxx> Frame 20580: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: rsf-1 (1195), Dst Port: smtp (25), Seq: 16, Ack: 314, Len: 45 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20581 244.747606 192.168.10.207 180.243.236.205 SMTP 109 S: 250 2.1.0 [email protected] OK Frame 20581: 109 bytes on wire (872 bits), 109 bytes captured (872 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: rsf-1 (1195), Seq: 314, Ack: 61, Len: 55 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20582 244.747653 180.243.236.205 192.168.10.207 TCP 60 rsf-1 > smtp [ACK] Seq=61 Ack=369 Win=93072 Len=0 Frame 20582: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: rsf-1 (1195), Dst Port: smtp (25), Seq: 61, Ack: 369, Len: 0 No. Time Source Destination Protocol Length Info 20583 244.756469 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 20583: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46720, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20584 244.756506 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=333589 Ack=46693 Win=65292 Len=0 SLE=46720 SRE=46747 Frame 20584: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 46693, Len: 0 No. Time Source Destination Protocol Length Info 20585 244.762541 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20585: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46747, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20586 244.762576 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20584#1] rfb > xrl [ACK] Seq=333589 Ack=46693 Win=65292 Len=0 SLE=46720 SRE=46774 Frame 20586: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 46693, Len: 0 No. Time Source Destination Protocol Length Info 20587 244.778549 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20587: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46774, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20588 244.778583 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20584#2] rfb > xrl [ACK] Seq=333589 Ack=46693 Win=65292 Len=0 SLE=46720 SRE=46801 Frame 20588: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 46693, Len: 0 No. Time Source Destination Protocol Length Info 20589 244.800260 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 20589: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46693, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20590 244.800294 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=46801 Win=65184 Len=0 Frame 20590: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 46801, Len: 0 No. Time Source Destination Protocol Length Info 20591 244.812389 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20591: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46801, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20592 244.818363 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20592: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46828, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20593 244.818395 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=46855 Win=65130 Len=0 Frame 20593: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 46855, Len: 0 No. Time Source Destination Protocol Length Info 20594 244.844349 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 20594: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46882, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20595 244.844383 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20593#1] rfb > xrl [ACK] Seq=333589 Ack=46855 Win=65130 Len=0 SLE=46882 SRE=46909 Frame 20595: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 46855, Len: 0 No. Time Source Destination Protocol Length Info 20596 244.862829 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20596: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46909, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20597 244.862863 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20593#2] rfb > xrl [ACK] Seq=333589 Ack=46855 Win=65130 Len=0 SLE=46882 SRE=46936 Frame 20597: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 46855, Len: 0 No. Time Source Destination Protocol Length Info 20598 244.867039 192.168.10.219 192.168.10.255 BROWSER 243 Host Announcement POLLUX, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server Frame 20598: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_7d:f1:25 (00:22:19:7d:f1:25), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.219 (192.168.10.219), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 20599 244.867284 192.168.10.219 192.168.10.255 BROWSER 243 Host Announcement POLLUX, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server Frame 20599: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_7d:f1:25 (00:22:19:7d:f1:25), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.219 (192.168.10.219), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 20600 244.886416 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20600: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46936, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20601 244.886454 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20593#3] rfb > xrl [ACK] Seq=333589 Ack=46855 Win=65130 Len=0 SLE=46882 SRE=46963 Frame 20601: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 46855, Len: 0 No. Time Source Destination Protocol Length Info 20602 244.890479 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20602: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46963, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20603 244.890511 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20593#4] rfb > xrl [ACK] Seq=333589 Ack=46855 Win=65130 Len=0 SLE=46882 SRE=46990 Frame 20603: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 46855, Len: 0 No. Time Source Destination Protocol Length Info 20604 244.894685 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 20604: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46855, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20605 244.894717 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=46990 Win=64995 Len=0 Frame 20605: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 46990, Len: 0 No. Time Source Destination Protocol Length Info 20606 244.931432 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20606: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 46990, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20607 244.946636 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20607: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47017, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20608 244.946671 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=47044 Win=64941 Len=0 Frame 20608: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 47044, Len: 0 No. Time Source Destination Protocol Length Info 20609 244.966694 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20609: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47044, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20610 244.972283 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20610: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47071, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20611 244.972318 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=47098 Win=64887 Len=0 Frame 20611: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 47098, Len: 0 No. Time Source Destination Protocol Length Info 20612 244.987392 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1353718016, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 20612: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20613 244.987415 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1353718016, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 20613: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20614 244.987428 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1353718016, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 20614: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20615 244.987439 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1353718016, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 20615: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20616 245.004423 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20616: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47098, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20617 245.005304 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3222798592, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 20617: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20618 245.005324 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3222798592, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 20618: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20619 245.005336 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3222798592, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 20619: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20620 245.005349 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3222798592, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 20620: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20621 245.056499 192.168.10.1 192.168.10.245 Syslog 310 LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1195 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eyswelling@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 20621: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1195 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 20622 245.093935 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20622: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47125, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20623 245.093974 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=47152 Win=64833 Len=0 Frame 20623: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 47152, Len: 0 No. Time Source Destination Protocol Length Info 20624 245.102755 189.123.220.16 192.168.10.207 TCP 62 49293 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 20624: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49293 (49293), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 20625 245.102824 192.168.10.207 189.123.220.16 TCP 62 smtp > 49293 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 20625: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49293 (49293), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 20626 245.106493 64.74.103.131 192.168.10.240 TLSv1 107 Application Data Frame 20626: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.240 (192.168.10.240) Transmission Control Protocol, Src Port: https (443), Dst Port: mentaserver (2118), Seq: 425, Ack: 425, Len: 53 Secure Sockets Layer No. Time Source Destination Protocol Length Info 20627 245.106616 192.168.10.240 64.74.103.131 TLSv1 107 Application Data Frame 20627: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.240 (192.168.10.240), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: mentaserver (2118), Dst Port: https (443), Seq: 425, Ack: 478, Len: 53 Secure Sockets Layer No. Time Source Destination Protocol Length Info 20628 245.106680 64.74.103.131 192.168.10.240 TCP 60 https > mentaserver [ACK] Seq=478 Ack=478 Win=65535 Len=0 Frame 20628: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.240 (192.168.10.240) Transmission Control Protocol, Src Port: https (443), Dst Port: mentaserver (2118), Seq: 478, Ack: 478, Len: 0 No. Time Source Destination Protocol Length Info 20629 245.109756 Watchgua_3c:4c:d8 Dell_ba:b4:3c ARP 60 Who has 192.168.10.240? Tell 192.168.10.1 Frame 20629: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20630 245.109771 Dell_ba:b4:3c Watchgua_3c:4c:d8 ARP 60 192.168.10.240 is at 00:1e:c9:ba:b4:3c Frame 20630: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ba:b4:3c (00:1e:c9:ba:b4:3c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20631 245.114430 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20631: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47152, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20632 245.114729 14.97.186.55 192.168.10.207 TCP 60 13573 > smtp [RST, ACK] Seq=66 Ack=434 Win=93008 Len=0 Frame 20632: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13573 (13573), Dst Port: smtp (25), Seq: 66, Ack: 434, Len: 0 No. Time Source Destination Protocol Length Info 20633 245.114885 192.168.10.1 192.168.10.245 Syslog 201 LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13573 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 20633: 201 bytes on wire (1608 bits), 201 bytes captured (1608 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13573 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 20634 245.115298 14.97.186.55 192.168.10.207 TCP 62 13610 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 20634: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13610 (13610), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 20635 245.115356 192.168.10.207 14.97.186.55 TCP 62 smtp > 13610 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 20635: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 14.97.186.55 (14.97.186.55) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 13610 (13610), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 20636 245.162648 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20636: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47179, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20637 245.162684 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=47206 Win=64779 Len=0 Frame 20637: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 47206, Len: 0 No. Time Source Destination Protocol Length Info 20638 245.188527 188.161.220.86 192.168.10.207 TCP 60 45168 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 20638: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45168 (45168), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 20639 245.188643 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45168 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 20639: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45168 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 20640 245.188815 192.168.10.207 188.161.220.86 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:47:57 -0400 Frame 20640: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45168 (45168), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20641 245.188863 188.161.220.86 192.168.10.207 TCP 60 45168 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 20641: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45168 (45168), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 20642 245.194337 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 20642: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 20643 245.199102 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20643: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47206, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20644 245.224324 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 20644: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47260, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20645 245.224359 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=333589 Ack=47233 Win=64752 Len=0 SLE=47260 SRE=47287 Frame 20645: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 47233, Len: 0 No. Time Source Destination Protocol Length Info 20646 245.270389 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20646: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47287, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20647 245.270424 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20645#1] rfb > xrl [ACK] Seq=333589 Ack=47233 Win=64752 Len=0 SLE=47260 SRE=47314 Frame 20647: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 47233, Len: 0 No. Time Source Destination Protocol Length Info 20648 245.282736 189.123.220.16 192.168.10.207 TCP 60 49293 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 20648: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49293 (49293), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 20649 245.282820 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49293 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 20649: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49293 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 20650 245.282898 192.168.10.207 189.123.220.16 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:47:58 -0400 Frame 20650: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49293 (49293), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20651 245.282941 189.123.220.16 192.168.10.207 TCP 60 49293 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 20651: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49293 (49293), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 20652 245.318236 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 20652: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 20653 245.355311 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 20653: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 20654 245.355343 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 20654: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 20655 245.358762 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 20655: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17095, Ack: 1227154, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20656 245.358794 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1227154 Ack=17137 Win=46132 Len=0 Frame 20656: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1227154, Ack: 17137, Len: 0 No. Time Source Destination Protocol Length Info 20657 245.443900 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 20657: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 20658 245.462377 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20658: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47314, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20659 245.462415 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20645#2] rfb > xrl [ACK] Seq=333589 Ack=47233 Win=64752 Len=0 SLE=47260 SRE=47341 Frame 20659: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 47233, Len: 0 No. Time Source Destination Protocol Length Info 20660 245.466815 14.97.186.55 192.168.10.207 TCP 60 13610 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 20660: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13610 (13610), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 20661 245.466924 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13610 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 20661: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13610 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 20662 245.467016 192.168.10.207 14.97.186.55 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:47:58 -0400 Frame 20662: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 14.97.186.55 (14.97.186.55) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 13610 (13610), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20663 245.467056 14.97.186.55 192.168.10.207 TCP 60 13610 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 20663: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13610 (13610), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 20664 245.474682 189.123.220.16 192.168.10.207 SMTP 71 C: EHLO yvreeq.com Frame 20664: 71 bytes on wire (568 bits), 71 bytes captured (568 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49293 (49293), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 17 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20665 245.474756 192.168.10.207 189.123.220.16 SMTP 245 S: 250-mail.mydomain.com Hello [189.123.220.16] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 20665: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49293 (49293), Seq: 122, Ack: 18, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20666 245.474799 189.123.220.16 192.168.10.207 TCP 60 49293 > smtp [ACK] Seq=18 Ack=313 Win=93128 Len=0 Frame 20666: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49293 (49293), Dst Port: smtp (25), Seq: 18, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 20667 245.475335 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49293 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 20667: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49293 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 20668 245.475409 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49293 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 20668: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49293 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 20669 245.475484 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49293 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 20669: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49293 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 20670 245.475563 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49293 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 20670: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49293 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 20671 245.475636 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49293 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 20671: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49293 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 20672 245.475707 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49293 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 20672: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49293 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 20673 245.484568 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 20673: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47233, Ack: 333589, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20674 245.484601 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=333589 Ack=47341 Win=64644 Len=0 Frame 20674: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 47341, Len: 0 No. Time Source Destination Protocol Length Info 20675 245.499538 180.243.236.205 192.168.10.207 SMTP 60 C: QUIT Frame 20675: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: rsf-1 (1195), Dst Port: smtp (25), Seq: 61, Ack: 369, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20676 245.499573 192.168.10.207 180.243.236.205 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 20676: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: rsf-1 (1195), Seq: 369, Ack: 67, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20677 245.499615 180.243.236.205 192.168.10.207 TCP 60 rsf-1 > smtp [ACK] Seq=67 Ack=438 Win=93002 Len=0 Frame 20677: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: rsf-1 (1195), Dst Port: smtp (25), Seq: 67, Ack: 438, Len: 0 No. Time Source Destination Protocol Length Info 20678 245.499643 192.168.10.207 180.243.236.205 TCP 60 smtp > rsf-1 [FIN, ACK] Seq=438 Ack=67 Win=65469 Len=0 Frame 20678: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: rsf-1 (1195), Seq: 438, Ack: 67, Len: 0 No. Time Source Destination Protocol Length Info 20679 245.499678 180.243.236.205 192.168.10.207 TCP 60 rsf-1 > smtp [ACK] Seq=67 Ack=439 Win=93002 Len=0 Frame 20679: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: rsf-1 (1195), Dst Port: smtp (25), Seq: 67, Ack: 439, Len: 0 No. Time Source Destination Protocol Length Info 20680 245.542030 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 20680: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 333589, Ack: 47341, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 20681 245.542065 192.168.10.185 192.168.10.142 VNC 210 Authentication result Frame 20681: 210 bytes on wire (1680 bits), 210 bytes captured (1680 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 334849, Ack: 47341, Len: 156 Virtual Network Computing No. Time Source Destination Protocol Length Info 20682 245.566353 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 20682: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 20683 245.582267 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=47341 Ack=335005 Win=64240 Len=0 Frame 20683: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47341, Ack: 335005, Len: 0 No. Time Source Destination Protocol Length Info 20684 245.592793 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 20684: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47341, Ack: 335005, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 20685 245.606171 188.161.220.86 192.168.10.207 SMTP 69 C: EHLO xgpo.com Frame 20685: 69 bytes on wire (552 bits), 69 bytes captured (552 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45168 (45168), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 15 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20686 245.606244 192.168.10.207 188.161.220.86 SMTP 245 S: 250-mail.mydomain.com Hello [188.161.220.86] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 20686: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45168 (45168), Seq: 122, Ack: 16, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20687 245.606288 188.161.220.86 192.168.10.207 TCP 60 45168 > smtp [ACK] Seq=16 Ack=313 Win=93128 Len=0 Frame 20687: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45168 (45168), Dst Port: smtp (25), Seq: 16, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 20688 245.607162 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=241161 Ack=4145 Win=1002 Len=1448 TSval=596649 TSecr=729919 Frame 20688: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 241161, Ack: 4145, Len: 1448 Data (1448 bytes) 0000 17 03 01 22 80 93 d1 00 93 cf 35 e2 db 8f 8d 8e ..."......5..... 0010 5a 4b 79 f4 35 fe fc 4b 9a e0 a7 5d a6 2a 62 a2 ZKy.5..K...].*b. 0020 34 d1 83 1c 36 ca d5 2e 06 2e a6 f7 a8 1a af 56 4...6..........V 0030 d5 79 f6 77 ba 10 f0 5d 38 43 fb 65 cd 05 da 8f .y.w...]8C.e.... 0040 a8 64 27 c3 1b ba d8 cf 61 ba 10 78 7c d6 f9 94 .d'.....a..x|... 0050 ce f6 0d e8 07 91 93 08 cd b7 c1 4d 6a bd f1 62 ...........Mj..b 0060 80 e4 89 12 a5 2a 85 a6 d3 2b a3 9d 6e 44 85 2f .....*...+..nD./ 0070 59 a6 bb 25 83 5e b8 65 1d 5e a7 33 68 0f 60 58 Y..%.^.e.^.3h.`X 0080 33 ea 37 c7 00 cd 9b 4b 30 3e ff ed be a8 ec 3e 3.7....K0>.....> 0090 97 19 ff c7 4c b7 22 61 c8 89 b5 55 03 ab a1 b7 ....L."a...U.... 00a0 99 1f 9d 44 e3 1c 5a 8d 86 b5 8c d1 81 6f e3 6e ...D..Z......o.n 00b0 ea 04 f4 89 e2 15 f5 49 73 5c ec c6 ce 37 05 14 .......Is\...7.. 00c0 76 29 af 3c da 12 1b 94 1e 18 1e 5b c7 87 54 be v).<.......[..T. 00d0 93 9d 21 ba 14 70 6d b0 b5 63 54 0c 15 45 8d a3 ..!..pm..cT..E.. 00e0 5a d8 8d d9 04 ae 3b 0b 49 5e a8 56 6f 37 f7 e2 Z.....;.I^.Vo7.. 00f0 57 2c a4 97 9f 47 a9 eb 0d bc 2b c8 01 ee 4d 16 W,...G....+...M. 0100 82 af e2 91 8a 75 ac 9b 1f 7b e9 f8 3d 95 6f 37 .....u...{..=.o7 0110 b5 03 95 7f b2 45 6a 97 1b 64 2c 8e db 6f ac 14 .....Ej..d,..o.. 0120 c0 16 81 a6 04 df 09 4b 64 c4 1d 81 9c d8 13 2a .......Kd......* 0130 c1 e5 fd 41 d6 6d b5 17 d4 09 d0 b5 c2 33 1a b1 ...A.m.......3.. 0140 2c c8 42 f0 55 3d 5b 88 8d 2c 8b d2 59 ec 5e 17 ,.B.U=[..,..Y.^. 0150 24 95 1e a3 c1 bb ed 14 25 e8 50 f7 77 15 b2 d6 $.......%.P.w... 0160 c5 9e 9a 5b a1 d4 4e af 99 15 f7 dd 24 09 ff 0b ...[..N.....$... 0170 c5 7d 14 21 5b 89 cf 79 da b9 aa e3 30 3b 61 7f .}.![..y....0;a. 0180 d8 17 1b 9d 57 56 6f a3 68 e4 0f ac 25 a1 17 8d ....WVo.h...%... 0190 3b 6d 3a 8c 2e bf 8e 71 a0 86 63 d4 8a 0e ce f8 ;m:....q..c..... 01a0 89 08 b7 fe 0e 0c 4b 1a fa 76 ce f3 03 3f 2f 34 ......K..v...?/4 01b0 7c 22 3b 67 df 76 5f 64 fa 41 67 e3 de d2 90 8f |";g.v_d.Ag..... 01c0 b4 dd a0 0b db 13 82 a9 58 e0 99 0c 55 b4 40 4b ........X...U.@K 01d0 8d 5b a6 2e 35 03 2b 4f fe 85 24 a0 d4 95 de 9d .[..5.+O..$..... 01e0 f9 b4 e6 96 30 dd e9 5c 6d 17 21 83 32 f8 57 91 ....0..\m.!.2.W. 01f0 1b 69 a2 35 d4 8c d6 25 4f a1 37 b1 69 28 28 3f .i.5...%O.7.i((? 0200 2f 2d d0 51 20 78 d7 ed 2b 66 90 73 ea d4 1a 7c /-.Q x..+f.s...| 0210 c8 59 d7 71 1b 33 22 0d f1 49 28 16 c4 45 78 4e .Y.q.3"..I(..ExN 0220 69 96 4d 0f f1 15 ed 84 47 d0 fe b3 72 cf fa 24 i.M.....G...r..$ 0230 68 d0 04 d5 ea 6b f1 ad 6c 96 52 4a 2a 54 d5 61 h....k..l.RJ*T.a 0240 13 73 f5 04 f1 1b c0 75 66 e5 2f a0 3a 1f a3 9e .s.....uf./.:... 0250 38 fe 98 69 f7 03 e1 fd 6c b4 68 12 29 4a 1f e4 8..i....l.h.)J.. 0260 1d 48 f3 e3 7f 6e a6 fe 49 1b 2d 19 63 f4 01 03 .H...n..I.-.c... 0270 a5 bb e2 63 41 f3 0a 61 53 83 0e 58 28 c2 df c5 ...cA..aS..X(... 0280 86 31 0a 31 65 e6 25 6a 44 cf 42 47 46 47 bf f5 .1.1e.%jD.BGFG.. 0290 90 1e 5b 6f 3e 1e 06 f4 fb 93 c7 c0 04 c0 17 14 ..[o>........... 02a0 ca 45 b5 75 32 1f 42 be 79 5d 87 24 d4 9d f2 41 .E.u2.B.y].$...A 02b0 6c c2 85 26 5b 55 df 9e b1 d8 0f b7 7d be 56 2a l..&[U......}.V* 02c0 58 e7 be 75 77 ca 67 e8 ab 09 ff a3 cd b1 91 df X..uw.g......... 02d0 82 92 c6 e5 bf ef 51 20 4e e7 7f e7 e1 d8 bf dd ......Q N....... 02e0 76 aa fb 68 38 8f 0c d4 4e 0f 04 2c 8e 2a a0 b9 v..h8...N..,.*.. 02f0 e7 d2 27 ad 9a 28 b9 d6 f8 29 04 3e b5 b6 79 c8 ..'..(...).>..y. 0300 66 f0 b6 9c 73 2e 87 ef c2 a1 7f ae 2d 3c 0d d4 f...s.......-<.. 0310 9c 5b 5c 8a dc cd 73 64 be 23 00 d3 5b d5 19 c8 .[\...sd.#..[... 0320 60 dd 18 5c 2f 98 36 a2 b9 82 03 9c d7 b1 c2 60 `..\/.6........` 0330 21 83 0e e1 ec 71 89 1e 9e f7 f8 02 f5 d3 e4 83 !....q.......... 0340 c3 d3 b3 b9 0b 94 86 52 12 4d 38 68 71 c6 f7 16 .......R.M8hq... 0350 90 6f 60 80 f3 2a ea b7 0a 95 cc 04 43 93 8b 77 .o`..*......C..w 0360 c3 e0 f3 a2 b2 a7 17 39 ad 95 b0 58 a7 62 17 4e .......9...X.b.N 0370 02 e3 41 1e c0 6c 8f 4c 36 68 4c f7 80 64 80 30 ..A..l.L6hL..d.0 0380 2d e0 e3 ed 81 ea 35 d2 89 22 4b 7d b9 08 4f c8 -.....5.."K}..O. 0390 33 8a f8 85 3c 2e a3 4e 6a 23 e0 59 0e bc f5 2d 3...<..Nj#.Y...- 03a0 ab 6a a2 36 7d f5 4f 5e 2f 29 14 0d 61 0f 6a 6f .j.6}.O^/)..a.jo 03b0 0c f9 97 e7 ab bf 92 52 b9 e3 5b 90 5a cf de 21 .......R..[.Z..! 03c0 06 0c dc f1 0e a4 76 3f 75 ee 0c 6e 0f 31 3b 9c ......v?u..n.1;. 03d0 22 dd 6c 40 7c 2d 92 76 01 a1 63 db a2 b3 8d 6f ".l@|-.v..c....o 03e0 57 1a 8c 71 d8 c3 e6 17 99 aa 79 f1 a0 e3 38 cc W..q......y...8. 03f0 d0 fd e7 1a 40 48 4f 7a 72 b8 ab d2 a3 b6 a7 46 [email protected] 0400 c4 ff db 9e 6f 3d aa 0b e2 0a ee af ac 42 18 1c ....o=.......B.. 0410 e6 8a 6f 80 6c 00 83 74 33 4a 9e 99 ca 1e d7 86 ..o.l..t3J...... 0420 0b 14 b5 0f 66 20 05 8c 70 1a 58 47 fc 73 c9 65 ....f ..p.XG.s.e 0430 70 f4 fc 21 c7 e7 bd f4 d3 43 5c 09 f8 98 d5 17 p..!.....C\..... 0440 68 e1 50 13 ba c5 e3 79 d1 3e b5 7b a0 24 c6 ca h.P....y.>.{.$.. 0450 fa 54 12 4f 53 14 e8 70 a9 4e 05 b9 98 3a 06 a0 .T.OS..p.N...:.. 0460 33 72 95 eb 42 43 81 04 82 7f 9b 2d 4b b9 7f 52 3r..BC.....-K..R 0470 ca 64 fa 21 ab 85 57 f4 18 78 a3 c5 20 10 f5 5b .d.!..W..x.. ..[ 0480 ab f7 c3 b6 26 11 7d 56 de ba 80 94 21 e3 88 50 ....&.}V....!..P 0490 c2 5b 67 83 08 c6 08 d6 ca bc af 81 9f fe da c8 .[g............. 04a0 28 f0 fd 21 28 27 02 cd 82 23 81 aa be e3 52 fa (..!('...#....R. 04b0 02 c7 03 0c b5 e6 2e 63 2e 23 9e c7 e9 5c 47 38 .......c.#...\G8 04c0 55 fe 70 b3 d0 d7 71 e3 66 ff 40 c4 fc de aa 5d U.p...q.f.@....] 04d0 ea a3 d2 76 d5 17 95 52 18 6d 35 26 d2 b2 bb 8f ...v...R.m5&.... 04e0 26 25 f8 b0 e7 e4 a7 4a 9d db 6d a0 6f 37 e0 e0 &%.....J..m.o7.. 04f0 d9 a9 96 c5 d5 de 0f 6b 5e 99 92 3f 72 f9 84 ed .......k^..?r... 0500 3d a5 14 fa 9d 2e 8a a3 d1 2b 1c 7f 14 db 87 42 =........+.....B 0510 52 74 d1 d0 c7 cc 57 36 99 3a 71 73 90 36 2f 9b Rt....W6.:qs.6/. 0520 ee 19 00 79 f6 43 2e 98 9d 05 37 19 ac 67 4f ac ...y.C....7..gO. 0530 d1 b9 01 8b 57 f0 c4 3b f9 5f 21 23 1d f9 ac 55 ....W..;._!#...U 0540 a8 d7 28 37 74 7a 7e 61 be d4 b6 9e 16 c7 fb ce ..(7tz~a........ 0550 81 8b 68 ee 74 d1 f7 b7 bb fd 6c 25 23 15 36 15 ..h.t.....l%#.6. 0560 de 91 7a dd e7 ef 01 2a 2f 6f 48 21 f9 d4 71 47 ..z....*/oH!..qG 0570 ed 22 33 f7 d0 09 b5 cb 51 db 1b 40 72 f6 9d e3 ."3.....Q..@r... 0580 ea 86 eb 84 29 f1 f0 fc 1d f5 32 3a 31 00 21 87 ....).....2:1.!. 0590 ec 57 d6 4d 59 2b bf 30 da c9 21 6a 05 4e 99 c6 .W.MY+.0..!j.N.. 05a0 a5 98 c4 8d b0 c3 45 1d ......E. No. Time Source Destination Protocol Length Info 20689 245.607273 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=242609 Ack=4145 Win=1002 Len=1448 TSval=596649 TSecr=729919 Frame 20689: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 242609, Ack: 4145, Len: 1448 Data (1448 bytes) 0000 c7 7b e6 36 4c e7 78 77 01 9d 81 a0 05 27 3c 3d .{.6L.xw.....'<= 0010 24 db ab ad c2 80 bd af 14 de fe c0 44 d6 d3 64 $...........D..d 0020 c3 d6 76 f5 ff ed 16 6a 46 7b ad 1e 7b ef 73 74 ..v....jF{..{.st 0030 10 13 7a e2 bb 4b 13 6b 58 6c fc 4c 55 01 9b 5e ..z..K.kXl.LU..^ 0040 c7 76 38 13 17 e0 98 9a 18 30 90 29 a9 e2 94 4f .v8......0.)...O 0050 11 46 fd 4f a9 4d 5e 6b fa 84 7c db fe 45 cf 2e .F.O.M^k..|..E.. 0060 85 19 55 50 3a 29 69 b4 b2 34 14 de 58 7c 9a fa ..UP:)i..4..X|.. 0070 4a c8 2a 53 be 6f 86 0d 1e 71 98 d6 b8 7f ae 2d J.*S.o...q.....- 0080 9b fa 9f 1c 42 76 af a2 23 f6 62 20 1d ee 3c e9 ....Bv..#.b ..<. 0090 97 15 9c f4 81 ff 1e 0c c7 a5 7a 64 40 af ae bf ..........zd@... 00a0 ed 45 75 c1 f4 f0 c5 bc b0 b8 f0 2b 63 68 36 9a .Eu........+ch6. 00b0 9d 10 c7 6b 0f c8 1b 25 6f 78 e0 06 11 10 d8 83 ...k...%ox...... 00c0 9a 26 6c f6 d6 bb c0 1d 7d 46 d0 2b 0e 48 6d 76 .&l.....}F.+.Hmv 00d0 ab 84 e3 2a 9e 5a f1 6f 9a 6a a1 60 0e aa 61 d6 ...*.Z.o.j.`..a. 00e0 48 ac 3b 81 74 4b d7 aa e2 32 50 4d 03 6d 41 ad H.;.tK...2PM.mA. 00f0 63 9e e3 d8 90 41 ac a2 75 77 d9 14 99 13 5e 28 c....A..uw....^( 0100 b2 70 2a 82 1c a9 e2 a0 0e c9 1c 0e 81 a4 bb 69 .p*............i 0110 2b 1f 8e 7b ee 5b 96 c2 d7 80 2c ea 4f 0c 49 9d +..{.[....,.O.I. 0120 e4 ea ec 4c 60 12 3d 6d 3f 73 05 a8 d4 82 ba a5 ...L`.=m?s...... 0130 cd 6d f5 bb 3e 32 7b 55 84 67 34 ca 4e dc 2c e6 .m..>2{U.g4.N.,. 0140 98 df 45 f6 c0 d7 49 c7 06 d9 31 85 28 0a aa c2 ..E...I...1.(... 0150 e2 cd 2d 4c 48 78 bf 4e 35 3d 02 59 77 f3 2d b3 ..-LHx.N5=.Yw.-. 0160 cf 16 7b 5a 67 0b de 15 53 9c b7 09 6c 1e 5e 78 ..{Zg...S...l.^x 0170 2c b8 b8 21 e2 84 ed 8c c6 f3 67 d9 6c f2 5a c1 ,..!......g.l.Z. 0180 9d cb 14 44 51 bb e6 84 0a 5b ad e8 b3 d3 dd ee ...DQ....[...... 0190 4d 22 b0 d4 9b bd 6d 49 49 bc a1 eb dc 69 6b d8 M"....mII....ik. 01a0 72 7c 5d 56 63 a6 6d 8c 33 c4 b9 5d 5a bc 4e cd r|]Vc.m.3..]Z.N. 01b0 d7 8c 12 98 ce eb f4 a7 76 06 0b d3 3a a5 5b ff ........v...:.[. 01c0 7a 45 ab 65 c9 28 80 fd 3b ed 99 94 83 d7 93 95 zE.e.(..;....... 01d0 d5 1e 84 a8 af 0a f8 79 a4 73 40 81 97 49 1d 05 [email protected].. 01e0 d6 22 6a 4f ea 6b a6 37 46 fe 7c c2 ec c4 d4 f0 ."jO.k.7F.|..... 01f0 40 6f 2d 8d e3 f9 7f e4 ea c5 33 ad ed a6 25 fc @o-.......3...%. 0200 8d c3 f7 b9 96 5c 9c ca 3a fd 42 8b 37 f7 d9 63 .....\..:.B.7..c 0210 30 79 c1 85 10 d0 14 25 44 f4 58 01 0f 5d 9c 4c 0y.....%D.X..].L 0220 0a 4c 54 3a 4d 7e fa f8 93 56 68 e8 23 6d ae c2 .LT:M~...Vh.#m.. 0230 54 99 00 10 6e 73 70 e9 64 6f 55 a2 11 f4 2c c0 T...nsp.doU...,. 0240 f7 0e e4 00 e1 42 d2 da 58 b8 8f ed d8 4a a7 be .....B..X....J.. 0250 8c 43 9a 7f b9 a2 d3 4a 35 58 b3 ba 5b 1b cd 5e .C.....J5X..[..^ 0260 d1 a0 ed ee bb 60 ed d9 8b 19 cd a6 fc c4 2b aa .....`........+. 0270 07 20 42 18 c4 4a 53 bd a8 66 7d 9a 4b aa 7d e1 . B..JS..f}.K.}. 0280 d6 57 a2 50 dc 43 c8 0b 1e c1 0d bc e1 99 1f fb .W.P.C.......... 0290 77 05 26 d7 82 be de 4d a0 94 a5 ea 10 c7 cb 33 w.&....M.......3 02a0 c4 bb 49 6d 5a 64 4a cb 27 85 74 f4 23 e3 50 ff ..ImZdJ.'.t.#.P. 02b0 cd 82 1f 96 e3 bf 45 25 c5 0f d5 28 ed e9 82 a1 ......E%...(.... 02c0 50 6e 00 07 1c a8 83 9f e8 be f8 28 de 13 b4 9b Pn.........(.... 02d0 20 9a 05 9c 0c 58 3b f4 22 e0 83 9c de 43 2e b1 ....X;."....C.. 02e0 0f 76 22 fd b9 b6 c8 10 f2 25 61 8e 8b fd 9c 46 .v"......%a....F 02f0 36 ea 0d 50 6d 33 7a 1f af 48 ce fd 43 d0 1e 9b 6..Pm3z..H..C... 0300 e5 4e 3f e5 0e 61 93 4f e9 42 4c 13 54 29 2f 46 .N?..a.O.BL.T)/F 0310 a9 f9 e3 53 db 69 3c d8 31 bd 59 0e a5 1f 55 27 ...S.i<.1.Y...U' 0320 6e 9d ba 85 f2 2a d6 c0 1c 0b 1b d9 a4 c6 b1 60 n....*.........` 0330 17 b7 ef d9 0e 12 e9 cf 20 e9 2b 2d 40 27 68 2b ........ .+-@'h+ 0340 f6 34 ef 25 4c c4 73 36 6e 21 c9 15 ee d7 70 20 .4.%L.s6n!....p 0350 64 ab f6 d5 12 aa ec 5e 9f 68 e5 e8 cd c5 58 f7 d......^.h....X. 0360 13 77 3f 72 a6 40 de b4 ea e5 ed e8 0e fb 5e 9f .w?r.@........^. 0370 9e 40 4e 68 f4 0a 9f e7 37 f8 5a cd 07 ed 1d 55 [email protected] 0380 5f d4 30 34 55 20 86 f3 97 f6 fd d3 51 c9 41 94 _.04U ......Q.A. 0390 cb 15 88 1b 1c c3 1a d0 9a 8e 33 0d 32 bb a3 6d ..........3.2..m 03a0 cf 9b ca 8d 96 ed 6b 17 76 78 01 24 00 16 e2 91 ......k.vx.$.... 03b0 17 07 49 ed 14 79 1d fe a9 46 8e c4 d3 cf cb 99 ..I..y...F...... 03c0 f1 30 75 08 a3 e7 a3 3f 78 4c d7 cc a2 5c da a4 .0u....?xL...\.. 03d0 7f 44 0b 09 74 bb d1 12 04 c7 0e a5 ad bb cd 1b .D..t........... 03e0 b1 f0 66 c0 ad 0a 28 d0 fb 9d 80 01 2a c4 53 23 ..f...(.....*.S# 03f0 7b ef 1f c8 be 29 21 f1 84 07 9d 51 a6 b4 e3 03 {....)!....Q.... 0400 46 42 4d f6 96 1d 6a 1a 90 c7 7a 15 56 ae fc 9a FBM...j...z.V... 0410 1e 2e d4 3f c9 3c cc 61 0f 8f 9f fa 74 0c cd 07 ...?.<.a....t... 0420 ce 43 97 02 90 91 5b 52 ee 7d d1 07 22 e9 0b fc .C....[R.}.."... 0430 28 6b 73 1a 02 95 80 bc 08 af ed 7d c0 d5 fb 2f (ks........}.../ 0440 90 3c 19 0c 2f 96 c3 e2 f5 fd b2 55 8a 2f 1e 83 .<../......U./.. 0450 2a 8f 8f dc 90 80 57 ca 32 a0 28 be f0 74 66 75 *.....W.2.(..tfu 0460 0d 40 af 1e f9 04 f3 cf 45 db 9e 9b 6d f6 09 fa [email protected]... 0470 ea ee b7 70 10 bb 24 9b 54 43 af 77 59 76 60 2f ...p..$.TC.wYv`/ 0480 8b 04 de c8 c3 77 32 be 64 c8 15 83 44 3c 2e 2a .....w2.d...D<.* 0490 57 a0 01 78 c6 f1 a4 5f 23 c2 e6 3c 48 6e e5 af W..x..._#..<Hn.. 04a0 30 d3 e4 f4 b3 db a3 95 20 ed 7e 56 e8 ee 63 2f 0....... .~V..c/ 04b0 60 be 7e 07 f7 1e 8c 14 a2 34 e7 f8 3e bb 6e cf `.~......4..>.n. 04c0 7c 1d 4c 57 9e ed fc 07 d7 9c f1 97 19 bf ab 5e |.LW...........^ 04d0 53 fa 97 74 0f ca a2 e5 54 e6 0b 06 46 bb 7e 63 S..t....T...F.~c 04e0 1f 97 c2 30 84 2c 8d 7e d0 0a 71 fe aa 61 e3 80 ...0.,.~..q..a.. 04f0 54 13 ea 73 0f 6f 75 23 0b 56 51 3e ff 46 e8 ae T..s.ou#.VQ>.F.. 0500 0f cd 50 d2 ce 65 6f 19 ce a8 8f c5 3a d3 80 d0 ..P..eo.....:... 0510 c5 64 44 bb d1 83 29 bc cc a5 10 02 aa cb 2f 0d .dD...)......./. 0520 2f fc 64 c7 fb ab 8e a1 60 59 bf 6f 9f 98 f7 c5 /.d.....`Y.o.... 0530 bf 12 2d 2f 79 37 2e 4a 9e 00 09 fc 91 16 45 d5 ..-/y7.J......E. 0540 d1 59 c2 4b a2 e6 0c cb 7d ce ef 8f d4 75 27 b1 .Y.K....}....u'. 0550 37 3e 1b bb fd e5 d9 c9 59 4c c0 05 5c c8 c2 27 7>......YL..\..' 0560 53 91 f2 25 93 fb 47 68 5b 7a 5f 69 e6 f7 ec cf S..%..Gh[z_i.... 0570 2e a9 77 16 af 22 8e cd 05 09 cc 3b 7f bf 44 1d ..w..".....;..D. 0580 8b a6 13 f1 ae e7 4e 40 97 80 83 43 89 7f d0 34 [email protected] 0590 05 13 17 fb 12 5b 73 ff 39 8e 87 55 ca 06 2a 4f .....[s.9..U..*O 05a0 9c 27 3c 4f ef 55 ca 57 .'<O.U.W No. Time Source Destination Protocol Length Info 20690 245.607385 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=244057 Ack=4145 Win=1002 Len=1448 TSval=596649 TSecr=729919 Frame 20690: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 244057, Ack: 4145, Len: 1448 Data (1448 bytes) 0000 88 a2 d2 c4 0f ea 15 0e b5 54 2b 1d eb 49 45 0f .........T+..IE. 0010 4b 34 fc 19 06 92 11 8f e7 4a 4a b3 b2 24 5b 4a K4.......JJ..$[J 0020 bb ed 60 5e 28 eb 78 37 32 3a e4 ad 42 92 57 24 ..`^(.x72:..B.W$ 0030 d0 19 f4 90 7d 9b 83 5d ee 5d a3 41 40 bd 12 ef ....}..].].A@... 0040 b3 44 08 e5 f5 82 c4 17 74 eb a6 90 0c 2f 66 f0 .D......t..../f. 0050 9d bf 48 29 58 c2 aa 0c 7a 96 d9 8f e9 a9 4a df ..H)X...z.....J. 0060 fa c9 df 8b 3b 4b 70 1b 00 99 1f 6b fd 77 6c 42 ....;Kp....k.wlB 0070 00 1e 2c 1e 24 3b 35 fa 6a 40 8c c4 9f fb e0 32 ..,.$;[email protected] 0080 11 a1 a5 a9 1e 2f 1c 69 60 d2 f0 47 74 71 d1 33 ...../.i`..Gtq.3 0090 d3 cf e6 8c 1f 0f 3c 21 a3 07 a9 a0 f1 17 4e 70 ......<!......Np 00a0 36 0e 02 23 ee 41 c4 5b cf 3d f2 94 a6 f6 77 2e 6..#.A.[.=....w. 00b0 f8 07 ee 66 b5 17 8d dd e3 e8 f3 7e e1 2a 30 2f ...f.......~.*0/ 00c0 e7 da 81 5f 33 2c 7c 9d 27 2d 47 3e bf 73 ed dc ..._3,|.'-G>.s.. 00d0 ab fe 09 e0 3a 77 dc 98 1c 3e 1e ac ee 63 3b 14 ....:w...>...c;. 00e0 cd 2a 6d 6c 0f e4 04 3f 5f 1e 23 a3 34 00 7f 1f .*ml...?_.#.4... 00f0 cc f0 cb ad 60 09 36 32 11 9a 41 35 d3 2b 36 d0 ....`.62..A5.+6. 0100 9e e5 76 5e 32 55 2b 6d 71 27 4d 02 55 b7 a3 44 ..v^2U+mq'M.U..D 0110 27 c1 81 f8 f4 01 9f ec c7 56 04 ea fe d0 89 e4 '........V...... 0120 f6 8f 30 5a a5 d3 47 27 bc a6 1f 0a 80 39 8d 2a ..0Z..G'.....9.* 0130 0d 6c 41 d5 54 26 1c 8d b5 84 81 15 48 14 14 7c .lA.T&......H..| 0140 84 22 e1 58 a7 e4 9d 7b 82 6a ae 11 0b 71 7b e9 .".X...{.j...q{. 0150 3b a7 44 28 e0 59 5b 51 81 56 93 d4 dd ba 40 25 ;.D(.Y[Q.V....@% 0160 e1 a0 aa 5a 64 8d 76 c1 c1 1c 35 f8 bc a9 42 91 ...Zd.v...5...B. 0170 a9 78 87 a0 54 4e f8 51 d8 23 8a c5 f9 f9 80 99 .x..TN.Q.#...... 0180 3e c4 1e 3f 5c a5 83 bb 76 3a fe 44 62 ce 10 84 >..?\...v:.Db... 0190 ad bd 82 2c fe de 40 45 33 38 79 18 b7 da c4 15 ...,..@E38y..... 01a0 4b 1d aa df 13 c4 80 fd f9 4f ed 69 ca 79 79 9e K........O.i.yy. 01b0 70 80 7d 24 e4 44 b1 5b fc 96 d3 17 54 41 1a a3 p.}$.D.[....TA.. 01c0 11 84 4a bc 11 76 81 5a 63 84 51 8f 2b e3 c3 fd ..J..v.Zc.Q.+... 01d0 30 18 27 ea 4a 0d 47 5a 39 fe 28 02 87 d0 6b 02 0.'.J.GZ9.(...k. 01e0 d6 a8 31 5f f4 ba 73 b0 d6 8f c9 ab b2 82 41 e0 ..1_..s.......A. 01f0 af 13 67 f2 3f 46 e9 d5 c6 8c 3c 05 6e f2 b4 1a ..g.?F....<.n... 0200 45 d3 0b f0 09 43 d3 f7 1e d4 b4 3e e2 5c 1d 3f E....C.....>.\.? 0210 f8 8d 34 a1 86 78 d7 66 e5 9d a3 a8 3f ea 42 36 ..4..x.f....?.B6 0220 ba 12 e1 89 f9 49 cc 38 60 a6 1a c6 88 00 39 8a .....I.8`.....9. 0230 62 6d ee a8 bc 14 9f 65 7f c9 89 31 91 6a 2b 8d bm.....e...1.j+. 0240 7a 5f c1 44 82 29 8c fd 18 a6 84 cb 65 01 65 b7 z_.D.)......e.e. 0250 d4 75 c0 d8 0c f7 e9 1f 0f 8d f3 53 71 24 a5 ad .u.........Sq$.. 0260 e6 b7 44 fd 63 8d 89 2f 0e 5a 02 15 14 8b 69 5d ..D.c../.Z....i] 0270 8e d6 ab 82 0d 49 eb 77 07 8f 75 4e 02 6e b6 36 .....I.w..uN.n.6 0280 c5 9a 73 6b 4d 8b 9d 05 85 f2 4a 0a 4a af c8 05 ..skM.....J.J... 0290 57 c9 80 2e be 7a a1 cc 7f be a8 81 3b 58 8f 99 W....z......;X.. 02a0 f8 be 3e a2 69 3f 2f 91 9a dc 3d 4b 87 1e 54 ec ..>.i?/...=K..T. 02b0 b5 59 21 b4 b8 5c 52 75 a7 ec 85 21 5c c3 98 e4 .Y!..\Ru...!\... 02c0 7e 03 61 47 8f 5e 43 18 f9 a6 92 27 b4 08 9f 88 ~.aG.^C....'.... 02d0 01 d6 db bd 75 df 2b f1 f6 cc 60 da ba 0e c0 9d ....u.+...`..... 02e0 3a 73 a4 b7 36 52 ee 78 fd 49 03 49 ed 9d c9 3d :s..6R.x.I.I...= 02f0 cb 77 78 c3 6c b8 86 b8 7d 77 92 6d c8 66 97 59 .wx.l...}w.m.f.Y 0300 10 18 5f 29 33 02 75 b3 d2 8a 97 02 cf 89 7b 5b .._)3.u.......{[ 0310 5e 3d 96 fe ff 79 23 cf ec 80 bf 49 ce 5d 00 18 ^=...y#....I.].. 0320 d2 34 54 c9 b6 2e 57 85 16 62 fa c6 02 20 d8 01 .4T...W..b... .. 0330 fe 11 e9 29 03 0c 49 a1 3e 37 23 77 e2 28 94 62 ...)..I.>7#w.(.b 0340 01 74 db ab da aa a1 08 b1 3d 14 e9 1b 20 f8 07 .t.......=... .. 0350 6d 34 5d a5 60 b4 40 9a 90 aa f1 9e 7a 2a 9e bd m4].`[email protected]*.. 0360 eb 4b c4 0c ea 45 4f 01 e2 b1 fb 11 44 f1 25 cb .K...EO.....D.%. 0370 40 d0 da 4b d8 81 01 f6 c9 24 51 8b 6d a4 a0 57 @..K.....$Q.m..W 0380 96 2b fe 95 47 87 51 fb 5d 49 f1 ab 18 62 db ad .+..G.Q.]I...b.. 0390 3e f2 79 64 b2 bb 17 f3 52 0c c1 57 c6 c2 de 44 >.yd....R..W...D 03a0 8e 35 5e 6f a4 21 1f 77 e7 32 b8 98 01 2e f9 74 .5^o.!.w.2.....t 03b0 16 4a 42 23 16 46 54 5e 4e 28 39 f4 52 14 00 b8 .JB#.FT^N(9.R... 03c0 b6 f9 7a 90 a7 ee 4c 05 e2 f8 35 d0 05 63 3b 42 ..z...L...5..c;B 03d0 0d e3 b6 74 db 82 60 e7 66 d4 ab bc 33 8e f3 04 ...t..`.f...3... 03e0 86 dd 9f c2 9f 20 e4 c7 b7 5a 2f 14 a6 aa 44 1a ..... ...Z/...D. 03f0 8c 7b 31 b2 08 d0 af b0 30 6b b5 6f 91 eb 79 17 .{1.....0k.o..y. 0400 91 3c 22 25 b5 b8 10 42 ad 0b 9c d4 4c 93 ab bb .<"%...B....L... 0410 8a 3a 1e 56 9a 25 f1 05 c4 9e 04 cd 2c 7d 5c 1d .:.V.%......,}\. 0420 91 3b 1a fd 1e b1 f2 d3 b6 56 a9 63 9c 6a 73 fd .;.......V.c.js. 0430 88 8e fe 68 85 6b cc 53 4b cf 49 17 6f a6 82 e2 ...h.k.SK.I.o... 0440 ea 0e 86 76 3d f4 c4 1b ec fe 38 32 37 e9 71 43 ...v=.....827.qC 0450 04 bf 4e cd 9a d1 fe e8 b1 91 c9 a4 37 68 cd dd ..N.........7h.. 0460 9e e5 ca 3a 50 c2 f6 08 5a 68 d8 69 f6 3a 77 4d ...:P...Zh.i.:wM 0470 f2 af 06 b9 d9 34 db ca 21 94 41 12 97 b7 e4 0d .....4..!.A..... 0480 1c 9c 04 d3 a9 eb 50 71 e0 5a df c5 fd 3e cb 2c ......Pq.Z...>., 0490 10 7e 6d 2f 1c cd c6 c7 6c a3 bc cf 5d f2 ae 1a .~m/....l...]... 04a0 c3 d5 df 72 a1 b8 99 22 71 ee 31 86 7b 4a f4 d0 ...r..."q.1.{J.. 04b0 ce d0 54 4a d4 bd b3 23 4d 05 b3 7d 7f 16 75 11 ..TJ...#M..}..u. 04c0 65 c5 40 93 91 9a 52 b7 a4 29 64 b9 a9 40 11 c8 [email protected]..)d..@.. 04d0 8f 14 c4 19 2d b0 b2 c3 3d 4c 03 6a 97 4e f8 ba ....-...=L.j.N.. 04e0 34 13 56 fb b2 a7 7a ed 3c 1a b8 52 9c fa 9a 8e 4.V...z.<..R.... 04f0 f5 4b 10 c4 5a 96 f8 8e 99 d4 5b b6 74 f7 31 56 .K..Z.....[.t.1V 0500 81 78 c3 a5 13 d3 09 02 18 47 d5 21 93 a1 31 43 .x.......G.!..1C 0510 a3 1c d0 bc 46 25 9b 52 15 1e 72 d5 a4 47 54 cf ....F%.R..r..GT. 0520 f8 64 b6 71 d2 37 77 6b 68 07 03 b7 d7 7d 6a 55 .d.q.7wkh....}jU 0530 11 46 61 b6 17 61 de 96 d9 8d ad 39 d0 22 50 22 .Fa..a.....9."P" 0540 7d ed c1 b0 1d e6 1d 19 8b 8e 10 6c 21 4f 8f 7a }..........l!O.z 0550 60 21 56 33 33 60 97 11 e8 ac d3 3e bf 74 b1 25 `!V33`.....>.t.% 0560 44 91 c1 82 67 f6 ed 47 a0 35 4c 56 bb fe f1 19 D...g..G.5LV.... 0570 f1 30 1e b8 c2 2c 1d 52 4b 84 8b 26 46 e5 8a 00 .0...,.RK..&F... 0580 bb 1e c7 4c 07 94 c4 85 f6 76 40 ee 02 cd 4c 04 [email protected]. 0590 05 2d 12 a2 3d 6a 0f 14 68 23 df 0a ae 4d 13 66 .-..=j..h#...M.f 05a0 90 75 82 fd 01 00 04 c1 .u...... No. Time Source Destination Protocol Length Info 20691 245.607490 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45168 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 20691: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45168 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 20692 245.607565 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=4145 Ack=245505 Win=65535 Len=0 TSval=729938 TSecr=596649 Frame 20692: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4145, Ack: 245505, Len: 0 No. Time Source Destination Protocol Length Info 20693 245.607676 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=245505 Ack=4145 Win=1002 Len=1448 TSval=596649 TSecr=729938 Frame 20693: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 245505, Ack: 4145, Len: 1448 Data (1448 bytes) 0000 ac e8 5f 54 27 ee 14 fd 2f 82 6a 61 0a e8 ba 95 .._T'.../.ja.... 0010 54 d3 78 a2 bf 73 97 ee 98 63 4d 3d 46 20 0e 54 T.x..s...cM=F .T 0020 fd 41 40 69 e9 82 ff b5 cc ad a8 7d da e3 1c 17 .A@i.......}.... 0030 ab 7d e0 9f df a1 cb 8d ed bc 63 a6 1b 34 60 56 .}........c..4`V 0040 12 94 37 fd af 0d 30 96 09 e3 29 e3 40 46 47 82 ..7...0...).@FG. 0050 75 8c c7 88 0f a8 65 61 5f 58 7c 20 3c f7 e9 9c u.....ea_X| <... 0060 fc 94 cc e7 da 68 f0 05 4f 1f c5 65 22 eb 5f e2 .....h..O..e"._. 0070 04 3c 5a 9a b5 85 f2 03 41 7e 2c ad d4 c6 52 5e .<Z.....A~,...R^ 0080 f1 11 f8 fd 35 e1 24 e5 37 ce c9 07 b2 56 82 99 ....5.$.7....V.. 0090 30 a7 48 0d 6f 3a 78 26 e0 7f bd 9e 2a 15 0a a9 0.H.o:x&....*... 00a0 95 c9 47 c8 27 c6 fe bc bd 75 fd 65 1f c4 dc e7 ..G.'....u.e.... 00b0 01 a2 6b f0 6c d6 24 3b 63 7e 26 d1 ad 13 46 3d ..k.l.$;c~&...F= 00c0 0d 74 c8 22 70 27 f9 f7 e0 35 7f 4d c7 a6 37 f5 .t."p'...5.M..7. 00d0 42 a9 d7 bb 38 76 51 91 6f 70 c8 55 28 0f 99 c9 B...8vQ.op.U(... 00e0 99 e1 26 83 64 99 2c 3f 60 7b 84 fc 9e 6d f5 db ..&.d.,?`{...m.. 00f0 2e 4c e9 3d 2f e4 c3 2d 7f b1 78 7b 9f e5 3f 8c .L.=/..-..x{..?. 0100 2d 92 d6 9e d5 9f 7a 5c 32 0a 34 5e da 7e b0 dd -.....z\2.4^.~.. 0110 fc 25 37 e5 cc 6b 2e b1 89 66 42 5f dc 0b 00 f3 .%7..k...fB_.... 0120 bb 4a de 9b 32 ee b7 26 ba f8 ae 1e 08 20 62 3c .J..2..&..... b< 0130 26 f2 22 31 ca c1 35 c8 fb b8 e1 cc 6e 65 44 11 &."1..5.....neD. 0140 13 bb 95 58 ad 37 d3 95 d6 f3 e2 e3 2a 54 ad f4 ...X.7......*T.. 0150 c5 58 a1 07 8d f7 ce f9 61 fd c1 28 ab 3b f7 1b .X......a..(.;.. 0160 d9 24 ec 03 ce cf 42 b4 29 66 1c 27 d4 5b 5a b8 .$....B.)f.'.[Z. 0170 a4 19 fe 21 2e be 4d 23 b3 82 40 53 52 00 d0 74 ...!..M#[email protected] 0180 df e5 6f 9c cf a8 f9 12 41 c9 85 e7 66 b5 b8 df ..o.....A...f... 0190 74 b2 48 1a 1e 85 c9 74 37 26 8c 88 96 f0 eb cb t.H....t7&...... 01a0 08 7d 23 58 12 10 53 7d b7 e4 9d e1 35 47 4e 42 .}#X..S}....5GNB 01b0 e2 26 b7 08 fd 06 79 82 cf a4 ee 59 63 a1 49 02 .&....y....Yc.I. 01c0 96 22 93 09 50 50 e4 40 a4 86 da 29 d2 e6 76 7a ."..PP.@...)..vz 01d0 c2 a0 59 e8 e1 6a ce e7 96 de ba 6d 91 1d 7b e7 ..Y..j.....m..{. 01e0 4f e3 2d e6 6c 78 9d 9a 18 0c 9e 18 97 93 f9 eb O.-.lx.......... 01f0 71 1a a7 b2 ff 65 7e 53 55 8a cf 38 7f 3d a9 9d q....e~SU..8.=.. 0200 8a 23 f7 30 ef 00 bd d8 52 3d 89 dc 20 7f 0f 25 .#.0....R=.. ..% 0210 d7 44 8e ef 78 99 24 2c 7d 4b c8 86 6e 67 81 ff .D..x.$,}K..ng.. 0220 f0 a2 a7 66 4b 75 ec 87 1a 9c 35 aa 81 53 32 85 ...fKu....5..S2. 0230 18 2f 80 f7 8d b1 a5 c4 ad b8 d8 3e 9b 94 be ed ./.........>.... 0240 85 df 6d cc 5b 68 ce 94 52 dc f2 e6 fe 5f d4 a9 ..m.[h..R...._.. 0250 ac 43 9e 80 0e b2 64 92 83 9c 13 5d 04 b2 67 23 .C....d....]..g# 0260 68 83 a2 2b 64 f1 0e e3 ff 1c 30 26 c6 b9 15 95 h..+d.....0&.... 0270 8c 9b b6 52 df 7c 21 2b da d3 2e b3 04 15 fb 43 ...R.|!+.......C 0280 b7 3c 90 99 aa 6d c9 96 ce f3 97 48 75 3d a1 c9 .<...m.....Hu=.. 0290 5f a2 70 a4 0d 7b e8 ec 39 02 f9 00 fe 28 1d 0b _.p..{..9....(.. 02a0 e1 b3 eb 04 83 03 67 3a 32 06 9a b1 5a ea 2c ec ......g:2...Z.,. 02b0 3f 39 7c e0 4c e4 92 c3 97 1e 15 71 e0 f2 95 d6 ?9|.L......q.... 02c0 e2 9b b8 a4 1c de 8d 97 da f3 0d c2 eb 35 8c fb .............5.. 02d0 d9 e6 b8 20 af 8d 30 09 7a fc d9 83 52 d3 ea 5a ... ..0.z...R..Z 02e0 4a 3e 23 80 24 91 24 bc c5 21 65 6c ff 08 05 2e J>#.$.$..!el.... 02f0 04 88 88 f1 f2 2b 3b 33 27 59 af 0b 5c 73 b3 b1 .....+;3'Y..\s.. 0300 14 c0 6e 22 2a a4 31 85 db 23 00 2f 6a 0f 2e c4 ..n"*.1..#./j... 0310 a5 61 b1 42 2b 4b fd 8f 5d 28 88 c0 7b a8 ce b0 .a.B+K..](..{... 0320 25 c2 a0 53 43 22 08 6b 11 54 76 3f 7e fb f2 db %..SC".k.Tv?~... 0330 a6 03 5e 8f f3 e9 70 ca 57 e0 32 fc c5 ba 52 31 ..^...p.W.2...R1 0340 14 fb f9 c8 73 4b a2 9b 80 76 c7 0f de 24 11 d8 ....sK...v...$.. 0350 f0 d7 50 36 ad 2b de 78 69 bd 19 f4 06 56 d7 f6 ..P6.+.xi....V.. 0360 bf 78 b7 cf fe 8c ef fc 59 ce 4c f5 e6 d2 a6 dd .x......Y.L..... 0370 3a 66 2f 28 d0 5a ca 48 88 22 04 d1 ea 7c 07 6f :f/(.Z.H."...|.o 0380 a0 3f 0b 6e cd 2f a8 53 84 d4 cc e0 2d ed 5e 3e .?.n./.S....-.^> 0390 e0 b0 6c 25 45 e9 ab 47 95 52 50 ac 01 f4 57 fa ..l%E..G.RP...W. 03a0 4f 09 2d ab 1e e3 6e 8b f9 e2 b3 f0 a9 eb 54 8d O.-...n.......T. 03b0 83 db fa 4b a0 c7 9c e7 af 83 89 34 55 f4 4c 10 ...K.......4U.L. 03c0 05 6f 07 7d fa b5 97 05 dd 62 1f ad c7 8f 43 7f .o.}.....b....C. 03d0 0d 5f 9c 53 c6 2d b5 20 7a bb 8a bd 55 34 36 f1 ._.S.-. z...U46. 03e0 58 77 b3 c9 a1 88 50 f6 d4 ca 0d bb f5 94 bb f5 Xw....P......... 03f0 a6 e7 f0 e5 65 51 35 64 9a c2 58 50 c7 3e 6f 7f ....eQ5d..XP.>o. 0400 6e ca 9c b3 a4 5b 3a 3f ca ce 92 a4 da f0 a6 79 n....[:?.......y 0410 78 79 a9 a3 2c 23 a8 ff 32 89 93 38 0a 35 0b 33 xy..,#..2..8.5.3 0420 08 b9 27 33 0b c0 69 9b ea 0b ab ca fd e9 3a f9 ..'3..i.......:. 0430 74 8f e6 51 92 4c 66 40 de d2 eb db 7c e8 6c 76 t..Q.Lf@....|.lv 0440 e3 0d d1 7f 32 3d 73 cd 2e 0e 8b 6d c9 d5 f4 0a ....2=s....m.... 0450 e5 7e 18 4e 4b 91 0a 90 59 c1 0d 3a 6c 27 b6 ba .~.NK...Y..:l'.. 0460 7a f7 7a 1a 1f 88 29 10 b0 e5 d0 c1 5a f7 55 13 z.z...).....Z.U. 0470 d6 ab 1b 8f 95 34 3e 5d 28 1f be 1f df 9b ec 0f .....4>](....... 0480 b8 c4 75 02 3d ee f8 1d 79 3f 08 90 e6 47 0c 24 ..u.=...y?...G.$ 0490 c9 d2 7c f5 8b d0 42 6c 41 33 1a 6a 93 22 cc 42 ..|...BlA3.j.".B 04a0 e1 1d 65 33 f0 9e 25 ff 30 40 a4 dc bc b3 42 55 ..e3..%.0@xxxxxx 04b0 7f da 08 90 77 a8 59 67 ea 94 4c 2e 33 f5 80 09 ....w.Yg..L.3... 04c0 92 e2 c6 46 5f f7 aa 54 b1 e6 b1 e2 98 96 b3 00 ...F_..T........ 04d0 ec ea 31 e0 3b 0d 65 1f b2 11 8d 90 ff f1 0b 25 ..1.;.e........% 04e0 cf d6 34 27 6a c4 b0 c4 63 33 12 d6 7c 94 76 5b ..4'j...c3..|.v[ 04f0 69 f6 53 71 c9 11 85 2b bb 91 36 1b 7e 66 cf cd i.Sq...+..6.~f.. 0500 72 c9 c4 33 38 40 50 51 9d 83 4a 77 f3 52 03 7a [email protected] 0510 ee cf 4e 22 63 c1 67 81 01 b7 22 2f 8c c4 70 5a ..N"c.g..."/..pZ 0520 5e 49 35 68 ee 74 94 3e bb e2 d0 f4 b4 ec 9d 36 ^I5h.t.>.......6 0530 cb ab 2c d5 a1 39 35 cb 47 6c be d2 02 6e a3 5b ..,..95.Gl...n.[ 0540 e1 93 19 e9 eb 56 7a b1 72 b3 e4 02 d6 5f 68 b6 .....Vz.r...._h. 0550 fe ed b7 09 df 44 c7 d7 7f 29 f8 70 fb 85 61 38 .....D...).p..a8 0560 58 69 4b 2d 9e 81 9e ee 31 7e c8 8c 1d c8 44 f8 XiK-....1~....D. 0570 47 db 91 ef 74 99 52 2d 33 f9 0a 12 ee 05 08 90 G...t.R-3....... 0580 b7 97 84 da 13 36 9d 58 c1 8f 34 0a 81 98 76 99 .....6.X..4...v. 0590 20 52 a6 49 40 f4 c9 ec 60 2e 47 f4 ab 9f 72 78 R.I@...`.G...rx 05a0 82 67 6c 91 0a 5b 22 69 .gl..["i No. Time Source Destination Protocol Length Info 20694 245.607780 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=246953 Ack=4145 Win=1002 Len=1448 TSval=596649 TSecr=729938 Frame 20694: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 246953, Ack: 4145, Len: 1448 Data (1448 bytes) 0000 cc 0d ed f9 96 75 96 e0 56 64 58 c9 ca d8 1b a3 .....u..VdX..... 0010 80 46 92 0e 82 e0 77 fc 4e 93 b0 53 7f 9a a4 4f .F....w.N..S...O 0020 13 68 e9 05 a8 09 0d e5 5e db 9a 83 5b 83 5b db .h......^...[.[. 0030 ca 8e 33 f2 9c 26 5b dd f1 7e 52 c5 5f 5d 9b 25 ..3..&[..~R._].% 0040 46 6b 72 90 de 20 31 e8 8f 18 b9 90 19 4e e0 30 Fkr.. 1......N.0 0050 c5 4e 75 7a 40 bb 65 96 84 40 31 d9 08 15 e5 10 [email protected]..@1..... 0060 bc 56 3c e9 2d 7b e2 e1 e9 2f d7 b1 a7 0c 46 4f .V<.-{.../....FO 0070 c9 2b be ce b9 0e 06 8f 33 55 b9 17 0a 50 e1 c5 .+......3U...P.. 0080 59 c8 b1 c2 d9 99 1b 66 39 b7 d8 94 3c 7a 6a f3 Y......f9...<zj. 0090 20 25 4d f4 f3 d7 6a ef 0a 2a 61 0b 14 b4 eb 63 %M...j..*a....c 00a0 06 1a 86 66 65 e5 9d 10 ba 30 4c ef 99 df ac 6f ...fe....0L....o 00b0 64 c2 01 dc d5 8e 9d f4 6d 63 d5 58 85 fc fb e6 d.......mc.X.... 00c0 2d 5d a9 4e 0c 6d 16 9f 63 23 b4 e6 d2 eb d4 ac -].N.m..c#...... 00d0 a1 0e 5a 4c 1d e0 36 ac 70 b9 ed 2a e5 33 d7 51 ..ZL..6.p..*.3.Q 00e0 a0 77 ea 5f b2 22 00 e1 e2 9a 61 6a f6 63 c2 70 .w._."....aj.c.p 00f0 a6 86 7a 70 b4 8e 68 cc 96 4c d4 52 7c 71 35 12 ..zp..h..L.R|q5. 0100 22 e9 b9 a4 65 65 91 7f 83 d8 7f 60 64 57 57 25 "...ee.....`dWW% 0110 d4 bb 0a fe 42 d9 86 5b 93 ae 24 75 3e 23 05 94 ....B..[..$u>#.. 0120 ec 32 48 49 89 3e 42 59 17 34 18 43 1a 2e 27 ec .2HI.>BY.4.C..'. 0130 77 3c 02 68 d2 e9 16 9c 8b 50 77 e9 66 fa fd b6 w<.h.....Pw.f... 0140 58 f5 e8 e6 c6 66 8d 87 6d ed 35 f9 b4 30 90 ab X....f..m.5..0.. 0150 b0 e9 ed 22 72 3d 5f 6f 6a 56 e5 d8 a4 be e5 76 ..."r=_ojV.....v 0160 fa 19 f2 d9 54 5a 12 76 2d 06 ba be e3 26 d0 bc ....TZ.v-....&.. 0170 f4 e0 cf 14 a4 96 eb 46 02 00 ce c1 aa 80 75 bc .......F......u. 0180 3c ea ae 55 00 68 a5 35 57 f5 bc 69 31 06 1a c6 <..U.h.5W..i1... 0190 7f 58 0c e5 20 74 02 cd 09 ae 2e ec ce 24 42 5f .X.. t.......$B_ 01a0 b8 86 5d 7a dd 53 18 4e f1 4d 5f 41 8b a7 be bf ..]z.S.N.M_A.... 01b0 65 fc 4f 10 ed e5 d7 45 c1 66 cc 8a a3 c8 ea 09 e.O....E.f...... 01c0 64 2a 20 c6 c2 53 bd e7 12 54 80 8c 1a 43 16 26 d* ..S...T...C.& 01d0 00 a5 76 4f 74 20 dd 3b a5 7b 0f 15 f9 61 45 0a ..vOt .;.{...aE. 01e0 9c ff 46 34 5a 79 4f 46 32 2b 90 cb 62 d0 e1 52 ..F4ZyOF2+..b..R 01f0 ba 5e 81 f7 59 30 08 98 07 a1 55 5e 13 26 c3 aa .^..Y0....U^.&.. 0200 53 b3 01 bf aa 4b 0e 63 85 bd 73 e2 00 eb b4 5e S....K.c..s....^ 0210 ca ce da be 8a 10 5a 70 97 a2 28 30 0b 2b 4b 73 ......Zp..(0.+Ks 0220 1b 41 af be 02 52 6c ee f0 dd 3a c1 a0 4d eb e7 .A...Rl...:..M.. 0230 08 7b db 9e cc d5 c6 93 7f 03 49 4c 8e 3a e3 67 .{........IL.:.g 0240 cf 35 23 e2 30 4f 81 4f 5e 64 95 8c d8 1b 79 5d .5#.0O.O^d....y] 0250 e3 c7 64 74 43 0c e5 ce 65 6e 01 d3 f6 70 96 1f ..dtC...en...p.. 0260 a7 41 ab 62 78 7b 97 85 0c 19 6d 71 ca 86 a6 67 .A.bx{....mq...g 0270 81 17 d6 d5 5c 46 5c 46 ac ac 04 84 f6 86 05 30 ....\F\F.......0 0280 9e d2 9d 9e f8 6f a9 f1 4f a7 1a 82 d4 93 69 8a .....o..O.....i. 0290 ad 80 d3 cb 5f b9 e2 32 5b b6 0a 4b f5 c3 30 36 ...._..2[..K..06 02a0 bc 9d 95 df fb 95 3b da 5a 8f e1 c7 bd 96 06 ac ......;.Z....... 02b0 44 e6 b0 f8 25 db fb b8 b0 6e 5b 01 0d bc f0 c5 D...%....n[..... 02c0 21 1a a2 e5 60 75 44 bf 01 c6 b1 2f e8 8d aa 05 !...`uD..../.... 02d0 45 1f f1 f0 ad 55 3a cb c2 86 44 16 e1 ab 90 7b E....U:...D....{ 02e0 f7 04 08 c2 98 ef 85 2e e6 4c 29 50 e7 09 6e 82 .........L)P..n. 02f0 88 3d 95 4e 0d 28 54 cc 62 3f e4 09 3f 98 30 45 .=.N.(T.b?..?.0E 0300 35 32 61 18 24 48 80 30 24 f5 5b 56 55 77 bc ec 52a.$H.0$.[VUw.. 0310 6e 84 d6 8a 48 86 dc 79 e8 08 34 d8 4e 52 1a af n...H..y..4.NR.. 0320 0e 75 3c 40 72 b3 0d d4 17 94 4b 08 a7 62 f5 47 .u<@r.....K..b.G 0330 2f 18 d0 8b 26 c7 a9 85 04 44 69 cd 2c 30 0f ee /...&....Di.,0.. 0340 49 a5 47 12 4a 4e 80 a5 e2 40 87 ee 87 95 02 7f I.G.JN...@...... 0350 03 1f ec fe d7 97 5c 32 8b 27 a6 9f b1 46 7c e1 ......\2.'...F|. 0360 18 5e 06 d1 76 61 d3 69 d8 e6 69 de 5f 23 bc cf .^..va.i..i._#.. 0370 47 36 c5 dc bd 5f fc 24 c1 52 39 60 49 ea bb a1 G6..._.$.R9`I... 0380 d6 e7 66 d0 c9 21 51 e4 05 bb 75 4f 8c f0 a5 02 ..f..!Q...uO.... 0390 d3 d5 84 07 6e 35 6a 05 9f ce a1 26 2f 03 ee 1c ....n5j....&/... 03a0 37 38 92 1d f0 8e d1 fc dd 6d 02 d6 33 1c d9 a1 78.......m..3... 03b0 5c 66 4d 59 70 c0 79 93 50 6a d6 55 12 34 8d 1d \fMYp.y.Pj.U.4.. 03c0 75 47 c8 63 be 3a 27 a4 87 4f 84 0a 46 5e b2 2a uG.c.:'..O..F^.* 03d0 91 c4 6a 1e 2b bd 23 43 90 b4 63 00 13 d5 a9 22 ..j.+.#C..c...." 03e0 d0 78 53 61 29 33 9d 68 0b 98 7b 47 69 a6 2b d5 .xSa)3.h..{Gi.+. 03f0 b2 df 0d bf 3d 3b 24 55 be ff 8d 00 c1 ce 22 f2 ....=;$U......". 0400 2c f2 36 c7 b4 0c 3b d7 44 65 7b ee 4b 94 2f 87 ,.6...;.De{.K./. 0410 41 e6 b4 b5 70 e5 53 b1 82 d2 0d 67 c1 c0 ff cc A...p.S....g.... 0420 e3 6d 75 35 89 b5 9e 97 84 e8 b9 3e 7f 79 49 c6 .mu5.......>.yI. 0430 98 92 ca f3 ba 15 d3 a4 03 95 fc 40 9d cb a4 8e ...........@.... 0440 e2 72 e3 bb 16 c2 39 2f 60 2e d5 7a f6 1b e6 0a .r....9/`..z.... 0450 78 20 1b 61 d6 d5 09 7e 5d 4f 40 2a 2d e7 08 eb x .a...~]O@*-... 0460 d6 54 b1 c8 4b cf 7c d0 98 c6 09 9e 50 6c 85 82 .T..K.|.....Pl.. 0470 0b 6b f4 a5 19 4b 20 09 e3 7f 0b 5e 37 ba 73 19 .k...K ....^7.s. 0480 40 e2 26 e5 51 4d e9 42 47 35 2e 6b 5e fe 6e 31 @.&.QM.BG5.k^.n1 0490 de f0 9e 1b 7f d6 74 45 8f 71 b7 77 71 41 27 46 ......tE.q.wqA'F 04a0 3a 63 df f6 47 d3 19 95 8a d3 aa 0f 88 f6 02 c6 :c..G........... 04b0 6a 27 91 bb 4f 07 4d 00 28 c8 bf 7d 8c 18 b9 a6 j'..O.M.(..}.... 04c0 09 2a 0e a4 9e 2c 2a fa a8 04 f6 48 f2 07 6e ff .*...,*....H..n. 04d0 1f ed 4b d0 c5 db c1 55 0d b6 99 ee f3 c5 bd c3 ..K....U........ 04e0 64 a5 5e 70 3b c2 3a 5d ff 7b 29 9d 55 b7 eb ca d.^p;.:].{).U... 04f0 61 ea 56 1c b8 0a 6d b3 eb a9 05 6d a9 75 b0 1e a.V...m....m.u.. 0500 7f cd 39 95 41 f8 5f 60 76 87 89 97 2f a8 19 50 ..9.A._`v.../..P 0510 2b b0 43 e6 a5 a4 1f eb 10 04 7c 36 80 27 c5 3c +.C.......|6.'.< 0520 0e 9d cd 3c 50 fc ec dc 2c d7 93 0f a2 bc f5 12 ...<P...,....... 0530 17 f2 34 fc 8b f9 f3 a0 2d 8a 8a e9 8d 99 de f0 ..4.....-....... 0540 bf 7c 12 a9 6d 02 6a 2e 89 04 c8 04 c9 ca b7 fc .|..m.j......... 0550 b4 83 66 2c 96 1c 83 55 7a e3 ab 52 d4 84 c7 78 ..f,...Uz..R...x 0560 8f 46 4f 66 d6 8d 19 3d da 88 d8 b3 d7 22 13 ab .FOf...=.....".. 0570 49 80 dd 7f f0 97 4a a0 fc 01 4e f8 be 68 dc 12 I.....J...N..h.. 0580 a9 24 9e 4b 16 9f 29 ba 3d c6 0e 6f 17 76 33 44 .$.K..).=..o.v3D 0590 8e 84 30 80 00 73 19 75 b5 a1 47 c1 b4 3f 12 7e ..0..s.u..G..?.~ 05a0 4d b7 7f a8 7f 9d c4 23 M......# No. Time Source Destination Protocol Length Info 20695 245.607889 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=248401 Ack=4145 Win=1002 Len=1448 TSval=596649 TSecr=729938 Frame 20695: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 248401, Ack: 4145, Len: 1448 Data (1448 bytes) 0000 43 93 17 ae 4c 5b 2b 17 7c 1b 6f 3e 57 29 f9 68 C...L[+.|.o>W).h 0010 90 d7 0e 08 19 d0 bc e3 85 5f a7 d6 b4 08 5b db ........._....[. 0020 4e 27 2b 8e b1 46 04 31 63 3e f2 9f f5 7d d4 ec N'+..F.1c>...}.. 0030 07 76 f7 ce c0 48 a5 e4 e7 8a 38 88 61 5c 28 a2 .v...H....8.a\(. 0040 97 d3 e4 3a 40 ea 01 91 d0 22 3c a7 3c 73 e1 9b ...:@...."<.<s.. 0050 2f cf 10 c2 89 77 51 7a 3b 19 d8 a0 38 c2 2a fc /....wQz;...8.*. 0060 6d 8c c6 89 d4 a0 d3 29 bf 70 17 31 8a 21 c7 db m......).p.1.!.. 0070 b6 b5 78 0a cd 3b 2b b5 b4 28 74 96 1e b6 c3 7b ..x..;+..(t....{ 0080 a1 2a e7 d9 b7 61 7f fc dd 24 49 d5 92 b8 c0 42 .*...a...$I....B 0090 fb 0e e5 9a c7 42 81 a0 76 05 25 19 ff 7d bc 06 .....B..v.%..}.. 00a0 e1 7c 3c cf 8c 11 50 ad c1 f6 7a 1f 0e f0 ba 97 .|<...P...z..... 00b0 da 89 cd 24 ac 06 5a cd 50 bf 58 56 b0 ff 6c 54 ...$..Z.P.XV..lT 00c0 72 21 c6 c7 04 cd 58 83 a3 f8 a5 34 8f 93 81 2e r!....X....4.... 00d0 a0 fe 36 4e 4c b3 a6 c9 16 58 cc c3 5c af 24 a1 ..6NL....X..\.$. 00e0 fd 09 1e ee 57 50 1b e5 80 1e 5f 68 b4 55 7d 09 ....WP...._h.U}. 00f0 04 39 21 1f a0 52 0a 62 25 86 81 c2 5a 92 c2 ea .9!..R.b%...Z... 0100 0a 27 db 96 f5 26 39 c5 c8 d6 32 5b 7a 18 92 63 .'...&9...2[z..c 0110 1b a9 b8 d2 de ff 41 99 ec 8c dd 01 ae 9a 05 ac ......A......... 0120 0b 61 d7 18 0b 4d 8c 39 54 97 5e e7 a5 b1 cd 2d .a...M.9T.^....- 0130 53 64 58 ec ac 80 2f c1 93 e3 2e 2d 3d 96 ff b3 SdX.../....-=... 0140 c1 bc 33 d9 df 9f e9 b8 ae c4 60 43 f7 89 49 1c ..3.......`C..I. 0150 4d d4 a0 0c 5f ce 55 e6 e4 ab 5d ea 53 fe 39 1d M..._.U...].S.9. 0160 c4 6d 45 56 69 de 08 11 b4 3e d1 74 a4 65 43 c9 .mEVi....>.t.eC. 0170 bb 6b b0 5a 8d f5 92 95 b2 c2 e8 ed 54 96 06 50 .k.Z........T..P 0180 5d 74 a2 92 4b 7c 74 8e 9a d8 fc 13 53 b9 0f c2 ]t..K|t.....S... 0190 45 9d 9b e0 cf b5 42 19 1f fc 8a 3d d9 90 ea ad E.....B....=.... 01a0 0e 21 f4 25 48 d9 6f d6 cd b9 08 1a 54 66 47 7f .!.%H.o.....TfG. 01b0 52 af 2a 04 0b 86 1b 79 83 b0 62 fe 19 a9 f8 4e R.*....y..b....N 01c0 c0 8c 1f 3a 1b c0 40 40 15 f7 97 13 c3 0e b2 df ...:..@@........ 01d0 dc 0a d3 0a 06 71 0e 36 5d 61 87 5a 22 5e 31 ee .....q.6]a.Z"^1. 01e0 ac 5b de 90 79 1c 5f a9 e1 12 2d 94 36 12 c1 07 .[..y._...-.6... 01f0 c2 7b e9 67 81 5e 5d d4 1a 4f 1a 1a 01 b7 b0 5d .{.g.^]..O.....] 0200 0f 5b c3 89 dd a9 09 d4 6e 36 4e 71 14 5b 0d 2d .[......n6Nq.[.- 0210 7e 8e 2f 48 b8 ec 1b 20 1d 70 74 39 5a 4b 4d 60 ~./H... .pt9ZKM` 0220 fc 7f d8 6d da 67 11 6b 0d 2d 3b df b7 bd c4 e4 ...m.g.k.-;..... 0230 c2 17 c4 23 d9 aa 6c a4 11 a9 a8 3a 66 7c 7f e3 ...#..l....:f|.. 0240 31 30 e2 8a 71 3a 01 39 41 f3 33 4b 5a 5c d7 79 10..q:.9A.3KZ\.y 0250 65 2e e1 da 9f e3 2c eb 8a 04 dd 5c d2 e1 68 84 e.....,....\..h. 0260 80 1a 63 19 ac 03 de 28 5a 92 60 c4 58 ab 94 e6 ..c....(Z.`.X... 0270 0e 8c ba ea d0 26 a3 29 84 e1 a4 c6 a6 7f 6a 84 .....&.)......j. 0280 be bf f4 9f 60 3f 21 26 16 cb 9b 5e 4f 99 97 83 ....`?!&...^O... 0290 5a e8 a0 6e 7c e1 3f 12 13 50 c4 92 5d 11 05 9e Z..n|.?..P..]... 02a0 e4 e7 be 4c de fc 0a 02 0c ba c4 5b 93 03 ca 43 ...L.......[...C 02b0 17 97 7e c2 b8 d1 1c 47 cd 73 ea 0e d0 23 56 62 ..~....G.s...#Vb 02c0 23 93 93 48 8e b2 97 e6 87 1a 8f ff 8c 42 f2 d2 #..H.........B.. 02d0 8f 06 09 5c 7c fc 82 f9 58 fb 95 e8 71 47 64 42 ...\|...X...qGdB 02e0 5c a5 c9 73 5d 1d 5b f6 4c 0d db 6f c3 65 c1 cd \..s].[.L..o.e.. 02f0 25 e7 d3 68 6f 7d fa 98 c4 34 61 de 45 95 f2 28 %..ho}...4a.E..( 0300 3a a3 8f c0 0d 54 0a 85 4a 10 0b 33 1a 69 a6 2d :....T..J..3.i.- 0310 8d 65 91 42 62 f2 e5 35 51 3b 26 f9 f3 a3 47 6c .e.Bb..5Q;&...Gl 0320 61 3f 5e e6 27 2c 62 91 75 fd 85 34 c8 b0 cf 54 a?^.',b.u..4...T 0330 92 57 b6 6d 51 46 eb 79 3c bf 85 ca 1c 93 23 62 .W.mQF.y<.....#b 0340 5c 85 f0 1a ef d2 e9 b8 d9 f9 e5 87 37 80 1e 0f \...........7... 0350 e7 af 10 b1 10 75 67 f2 70 5d c6 97 b3 eb fe 16 .....ug.p]...... 0360 c5 c2 78 30 2c 56 52 f5 75 f3 b1 fb 2f 84 4b 82 ..x0,VR.u.../.K. 0370 d8 f0 da 43 86 38 dc eb 7a 1f 21 bd 8b dc 35 44 ...C.8..z.!...5D 0380 64 69 5d 59 28 1e a9 0e c0 5a f4 0e 6c 06 f0 c3 di]Y(....Z..l... 0390 54 e2 f7 16 eb 33 c8 17 ac 0f 6e df 8f 39 04 8c T....3....n..9.. 03a0 d4 3b a9 fa be f2 0c 8f 98 f2 ae fb 12 c9 2e 94 .;.............. 03b0 e7 2a 18 4b b5 1f 18 f6 ba 6f e1 20 a7 3d 9c d0 .*.K.....o. .=.. 03c0 18 ab a1 31 e7 98 8e 57 82 2c 6e 3a c7 f6 4e d9 ...1...W.,n:..N. 03d0 00 f5 71 14 d9 d8 9e 47 8b a8 cf 5c e7 a1 53 0d ..q....G...\..S. 03e0 16 7e 09 b3 06 ff a0 55 7d a8 7c f9 76 52 0a 2e .~.....U}.|.vR.. 03f0 0e d7 da f9 d6 9b 91 17 da e9 7d 27 da b0 5b f1 ..........}'..[. 0400 ff e3 a5 43 49 ec 3c 4c 69 63 38 b8 c8 22 aa ec ...CI.<Lic8..".. 0410 2e 60 fc fa 16 27 26 e1 7e 3b 27 5c 11 8d 28 18 .`...'&.~;'\..(. 0420 98 20 c9 77 c2 48 4c 54 6e 9c fc de 01 5f 33 c7 . .w.HLTn...._3. 0430 a7 a1 a5 db a5 88 94 e9 38 c6 c4 1e 44 4d a9 11 ........8...DM.. 0440 b7 b0 34 9e ff 34 d8 86 a9 10 fb ae 45 6b 65 f4 ..4..4......Eke. 0450 50 81 42 bd 03 66 b7 00 c8 61 c9 bc a4 d8 d5 c7 P.B..f...a...... 0460 10 24 63 d9 73 db ea e6 25 9e 62 f2 f7 9c d9 dd .$c.s...%.b..... 0470 69 81 6c 70 b5 73 c9 4f be 98 23 46 33 58 7a 2c i.lp.s.O..#F3Xz, 0480 b0 40 42 a3 c4 e7 08 1e 43 bb 1d b7 9e e9 73 fc [email protected]. 0490 bf 0d 82 17 33 16 dc 93 a7 a1 aa 78 c2 1f 40 fb ....3......x..@. 04a0 ed 4f da 01 ad 3f ad 93 25 6a fb f6 e2 81 5a 98 .O...?..%j....Z. 04b0 f4 78 49 ef b8 85 42 03 42 52 73 78 ea d5 62 85 .xI...B.BRsx..b. 04c0 2b b3 56 62 58 53 f6 f4 25 82 9d 25 f6 cc 85 fc +.VbXS..%..%.... 04d0 43 56 fb 78 fc 36 c1 22 78 0b da f0 4a 37 ce 30 CV.x.6."x...J7.0 04e0 1d 9a 23 62 19 6e 19 73 27 fc 5e b2 34 3b cc 1a ..#b.n.s'.^.4;.. 04f0 fa 8a f4 09 f0 58 41 d1 24 bd 8f 66 a1 d4 5d a2 .....XA.$..f..]. 0500 94 a4 e7 cc 2b 78 a0 ed 41 be 0d 57 5f ad 85 60 ....+x..A..W_..` 0510 2f 9b 58 d6 44 e9 0b ec 5e e4 ca cf cf da fc bb /.X.D...^....... 0520 bf ae 5a 79 9d 06 20 f1 2a 3b f7 76 b8 49 96 6f ..Zy.. .*;.v.I.o 0530 c9 40 f6 fb 6b 7f 97 3b 3a 5c 30 55 13 97 73 71 [email protected]..;:\0U..sq 0540 6b e5 1f db 01 74 41 45 74 a5 74 d5 0f a3 cf 0e k....tAEt.t..... 0550 ed ce 84 35 c4 e7 3f a3 bd f4 32 4f 04 31 e6 d6 ...5..?...2O.1.. 0560 51 e2 31 2c 90 fc e4 93 2e e9 fe 8d 73 1a 9e cd Q.1,........s... 0570 e1 78 53 a5 ed c1 e3 de 7d 0e 35 71 c5 e4 dc dc .xS.....}.5q.... 0580 5a 6f ae 4b 38 e1 c2 d0 4e 40 28 dc ac 4c 99 59 Zo.K8...N@(..L.Y 0590 86 86 6f 76 eb 54 60 6f 00 22 88 02 92 97 0e 9a ..ov.T`o."...... 05a0 2b e5 a6 a8 5b 5d 48 70 +...[]Hp No. Time Source Destination Protocol Length Info 20696 245.607956 192.168.10.1 192.168.10.203 TCP 215 34433 > cds [PSH, ACK] Seq=249849 Ack=4145 Win=1002 Len=149 TSval=596649 TSecr=729938 Frame 20696: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 249849, Ack: 4145, Len: 149 Data (149 bytes) 0000 36 da be 23 26 8a 9f 56 20 dc 86 4c 56 59 c8 69 6..#&..V ..LVY.i 0010 31 96 ba 60 93 29 d9 ec 7f 7c 7b f8 d8 82 2a 5b 1..`.)...|{...*[ 0020 4c a8 fa f5 9a 4c 21 78 58 27 a3 fc e6 ce f6 c3 L....L!xX'...... 0030 97 c1 3d d5 af 00 d9 fe b7 87 26 57 c8 00 bb f0 ..=.......&W.... 0040 5b 3d 34 25 4a 17 33 9d 8f b1 23 25 6b c1 22 ed [=4%J.3...#%k.". 0050 40 b7 8b 4a 23 c6 20 f7 04 98 36 1c 2d b0 eb 4b @..J#. ...6.-..K 0060 9c e5 16 bf ea dc 3e 33 0e 16 fb 02 5c c6 8a 1f ......>3....\... 0070 a0 38 2e e8 0f e9 07 b1 23 93 c4 11 92 38 41 9e .8......#....8A. 0080 98 d9 7c 44 0d a0 81 a5 3c 51 06 0f b6 a9 e3 4c ..|D....<Q.....L 0090 8b ef 59 d9 3f ..Y.? No. Time Source Destination Protocol Length Info 20697 245.608016 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=4145 Ack=248401 Win=65535 Len=0 TSval=729938 TSecr=596649 Frame 20697: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4145, Ack: 248401, Len: 0 No. Time Source Destination Protocol Length Info 20698 245.608106 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45168 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 20698: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45168 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 20699 245.608162 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=4145 Ack=249998 Win=65535 Len=0 TSval=729938 TSecr=596649 Frame 20699: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4145, Ack: 249998, Len: 0 No. Time Source Destination Protocol Length Info 20700 245.608234 192.168.10.1 192.168.10.203 TCP 903 34433 > cds [PSH, ACK] Seq=249998 Ack=4145 Win=1002 Len=837 TSval=596649 TSecr=729938 Frame 20700: 903 bytes on wire (7224 bits), 903 bytes captured (7224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 249998, Ack: 4145, Len: 837 Data (837 bytes) 0000 17 03 01 03 40 b6 cc 2f 92 62 0a a0 e2 72 15 d8 ....@../.b...r.. 0010 cb c6 35 c5 f3 27 32 8d 7e 10 71 58 f1 ea e5 c4 ..5..'2.~.qX.... 0020 56 ef 65 6b b6 aa 9f 7e 5b 9a 8f 2b c4 08 7e 97 V.ek...~[..+..~. 0030 89 44 53 60 44 77 08 5c b0 26 82 48 19 22 1a 6e .DS`Dw.\.&.H.".n 0040 10 3e 37 5f f4 1b 1e d2 21 da a7 28 94 d9 ca 04 .>7_....!..(.... 0050 74 ef c8 20 ae 65 39 f3 45 15 ad fa ce bf 91 37 t.. .e9.E......7 0060 d8 73 01 f6 57 f8 ee 58 6f 8a a1 38 ef a7 59 fd .s..W..Xo..8..Y. 0070 45 70 58 20 52 87 91 75 2d fb 9a 3c 6b 6c c2 d9 EpX R..u-..<kl.. 0080 d9 91 72 ed 03 6e 6e 1e b9 f9 8d fe 47 ad b4 07 ..r..nn.....G... 0090 09 b3 63 3c 90 bf 7d 47 02 ff 84 47 b4 8a 74 da ..c<..}G...G..t. 00a0 9c 14 fc e7 4b 40 e3 1f 76 02 d7 34 eb 37 cc 35 [email protected] 00b0 82 5e cf 0e 87 56 36 a8 1d 58 17 6a 0e d9 39 9a .^...V6..X.j..9. 00c0 c9 33 64 28 58 75 9c 82 d3 1c 68 44 a5 db 6f ef .3d(Xu....hD..o. 00d0 27 7a bf ab f4 fd 40 90 b1 8f 8a 52 55 f5 4a 16 '[email protected]. 00e0 a4 da ad f6 ad 6d 2f 54 4f d3 95 08 b8 b9 9a c8 .....m/TO....... 00f0 ae c9 e5 76 46 24 d3 21 bb a1 49 e4 c0 a7 ee 4a ...vF$.!..I....J 0100 49 df de f9 c3 79 96 6f a3 15 1b 12 8c c2 f9 f1 I....y.o........ 0110 33 c5 da 27 8c 90 78 06 1e 83 4f 54 63 1b 78 4b 3..'..x...OTc.xK 0120 13 93 ff 3a ae 8d 9e c1 12 3b d0 4f b6 44 72 16 ...:.....;.O.Dr. 0130 8d 66 8e 59 0a 6f e0 84 3d d2 fe d3 91 1a d6 b0 .f.Y.o..=....... 0140 3f ba 1a 25 2a d1 d7 3f 51 32 de a1 d9 60 89 87 ?..%*..?Q2...`.. 0150 c1 8f 29 ab e4 e3 56 c1 02 3a 69 e2 52 9e 84 a3 ..)...V..:i.R... 0160 7b 43 9e c9 81 58 55 6a c7 66 36 aa 47 12 db 93 {C...XUj.f6.G... 0170 56 5f 45 0f d2 32 5a 50 54 14 d1 21 99 7b 7b 3b V_E..2ZPT..!.{{; 0180 35 2d d2 fd 8c 0c 8a b3 70 94 42 dc e2 21 3c 60 5-......p.B..!<` 0190 5c e1 0d 46 2a e8 c9 df 1d 84 26 a3 4e b5 a4 14 \..F*.....&.N... 01a0 8a 53 f8 18 cb f4 2e f5 86 c5 52 05 e9 e9 f2 97 .S........R..... 01b0 d6 82 39 30 2c 01 22 e5 c2 1f f7 f1 d7 96 6e e6 ..90,.".......n. 01c0 cb a8 ba 64 cf 4b dc d5 37 38 98 87 bd 6f e8 aa ...d.K..78...o.. 01d0 ac a2 04 11 58 db 13 7a 33 1f 17 7e 5d 94 0e 64 ....X..z3..~]..d 01e0 dd e0 99 06 a7 d2 8a 44 c7 85 80 af 6f d0 44 35 .......D....o.D5 01f0 81 b1 6e 81 2a 34 29 75 04 bf 96 c5 b9 04 26 8b ..n.*4)u......&. 0200 d4 ab d4 8c f9 9c 3f ce 5c 79 2a 67 70 c5 cd 93 ......?.\y*gp... 0210 58 b1 6e a2 41 8e 88 fe cc e9 d8 c3 b7 31 a0 a8 X.n.A........1.. 0220 13 76 69 30 c0 44 73 cf 12 7b 3e 4f a3 56 5a 5a .vi0.Ds..{>O.VZZ 0230 55 3c c3 ce 72 1c 7f 94 59 c7 56 bc 9d a4 df 46 U<..r...Y.V....F 0240 7d 1b 2f ad e0 88 95 96 ff 3c 28 c8 af f0 6f f2 }./......<(...o. 0250 00 18 53 bf 0b a8 ec 86 54 69 08 e2 bf 68 ca 58 ..S.....Ti...h.X 0260 66 cc f9 ce ca 95 63 5f e8 fc 2a d9 3d 26 80 19 f.....c_..*.=&.. 0270 9c f0 36 4b e3 35 0c 90 ff a8 7b 61 27 57 4d e9 ..6K.5....{a'WM. 0280 d6 42 78 c2 f9 23 3c 29 2f 56 f1 b7 af f1 50 fb .Bx..#<)/V....P. 0290 18 f0 f9 c7 70 bd 01 a1 3b 3a 1b 8e 41 81 83 96 ....p...;:..A... 02a0 1b 7a 9c ce 7e 37 6e 7b c5 e0 a6 fb ea f6 ef 4d .z..~7n{.......M 02b0 97 ad 3d f9 8a 81 3b e4 cf 6f d2 f8 5f 3b f0 a7 ..=...;..o.._;.. 02c0 73 ae c5 5c 93 8e e5 5b 4e 12 2a 49 e5 d2 01 2d s..\...[N.*I...- 02d0 30 1a 4f 21 92 78 39 7d 34 7c 30 ae f4 c6 14 b7 0.O!.x9}4|0..... 02e0 f1 5c 1c ce 2c a8 57 c4 b8 38 4b 9d 39 07 c9 ec .\..,.W..8K.9... 02f0 2d 89 40 61 34 5b a8 0e 6a 96 87 58 ff 26 0c bb -.@a4[..j..X.&.. 0300 91 07 73 2e 49 75 5a 7e 3b 0d a2 3a ee c1 cc b4 ..s.IuZ~;..:.... 0310 1f d6 bb e9 b9 e8 0d fc 25 58 f1 5b 39 2d 1e a4 ........%X.[9-.. 0320 da 1b 50 a2 ac f4 7b 77 ab c7 2c a9 43 c6 d9 87 ..P...{w..,.C... 0330 53 60 66 88 6a 84 fb 06 be 11 5f 7b 61 d5 4e 47 S`f.j....._{a.NG 0340 99 ee 88 0d 47 ....G No. Time Source Destination Protocol Length Info 20701 245.608302 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45168 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 20701: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45168 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 20702 245.608379 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45168 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 20702: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45168 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 20703 245.608460 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=250835 Ack=4145 Win=1002 Len=1448 TSval=596649 TSecr=729938 Frame 20703: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 250835, Ack: 4145, Len: 1448 Data (1448 bytes) 0000 17 03 01 03 40 6a b2 69 6c 03 ec c9 b5 79 e0 14 [email protected].. 0010 6d 63 ab f3 c4 d9 bb 6f a6 7f 40 cd c1 59 ff 66 [email protected] 0020 6e 95 a9 8e 5c 00 05 5f af 57 9e a4 4a b7 3b 8e n...\.._.W..J.;. 0030 3b 03 be 5e b1 40 d2 ee 67 d9 6a 7a 6a b5 11 2b ;..^[email protected]..+ 0040 12 78 b4 f9 60 c8 9e 77 49 99 4d 75 6e b0 e8 4b .x..`..wI.Mun..K 0050 ef 54 7b a4 13 0e 2e 0f a4 94 93 f1 83 83 e6 ae .T{............. 0060 5a 15 0a 9c 68 98 6f a5 01 bd 77 b2 18 a8 1f a8 Z...h.o...w..... 0070 32 f1 3d 6d 88 08 e8 8c ef 59 6a 74 89 5d ef af 2.=m.....Yjt.].. 0080 ce 86 6a 33 13 71 33 bd bf 80 c3 9c 35 43 a2 23 ..j3.q3.....5C.# 0090 6f 39 ea 33 1c d7 20 72 ff aa 15 a5 dd dc 60 9d o9.3.. r......`. 00a0 20 a9 91 61 fb 93 8b 22 72 79 48 bb 4f 1f 5a 29 ..a..."ryH.O.Z) 00b0 3c e8 e0 22 94 58 e6 46 65 e6 e9 75 61 7a fa 18 <..".X.Fe..uaz.. 00c0 16 44 60 cc b5 ed 9c c1 37 b4 88 53 7a 6d 03 97 .D`.....7..Szm.. 00d0 c4 82 d4 db 4f 73 18 71 40 bf 70 29 ab fe 2a 9e [email protected])..*. 00e0 2c c8 3e ff 74 83 e7 b7 f5 cd b4 b6 19 c1 fa 3b ,.>.t..........; 00f0 3d 41 73 4e 04 59 0e 31 03 ce 7a 51 2a 33 bc 6a =AsN.Y.1..zQ*3.j 0100 5c 1c c9 26 6c 95 61 1b 1b c9 cf be a1 73 f8 97 \..&l.a......s.. 0110 76 35 22 14 4a 87 1f 84 d9 94 53 de ec 83 33 16 v5".J.....S...3. 0120 bf 3b 45 a5 89 c6 08 ac 8a ce a0 66 77 6e 5a a0 .;E........fwnZ. 0130 34 a9 3f fa cf 29 72 7c 0d a0 57 1d 70 06 2d b5 4.?..)r|..W.p.-. 0140 ac 29 88 86 89 16 e3 95 11 9d ce c0 11 ab b2 21 .).............! 0150 c1 25 cd bc e7 c5 fc 53 66 ca 93 84 d0 5e 55 82 .%.....Sf....^U. 0160 59 30 2f ea 63 91 fa 80 27 bc 7a d8 35 17 63 5f Y0/.c...'.z.5.c_ 0170 ac b5 3a df b5 74 30 94 9b 3b 84 cf 8f b3 9a 96 ..:..t0..;...... 0180 a1 03 2d e5 0d bf 70 5c b6 3c c7 0c b0 e6 14 3e ..-...p\.<.....> 0190 25 04 19 94 2e a1 2a ac 8f 84 24 4b 04 d0 44 c2 %.....*...$K..D. 01a0 6c 40 76 a0 28 58 83 b7 18 df 8f bf 7c 93 c7 cc l@v.(X......|... 01b0 31 61 26 ab d2 38 e6 96 8d 16 e8 c2 89 1b 60 56 1a&..8........`V 01c0 26 78 66 e2 1b f0 f3 2b 0a 34 26 60 7b da fb d0 &xf....+.4&`{... 01d0 14 7a 2d dc ee 08 04 42 e9 71 cf ad 34 d7 59 e2 .z-....B.q..4.Y. 01e0 4d 09 1c 22 87 31 18 20 6d 2d 58 3d 50 59 78 98 M..".1. m-X=PYx. 01f0 e8 87 75 f1 ac e7 da 2f 6c 2b 8d a3 73 cf f4 ab ..u..../l+..s... 0200 54 92 4d bf 34 1d e9 99 6b 29 9a c9 8e da f0 1e T.M.4...k)...... 0210 00 6a 52 37 0d a1 7b 7d 37 18 c1 3d c2 a4 1b 53 .jR7..{}7..=...S 0220 5e e1 11 69 0a bd 81 0b ef fb d4 fd 19 be 6d f5 ^..i..........m. 0230 78 17 ad f6 27 5b 6f 1d 32 ee ec 90 8e b5 5a 9d x...'[o.2.....Z. 0240 c1 f0 cf 9d ba da fe 77 2e b4 67 37 aa 6b 18 93 .......w..g7.k.. 0250 08 e4 f6 c9 65 d5 3d 44 c7 8c 06 64 6f 7a 96 04 ....e.=D...doz.. 0260 06 8a 72 76 9e b7 44 77 aa a5 2f 59 ce 99 f3 9b ..rv..Dw../Y.... 0270 fb b0 06 0d f7 82 a5 cb 6c fb 89 34 06 a7 04 a0 ........l..4.... 0280 9d 21 60 08 8f 95 ea a9 99 fd 77 60 6b d5 47 09 .!`.......w`k.G. 0290 cc 92 d5 f8 6e f3 5b 98 38 b8 8b d3 90 fc 8d 19 ....n.[.8....... 02a0 27 10 87 e6 11 d6 29 1f 5e 0e c6 07 33 6c 6f a2 '.....).^...3lo. 02b0 3c c3 35 13 a1 b5 f9 22 4a 0f 29 2b 7a 63 cd 65 <.5...."J.)+zc.e 02c0 8c 45 10 15 c4 e9 37 43 5e b4 7c e6 56 97 f9 a9 .E....7C^.|.V... 02d0 70 17 c7 30 80 b9 46 a9 a2 4b 4f 63 db 39 01 7a p..0..F..KOc.9.z 02e0 6c 15 74 e3 d5 1d f9 4c d2 a5 9d 9b 44 f4 96 ca l.t....L....D... 02f0 8a 91 52 0a bf a8 aa 01 d3 2a 9b 90 c9 c5 e1 6c ..R......*.....l 0300 ea 1f 45 63 72 09 3c f3 b8 83 ed a0 68 ed d8 54 ..Ecr.<.....h..T 0310 48 6d ee 97 0d f0 ea 10 2a 0a 95 31 56 a2 13 7b Hm......*..1V..{ 0320 9e 0e e6 60 4a fd c2 79 d4 90 20 3c 60 58 08 66 ...`J..y.. <`X.f 0330 ee 15 90 11 5a f8 3b e9 7a 96 db be 2e ca ff cb ....Z.;.z....... 0340 73 da d6 c1 2e 17 03 01 03 50 c4 d4 cd c2 a0 c2 s........P...... 0350 90 07 cc a6 d0 d0 eb 02 d8 d5 e9 82 ea ac 82 64 ...............d 0360 f3 12 2c 50 ef fe 9c 13 f6 e5 10 25 35 7b d4 f7 ..,P.......%5{.. 0370 c5 ba 84 6b 02 da 68 c9 9c e9 a8 99 21 d8 42 56 ...k..h.....!.BV 0380 c8 86 bf 22 fc 5e a2 31 54 72 19 8e 17 d1 1b 9b ...".^.1Tr...... 0390 89 a9 f2 e4 18 98 22 5c 4f d8 ae 46 fc 9a 3f 63 ......"\O..F..?c 03a0 8a 2a 1d f8 f1 1d 33 2f d4 cf 68 6e cf 52 81 fa .*....3/..hn.R.. 03b0 ea dd 6c d7 20 86 e2 8c ca 88 58 49 21 bd 9e 86 ..l. .....XI!... 03c0 77 dc 55 59 a0 b7 e8 d4 7b ae 9a 4a 44 96 47 b7 w.UY....{..JD.G. 03d0 37 32 3e a8 3c 30 37 ed e8 81 5c 48 25 b1 82 99 72>.<07...\H%... 03e0 31 b4 2f f9 a3 84 d9 26 49 56 7b 97 f4 eb c7 3f 1./....&IV{....? 03f0 5b 30 5a cf a2 eb 67 60 07 1a 5d fb 48 10 1b 96 [0Z...g`..].H... 0400 e9 b3 94 9f 50 8a eb 91 31 81 35 98 18 7e f9 56 ....P...1.5..~.V 0410 0a 3d 9b b5 08 cd 1c cf 99 d1 80 f1 c1 08 fa 05 .=.............. 0420 0e 54 32 b0 ee 81 2b 17 e4 47 88 ac 54 18 53 e9 .T2...+..G..T.S. 0430 bc 64 31 ea f3 77 88 b4 03 a0 5b 56 83 c0 cc da .d1..w....[V.... 0440 de 9d 4e fd 08 c5 c1 39 61 14 68 3e 88 c0 bb 52 ..N....9a.h>...R 0450 2a 56 3d 3a b0 fd 33 e2 31 c7 29 87 2c dc a2 5b *V=:..3.1.).,..[ 0460 9c 27 c8 81 d9 73 d1 2a 21 fc c0 27 7b 03 0d 19 .'...s.*!..'{... 0470 cf cf cb 11 74 9c 79 9a e6 d6 53 00 73 1c bd 23 ....t.y...S.s..# 0480 24 45 27 e3 62 1c 3f 3d e1 5e 2a 23 8b 88 f6 c6 $E'.b.?=.^*#.... 0490 e1 bf 3a 15 15 e8 1a fe 6f 10 9f 28 1c 99 52 7f ..:.....o..(..R. 04a0 c2 4f 3f 42 27 b1 64 8f 56 bb c1 dc 66 4e 20 cb .O?B'.d.V...fN . 04b0 e8 e4 a0 3f 2f f7 e0 19 53 8b 42 e8 e8 1e c8 2c ...?/...S.B...., 04c0 25 62 cf 14 8b 6b e6 fd a1 f6 29 d4 3b 3e e3 6f %b...k....).;>.o 04d0 43 b2 a9 1f 76 5a 61 c0 3a 80 3d 84 e3 7b e4 94 C...vZa.:.=..{.. 04e0 eb e4 a8 cb a5 d0 91 de 2c ac 36 2d e4 c6 ab ef ........,.6-.... 04f0 b1 19 34 c4 95 27 f9 71 15 cb ae 87 c0 f3 d4 a7 ..4..'.q........ 0500 98 89 14 0f bd ae f7 15 45 57 51 86 2e d7 d2 8f ........EWQ..... 0510 a7 ea b1 9e bc e0 4f 74 12 bf 46 bb a8 6d c2 78 ......Ot..F..m.x 0520 eb fd 34 1e 6d 0d 7a f6 2a e5 96 6f c6 88 9b bd ..4.m.z.*..o.... 0530 5b e6 f8 41 75 ed 74 d4 f3 97 ce 0d 45 bb bb 5f [..Au.t.....E.._ 0540 60 5d 04 fb e8 52 49 43 e1 f4 9a cd ac 26 a7 7f `]...RIC.....&.. 0550 dc b1 0a 75 f7 c5 00 ea cd c3 1d 4c 1d 24 8a 86 ...u.......L.$.. 0560 82 63 d5 74 69 4a bf 31 38 29 9e cb 70 22 79 1d .c.tiJ.18)..p"y. 0570 9f 68 96 e1 c0 2b 0b 90 a2 7a 99 cb b6 67 39 3b .h...+...z...g9; 0580 c7 72 b4 7a a9 98 f9 8e 8a a7 9f 04 77 55 ac 94 .r.z........wU.. 0590 3b c6 b0 bd 1b 40 b4 cc a0 b3 46 41 fb cd 15 18 ;[email protected].... 05a0 79 39 df 1d d3 24 d1 60 y9...$.` No. Time Source Destination Protocol Length Info 20704 245.608510 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=4145 Ack=252283 Win=65535 Len=0 TSval=729938 TSecr=596649 Frame 20704: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4145, Ack: 252283, Len: 0 No. Time Source Destination Protocol Length Info 20705 245.608564 192.168.10.1 192.168.10.203 TCP 308 34433 > cds [PSH, ACK] Seq=252283 Ack=4145 Win=1002 Len=242 TSval=596649 TSecr=729938 Frame 20705: 308 bytes on wire (2464 bits), 308 bytes captured (2464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 252283, Ack: 4145, Len: 242 Data (242 bytes) 0000 6b 1e 0b f5 55 84 74 f3 98 73 00 76 67 f1 f0 28 k...U.t..s.vg..( 0010 d8 a4 48 36 f7 63 43 b3 26 e9 93 92 3c 3d 96 c4 ..H6.cC.&...<=.. 0020 30 35 24 57 72 fc 41 90 b0 83 f4 87 3f 67 1c f7 05$Wr.A.....?g.. 0030 4a 01 66 fe a4 78 7f 87 3c 24 8a 94 ca bd 77 66 J.f..x..<$....wf 0040 91 2f 88 f1 88 cd 50 33 63 6d 0a c0 dd 59 1b a1 ./....P3cm...Y.. 0050 1c f7 56 12 8e 7b 67 dc a7 e7 a0 3d 55 df ee 2d ..V..{g....=U..- 0060 23 a9 2e 36 94 de aa d2 42 20 42 ad 2c d9 af 92 #..6....B B.,... 0070 65 08 e5 8e 25 24 3c 00 36 96 0f 40 9b 6e 6e ab e...%$<[email protected]. 0080 d1 88 ae 6c 61 38 cd 51 e6 0e 72 36 13 82 7b 82 ...la8.Q..r6..{. 0090 e9 ee 90 fd 3f c4 b8 3a c5 67 ff 8e 4f 79 19 0e ....?..:.g..Oy.. 00a0 1e 5d 53 88 17 b5 6d cf 46 ca d0 21 cb 29 bf d1 .]S...m.F..!.).. 00b0 13 90 fe 59 17 10 91 45 22 cc 0d 6a a8 59 80 5f ...Y...E"..j.Y._ 00c0 65 ae 45 9c 52 36 31 05 11 5d d7 2d 58 04 b7 66 e.E.R61..].-X..f 00d0 1b fa 78 b8 34 37 e6 85 5c 52 00 98 c7 0e f0 04 ..x.47..\R...... 00e0 cd 80 d5 e8 87 b2 6a 7d 90 d5 98 be c0 93 4f d3 ......j}......O. 00f0 65 db e. No. Time Source Destination Protocol Length Info 20706 245.608632 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45168 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 20706: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45168 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 20707 245.608696 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45168 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 20707: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45168 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 20708 245.608776 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=252525 Ack=4145 Win=1002 Len=1448 TSval=596649 TSecr=729938 Frame 20708: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 252525, Ack: 4145, Len: 1448 Data (1448 bytes) 0000 17 03 01 03 40 c3 77 99 15 b9 25 20 3c 24 85 ca [email protected]...% <$.. 0010 9f 45 8f f2 18 af f0 05 c5 0a 59 45 82 62 9c 90 .E........YE.b.. 0020 e7 2f 9a 83 4b b2 f3 7b 69 53 b4 f5 69 2d c3 23 ./..K..{iS..i-.# 0030 0b e1 9e 5b 17 bb c2 3c 43 7c a1 38 aa 8d 15 5b ...[...<C|.8...[ 0040 bb d1 8b 8f 70 41 ab 8d 1e 62 60 6b b8 99 d0 4e ....pA...b`k...N 0050 8e f6 9d dd e7 b9 17 ea 1e 1f e0 1f 31 22 4e 3a ............1"N: 0060 e5 27 d4 e4 c2 7f c8 01 8a 35 a4 fb 6a 2a fa 63 .'.......5..j*.c 0070 08 f2 e1 ad 78 d9 cd f8 ca 93 df 75 1f a3 1a 32 ....x......u...2 0080 94 11 99 9a 94 6d 7d 7c 49 31 aa f7 e4 8f 6c 6f .....m}|I1....lo 0090 86 df 38 91 a2 15 81 c4 4a ad 30 dd c5 12 05 6b ..8.....J.0....k 00a0 b9 3a fd af b3 53 38 62 d8 38 31 f2 e2 f8 d4 9a .:...S8b.81..... 00b0 3b 19 53 b2 e7 ad da 80 34 a6 75 ac 37 8e f5 60 ;.S.....4.u.7..` 00c0 29 62 10 4f be 42 12 71 a4 a9 b2 55 27 45 bf ed )b.O.B.q...U'E.. 00d0 6e 4a c2 58 10 ab 56 3b e5 07 f5 e6 f6 a3 15 6f nJ.X..V;.......o 00e0 ee 38 8d be ed 02 4d ab e2 42 72 6c d1 2c 3f f9 .8....M..Brl.,?. 00f0 19 77 9a e5 55 38 fe 0c 59 33 10 0f cc b7 4f c1 .w..U8..Y3....O. 0100 f9 60 b5 c9 84 34 e0 81 ae 35 96 89 d7 86 27 67 .`...4...5....'g 0110 06 ef 97 14 33 9b d2 bb 89 ac 4e 17 d1 28 18 76 ....3.....N..(.v 0120 9b 91 8c 6b df f9 29 ff e8 77 db d6 0a dd a8 4d ...k..)..w.....M 0130 86 8b b5 aa 68 79 c8 67 8c ca 37 fd 8c 30 a2 82 ....hy.g..7..0.. 0140 f4 49 a9 97 bc c4 87 ee 65 26 55 0f c1 33 be e5 .I......e&U..3.. 0150 3c 6a b8 eb 97 bc 48 f1 31 65 43 65 c8 87 65 61 <j....H.1eCe..ea 0160 b2 30 3a 73 60 8b 4f c8 ed 44 b2 ba e6 e1 d2 bb .0:s`.O..D...... 0170 02 62 9e 1e 47 db e4 9c 43 a0 8d db 5e 5c e1 22 .b..G...C...^\." 0180 dc 46 99 bf 2d e0 c6 13 8a 58 c1 a6 b5 15 cc 5d .F..-....X.....] 0190 bc 52 92 bd ef 19 c9 92 b7 e3 d6 f3 35 77 33 2b .R..........5w3+ 01a0 47 67 9e e2 be f1 a9 f4 ff dd 43 25 1e 22 f7 16 Gg........C%.".. 01b0 94 ad 62 3a 2f 24 c7 a6 76 09 6c 24 06 55 ef 75 ..b:/$..v.l$.U.u 01c0 b4 aa 2b cc 3a 45 34 24 5e e3 08 63 8e 22 f4 d5 ..+.:E4$^..c.".. 01d0 56 9b a3 ea d7 fa 20 e3 2c 66 b8 26 49 ec e3 3c V..... .,f.&I..< 01e0 a8 69 69 57 82 ae f7 77 9c dd ef b4 db 5d b1 98 .iiW...w.....].. 01f0 f1 4f ab 1b 7b cf 10 75 a6 eb 86 65 64 2f 80 0f .O..{..u...ed/.. 0200 e4 15 8d 58 42 4f 10 f6 94 df af ca 41 04 e0 ab ...XBO......A... 0210 91 06 f1 7e 3e 72 74 b4 99 b0 df 7c 4f ad 7f 58 ...~>rt....|O..X 0220 c0 35 90 f3 c1 1b 03 20 fe 4e 6e 2d 92 c6 f1 88 .5..... .Nn-.... 0230 33 94 ae 0b d7 4f 9c 10 e5 73 44 ec 87 b8 6f 19 3....O...sD...o. 0240 b0 7f f8 3e 10 ec f3 6e 23 57 3f 08 99 8f f8 51 ...>...n#W?....Q 0250 2c d4 c9 5c 7c 4b e9 5a 16 a4 c0 56 bc 7a aa c9 ,..\|K.Z...V.z.. 0260 21 48 9b 89 59 be df 93 3d ae dc d9 f2 0a fb 1c !H..Y...=....... 0270 9d ad b7 c6 a2 16 53 4a d7 9d b6 c4 30 cb c7 09 ......SJ....0... 0280 16 66 c5 11 f1 45 84 fa f4 4b 63 c1 29 d4 64 1f .f...E...Kc.).d. 0290 4f ff e4 2a 13 c2 06 73 55 02 21 66 8b cd 42 d2 O..*...sU.!f..B. 02a0 af d8 85 7d fc ae 35 2d 61 9c 1e 03 97 08 00 17 ...}..5-a....... 02b0 32 ed 1a e4 64 92 86 74 15 62 e6 b7 93 37 7a 49 2...d..t.b...7zI 02c0 7c 90 05 42 cd a1 0a e2 03 ae 51 e4 a0 03 62 bc |..B......Q...b. 02d0 fd 00 96 d9 97 24 02 31 40 b0 c2 06 a5 df 43 93 [email protected]. 02e0 ba ef c3 ba a8 30 9c 1f 94 8d 96 71 78 34 4a bd .....0.....qx4J. 02f0 8a 1d c5 6f 8d ba f0 7b 2f 4f 9a 09 a6 ab 83 50 ...o...{/O.....P 0300 88 01 8f 96 d6 91 c0 d6 ea 2b e4 12 65 ed 52 21 .........+..e.R! 0310 1b b3 60 11 4e 92 06 f5 f0 d2 38 7a 6d 69 b7 58 ..`.N.....8zmi.X 0320 a8 6b cc c4 59 8b 63 68 9c 11 ee dd 1a 39 3b 70 .k..Y.ch.....9;p 0330 e1 37 35 0c 15 12 b9 0d 26 c3 03 1c 1c e3 62 23 .75.....&.....b# 0340 9f 1a 69 5c e2 17 03 01 03 40 08 d0 3e 7d 78 32 ..i\.....@..>}x2 0350 97 b0 b5 ea 53 7c 85 45 34 c7 ba 99 7a 4f 9a de ....S|.E4...zO.. 0360 c2 e1 69 fb 14 14 f0 8c a1 b0 c2 85 de 9d 66 4c ..i...........fL 0370 df 77 45 f3 d8 3d c2 b9 6a 44 2a a5 47 d4 3f 34 .wE..=..jD*.G.?4 0380 63 a1 19 d0 50 7d 9e bf e1 a4 9b 76 4a ea 6c 79 c...P}.....vJ.ly 0390 b0 e9 0d 97 8e c3 d9 c2 e8 69 a3 2e a2 46 2b 7c .........i...F+| 03a0 65 4a ee dd f5 d5 d5 ca ac 21 a4 bb 63 99 77 71 eJ.......!..c.wq 03b0 8d 58 f7 6f 51 1d 18 a3 5a 90 aa 20 e5 88 3a 04 .X.oQ...Z.. ..:. 03c0 96 96 1a c1 f4 fd fd 56 17 b9 6b 42 7a 3e fb 02 .......V..kBz>.. 03d0 89 3c 05 8e 0d 2b c7 45 0b 41 a0 fb b5 b1 d5 c5 .<...+.E.A...... 03e0 6f e0 28 52 1f 1b 47 7c 95 63 23 b6 48 cc a8 c4 o.(R..G|.c#.H... 03f0 be 66 ab 65 27 ea 15 57 42 47 bc 49 98 16 51 44 .f.e'..WBG.I..QD 0400 fa d8 f6 3d 92 3c 24 67 27 66 a9 66 33 ee 2c 62 ...=.<$g'f.f3.,b 0410 02 74 78 2c f8 24 ae a1 b6 d6 2d b0 33 b4 b1 07 .tx,.$....-.3... 0420 75 c2 fc 7d 04 2a fe a1 69 89 97 18 4b 54 0c 44 u..}.*..i...KT.D 0430 7a 8a dd 53 d3 7c bd ce 23 81 c2 95 e8 57 cd 3a z..S.|..#....W.: 0440 9d 75 3f e3 f6 fe e0 8a b9 24 1c 72 7b 13 e0 e0 .u?......$.r{... 0450 85 d6 57 c9 76 3e 0b fe 70 54 8f 9f 2c 4e 7c d6 ..W.v>..pT..,N|. 0460 bc b2 7c 2a ad 70 09 42 25 bd 7d 73 b9 0d a1 bd ..|*.p.B%.}s.... 0470 02 84 e3 55 14 d4 ca af 5f ec 9e 7d 2e 88 5d f7 ...U...._..}..]. 0480 4b 89 a7 c6 77 40 b0 e6 eb 54 1c a0 c9 e7 16 c1 [email protected]...... 0490 d3 72 46 a4 c3 3f e1 26 d1 b7 fc 4e 8d 9d f1 89 .rF..?.&...N.... 04a0 63 f7 51 d1 d4 6c 57 5f 46 8a 64 c8 bd 3c f4 f9 c.Q..lW_F.d..<.. 04b0 6a 36 63 64 89 ba 6e 6d ac 08 08 37 76 2c 9d 6c j6cd..nm...7v,.l 04c0 55 2c 1b 14 41 3d b4 19 94 36 46 36 71 28 1d 8f U,..A=...6F6q(.. 04d0 b5 b2 1d 18 e1 a8 59 03 0d 3e 6c 40 4e bd 75 3e ......Y..>[email protected]> 04e0 f4 ab b2 02 8f e2 79 8a 16 be b8 17 d7 b4 5e 45 ......y.......^E 04f0 bf d5 7d 03 71 f9 71 fb c6 70 a2 de fc e7 75 7e ..}.q.q..p....u~ 0500 41 c6 f3 fe cc f1 5a 33 3f 56 03 d6 2f 0e 07 19 A.....Z3?V../... 0510 eb 2c a5 4d 38 4b 92 0f 74 ec 96 74 a2 f5 86 e3 .,.M8K..t..t.... 0520 f9 d5 a0 d0 c7 28 21 58 bb fa 1e b4 b7 59 06 5f .....(!X.....Y._ 0530 e6 47 f4 3e 06 e0 f6 33 d9 7a 2f 2c 0e 2e b6 c6 .G.>...3.z/,.... 0540 c3 1a ba f8 90 33 a8 c6 51 42 02 4a 68 12 33 b5 .....3..QB.Jh.3. 0550 8c 0a 3b c2 47 3f 95 54 a2 a3 34 ea 98 68 15 c9 ..;.G?.T..4..h.. 0560 44 db 04 38 9a 8f 56 93 49 1e c9 78 d2 d5 34 af D..8..V.I..x..4. 0570 80 c8 b1 d3 3b 30 66 63 e0 fd c0 d7 4e 6d df 17 ....;0fc....Nm.. 0580 7f 54 ae 1c 48 a4 8b dd 64 d0 ef 71 7e 1b 19 90 .T..H...d..q~... 0590 9d b5 8e c0 fe 5b da 84 17 0f 0d 44 83 e6 1e 7f .....[.....D.... 05a0 45 a4 4b fa 66 02 5a dd E.K.f.Z. No. Time Source Destination Protocol Length Info 20709 245.608826 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=4145 Ack=253973 Win=65535 Len=0 TSval=729938 TSecr=596649 Frame 20709: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4145, Ack: 253973, Len: 0 No. Time Source Destination Protocol Length Info 20710 245.608886 192.168.10.1 192.168.10.203 TCP 292 34433 > cds [PSH, ACK] Seq=253973 Ack=4145 Win=1002 Len=226 TSval=596649 TSecr=729938 Frame 20710: 292 bytes on wire (2336 bits), 292 bytes captured (2336 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 253973, Ack: 4145, Len: 226 Data (226 bytes) 0000 59 58 f3 f4 ce 8f 5c 40 54 70 d4 2a b6 bc 9e 65 YX....\@Tp.*...e 0010 b8 80 6e bb 58 1f 56 b4 1d 3f ad 69 15 6b 7e 87 ..n.X.V..?.i.k~. 0020 1b ea 4a 03 52 68 9f 04 04 f6 ee a9 70 90 61 61 ..J.Rh......p.aa 0030 34 c2 b3 81 2a 80 69 84 7d 3a d5 a2 79 29 b3 60 4...*.i.}:..y).` 0040 99 a0 50 8d a3 c0 ea e7 f3 74 5a 56 1c c9 9f 1b ..P......tZV.... 0050 35 2f 6e 65 e8 64 fb 5f 47 48 9e f9 18 14 48 e3 5/ne.d._GH....H. 0060 30 99 7e 5a a8 0e e8 41 44 c6 5d 42 5a b0 75 dc 0.~Z...AD.]BZ.u. 0070 97 a9 66 0b 68 9b 72 60 eb 30 1c 11 63 b6 ee 1f ..f.h.r`.0..c... 0080 e2 fd 36 d4 6c 8a fe 2f 7c d6 dd 35 cb 11 61 41 ..6.l../|..5..aA 0090 18 df d8 a2 1d 6d d4 02 52 eb 6d e0 24 1d a4 4d .....m..R.m.$..M 00a0 c2 2a 44 25 f1 b8 73 87 b8 9d c3 eb ec 6b 50 a6 .*D%..s......kP. 00b0 a3 65 7a 12 2e 60 27 87 a0 e7 ac d4 10 f1 72 86 .ez..`'.......r. 00c0 cd 1e 0e c5 77 25 2c 1c 29 c9 b0 db 26 67 14 0c ....w%,.)...&g.. 00d0 58 af 37 09 2c 1a 7c 88 13 36 1b 9a ff 34 58 e0 X.7.,.|..6...4X. 00e0 52 c8 R. No. Time Source Destination Protocol Length Info 20711 245.734898 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=4145 Ack=254199 Win=65309 Len=0 TSval=729940 TSecr=596649 Frame 20711: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4145, Ack: 254199, Len: 0 No. Time Source Destination Protocol Length Info 20712 245.759374 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20712: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47373, Ack: 335005, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20713 245.759409 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=335005 Ack=47400 Win=64585 Len=0 Frame 20713: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 335005, Ack: 47400, Len: 0 No. Time Source Destination Protocol Length Info 20714 245.763318 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20714: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47400, Ack: 335005, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20715 245.771379 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20715: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47427, Ack: 335005, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20716 245.771412 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=335005 Ack=47454 Win=64531 Len=0 Frame 20716: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 335005, Ack: 47454, Len: 0 No. Time Source Destination Protocol Length Info 20717 245.778863 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20717: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47454, Ack: 335005, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20718 245.786436 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20718: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47481, Ack: 335005, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20719 245.786469 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=335005 Ack=47508 Win=64477 Len=0 Frame 20719: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 335005, Ack: 47508, Len: 0 No. Time Source Destination Protocol Length Info 20720 245.794780 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20720: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47508, Ack: 335005, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20721 245.802598 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20721: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47535, Ack: 335005, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20722 245.802632 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=335005 Ack=47562 Win=64423 Len=0 Frame 20722: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 335005, Ack: 47562, Len: 0 No. Time Source Destination Protocol Length Info 20723 245.812891 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20723: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47562, Ack: 335005, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20724 245.823097 192.168.10.185 192.168.10.142 VNC 942 Authentication result Frame 20724: 942 bytes on wire (7536 bits), 942 bytes captured (7536 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 335005, Ack: 47589, Len: 888 Virtual Network Computing No. Time Source Destination Protocol Length Info 20725 245.828834 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 20725: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47616, Ack: 335005, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20726 245.828869 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20724#1] rfb > xrl [ACK] Seq=335893 Ack=47589 Win=64396 Len=0 SLE=47616 SRE=47643 Frame 20726: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 335893, Ack: 47589, Len: 0 No. Time Source Destination Protocol Length Info 20727 245.838627 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20727: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47643, Ack: 335005, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20728 245.838659 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20724#2] rfb > xrl [ACK] Seq=335893 Ack=47589 Win=64396 Len=0 SLE=47616 SRE=47670 Frame 20728: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 335893, Ack: 47589, Len: 0 No. Time Source Destination Protocol Length Info 20729 245.844821 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20729: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47670, Ack: 335005, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20730 245.844856 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20724#3] rfb > xrl [ACK] Seq=335893 Ack=47589 Win=64396 Len=0 SLE=47616 SRE=47697 Frame 20730: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 335893, Ack: 47589, Len: 0 No. Time Source Destination Protocol Length Info 20731 245.858719 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 20731: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47697, Ack: 335893, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 20732 245.858753 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20724#4] rfb > xrl [ACK] Seq=335893 Ack=47589 Win=64396 Len=0 SLE=47616 SRE=47729 Frame 20732: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 335893, Ack: 47589, Len: 0 No. Time Source Destination Protocol Length Info 20733 245.858796 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20733: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47729, Ack: 335893, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20734 245.858824 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20724#5] rfb > xrl [ACK] Seq=335893 Ack=47589 Win=64396 Len=0 SLE=47616 SRE=47756 Frame 20734: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 335893, Ack: 47589, Len: 0 No. Time Source Destination Protocol Length Info 20735 245.863408 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20735: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47756, Ack: 335893, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20736 245.863443 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20724#6] rfb > xrl [ACK] Seq=335893 Ack=47589 Win=64396 Len=0 SLE=47616 SRE=47783 Frame 20736: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 335893, Ack: 47589, Len: 0 No. Time Source Destination Protocol Length Info 20737 245.863483 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 20737: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47589, Ack: 335893, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20738 245.863515 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=335893 Ack=47783 Win=65535 Len=0 Frame 20738: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 335893, Ack: 47783, Len: 0 No. Time Source Destination Protocol Length Info 20739 245.864066 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 20739: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 20740 245.864097 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 20740: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 20741 245.867485 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20741: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47783, Ack: 335893, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20742 245.876516 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20742: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47810, Ack: 335893, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20743 245.876551 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=335893 Ack=47837 Win=65481 Len=0 Frame 20743: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 335893, Ack: 47837, Len: 0 No. Time Source Destination Protocol Length Info 20744 245.886426 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20744: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47837, Ack: 335893, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20745 245.895017 192.168.10.203 85.26.183.150 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 20745: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 85.26.183.150 (85.26.183.150) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 20746 245.895352 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20746: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47864, Ack: 335893, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20747 245.895385 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=335893 Ack=47891 Win=65427 Len=0 Frame 20747: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 335893, Ack: 47891, Len: 0 No. Time Source Destination Protocol Length Info 20748 245.900487 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20748: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47891, Ack: 335893, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20749 245.908531 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20749: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47918, Ack: 335893, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20750 245.908566 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=335893 Ack=47945 Win=65373 Len=0 Frame 20750: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 335893, Ack: 47945, Len: 0 No. Time Source Destination Protocol Length Info 20751 245.916476 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20751: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47945, Ack: 335893, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20752 245.922706 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20752: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47972, Ack: 335893, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20753 245.922738 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=335893 Ack=47999 Win=65319 Len=0 Frame 20753: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 335893, Ack: 47999, Len: 0 No. Time Source Destination Protocol Length Info 20754 245.931901 192.168.10.185 192.168.10.142 VNC 449 Authentication result Frame 20754: 449 bytes on wire (3592 bits), 449 bytes captured (3592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 335893, Ack: 47999, Len: 395 Virtual Network Computing No. Time Source Destination Protocol Length Info 20755 245.932501 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20755: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 47999, Ack: 335893, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20756 245.932813 180.243.236.205 192.168.10.207 TCP 60 rsf-1 > smtp [RST, ACK] Seq=67 Ack=439 Win=93002 Len=0 Frame 20756: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: rsf-1 (1195), Dst Port: smtp (25), Seq: 67, Ack: 439, Len: 0 No. Time Source Destination Protocol Length Info 20757 245.932888 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1195 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 20757: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1195 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 20758 245.933563 180.243.236.205 192.168.10.207 TCP 62 ipcd3 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 20758: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: ipcd3 (1209), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 20759 245.933631 192.168.10.207 180.243.236.205 TCP 62 smtp > ipcd3 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 20759: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: ipcd3 (1209), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 20760 245.942835 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20760: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48026, Ack: 335893, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20761 245.942871 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=336288 Ack=48053 Win=65265 Len=0 Frame 20761: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 336288, Ack: 48053, Len: 0 No. Time Source Destination Protocol Length Info 20762 245.945006 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=4145 Ack=254199 Win=65309 Len=74 TSval=729942 TSecr=596649 Frame 20762: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4145, Ack: 254199, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 c2 e0 ac 3c 07 17 80 06 34 18 65 .... ...<....4.e 0010 f2 44 a1 15 7b fc 03 20 f5 62 0a 70 28 9a 24 71 .D..{.. .b.p(.$q 0020 69 ce 84 46 f0 17 03 01 00 20 89 4f aa a1 67 55 i..F..... .O..gU 0030 64 7a 99 38 3a 71 d4 0f 01 ef 0a d3 c1 1d 8e 98 dz.8:q.......... 0040 70 75 9b 42 09 36 01 0b 94 6b pu.B.6...k No. Time Source Destination Protocol Length Info 20763 245.945074 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=254199 Ack=4219 Win=1002 Len=0 TSval=596733 TSecr=729942 Frame 20763: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 254199, Ack: 4219, Len: 0 No. Time Source Destination Protocol Length Info 20764 245.947954 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=4219 Ack=254199 Win=65309 Len=74 TSval=729942 TSecr=596733 Frame 20764: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4219, Ack: 254199, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 26 85 0b 6b 0d da 79 17 c4 a9 ca .... &..k..y.... 0010 8c e2 b6 85 fc ee 78 6f 4e 30 35 78 96 e6 3d 26 ......xoN05x..=& 0020 7b 0b 4e 7c b3 17 03 01 00 20 12 48 e4 66 85 a0 {.N|..... .H.f.. 0030 a2 39 12 a0 16 6a 3c b1 34 ff e3 e4 4a 80 8a 82 .9...j<.4...J... 0040 5a 2e 93 15 c3 16 c2 24 c6 ad Z......$.. No. Time Source Destination Protocol Length Info 20765 245.948022 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=254199 Ack=4293 Win=1002 Len=0 TSval=596734 TSecr=729942 Frame 20765: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 254199, Ack: 4293, Len: 0 No. Time Source Destination Protocol Length Info 20766 245.950579 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=4293 Ack=254199 Win=65309 Len=74 TSval=729942 TSecr=596734 Frame 20766: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4293, Ack: 254199, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 34 1b 97 9d f2 05 58 88 bd a8 00 .... 4.....X.... 0010 1f bb ee d0 cf 2c e1 66 e5 f8 56 1d 7d 56 13 11 .....,.f..V.}V.. 0020 c7 bd 67 43 cb 17 03 01 00 20 17 ec b6 20 66 b5 ..gC..... ... f. 0030 e5 d7 b0 64 9c c5 f6 97 f6 89 45 76 06 86 f2 21 ...d......Ev...! 0040 bb c1 44 5a 0f f9 59 37 45 fa ..DZ..Y7E. No. Time Source Destination Protocol Length Info 20767 245.950624 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20767: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48053, Ack: 335893, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20768 245.950678 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=254199 Ack=4367 Win=1002 Len=0 TSval=596735 TSecr=729942 Frame 20768: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 254199, Ack: 4367, Len: 0 No. Time Source Destination Protocol Length Info 20769 245.953165 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=4367 Ack=254199 Win=65309 Len=74 TSval=729942 TSecr=596735 Frame 20769: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4367, Ack: 254199, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 36 f4 38 4c c4 db 1b 85 57 8e 5d .... 6.8L....W.] 0010 c4 b2 5b b8 82 75 e3 d1 77 20 0c df 43 26 3a d8 ..[..u..w ..C&:. 0020 6b d2 c9 82 b9 17 03 01 00 20 62 6c cb 06 2e 23 k........ bl...# 0030 db 19 36 b8 30 d2 3b 93 97 23 51 88 04 f4 19 8c ..6.0.;..#Q..... 0040 79 06 a3 ec 08 23 de e7 95 a3 y....#.... No. Time Source Destination Protocol Length Info 20770 245.953232 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=254199 Ack=4441 Win=1002 Len=0 TSval=596735 TSecr=729942 Frame 20770: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 254199, Ack: 4441, Len: 0 No. Time Source Destination Protocol Length Info 20771 245.955665 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=4441 Ack=254199 Win=65309 Len=74 TSval=729942 TSecr=596735 Frame 20771: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4441, Ack: 254199, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 3c 86 f4 04 4a d0 fe 6b 42 1e ab .... <...J..kB.. 0010 a6 e1 60 d5 81 88 0c 18 70 fb 9f 2d 38 8b 90 ae ..`.....p..-8... 0020 a8 60 b0 b7 62 17 03 01 00 20 07 af 95 0c 5a e7 .`..b.... ....Z. 0030 ec 13 a7 70 1d 9e 96 d4 b7 15 20 8a df f0 f8 0f ...p...... ..... 0040 96 d8 c7 cf 49 fa 6a aa b0 a0 ....I.j... No. Time Source Destination Protocol Length Info 20772 245.955729 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=254199 Ack=4515 Win=1002 Len=0 TSval=596736 TSecr=729942 Frame 20772: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 254199, Ack: 4515, Len: 0 No. Time Source Destination Protocol Length Info 20773 245.956500 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20773: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48080, Ack: 336288, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20774 245.956534 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=336288 Ack=48107 Win=65211 Len=0 Frame 20774: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 336288, Ack: 48107, Len: 0 No. Time Source Destination Protocol Length Info 20775 245.958434 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=4515 Ack=254199 Win=65309 Len=74 TSval=729942 TSecr=596736 Frame 20775: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4515, Ack: 254199, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 6f f1 0d 73 79 46 a6 09 58 03 38 .... o..syF..X.8 0010 f6 46 4d 62 25 64 1e cf a0 67 05 36 f9 f3 a0 61 .FMb%d...g.6...a 0020 3d 61 3c 67 79 17 03 01 00 20 6b cd 98 48 07 2f =a<gy.... k..H./ 0030 7d f5 aa f5 ed f6 5a a5 ed f6 d8 5e 92 04 c5 57 }.....Z....^...W 0040 79 cf ac f7 4f 2b b5 25 b0 f0 y...O+.%.. No. Time Source Destination Protocol Length Info 20776 245.958877 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=254199 Ack=4589 Win=1002 Len=0 TSval=596737 TSecr=729942 Frame 20776: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 254199, Ack: 4589, Len: 0 No. Time Source Destination Protocol Length Info 20777 245.962744 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 20777: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48107, Ack: 336288, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 20778 245.966927 192.168.10.185 192.168.10.142 VNC 333 Authentication result Frame 20778: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 336288, Ack: 48139, Len: 279 Virtual Network Computing No. Time Source Destination Protocol Length Info 20779 245.972667 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20779: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48139, Ack: 336288, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20780 245.990441 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20780: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48166, Ack: 336288, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20781 245.990477 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=336567 Ack=48193 Win=65125 Len=0 Frame 20781: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 336567, Ack: 48193, Len: 0 No. Time Source Destination Protocol Length Info 20782 246.002853 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1370495232, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 20782: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20783 246.002877 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1370495232, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 20783: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20784 246.002890 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1370495232, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 20784: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20785 246.002903 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1370495232, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 20785: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20786 246.011689 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 20786: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17137, Ack: 1227154, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20787 246.011721 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1227154 Ack=17179 Win=46111 Len=0 Frame 20787: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1227154, Ack: 17179, Len: 0 No. Time Source Destination Protocol Length Info 20788 246.011752 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 20788: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17179, Ack: 1227154, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20789 246.011781 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1227154 Ack=17221 Win=46090 Len=0 Frame 20789: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1227154, Ack: 17221, Len: 0 No. Time Source Destination Protocol Length Info 20790 246.012561 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 20790: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48225, Ack: 336567, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20791 246.012592 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20781#1] rfb > xrl [ACK] Seq=336567 Ack=48193 Win=65125 Len=0 SLE=48225 SRE=48252 Frame 20791: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 336567, Ack: 48193, Len: 0 No. Time Source Destination Protocol Length Info 20792 246.020657 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20792: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48252, Ack: 336567, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20793 246.020689 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20781#2] rfb > xrl [ACK] Seq=336567 Ack=48193 Win=65125 Len=0 SLE=48225 SRE=48279 Frame 20793: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 336567, Ack: 48193, Len: 0 No. Time Source Destination Protocol Length Info 20794 246.020733 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3239575808, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 20794: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20795 246.020752 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3239575808, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 20795: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20796 246.020764 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3239575808, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 20796: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20797 246.020776 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3239575808, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 20797: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 20798 246.028479 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20798: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48279, Ack: 336567, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20799 246.028513 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20781#3] rfb > xrl [ACK] Seq=336567 Ack=48193 Win=65125 Len=0 SLE=48225 SRE=48306 Frame 20799: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 336567, Ack: 48193, Len: 0 No. Time Source Destination Protocol Length Info 20800 246.034596 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20800: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48306, Ack: 336567, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20801 246.034629 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20781#4] rfb > xrl [ACK] Seq=336567 Ack=48193 Win=65125 Len=0 SLE=48225 SRE=48333 Frame 20801: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 336567, Ack: 48193, Len: 0 No. Time Source Destination Protocol Length Info 20802 246.042558 192.168.10.142 192.168.10.185 VNC 86 [TCP Fast Retransmission] Authentication result Frame 20802: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48193, Ack: 336567, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 20803 246.042593 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=336567 Ack=48333 Win=64985 Len=0 Frame 20803: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 336567, Ack: 48333, Len: 0 No. Time Source Destination Protocol Length Info 20804 246.050361 192.168.10.185 192.168.10.142 VNC 415 Authentication result Frame 20804: 415 bytes on wire (3320 bits), 415 bytes captured (3320 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 336567, Ack: 48333, Len: 361 Virtual Network Computing No. Time Source Destination Protocol Length Info 20805 246.052683 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20805: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48333, Ack: 336567, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20806 246.052727 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20806: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48360, Ack: 336567, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20807 246.052756 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=336928 Ack=48387 Win=64931 Len=0 Frame 20807: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 336928, Ack: 48387, Len: 0 No. Time Source Destination Protocol Length Info 20808 246.062658 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20808: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48387, Ack: 336567, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20809 246.070519 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20809: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48414, Ack: 336567, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20810 246.070554 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=336928 Ack=48441 Win=64877 Len=0 Frame 20810: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 336928, Ack: 48441, Len: 0 No. Time Source Destination Protocol Length Info 20811 246.075798 188.161.220.86 192.168.10.207 SMTP 93 C: MAIL FROM: <amelia.galbraith@xxxxxxx> Frame 20811: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45168 (45168), Dst Port: smtp (25), Seq: 16, Ack: 313, Len: 39 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20812 246.076351 192.168.10.207 188.161.220.86 SMTP 103 S: 250 2.1.0 [email protected] OK Frame 20812: 103 bytes on wire (824 bits), 103 bytes captured (824 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45168 (45168), Seq: 313, Ack: 55, Len: 49 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20813 246.076398 188.161.220.86 192.168.10.207 TCP 60 45168 > smtp [ACK] Seq=55 Ack=362 Win=93078 Len=0 Frame 20813: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45168 (45168), Dst Port: smtp (25), Seq: 55, Ack: 362, Len: 0 No. Time Source Destination Protocol Length Info 20814 246.081313 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20814: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48441, Ack: 336567, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20815 246.085951 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 20815: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48468, Ack: 336928, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 20816 246.085983 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=336928 Ack=48500 Win=64818 Len=0 Frame 20816: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 336928, Ack: 48500, Len: 0 No. Time Source Destination Protocol Length Info 20817 246.092445 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20817: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48500, Ack: 336928, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20818 246.096550 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20818: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48527, Ack: 336928, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20819 246.096583 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=336928 Ack=48554 Win=64764 Len=0 Frame 20819: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 336928, Ack: 48554, Len: 0 No. Time Source Destination Protocol Length Info 20820 246.100529 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20820: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48554, Ack: 336928, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20821 246.103788 192.168.10.185 192.168.10.142 VNC 284 Authentication result Frame 20821: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 336928, Ack: 48581, Len: 230 Virtual Network Computing No. Time Source Destination Protocol Length Info 20822 246.108536 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20822: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48581, Ack: 336928, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20823 246.114779 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20823: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48608, Ack: 336928, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20824 246.114816 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=337158 Ack=48635 Win=64683 Len=0 Frame 20824: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 337158, Ack: 48635, Len: 0 No. Time Source Destination Protocol Length Info 20825 246.115283 189.123.220.16 192.168.10.207 SMTP 103 C: MAIL FROM: <sarah.macadam@xxxxxxxxxxxxxxxxxxxx> Frame 20825: 103 bytes on wire (824 bits), 103 bytes captured (824 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49293 (49293), Dst Port: smtp (25), Seq: 18, Ack: 313, Len: 49 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20826 246.115319 192.168.10.207 189.123.220.16 SMTP 113 S: 250 2.1.0 [email protected] OK Frame 20826: 113 bytes on wire (904 bits), 113 bytes captured (904 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49293 (49293), Seq: 313, Ack: 67, Len: 59 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 20827 246.115359 189.123.220.16 192.168.10.207 TCP 60 49293 > smtp [ACK] Seq=67 Ack=372 Win=93068 Len=0 Frame 20827: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49293 (49293), Dst Port: smtp (25), Seq: 67, Ack: 372, Len: 0 No. Time Source Destination Protocol Length Info 20828 246.125857 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20828: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48635, Ack: 336928, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20829 246.132831 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 20829: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48694, Ack: 337158, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20830 246.132864 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=337158 Ack=48662 Win=64656 Len=0 SLE=48694 SRE=48721 Frame 20830: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 337158, Ack: 48662, Len: 0 No. Time Source Destination Protocol Length Info 20831 246.140623 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20831: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48721, Ack: 337158, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20832 246.140656 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20830#1] rfb > xrl [ACK] Seq=337158 Ack=48662 Win=64656 Len=0 SLE=48694 SRE=48748 Frame 20832: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 337158, Ack: 48662, Len: 0 No. Time Source Destination Protocol Length Info 20833 246.151207 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20833: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48748, Ack: 337158, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20834 246.151240 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20830#2] rfb > xrl [ACK] Seq=337158 Ack=48662 Win=64656 Len=0 SLE=48694 SRE=48775 Frame 20834: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 337158, Ack: 48662, Len: 0 No. Time Source Destination Protocol Length Info 20835 246.157489 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20835: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48775, Ack: 337158, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20836 246.157523 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20830#3] rfb > xrl [ACK] Seq=337158 Ack=48662 Win=64656 Len=0 SLE=48694 SRE=48802 Frame 20836: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 337158, Ack: 48662, Len: 0 No. Time Source Destination Protocol Length Info 20837 246.162532 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20837: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48802, Ack: 337158, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20838 246.162565 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20830#4] rfb > xrl [ACK] Seq=337158 Ack=48662 Win=64656 Len=0 SLE=48694 SRE=48829 Frame 20838: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 337158, Ack: 48662, Len: 0 No. Time Source Destination Protocol Length Info 20839 246.172556 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20839: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48829, Ack: 337158, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20840 246.172590 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20830#5] rfb > xrl [ACK] Seq=337158 Ack=48662 Win=64656 Len=0 SLE=48694 SRE=48856 Frame 20840: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 337158, Ack: 48662, Len: 0 No. Time Source Destination Protocol Length Info 20841 246.176540 192.168.10.142 192.168.10.185 VNC 86 [TCP Fast Retransmission] Authentication result Frame 20841: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48662, Ack: 337158, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 20842 246.176573 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=337158 Ack=48856 Win=64462 Len=0 Frame 20842: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 337158, Ack: 48856, Len: 0 No. Time Source Destination Protocol Length Info 20843 246.183251 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20843: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48856, Ack: 337158, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20844 246.183332 192.168.10.185 192.168.10.142 VNC 359 Authentication result Frame 20844: 359 bytes on wire (2872 bits), 359 bytes captured (2872 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 337158, Ack: 48883, Len: 305 Virtual Network Computing No. Time Source Destination Protocol Length Info 20845 246.197005 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20845: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48883, Ack: 337158, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20846 246.202628 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20846: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48910, Ack: 337158, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20847 246.202660 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=337463 Ack=48937 Win=64381 Len=0 Frame 20847: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 337463, Ack: 48937, Len: 0 No. Time Source Destination Protocol Length Info 20848 246.212530 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 20848: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48937, Ack: 337463, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 20849 246.218873 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20849: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48969, Ack: 337463, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20850 246.218906 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=337463 Ack=48996 Win=64322 Len=0 Frame 20850: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 337463, Ack: 48996, Len: 0 No. Time Source Destination Protocol Length Info 20851 246.228533 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20851: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 48996, Ack: 337463, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20852 246.238459 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20852: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49023, Ack: 337463, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20853 246.238493 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=337463 Ack=49050 Win=65535 Len=0 Frame 20853: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 337463, Ack: 49050, Len: 0 No. Time Source Destination Protocol Length Info 20854 246.244524 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20854: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49050, Ack: 337463, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20855 246.245022 192.168.10.185 192.168.10.142 VNC 362 Authentication result Frame 20855: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 337463, Ack: 49077, Len: 308 Virtual Network Computing No. Time Source Destination Protocol Length Info 20856 246.251180 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.96? Tell 192.168.10.226 Frame 20856: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20857 246.251214 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.96? Tell 192.168.10.226 Frame 20857: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20858 246.251302 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 20858: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20859 246.251316 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 20859: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20860 246.251347 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 20860: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20861 246.251358 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 20861: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20862 246.251370 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 20862: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20863 246.251381 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 20863: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20864 246.251494 192.168.10.46 192.168.10.245 Syslog 214 LOCAL4.WARNING: Oct 03 2011 19:19:06 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n Frame 20864: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:19:06 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n No. Time Source Destination Protocol Length Info 20865 246.251512 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 20865: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20866 246.251522 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 20866: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20867 246.251532 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 20867: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20868 246.251549 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 20868: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20869 246.251583 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 20869: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20870 246.251593 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 20870: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20871 246.251602 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 20871: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20872 246.251625 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 20872: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20873 246.251644 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 20873: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20874 246.251654 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 20874: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20875 246.251664 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 20875: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20876 246.251675 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 20876: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20877 246.251685 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 20877: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20878 246.251695 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 20878: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20879 246.251705 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 20879: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20880 246.251717 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 20880: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20881 246.251728 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 20881: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20882 246.251740 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 20882: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20883 246.251751 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 20883: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20884 246.251780 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 20884: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20885 246.251791 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 20885: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20886 246.251802 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 20886: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20887 246.251812 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 20887: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20888 246.251823 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 20888: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20889 246.251833 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 20889: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20890 246.251843 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 20890: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20891 246.251854 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 20891: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20892 246.251865 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 20892: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20893 246.251875 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 20893: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20894 246.251885 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 20894: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20895 246.251896 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 20895: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20896 246.251907 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 20896: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20897 246.251918 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 20897: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20898 246.251928 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 20898: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20899 246.251939 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 20899: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20900 246.251952 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.48? Tell 192.168.10.226 Frame 20900: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20901 246.251968 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.48? Tell 192.168.10.226 Frame 20901: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20902 246.251981 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 20902: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20903 246.252153 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 20903: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20904 246.252165 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 20904: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20905 246.252175 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 20905: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20906 246.252185 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 20906: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20907 246.252196 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 20907: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20908 246.252206 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 20908: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20909 246.252216 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 20909: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20910 246.252227 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 20910: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20911 246.252237 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 20911: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20912 246.252247 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 20912: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20913 246.252268 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68 Frame 20913: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20914 246.252282 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 20914: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20915 246.252292 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 20915: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20916 246.252315 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 20916: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20917 246.252326 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 20917: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20918 246.252334 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 20918: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20919 246.252359 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 20919: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20920 246.252369 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 20920: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20921 246.252379 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 20921: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20922 246.252390 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 20922: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20923 246.252400 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 20923: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20924 246.252411 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 20924: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20925 246.252421 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 20925: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20926 246.252431 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 20926: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20927 246.252441 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 20927: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20928 246.252452 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 20928: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20929 246.252462 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 20929: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20930 246.252472 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 20930: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20931 246.252482 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 20931: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20932 246.252492 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 20932: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20933 246.252503 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 20933: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20934 246.252513 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 20934: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20935 246.252523 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 20935: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20936 246.252533 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 20936: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20937 246.252550 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 20937: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20938 246.252560 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 20938: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20939 246.252570 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 20939: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20940 246.252581 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 20940: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20941 246.252591 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 20941: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20942 246.252601 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 20942: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20943 246.252619 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 20943: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20944 246.252629 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 20944: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20945 246.252639 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 20945: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 20946 246.252652 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 20946: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 20947 246.253690 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20947: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49077, Ack: 337463, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20948 246.263449 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20948: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49104, Ack: 337463, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20949 246.263484 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=337771 Ack=49131 Win=65454 Len=0 Frame 20949: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 337771, Ack: 49131, Len: 0 No. Time Source Destination Protocol Length Info 20950 246.267946 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20950: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49131, Ack: 337463, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20951 246.273400 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 20951: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49158, Ack: 337771, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 20952 246.273435 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=337771 Ack=49190 Win=65395 Len=0 Frame 20952: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 337771, Ack: 49190, Len: 0 No. Time Source Destination Protocol Length Info 20953 246.276587 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20953: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49190, Ack: 337771, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20954 246.277252 192.168.10.185 192.168.10.142 VNC 156 Authentication result Frame 20954: 156 bytes on wire (1248 bits), 156 bytes captured (1248 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 337771, Ack: 49217, Len: 102 Virtual Network Computing No. Time Source Destination Protocol Length Info 20955 246.284626 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20955: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49217, Ack: 337771, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20956 246.292564 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20956: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49244, Ack: 337771, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20957 246.292596 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=337873 Ack=49271 Win=65314 Len=0 Frame 20957: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 337873, Ack: 49271, Len: 0 No. Time Source Destination Protocol Length Info 20958 246.295018 192.168.10.1 192.168.10.245 Syslog 310 LOCAL1.INFO: Oct 3 19:48:24 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49293 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="ezdiagonal@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 20958: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:24 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49293 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 20959 246.302622 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 20959: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49271, Ack: 337873, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 20960 246.307768 192.168.10.185 192.168.10.142 VNC 158 Authentication result Frame 20960: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 337873, Ack: 49303, Len: 104 Virtual Network Computing No. Time Source Destination Protocol Length Info 20961 246.311268 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20961: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49303, Ack: 337873, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20962 246.314537 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20962: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49330, Ack: 337873, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20963 246.314570 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=337977 Ack=49357 Win=65228 Len=0 Frame 20963: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 337977, Ack: 49357, Len: 0 No. Time Source Destination Protocol Length Info 20964 246.328564 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20964: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49357, Ack: 337873, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20965 246.332608 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 20965: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49384, Ack: 337977, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 20966 246.332640 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=337977 Ack=49416 Win=65169 Len=0 Frame 20966: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 337977, Ack: 49416, Len: 0 No. Time Source Destination Protocol Length Info 20967 246.332678 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20967: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49416, Ack: 337977, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20968 246.344573 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20968: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49443, Ack: 337977, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20969 246.344608 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=337977 Ack=49470 Win=65115 Len=0 Frame 20969: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 337977, Ack: 49470, Len: 0 No. Time Source Destination Protocol Length Info 20970 246.352985 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20970: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49470, Ack: 337977, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20971 246.357709 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20971: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49497, Ack: 337977, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20972 246.357744 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=337977 Ack=49524 Win=65061 Len=0 Frame 20972: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 337977, Ack: 49524, Len: 0 No. Time Source Destination Protocol Length Info 20973 246.364021 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20973: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49524, Ack: 337977, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20974 246.369590 192.168.10.185 192.168.10.142 VNC 369 Authentication result Frame 20974: 369 bytes on wire (2952 bits), 369 bytes captured (2952 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 337977, Ack: 49551, Len: 315 Virtual Network Computing No. Time Source Destination Protocol Length Info 20975 246.371265 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20975: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49551, Ack: 337977, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20976 246.392980 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 20976: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49605, Ack: 337977, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20977 246.393012 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=338292 Ack=49578 Win=65007 Len=0 SLE=49605 SRE=49632 Frame 20977: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338292, Ack: 49578, Len: 0 No. Time Source Destination Protocol Length Info 20978 246.396866 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 20978: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49632, Ack: 338292, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 20979 246.396899 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20977#1] rfb > xrl [ACK] Seq=338292 Ack=49578 Win=65007 Len=0 SLE=49605 SRE=49664 Frame 20979: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338292, Ack: 49578, Len: 0 No. Time Source Destination Protocol Length Info 20980 246.398342 192.168.10.1 192.168.10.245 Syslog 314 LOCAL1.INFO: Oct 3 19:48:24 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45168 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eywgerontology@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 20980: 314 bytes on wire (2512 bits), 314 bytes captured (2512 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:24 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45168 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 20981 246.402044 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20981: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49664, Ack: 338292, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20982 246.402077 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20977#2] rfb > xrl [ACK] Seq=338292 Ack=49578 Win=65007 Len=0 SLE=49605 SRE=49691 Frame 20982: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338292, Ack: 49578, Len: 0 No. Time Source Destination Protocol Length Info 20983 246.406586 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20983: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49691, Ack: 338292, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20984 246.406620 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20977#3] rfb > xrl [ACK] Seq=338292 Ack=49578 Win=65007 Len=0 SLE=49605 SRE=49718 Frame 20984: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338292, Ack: 49578, Len: 0 No. Time Source Destination Protocol Length Info 20985 246.411735 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20985: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49718, Ack: 338292, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20986 246.411767 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20977#4] rfb > xrl [ACK] Seq=338292 Ack=49578 Win=65007 Len=0 SLE=49605 SRE=49745 Frame 20986: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338292, Ack: 49578, Len: 0 No. Time Source Destination Protocol Length Info 20987 246.423835 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20987: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49745, Ack: 338292, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20988 246.423868 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20977#5] rfb > xrl [ACK] Seq=338292 Ack=49578 Win=65007 Len=0 SLE=49605 SRE=49772 Frame 20988: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338292, Ack: 49578, Len: 0 No. Time Source Destination Protocol Length Info 20989 246.428476 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 20989: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49578, Ack: 338292, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20990 246.428511 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=338292 Ack=49772 Win=64813 Len=0 Frame 20990: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338292, Ack: 49772, Len: 0 No. Time Source Destination Protocol Length Info 20991 246.438654 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20991: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49772, Ack: 338292, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20992 246.450947 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20992: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49799, Ack: 338292, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20993 246.450984 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=338292 Ack=49826 Win=64759 Len=0 Frame 20993: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338292, Ack: 49826, Len: 0 No. Time Source Destination Protocol Length Info 20994 246.460573 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20994: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49826, Ack: 338292, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20995 246.488679 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 20995: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49853, Ack: 338292, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20996 246.488715 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=338292 Ack=49880 Win=64705 Len=0 Frame 20996: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338292, Ack: 49880, Len: 0 No. Time Source Destination Protocol Length Info 20997 246.494857 192.168.10.185 192.168.10.142 VNC 386 Authentication result Frame 20997: 386 bytes on wire (3088 bits), 386 bytes captured (3088 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338292, Ack: 49880, Len: 332 Virtual Network Computing No. Time Source Destination Protocol Length Info 20998 246.506743 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 20998: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49907, Ack: 338292, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 20999 246.506777 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20997#1] rfb > xrl [ACK] Seq=338624 Ack=49880 Win=64705 Len=0 SLE=49907 SRE=49934 Frame 20999: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338624, Ack: 49880, Len: 0 No. Time Source Destination Protocol Length Info 21000 246.516743 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 21000: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49934, Ack: 338624, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 21001 246.516778 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20997#2] rfb > xrl [ACK] Seq=338624 Ack=49880 Win=64705 Len=0 SLE=49907 SRE=49966 Frame 21001: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338624, Ack: 49880, Len: 0 No. Time Source Destination Protocol Length Info 21002 246.522958 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21002: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49966, Ack: 338624, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21003 246.522991 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 20997#3] rfb > xrl [ACK] Seq=338624 Ack=49880 Win=64705 Len=0 SLE=49907 SRE=49993 Frame 21003: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338624, Ack: 49880, Len: 0 No. Time Source Destination Protocol Length Info 21004 246.538587 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 21004: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49880, Ack: 338624, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21005 246.538622 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=338624 Ack=49993 Win=64592 Len=0 Frame 21005: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338624, Ack: 49993, Len: 0 No. Time Source Destination Protocol Length Info 21006 246.542573 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21006: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 49993, Ack: 338624, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21007 246.553551 192.168.10.185 192.168.10.142 VNC 306 Authentication result Frame 21007: 306 bytes on wire (2448 bits), 306 bytes captured (2448 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338624, Ack: 50020, Len: 252 Virtual Network Computing No. Time Source Destination Protocol Length Info 21008 246.560492 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21008: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50020, Ack: 338624, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21009 246.586776 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 21009: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50074, Ack: 338624, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21010 246.586810 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=338876 Ack=50047 Win=64538 Len=0 SLE=50074 SRE=50101 Frame 21010: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338876, Ack: 50047, Len: 0 No. Time Source Destination Protocol Length Info 21011 246.591141 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 21011: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50101, Ack: 338876, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 21012 246.591181 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21010#1] rfb > xrl [ACK] Seq=338876 Ack=50047 Win=64538 Len=0 SLE=50074 SRE=50133 Frame 21012: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338876, Ack: 50047, Len: 0 No. Time Source Destination Protocol Length Info 21013 246.598485 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21013: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50133, Ack: 338876, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21014 246.598518 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21010#2] rfb > xrl [ACK] Seq=338876 Ack=50047 Win=64538 Len=0 SLE=50074 SRE=50160 Frame 21014: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338876, Ack: 50047, Len: 0 No. Time Source Destination Protocol Length Info 21015 246.604614 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21015: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50160, Ack: 338876, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21016 246.604646 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21010#3] rfb > xrl [ACK] Seq=338876 Ack=50047 Win=64538 Len=0 SLE=50074 SRE=50187 Frame 21016: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338876, Ack: 50047, Len: 0 No. Time Source Destination Protocol Length Info 21017 246.612557 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21017: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50187, Ack: 338876, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21018 246.612591 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21010#4] rfb > xrl [ACK] Seq=338876 Ack=50047 Win=64538 Len=0 SLE=50074 SRE=50214 Frame 21018: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338876, Ack: 50047, Len: 0 No. Time Source Destination Protocol Length Info 21019 246.628671 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 21019: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50047, Ack: 338876, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21020 246.628704 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=338876 Ack=50214 Win=64371 Len=0 Frame 21020: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338876, Ack: 50214, Len: 0 No. Time Source Destination Protocol Length Info 21021 246.632804 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21021: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50214, Ack: 338876, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21022 246.637637 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21022: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50241, Ack: 338876, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21023 246.637673 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=338876 Ack=50268 Win=64317 Len=0 Frame 21023: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338876, Ack: 50268, Len: 0 No. Time Source Destination Protocol Length Info 21024 246.646198 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21024: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50268, Ack: 338876, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21025 246.651376 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21025: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50295, Ack: 338876, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21026 246.651407 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=338876 Ack=50322 Win=65535 Len=0 Frame 21026: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338876, Ack: 50322, Len: 0 No. Time Source Destination Protocol Length Info 21027 246.662861 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21027: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50322, Ack: 338876, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21028 246.682584 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 21028: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50376, Ack: 338876, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21029 246.682619 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=338876 Ack=50349 Win=65508 Len=0 SLE=50376 SRE=50403 Frame 21029: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338876, Ack: 50349, Len: 0 No. Time Source Destination Protocol Length Info 21030 246.686660 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21030: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50403, Ack: 338876, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21031 246.686693 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21029#1] rfb > xrl [ACK] Seq=338876 Ack=50349 Win=65508 Len=0 SLE=50376 SRE=50430 Frame 21031: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338876, Ack: 50349, Len: 0 No. Time Source Destination Protocol Length Info 21032 246.694608 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21032: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50430, Ack: 338876, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21033 246.694644 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21029#2] rfb > xrl [ACK] Seq=338876 Ack=50349 Win=65508 Len=0 SLE=50376 SRE=50457 Frame 21033: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338876, Ack: 50349, Len: 0 No. Time Source Destination Protocol Length Info 21034 246.697357 192.168.10.185 192.168.10.142 VNC 357 Authentication result Frame 21034: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 338876, Ack: 50349, Len: 303 Virtual Network Computing No. Time Source Destination Protocol Length Info 21035 246.708659 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21035: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50457, Ack: 338876, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21036 246.708702 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21034#1] rfb > xrl [ACK] Seq=339179 Ack=50349 Win=65508 Len=0 SLE=50376 SRE=50484 Frame 21036: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339179, Ack: 50349, Len: 0 No. Time Source Destination Protocol Length Info 21037 246.716743 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21037: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50484, Ack: 338876, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21038 246.716778 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21034#2] rfb > xrl [ACK] Seq=339179 Ack=50349 Win=65508 Len=0 SLE=50376 SRE=50511 Frame 21038: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339179, Ack: 50349, Len: 0 No. Time Source Destination Protocol Length Info 21039 246.720735 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 21039: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50349, Ack: 338876, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21040 246.720770 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=339179 Ack=50511 Win=65346 Len=0 Frame 21040: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339179, Ack: 50511, Len: 0 No. Time Source Destination Protocol Length Info 21041 246.726137 188.161.220.86 192.168.10.207 SMTP 60 C: QUIT Frame 21041: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45168 (45168), Dst Port: smtp (25), Seq: 55, Ack: 362, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21042 246.726205 192.168.10.207 188.161.220.86 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 21042: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45168 (45168), Seq: 362, Ack: 61, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21043 246.726256 188.161.220.86 192.168.10.207 TCP 60 45168 > smtp [ACK] Seq=61 Ack=431 Win=93010 Len=0 Frame 21043: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45168 (45168), Dst Port: smtp (25), Seq: 61, Ack: 431, Len: 0 No. Time Source Destination Protocol Length Info 21044 246.726288 192.168.10.207 188.161.220.86 TCP 60 smtp > 45168 [FIN, ACK] Seq=431 Ack=61 Win=65475 Len=0 Frame 21044: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45168 (45168), Seq: 431, Ack: 61, Len: 0 No. Time Source Destination Protocol Length Info 21045 246.726363 188.161.220.86 192.168.10.207 TCP 60 45168 > smtp [ACK] Seq=61 Ack=432 Win=93010 Len=0 Frame 21045: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45168 (45168), Dst Port: smtp (25), Seq: 61, Ack: 432, Len: 0 No. Time Source Destination Protocol Length Info 21046 246.730959 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21046: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50511, Ack: 339179, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21047 246.735864 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 21047: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50538, Ack: 339179, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 21048 246.735896 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=339179 Ack=50570 Win=65287 Len=0 Frame 21048: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339179, Ack: 50570, Len: 0 No. Time Source Destination Protocol Length Info 21049 246.750863 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21049: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50570, Ack: 339179, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21050 246.754566 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21050: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50597, Ack: 339179, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21051 246.754599 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=339179 Ack=50624 Win=65233 Len=0 Frame 21051: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339179, Ack: 50624, Len: 0 No. Time Source Destination Protocol Length Info 21052 246.758889 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21052: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50624, Ack: 339179, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21053 246.762714 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21053: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50651, Ack: 339179, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21054 246.762747 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=339179 Ack=50678 Win=65179 Len=0 Frame 21054: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339179, Ack: 50678, Len: 0 No. Time Source Destination Protocol Length Info 21055 246.781835 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21055: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50678, Ack: 339179, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21056 246.791269 192.168.10.185 192.168.10.142 VNC 338 Authentication result Frame 21056: 338 bytes on wire (2704 bits), 338 bytes captured (2704 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339179, Ack: 50705, Len: 284 Virtual Network Computing No. Time Source Destination Protocol Length Info 21057 246.796616 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21057: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50705, Ack: 339179, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21058 246.811226 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21058: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50732, Ack: 339179, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21059 246.811259 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=339463 Ack=50759 Win=65098 Len=0 Frame 21059: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339463, Ack: 50759, Len: 0 No. Time Source Destination Protocol Length Info 21060 246.814937 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 21060: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50759, Ack: 339463, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 21061 246.829105 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21061: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50791, Ack: 339463, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21062 246.829138 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=339463 Ack=50818 Win=65039 Len=0 Frame 21062: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339463, Ack: 50818, Len: 0 No. Time Source Destination Protocol Length Info 21063 246.834837 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21063: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50818, Ack: 339463, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21064 246.844639 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21064: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50845, Ack: 339463, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21065 246.844674 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=339463 Ack=50872 Win=64985 Len=0 Frame 21065: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339463, Ack: 50872, Len: 0 No. Time Source Destination Protocol Length Info 21066 246.854227 192.168.10.185 192.168.10.142 VNC 290 Authentication result Frame 21066: 290 bytes on wire (2320 bits), 290 bytes captured (2320 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339463, Ack: 50872, Len: 236 Virtual Network Computing No. Time Source Destination Protocol Length Info 21067 246.854907 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21067: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50872, Ack: 339463, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21068 246.860530 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21068: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50899, Ack: 339463, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21069 246.860564 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=339699 Ack=50926 Win=64931 Len=0 Frame 21069: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339699, Ack: 50926, Len: 0 No. Time Source Destination Protocol Length Info 21070 246.862400 189.123.220.16 192.168.10.207 SMTP 60 C: QUIT Frame 21070: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49293 (49293), Dst Port: smtp (25), Seq: 67, Ack: 372, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21071 246.862503 192.168.10.207 189.123.220.16 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 21071: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49293 (49293), Seq: 372, Ack: 73, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21072 246.862566 189.123.220.16 192.168.10.207 TCP 60 49293 > smtp [ACK] Seq=73 Ack=441 Win=93000 Len=0 Frame 21072: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49293 (49293), Dst Port: smtp (25), Seq: 73, Ack: 441, Len: 0 No. Time Source Destination Protocol Length Info 21073 246.862594 192.168.10.207 189.123.220.16 TCP 60 smtp > 49293 [FIN, ACK] Seq=441 Ack=73 Win=65463 Len=0 Frame 21073: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49293 (49293), Seq: 441, Ack: 73, Len: 0 No. Time Source Destination Protocol Length Info 21074 246.862632 189.123.220.16 192.168.10.207 TCP 60 49293 > smtp [ACK] Seq=73 Ack=442 Win=93000 Len=0 Frame 21074: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49293 (49293), Dst Port: smtp (25), Seq: 73, Ack: 442, Len: 0 No. Time Source Destination Protocol Length Info 21075 246.868617 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21075: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50926, Ack: 339463, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21076 246.876701 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21076: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50953, Ack: 339463, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21077 246.876735 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=339699 Ack=50980 Win=64877 Len=0 Frame 21077: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339699, Ack: 50980, Len: 0 No. Time Source Destination Protocol Length Info 21078 246.883222 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 21078: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 50980, Ack: 339699, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 21079 246.890864 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21079: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51012, Ack: 339699, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21080 246.890896 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=339699 Ack=51039 Win=64818 Len=0 Frame 21080: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339699, Ack: 51039, Len: 0 No. Time Source Destination Protocol Length Info 21081 246.908759 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 21081: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51066, Ack: 339699, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21082 246.908794 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21080#1] rfb > xrl [ACK] Seq=339699 Ack=51039 Win=64818 Len=0 SLE=51066 SRE=51093 Frame 21082: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339699, Ack: 51039, Len: 0 No. Time Source Destination Protocol Length Info 21083 246.917248 192.168.10.185 192.168.10.142 VNC 299 Authentication result Frame 21083: 299 bytes on wire (2392 bits), 299 bytes captured (2392 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339699, Ack: 51039, Len: 245 Virtual Network Computing No. Time Source Destination Protocol Length Info 21084 246.929996 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21084: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51093, Ack: 339699, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21085 246.930030 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21083#1] rfb > xrl [ACK] Seq=339944 Ack=51039 Win=64818 Len=0 SLE=51066 SRE=51120 Frame 21085: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339944, Ack: 51039, Len: 0 No. Time Source Destination Protocol Length Info 21086 246.951621 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21086: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51120, Ack: 339699, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21087 246.951653 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21083#2] rfb > xrl [ACK] Seq=339944 Ack=51039 Win=64818 Len=0 SLE=51066 SRE=51147 Frame 21087: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339944, Ack: 51039, Len: 0 No. Time Source Destination Protocol Length Info 21088 246.954795 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 21088: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51147, Ack: 339944, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 21089 246.954827 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21083#3] rfb > xrl [ACK] Seq=339944 Ack=51039 Win=64818 Len=0 SLE=51066 SRE=51179 Frame 21089: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339944, Ack: 51039, Len: 0 No. Time Source Destination Protocol Length Info 21090 246.955004 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21090: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51179, Ack: 339944, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21091 246.955037 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21083#4] rfb > xrl [ACK] Seq=339944 Ack=51039 Win=64818 Len=0 SLE=51066 SRE=51206 Frame 21091: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339944, Ack: 51039, Len: 0 No. Time Source Destination Protocol Length Info 21092 246.955080 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 21092: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51039, Ack: 339944, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21093 246.955108 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=339944 Ack=51206 Win=64651 Len=0 Frame 21093: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339944, Ack: 51206, Len: 0 No. Time Source Destination Protocol Length Info 21094 246.959425 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21094: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51206, Ack: 339944, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21095 246.970969 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21095: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51233, Ack: 339944, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21096 246.971005 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=339944 Ack=51260 Win=64597 Len=0 Frame 21096: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339944, Ack: 51260, Len: 0 No. Time Source Destination Protocol Length Info 21097 246.982672 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21097: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51260, Ack: 339944, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21098 246.990869 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21098: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51287, Ack: 339944, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21099 246.990911 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=339944 Ack=51314 Win=64543 Len=0 Frame 21099: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339944, Ack: 51314, Len: 0 No. Time Source Destination Protocol Length Info 21100 246.996717 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21100: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51314, Ack: 339944, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21101 246.997910 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 20274#1] 9428 > smtp [ACK] Seq=719486 Ack=10039 Win=46594 Len=0 Frame 21101: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 719486, Ack: 10039, Len: 0 No. Time Source Destination Protocol Length Info 21102 246.997942 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=10039 Ack=718216 Win=0 Len=0 Frame 21102: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 10039, Ack: 718216, Len: 0 No. Time Source Destination Protocol Length Info 21103 247.014249 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21103: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51341, Ack: 339944, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21104 247.014284 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=339944 Ack=51368 Win=64489 Len=0 Frame 21104: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339944, Ack: 51368, Len: 0 No. Time Source Destination Protocol Length Info 21105 247.018627 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1387272448, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 21105: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21106 247.018649 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1387272448, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 21106: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21107 247.018661 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1387272448, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 21107: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21108 247.018673 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1387272448, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 21108: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21109 247.025408 192.168.10.185 192.168.10.142 VNC 265 Authentication result Frame 21109: 265 bytes on wire (2120 bits), 265 bytes captured (2120 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 339944, Ack: 51368, Len: 211 Virtual Network Computing No. Time Source Destination Protocol Length Info 21110 247.026746 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21110: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51368, Ack: 339944, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21111 247.036418 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3256353024, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 21111: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21112 247.036441 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3256353024, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 21112: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21113 247.036454 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3256353024, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 21113: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21114 247.036466 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3256353024, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 21114: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21115 247.036572 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21115: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51395, Ack: 339944, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21116 247.036603 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340155 Ack=51422 Win=64435 Len=0 Frame 21116: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340155, Ack: 51422, Len: 0 No. Time Source Destination Protocol Length Info 21117 247.043080 189.123.220.16 192.168.10.207 TCP 62 49308 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 21117: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49308 (49308), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 21118 247.043130 189.123.220.16 192.168.10.207 TCP 60 49293 > smtp [RST, ACK] Seq=73 Ack=442 Win=93000 Len=0 Frame 21118: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49293 (49293), Dst Port: smtp (25), Seq: 73, Ack: 442, Len: 0 No. Time Source Destination Protocol Length Info 21119 247.043195 192.168.10.207 189.123.220.16 TCP 62 smtp > 49308 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 21119: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49308 (49308), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 21120 247.043269 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:48:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49293 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 21120: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49293 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 21121 247.043740 188.161.220.86 192.168.10.207 TCP 60 45168 > smtp [RST, ACK] Seq=61 Ack=432 Win=93010 Len=0 Frame 21121: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45168 (45168), Dst Port: smtp (25), Seq: 61, Ack: 432, Len: 0 No. Time Source Destination Protocol Length Info 21122 247.043811 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:48:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45168 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 21122: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45168 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 21123 247.046761 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21123: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51422, Ack: 339944, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21124 247.050294 188.161.220.86 192.168.10.207 TCP 62 45187 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 21124: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45187 (45187), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 21125 247.050361 192.168.10.207 188.161.220.86 TCP 62 smtp > 45187 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 21125: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45187 (45187), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 21126 247.052751 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 21126: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51449, Ack: 340155, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 21127 247.052787 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340155 Ack=51481 Win=64376 Len=0 Frame 21127: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340155, Ack: 51481, Len: 0 No. Time Source Destination Protocol Length Info 21128 247.080082 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21128: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51481, Ack: 340155, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21129 247.084746 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21129: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51508, Ack: 340155, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21130 247.084777 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340155 Ack=51535 Win=64322 Len=0 Frame 21130: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340155, Ack: 51535, Len: 0 No. Time Source Destination Protocol Length Info 21131 247.084831 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21131: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51535, Ack: 340155, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21132 247.087956 192.168.10.185 192.168.10.142 VNC 291 Authentication result Frame 21132: 291 bytes on wire (2328 bits), 291 bytes captured (2328 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340155, Ack: 51562, Len: 237 Virtual Network Computing No. Time Source Destination Protocol Length Info 21133 247.097763 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21133: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51562, Ack: 340155, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21134 247.112607 192.168.10.142 192.168.10.185 VNC 86 [TCP Previous segment lost] Authentication result Frame 21134: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51616, Ack: 340392, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 21135 247.112643 192.168.10.185 192.168.10.142 TCP 66 rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=51616 SRE=51648 Frame 21135: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21136 247.122691 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21136: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51648, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21137 247.122733 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21135#1] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=51616 SRE=51675 Frame 21137: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21138 247.172612 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 21138: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51810, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21139 247.172648 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#2] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=51810 SRE=51837 SLE=51616 SRE=51675 Frame 21139: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21140 247.194224 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 21140: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 21141 247.202933 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 21141: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51675, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21142 247.202968 192.168.10.185 192.168.10.142 TCP 82 [TCP Dup ACK 21135#3] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=51616 SRE=51702 SLE=51810 SRE=51837 SLE=51616 SRE=51675 Frame 21142: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21143 247.206681 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 21143: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51864, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21144 247.206723 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#4] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=51864 SRE=51891 SLE=51616 SRE=51702 Frame 21144: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21145 247.236757 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 21145: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51918, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21146 247.236792 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#5] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=51918 SRE=51945 SLE=51864 SRE=51891 Frame 21146: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21147 247.252365 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21147: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51945, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21148 247.252401 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#6] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=51918 SRE=51972 SLE=51864 SRE=51891 Frame 21148: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21149 247.300714 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 21149: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52107, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21150 247.300748 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#7] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52134 SLE=51918 SRE=51972 Frame 21150: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21151 247.308593 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21151: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52134, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21152 247.308627 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#8] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52161 SLE=51918 SRE=51972 Frame 21152: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21153 247.315726 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 21153: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 21154 247.317222 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21154: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52161, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21155 247.317255 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#9] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52188 SLE=51918 SRE=51972 Frame 21155: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21156 247.322465 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 21156: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17221, Ack: 1227154, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21157 247.322497 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1227154 Ack=17263 Win=46069 Len=0 Frame 21157: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1227154, Ack: 17263, Len: 0 No. Time Source Destination Protocol Length Info 21158 247.322525 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=17263 Ack=1227154 Win=17594 Len=0 Frame 21158: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17263, Ack: 1227154, Len: 0 No. Time Source Destination Protocol Length Info 21159 247.322557 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 21158#1] smtp > 23308 [ACK] Seq=17263 Ack=1227154 Win=17594 Len=0 Frame 21159: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17263, Ack: 1227154, Len: 0 No. Time Source Destination Protocol Length Info 21160 247.322586 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21160: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1227154, Ack: 17263, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21161 247.322615 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21161: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1228534, Ack: 17263, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21162 247.322644 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21162: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1229914, Ack: 17263, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21163 247.322677 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21163: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1231294, Ack: 17263, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21164 247.322709 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21164: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1232674, Ack: 17263, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21165 247.322738 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21165: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1234054, Ack: 17263, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21166 247.322768 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21166: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1235434, Ack: 17263, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21167 247.322796 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21167: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1236814, Ack: 17263, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21168 247.322825 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21168: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1238194, Ack: 17263, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21169 247.322854 206.225.164.186 192.168.10.207 SMTP 1084 C: DATA fragment, 1030 bytes Frame 21169: 1084 bytes on wire (8672 bits), 1084 bytes captured (8672 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1239574, Ack: 17263, Len: 1030 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21170 247.322884 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21170: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1240604, Ack: 17263, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21171 247.322926 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21171: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1241984, Ack: 17263, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21172 247.322955 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=17263 Ack=1229914 Win=14834 Len=0 Frame 21172: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17263, Ack: 1229914, Len: 0 No. Time Source Destination Protocol Length Info 21173 247.322984 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21173: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1243364, Ack: 17263, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21174 247.323013 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21174: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1244744, Ack: 17263, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21175 247.323041 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=17263 Ack=1240604 Win=4144 Len=0 Frame 21175: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17263, Ack: 1240604, Len: 0 No. Time Source Destination Protocol Length Info 21176 247.323069 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=17263 Ack=1244748 Win=0 Len=0 Frame 21176: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17263, Ack: 1244748, Len: 0 No. Time Source Destination Protocol Length Info 21177 247.329544 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21177: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52188, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21178 247.329579 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#10] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52215 SLE=51918 SRE=51972 Frame 21178: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21179 247.337430 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21179: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52215, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21180 247.337463 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#11] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52242 SLE=51918 SRE=51972 Frame 21180: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21181 247.342595 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21181: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52242, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21182 247.342627 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#12] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52269 SLE=51918 SRE=51972 Frame 21182: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21183 247.343977 192.168.10.30 192.168.10.255 UDP 675 Source port: 34427 Destination port: apc-3052 Frame 21183: 675 bytes on wire (5400 bits), 675 bytes captured (5400 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (633 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 44 54 3d 31 30 .168.10.30.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 31 38 3a 34 /03/2011.TM=18:4 0040 38 3a 30 33 0a 53 52 3d 31 42 0a 53 55 3d 37 42 8:03.SR=1B.SU=7B 0050 31 33 34 43 34 42 0a 52 44 3d 43 38 45 33 0a 54 134C4B.RD=C8E3.T 0060 41 3d 31 39 32 2e 31 36 38 2e 31 30 2e 32 35 35 A=192.168.10.255 0070 0a 50 54 3d 33 30 35 32 0a 43 4c 3d 43 30 41 38 .PT=3052.CL=C0A8 0080 30 41 44 42 0a 43 4c 3d 43 30 41 38 30 41 44 30 0ADB.CL=C0A80AD0 0090 0a 43 4c 3d 43 30 41 38 30 41 43 42 0a 43 4c 3d .CL=C0A80ACB.CL= 00a0 43 30 41 38 30 41 43 43 0a 43 4c 3d 43 30 41 38 C0A80ACC.CL=C0A8 00b0 30 41 43 45 0a 43 4c 3d 43 30 41 38 30 41 44 43 0ACE.CL=C0A80ADC 00c0 0a 43 4c 3d 43 30 41 38 30 41 43 46 0a 43 4c 3d .CL=C0A80ACF.CL= 00d0 43 30 41 38 30 41 43 44 0a 43 4c 3d 43 30 41 38 C0A80ACD.CL=C0A8 00e0 30 41 46 30 0a 43 4c 3d 43 30 41 38 30 41 43 39 0AF0.CL=C0A80AC9 00f0 0a 43 4c 3d 43 30 41 38 30 41 31 30 0a 43 4c 3d .CL=C0A80A10.CL= 0100 43 30 41 38 30 41 30 44 0a 43 4c 3d 43 30 41 38 C0A80A0D.CL=C0A8 0110 30 41 30 46 0a 43 4c 3d 43 30 41 38 30 41 30 43 0A0F.CL=C0A80A0C 0120 0a 43 4c 3d 43 30 41 38 30 41 44 31 0a 43 4c 3d .CL=C0A80AD1.CL= 0130 43 30 41 38 30 41 43 41 0a 43 4c 3d 43 30 41 38 C0A80ACA.CL=C0A8 0140 30 41 46 41 0a 43 4c 3d 43 30 41 38 30 41 44 38 0AFA.CL=C0A80AD8 0150 0a 43 4c 3d 43 30 41 38 30 41 32 37 0a 43 4c 3d .CL=C0A80A27.CL= 0160 43 30 41 38 30 41 44 39 0a 43 4c 3d 43 30 41 38 C0A80AD9.CL=C0A8 0170 30 41 44 33 0a 43 4c 3d 43 30 41 38 30 41 44 32 0AD3.CL=C0A80AD2 0180 0a 43 4c 3d 43 30 41 38 30 41 45 32 0a 43 4c 3d .CL=C0A80AE2.CL= 0190 43 30 41 38 30 41 45 33 0a 43 4c 3d 43 30 41 38 C0A80AE3.CL=C0A8 01a0 30 41 44 45 0a 43 4c 3d 43 30 41 38 31 34 30 33 0ADE.CL=C0A81403 01b0 0a 43 4c 3d 43 30 41 38 30 41 46 36 0a 43 4c 3d .CL=C0A80AF6.CL= 01c0 43 30 41 38 30 41 31 31 0a 43 4c 3d 30 30 0a 43 C0A80A11.CL=00.C 01d0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01e0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01f0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0200 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0210 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0220 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0230 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0240 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 4d 44 3d .CL=00.CL=00.MD= 0250 32 32 35 32 36 30 32 66 62 38 39 65 34 65 30 34 2252602fb89e4e04 0260 35 38 33 36 32 64 64 62 32 38 63 33 30 37 30 31 58362ddb28c30701 0270 0a 3c 2f 42 4f 44 59 3e 0a .</BODY>. No. Time Source Destination Protocol Length Info 21184 247.344116 192.168.10.30 192.168.10.255 UDP 675 Source port: 34427 Destination port: apc-3052 Frame 21184: 675 bytes on wire (5400 bits), 675 bytes captured (5400 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (633 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 44 54 3d 31 30 .168.10.30.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 31 38 3a 34 /03/2011.TM=18:4 0040 38 3a 30 33 0a 53 52 3d 31 42 0a 53 55 3d 37 42 8:03.SR=1B.SU=7B 0050 31 33 34 43 34 42 0a 52 44 3d 43 38 45 33 0a 54 134C4B.RD=C8E3.T 0060 41 3d 31 39 32 2e 31 36 38 2e 31 30 2e 32 35 35 A=192.168.10.255 0070 0a 50 54 3d 33 30 35 32 0a 43 4c 3d 43 30 41 38 .PT=3052.CL=C0A8 0080 30 41 44 42 0a 43 4c 3d 43 30 41 38 30 41 44 30 0ADB.CL=C0A80AD0 0090 0a 43 4c 3d 43 30 41 38 30 41 43 42 0a 43 4c 3d .CL=C0A80ACB.CL= 00a0 43 30 41 38 30 41 43 43 0a 43 4c 3d 43 30 41 38 C0A80ACC.CL=C0A8 00b0 30 41 43 45 0a 43 4c 3d 43 30 41 38 30 41 44 43 0ACE.CL=C0A80ADC 00c0 0a 43 4c 3d 43 30 41 38 30 41 43 46 0a 43 4c 3d .CL=C0A80ACF.CL= 00d0 43 30 41 38 30 41 43 44 0a 43 4c 3d 43 30 41 38 C0A80ACD.CL=C0A8 00e0 30 41 46 30 0a 43 4c 3d 43 30 41 38 30 41 43 39 0AF0.CL=C0A80AC9 00f0 0a 43 4c 3d 43 30 41 38 30 41 31 30 0a 43 4c 3d .CL=C0A80A10.CL= 0100 43 30 41 38 30 41 30 44 0a 43 4c 3d 43 30 41 38 C0A80A0D.CL=C0A8 0110 30 41 30 46 0a 43 4c 3d 43 30 41 38 30 41 30 43 0A0F.CL=C0A80A0C 0120 0a 43 4c 3d 43 30 41 38 30 41 44 31 0a 43 4c 3d .CL=C0A80AD1.CL= 0130 43 30 41 38 30 41 43 41 0a 43 4c 3d 43 30 41 38 C0A80ACA.CL=C0A8 0140 30 41 46 41 0a 43 4c 3d 43 30 41 38 30 41 44 38 0AFA.CL=C0A80AD8 0150 0a 43 4c 3d 43 30 41 38 30 41 32 37 0a 43 4c 3d .CL=C0A80A27.CL= 0160 43 30 41 38 30 41 44 39 0a 43 4c 3d 43 30 41 38 C0A80AD9.CL=C0A8 0170 30 41 44 33 0a 43 4c 3d 43 30 41 38 30 41 44 32 0AD3.CL=C0A80AD2 0180 0a 43 4c 3d 43 30 41 38 30 41 45 32 0a 43 4c 3d .CL=C0A80AE2.CL= 0190 43 30 41 38 30 41 45 33 0a 43 4c 3d 43 30 41 38 C0A80AE3.CL=C0A8 01a0 30 41 44 45 0a 43 4c 3d 43 30 41 38 31 34 30 33 0ADE.CL=C0A81403 01b0 0a 43 4c 3d 43 30 41 38 30 41 46 36 0a 43 4c 3d .CL=C0A80AF6.CL= 01c0 43 30 41 38 30 41 31 31 0a 43 4c 3d 30 30 0a 43 C0A80A11.CL=00.C 01d0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01e0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 01f0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0200 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0210 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0220 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0230 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0240 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 4d 44 3d .CL=00.CL=00.MD= 0250 32 32 35 32 36 30 32 66 62 38 39 65 34 65 30 34 2252602fb89e4e04 0260 35 38 33 36 32 64 64 62 32 38 63 33 30 37 30 31 58362ddb28c30701 0270 0a 3c 2f 42 4f 44 59 3e 0a .</BODY>. No. Time Source Destination Protocol Length Info 21185 247.351040 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21185: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52269, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21186 247.351073 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#13] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52296 SLE=51918 SRE=51972 Frame 21186: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21187 247.354725 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21187: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52296, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21188 247.354758 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#14] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52323 SLE=51918 SRE=51972 Frame 21188: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21189 247.360896 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 21189: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 21190 247.360925 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 21190: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 21191 247.372670 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21191: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52323, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21192 247.372706 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#15] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52350 SLE=51918 SRE=51972 Frame 21192: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21193 247.383035 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21193: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52350, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21194 247.383068 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#16] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52377 SLE=51918 SRE=51972 Frame 21194: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21195 247.395031 192.168.10.203 85.26.183.150 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 21195: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 85.26.183.150 (85.26.183.150) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 21196 247.398770 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21196: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52377, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21197 247.398804 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#17] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52404 SLE=51918 SRE=51972 Frame 21197: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21198 247.404777 192.168.10.250 192.168.10.255 NBNS 92 Name query NB ARCE<20> Frame 21198: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Intel_86:1a:cf (00:11:11:86:1a:cf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.250 (192.168.10.250), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 21199 247.405041 192.168.10.250 192.168.10.255 NBNS 92 Name query NB ARCE<20> Frame 21199: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Intel_86:1a:cf (00:11:11:86:1a:cf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.250 (192.168.10.250), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 21200 247.422728 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21200: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52404, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21201 247.422762 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#18] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52431 SLE=51918 SRE=51972 Frame 21201: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21202 247.438665 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21202: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52431, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21203 247.438698 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#19] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52458 SLE=51918 SRE=51972 Frame 21203: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21204 247.443972 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 21204: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 21205 247.453750 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21205: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52458, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21206 247.453794 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#20] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52485 SLE=51918 SRE=51972 Frame 21206: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21207 247.454940 14.97.186.55 192.168.10.207 SMTP 73 C: EHLO myluekmr.com Frame 21207: 73 bytes on wire (584 bits), 73 bytes captured (584 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13610 (13610), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 19 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21208 247.455177 192.168.10.207 14.97.186.55 SMTP 243 S: 250-mail.mydomain.com Hello [14.97.186.55] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 21208: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 14.97.186.55 (14.97.186.55) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 13610 (13610), Seq: 122, Ack: 20, Len: 189 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21209 247.455219 14.97.186.55 192.168.10.207 TCP 60 13610 > smtp [ACK] Seq=20 Ack=311 Win=93130 Len=0 Frame 21209: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13610 (13610), Dst Port: smtp (25), Seq: 20, Ack: 311, Len: 0 No. Time Source Destination Protocol Length Info 21210 247.455568 192.168.10.1 192.168.10.245 Syslog 270 LOCAL1.INFO: Oct 3 19:48:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13610 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 21210: 270 bytes on wire (2160 bits), 270 bytes captured (2160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13610 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" No. Time Source Destination Protocol Length Info 21211 247.455638 192.168.10.1 192.168.10.245 Syslog 276 LOCAL1.INFO: Oct 3 19:48:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13610 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 21211: 276 bytes on wire (2208 bits), 276 bytes captured (2208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13610 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELI No. Time Source Destination Protocol Length Info 21212 247.455772 192.168.10.1 192.168.10.245 Syslog 269 LOCAL1.INFO: Oct 3 19:48:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13610 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 21212: 269 bytes on wire (2152 bits), 269 bytes captured (2152 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13610 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 21213 247.455925 192.168.10.1 192.168.10.245 Syslog 285 LOCAL1.INFO: Oct 3 19:48:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13610 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 21213: 285 bytes on wire (2280 bits), 285 bytes captured (2280 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13610 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANC No. Time Source Destination Protocol Length Info 21214 247.456027 192.168.10.1 192.168.10.245 Syslog 276 LOCAL1.INFO: Oct 3 19:48:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13610 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 21214: 276 bytes on wire (2208 bits), 276 bytes captured (2208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13610 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARY No. Time Source Destination Protocol Length Info 21215 247.456149 192.168.10.1 192.168.10.245 Syslog 270 LOCAL1.INFO: Oct 3 19:48:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13610 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 21215: 270 bytes on wire (2160 bits), 270 bytes captured (2160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13610 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" No. Time Source Destination Protocol Length Info 21216 247.462996 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21216: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52485, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21217 247.463031 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#21] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52512 SLE=51918 SRE=51972 Frame 21217: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21218 247.468756 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21218: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52512, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21219 247.468791 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#22] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52539 SLE=51918 SRE=51972 Frame 21219: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21220 247.476609 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21220: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52539, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21221 247.476646 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#23] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52566 SLE=51918 SRE=51972 Frame 21221: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21222 247.492653 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21222: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52566, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21223 247.492685 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#24] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52593 SLE=51918 SRE=51972 Frame 21223: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21224 247.496913 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21224: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52593, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21225 247.496946 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#25] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52620 SLE=51918 SRE=51972 Frame 21225: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21226 247.503010 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21226: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52620, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21227 247.503043 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#26] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52647 SLE=51918 SRE=51972 Frame 21227: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21228 247.510897 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21228: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52647, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21229 247.510940 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#27] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52674 SLE=51918 SRE=51972 Frame 21229: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21230 247.522781 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21230: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52674, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21231 247.522815 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#28] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52701 SLE=51918 SRE=51972 Frame 21231: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21232 247.532570 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21232: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52701, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21233 247.532606 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#29] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52728 SLE=51918 SRE=51972 Frame 21233: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21234 247.532823 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21234: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52728, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21235 247.532856 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#30] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52755 SLE=51918 SRE=51972 Frame 21235: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21236 247.538905 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21236: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52755, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21237 247.538938 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#31] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52782 SLE=51918 SRE=51972 Frame 21237: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21238 247.566449 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 21238: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 21239 247.576753 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21239: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52782, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21240 247.576787 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#32] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52809 SLE=51918 SRE=51972 Frame 21240: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21241 247.582773 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21241: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52809, Ack: 340392, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21242 247.582808 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21135#33] rfb > xrl [ACK] Seq=340392 Ack=51589 Win=65535 Len=0 SLE=52107 SRE=52836 SLE=51918 SRE=51972 Frame 21242: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 51589, Len: 0 No. Time Source Destination Protocol Length Info 21243 247.587267 192.168.10.216 64.74.103.131 TLSv1 91 Application Data Frame 21243: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.216 (192.168.10.216), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: ovrimosdbman (2956), Dst Port: https (443), Seq: 297, Ack: 297, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 21244 247.587337 64.74.103.131 192.168.10.216 TCP 60 https > ovrimosdbman [ACK] Seq=297 Ack=334 Win=65535 Len=0 Frame 21244: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.216 (192.168.10.216) Transmission Control Protocol, Src Port: https (443), Dst Port: ovrimosdbman (2956), Seq: 297, Ack: 334, Len: 0 No. Time Source Destination Protocol Length Info 21245 247.589819 Watchgua_3c:4c:d8 IntelCor_36:19:60 ARP 60 Who has 192.168.10.216? Tell 192.168.10.1 Frame 21245: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21246 247.589835 IntelCor_36:19:60 Watchgua_3c:4c:d8 ARP 60 192.168.10.216 is at 00:13:20:36:19:60 Frame 21246: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21247 247.635474 64.74.103.131 192.168.10.216 TLSv1 91 Application Data Frame 21247: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60) Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.216 (192.168.10.216) Transmission Control Protocol, Src Port: https (443), Dst Port: ovrimosdbman (2956), Seq: 297, Ack: 334, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 21248 247.742071 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.96? Tell 192.168.10.226 Frame 21248: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21249 247.742102 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.96? Tell 192.168.10.226 Frame 21249: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21250 247.742136 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 21250: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21251 247.742146 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 21251: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21252 247.742157 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 21252: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21253 247.742170 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 21253: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21254 247.742180 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 21254: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21255 247.742190 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 21255: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21256 247.742201 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 21256: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21257 247.742215 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 21257: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21258 247.742225 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 21258: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21259 247.742241 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 21259: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21260 247.742274 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 21260: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21261 247.742284 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 21261: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21262 247.742294 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 21262: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21263 247.742320 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 21263: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21264 247.742331 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 21264: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21265 247.742341 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 21265: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21266 247.742351 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 21266: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21267 247.742361 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 21267: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21268 247.742372 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 21268: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21269 247.742390 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 21269: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21270 247.742400 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 21270: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21271 247.742410 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 21271: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21272 247.742421 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 21272: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21273 247.742431 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 21273: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21274 247.742441 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 21274: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21275 247.742451 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 21275: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21276 247.742461 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 21276: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21277 247.742471 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 21277: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21278 247.742481 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 21278: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21279 247.742491 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 21279: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21280 247.742501 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 21280: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21281 247.742512 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 21281: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21282 247.742522 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 21282: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21283 247.742532 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 21283: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21284 247.742542 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 21284: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21285 247.742551 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 21285: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21286 247.742562 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 21286: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21287 247.742572 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 Frame 21287: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21288 247.742582 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 21288: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21289 247.742592 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 21289: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21290 247.742602 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 21290: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21291 247.742656 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 Frame 21291: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21292 247.759900 192.168.10.142 192.168.10.185 VNC 1301 [TCP Retransmission] Authentication result Frame 21292: 1301 bytes on wire (10408 bits), 1301 bytes captured (10408 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 51589, Ack: 340392, Len: 1247 Virtual Network Computing No. Time Source Destination Protocol Length Info 21293 247.790254 192.168.10.216 64.74.103.131 TCP 60 ovrimosdbman > https [ACK] Seq=334 Ack=334 Win=65387 Len=0 Frame 21293: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.216 (192.168.10.216), Dst: 64.74.103.131 (64.74.103.131) Transmission Control Protocol, Src Port: ovrimosdbman (2956), Dst Port: https (443), Seq: 334, Ack: 334, Len: 0 No. Time Source Destination Protocol Length Info 21294 247.802559 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340392 Ack=52836 Win=64288 Len=0 Frame 21294: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 52836, Len: 0 No. Time Source Destination Protocol Length Info 21295 247.822761 192.168.10.185 192.168.10.142 VNC 286 Authentication result Frame 21295: 286 bytes on wire (2288 bits), 286 bytes captured (2288 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340392, Ack: 52836, Len: 232 Virtual Network Computing No. Time Source Destination Protocol Length Info 21296 247.847450 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 21296: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52836, Ack: 340624, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 21297 247.862240 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 21297: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 21298 247.862271 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 21298: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 21299 247.881799 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-02.geo.kaspersky.com Frame 21299: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 64857 (64857), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 21300 247.970728 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 21300: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17263, Ack: 1244748, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21301 247.970762 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1246124 Ack=17305 Win=46048 Len=0 Frame 21301: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1246124, Ack: 17305, Len: 0 No. Time Source Destination Protocol Length Info 21302 247.970794 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=17305 Ack=1244748 Win=0 Len=0 Frame 21302: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17305, Ack: 1244748, Len: 0 No. Time Source Destination Protocol Length Info 21303 248.034258 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1404049664, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 21303: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21304 248.034282 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1404049664, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 21304: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21305 248.034294 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1404049664, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 21305: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21306 248.034307 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1404049664, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 21306: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21307 248.051986 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3273130240, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 21307: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21308 248.052006 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3273130240, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 21308: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21309 248.052019 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3273130240, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 21309: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21310 248.052031 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3273130240, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 21310: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21311 248.130682 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340624 Ack=52868 Win=65535 Len=0 Frame 21311: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340624, Ack: 52868, Len: 0 No. Time Source Destination Protocol Length Info 21312 248.239034 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 21312: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17263, Ack: 1244748, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21313 248.239069 206.225.164.186 192.168.10.207 TCP 60 [TCP Dup ACK 21301#1] 23308 > smtp [ACK] Seq=1246124 Ack=17305 Win=46048 Len=0 Frame 21313: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1246124, Ack: 17305, Len: 0 No. Time Source Destination Protocol Length Info 21314 248.239101 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=17305 Ack=1244748 Win=0 Len=0 Frame 21314: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17305, Ack: 1244748, Len: 0 No. Time Source Destination Protocol Length Info 21315 248.367343 192.168.10.250 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 21315: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Intel_86:1a:cf (00:11:11:86:1a:cf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.250 (192.168.10.250), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 21316 248.367561 192.168.10.250 192.168.10.255 NBNS 92 Name query NB TITAN<20> Frame 21316: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Intel_86:1a:cf (00:11:11:86:1a:cf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.250 (192.168.10.250), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 21317 248.413924 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 21317: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53030, Ack: 340624, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21318 248.413960 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21311#1] rfb > xrl [ACK] Seq=340624 Ack=52868 Win=65535 Len=0 SLE=53030 SRE=53057 Frame 21318: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340624, Ack: 52868, Len: 0 No. Time Source Destination Protocol Length Info 21319 248.418987 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21319: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53057, Ack: 340624, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21320 248.419018 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21311#2] rfb > xrl [ACK] Seq=340624 Ack=52868 Win=65535 Len=0 SLE=53030 SRE=53084 Frame 21320: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340624, Ack: 52868, Len: 0 No. Time Source Destination Protocol Length Info 21321 248.419058 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21321: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53084, Ack: 340624, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21322 248.419090 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21311#3] rfb > xrl [ACK] Seq=340624 Ack=52868 Win=65535 Len=0 SLE=53030 SRE=53111 Frame 21322: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340624, Ack: 52868, Len: 0 No. Time Source Destination Protocol Length Info 21323 248.422872 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21323: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53111, Ack: 340624, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21324 248.422905 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21311#4] rfb > xrl [ACK] Seq=340624 Ack=52868 Win=65535 Len=0 SLE=53030 SRE=53138 Frame 21324: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340624, Ack: 52868, Len: 0 No. Time Source Destination Protocol Length Info 21325 248.441049 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 21325: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52868, Ack: 340624, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21326 248.445306 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 21326: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53192, Ack: 340624, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21327 248.445337 192.168.10.185 192.168.10.142 TCP 74 rfb > xrl [ACK] Seq=340624 Ack=52895 Win=65508 Len=0 SLE=53192 SRE=53219 SLE=53030 SRE=53138 Frame 21327: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340624, Ack: 52895, Len: 0 No. Time Source Destination Protocol Length Info 21328 248.453145 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21328: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53219, Ack: 340624, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21329 248.453195 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21327#1] rfb > xrl [ACK] Seq=340624 Ack=52895 Win=65508 Len=0 SLE=53192 SRE=53246 SLE=53030 SRE=53138 Frame 21329: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340624, Ack: 52895, Len: 0 No. Time Source Destination Protocol Length Info 21330 248.477913 192.168.10.221 192.168.10.1 ICMP 74 Echo (ping) request id=0x0200, seq=42260/5285, ttl=128 Frame 21330: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 192.168.10.1 (192.168.10.1) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 21331 248.477981 192.168.10.1 192.168.10.221 ICMP 74 Echo (ping) reply id=0x0200, seq=42260/5285, ttl=64 Frame 21331: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.221 (192.168.10.221) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 21332 248.477999 Watchgua_3c:4c:d8 Dell_80:27:ab ARP 60 Who has 192.168.10.221? Tell 192.168.10.1 Frame 21332: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21333 248.478009 Dell_80:27:ab Watchgua_3c:4c:d8 ARP 60 192.168.10.221 is at 00:22:19:80:27:ab Frame 21333: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) [Duplicate IP address detected for 192.168.10.221 (00:22:19:80:27:ab) - also in use by 00:22:19:80:27:ad (frame 195)] Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21334 248.494394 192.168.10.185 192.168.10.142 VNC 172 Authentication result Frame 21334: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340624, Ack: 52895, Len: 118 Virtual Network Computing No. Time Source Destination Protocol Length Info 21335 248.516966 192.168.10.142 192.168.10.185 VNC 86 [TCP Previous segment lost] Authentication result Frame 21335: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53273, Ack: 340742, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 21336 248.517002 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21334#1] rfb > xrl [ACK] Seq=340742 Ack=52895 Win=65508 Len=0 SLE=53273 SRE=53305 SLE=53192 SRE=53246 Frame 21336: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 52895, Len: 0 No. Time Source Destination Protocol Length Info 21337 248.546938 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 21337: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52895, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21338 248.551239 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 21338: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53138, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21339 248.551273 192.168.10.185 192.168.10.142 TCP 82 rfb > xrl [ACK] Seq=340742 Ack=52922 Win=65481 Len=0 SLE=53030 SRE=53165 SLE=53273 SRE=53305 SLE=53192 SRE=53246 Frame 21339: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 52922, Len: 0 No. Time Source Destination Protocol Length Info 21340 248.555020 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 21340: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53246, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21341 248.555053 192.168.10.185 192.168.10.142 TCP 82 [TCP Dup ACK 21339#1] rfb > xrl [ACK] Seq=340742 Ack=52922 Win=65481 Len=0 SLE=53192 SRE=53273 SLE=53030 SRE=53165 SLE=53273 SRE=53305 Frame 21341: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 52922, Len: 0 No. Time Source Destination Protocol Length Info 21342 248.560488 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 21342: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21343 248.560520 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74 Frame 21343: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21344 248.842512 192.168.10.207 206.225.164.186 SMTP 138 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 21344: 138 bytes on wire (1104 bits), 138 bytes captured (1104 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17263, Ack: 1244748, Len: 84 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21345 248.842549 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1246124 Ack=17347 Win=46720 Len=0 Frame 21345: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1246124, Ack: 17347, Len: 0 No. Time Source Destination Protocol Length Info 21346 248.842623 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=17347 Ack=1244748 Win=0 Len=0 Frame 21346: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17347, Ack: 1244748, Len: 0 No. Time Source Destination Protocol Length Info 21347 248.856846 189.123.44.91 192.168.10.207 TCP 62 asap-tcp > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 21347: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.44.91 (189.123.44.91), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: asap-tcp (3863), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 21348 248.856916 192.168.10.207 189.123.44.91 TCP 62 smtp > asap-tcp [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 21348: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.44.91 (189.123.44.91) Transmission Control Protocol, Src Port: smtp (25), Dst Port: asap-tcp (3863), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 21349 248.881709 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-02.geo.kaspersky.com Frame 21349: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 64857 (64857), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 21350 248.943126 192.168.10.207 180.243.236.205 TCP 62 smtp > ipcd3 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 21350: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: ipcd3 (1209), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 21351 249.002091 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 82.93.177.122.in-addr.arpa Frame 21351: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 63378 (63378), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 21352 249.004968 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21352: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53305, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21353 249.005002 192.168.10.185 192.168.10.142 TCP 82 [TCP Dup ACK 21339#2] rfb > xrl [ACK] Seq=340742 Ack=52922 Win=65481 Len=0 SLE=53273 SRE=53332 SLE=53030 SRE=53165 SLE=53192 SRE=53273 Frame 21353: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 52922, Len: 0 No. Time Source Destination Protocol Length Info 21354 249.029012 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 21354: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52922, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21355 249.032946 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 21355: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53165, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21356 249.032979 192.168.10.185 192.168.10.142 TCP 82 rfb > xrl [ACK] Seq=340742 Ack=52949 Win=65454 Len=0 SLE=53030 SRE=53192 SLE=53192 SRE=53273 SLE=53030 SRE=53165 Frame 21356: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 52949, Len: 0 No. Time Source Destination Protocol Length Info 21357 249.034253 189.123.44.91 192.168.10.207 TCP 60 asap-tcp > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 21357: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.44.91 (189.123.44.91), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: asap-tcp (3863), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 21358 249.034337 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:48:27 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.44.91 7x.x.x.3 3863 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 21358: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:27 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.44.91 7x.x.x.3 3863 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 21359 249.034373 192.168.10.207 189.123.44.91 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:48:01 -0400 Frame 21359: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.44.91 (189.123.44.91) Transmission Control Protocol, Src Port: smtp (25), Dst Port: asap-tcp (3863), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21360 249.034444 189.123.44.91 192.168.10.207 TCP 60 asap-tcp > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 21360: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.44.91 (189.123.44.91), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: asap-tcp (3863), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 21361 249.049657 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1420826880, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 21361: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21362 249.049680 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1420826880, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 21362: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21363 249.049692 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1420826880, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 21363: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21364 249.049704 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1420826880, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 21364: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21365 249.067756 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3289907456, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 21365: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21366 249.067775 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3289907456, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 21366: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21367 249.067787 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3289907456, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 21367: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21368 249.067799 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3289907456, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 21368: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21369 249.131642 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21369: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53332, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21370 249.131677 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21356#1] rfb > xrl [ACK] Seq=340742 Ack=52949 Win=65454 Len=0 SLE=53273 SRE=53359 SLE=53030 SRE=53192 Frame 21370: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 52949, Len: 0 No. Time Source Destination Protocol Length Info 21371 249.142978 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21371: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53359, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21372 249.143009 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21356#2] rfb > xrl [ACK] Seq=340742 Ack=52949 Win=65454 Len=0 SLE=53273 SRE=53386 SLE=53030 SRE=53192 Frame 21372: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 52949, Len: 0 No. Time Source Destination Protocol Length Info 21373 249.164889 192.168.10.142 192.168.10.185 VNC 81 [TCP Retransmission] Authentication result Frame 21373: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52949, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21374 249.194346 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 21374: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 21375 249.211688 189.123.44.91 192.168.10.207 SMTP 83 C: HELO bd7b2c5b.virtua.com.br Frame 21375: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.44.91 (189.123.44.91), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: asap-tcp (3863), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 29 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21376 249.211727 192.168.10.207 189.123.44.91 SMTP 102 S: 250 mail.mydomain.com Hello [189.123.44.91] Frame 21376: 102 bytes on wire (816 bits), 102 bytes captured (816 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.44.91 (189.123.44.91) Transmission Control Protocol, Src Port: smtp (25), Dst Port: asap-tcp (3863), Seq: 122, Ack: 30, Len: 48 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21377 249.211766 189.123.44.91 192.168.10.207 TCP 60 asap-tcp > smtp [ACK] Seq=30 Ack=170 Win=93270 Len=0 Frame 21377: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.44.91 (189.123.44.91), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: asap-tcp (3863), Dst Port: smtp (25), Seq: 30, Ack: 170, Len: 0 No. Time Source Destination Protocol Length Info 21378 249.315362 65.32.1.65 192.168.10.246 DNS 152 Standard query response PTR ABTS-North-Dynamic-082.93.177.122.airtelbroadband.in Frame 21378: 152 bytes on wire (1216 bits), 152 bytes captured (1216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 63378 (63378) Domain Name System (response) No. Time Source Destination Protocol Length Info 21379 249.315799 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 21379: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 21380 249.324310 180.243.236.205 192.168.10.207 TCP 60 ipcd3 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 21380: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: ipcd3 (1209), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 21381 249.324427 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:48:27 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1209 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 21381: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:27 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1209 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 21382 249.324508 192.168.10.207 180.243.236.205 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:48:02 -0400 Frame 21382: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: ipcd3 (1209), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21383 249.324596 180.243.236.205 192.168.10.207 TCP 60 ipcd3 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 21383: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: ipcd3 (1209), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 21384 249.333845 192.168.10.185 192.168.10.142 TCP 74 rfb > xrl [ACK] Seq=340742 Ack=52976 Win=65427 Len=0 SLE=53273 SRE=53386 SLE=53030 SRE=53192 Frame 21384: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 52976, Len: 0 No. Time Source Destination Protocol Length Info 21385 249.341032 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21385: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53386, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21386 249.341067 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21384#1] rfb > xrl [ACK] Seq=340742 Ack=52976 Win=65427 Len=0 SLE=53273 SRE=53413 SLE=53030 SRE=53192 Frame 21386: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 52976, Len: 0 No. Time Source Destination Protocol Length Info 21387 249.351968 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 21387: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 21388 249.351999 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 21388: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 21389 249.397037 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21389: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53413, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21390 249.397071 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21384#2] rfb > xrl [ACK] Seq=340742 Ack=52976 Win=65427 Len=0 SLE=53273 SRE=53440 SLE=53030 SRE=53192 Frame 21390: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 52976, Len: 0 No. Time Source Destination Protocol Length Info 21391 249.421442 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21391: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53440, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21392 249.421477 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21384#3] rfb > xrl [ACK] Seq=340742 Ack=52976 Win=65427 Len=0 SLE=53273 SRE=53467 SLE=53030 SRE=53192 Frame 21392: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 52976, Len: 0 No. Time Source Destination Protocol Length Info 21393 249.431085 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 21393: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 52976, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21394 249.442984 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 6.165.122.124.in-addr.arpa Frame 21394: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 58256 (58256), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 21395 249.444076 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 21395: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 21396 249.472020 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21396: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53467, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21397 249.472056 192.168.10.185 192.168.10.142 TCP 74 rfb > xrl [ACK] Seq=340742 Ack=53003 Win=65400 Len=0 SLE=53273 SRE=53494 SLE=53030 SRE=53192 Frame 21397: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 53003, Len: 0 No. Time Source Destination Protocol Length Info 21398 249.480474 192.168.10.221 192.168.10.1 ICMP 74 Echo (ping) request id=0x0200, seq=42516/5286, ttl=128 Frame 21398: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 192.168.10.1 (192.168.10.1) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 21399 249.480533 192.168.10.1 192.168.10.221 ICMP 74 Echo (ping) reply id=0x0200, seq=42516/5286, ttl=64 Frame 21399: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.221 (192.168.10.221) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 21400 249.485158 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21400: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53494, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21401 249.485197 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21397#1] rfb > xrl [ACK] Seq=340742 Ack=53003 Win=65400 Len=0 SLE=53273 SRE=53521 SLE=53030 SRE=53192 Frame 21401: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 53003, Len: 0 No. Time Source Destination Protocol Length Info 21402 249.489073 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21402: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53521, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21403 249.489107 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21397#2] rfb > xrl [ACK] Seq=340742 Ack=53003 Win=65400 Len=0 SLE=53273 SRE=53548 SLE=53030 SRE=53192 Frame 21403: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 53003, Len: 0 No. Time Source Destination Protocol Length Info 21404 249.493121 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21404: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53548, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21405 249.493150 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21397#3] rfb > xrl [ACK] Seq=340742 Ack=53003 Win=65400 Len=0 SLE=53273 SRE=53575 SLE=53030 SRE=53192 Frame 21405: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 53003, Len: 0 No. Time Source Destination Protocol Length Info 21406 249.499361 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21406: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53575, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21407 249.499393 192.168.10.185 192.168.10.142 TCP 74 [TCP Dup ACK 21397#4] rfb > xrl [ACK] Seq=340742 Ack=53003 Win=65400 Len=0 SLE=53273 SRE=53602 SLE=53030 SRE=53192 Frame 21407: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 53003, Len: 0 No. Time Source Destination Protocol Length Info 21408 249.513018 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 21408: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53003, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21409 249.513054 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340742 Ack=53602 Win=64801 Len=0 Frame 21409: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 53602, Len: 0 No. Time Source Destination Protocol Length Info 21410 249.517005 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 21410: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53629, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21411 249.517037 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21409#1] rfb > xrl [ACK] Seq=340742 Ack=53602 Win=64801 Len=0 SLE=53629 SRE=53656 Frame 21411: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 53602, Len: 0 No. Time Source Destination Protocol Length Info 21412 249.525081 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21412: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53656, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21413 249.525115 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21409#2] rfb > xrl [ACK] Seq=340742 Ack=53602 Win=64801 Len=0 SLE=53629 SRE=53683 Frame 21413: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 53602, Len: 0 No. Time Source Destination Protocol Length Info 21414 249.533209 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21414: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53683, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21415 249.533245 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21409#3] rfb > xrl [ACK] Seq=340742 Ack=53602 Win=64801 Len=0 SLE=53629 SRE=53710 Frame 21415: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 53602, Len: 0 No. Time Source Destination Protocol Length Info 21416 249.541040 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21416: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53710, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21417 249.541074 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21409#4] rfb > xrl [ACK] Seq=340742 Ack=53602 Win=64801 Len=0 SLE=53629 SRE=53737 Frame 21417: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 53602, Len: 0 No. Time Source Destination Protocol Length Info 21418 249.547420 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21418: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53737, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21419 249.547454 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21409#5] rfb > xrl [ACK] Seq=340742 Ack=53602 Win=64801 Len=0 SLE=53629 SRE=53764 Frame 21419: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 53602, Len: 0 No. Time Source Destination Protocol Length Info 21420 249.551120 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 21420: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53602, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21421 249.551154 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340742 Ack=53764 Win=64639 Len=0 Frame 21421: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 53764, Len: 0 No. Time Source Destination Protocol Length Info 21422 249.555349 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21422: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53764, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21423 249.563199 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21423: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53791, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21424 249.563233 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340742 Ack=53818 Win=64585 Len=0 Frame 21424: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 53818, Len: 0 No. Time Source Destination Protocol Length Info 21425 249.566315 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 21425: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 21426 249.573234 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21426: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53818, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21427 249.582733 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21427: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53845, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21428 249.582768 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340742 Ack=53872 Win=64531 Len=0 Frame 21428: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 53872, Len: 0 No. Time Source Destination Protocol Length Info 21429 249.603507 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21429: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53872, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21430 249.603589 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21430: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53899, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21431 249.603622 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340742 Ack=53926 Win=64477 Len=0 Frame 21431: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 53926, Len: 0 No. Time Source Destination Protocol Length Info 21432 249.612180 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 21432: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53953, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21433 249.612217 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21431#1] rfb > xrl [ACK] Seq=340742 Ack=53926 Win=64477 Len=0 SLE=53953 SRE=53980 Frame 21433: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 53926, Len: 0 No. Time Source Destination Protocol Length Info 21434 249.621144 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21434: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53980, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21435 249.621178 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21431#2] rfb > xrl [ACK] Seq=340742 Ack=53926 Win=64477 Len=0 SLE=53953 SRE=54007 Frame 21435: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 53926, Len: 0 No. Time Source Destination Protocol Length Info 21436 249.628586 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 21436: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54007, Ack: 340742, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 21437 249.628619 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21431#3] rfb > xrl [ACK] Seq=340742 Ack=53926 Win=64477 Len=0 SLE=53953 SRE=54036 Frame 21437: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 53926, Len: 0 No. Time Source Destination Protocol Length Info 21438 249.633034 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21438: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54036, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21439 249.633067 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21431#4] rfb > xrl [ACK] Seq=340742 Ack=53926 Win=64477 Len=0 SLE=53953 SRE=54063 Frame 21439: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 53926, Len: 0 No. Time Source Destination Protocol Length Info 21440 249.635901 180.243.236.205 192.168.10.207 SMTP 71 C: EHLO twvwai.com Frame 21440: 71 bytes on wire (568 bits), 71 bytes captured (568 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: ipcd3 (1209), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 17 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21441 249.635987 192.168.10.207 180.243.236.205 SMTP 246 S: 250-mail.mydomain.com Hello [180.243.236.205] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 21441: 246 bytes on wire (1968 bits), 246 bytes captured (1968 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: ipcd3 (1209), Seq: 122, Ack: 18, Len: 192 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21442 249.636031 180.243.236.205 192.168.10.207 TCP 60 ipcd3 > smtp [ACK] Seq=18 Ack=314 Win=93126 Len=0 Frame 21442: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: ipcd3 (1209), Dst Port: smtp (25), Seq: 18, Ack: 314, Len: 0 No. Time Source Destination Protocol Length Info 21443 249.636825 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=254199 Ack=4589 Win=1002 Len=1448 TSval=597656 TSecr=729942 Frame 21443: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 254199, Ack: 4589, Len: 1448 Data (1448 bytes) 0000 17 03 01 22 70 55 f8 7b 18 9e 86 25 8f ab d0 f9 ..."pU.{...%.... 0010 6b 23 6e be 38 0c 69 e1 fb ae da 50 58 a9 8e 0c k#n.8.i....PX... 0020 32 93 33 51 92 4c fe 86 ba 8b 48 c9 69 17 51 d2 2.3Q.L....H.i.Q. 0030 85 94 21 a7 02 93 e6 85 f2 4a 17 2a 37 67 a5 32 ..!......J.*7g.2 0040 fd 26 2a 65 b8 cd ef de 62 d5 25 12 87 63 07 ca .&*e....b.%..c.. 0050 e4 94 a3 5c 75 77 a5 1e b6 b6 02 14 9c 01 7d 67 ...\uw........}g 0060 1d a0 6b b0 97 85 ae d4 73 29 a9 c9 d9 e4 a2 25 ..k.....s).....% 0070 6c 2a 62 aa 7c b4 38 50 8f 9f e7 7d cd a7 dd 67 l*b.|.8P...}...g 0080 72 b4 e1 0b c9 f0 71 b2 a5 5d 06 5b e2 2f 47 fa r.....q..].[./G. 0090 f8 e1 7b 89 da ab f6 f4 60 e3 97 74 84 10 7a 39 ..{.....`..t..z9 00a0 91 9e 5d d3 70 fb 40 c9 de 26 8c 92 26 c0 bc dc ..].p.@..&..&... 00b0 59 a1 ee df 04 3f 7a 25 dc 73 dc 92 9c c2 f1 91 Y....?z%.s...... 00c0 08 fc be 59 06 df 1f 06 05 2e 2d 1f ef 5c 29 57 ...Y......-..\)W 00d0 5e a2 91 ee ab 11 12 b0 1d df 8a 4d f0 70 6f ba ^..........M.po. 00e0 f6 30 f9 ba 1d 46 82 32 4a 7e 8a d2 bf 6a f9 94 .0...F.2J~...j.. 00f0 47 77 ed d0 93 f9 41 72 a5 cd ab 5b 06 ee 3a da Gw....Ar...[..:. 0100 39 88 78 eb 30 a7 0d 5c ec e5 0f 3c 0e 5c de 26 9.x.0..\...<.\.& 0110 62 04 a1 01 51 33 6e e3 93 3a 58 03 9a 4f 65 1b b...Q3n..:X..Oe. 0120 87 15 86 14 96 4a 0a fd dd 4e 71 34 c6 8d cc 7d .....J...Nq4...} 0130 7e 77 a1 a8 0a b0 d8 14 24 00 ea d2 7d 34 bf b4 ~w......$...}4.. 0140 96 81 14 53 9e 5d 87 89 aa 71 bc a8 3d bf 77 4f ...S.]...q..=.wO 0150 61 31 ba df 10 f6 7c 2f cc 54 a8 eb c3 36 fa 32 a1....|/.T...6.2 0160 46 85 0d 03 ee f2 ee fe 45 0f ff f1 b2 c5 37 31 F.......E.....71 0170 7f be 32 6d 24 45 3a 1e 68 65 7e b6 08 4d 53 68 ..2m$E:.he~..MSh 0180 76 64 99 a2 67 c4 ce 8b cf d0 85 ec e7 e5 81 4d vd..g..........M 0190 42 bc 00 6f 21 2b 43 82 cd 1e 1a 42 c0 99 3d 8f B..o!+C....B..=. 01a0 49 b1 11 ac c1 cb 52 5a f3 85 e4 1e 1b a8 58 a2 I.....RZ......X. 01b0 90 25 b1 f8 dc 7e 96 cf 46 4d 86 82 f4 08 77 e1 .%...~..FM....w. 01c0 da 56 29 f1 2b 19 2d 2a ab 3d 8e b4 04 62 8a 44 .V).+.-*.=...b.D 01d0 e4 df 53 a7 f7 c0 25 19 b0 48 53 12 8f 41 fb 10 ..S...%..HS..A.. 01e0 b4 8b 93 c0 f6 28 bd 14 f1 89 81 85 e9 a9 5b b5 .....(........[. 01f0 bb 05 41 67 e7 f5 dc 70 42 29 30 56 d7 63 0d ed ..Ag...pB)0V.c.. 0200 f4 d5 6d fd 4d e7 aa 12 31 62 2e dd 4a 01 0d 7c ..m.M...1b..J..| 0210 86 9f 07 b6 a4 14 c8 b9 8a cb e3 a0 e2 c1 be 95 ................ 0220 fd a7 cd d4 07 ca 76 4b 26 02 39 c7 98 0d 16 6c ......vK&.9....l 0230 f5 e4 24 3b 67 6b b5 63 3d d2 6f 5c 34 fc b9 5d ..$;gk.c=.o\4..] 0240 36 af 36 d7 a4 82 51 04 38 5f 89 77 fd 5a c2 c2 6.6...Q.8_.w.Z.. 0250 54 47 bc f3 ab 88 71 2c 4e 3f 1c 55 db 53 97 fc TG....q,N?.U.S.. 0260 d0 9a fd 86 32 bd dc fb 31 5e 17 9e f6 b8 0a bf ....2...1^...... 0270 7c 7e 0e 17 74 e4 cb 55 55 b5 77 b2 02 2f ae c5 |~..t..UU.w../.. 0280 a1 cc d3 fd 32 84 49 ef ad ad 75 e7 1e 8b 5f 30 ....2.I...u..._0 0290 2c b5 f5 6d 96 22 f9 72 fe 1c a5 72 71 f5 4c 72 ,..m.".r...rq.Lr 02a0 ae 91 e7 43 8c 99 ff 2e c9 0c 93 d7 5c 53 bf 8f ...C........\S.. 02b0 ef 92 f9 4b ce 90 90 bf fd 46 86 3f f7 f6 bd 89 ...K.....F.?.... 02c0 9d 87 be 00 ab a4 da fa 36 36 a4 99 29 b0 60 93 ........66..).`. 02d0 fe 85 72 3c 8e 58 7d 35 81 f1 7e e5 96 ba a9 e2 ..r<.X}5..~..... 02e0 1b 15 31 92 66 48 46 84 8c 66 d1 a5 aa 5d df c7 ..1.fHF..f...].. 02f0 4a 3e 89 7d 98 f0 8b ef d0 e6 32 fd 90 91 b0 e8 J>.}......2..... 0300 ea 11 35 ea 5a 85 2b 46 cd ba 3a eb 9d 87 c9 85 ..5.Z.+F..:..... 0310 02 24 fd f2 b4 44 8b 21 0e 5d 3f b2 b5 09 8c 56 .$...D.!.]?....V 0320 0a 2b 0a 10 99 7a 4a 5f ee 11 ce 16 33 9a c7 e1 .+...zJ_....3... 0330 b8 1c 98 11 c3 53 ea 6d 3d 6d 02 4f 1c 5f 43 ae .....S.m=m.O._C. 0340 ea cd fd 69 1c e8 24 30 34 b3 aa b4 3c 7e 9d fc ...i..$04...<~.. 0350 47 7b 1f bd 02 d3 20 18 11 e5 39 d6 c7 04 60 38 G{.... ...9...`8 0360 5a 26 20 22 2e c5 43 4f c7 21 71 33 78 a4 11 c2 Z& "..CO.!q3x... 0370 e4 eb 98 99 ce ac 78 5b 75 ed 06 26 9e 2f 22 1d ......x[u..&./". 0380 5a 2a c8 76 70 b0 ae c6 e8 9b 1a 48 28 45 e9 a0 Z*.vp......H(E.. 0390 12 91 5d 74 e3 c2 a6 f3 f9 07 32 7f 01 9f d2 89 ..]t......2..... 03a0 96 d7 4b b5 0f 09 cf 4e 0c 95 0c c7 2b 64 41 ac ..K....N....+dA. 03b0 40 11 47 ce 06 70 8e cf f2 ec ad b2 d1 f7 6d 74 @.G..p........mt 03c0 1c 8d 37 c1 c6 aa d1 e8 7d ce c0 0c a3 ec 34 60 ..7.....}.....4` 03d0 c7 89 af b3 b0 06 8c 03 b9 00 d8 a0 4d 65 53 38 ............MeS8 03e0 d4 ca 7c 31 41 39 6c b2 c9 b6 d5 6f c4 79 48 fa ..|1A9l....o.yH. 03f0 fe 37 3d 6c 09 ae 36 fe 01 16 7b 85 b9 ea 7e 5a .7=l..6...{...~Z 0400 1b 2e 1a ec e3 aa 22 15 95 1c 5b 17 f4 9f 69 5f ......"...[...i_ 0410 09 ca 6a e9 bf 5f 06 1e fe 72 b0 f0 87 57 d4 f3 ..j.._...r...W.. 0420 c1 7f 33 b1 ff dd 23 17 32 55 b3 91 b9 ed 26 29 ..3...#.2U....&) 0430 45 ac 99 e0 77 54 05 05 7b 36 25 fa c0 be d4 63 E...wT..{6%....c 0440 18 a0 7b 00 ec 8f 64 87 dc 34 98 34 96 e3 9a 1f ..{...d..4.4.... 0450 fb a0 49 cb e4 14 b6 d2 67 92 21 5c 7e 46 5e d3 ..I.....g.!\~F^. 0460 a2 7f 2b de 33 2a cc 51 33 03 1f 5c da 4c ca 5a ..+.3*.Q3..\.L.Z 0470 f2 d7 25 5b f9 e8 1b 58 3c b4 04 99 7c f3 dd 83 ..%[...X<...|... 0480 3b e0 8f 46 1a f2 7e 33 2d 73 a3 76 86 e7 fa 65 ;..F..~3-s.v...e 0490 99 c9 13 38 3f 65 62 ab f4 4e 1d ee a7 81 bd e3 ...8?eb..N...... 04a0 d2 ad 71 cc e6 26 27 49 db db ed 4e c3 30 dd af ..q..&'I...N.0.. 04b0 51 44 03 4c d6 f1 c3 72 9d 4c 45 a5 ab 34 c5 78 QD.L...r.LE..4.x 04c0 a2 9e fd 06 cc 58 12 51 8c 95 6c 6a 6d 6b 46 af .....X.Q..ljmkF. 04d0 bd 2c 28 00 7d 19 6d 07 ba db 50 ba 0b d0 c4 c8 .,(.}.m...P..... 04e0 eb 13 30 74 5f 4d cf 5f b3 c5 3c 26 a9 05 18 3b ..0t_M._..<&...; 04f0 c2 1d 98 d2 34 c2 7c 2c d0 24 13 48 f8 e5 86 12 ....4.|,.$.H.... 0500 5a 62 a8 44 52 61 a4 bf 15 d9 56 62 b1 3d 13 f1 Zb.DRa....Vb.=.. 0510 1b c4 95 c5 ae a0 8c 60 46 d0 27 7c 43 53 a1 e7 .......`F.'|CS.. 0520 2b d2 6d 69 32 4d c8 d9 96 ea 92 21 a1 a7 3f 14 +.mi2M.....!..?. 0530 ad 82 14 ce 9f 8e 39 03 1c ea bf 20 71 8a 1d 7c ......9.... q..| 0540 0e 41 25 05 77 db 66 8f 71 6d 6e d6 22 38 cb 8f .A%.w.f.qmn."8.. 0550 a0 cb ab 84 1c 8d 35 9f 10 3f ab 99 0f 61 eb 1a ......5..?...a.. 0560 5f a9 96 dd b9 89 45 36 ac a1 ae 48 20 75 ce fa _.....E6...H u.. 0570 f8 47 ac 17 03 39 23 12 95 09 c5 6a e9 35 d6 0e .G...9#....j.5.. 0580 e2 c6 fc 0e ba 02 34 56 3f 68 8d 5c ab 1a ef 66 ......4V?h.\...f 0590 0c b2 7c 58 62 b8 09 6b 3b 08 c3 71 92 8c 1e c1 ..|Xb..k;..q.... 05a0 32 b4 19 ad de ad cb 21 2......! No. Time Source Destination Protocol Length Info 21444 249.636942 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=255647 Ack=4589 Win=1002 Len=1448 TSval=597656 TSecr=729942 Frame 21444: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 255647, Ack: 4589, Len: 1448 Data (1448 bytes) 0000 ae 5d 13 17 fb 76 5b 31 e2 77 d6 dc 8f 7a 29 16 .]...v[1.w...z). 0010 77 f2 80 14 97 92 cd 0d 52 e0 eb 76 bf 33 aa c2 w.......R..v.3.. 0020 5e de d2 41 85 4e 4c 3e 45 b6 49 e7 9a 90 e5 00 ^..A.NL>E.I..... 0030 71 0d c7 fb df 5d c5 a7 7a d9 f5 ae 32 8e da ce q....]..z...2... 0040 79 90 3d d5 85 67 0d 86 0c 44 9a 8f dd 6c 59 0e y.=..g...D...lY. 0050 5b 2d 53 f4 20 9e 09 d8 3c 7f 87 e5 b5 80 6e 93 [-S. ...<.....n. 0060 00 d8 e2 f9 42 dc 68 14 01 22 31 b4 e4 69 33 b8 ....B.h.."1..i3. 0070 3a ba 32 3d d6 6d 1d 86 94 f5 ef 10 e6 d3 bc 22 :.2=.m........." 0080 71 d8 29 8b b9 ad 2b 4f 71 80 0b 5a a1 2c 01 c7 q.)...+Oq..Z.,.. 0090 bd 72 cf be 73 f5 88 33 99 03 87 cc fd 8a 19 fe .r..s..3........ 00a0 13 1a 42 80 c0 f0 66 81 17 fc c3 c6 bc 24 ef ef ..B...f......$.. 00b0 82 f4 f1 bc e5 35 8a fa 32 58 d2 2d 9a e6 69 0d .....5..2X.-..i. 00c0 66 1d ff 7e d8 ca 8b 63 77 53 08 a6 a0 25 88 9c f..~...cwS...%.. 00d0 2d 23 d5 60 1d 71 5e cc 45 ae db 0b fb f4 9f b5 -#.`.q^.E....... 00e0 23 c7 3b a0 d8 e3 f1 54 e1 f7 b2 83 b8 44 54 cf #.;....T.....DT. 00f0 09 b6 4d f1 b5 75 f0 f1 50 63 0a 17 7f 3a f0 95 ..M..u..Pc...:.. 0100 b8 19 38 00 e3 01 6b 0c 20 ba aa ef 39 e5 7f 9a ..8...k. ...9... 0110 7c 82 b7 94 49 a7 fd 87 67 4e bd 3b dc eb 00 e2 |...I...gN.;.... 0120 1a 90 71 1e 24 dd 7c 09 46 a2 eb b0 55 e2 ef 32 ..q.$.|.F...U..2 0130 62 66 58 75 58 07 6f 31 01 46 a4 8c a7 cc 61 71 bfXuX.o1.F....aq 0140 0d 8e 52 b5 5d ec aa c4 e7 8f 02 56 82 1a 59 d1 ..R.]......V..Y. 0150 54 a5 8e 4c eb 62 bb 72 3a c0 33 17 4b 3e 77 eb T..L.b.r:.3.K>w. 0160 3f 32 27 48 74 a5 ea 5d f6 7e 0e 8b 7c 75 71 97 ?2'Ht..].~..|uq. 0170 93 e8 6d f7 e9 1e 5b 46 d3 b9 76 4c 6e cc 05 53 ..m...[F..vLn..S 0180 6a 9a 87 b8 49 59 4f 30 d5 b4 e3 29 92 97 a2 25 j...IYO0...)...% 0190 a2 e7 3f 1d b5 a1 a4 14 d1 11 ae c8 b7 06 89 14 ..?............. 01a0 35 47 19 0b a8 fa d9 cc 23 61 43 4e 82 d1 3b 5b 5G......#aCN..;[ 01b0 08 2b 52 5b e2 fe 46 d6 d5 11 64 90 a2 fb d1 bb .+R[..F...d..... 01c0 94 2a 4c b7 2d 3d 7a ed c0 43 b1 d7 ff de 2e bb .*L.-=z..C...... 01d0 3f 97 d3 4d 65 0a 56 6d b7 7e a4 0f 24 6c eb d2 ?..Me.Vm.~..$l.. 01e0 93 6a 50 ae 97 9f bf f4 80 d9 4a 54 fa 08 a4 e5 .jP.......JT.... 01f0 09 c2 29 44 e2 2b 7f 98 e6 13 0d 4b b3 b5 ec 05 ..)D.+.....K.... 0200 88 c2 de d2 d2 70 a7 1d 9c d5 cc bd eb cc bc c0 .....p.......... 0210 5c 86 4c 27 b0 7a 1d fd fa 9e 74 72 32 e8 6b 9e \.L'.z....tr2.k. 0220 fa 4e e2 4b 99 aa 21 bc 90 0c 78 1f 66 b2 50 80 .N.K..!...x.f.P. 0230 52 11 e7 cf ee 1d ca 7d a5 dd c1 53 06 8e 8a cf R......}...S.... 0240 62 c8 dc 42 2b de 17 d9 d9 65 b1 80 61 29 1b 08 b..B+....e..a).. 0250 b5 34 8a 84 e5 b7 7f a6 44 1f c4 ae bd 1f 9b e9 .4......D....... 0260 b7 74 b9 89 f0 22 c8 c2 3f d3 09 4f a5 28 a6 25 .t..."..?..O.(.% 0270 36 94 0e 98 e8 04 73 ac 8f 8c eb 65 e5 ed 7d bb 6.....s....e..}. 0280 b3 0d 1f 1c af 3a 03 10 65 de 49 b4 23 61 d3 7b .....:..e.I.#a.{ 0290 5e 82 39 af cf e1 92 66 2f 28 8a e1 e9 13 dd bd ^.9....f/(...... 02a0 fe ee 4a 7e 6e 3e 72 5f 39 1f c5 61 2f c7 e7 40 ..J~n>r_9..a/..@ 02b0 6f 0c 90 d7 92 4c 2b cb 42 93 de 30 c7 5d 50 4b o....L+.B..0.]PK 02c0 2f 61 d6 30 83 2f 59 75 4b 51 7f b6 0a 88 87 65 /a.0./YuKQ.....e 02d0 5f eb a0 37 72 c2 2a 35 ce f1 98 87 30 b7 c4 be _..7r.*5....0... 02e0 b4 09 4e f7 c3 1c 3c b6 ad 36 a3 3b 6d f2 fc 13 ..N...<..6.;m... 02f0 b8 62 62 a1 fa 81 81 c9 3b 5c 7b b1 5f 36 03 a7 .bb.....;\{._6.. 0300 ea 6c 67 a6 25 fd 30 f7 05 43 ff f9 f8 b9 49 94 .lg.%.0..C....I. 0310 e6 d1 21 29 f8 ba 4e 62 ea 31 70 85 82 49 5a ec ..!)..Nb.1p..IZ. 0320 9f 6f cd eb 24 9a 89 7c c5 81 ad 25 2a 4d 67 1e .o..$..|...%*Mg. 0330 a9 86 78 58 db 2a cd 4c 28 6c cd e3 ca b1 e1 d4 ..xX.*.L(l...... 0340 bc 02 75 94 54 bf c9 0d b6 98 ec 1a 99 73 74 9b ..u.T........st. 0350 6a c8 b4 05 dd a8 33 dd 28 18 6b 00 28 95 e9 2c j.....3.(.k.(.., 0360 01 f0 78 31 52 e2 44 17 4f eb 60 25 93 b3 8d cb ..x1R.D.O.`%.... 0370 84 8c d4 aa 81 87 27 ab ca 62 fb ff bb 62 d9 4d ......'..b...b.M 0380 76 6c 3c 5a f3 34 bf ba ae bc 11 c8 60 87 dd 67 vl<Z.4......`..g 0390 e9 99 7a d7 7d c7 5e 55 1f 8e 7f 16 e9 99 09 d7 ..z.}.^U........ 03a0 2c 74 24 7d 47 44 2a f4 f3 61 4c b7 7f b7 3b c0 ,t$}GD*..aL...;. 03b0 a1 ce e4 8a 3d 80 19 2c a1 9d 2e 8a d2 83 30 dd ....=..,......0. 03c0 cc 3a a3 c8 08 44 81 19 9c bd 5a de 5f 63 41 41 .:...D....Z._cAA 03d0 9b 8f 60 ac 41 61 98 70 44 76 64 37 6d 89 af 26 ..`.Aa.pDvd7m..& 03e0 8a 4b 41 26 e4 e6 e4 5d e6 20 36 0d 23 91 e3 ce .KA&...]. 6.#... 03f0 29 11 f9 72 c2 93 8c 24 49 97 30 88 d9 7b ef 66 )..r...$I.0..{.f 0400 c0 e2 59 81 79 6a 48 d2 ce 96 1b f4 10 3a 19 03 ..Y.yjH......:.. 0410 36 0d e9 e9 50 54 10 79 b3 ae 92 4e 1b d8 4a 0d 6...PT.y...N..J. 0420 9f 50 0b 48 11 66 bf 1e 0a 7c 59 dd 60 7d d0 a5 .P.H.f...|Y.`}.. 0430 c4 cb 6d 41 f1 17 41 51 05 d4 48 cf 4d ee e0 d1 ..mA..AQ..H.M... 0440 ea de 73 a2 7e e0 a1 8a 79 b8 97 76 ad aa cf 15 ..s.~...y..v.... 0450 bb dc 1f fb 1b 8f 3c d8 bf 64 22 0c ad 3e 47 ed ......<..d"..>G. 0460 af e0 4c 15 e5 1e 41 14 40 df 77 f4 96 b8 54 26 [email protected]& 0470 c0 13 33 29 f7 19 85 e8 1f 77 16 17 9a 0a 2d 18 ..3).....w....-. 0480 01 75 db 97 bb 54 f6 a5 6c 3a a6 41 f4 04 91 27 .u...T..l:.A...' 0490 04 dd 2f 5e 78 fa 7f ad e1 3a bb 30 c1 da 0d 6e ../^x....:.0...n 04a0 a0 fd 18 c0 37 95 0f ba 85 92 9b b6 14 a0 55 dd ....7.........U. 04b0 bd 83 33 e9 98 5c d4 7f de a4 43 ea 3d 62 fb 80 ..3..\....C.=b.. 04c0 c8 7d 1a c4 72 4a d2 74 cc a1 b0 4c 57 30 87 8f .}..rJ.t...LW0.. 04d0 2f e7 7f c8 0b 6c b3 3c 9e 55 cf 66 c9 97 31 fd /....l.<.U.f..1. 04e0 4f ad a6 29 91 a2 fd 2a ca 95 1a 04 39 8b f8 6d O..)...*....9..m 04f0 8e fc f2 69 e7 6c 74 d0 7b 9a fd ef a2 02 be 86 ...i.lt.{....... 0500 66 08 da 78 63 4b ba 5f 63 34 1b 4d b9 b3 bf 0c f..xcK._c4.M.... 0510 20 81 81 56 8f 39 b6 b1 22 63 c9 57 88 b4 64 d5 ..V.9.."c.W..d. 0520 94 69 eb 4c 3e 3e c9 26 43 71 34 b7 68 a9 de 03 .i.L>>.&Cq4.h... 0530 bb 10 fc d8 b2 06 0b c7 5a e9 0e 0e 57 9c 73 6e ........Z...W.sn 0540 8e 99 a1 d6 4c 3c 76 d4 be 74 08 11 b7 9c a1 73 ....L<v..t.....s 0550 30 d1 ca 02 7e 9a 4f 0f 97 0c 45 33 24 4f fe e5 0...~.O...E3$O.. 0560 f4 51 c4 8d f5 71 c7 ab eb f1 5e 02 a3 ee b3 0a .Q...q....^..... 0570 fe 45 87 4d fa 2f e2 c7 fc 50 40 ec c8 04 ce 69 .E.M./[email protected] 0580 d8 ff af c4 d6 59 6f c6 c1 3f 2e de 16 7b 9b f9 .....Yo..?...{.. 0590 63 84 58 1b 23 5b 20 61 db 98 ee 79 9c 2e b3 82 c.X.#[ a...y.... 05a0 c5 af 3d 51 18 40 3e ca ..=Q.@>. No. Time Source Destination Protocol Length Info 21445 249.637061 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=257095 Ack=4589 Win=1002 Len=1448 TSval=597656 TSecr=729942 Frame 21445: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 257095, Ack: 4589, Len: 1448 Data (1448 bytes) 0000 5a ca 9f 1c cc f9 b2 ac 7d 1f 0d fb 4a 13 09 ba Z.......}...J... 0010 7e 96 64 da 72 68 ed 03 56 df bd e9 79 41 7e bd ~.d.rh..V...yA~. 0020 d9 7d 26 fe 7d 44 36 8a c1 4f 23 42 e0 ac fb 6b .}&.}D6..O#B...k 0030 a6 e6 9d 95 87 9d 5d af fe 42 61 61 04 2d 01 f3 ......]..Baa.-.. 0040 e5 80 05 44 00 06 13 89 6e 01 9a 70 75 ad d8 5f ...D....n..pu.._ 0050 45 d6 6d a4 22 7e e8 ba 96 f7 9d 27 40 04 16 c4 E.m."~.....'@... 0060 10 80 89 d5 b9 82 3f 3b 8c 5f 54 d7 65 df 11 fc ......?;._T.e... 0070 82 ec 74 8b 32 34 8c ef 65 35 df 0f 0c 58 99 b1 ..t.24..e5...X.. 0080 ca d7 b6 56 17 04 fd ad 07 07 aa da 73 64 c1 34 ...V........sd.4 0090 12 35 6c 88 1b e2 ad dd 21 36 8b 20 7f c5 b4 d4 .5l.....!6. .... 00a0 14 cd 93 cb 13 62 d6 60 bf eb 9a 5f 65 ef c5 c7 .....b.`..._e... 00b0 a4 e3 33 1d db 4f 46 2d 96 38 58 e0 3e 73 ed de ..3..OF-.8X.>s.. 00c0 5b d6 df cd 39 de 5f 02 1d a2 2c fd b4 17 03 ab [...9._...,..... 00d0 bc 63 5f fe a5 ae b3 09 45 cf d6 a7 b4 a9 8e b4 .c_.....E....... 00e0 fe a3 b4 08 b3 51 54 57 e5 d8 fb ad 24 d7 1b d0 .....QTW....$... 00f0 97 8a 1b 09 a9 cc fb b5 fb 94 eb bb 3e be bc 6e ............>..n 0100 f4 1a fb 8c db d4 ba a7 98 56 51 df bf f4 11 6b .........VQ....k 0110 56 9a 95 f2 db f2 f8 a0 d0 48 c2 f4 9e c8 77 29 V........H....w) 0120 14 81 e7 e3 83 65 b4 83 2e 23 bf f7 cc eb 1b 6b .....e...#.....k 0130 19 ff f7 0a f9 ed cb bc 8b c9 b1 13 a2 67 f6 40 .............g.@ 0140 be 2f c6 21 9b 9a fb 30 6e bf ce 32 19 f2 cd 1a ./.!...0n..2.... 0150 77 87 c7 27 ce b3 75 3a 09 b5 2b 3d d5 10 26 2d w..'..u:..+=..&- 0160 a4 2f dd 43 9d 6e 34 b5 12 2a bd 09 94 9f 59 5b ./.C.n4..*....Y[ 0170 28 44 59 63 a8 03 87 76 1e 0b f8 40 9c 47 f7 2c ([email protected]., 0180 80 51 9e e6 4c 5d 7c 1c 96 33 05 ec 03 81 39 6d .Q..L]|..3....9m 0190 a4 a4 97 a5 1f 93 70 e1 69 40 12 61 29 c7 ae a5 [email protected])... 01a0 b6 7f 27 c9 61 05 eb d9 fc d9 e8 79 17 e8 3a e3 ..'.a......y..:. 01b0 2d c8 67 7a 15 55 53 88 db f0 d1 24 75 77 26 eb -.gz.US....$uw&. 01c0 22 db 3c ed 99 de 41 66 31 11 f1 4e c9 d4 d5 40 ".<...Af1..N...@ 01d0 98 fc 7e 34 14 8c 51 07 82 9b ae 4d 90 2b cb 24 ..~4..Q....M.+.$ 01e0 67 08 a7 97 34 33 31 b3 2b 74 2a 54 56 4d 6d 5a g...431.+t*TVMmZ 01f0 6b e5 72 8d 45 0b 85 76 39 71 f5 99 b4 33 ed 80 k.r.E..v9q...3.. 0200 9a 68 f5 99 3b f8 49 48 93 3c 28 43 00 f1 6b b9 .h..;.IH.<(C..k. 0210 fd 9e 33 c6 87 9b ff 76 ae 74 e8 1c fd 39 48 ce ..3....v.t...9H. 0220 9e 39 03 8a 12 51 42 98 a8 6a 38 3c 6b 56 fd 0a .9...QB..j8<kV.. 0230 b2 ca 1e c3 5a 7d 3d 39 32 ce 75 66 ba b2 c3 31 ....Z}=92.uf...1 0240 42 0b d7 56 f4 b6 0b 00 5a 52 9f cd bc 76 af 90 B..V....ZR...v.. 0250 3e 85 74 a5 ee 24 67 93 75 d8 0c 3c 29 23 40 c6 >.t..$g.u..<)#@. 0260 b8 13 f3 ea d6 71 2e 96 9f e4 82 22 c9 19 c9 3a .....q....."...: 0270 40 67 d0 ef 82 b4 14 93 5d 2b dc 8c f7 c3 4b 6a @g......]+....Kj 0280 21 5b c0 cc 09 49 cc da 02 73 63 6c 14 c8 2f 85 ![...I...scl../. 0290 a3 b8 b9 94 e7 a9 d2 10 14 7e 63 d2 93 09 25 1c .........~c...%. 02a0 56 0f e4 f8 18 97 47 a7 7d 35 49 3c dd ad 0b 89 V.....G.}5I<.... 02b0 7b 5b 7c 8b c9 6c 57 a5 93 9b 20 e0 e3 5b c8 17 {[|..lW... ..[.. 02c0 49 60 65 29 53 a7 65 4d d4 bd 15 6b 67 1e 49 82 I`e)S.eM...kg.I. 02d0 6a 21 80 2b 69 83 0a e2 e1 82 fd 03 a1 01 88 90 j!.+i........... 02e0 ce 8d 30 bc 7b db 6f fb 50 12 6c 3a 8e 9f 00 bd ..0.{.o.P.l:.... 02f0 00 5e d0 6c 61 ab ff fb 25 4b 2b 63 8a ca f3 f1 .^.la...%K+c.... 0300 ee 18 a7 86 1f 6d df 7c 53 0b 3a 50 e1 64 d2 20 .....m.|S.:P.d. 0310 a0 9c 06 50 fa c8 81 aa 52 d8 ee 35 da 30 db 89 ...P....R..5.0.. 0320 bd 5c 53 21 3f c6 5e c9 4f c5 65 c5 08 72 ce 56 .\S!?.^.O.e..r.V 0330 86 10 1e d2 08 90 e5 fc e0 f3 d6 8d f2 3b 38 d2 .............;8. 0340 bf c3 76 26 1e 55 d0 63 05 12 2e ce f0 fa 02 7a ..v&.U.c.......z 0350 c1 31 19 3c d5 fb da 94 f9 f2 57 15 ba dd 2b eb .1.<......W...+. 0360 92 9d f2 de 51 cf e0 66 38 23 a9 2c 5c 01 48 82 ....Q..f8#.,\.H. 0370 a8 3e 6f b4 a0 16 5f 26 fe db b1 b8 b5 dc c1 ef .>o..._&........ 0380 d8 eb c2 7c f8 9d 3e aa 39 14 ea 19 1d 71 3c ec ...|..>.9....q<. 0390 51 63 1d 25 c2 ba ff 87 4c 22 4b 22 5a 4f f5 94 Qc.%....L"K"ZO.. 03a0 f2 89 1d 7f 26 43 8d 0f 1e 44 f5 7f 8b 9f 3a cf ....&C...D....:. 03b0 2d 64 f2 89 cc 0b c6 04 c4 0c eb 1e af 4d 0b 7c -d...........M.| 03c0 da da bf 48 be 94 cf 7e 67 ae 41 11 b5 fb 47 57 ...H...~g.A...GW 03d0 18 62 f4 d3 0f c6 c7 cc 97 99 e7 a3 54 3b 97 0b .b..........T;.. 03e0 0e 59 13 45 9b a3 08 fa 42 9a 67 5a 26 16 19 5f .Y.E....B.gZ&.._ 03f0 7a 5a c5 21 84 ab 91 0d 81 38 d9 ca 3a 68 46 24 zZ.!.....8..:hF$ 0400 b2 51 6c ca 16 67 31 3e 6c c5 6f 03 4c 29 9e f4 .Ql..g1>l.o.L).. 0410 97 25 a7 b6 a6 d2 72 bb 57 11 23 dd 0c 90 b2 99 .%....r.W.#..... 0420 c8 1e 60 d4 7c db 83 51 b3 0d b5 5e ca d0 5e 30 ..`.|..Q...^..^0 0430 b0 d1 80 d5 6a e0 6d 1f c9 ea 3e 7b db 88 aa 8f ....j.m...>{.... 0440 a7 84 1f 9d c9 1d d5 7e c8 15 72 ec 26 9a ef 5f .......~..r.&.._ 0450 c4 3c 1d e2 f6 fa df 23 5a 51 d7 51 00 d5 82 3f .<.....#ZQ.Q...? 0460 b9 48 5d 67 c1 51 9f 4a f7 56 2c c8 c2 10 d1 15 .H]g.Q.J.V,..... 0470 06 83 a3 1a 6e 5e 20 78 03 70 7d 76 a4 73 e6 79 ....n^ x.p}v.s.y 0480 2d 61 b7 65 63 5b 23 50 b8 c5 99 76 83 e3 e9 5a -a.ec[#P...v...Z 0490 ea d7 35 d7 b0 f8 c3 1a 55 7a 7c 1a 5e 13 11 36 ..5.....Uz|.^..6 04a0 17 83 f4 bb 43 34 54 8b ec ed af a5 21 7b f0 e6 ....C4T.....!{.. 04b0 10 66 b6 50 da 5a 5d 02 f7 d7 dd 92 87 cf 5a 15 .f.P.Z].......Z. 04c0 04 b5 cd 1d a9 98 dd 5e 0a b8 42 29 9b 50 1c bc .......^..B).P.. 04d0 5a dc c4 45 68 41 79 71 aa 9a f0 df fa d7 0c 02 Z..EhAyq........ 04e0 67 79 bf 34 3a dc 45 58 5a 93 e1 47 1f ca ed 12 gy.4:.EXZ..G.... 04f0 1a 18 a0 31 ac f2 cd f3 10 30 d5 e6 9b 26 82 bd ...1.....0...&.. 0500 12 d5 23 d8 f2 47 53 6b 8c 32 36 fb 73 c8 49 3e ..#..GSk.26.s.I> 0510 d3 9e 9b fa 8b 44 9d 4b 94 1a b9 e0 27 e0 a0 ac .....D.K....'... 0520 37 c4 38 98 5d d2 0b 93 91 2c fb 1b d4 c5 dc 75 7.8.]....,.....u 0530 a0 d0 13 3a 99 3e 77 2c f3 50 d3 cc 60 07 c4 1e ...:.>w,.P..`... 0540 af fe 51 c8 a4 b1 d1 38 37 26 c2 fc b1 f8 2c 0a ..Q....87&....,. 0550 c3 5b 45 59 ee 82 a5 24 b6 c3 cc ba ce 0a 53 c5 .[EY...$......S. 0560 97 f9 2d d6 0d 75 c5 7c 9e be 4d 2c 24 4d ed d4 ..-..u.|..M,$M.. 0570 4b d3 2c 7c 0d 6c d0 83 d6 23 05 a3 b7 56 59 7b K.,|.l...#...VY{ 0580 7e ad f3 b8 f1 de a0 97 5a e2 5e a3 bc 61 3d 9a ~.......Z.^..a=. 0590 15 0d 0e 3c 50 5f 76 8b 64 2f 4c fc 02 ca 56 b8 ...<P_v.d/L...V. 05a0 c6 c6 25 38 d9 74 1e b4 ..%8.t.. No. Time Source Destination Protocol Length Info 21446 249.637151 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:27 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1209 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 21446: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:27 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1209 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 21447 249.637224 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=4589 Ack=257095 Win=65535 Len=0 TSval=729978 TSecr=597656 Frame 21447: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4589, Ack: 257095, Len: 0 No. Time Source Destination Protocol Length Info 21448 249.637322 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=258543 Ack=4589 Win=1002 Len=1448 TSval=597656 TSecr=729978 Frame 21448: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 258543, Ack: 4589, Len: 1448 Data (1448 bytes) 0000 43 c0 b8 4a 2f 2b b8 dc 55 ac 0d 84 61 26 a1 37 C..J/+..U...a&.7 0010 44 0c 62 48 f2 0c c7 4a 9f 60 7c e3 ed a5 ed 23 D.bH...J.`|....# 0020 03 40 bf fe 11 1b 26 29 f1 68 32 a8 d3 32 c2 8e .@....&).h2..2.. 0030 55 d3 66 e3 e1 a6 01 65 b3 3b df 56 2d 0e f7 2e U.f....e.;.V-... 0040 7a 05 3e 3c 5c 7d 07 1a 05 7a fe 15 67 03 d8 eb z.><\}...z..g... 0050 41 c8 44 27 07 ce f4 80 8f 3f ab 4e a1 9c 9d a9 A.D'.....?.N.... 0060 31 32 05 4b 7c 4a 53 c1 0e dd fa 79 76 be 93 26 12.K|JS....yv..& 0070 20 68 dc 10 dd 09 85 0e 27 7f ce a5 59 e1 23 2b h......'...Y.#+ 0080 51 94 62 0f 7c 4d 07 cb bc c1 52 95 6b cc 2e 08 Q.b.|M....R.k... 0090 ce 6c 32 eb 30 bc 9d ed d4 9d dd 9f 89 a4 44 da .l2.0.........D. 00a0 b4 5d e2 62 01 4b a1 9e 28 1b 31 a8 59 e6 c5 48 .].b.K..(.1.Y..H 00b0 29 5c 4c 70 0a 1e 4a c2 df 0a 81 58 35 73 cd 82 )\Lp..J....X5s.. 00c0 25 0d 20 07 f4 46 2c 75 2b 1d ec 2d a3 04 36 1d %. ..F,u+..-..6. 00d0 a8 27 01 3e 2a 32 5e e9 fa a1 a1 99 70 c3 a1 25 .'.>*2^.....p..% 00e0 7f 71 bb 97 d5 07 f8 69 d4 46 6f 3f b3 e2 e2 19 .q.....i.Fo?.... 00f0 3e 1c 19 f1 a1 aa 05 27 5a 01 d7 37 49 ec f8 9c >......'Z..7I... 0100 74 f3 24 2e 58 3c 2f a3 7d 75 b9 f8 fc d7 f7 cc t.$.X</.}u...... 0110 6b 14 e3 f2 4d 14 37 73 76 08 5a a4 66 32 3c 19 k...M.7sv.Z.f2<. 0120 a4 9d bb b1 a1 ae bb 1c 96 0e b2 03 b3 22 43 f2 ............."C. 0130 51 e9 1f f6 30 cb ac 2d 60 54 13 61 fa 73 ca 7c Q...0..-`T.a.s.| 0140 5d 61 92 53 0b e0 9f 1f 0a 9b 41 cb 96 48 b8 86 ]a.S......A..H.. 0150 ac d8 f6 6d dd 99 32 db 18 48 d6 73 1f 88 bb 94 ...m..2..H.s.... 0160 5c 7d cb b3 e1 e9 86 b0 9b 1f 3e 17 80 7f 6e 91 \}........>...n. 0170 30 7b 25 f8 b8 8f c5 77 dc df 46 c5 7a 43 59 e7 0{%....w..F.zCY. 0180 bc fb cf df 55 0b b9 e5 e6 8d db d3 f6 58 2b ac ....U........X+. 0190 74 eb 05 0c 19 9a 52 3a 6c 01 e1 9d 52 f0 dd a5 t.....R:l...R... 01a0 5b 41 6b 27 41 1a 58 83 59 1e 7e 31 df 77 80 e0 [Ak'A.X.Y.~1.w.. 01b0 d4 e9 ba 17 45 ab fa a5 71 e5 0c b1 21 24 b1 08 ....E...q...!$.. 01c0 80 4e 41 8a 45 44 e6 e7 8b df ce 3c 68 f2 24 35 .NA.ED.....<h.$5 01d0 fa 3a 4d 03 00 83 d0 ee da 65 c1 e3 61 a7 56 b6 .:M......e..a.V. 01e0 ea b8 8e db d1 05 d3 91 d8 f0 21 44 56 44 9f 57 ..........!DVD.W 01f0 ef 34 08 8d 25 ac 64 5c ee d5 d6 3d eb ed 9c 69 .4..%.d\...=...i 0200 06 c8 0b 92 99 af e7 86 b8 99 de 60 fe 1a da 52 ...........`...R 0210 05 81 fe 7a d4 bd 90 10 bf fc 77 29 44 f9 28 ed ...z......w)D.(. 0220 ee d1 d6 9e 5d e5 88 31 93 c9 31 c3 34 80 1b 65 ....]..1..1.4..e 0230 18 3c af 69 14 ff f1 b9 b2 c0 8c 97 8a 4a 7c 35 .<.i.........J|5 0240 dd 6c 5d 20 b4 d6 9a d6 97 44 76 10 24 2b 53 6f .l] .....Dv.$+So 0250 bd a9 0c 08 57 a9 df a1 c3 e9 f5 e2 b9 bf 2d 3e ....W.........-> 0260 5e 24 ae 4e f6 03 cb 21 4e 44 a4 4b 22 98 53 2b ^$.N...!ND.K".S+ 0270 20 1d 54 7e d9 06 40 bc 57 1f 4d c7 c2 07 e5 8a [email protected]..... 0280 8a 33 20 80 14 72 a2 07 04 55 8a 83 e1 51 be 41 .3 ..r...U...Q.A 0290 c6 54 f3 7c dd 3c 2f 95 44 37 96 62 56 7c 02 d6 .T.|.</.D7.bV|.. 02a0 46 bf b2 e1 65 82 53 ff 0c f6 46 6e 92 f8 91 f6 F...e.S...Fn.... 02b0 34 16 68 51 68 43 41 5d 0a 3f 07 4a 4d f3 87 c0 4.hQhCA].?.JM... 02c0 9d 0b 9b 0f 88 1b 36 dc 69 8b 54 89 6c 86 31 f8 ......6.i.T.l.1. 02d0 86 cf 94 3c b6 5e d8 f0 19 90 65 de a6 99 22 b7 ...<.^....e...". 02e0 8c 11 e4 ec 93 6d f4 e5 23 cf 77 74 61 c3 d6 b1 .....m..#.wta... 02f0 a8 33 14 a3 b7 53 2a e1 c5 f6 8f 0c 77 55 b7 12 .3...S*.....wU.. 0300 97 17 82 c4 e1 02 1c 9a 03 dd 98 05 39 ec 97 17 ............9... 0310 dc 13 b0 69 79 b9 d5 6c ec 7f 5b 6c 64 5b 7f 4b ...iy..l..[ld[.K 0320 98 f9 24 3e c1 50 c4 b0 59 34 82 88 fb 0e 09 22 ..$>.P..Y4....." 0330 c0 e8 57 ba 6e df 0f 68 c3 01 37 d6 81 5c 1c 18 ..W.n..h..7..\.. 0340 bb 4d 1e c6 60 6f 10 73 12 c5 ee 89 20 4a 89 03 .M..`o.s.... J.. 0350 f4 ea 8f d4 db 32 c9 4a 9f 6a 3c bb 8f 28 a2 e4 .....2.J.j<..(.. 0360 9d 85 2c 4b 7d bf a7 cd bc 65 e7 2e a5 9c ae 19 ..,K}....e...... 0370 14 1d bf 82 7c 4b a3 ae 05 75 0a a9 c9 05 ec c3 ....|K...u...... 0380 22 55 b5 41 5f 89 e2 c5 ce c4 0e 36 a0 2c 7e 3f "U.A_......6.,~? 0390 b1 00 bc ea ef 74 ea 87 18 ea 1a 1f 4a f9 f2 47 .....t......J..G 03a0 82 8a 40 54 ba 37 ed 9e 1d ae 6f 7d 59 d2 43 8d [email protected]}Y.C. 03b0 13 35 60 85 1e 77 5e 84 55 ed 39 a1 7b 41 be 06 .5`..w^.U.9.{A.. 03c0 05 52 8d cc 6e e5 02 a9 95 77 bd d7 cd 90 7b 79 .R..n....w....{y 03d0 d2 ce f3 06 6e e7 0e ee 94 bd dd 37 3d cd b5 b7 ....n......7=... 03e0 0c 2d b1 02 85 5b 72 7a a4 88 bb f0 28 b3 36 64 .-...[rz....(.6d 03f0 41 bf f2 56 8c 83 75 d2 b6 bc 3a 60 00 5e 3d 56 A..V..u...:`.^=V 0400 fe f7 90 72 b2 da 01 9b e6 42 4e 7d d5 86 2c 4a ...r.....BN}..,J 0410 0c ea 8a c5 9e 50 f7 dc ce c0 6e 51 41 31 20 66 .....P....nQA1 f 0420 64 69 1f 08 03 31 de 0f 55 56 96 61 c8 8a 04 2e di...1..UV.a.... 0430 ae d6 a3 34 5c e6 e1 82 3d 65 77 2a 36 5b a4 a3 ...4\...=ew*6[.. 0440 6c 59 98 91 ef 50 87 09 85 53 67 e0 d3 ae 74 30 lY...P...Sg...t0 0450 43 f4 2c 65 af 17 d6 3c 96 39 af 6c 08 c7 63 4a C.,e...<.9.l..cJ 0460 65 3e 52 38 63 97 64 05 f5 6b 99 5e 89 58 bb d8 e>R8c.d..k.^.X.. 0470 cb d1 0d 1f 9c 4d fc 8c e9 20 0c 13 39 33 a1 18 .....M... ..93.. 0480 11 19 be ff 65 d2 af e9 83 a0 cf b5 5b b1 33 1e ....e.......[.3. 0490 c2 a9 c2 c7 7c 0a 06 44 c6 51 a9 13 15 1c ff e9 ....|..D.Q...... 04a0 07 7a e4 44 3c 17 5a a7 6c a5 df 9d e9 65 ee 85 .z.D<.Z.l....e.. 04b0 05 22 1b ed 13 ea 76 3b 87 c5 e5 4d ca 6f 4f 80 ."....v;...M.oO. 04c0 ee f1 e9 76 56 bc 5c fa 1d 0c d9 52 ab 39 59 96 ...vV.\....R.9Y. 04d0 57 b9 14 34 8a a9 11 8c fe 28 69 7d 1a 2c 13 55 W..4.....(i}.,.U 04e0 b1 cf 24 4e 62 cb 28 a4 c2 1a e6 60 00 98 51 13 ..$Nb.(....`..Q. 04f0 f3 13 24 45 ed 02 29 c9 ba c5 65 13 39 73 fe 45 ..$E..)...e.9s.E 0500 8e 53 36 2b 26 29 e1 62 f3 2a 54 c6 0f 51 09 fe .S6+&).b.*T..Q.. 0510 df 3c 2f 48 58 34 81 ab 9c 2a c9 0b 8e f4 05 94 .</HX4...*...... 0520 7a 43 65 91 3f 6d 46 f6 e8 88 bf e2 e7 68 be d1 zCe.?mF......h.. 0530 38 80 1e 41 ea 12 82 9d ef 6d bb 1c b9 d2 0e ca 8..A.....m...... 0540 b0 9a 31 74 0f d3 7c e6 c3 9f 6f ab ed 1c 5c d9 ..1t..|...o...\. 0550 b1 de f1 77 f8 2e ac e9 52 bd 18 df f5 e0 88 b7 ...w....R....... 0560 57 96 e8 9d 74 f0 a6 b8 50 4b 3a b0 ea 7d 96 f1 W...t...PK:..}.. 0570 62 f5 08 ad 71 34 5b b1 53 2e db 23 51 05 0b a0 b...q4[.S..#Q... 0580 bf 82 90 e4 30 b9 be 7a 55 1d d4 78 b1 30 55 71 ....0..zU..x.0Uq 0590 3b 20 f4 89 b0 a9 2e 53 7f a3 ed 04 a3 b7 0a 8f ; .....S........ 05a0 54 07 1f b5 ed 36 21 17 T....6!. No. Time Source Destination Protocol Length Info 21449 249.637374 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21449: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54063, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21450 249.637454 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=259991 Ack=4589 Win=1002 Len=1448 TSval=597656 TSecr=729978 Frame 21450: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 259991, Ack: 4589, Len: 1448 Data (1448 bytes) 0000 f5 8e a9 7d f5 4f 1b 02 ab 9e 0a 6b 29 bf 1f 57 ...}.O.....k)..W 0010 ed db d7 d4 c1 db 95 4c 51 57 ef 4b cb c1 1b 71 .......LQW.K...q 0020 9c ff 0e cf 3a 25 67 e7 4d 7a d3 bb f0 26 29 c8 ....:%g.Mz...&). 0030 fa 88 71 0c 93 f3 e5 57 8a 62 eb ed 45 0d 6c e3 ..q....W.b..E.l. 0040 b3 8a 17 37 75 7e 00 37 0c b9 f1 bf ce b3 0d 67 ...7u~.7.......g 0050 18 24 61 14 e8 23 d8 93 4a 13 a9 4a eb 20 73 49 .$a..#..J..J. sI 0060 af 74 ac 8b a3 a0 92 72 39 6c c5 7d 74 aa 3e 68 .t.....r9l.}t.>h 0070 a5 55 01 5d 1e 64 a7 df 14 0c f2 12 6b 9e 8c fd .U.].d......k... 0080 ec 01 ef 7f ac 86 5e 01 b1 ff 21 c5 d8 2c 9e 89 ......^...!..,.. 0090 c6 9b b9 8d 1b f6 8b 00 7b db f5 64 d5 8b 98 27 ........{..d...' 00a0 15 bb aa 84 ec f1 2a 95 16 30 c3 7f 4e 5a af 7f ......*..0..NZ.. 00b0 af 38 b3 ad cd 83 89 e8 5e c6 2f 4b ad 1b 31 f2 .8......^./K..1. 00c0 44 f3 5e d3 98 28 37 8b 87 d2 3b 20 77 61 0f 43 D.^..(7...; wa.C 00d0 93 fe 04 94 4a 46 ec 11 9a c8 a1 f7 85 6e 6a ec ....JF.......nj. 00e0 c9 80 72 7e 97 e2 ab 13 f8 ff e6 21 98 f5 f1 35 ..r~.......!...5 00f0 9c 8c f8 dd f3 f1 51 4c 7e 23 dc 9e 07 fb ec 44 ......QL~#.....D 0100 c4 89 b7 49 73 b4 55 b7 9c de fe 4c 41 fb 33 d5 ...Is.U....LA.3. 0110 68 ad d7 0a 94 f3 e8 dd 1f 58 cd 8b 33 dc 37 8a h........X..3.7. 0120 e3 a1 0a f8 9f b9 41 41 9d 09 af 6d 87 59 d4 55 ......AA...m.Y.U 0130 9d bb 44 eb 84 85 24 72 80 86 0b be 0d ae 47 0b ..D...$r......G. 0140 11 09 9c 59 8f 4c 04 cf 84 bf 20 30 ec 20 b2 a9 ...Y.L.... 0. .. 0150 a2 90 57 d5 7f a6 f8 5f e4 2a fc 60 5e b3 fe 9f ..W...._.*.`^... 0160 31 92 fb 4f 44 59 56 f3 db 4c ce 76 0e b3 fe 15 1..ODYV..L.v.... 0170 ab 97 82 0c f2 63 74 24 4a 58 04 a6 05 1f a1 47 .....ct$JX.....G 0180 e3 5f 0f 53 c3 f5 97 b8 8d a7 89 3a c7 bb ba 2e ._.S.......:.... 0190 96 de cd b8 e2 50 e7 f3 95 72 39 72 7c 3c 06 a6 .....P...r9r|<.. 01a0 b5 9a e9 be e9 ac 72 90 61 8a 49 6e 26 85 0b 8d ......r.a.In&... 01b0 c7 17 93 46 9a 52 e2 fa 9d c6 43 e2 c2 44 f9 37 ...F.R....C..D.7 01c0 b8 98 f4 76 03 4c a4 08 70 28 9a b8 6b c6 b0 ef ...v.L..p(..k... 01d0 61 99 3f 94 43 fb 3c 0e b0 e1 22 6f 2e c7 19 c2 a.?.C.<..."o.... 01e0 df b7 70 67 21 c4 5a 63 e8 9f ec dd 17 4f e3 88 ..pg!.Zc.....O.. 01f0 a3 04 65 9d 37 ff 0a 6d 6b f2 b2 2e 6e 83 b1 1d ..e.7..mk...n... 0200 cc e1 52 72 e6 b4 f2 a9 df 5e a4 d0 04 28 ce c3 ..Rr.....^...(.. 0210 b4 8a 16 5a 91 a5 81 0e b6 a6 76 04 63 e7 0c 13 ...Z......v.c... 0220 a3 08 3b 8c 36 e9 9a 32 55 ee 98 21 be 6b 2b 94 ..;.6..2U..!.k+. 0230 74 93 cd 3f d3 6a cd 41 23 3c 4c 08 4b 91 c2 04 t..?.j.A#<L.K... 0240 b5 1b 30 83 53 eb f3 19 90 a5 ff 8e 19 c8 d2 c2 ..0.S........... 0250 a8 96 32 d5 4b ab ab c3 07 10 c4 1c 6b 7b 96 41 ..2.K.......k{.A 0260 56 e1 d2 4e 7d f5 96 35 19 68 f8 d8 cc e2 8e 2e V..N}..5.h...... 0270 78 31 9f 2d 8f f7 38 dc 9c 48 21 96 c7 3d 33 4e x1.-..8..H!..=3N 0280 5c a3 72 23 c3 5d 65 07 14 84 4d 05 96 71 af 9a \.r#.]e...M..q.. 0290 f1 28 b5 99 9e 15 33 21 51 c8 9e 79 a4 cc d9 52 .(....3!Q..y...R 02a0 c0 87 38 57 91 3a 42 0a 36 d6 60 80 17 84 a0 b2 ..8W.:B.6.`..... 02b0 85 a0 c3 32 b1 f0 11 a1 34 a4 4a 92 d3 d5 07 6b ...2....4.J....k 02c0 8f db 20 62 64 83 ab 6a 53 81 1b 8a c0 22 a4 98 .. bd..jS....".. 02d0 d1 f8 57 f4 69 b2 5f 9c a8 20 12 eb 29 3e ad 8e ..W.i._.. ..)>.. 02e0 31 4a c6 57 95 ad cc 64 65 e8 2f b9 76 eb dc d7 1J.W...de./.v... 02f0 0b 2c d7 64 10 8a 42 74 8f 34 54 dc b6 64 7a 1f .,.d..Bt.4T..dz. 0300 4b c8 53 87 58 4e 16 c5 9a a6 be c8 8a 58 93 bc K.S.XN.......X.. 0310 05 05 4c e4 ac 40 ce d2 20 36 89 97 ad 68 65 1c ..L..@.. 6...he. 0320 34 bb 15 57 4d 29 fd de fe 60 62 5c 59 f2 d3 2e 4..WM)...`b\Y... 0330 e1 8a 9d e7 3f 8f 58 e0 d9 69 38 bb 38 e4 ea c3 ....?.X..i8.8... 0340 8c d8 d6 3a 54 45 3a 80 dd 1e d3 3d a9 c0 6e 5a ...:TE:....=..nZ 0350 a0 a1 b4 46 a4 62 1b 1a 32 ce a1 4a 01 7e 86 03 ...F.b..2..J.~.. 0360 7a 26 66 f9 6a 79 ec 9d e1 65 39 2b d9 50 0f aa z&f.jy...e9+.P.. 0370 bc 9c 94 0f ce 1d cd 66 5a 22 75 5f ac a5 23 31 .......fZ"u_..#1 0380 66 e6 69 f0 93 7b a6 e5 d2 3e 09 49 d7 86 93 d3 f.i..{...>.I.... 0390 a3 1a 23 17 4a 23 8b ea b5 54 ed eb 34 c1 2e 07 ..#.J#...T..4... 03a0 48 fb b7 03 9b 52 2a 1c 5c 2f 04 ab 8e 63 fc 3b H....R*.\/...c.; 03b0 ec 03 e4 ef ca 23 1a 18 4c fc 8a 2f 60 8d 03 15 .....#..L../`... 03c0 81 81 02 ec 5f bb 2f 37 de 99 1b 88 45 e1 dd 30 ...._./7....E..0 03d0 9b e3 d6 59 95 ed ae ce 3e 4d fb a1 7b 0f d7 b1 ...Y....>M..{... 03e0 7d 2c 16 88 80 02 67 09 2f aa 9b 2b 04 02 38 d2 },....g./..+..8. 03f0 e6 41 8d eb b3 23 ff c9 63 eb 7b 77 fb 59 54 88 .A...#..c.{w.YT. 0400 aa c3 69 94 34 a1 1c 08 a5 9b 47 25 93 2d cc aa ..i.4.....G%.-.. 0410 ab 1b e0 e9 eb 97 1e f7 32 e0 50 d5 83 63 4f d5 ........2.P..cO. 0420 9f f8 b5 c5 98 23 68 63 2c 0e d4 ea 9c 00 ab 9d .....#hc,....... 0430 21 66 78 4f 55 3f 08 b3 7a 1b b6 9c 07 4b 96 31 !fxOU?..z....K.1 0440 5e 7a 88 1c 30 51 fb 26 59 e3 fb 2b 07 0d 8a 53 ^z..0Q.&Y..+...S 0450 f3 15 43 2a 2c 68 dd eb cd dc 69 72 c4 cf 83 a6 ..C*,h....ir.... 0460 3d d0 b8 72 85 4c b7 c0 89 12 07 b2 56 2a 69 0c =..r.L......V*i. 0470 30 5c 78 82 f7 c3 84 78 d7 d6 64 9b 37 f1 90 ca 0\x....x..d.7... 0480 21 6d c2 13 8c d5 0c 4d 79 80 74 25 ec 27 2f ff !m.....My.t%.'/. 0490 8a 19 13 48 97 73 0e 37 6c ca e1 59 77 52 31 87 ...H.s.7l..YwR1. 04a0 80 da 20 23 9f 53 7d f1 f4 df bb f5 4e ce c0 be .. #.S}.....N... 04b0 87 1c dd ad 2d 1b c1 59 ea 42 1f d7 8a 4b 3d 9b ....-..Y.B...K=. 04c0 19 b0 9f 00 44 65 71 94 34 1b 79 88 70 0f 64 de ....Deq.4.y.p.d. 04d0 d3 9b 51 ab 9d 1a 17 22 c9 48 2c 11 c2 58 d9 32 ..Q....".H,..X.2 04e0 b8 1e 29 4f 94 b0 eb af 19 08 54 67 19 ff d0 66 ..)O......Tg...f 04f0 7c a9 3e a1 86 f7 5f 6b 12 3a 58 57 61 69 08 5e |.>..._k.:XWai.^ 0500 18 44 ba c1 eb 62 f6 eb 01 6e 3f 78 cb 6c 39 5c .D...b...n?x.l9\ 0510 01 f6 a7 5c 3d ae 8b e2 c5 75 fc d0 b0 3d 17 02 ...\=....u...=.. 0520 23 1d f5 d3 f9 f2 13 ee 17 29 7d 2b e7 e2 3d 20 #........)}+..= 0530 2d 34 0b b1 16 d1 4b d3 07 56 d2 4b b0 ac 1f 84 -4....K..V.K.... 0540 8a 88 ec 2d f1 69 84 a2 e8 4c e6 2e 76 7a a2 78 ...-.i...L..vz.x 0550 7b 06 15 27 d8 03 c5 26 79 84 9c 60 46 63 39 f0 {..'...&y..`Fc9. 0560 ba a7 0a 8d 75 03 8b 6a b5 e4 04 a7 c0 87 b9 b8 ....u..j........ 0570 85 d5 05 d5 15 6e d9 ae ca 4b 79 60 cc ce da 5e .....n...Ky`...^ 0580 91 a7 91 03 b5 f2 6c 8b 77 bd 9c 2a b5 25 9b a6 ......l.w..*.%.. 0590 30 45 8f f0 32 e8 29 de d3 69 34 aa 61 15 74 08 0E..2.)..i4.a.t. 05a0 eb 4f 32 93 dd 0a 69 fc .O2...i. No. Time Source Destination Protocol Length Info 21451 249.637544 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=261439 Ack=4589 Win=1002 Len=1448 TSval=597656 TSecr=729978 Frame 21451: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 261439, Ack: 4589, Len: 1448 Data (1448 bytes) 0000 2b 25 7b 7c 36 13 be 17 f3 20 be 75 07 35 b8 6f +%{|6.... .u.5.o 0010 97 58 1c 20 cc d2 97 30 90 5c 35 c2 73 ac 17 14 .X. ...0.\5.s... 0020 40 b5 6b c0 47 52 fc 3c 5b 12 cc 38 a9 ed 6f ab @.k.GR.<[..8..o. 0030 ca b6 2d 94 b2 60 b9 24 47 d6 24 7e bf 14 f1 b0 ..-..`.$G.$~.... 0040 c6 41 8f a2 e2 96 ad fe 0e df 9b 64 24 fc 17 25 .A.........d$..% 0050 54 81 6d b5 e6 ac 7d 87 c4 bd c5 42 42 16 a4 9f T.m...}....BB... 0060 b8 50 5e 1c 97 5e a8 ff 97 47 0c 7e b9 6a b7 d2 .P^..^...G.~.j.. 0070 37 f2 b6 cc 2c de 38 94 3b 42 66 11 e8 b8 5b 41 7...,.8.;Bf...[A 0080 b4 19 ef 29 71 ad 57 bf e3 2d 87 e0 2a 3c 11 30 ...)q.W..-..*<.0 0090 d4 1a 42 95 46 b7 ab 8f a7 ad 9a 37 48 99 a4 be ..B.F......7H... 00a0 e4 b2 98 3c c4 46 7a c4 15 4c 3a d4 19 36 66 59 ...<.Fz..L:..6fY 00b0 e7 53 db 37 fe 40 4a 5d ee 8f 6e bc 81 7d b1 c5 .S.7.@J]..n..}.. 00c0 65 55 34 5e 0e 83 d1 23 c9 48 31 56 7f a1 20 c3 eU4^...#.H1V.. . 00d0 5a e0 d6 22 da bb f9 2d 03 51 f5 83 1b 85 dc f2 Z.."...-.Q...... 00e0 35 f6 35 11 97 eb 3f bc d2 85 f8 ab d5 f6 ce 56 5.5...?........V 00f0 81 c6 73 33 a6 fb ee a3 c3 8a e7 6e 66 a2 e6 7f ..s3.......nf... 0100 dc 42 84 40 c5 1a 59 41 7d 1e 66 a4 e7 74 a3 02 .B.@xxxx}.f..t.. 0110 d9 2a 9a b0 da 86 f8 d9 02 81 17 20 71 76 04 dd .*......... qv.. 0120 74 fa fd 1d c7 84 ea 97 47 44 fc dc 0f d9 68 b7 t.......GD....h. 0130 9d 2c f4 b3 45 43 a9 79 66 e8 be d1 58 fb 0f 34 .,..EC.yf...X..4 0140 9d a2 79 41 e8 92 51 b6 ad ce 6f 7d 4b bf 7e d4 ..yA..Q...o}K.~. 0150 c0 eb d0 8f de b6 50 5e 41 78 11 2c a5 e6 85 68 ......P^Ax.,...h 0160 d4 21 d3 ab 67 cb c6 5e be 6c 33 95 d8 83 75 e4 .!..g..^.l3...u. 0170 08 54 d1 1d eb be 59 66 6c 58 2b 9a 2c 11 14 08 .T....YflX+.,... 0180 3a 1d b3 3b 4e 30 9e 07 60 c7 dd ab b2 72 83 00 :..;N0..`....r.. 0190 61 08 23 6c be 45 a7 3e 17 b9 00 52 a9 3b 11 fa a.#l.E.>...R.;.. 01a0 5f e3 6f c7 f6 12 53 22 92 04 1d 1d 3d db 6e ee _.o...S"....=.n. 01b0 cc 1f 3c b5 1c 6c 9d 0e 9c 90 e2 33 1c a1 ef 9a ..<..l.....3.... 01c0 c3 28 9a 5c 60 d3 35 24 ac 9c b2 93 e9 0c 41 67 .(.\`.5$......Ag 01d0 40 86 6b 49 43 d0 a2 b9 1b 7d 7c 85 5b 9b 9f bd @.kIC....}|.[... 01e0 94 42 8c f7 e2 df 71 a9 05 2a 83 40 b9 5e e7 c1 .B....q..*.@.^.. 01f0 4a 88 c8 d4 58 fd cc 6e fd a1 cb b3 bd c9 ba 1c J...X..n........ 0200 22 86 99 c8 6d 93 a2 79 56 48 e4 01 00 97 61 08 "...m..yVH....a. 0210 b1 a9 44 85 53 1e 78 00 b0 e2 52 33 d7 ca 9c 02 ..D.S.x...R3.... 0220 94 d1 b0 1b 63 bb 60 e8 e6 e8 89 01 34 87 21 c9 ....c.`.....4.!. 0230 7b 21 dd a9 de ce d6 58 9f e5 34 ee 7a 7c c9 ae {!.....X..4.z|.. 0240 74 d3 93 e4 0b 02 26 9b a7 b7 59 18 bd a2 fa 13 t.....&...Y..... 0250 45 b8 0d 2f 1e b5 7a c1 ee a4 e8 a8 9b f1 23 93 E../..z.......#. 0260 d1 84 d9 7c 41 a4 84 89 ec cd dc 01 da 4d f6 d1 ...|A........M.. 0270 00 cd ef e6 2c da 8a 15 43 8b 34 b1 b7 c5 fe 83 ....,...C.4..... 0280 fd 63 bc 70 62 28 82 2f db 80 92 87 6c 9e 52 3e .c.pb(./....l.R> 0290 ad 53 cc 4a 94 b5 fe a7 db 3c e1 62 d0 78 d7 e7 .S.J.....<.b.x.. 02a0 52 ba 4f 0f 55 01 82 99 a3 bb 23 a9 e3 e5 22 ea R.O.U.....#...". 02b0 09 70 6e 73 c8 8b 9c 89 0a 77 11 82 77 44 9e 23 .pns.....w..wD.# 02c0 18 0e b4 eb f7 ba 14 74 cc 72 16 40 e5 50 fc c7 [email protected].. 02d0 f0 2f 29 94 e0 81 f1 e4 91 75 2f eb cc 14 b6 ec ./)......u/..... 02e0 6c 21 be 92 54 88 24 24 5f c6 b5 d5 00 7e 3c 68 l!..T.$$_....~<h 02f0 3a 52 d7 d0 f3 df 17 fa bf 0c 44 f2 81 44 16 0a :R........D..D.. 0300 3c fc 60 07 1a 3f c4 d6 d6 72 cd e7 e8 1e 0c 15 <.`..?...r...... 0310 e9 16 1a 80 da 35 4f 51 ba 88 f3 b3 02 6d e0 4d .....5OQ.....m.M 0320 22 96 d4 21 3f 0c 7b bd ca e8 ba d7 c8 ea 15 dd "..!?.{......... 0330 63 ce 1b e7 42 12 73 a3 4e e5 0f 2a c3 8f 99 1d c...B.s.N..*.... 0340 c8 a4 39 ae 7f 0a 83 69 36 2d a9 01 fd 3b ce 18 ..9....i6-...;.. 0350 8e 4e 9e 34 38 33 ee b7 dd 4f df bd 64 a8 a8 8f .N.483...O..d... 0360 55 ff 2f 65 55 ae e1 70 be 48 9c 42 8c 00 53 da U./eU..p.H.B..S. 0370 92 20 85 70 20 0f fe 09 57 6e e0 3b a1 11 60 43 . .p ...Wn.;..`C 0380 0f 64 de 2e 2c dd 5e 15 22 1d 18 44 b5 8e 7d 62 .d..,.^."..D..}b 0390 04 17 51 de 3b 90 68 01 2a c9 cf a9 26 44 86 72 ..Q.;.h.*...&D.r 03a0 2d 99 78 8d 42 6e 17 a2 23 35 25 9d 40 57 68 6a -.x.Bn..#5%.@Whj 03b0 40 f9 97 e7 b8 53 d8 33 d3 63 f3 9a 43 cd d4 0e @....S.3.c..C... 03c0 b0 40 40 5a 4a 08 c9 0d 39 3d e9 17 af ea 19 fe .@@ZJ...9=...... 03d0 70 d2 4c 92 12 c0 7e b5 06 3d 51 3f d9 71 a8 bf p.L...~..=Q?.q.. 03e0 d1 27 19 17 50 7f d0 21 59 83 78 b5 08 62 8c 0b .'..P..!Y.x..b.. 03f0 9c bb bb 90 32 9c 1c ab 96 16 80 57 85 8b b3 19 ....2......W.... 0400 72 38 1c 9b 7c b9 81 30 99 df 6c d7 54 0f be 1a r8..|..0..l.T... 0410 4a 77 61 f5 77 dd e3 15 de 0f 77 74 27 ae 28 39 Jwa.w.....wt'.(9 0420 b3 c8 66 29 6f ee 0d 9e 7a b4 68 4b 3d 1e a5 57 ..f)o...z.hK=..W 0430 90 9e 92 c5 bb ce 8a 3e 7b ad c3 d9 8a 80 03 7e .......>{......~ 0440 4c 24 8b 7a b5 17 55 2e 3d 64 4c cd d7 a6 af f6 L$.z..U.=dL..... 0450 5b 10 0d 69 36 ac 4b a7 36 2d d5 2d 89 dd 56 fa [..i6.K.6-.-..V. 0460 72 7b 39 dc fa fd dc fe 67 2f d6 19 1a 8a eb b3 r{9.....g/...... 0470 41 b3 40 e6 5b f8 b3 a7 5c 02 1a 7c d8 fb a9 28 A.@.[...\..|...( 0480 99 e2 05 0e bd 5d 89 5b f9 05 f9 82 70 2a eb 9b .....].[....p*.. 0490 89 44 13 28 a9 6b 8b 70 f4 5b 27 a7 96 ea 4d 03 .D.(.k.p.['...M. 04a0 07 36 2f 9a 9e ac 45 da 91 68 e0 38 ef a2 23 08 .6/...E..h.8..#. 04b0 c4 9c 21 9e 11 e6 a3 3c fe a0 6a e6 6e 50 6a fb ..!....<..j.nPj. 04c0 94 f5 34 21 21 05 06 34 3f 6d 8c 3f 5c 85 43 e6 ..4!!..4?m.?\.C. 04d0 df 89 93 8f 95 1c 9e ce 65 e8 01 bd 35 27 ba f0 ........e...5'.. 04e0 36 fe cd bc b4 ac 9f 4c 7d b0 63 67 b3 ab 2b c6 6......L}.cg..+. 04f0 be b7 41 16 b7 41 00 49 eb 24 c3 fd bd da d7 4e ..A..A.I.$.....N 0500 11 b3 88 e6 c3 29 52 f6 63 89 08 cc cb 62 f3 16 .....)R.c....b.. 0510 61 bb 20 37 45 f7 9d 16 76 9a 76 08 fb 73 f0 76 a. 7E...v.v..s.v 0520 07 36 70 8a 8a e7 f4 0b ed 89 c4 e7 2e d2 6a c5 .6p...........j. 0530 cf 99 01 e9 12 df 76 4f ae ae 9a d1 1d 06 b3 7b ......vO.......{ 0540 39 de a0 1a 35 b8 49 ec 80 8f 26 e8 fd 19 35 c5 9...5.I...&...5. 0550 66 99 0a 3b 04 7c 47 6b 40 b5 a8 88 99 08 b0 01 f..;.|Gk@....... 0560 37 c4 ab c6 32 17 5c 6a b0 77 df 76 6f 95 ae e2 7...2.\j.w.vo... 0570 5a d9 e1 26 40 f6 89 14 f9 91 46 23 ac f3 e7 f1 Z..&@.....F#.... 0580 6e b6 ad 08 4c fd 40 05 36 0d fb af ed ac ed 29 [email protected]......) 0590 2a 32 3a 3a 21 e3 9a 42 9e 32 30 c3 3e 44 24 77 *2::!..B.20.>D$w 05a0 65 aa 24 64 07 19 b2 cf e.$d.... No. Time Source Destination Protocol Length Info 21452 249.637575 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21431#5] rfb > xrl [ACK] Seq=340742 Ack=53926 Win=64477 Len=0 SLE=53953 SRE=54090 Frame 21452: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 53926, Len: 0 No. Time Source Destination Protocol Length Info 21453 249.637622 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=4589 Ack=259991 Win=65535 Len=0 TSval=729978 TSecr=597656 Frame 21453: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4589, Ack: 259991, Len: 0 No. Time Source Destination Protocol Length Info 21454 249.637672 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=4589 Ack=262887 Win=65535 Len=0 TSval=729978 TSecr=597656 Frame 21454: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4589, Ack: 262887, Len: 0 No. Time Source Destination Protocol Length Info 21455 249.637726 192.168.10.1 192.168.10.203 TCP 199 34433 > cds [PSH, ACK] Seq=262887 Ack=4589 Win=1002 Len=133 TSval=597656 TSecr=729978 Frame 21455: 199 bytes on wire (1592 bits), 199 bytes captured (1592 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 262887, Ack: 4589, Len: 133 Data (133 bytes) 0000 9b 44 1e 85 14 6b 12 d5 36 ff 6d bc 66 40 91 95 .D...k..6.m.f@.. 0010 61 2a 9d c1 5f df 57 58 5e 24 47 af bb 1e fd 47 a*.._.WX^$G....G 0020 2c 1a fd 0c 3d b0 9a d3 54 f1 5d 76 69 3b e7 d8 ,...=...T.]vi;.. 0030 61 f7 d8 83 f1 d3 17 c7 99 d4 5f e1 0b c9 e8 08 a........._..... 0040 10 64 0a 6c 8b 0a ae 00 d0 2b 6b 64 54 84 6a 79 .d.l.....+kdT.jy 0050 88 fc 3a 68 79 9b 40 01 de 29 ff a1 7e 68 eb 5f ..:hy.@..)..~h._ 0060 a9 47 74 25 db ef fd c4 85 d3 21 2f 18 6f f5 05 .Gt%......!/.o.. 0070 b5 47 29 db ba 80 13 7c 1b e0 6c be 96 9c de 91 .G)....|..l..... 0080 74 01 67 02 ff t.g.. No. Time Source Destination Protocol Length Info 21456 249.637802 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:27 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1209 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 21456: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:27 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1209 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 21457 249.637867 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:48:27 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1209 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 21457: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:27 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1209 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 21458 249.637949 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=263020 Ack=4589 Win=1002 Len=1448 TSval=597656 TSecr=729978 Frame 21458: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 263020, Ack: 4589, Len: 1448 Data (1448 bytes) 0000 17 03 01 03 40 0c 4c 61 67 6e 8f 1c 3b 8c 33 b7 [email protected]..;.3. 0010 e9 b2 b4 88 bb cf b7 93 8d ad c0 6b 6b 60 5f c0 ...........kk`_. 0020 c7 b6 9a e6 8c 90 4a 67 01 b7 24 7c 13 19 ff de ......Jg..$|.... 0030 f4 a1 f0 20 ad a2 95 b6 ce 48 72 dd 70 c0 25 5f ... .....Hr.p.%_ 0040 50 dc 3e de 34 4c 21 00 d5 14 9e c1 37 ae 62 29 P.>.4L!.....7.b) 0050 e8 f7 15 fb 52 6f bc b3 b4 c7 8c 17 cf 9b ed bc ....Ro.......... 0060 a7 98 30 77 25 32 3b 0c e7 aa 07 f6 20 9e 97 76 ..0w%2;..... ..v 0070 3d ff 8d a3 b9 17 e3 b1 40 e5 e5 fd 10 5f 72 91 =.......@...._r. 0080 17 ed 19 9e 96 74 a5 ac 1e 53 9e b7 c3 24 48 4d .....t...S...$HM 0090 f6 81 d3 24 0a e3 96 c5 ef 3b 28 d5 fc 0e b1 80 ...$.....;(..... 00a0 87 1c b5 c2 98 b9 94 8a 47 4d c3 cf cf 85 dc 14 ........GM...... 00b0 4a 79 9b fe 47 de 93 c3 45 c5 4f 6a b4 4f c5 24 Jy..G...E.Oj.O.$ 00c0 06 b5 5a f7 31 ea 0f a1 83 61 1c 11 1f 96 f1 65 ..Z.1....a.....e 00d0 5f 7d b5 7e ee de 46 31 e5 07 ff 0f db 87 73 13 _}.~..F1......s. 00e0 3e d1 e4 cf 42 57 44 7e 6c 89 66 4c d4 1a 0c c9 >...BWD~l.fL.... 00f0 46 be 45 9c 89 07 13 65 5f 02 2d ea d3 7b 2e 63 F.E....e_.-..{.c 0100 c7 5d 82 39 35 9b 7c 2d 5c 2e d1 39 a3 1f c2 b7 .].95.|-\..9.... 0110 7d b9 7c 83 6e b4 dd 12 fb c3 af 25 76 6e b9 b4 }.|.n......%vn.. 0120 52 fc 4a 74 e4 3d 97 eb 71 9f ef 86 08 1c fa 1a R.Jt.=..q....... 0130 8c 40 85 b4 c7 4a bf bc 05 4b 9f db ce d7 00 2f [email protected]...../ 0140 69 46 25 39 3d 55 4b 77 d6 2f 4f b7 22 42 6b 32 iF%9=UKw./O."Bk2 0150 ff 65 f7 b0 9e 2b 92 f9 c4 5c 70 f4 72 2a e0 6e .e...+...\p.r*.n 0160 0e ec 52 7e 69 2e 01 8e 16 66 4b d7 e7 62 4e 3c ..R~i....fK..bN< 0170 ff 8b 2b eb 3b cc be 71 5c ef 18 12 bc 6f be 79 ..+.;..q\....o.y 0180 2e d4 ad 9c c3 64 23 a7 0a 73 71 08 f3 6e 78 8a .....d#..sq..nx. 0190 ba fd e3 a7 c3 13 67 fe 9e c4 c9 f3 b6 9a af ae ......g......... 01a0 fe 85 15 78 c8 fc 50 c8 23 d5 b5 8f 4b e8 10 84 ...x..P.#...K... 01b0 2f ac 70 42 72 f1 89 8e c5 37 6e 6e bf 47 72 91 /.pBr....7nn.Gr. 01c0 12 cb dc 26 f7 a3 b8 db 0a 1d 4e 70 f0 a0 f1 eb ...&......Np.... 01d0 25 9b 2f ee c1 1b fd 84 50 69 17 d5 9b 0a c2 53 %./.....Pi.....S 01e0 a1 e2 87 56 09 0e 5a 3e 91 e2 5f 55 7d e3 7e 2c ...V..Z>.._U}.~, 01f0 9a b5 50 9d 22 d9 8f a9 5b 23 55 bf ea 76 2e 60 ..P."...[#U..v.` 0200 f5 f0 d0 f5 1e 81 44 2a 44 c5 ea d6 a5 11 e2 04 ......D*D....... 0210 ac 0d a9 93 04 ad 62 dd 21 9e e6 0f b8 0c 83 3a ......b.!......: 0220 52 80 2e cb b3 fd 42 8e 10 97 af 13 6b c1 90 a8 R.....B.....k... 0230 26 c0 12 d5 30 97 28 ce 2e 6d e9 04 f4 1b 52 69 &...0.(..m....Ri 0240 cc cf 55 be 9e 27 7b 18 8b e8 14 a9 89 52 6c 08 ..U..'{......Rl. 0250 3d 82 1e 9d 47 cb 36 93 2b e1 9c 67 31 f9 e6 5e =...G.6.+..g1..^ 0260 c4 e7 48 e3 47 1a 05 f4 99 e2 68 b9 07 51 38 fe ..H.G.....h..Q8. 0270 86 84 a5 5e 7e 53 e6 c1 84 03 f5 f6 1f f0 ec c0 ...^~S.......... 0280 b1 19 91 70 52 8d 8b 99 0e 3d 3f ec 9f de 7f a2 ...pR....=?..... 0290 d9 8a 59 40 d3 09 1b f0 ef c4 2c 91 6b db 22 35 ..Y@......,.k."5 02a0 f4 30 f0 cb b5 54 ce 43 a3 8e 7e 78 d3 95 70 d5 .0...T.C..~x..p. 02b0 23 c9 bb f0 5d 41 b8 52 8a e5 d3 87 72 94 69 32 #...]A.R....r.i2 02c0 4c 2d 0c 16 96 e6 f2 c4 03 96 bd 85 ed 3c da 58 L-...........<.X 02d0 83 5d 93 43 08 0a 5f 78 6e 28 ea 5a 14 24 25 ed .].C.._xn(.Z.$%. 02e0 45 14 ac 11 1e f8 63 da 88 0e b1 82 d3 83 34 4d E.....c.......4M 02f0 30 49 61 f8 31 64 cd f1 db 13 5c 23 26 3e f2 bb 0Ia.1d....\#&>.. 0300 44 f0 19 cd 2f 92 b8 23 6c 7c 05 1a 6a 43 93 03 D.../..#l|..jC.. 0310 f8 42 1c 3f f0 af 70 d4 60 2d b7 ab 0d f6 59 63 .B.?..p.`-....Yc 0320 e1 52 75 c1 ee 42 e3 c5 dc f9 4a 99 eb 18 ec fb .Ru..B....J..... 0330 55 db f9 c6 44 af 2c be e0 64 a7 e1 55 ad ae ee U...D.,..d..U... 0340 fa 14 44 62 60 17 03 01 03 40 af bc fe 52 26 4b ..Db`[email protected]&K 0350 cb fd 8a 1c 39 f2 e8 58 55 40 94 1f 35 63 12 c2 [email protected].. 0360 29 5e d6 93 2e fa 84 dd e1 04 8b 6d 74 f3 e4 d6 )^.........mt... 0370 3a 80 ef f3 8d be 0b c6 c1 d4 d7 f6 eb 23 7e 3f :............#~? 0380 30 65 40 51 57 2b 2b 8d ca 96 bb 31 a5 34 44 dc 0e@QW++....1.4D. 0390 a5 32 7b 8e ca 18 04 66 0d 71 85 25 fb 7f 2b f4 .2{....f.q.%..+. 03a0 1c 4e ea f4 5f 17 fc 49 eb 17 11 55 46 5c e8 c6 .N.._..I...UF\.. 03b0 14 92 99 c9 24 04 20 a0 0f af fe 63 4e 35 5f bc ....$. ....cN5_. 03c0 45 97 1f 00 d4 fd 9f f5 66 d5 79 49 2f fc ad b6 E.......f.yI/... 03d0 24 8e ce 96 cd 15 79 18 17 91 90 76 f2 19 da 1d $.....y....v.... 03e0 b1 80 ec 7d 81 23 f6 7a 18 cf ba 06 62 34 55 c9 ...}.#.z....b4U. 03f0 32 f6 61 33 6b dc 0c 74 62 8f 2d 8c c7 56 42 a5 2.a3k..tb.-..VB. 0400 ea e3 2d e6 9c c0 12 8b 4b df 77 a4 fc e9 44 40 ..-.....K.w...D@ 0410 da 89 4c fa d0 2d 5a 21 09 c0 80 f6 a3 2d 6c 63 ..L..-Z!.....-lc 0420 b9 55 00 33 c2 80 c9 a4 19 cb 17 e8 fe 52 75 43 .U.3.........RuC 0430 d3 a0 47 20 1a 5f 30 3d 6e 5a e6 fd 25 58 25 df ..G ._0=nZ..%X%. 0440 c5 50 ee 94 6e 47 89 5e 9d c4 f5 17 91 0b 94 95 .P..nG.^........ 0450 ff 34 a2 92 85 be 92 e4 59 bf 3e 9c 59 e4 7b ec .4......Y.>.Y.{. 0460 a2 24 a3 8d df e6 1d 7b 24 be cd 58 ea b1 6c 01 .$.....{$..X..l. 0470 bf 48 2d a0 17 38 5e 21 96 b8 09 25 c4 b3 f0 f9 .H-..8^!...%.... 0480 e2 23 df c9 24 d7 0c ef 11 cb 1e 5f c7 e5 91 5e .#..$......_...^ 0490 8d e3 63 48 3a db 07 35 4b 4a 32 5e c9 01 2c d7 ..cH:..5KJ2^..,. 04a0 1b 8f 4e 8f bf b2 a3 a9 56 81 64 a2 96 2c ad d7 ..N.....V.d..,.. 04b0 01 9e 69 68 45 07 14 2c 23 88 cb d5 f8 e3 c6 fd ..ihE..,#....... 04c0 8c 0d 04 c2 42 cc 7c fc 39 0d 2f fd 7b 51 ea 09 ....B.|.9./.{Q.. 04d0 95 c4 b4 b8 a9 bd 20 b2 ed f1 99 c2 6c 82 c1 3c ...... .....l..< 04e0 e5 8d 46 89 f7 40 4d e9 34 6d c4 a2 20 70 35 5a [email protected].. p5Z 04f0 42 09 1f 1f a7 b6 e6 cc e6 2e 47 ee 5f 45 a3 bd B.........G._E.. 0500 15 99 03 d8 53 f9 b7 25 3a 70 ab d6 a7 ba 1d 90 ....S..%:p...... 0510 87 d3 70 d9 a2 a6 08 43 41 87 8a d3 a0 a0 be 08 ..p....CA....... 0520 6a 5f 39 10 2c 27 f5 48 13 0c 7f ec b3 b5 bf 03 j_9.,'.H........ 0530 cd 31 95 71 3e 6b 59 de 6d 6c 40 94 69 fc 85 35 .1.q>[email protected] 0540 93 c9 ad 52 d0 81 c8 28 e7 a6 ac 4f 03 a3 95 0c ...R...(...O.... 0550 91 ad 48 e7 8e 6f f8 e9 00 81 69 96 5f e5 f8 1c ..H..o....i._... 0560 c8 ab b8 ed 62 e1 32 1b 78 07 ef 07 89 bf a9 52 ....b.2.x......R 0570 75 72 4d f0 b6 6b 11 5e b3 0e 69 14 e9 88 7f 67 urM..k.^..i....g 0580 93 25 f7 18 b5 10 62 79 c6 da 4f 50 01 c7 34 2d .%....by..OP..4- 0590 34 49 38 99 40 f6 59 d3 69 c1 51 c3 f7 63 51 c1 4I8.@xxxxxxxxxx. 05a0 d3 7c 82 3d 74 fd fb 05 .|.=t... No. Time Source Destination Protocol Length Info 21459 249.637999 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=4589 Ack=264468 Win=65535 Len=0 TSval=729978 TSecr=597656 Frame 21459: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4589, Ack: 264468, Len: 0 No. Time Source Destination Protocol Length Info 21460 249.638053 192.168.10.1 192.168.10.203 TCP 292 34433 > cds [PSH, ACK] Seq=264468 Ack=4589 Win=1002 Len=226 TSval=597656 TSecr=729978 Frame 21460: 292 bytes on wire (2336 bits), 292 bytes captured (2336 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 264468, Ack: 4589, Len: 226 Data (226 bytes) 0000 09 9c 34 de 1d 30 71 4e be 1e 41 c5 4b f2 53 d0 ..4..0qN..A.K.S. 0010 86 bd 93 59 0b ec 3e f6 da 88 08 03 af f9 1e 37 ...Y..>........7 0020 4a b3 0f 8f 87 5f 44 f5 33 e9 e6 89 81 16 95 e1 J...._D.3....... 0030 5b 92 ec 82 8a ae 9f 9d 0f fd 8f 7c 1c ba 41 67 [..........|..Ag 0040 c7 7b 58 d6 bf ac fd d6 80 89 d5 1e 93 74 f2 75 .{X..........t.u 0050 b2 8a ae 62 2f 57 4d 66 45 f4 36 a1 26 ae eb b4 ...b/WMfE.6.&... 0060 d1 37 85 7a 3b 45 84 ce fe 05 c4 7e 07 6d dc 37 .7.z;E.....~.m.7 0070 b6 90 fb c3 8d 9a 06 2e 17 4d 5a 95 61 60 9a e1 .........MZ.a`.. 0080 26 bd e4 dd 10 81 c9 ee 7e 44 5e 01 5c 56 b7 23 &.......~D^.\V.# 0090 3a 3b 38 08 49 48 c2 a9 10 4e c6 54 7e 5c 90 f4 :;8.IH...N.T~\.. 00a0 9a 30 69 32 10 90 e4 e8 9b 9b 90 d1 c3 f8 4c 7d .0i2..........L} 00b0 0d 37 27 75 47 0c d3 0b f6 ac 12 fc 9b dc 3a 07 .7'uG.........:. 00c0 f2 88 54 2e ad c7 74 90 43 bc 99 5b e7 a4 85 64 ..T...t.C..[...d 00d0 c6 4d ff 9e fd 97 9c 29 40 08 00 4b bb 2c 5d d9 .M.....)@..K.,]. 00e0 ac a3 .. No. Time Source Destination Protocol Length Info 21461 249.638126 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:48:27 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1209 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 21461: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:27 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1209 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 21462 249.638200 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:27 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1209 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 21462: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:27 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1209 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 21463 249.638288 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=264694 Ack=4589 Win=1002 Len=1448 TSval=597656 TSecr=729978 Frame 21463: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 264694, Ack: 4589, Len: 1448 Data (1448 bytes) 0000 17 03 01 03 50 54 41 fc c4 83 2e a4 95 cd 46 55 ....PTA.......FU 0010 09 90 dd 2d f0 1e 5f 11 37 ed 9c 7b 70 e9 6d 88 ...-.._.7..{p.m. 0020 cf e1 40 e9 49 0e 5c 31 60 78 8a b6 b8 50 49 58 [email protected].\1`x...PIX 0030 c9 48 76 87 c2 ef 9a 8c c3 7d ed 96 87 b2 43 41 .Hv......}....CA 0040 57 eb 67 11 34 cb 17 fd e5 71 6d bf 1e 3f f7 7e W.g.4....qm..?.~ 0050 e9 23 12 53 02 02 81 5b d0 27 2e d3 c6 4b 8e 7b .#.S...[.'...K.{ 0060 d4 62 50 36 38 f4 df a2 a0 76 26 8d 14 9a 1d 95 .bP68....v&..... 0070 e2 75 78 19 ef c8 37 87 72 71 ae 53 9f 3f 5f 83 .ux...7.rq.S.?_. 0080 6f 9b 9a 18 18 8e f8 46 81 4c 72 58 d3 2f 29 ec o......F.LrX./). 0090 b8 6d 91 7d d2 48 e1 db 97 ee 68 b5 ad 10 3c f5 .m.}.H....h...<. 00a0 93 bb 9c 30 f6 35 2f 9a 38 bd d9 1c ee c5 3a c3 ...0.5/.8.....:. 00b0 fd ee fa 0d 69 36 30 f6 dc ef 54 7d c8 44 94 e5 ....i60...T}.D.. 00c0 6f f1 09 b8 68 e2 ee 78 50 81 13 9d e0 2e c2 a1 o...h..xP....... 00d0 21 93 50 45 97 66 5d 7a 6f 3b da de 0a ed 20 bb !.PE.f]zo;.... . 00e0 5a 4f 9d c1 bf b3 d5 c6 3e 57 e8 29 08 56 f1 3b ZO......>W.).V.; 00f0 3f 85 ab 92 6a 7e 02 f5 9d e8 7d cf 07 67 57 c7 ?...j~....}..gW. 0100 4a 04 c9 a9 79 c4 71 20 31 e2 0e b0 8c 21 84 b2 J...y.q 1....!.. 0110 d2 92 43 e0 61 e3 a1 a9 fa 5b 42 33 9f c5 de 58 ..C.a....[B3...X 0120 6d aa 72 77 02 b6 3f d4 e8 2f 8e 0b 73 41 24 08 m.rw..?../..sA$. 0130 bd 78 b0 80 ad 74 43 af 2b 17 74 61 eb 9a f1 9f .x...tC.+.ta.... 0140 f9 be 7d 65 da 4f e3 a5 c5 9e 1a 68 58 3a ca 95 ..}e.O.....hX:.. 0150 88 15 92 e6 ed 8a 3d 5d ad a2 1b e1 67 90 81 c4 ......=]....g... 0160 09 85 63 6d 93 90 dd 5d a6 be 29 ca a2 bd 8b 1a ..cm...]..)..... 0170 f3 23 0c cf 1d bf 65 0b 88 ff ac 42 f5 b6 68 f8 .#....e....B..h. 0180 69 4e 7d 29 01 59 7d 90 c2 be 52 06 db f9 bb 3a iN}).Y}...R....: 0190 c9 e8 72 9b 69 b3 11 c7 d4 ae 3e fd 36 74 8d e4 ..r.i.....>.6t.. 01a0 f6 c2 c6 84 96 c6 73 66 5f 98 7a 0b 78 d6 e3 4c ......sf_.z.x..L 01b0 78 91 2a ca 02 06 57 1f 0a 32 8a 6c dd 15 01 4b x.*...W..2.l...K 01c0 00 a1 6a d6 18 b9 5e be b2 55 6a b8 70 85 97 ec ..j...^..Uj.p... 01d0 70 2f 35 d6 33 a1 4d 35 f9 97 7b b6 db d2 84 a8 p/5.3.M5..{..... 01e0 a3 4b d0 51 c9 a8 ee 7e fb 78 24 24 4c db fd 45 .K.Q...~.x$$L..E 01f0 a6 f2 71 c0 3a 7d fb d0 c4 29 a9 4d 96 66 4b b9 ..q.:}...).M.fK. 0200 a2 91 e1 fa cd db 84 1b e8 25 31 5c e1 fa a3 65 .........%1\...e 0210 2b c2 e9 eb f8 9f 79 c7 4b 31 54 e0 11 b1 e6 a4 +.....y.K1T..... 0220 19 ef 07 01 41 03 23 56 74 c6 ac 84 ce e5 da f5 ....A.#Vt....... 0230 d3 0b ea f7 e1 b9 73 a5 06 80 b9 a0 ba db f7 8e ......s......... 0240 11 8c 50 1c ca 41 66 18 d7 1e 6f fc 7d 6e 2e 0e ..P..Af...o.}n.. 0250 d0 4c a8 34 15 d0 87 0e e4 70 a0 05 0f 1a 1d 59 .L.4.....p.....Y 0260 ec 0b 34 96 78 eb 87 52 75 c2 f2 a0 58 95 7f 97 ..4.x..Ru...X... 0270 80 ce 68 0d e3 6d 24 1f 63 12 fe 93 ad 30 6f a1 ..h..m$.c....0o. 0280 64 3f 56 e1 36 c5 24 8b 6d 44 8a d1 d2 56 0b cf d?V.6.$.mD...V.. 0290 82 3a 17 0d 1c b7 b0 8b 17 c1 9f 92 1c 33 d2 59 .:...........3.Y 02a0 5e ca 02 49 85 8f 35 2b 2f 41 45 ad 98 0d 78 63 ^..I..5+/AE...xc 02b0 22 fe 4d fe 85 ff 8f 14 92 ea 93 2c 84 9e 26 f3 ".M........,..&. 02c0 a1 23 06 67 f7 04 a7 53 a2 1e ad de 66 fe df d0 .#.g...S....f... 02d0 99 3e 76 31 df 1e 65 ae a6 94 ad c6 b8 c0 a6 d1 .>v1..e......... 02e0 cb c2 7d 37 a1 e5 47 ec c4 53 e4 cd 23 20 5c 87 ..}7..G..S..# \. 02f0 11 7d b4 4f d6 cf 66 dc 0d f9 de ba 65 cc d3 ea .}.O..f.....e... 0300 2b ea 28 dc 82 5b cf 8a 22 5d 04 f4 8b 73 bf 77 +.(..[.."]...s.w 0310 d0 6d 32 ec f8 a7 0a f2 98 0a 73 e2 dd a2 49 04 .m2.......s...I. 0320 fa 98 1a 39 c1 2a 7b 61 f5 ac 6a 2f ab 9a 4b 5f ...9.*{a..j/..K_ 0330 e2 89 22 87 94 df 10 0e a2 0a af ed 81 05 e7 f8 .."............. 0340 80 ce 36 20 7d 96 9c e1 2d 71 d3 b3 29 2a f0 32 ..6 }...-q..)*.2 0350 95 43 64 80 ec 17 03 01 03 40 72 dd 3a 93 c3 f8 .Cd......@r.:... 0360 83 4c f5 1f bf 6e df 6a 74 f7 d3 06 80 4c 20 3e .L...n.jt....L > 0370 00 cb 26 b0 f2 2f d8 ba 67 82 fd 78 3b ff 3a a9 ..&../..g..x;.:. 0380 1f 05 85 6b a1 a4 d0 4d 8f dd ef ba 26 03 05 83 ...k...M....&... 0390 eb 67 0b b4 41 2d 9d c3 e6 30 64 e1 60 a7 89 4a .g..A-...0d.`..J 03a0 cb 75 8d 13 53 de 2d c6 c8 3a b1 ed 68 54 c1 1b .u..S.-..:..hT.. 03b0 75 84 e2 7c 11 43 72 fb fd a6 a9 d3 58 ba f2 c0 u..|.Cr.....X... 03c0 b0 9d 0b 8f f9 a5 10 e3 79 b0 5f df 03 31 75 b4 ........y._..1u. 03d0 de 96 eb 01 58 40 bc 75 8c 8e a0 ae 62 b0 1f b1 [email protected]... 03e0 14 eb ce 98 69 69 3d 1c 51 3b bd 22 77 bd 4d 56 ....ii=.Q;."w.MV 03f0 73 f0 e2 30 13 9d eb 9a 7b fd ca 39 92 9f a1 36 s..0....{..9...6 0400 3e 0c 53 67 e8 4c 17 83 92 a7 2e 83 41 8c 71 a8 >.Sg.L......A.q. 0410 9e b4 95 79 a3 b5 13 20 e9 cb 65 d0 b2 b7 ca 2e ...y... ..e..... 0420 3d 24 7c 21 af 86 1c 84 69 89 9f 63 5b 01 d8 52 =$|!....i..c[..R 0430 88 0f 44 2b ec aa 1f ae 3f e1 6b 9f 9b 82 97 49 ..D+....?.k....I 0440 7a ac 3a ab 81 8d 55 da 32 a5 c3 bb 47 d0 3c 40 z.:...U.2...G.<@ 0450 c1 b9 b9 f5 ed 88 29 b3 0d b1 10 92 a3 3e 37 8e ......)......>7. 0460 29 a7 e5 94 6b fe 78 9c 6e 8e e0 16 db ac e5 57 )...k.x.n......W 0470 a1 4c 03 b5 b1 45 92 f9 42 07 b6 89 68 56 8b 71 .L...E..B...hV.q 0480 c7 56 56 90 a2 21 e5 37 08 38 b9 b3 71 73 7f 99 .VV..!.7.8..qs.. 0490 62 6c 34 c3 89 5c 89 73 66 d9 e5 ee 43 c3 d9 47 bl4..\.sf...C..G 04a0 02 63 cc 5a 6c 96 5f 6c 4b 7f 4a 0a 30 f9 c8 28 .c.Zl._lK.J.0..( 04b0 97 78 81 63 37 fd 9a 77 90 79 a9 21 0f e9 ae 78 .x.c7..w.y.!...x 04c0 a3 db 18 4e f0 af 1c 98 db 04 ac f0 ab 97 97 6d ...N...........m 04d0 aa 41 94 17 46 45 a3 23 28 76 df 87 85 4a 39 a8 .A..FE.#(v...J9. 04e0 7d 21 c8 05 7a 5f 7c a9 dc 04 96 31 ac 74 76 27 }!..z_|....1.tv' 04f0 04 04 dc 78 71 10 dc c5 59 89 29 37 91 aa 2c ea ...xq...Y.)7..,. 0500 ae 39 19 a0 67 d9 62 62 d9 62 a3 68 1f a2 ad 3b .9..g.bb.b.h...; 0510 c1 9e e9 04 0a 31 9a d4 b7 e6 c3 d7 cd e6 c8 c7 .....1.......... 0520 fc c0 f0 5a a6 63 7d 05 3c 4a c0 87 db d9 80 73 ...Z.c}.<J.....s 0530 05 ef 4f 4e 54 0e 2a b9 20 e0 c7 17 c4 e8 0c 17 ..ONT.*. ....... 0540 7e f2 8a 09 a2 fe 7b 38 b3 78 2c d8 8a 39 df 71 ~.....{8.x,..9.q 0550 3b 00 b1 ed 9e 3b c6 61 e2 bd b1 4f 64 67 4c ce ;....;.a...OdgL. 0560 b3 10 29 d2 77 97 86 c8 e5 91 a5 4a ba 3e 0e c0 ..).w......J.>.. 0570 63 22 1f c5 91 d0 c9 35 f1 21 15 02 8b cb b5 58 c".....5.!.....X 0580 b3 98 8d 9b 01 1f 0d 08 fc 45 e2 82 c7 af a8 ed .........E...... 0590 bf fc 12 6c 1e 4f aa a3 0f 2e 26 30 4a a3 3e 7c ...l.O....&0J.>| 05a0 e0 cd dd 4d e5 5d c5 cc ...M.].. No. Time Source Destination Protocol Length Info 21464 249.638347 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=4589 Ack=266142 Win=65535 Len=0 TSval=729978 TSecr=597656 Frame 21464: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4589, Ack: 266142, Len: 0 No. Time Source Destination Protocol Length Info 21465 249.638401 192.168.10.1 192.168.10.203 TCP 308 34433 > cds [PSH, ACK] Seq=266142 Ack=4589 Win=1002 Len=242 TSval=597657 TSecr=729978 Frame 21465: 308 bytes on wire (2464 bits), 308 bytes captured (2464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 266142, Ack: 4589, Len: 242 Data (242 bytes) 0000 48 1c 67 69 9c 3b b7 ac 8b ff cb ee 55 ae f7 ea H.gi.;......U... 0010 56 54 dd 8c 0c 04 35 7f 5b a9 9e 93 11 d1 2d c3 VT....5.[.....-. 0020 de 4a a7 89 a2 fc 1e 88 21 2f 04 48 e3 31 cb a2 .J......!/.H.1.. 0030 6c 99 d7 42 b5 b8 98 aa b3 b4 86 ea ec 1c e4 64 l..B...........d 0040 11 30 5e 68 aa 25 07 8a 93 02 0d 1a c5 63 05 24 .0^h.%.......c.$ 0050 5e 22 2e 5c 15 3e 56 1d 6a 4e f2 9c 35 39 41 af ^".\.>V.jN..59A. 0060 66 80 9e d0 e7 ef dd 93 81 41 98 56 4a c4 65 58 f........A.VJ.eX 0070 9d 4e 3c 6a 28 ea 39 9e b4 34 c0 6a 64 94 d6 2a .N<j(.9..4.jd..* 0080 6a 58 b3 d4 75 48 18 a7 cb 08 82 86 12 90 cf bd jX..uH.......... 0090 98 64 52 9d b1 6c e1 86 22 6e aa 68 65 c1 85 02 .dR..l.."n.he... 00a0 84 ae 25 d6 55 20 dc 4d 94 93 27 57 ef 93 f4 f0 ..%.U .M..'W.... 00b0 24 fe 3d 51 e8 62 84 26 90 68 f7 99 57 b2 e2 c7 $.=Q.b.&.h..W... 00c0 17 bb 00 22 0b ee df 2e 26 ab 9a ef b4 c6 08 bc ..."....&....... 00d0 f4 a0 cb f1 88 b1 a4 12 33 ae c5 66 82 17 53 da ........3..f..S. 00e0 5a 25 94 3d e0 6f 65 68 6f 91 c7 4a d5 f5 1d 1a Z%.=.oeho..J.... 00f0 83 ea .. No. Time Source Destination Protocol Length Info 21466 249.638482 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:27 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1209 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 21466: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:27 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1209 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 21467 249.643033 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 21467: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 53926, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21468 249.643070 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340742 Ack=54090 Win=64313 Len=0 Frame 21468: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 54090, Len: 0 No. Time Source Destination Protocol Length Info 21469 249.655073 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21469: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54090, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21470 249.746831 65.32.1.65 192.168.10.246 DNS 138 Standard query response PTR ppp-124-122-165-6.revip2.asianet.co.th Frame 21470: 138 bytes on wire (1104 bits), 138 bytes captured (1104 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 58256 (58256) Domain Name System (response) No. Time Source Destination Protocol Length Info 21471 249.766076 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=4589 Ack=266384 Win=65293 Len=0 TSval=729980 TSecr=597657 Frame 21471: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4589, Ack: 266384, Len: 0 No. Time Source Destination Protocol Length Info 21472 249.766193 192.168.10.1 192.168.10.203 TCP 903 34433 > cds [PSH, ACK] Seq=266384 Ack=4589 Win=1002 Len=837 TSval=597689 TSecr=729980 Frame 21472: 903 bytes on wire (7224 bits), 903 bytes captured (7224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 266384, Ack: 4589, Len: 837 Data (837 bytes) 0000 17 03 01 03 40 2b b2 a8 a9 7e d9 96 06 8f 79 2e ....@+...~....y. 0010 67 21 1b 3a 8d 6c 36 03 34 e3 43 e3 88 79 bd 55 g!.:.l6.4.C..y.U 0020 27 4e 15 51 b1 b3 d2 a8 63 c5 1c a5 50 08 74 4b 'N.Q....c...P.tK 0030 40 63 04 73 a2 2a 56 f7 f5 d3 c0 81 39 76 ce 46 @c.s.*V.....9v.F 0040 54 a2 a1 f0 3d 5f dd 66 a1 9f 65 f6 29 b9 33 ec T...=_.f..e.).3. 0050 37 8e 32 c4 db 98 c5 9c 65 f7 ae 14 d7 e4 25 2e 7.2.....e.....%. 0060 eb cd 85 06 e6 91 82 6a de 77 e6 4e 73 71 36 97 .......j.w.Nsq6. 0070 93 4f 92 97 bf ca 36 f7 92 ef e9 b3 c3 b3 25 8d .O....6.......%. 0080 0c 58 71 7f ea 74 e2 ca bc d1 3c ee 16 bf cf 84 .Xq..t....<..... 0090 c8 37 b3 a1 7f b4 7a e4 64 aa 69 e3 52 a3 d1 08 .7....z.d.i.R... 00a0 ec 12 8a 1e ea 35 cf f2 69 cb 15 01 6d b8 fe 91 .....5..i...m... 00b0 2a 05 bf de a9 39 64 3b 6a 21 66 57 55 0c 0c cc *....9d;j!fWU... 00c0 40 7c b6 a4 e5 3d 1c 49 df b8 c8 78 64 bb 04 f4 @|...=.I...xd... 00d0 bc d8 3f 27 92 83 66 53 80 5c 18 ff f1 d7 9f d6 ..?'..fS.\...... 00e0 9f 4f 95 33 23 3c 0b f7 59 f9 51 28 90 96 ea 5e .O.3#<..Y.Q(...^ 00f0 02 75 6f 5b ac bc 80 8e f0 0b 5b 8e 1e 00 04 83 .uo[......[..... 0100 48 fe 97 74 63 0c 9b cd ec a0 22 52 21 99 1a 61 H..tc....."R!..a 0110 53 4f b0 2a b9 e1 20 f2 9d f3 09 d6 8a cd 1f 12 SO.*.. ......... 0120 44 2e 99 ef a2 fe 7d 21 1e 99 ae 51 eb 7d c3 21 D.....}!...Q.}.! 0130 8a 8f 02 d8 1b 36 41 cc 79 ab 7d 74 a5 e8 53 fa .....6A.y.}t..S. 0140 91 49 78 d9 a3 4f f1 2e 72 a9 a1 14 5a 3e c8 5f .Ix..O..r...Z>._ 0150 83 b3 5a bb 6e c3 3e bd 93 09 4a 0e ab 9a cf b1 ..Z.n.>...J..... 0160 20 44 a9 b5 17 f5 b4 c6 1b 93 2d 74 d3 cb c5 ba D........-t.... 0170 4c 86 f9 b5 ca 4c de b8 6e 7e 26 f8 68 0c 70 6a L....L..n~&.h.pj 0180 49 81 f0 12 ee 29 fc f1 12 6d 76 04 13 e5 23 04 I....)...mv...#. 0190 60 8e a8 4c 83 e5 5a 44 d2 1b ab ca 49 ee 41 65 `..L..ZD....I.Ae 01a0 95 20 3c 01 47 53 b5 f7 89 50 05 b3 a1 30 93 7d . <.GS...P...0.} 01b0 62 c9 d6 39 72 52 73 2e 30 ef 15 bb ad b0 78 16 b..9rRs.0.....x. 01c0 72 d3 78 54 51 a2 47 25 6e ae 56 75 cf 9f b2 96 r.xTQ.G%n.Vu.... 01d0 68 58 a6 97 55 3a 25 58 e5 32 92 0a 19 ef bb 63 hX..U:%X.2.....c 01e0 fd 4b 2b be 47 7f 30 38 48 50 7a 39 f9 4e 24 eb .K+.G.08HPz9.N$. 01f0 17 84 c0 ad 63 69 e2 83 ee 93 01 4c 7e 7f 39 e6 ....ci.....L~.9. 0200 cd 22 3c 92 e4 5b 96 21 6d 01 9b 4c 9b 95 93 a3 ."<..[.!m..L.... 0210 31 53 83 9e 53 a5 d1 52 bd 58 f8 cb d9 e7 d0 48 1S..S..R.X.....H 0220 7f 9e 2c ed 76 f7 53 b4 97 ee f7 14 5f 82 c1 91 ..,.v.S....._... 0230 50 d7 12 d7 cb 6f 20 0b 6a f5 1c d1 fb b5 36 58 P....o .j.....6X 0240 19 d7 c6 86 32 7f d5 b2 b8 6f 99 53 d2 66 bf 6b ....2....o.S.f.k 0250 d8 62 47 f1 10 26 5f cc 5d 32 b9 29 23 d9 86 8f .bG..&_.]2.)#... 0260 57 fb f1 26 be 30 fc 59 ac 79 95 f2 df 7a 67 65 W..&.0.Y.y...zge 0270 1d 71 56 12 95 ad 3f 8f d6 ce 1d 57 53 63 7e 2c .qV...?....WSc~, 0280 61 0f 7a 3b 1f 3e f9 b3 bd 14 ca 20 1a 29 0b 96 a.z;.>..... .).. 0290 3c 64 fa 7b 26 d8 e1 cb 8a 7b e1 91 86 dd bc 39 <d.{&....{.....9 02a0 c1 2f fd 9d 6f 0f f5 84 8d 61 41 ad 34 1c e0 13 ./..o....aA.4... 02b0 19 5e 3d 79 a5 8d c9 35 d8 79 8e d5 c2 9c 1e 07 .^=y...5.y...... 02c0 1d b2 6f dd 3b 67 f4 0a ac be 9a 93 c5 4f cf b7 ..o.;g.......O.. 02d0 1e b1 92 27 a2 4f 29 fa d0 48 8b 24 cd 28 2e 33 ...'.O)..H.$.(.3 02e0 71 c7 b6 cd 90 1f d8 70 be 6c 15 b1 08 a0 7c 46 q......p.l....|F 02f0 5d d0 5d 60 fe bd d3 f6 09 b5 7c ef d3 68 e1 7f ].]`......|..h.. 0300 74 74 1e 1e 34 d0 db 2f 8f 34 b3 72 ab 96 c0 5f tt..4../.4.r..._ 0310 36 5e c5 4d 98 97 b8 aa 64 e7 e6 9c 55 ad 05 b5 6^.M....d...U... 0320 6c 1d 90 44 67 93 97 bd 61 99 0e 7e 63 02 3b 44 l..Dg...a..~c.;D 0330 36 48 1a 2e b3 b2 73 dd 22 1a c0 01 16 be bd 9a 6H....s."....... 0340 34 35 b2 38 53 45.8S No. Time Source Destination Protocol Length Info 21473 249.768328 192.168.10.246 65.32.1.65 DNS 86 Standard query PTR 24.140.194.62.in-addr.arpa Frame 21473: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 64482 (64482), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 21474 249.771248 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340742 Ack=54117 Win=64286 Len=0 Frame 21474: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 54117, Len: 0 No. Time Source Destination Protocol Length Info 21475 249.867807 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 21475: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 21476 249.867849 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 21476: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 21477 249.881683 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=4589 Ack=267221 Win=64456 Len=74 TSval=729981 TSecr=597689 Frame 21477: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4589, Ack: 267221, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 05 c7 0d ca 44 3f d7 09 8a 10 ca .... ....D?..... 0010 2c 6e b5 45 fb 45 d3 fc d6 a3 aa 80 68 f3 15 48 ,n.E.E......h..H 0020 49 64 70 fb 2d 17 03 01 00 20 cb c8 ac 91 6c 5a Idp.-.... ....lZ 0030 8a ee b3 3d 1d 6f 28 a5 e1 81 74 6b 48 23 cf 73 ...=.o(...tkH#.s 0040 d0 85 7d 44 6d 84 3d be d7 db ..}Dm.=... No. Time Source Destination Protocol Length Info 21478 249.881753 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-02.geo.kaspersky.com Frame 21478: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 64857 (64857), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 21479 249.881756 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=267221 Ack=4663 Win=1002 Len=0 TSval=597717 TSecr=729981 Frame 21479: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 267221, Ack: 4663, Len: 0 No. Time Source Destination Protocol Length Info 21480 249.884811 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=4663 Ack=267221 Win=64456 Len=74 TSval=729981 TSecr=597717 Frame 21480: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4663, Ack: 267221, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 f9 20 7c 62 9f 37 9a 95 04 94 f9 .... . |b.7..... 0010 5f 00 c5 e3 10 f3 b7 f0 a2 10 ec a9 ad 3a 60 3d _............:`= 0020 ec 4b 62 39 c2 17 03 01 00 20 07 b3 7a b7 3b 4c .Kb9..... ..z.;L 0030 94 ef 82 9d 48 1f 75 7e fc 8f 10 54 7e fc b6 62 ....H.u~...T~..b 0040 da f8 b6 3b b9 67 45 fe 6e 91 ...;.gE.n. No. Time Source Destination Protocol Length Info 21481 249.884876 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=267221 Ack=4737 Win=1002 Len=0 TSval=597718 TSecr=729981 Frame 21481: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 267221, Ack: 4737, Len: 0 No. Time Source Destination Protocol Length Info 21482 249.887467 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=4737 Ack=267221 Win=64456 Len=74 TSval=729981 TSecr=597718 Frame 21482: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4737, Ack: 267221, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 0b 22 cb f7 ef a3 4e ec b8 82 c9 .... ."....N.... 0010 14 68 71 5f 1b 65 1f bd 7f 16 76 1d c5 b4 09 c4 .hq_.e....v..... 0020 6d 0f ca 35 d3 17 03 01 00 20 4e 54 2e bf 2a f2 m..5..... NT..*. 0030 6e f9 41 74 84 a8 12 fe 89 15 8c 7a 59 f3 d9 7b n.At.......zY..{ 0040 67 4e f3 c9 7f 78 ad 0d c1 fc gN...x.... No. Time Source Destination Protocol Length Info 21483 249.887519 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=267221 Ack=4811 Win=1002 Len=0 TSval=597719 TSecr=729981 Frame 21483: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 267221, Ack: 4811, Len: 0 No. Time Source Destination Protocol Length Info 21484 249.890107 65.32.1.65 192.168.10.246 DNS 123 Standard query response PTR h140024.upc-h.chello.nl Frame 21484: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 64482 (64482) Domain Name System (response) No. Time Source Destination Protocol Length Info 21485 249.890185 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=4811 Ack=267221 Win=64456 Len=74 TSval=729981 TSecr=597719 Frame 21485: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4811, Ack: 267221, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 b8 3b 1e 49 05 36 5a db 9b c5 f4 .... .;.I.6Z.... 0010 31 d7 b5 bd 2d 38 dc a8 35 6d c5 4e bb 7f ad 5c 1...-8..5m.N...\ 0020 4e 75 bb 6d df 17 03 01 00 20 3c 9c a5 d5 d6 fa Nu.m..... <..... 0030 01 82 8b 75 68 19 d9 61 84 a1 c0 b1 9c d1 7c 91 ...uh..a......|. 0040 e2 67 92 39 28 29 84 df 19 7b .g.9()...{ No. Time Source Destination Protocol Length Info 21486 249.890247 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=267221 Ack=4885 Win=1002 Len=0 TSval=597720 TSecr=729981 Frame 21486: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 267221, Ack: 4885, Len: 0 No. Time Source Destination Protocol Length Info 21487 249.893442 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=4885 Ack=267221 Win=64456 Len=74 TSval=729981 TSecr=597720 Frame 21487: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4885, Ack: 267221, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 b6 4c 92 88 81 9a 77 75 3a 47 b5 .... .L....wu:G. 0010 4b 4d 71 b6 cb d6 6d 3c 25 18 56 f3 00 77 71 a0 KMq...m<%.V..wq. 0020 5b 52 6e 5e 03 17 03 01 00 20 65 18 6f 5a dd 7f [Rn^..... e.oZ.. 0030 3d 19 21 72 a6 bb aa 9b d2 24 e6 59 63 81 a3 eb =.!r.....$.Yc... 0040 f3 b0 58 b2 9a 3c 75 e4 6a 5b ..X..<u.j[ No. Time Source Destination Protocol Length Info 21488 249.893509 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=267221 Ack=4959 Win=1002 Len=0 TSval=597720 TSecr=729981 Frame 21488: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 267221, Ack: 4959, Len: 0 No. Time Source Destination Protocol Length Info 21489 249.895935 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=4959 Ack=267221 Win=64456 Len=74 TSval=729981 TSecr=597720 Frame 21489: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 4959, Ack: 267221, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 96 fa a4 d4 56 3e 0d 21 da 22 dd .... ....V>.!.". 0010 ea 6d 07 1d d4 2f e5 1f 02 73 5a f4 45 06 76 cf .m.../...sZ.E.v. 0020 1f 5f fa 0d 79 17 03 01 00 20 98 32 2c f4 eb 07 ._..y.... .2,... 0030 ef 9a f6 98 88 f7 53 f6 02 08 8a fe 90 d8 30 0c ......S.......0. 0040 50 6a 25 43 b6 85 0d 6a 30 a7 Pj%C...j0. No. Time Source Destination Protocol Length Info 21490 249.896000 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=267221 Ack=5033 Win=1002 Len=0 TSval=597721 TSecr=729981 Frame 21490: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 267221, Ack: 5033, Len: 0 No. Time Source Destination Protocol Length Info 21491 249.903547 192.168.10.246 65.32.1.65 DNS 84 Standard query PTR 3.184.85.78.in-addr.arpa Frame 21491: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 50210 (50210), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 21492 249.975468 180.243.236.205 192.168.10.207 SMTP 92 C: MAIL FROM: <alexis.fane@xxxxxxxxxxx> Frame 21492: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: ipcd3 (1209), Dst Port: smtp (25), Seq: 18, Ack: 314, Len: 38 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21493 249.975524 192.168.10.207 180.243.236.205 SMTP 102 S: 250 2.1.0 [email protected] OK Frame 21493: 102 bytes on wire (816 bits), 102 bytes captured (816 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: ipcd3 (1209), Seq: 314, Ack: 56, Len: 48 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21494 249.975566 180.243.236.205 192.168.10.207 TCP 60 ipcd3 > smtp [ACK] Seq=56 Ack=362 Win=93078 Len=0 Frame 21494: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: ipcd3 (1209), Dst Port: smtp (25), Seq: 56, Ack: 362, Len: 0 No. Time Source Destination Protocol Length Info 21495 249.993945 192.168.10.142 192.168.10.185 VNC 83 [TCP Previous segment lost] Authentication result Frame 21495: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54144, Ack: 340742, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 21496 249.993979 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21474#1] rfb > xrl [ACK] Seq=340742 Ack=54117 Win=64286 Len=0 SLE=54144 SRE=54173 Frame 21496: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 54117, Len: 0 No. Time Source Destination Protocol Length Info 21497 250.049642 192.168.10.207 206.225.164.186 SMTP 222 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 21497: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17263, Ack: 1244748, Len: 168 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21498 250.049694 192.168.10.207 189.123.220.16 TCP 62 smtp > 49308 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 21498: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49308 (49308), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 21499 250.049724 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1246124 Ack=17431 Win=46678 Len=0 Frame 21499: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1246124, Ack: 17431, Len: 0 No. Time Source Destination Protocol Length Info 21500 250.049756 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=17431 Ack=1244748 Win=0 Len=0 Frame 21500: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17431, Ack: 1244748, Len: 0 No. Time Source Destination Protocol Length Info 21501 250.053507 192.168.10.115 64.74.103.129 TLSv1 91 Application Data Frame 21501: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.115 (192.168.10.115), Dst: 64.74.103.129 (64.74.103.129) Transmission Control Protocol, Src Port: cogsys-lm (3377), Dst Port: https (443), Seq: 297, Ack: 297, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 21502 250.053575 64.74.103.129 192.168.10.115 TCP 60 https > cogsys-lm [ACK] Seq=297 Ack=334 Win=65535 Len=0 Frame 21502: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Internet Protocol Version 4, Src: 64.74.103.129 (64.74.103.129), Dst: 192.168.10.115 (192.168.10.115) Transmission Control Protocol, Src Port: https (443), Dst Port: cogsys-lm (3377), Seq: 297, Ack: 334, Len: 0 No. Time Source Destination Protocol Length Info 21503 250.053959 Watchgua_3c:4c:d8 IntelCor_ed:1a:c9 ARP 60 Who has 192.168.10.115? Tell 192.168.10.1 Frame 21503: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21504 250.053972 IntelCor_ed:1a:c9 Watchgua_3c:4c:d8 ARP 60 192.168.10.115 is at 00:13:20:ed:1a:c9 Frame 21504: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21505 250.065277 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1437604096, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 21505: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21506 250.065300 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1437604096, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 21506: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21507 250.065312 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1437604096, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 21507: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21508 250.065324 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1437604096, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 21508: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21509 250.083379 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3306684672, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 21509: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21510 250.083398 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3306684672, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 21510: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21511 250.083410 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3306684672, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 21511: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21512 250.083422 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3306684672, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 21512: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21513 250.085154 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 21513: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54173, Ack: 340742, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 21514 250.085188 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21474#2] rfb > xrl [ACK] Seq=340742 Ack=54117 Win=64286 Len=0 SLE=54144 SRE=54202 Frame 21514: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 54117, Len: 0 No. Time Source Destination Protocol Length Info 21515 250.101622 64.74.103.129 192.168.10.115 TLSv1 91 Application Data Frame 21515: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9) Internet Protocol Version 4, Src: 64.74.103.129 (64.74.103.129), Dst: 192.168.10.115 (192.168.10.115) Transmission Control Protocol, Src Port: https (443), Dst Port: cogsys-lm (3377), Seq: 297, Ack: 334, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 21516 250.104578 192.168.10.142 192.168.10.185 VNC 83 Authentication result Frame 21516: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54202, Ack: 340742, Len: 29 Virtual Network Computing No. Time Source Destination Protocol Length Info 21517 250.104613 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21474#3] rfb > xrl [ACK] Seq=340742 Ack=54117 Win=64286 Len=0 SLE=54144 SRE=54231 Frame 21517: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 54117, Len: 0 No. Time Source Destination Protocol Length Info 21518 250.111360 192.168.10.142 192.168.10.185 VNC 81 [TCP Fast Retransmission] Authentication result Frame 21518: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54117, Ack: 340742, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21519 250.111395 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340742 Ack=54231 Win=65535 Len=0 Frame 21519: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 54231, Len: 0 No. Time Source Destination Protocol Length Info 21520 250.120061 65.32.1.65 192.168.10.246 DNS 121 Standard query response PTR a3.sub184.net78.udm.net Frame 21520: 121 bytes on wire (968 bits), 121 bytes captured (968 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 50210 (50210) Domain Name System (response) No. Time Source Destination Protocol Length Info 21521 250.221487 192.168.10.207 188.161.220.86 TCP 62 smtp > 45187 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 21521: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45187 (45187), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 21522 250.224961 192.168.10.185 192.168.10.142 VNC 120 Authentication result Frame 21522: 120 bytes on wire (960 bits), 120 bytes captured (960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340742, Ack: 54231, Len: 66 Virtual Network Computing No. Time Source Destination Protocol Length Info 21523 250.240831 192.168.10.115 64.74.103.129 TCP 60 cogsys-lm > https [ACK] Seq=334 Ack=334 Win=65276 Len=0 Frame 21523: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.115 (192.168.10.115), Dst: 64.74.103.129 (64.74.103.129) Transmission Control Protocol, Src Port: cogsys-lm (3377), Dst Port: https (443), Seq: 334, Ack: 334, Len: 0 No. Time Source Destination Protocol Length Info 21524 250.242943 192.168.10.246 65.32.1.65 DNS 87 Standard query PTR 187.146.98.117.in-addr.arpa Frame 21524: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 63253 (63253), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 21525 250.461253 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21525: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54231, Ack: 340808, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21526 250.461289 192.168.10.185 192.168.10.142 VNC 167 Authentication result Frame 21526: 167 bytes on wire (1336 bits), 167 bytes captured (1336 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340808, Ack: 54258, Len: 113 Virtual Network Computing No. Time Source Destination Protocol Length Info 21527 250.473563 65.32.1.65 192.168.10.246 DNS 176 Standard query response, No such name Frame 21527: 176 bytes on wire (1408 bits), 176 bytes captured (1408 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 63253 (63253) Domain Name System (response) No. Time Source Destination Protocol Length Info 21528 250.474207 192.168.10.203 117.98.146.187 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 21528: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 117.98.146.187 (117.98.146.187) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 21529 250.480433 192.168.10.221 192.168.10.1 ICMP 74 Echo (ping) request id=0x0200, seq=42772/5287, ttl=128 Frame 21529: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 192.168.10.1 (192.168.10.1) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 21530 250.480491 192.168.10.1 192.168.10.221 ICMP 74 Echo (ping) reply id=0x0200, seq=42772/5287, ttl=64 Frame 21530: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.221 (192.168.10.221) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 21531 250.485068 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 21531: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54258, Ack: 340921, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 21532 250.499255 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21532: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54290, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21533 250.499290 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340921 Ack=54317 Win=65449 Len=0 Frame 21533: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340921, Ack: 54317, Len: 0 No. Time Source Destination Protocol Length Info 21534 250.534425 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=17431 Ack=1244748 Win=47941 Len=0 Frame 21534: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17431, Ack: 1244748, Len: 0 No. Time Source Destination Protocol Length Info 21535 250.534459 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 21534#1] smtp > 23308 [ACK] Seq=17431 Ack=1244748 Win=47941 Len=0 Frame 21535: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17431, Ack: 1244748, Len: 0 No. Time Source Destination Protocol Length Info 21536 250.534495 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21536: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1246124, Ack: 17431, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21537 250.534525 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21537: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1247504, Ack: 17431, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21538 250.534554 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21538: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1248884, Ack: 17431, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21539 250.534584 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21539: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1250264, Ack: 17431, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21540 250.534613 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21540: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1251644, Ack: 17431, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21541 250.534645 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21541: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1253024, Ack: 17431, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21542 250.534675 206.225.164.186 192.168.10.207 SMTP 1238 C: DATA fragment, 1184 bytes Frame 21542: 1238 bytes on wire (9904 bits), 1238 bytes captured (9904 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1254404, Ack: 17431, Len: 1184 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21543 250.534704 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 21534#2] smtp > 23308 [ACK] Seq=17431 Ack=1244748 Win=47941 Len=0 Frame 21543: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17431, Ack: 1244748, Len: 0 No. Time Source Destination Protocol Length Info 21544 250.534732 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21544: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1255588, Ack: 17431, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21545 250.534761 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21545: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1256968, Ack: 17431, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21546 250.534791 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 21546: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17431, Ack: 1244748, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21547 250.534829 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21547: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1258348, Ack: 17431, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21548 250.534865 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21548: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1259728, Ack: 17431, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21549 250.534894 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1261108 Ack=17473 Win=46657 Len=0 Frame 21549: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1261108, Ack: 17473, Len: 0 No. Time Source Destination Protocol Length Info 21550 250.534922 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 21546#1] smtp > 23308 [ACK] Seq=17473 Ack=1244748 Win=47941 Len=0 Frame 21550: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17473, Ack: 1244748, Len: 0 No. Time Source Destination Protocol Length Info 21551 250.534949 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 21546#2] smtp > 23308 [ACK] Seq=17473 Ack=1244748 Win=47941 Len=0 Frame 21551: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17473, Ack: 1244748, Len: 0 No. Time Source Destination Protocol Length Info 21552 250.534977 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 21546#3] smtp > 23308 [ACK] Seq=17473 Ack=1244748 Win=47941 Len=0 Frame 21552: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17473, Ack: 1244748, Len: 0 No. Time Source Destination Protocol Length Info 21553 250.535004 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 21546#4] smtp > 23308 [ACK] Seq=17473 Ack=1244748 Win=47941 Len=0 Frame 21553: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17473, Ack: 1244748, Len: 0 No. Time Source Destination Protocol Length Info 21554 250.535032 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 21546#5] smtp > 23308 [ACK] Seq=17473 Ack=1244748 Win=47941 Len=0 Frame 21554: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17473, Ack: 1244748, Len: 0 No. Time Source Destination Protocol Length Info 21555 250.535061 206.225.164.186 192.168.10.207 SMTP 1430 [TCP Fast Retransmission] C: DATA fragment, 1376 bytes Frame 21555: 1430 bytes on wire (11440 bits), 1430 bytes captured (11440 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1244748, Ack: 17473, Len: 1376 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21556 250.535090 206.225.164.186 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 21556: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1246124, Ack: 17473, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21557 250.535118 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 21546#6] smtp > 23308 [ACK] Seq=17473 Ack=1244748 Win=47941 Len=0 Frame 21557: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17473, Ack: 1244748, Len: 0 No. Time Source Destination Protocol Length Info 21558 250.535146 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 21546#7] smtp > 23308 [ACK] Seq=17473 Ack=1244748 Win=47941 Len=0 Frame 21558: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17473, Ack: 1244748, Len: 0 No. Time Source Destination Protocol Length Info 21559 250.535173 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 21546#8] smtp > 23308 [ACK] Seq=17473 Ack=1244748 Win=47941 Len=0 Frame 21559: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17473, Ack: 1244748, Len: 0 No. Time Source Destination Protocol Length Info 21560 250.535201 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 21546#9] smtp > 23308 [ACK] Seq=17473 Ack=1244748 Win=47941 Len=0 Frame 21560: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17473, Ack: 1244748, Len: 0 No. Time Source Destination Protocol Length Info 21561 250.535228 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 21546#10] smtp > 23308 [ACK] Seq=17473 Ack=1244748 Win=47941 Len=0 Frame 21561: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17473, Ack: 1244748, Len: 0 No. Time Source Destination Protocol Length Info 21562 250.535256 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21562: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1261108, Ack: 17473, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21563 250.535286 206.225.164.186 192.168.10.207 SMTP 559 C: DATA fragment, 505 bytes Frame 21563: 559 bytes on wire (4472 bits), 559 bytes captured (4472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1262488, Ack: 17473, Len: 505 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21564 250.535314 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21564: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1262993, Ack: 17473, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21565 250.535343 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21565: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1264373, Ack: 17473, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21566 250.535371 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=17473 Ack=1261108 Win=31581 Len=0 Frame 21566: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17473, Ack: 1261108, Len: 0 No. Time Source Destination Protocol Length Info 21567 250.535408 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21567: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1265753, Ack: 17473, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21568 250.535436 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=17473 Ack=1265753 Win=26936 Len=0 Frame 21568: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17473, Ack: 1265753, Len: 0 No. Time Source Destination Protocol Length Info 21569 250.535464 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21569: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1267133, Ack: 17473, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21570 250.535494 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21570: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1268513, Ack: 17473, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21571 250.535523 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21571: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1269893, Ack: 17473, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21572 250.535553 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21572: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1271273, Ack: 17473, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21573 250.535582 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21573: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1272653, Ack: 17473, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21574 250.535610 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=17473 Ack=1268513 Win=24176 Len=0 Frame 21574: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17473, Ack: 1268513, Len: 0 No. Time Source Destination Protocol Length Info 21575 250.535638 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=17473 Ack=1271273 Win=21416 Len=0 Frame 21575: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17473, Ack: 1271273, Len: 0 No. Time Source Destination Protocol Length Info 21576 250.535667 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21576: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1274033, Ack: 17473, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21577 250.535696 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21577: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1275413, Ack: 17473, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21578 250.535725 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=17473 Ack=1274033 Win=18656 Len=0 Frame 21578: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17473, Ack: 1274033, Len: 0 No. Time Source Destination Protocol Length Info 21579 250.535753 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21579: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1276793, Ack: 17473, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21580 250.535783 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21580: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1278173, Ack: 17473, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21581 250.535821 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21581: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1279553, Ack: 17473, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21582 250.535849 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=17473 Ack=1276793 Win=15896 Len=0 Frame 21582: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17473, Ack: 1276793, Len: 0 No. Time Source Destination Protocol Length Info 21583 250.535877 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21583: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1280933, Ack: 17473, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21584 250.535906 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=17473 Ack=1279553 Win=13136 Len=0 Frame 21584: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17473, Ack: 1279553, Len: 0 No. Time Source Destination Protocol Length Info 21585 250.535934 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21585: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1282313, Ack: 17473, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21586 250.535963 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21586: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1283693, Ack: 17473, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21587 250.535993 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21587: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1285073, Ack: 17473, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21588 250.536021 206.225.164.186 192.168.10.207 SMTP 770 C: DATA fragment, 716 bytes Frame 21588: 770 bytes on wire (6160 bits), 770 bytes captured (6160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1286453, Ack: 17473, Len: 716 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21589 250.536049 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=17473 Ack=1282313 Win=10376 Len=0 Frame 21589: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17473, Ack: 1282313, Len: 0 No. Time Source Destination Protocol Length Info 21590 250.536082 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21590: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1287169, Ack: 17473, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21591 250.536111 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=17473 Ack=1285073 Win=7616 Len=0 Frame 21591: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17473, Ack: 1285073, Len: 0 No. Time Source Destination Protocol Length Info 21592 250.536139 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21592: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1288549, Ack: 17473, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21593 250.536169 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21593: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1289929, Ack: 17473, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21594 250.536198 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=17473 Ack=1288549 Win=4140 Len=0 Frame 21594: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17473, Ack: 1288549, Len: 0 No. Time Source Destination Protocol Length Info 21595 250.536226 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 21595: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1291309, Ack: 17473, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21596 250.536255 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=17473 Ack=1291309 Win=1380 Len=0 Frame 21596: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17473, Ack: 1291309, Len: 0 No. Time Source Destination Protocol Length Info 21597 250.538892 188.161.220.86 192.168.10.207 TCP 60 45187 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 21597: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45187 (45187), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 21598 250.539028 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:48:28 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45187 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 21598: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:28 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45187 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 21599 250.539061 192.168.10.207 188.161.220.86 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:48:03 -0400 Frame 21599: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45187 (45187), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21600 250.539100 188.161.220.86 192.168.10.207 TCP 60 45187 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 21600: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45187 (45187), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 21601 250.546071 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 4 Port 45 TTL = 120 Frame 21601: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 21602 250.653214 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=17473 Ack=1292689 Win=0 Len=0 Frame 21602: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17473, Ack: 1292689, Len: 0 No. Time Source Destination Protocol Length Info 21603 250.875540 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21603: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54317, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21604 250.883163 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21604: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54344, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21605 250.883214 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340921 Ack=54371 Win=65395 Len=0 Frame 21605: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340921, Ack: 54371, Len: 0 No. Time Source Destination Protocol Length Info 21606 250.894100 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21606: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54371, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21607 250.901209 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21607: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54398, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21608 250.901248 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340921 Ack=54425 Win=65341 Len=0 Frame 21608: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340921, Ack: 54425, Len: 0 No. Time Source Destination Protocol Length Info 21609 250.909077 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21609: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54425, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21610 250.915483 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21610: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54452, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21611 250.915513 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340921 Ack=54479 Win=65287 Len=0 Frame 21611: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340921, Ack: 54479, Len: 0 No. Time Source Destination Protocol Length Info 21612 250.928451 188.161.220.86 192.168.10.207 SMTP 69 C: EHLO rnbs.com Frame 21612: 69 bytes on wire (552 bits), 69 bytes captured (552 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45187 (45187), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 15 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21613 250.928766 192.168.10.207 188.161.220.86 SMTP 245 S: 250-mail.mydomain.com Hello [188.161.220.86] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 21613: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45187 (45187), Seq: 122, Ack: 16, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21614 250.928813 188.161.220.86 192.168.10.207 TCP 60 45187 > smtp [ACK] Seq=16 Ack=313 Win=93128 Len=0 Frame 21614: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45187 (45187), Dst Port: smtp (25), Seq: 16, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 21615 250.928860 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21615: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54479, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21616 250.928968 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:28 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45187 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 21616: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:28 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45187 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 21617 250.929135 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:28 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45187 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 21617: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:28 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45187 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 21618 250.929210 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:48:28 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45187 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 21618: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:28 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45187 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 21619 250.929512 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:48:28 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45187 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 21619: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:28 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45187 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 21620 250.929578 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:28 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45187 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 21620: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:28 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45187 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 21621 250.929644 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:28 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45187 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 21621: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:28 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45187 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 21622 250.933577 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21622: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54506, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21623 250.933612 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340921 Ack=54533 Win=65233 Len=0 Frame 21623: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340921, Ack: 54533, Len: 0 No. Time Source Destination Protocol Length Info 21624 250.947590 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21624: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54533, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21625 250.952680 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21625: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54560, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21626 250.952709 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340921 Ack=54587 Win=65179 Len=0 Frame 21626: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340921, Ack: 54587, Len: 0 No. Time Source Destination Protocol Length Info 21627 250.957113 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21627: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54587, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21628 250.963082 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21628: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54614, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21629 250.963112 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340921 Ack=54641 Win=65125 Len=0 Frame 21629: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340921, Ack: 54641, Len: 0 No. Time Source Destination Protocol Length Info 21630 250.971288 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21630: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54641, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21631 250.981430 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21631: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54668, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21632 250.981461 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340921 Ack=54695 Win=65071 Len=0 Frame 21632: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340921, Ack: 54695, Len: 0 No. Time Source Destination Protocol Length Info 21633 250.991315 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21633: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54695, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21634 250.995048 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21634: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54722, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21635 250.995077 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340921 Ack=54749 Win=65017 Len=0 Frame 21635: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340921, Ack: 54749, Len: 0 No. Time Source Destination Protocol Length Info 21636 251.006521 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 21636: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21637 251.006548 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130 Frame 21637: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21638 251.009267 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21638: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54749, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21639 251.013304 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21639: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54776, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21640 251.013345 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340921 Ack=54803 Win=64963 Len=0 Frame 21640: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340921, Ack: 54803, Len: 0 No. Time Source Destination Protocol Length Info 21641 251.025264 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21641: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54803, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21642 251.029163 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21642: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54830, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21643 251.029194 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340921 Ack=54857 Win=64909 Len=0 Frame 21643: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340921, Ack: 54857, Len: 0 No. Time Source Destination Protocol Length Info 21644 251.037120 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21644: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54857, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21645 251.045638 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21645: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54884, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21646 251.045668 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340921 Ack=54911 Win=64855 Len=0 Frame 21646: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340921, Ack: 54911, Len: 0 No. Time Source Destination Protocol Length Info 21647 251.057460 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21647: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54911, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21648 251.063163 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21648: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54938, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21649 251.063198 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340921 Ack=54965 Win=64801 Len=0 Frame 21649: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340921, Ack: 54965, Len: 0 No. Time Source Destination Protocol Length Info 21650 251.081052 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1454381312, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 21650: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21651 251.081075 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1454381312, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 21651: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21652 251.081088 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1454381312, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 21652: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21653 251.081100 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1454381312, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 21653: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21654 251.098853 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3323461888, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 21654: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21655 251.098876 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3323461888, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 21655: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21656 251.098889 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3323461888, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 21656: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21657 251.098901 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3323461888, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 21657: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21658 251.135528 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.201? Tell 192.168.10.32 Frame 21658: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21659 251.135559 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.201? Tell 192.168.10.32 Frame 21659: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21660 251.186415 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 21660: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17473, Ack: 1292689, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21661 251.186453 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1292689 Ack=17515 Win=46636 Len=0 Frame 21661: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1292689, Ack: 17515, Len: 0 No. Time Source Destination Protocol Length Info 21662 251.194357 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 21662: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 21663 251.270390 192.168.10.1 192.168.10.245 Syslog 313 LOCAL1.INFO: Oct 3 19:48:29 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1209 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eytransporter@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 21663: 313 bytes on wire (2504 bits), 313 bytes captured (2504 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:29 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1209 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 21664 251.315813 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 21664: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 21665 251.320028 188.161.220.86 192.168.10.207 SMTP 97 C: MAIL FROM: <kaylee.macduff@xxxxxxxxxxxxx> Frame 21665: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45187 (45187), Dst Port: smtp (25), Seq: 16, Ack: 313, Len: 43 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21666 251.320233 192.168.10.207 188.161.220.86 SMTP 107 S: 250 2.1.0 [email protected] OK Frame 21666: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45187 (45187), Seq: 313, Ack: 59, Len: 53 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21667 251.320275 188.161.220.86 192.168.10.207 TCP 60 45187 > smtp [ACK] Seq=59 Ack=366 Win=93074 Len=0 Frame 21667: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45187 (45187), Dst Port: smtp (25), Seq: 59, Ack: 366, Len: 0 No. Time Source Destination Protocol Length Info 21668 251.350110 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 21668: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 21669 251.350140 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 21669: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 21670 251.444123 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 21670: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 21671 251.480540 192.168.10.221 192.168.10.1 ICMP 74 Echo (ping) request id=0x0200, seq=43028/5288, ttl=128 Frame 21671: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 192.168.10.1 (192.168.10.1) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 21672 251.480612 192.168.10.1 192.168.10.221 ICMP 74 Echo (ping) reply id=0x0200, seq=43028/5288, ttl=64 Frame 21672: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.221 (192.168.10.221) Internet Control Message Protocol No. Time Source Destination Protocol Length Info 21673 251.488337 192.168.10.217 4.2.2.2 DNS 77 Standard query TXT _nfsv4idmapdomain Frame 21673: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.217 (192.168.10.217), Dst: 4.2.2.2 (4.2.2.2) User Datagram Protocol, Src Port: 51177 (51177), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 21674 251.506695 4.2.2.2 192.168.10.217 DNS 152 Standard query response, No such name Frame 21674: 152 bytes on wire (1216 bits), 152 bytes captured (1216 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Oracle_86:77:66 (00:14:4f:86:77:66) Internet Protocol Version 4, Src: 4.2.2.2 (4.2.2.2), Dst: 192.168.10.217 (192.168.10.217) User Datagram Protocol, Src Port: domain (53), Dst Port: 51177 (51177) Domain Name System (response) No. Time Source Destination Protocol Length Info 21675 251.510034 Watchgua_3c:4c:d8 Oracle_86:77:66 ARP 60 Who has 192.168.10.217? Tell 192.168.10.1 Frame 21675: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Oracle_86:77:66 (00:14:4f:86:77:66) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21676 251.510050 Oracle_86:77:66 Watchgua_3c:4c:d8 ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 21676: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21677 251.566463 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 21677: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 21678 251.578726 180.243.236.205 192.168.10.207 SMTP 60 C: QUIT Frame 21678: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: ipcd3 (1209), Dst Port: smtp (25), Seq: 56, Ack: 362, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21679 251.578773 192.168.10.207 180.243.236.205 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 21679: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: ipcd3 (1209), Seq: 362, Ack: 62, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21680 251.578814 180.243.236.205 192.168.10.207 TCP 60 ipcd3 > smtp [ACK] Seq=62 Ack=431 Win=93010 Len=0 Frame 21680: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: ipcd3 (1209), Dst Port: smtp (25), Seq: 62, Ack: 431, Len: 0 No. Time Source Destination Protocol Length Info 21681 251.578843 192.168.10.207 180.243.236.205 TCP 60 smtp > ipcd3 [FIN, ACK] Seq=431 Ack=62 Win=65474 Len=0 Frame 21681: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: ipcd3 (1209), Seq: 431, Ack: 62, Len: 0 No. Time Source Destination Protocol Length Info 21682 251.578878 180.243.236.205 192.168.10.207 TCP 60 ipcd3 > smtp [ACK] Seq=62 Ack=432 Win=93010 Len=0 Frame 21682: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: ipcd3 (1209), Dst Port: smtp (25), Seq: 62, Ack: 432, Len: 0 No. Time Source Destination Protocol Length Info 21683 251.664112 192.168.10.1 192.168.10.245 Syslog 314 LOCAL1.INFO: Oct 3 19:48:29 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45187 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eywelectronics@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 21683: 314 bytes on wire (2512 bits), 314 bytes captured (2512 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:29 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45187 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 21684 251.751675 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21684: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54965, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21685 251.758375 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21685: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 54992, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21686 251.758408 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=340921 Ack=55019 Win=64747 Len=0 Frame 21686: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340921, Ack: 55019, Len: 0 No. Time Source Destination Protocol Length Info 21687 251.811310 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 21687: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 340921, Ack: 55019, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 21688 251.811347 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 21688: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 342181, Ack: 55019, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 21689 251.811377 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 21689: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 343441, Ack: 55019, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 21690 251.811410 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 21690: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 344701, Ack: 55019, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 21691 251.811440 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 21691: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 345017, Ack: 55019, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 21692 251.811469 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 21692: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 346277, Ack: 55019, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 21693 251.811497 192.168.10.185 192.168.10.142 VNC 60 Authentication result[Malformed Packet] Frame 21693: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 347537, Ack: 55019, Len: 2 Virtual Network Computing [Malformed Packet: VNC] No. Time Source Destination Protocol Length Info 21694 251.812397 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 21694: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 347539, Ack: 55019, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 21695 251.812433 192.168.10.185 192.168.10.142 VNC 645 Authentication result Frame 21695: 645 bytes on wire (5160 bits), 645 bytes captured (5160 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 348799, Ack: 55019, Len: 591 Virtual Network Computing No. Time Source Destination Protocol Length Info 21696 251.823120 189.123.44.91 192.168.10.207 SMTP 95 C: MAIL FROM: <arhesitate@xxxxxxxxxxxx> Frame 21696: 95 bytes on wire (760 bits), 95 bytes captured (760 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.44.91 (189.123.44.91), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: asap-tcp (3863), Dst Port: smtp (25), Seq: 30, Ack: 170, Len: 41 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21697 251.823351 192.168.10.207 189.123.44.91 SMTP 105 S: 250 2.1.0 [email protected] OK Frame 21697: 105 bytes on wire (840 bits), 105 bytes captured (840 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.44.91 (189.123.44.91) Transmission Control Protocol, Src Port: smtp (25), Dst Port: asap-tcp (3863), Seq: 170, Ack: 71, Len: 51 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21698 251.823399 189.123.44.91 192.168.10.207 TCP 60 asap-tcp > smtp [ACK] Seq=71 Ack=221 Win=93220 Len=0 Frame 21698: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.44.91 (189.123.44.91), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: asap-tcp (3863), Dst Port: smtp (25), Seq: 71, Ack: 221, Len: 0 No. Time Source Destination Protocol Length Info 21699 251.829269 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21699: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55019, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21700 251.833609 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21700: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55046, Ack: 340921, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21701 251.833652 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=349390 Ack=55073 Win=64693 Len=0 Frame 21701: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 349390, Ack: 55073, Len: 0 No. Time Source Destination Protocol Length Info 21702 251.837912 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=55073 Ack=343441 Win=64240 Len=0 Frame 21702: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55073, Ack: 343441, Len: 0 No. Time Source Destination Protocol Length Info 21703 251.841368 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=55073 Ack=344701 Win=64240 Len=0 Frame 21703: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55073, Ack: 344701, Len: 0 No. Time Source Destination Protocol Length Info 21704 251.841414 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=55073 Ack=346277 Win=64240 Len=0 Frame 21704: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55073, Ack: 346277, Len: 0 No. Time Source Destination Protocol Length Info 21705 251.841462 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=55073 Ack=347539 Win=64240 Len=0 Frame 21705: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55073, Ack: 347539, Len: 0 No. Time Source Destination Protocol Length Info 21706 251.845855 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=55073 Ack=349390 Win=64240 Len=0 Frame 21706: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55073, Ack: 349390, Len: 0 No. Time Source Destination Protocol Length Info 21707 251.852333 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 21707: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17515, Ack: 1292689, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21708 251.852365 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1292689 Ack=17557 Win=46615 Len=0 Frame 21708: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1292689, Ack: 17557, Len: 0 No. Time Source Destination Protocol Length Info 21709 251.858872 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 21709: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 21710 251.858903 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 21710: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 21711 251.861763 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 21711: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55073, Ack: 349390, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 21712 251.881779 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-02.geo.kaspersky.com Frame 21712: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 64857 (64857), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 21713 251.881968 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-02.geo.kaspersky.com Frame 21713: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 64857 (64857), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 21714 251.890131 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 21714: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 349390, Ack: 55105, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 21715 251.890166 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 21715: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 350650, Ack: 55105, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 21716 251.890196 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 21716: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 351910, Ack: 55105, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 21717 251.890225 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 21717: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 353170, Ack: 55105, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 21718 251.890253 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 21718: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 353486, Ack: 55105, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 21719 251.890293 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 21719: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 354746, Ack: 55105, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 21720 251.890324 192.168.10.185 192.168.10.142 VNC 60 Authentication result[Malformed Packet] Frame 21720: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 356006, Ack: 55105, Len: 2 Virtual Network Computing [Malformed Packet: VNC] No. Time Source Destination Protocol Length Info 21721 251.915586 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=55105 Ack=351910 Win=64240 Len=0 Frame 21721: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55105, Ack: 351910, Len: 0 No. Time Source Destination Protocol Length Info 21722 251.915621 192.168.10.185 192.168.10.142 VNC 98 Authentication result Frame 21722: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 356008, Ack: 55105, Len: 44 Virtual Network Computing No. Time Source Destination Protocol Length Info 21723 251.921731 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=55105 Ack=353170 Win=64240 Len=0 Frame 21723: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55105, Ack: 353170, Len: 0 No. Time Source Destination Protocol Length Info 21724 251.921772 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=55105 Ack=354746 Win=64240 Len=0 Frame 21724: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55105, Ack: 354746, Len: 0 No. Time Source Destination Protocol Length Info 21725 251.922654 180.243.236.205 192.168.10.207 TCP 60 ipcd3 > smtp [RST, ACK] Seq=62 Ack=432 Win=93010 Len=0 Frame 21725: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: ipcd3 (1209), Dst Port: smtp (25), Seq: 62, Ack: 432, Len: 0 No. Time Source Destination Protocol Length Info 21726 251.922731 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:48:29 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1209 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 21726: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:29 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1209 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 21727 251.924248 180.243.236.205 192.168.10.207 TCP 62 search-agent > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 21727: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: search-agent (1234), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 21728 251.924322 192.168.10.207 180.243.236.205 TCP 62 smtp > search-agent [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 21728: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: search-agent (1234), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 21729 251.925384 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=55105 Ack=356008 Win=64240 Len=0 Frame 21729: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55105, Ack: 356008, Len: 0 No. Time Source Destination Protocol Length Info 21730 251.939743 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 21730: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55105, Ack: 356052, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 21731 251.965270 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21731: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55137, Ack: 356052, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21732 251.965306 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=356052 Ack=55164 Win=64602 Len=0 Frame 21732: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 356052, Ack: 55164, Len: 0 No. Time Source Destination Protocol Length Info 21733 251.971546 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21733: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55164, Ack: 356052, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21734 251.974103 192.168.10.203 117.98.146.187 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 21734: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 117.98.146.187 (117.98.146.187) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 21735 251.981184 188.161.220.86 192.168.10.207 SMTP 60 C: QUIT Frame 21735: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45187 (45187), Dst Port: smtp (25), Seq: 59, Ack: 366, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21736 251.981220 192.168.10.207 188.161.220.86 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 21736: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45187 (45187), Seq: 366, Ack: 65, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21737 251.981261 188.161.220.86 192.168.10.207 TCP 60 45187 > smtp [ACK] Seq=65 Ack=435 Win=93006 Len=0 Frame 21737: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45187 (45187), Dst Port: smtp (25), Seq: 65, Ack: 435, Len: 0 No. Time Source Destination Protocol Length Info 21738 251.981290 192.168.10.207 188.161.220.86 TCP 60 smtp > 45187 [FIN, ACK] Seq=435 Ack=65 Win=65471 Len=0 Frame 21738: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45187 (45187), Seq: 435, Ack: 65, Len: 0 No. Time Source Destination Protocol Length Info 21739 251.981328 188.161.220.86 192.168.10.207 TCP 60 45187 > smtp [ACK] Seq=65 Ack=436 Win=93006 Len=0 Frame 21739: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45187 (45187), Dst Port: smtp (25), Seq: 65, Ack: 436, Len: 0 No. Time Source Destination Protocol Length Info 21740 252.007051 192.168.10.1 192.168.10.245 Syslog 308 LOCAL1.INFO: Oct 3 19:48:30 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 189.123.44.91 7x.x.x.3 3863 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="arhesitate@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 21740: 308 bytes on wire (2464 bits), 308 bytes captured (2464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:30 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 189.123.44.91 7x.x.x.3 3863 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" No. Time Source Destination Protocol Length Info 21741 252.029493 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 21741: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 356052, Ack: 55191, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 21742 252.029528 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 21742: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 357312, Ack: 55191, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 21743 252.029558 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 21743: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 358572, Ack: 55191, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 21744 252.029586 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 21744: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 359832, Ack: 55191, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 21745 252.053520 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=55191 Ack=358572 Win=64240 Len=0 Frame 21745: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55191, Ack: 358572, Len: 0 No. Time Source Destination Protocol Length Info 21746 252.053553 192.168.10.185 192.168.10.142 VNC 174 Authentication result Frame 21746: 174 bytes on wire (1392 bits), 174 bytes captured (1392 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 360148, Ack: 55191, Len: 120 Virtual Network Computing No. Time Source Destination Protocol Length Info 21747 252.068761 192.168.10.32 192.168.20.3 UDP 774 Source port: 38302 Destination port: apc-3052 Frame 21747: 774 bytes on wire (6192 bits), 774 bytes captured (6192 bits) Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (732 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 31 3a 30 30 3a 31 33 0a 53 52 3d 30 31 31 =21:00:13.SR=011 0060 35 45 37 0a 53 55 3d 34 39 42 41 0a 52 44 3d 41 5E7.SU=49BA.RD=A 0070 37 30 39 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 709.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 0a 34 8.7E=00.3E=002.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 37 2e 30 C=207.3.50=037.0 00c0 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 31 2f .43=028.5.78=11/ 00d0 31 39 2f 30 37 0a 36 41 3d 30 30 35 31 3a 0a 34 19/07.6A=0051:.4 00e0 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 4e 0a 7=S.63=UPS_IDEN. 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 37 34 0.38=00.6E=IS074 0120 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 31 2f 6005481 .6D=11/ 0130 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 2d 55 19/07.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 58 4c 20 20 PS RT 10000 XL 0150 20 0a 34 36 3d 35 39 2e 39 38 0a 34 44 3d 32 30 .46=59.98.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 35 3d 7.3.4E=205.9.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 3d 31 00.42=217.0.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 30 2e 30 0a 32 46 3d 31 34 2e 39 38 C=030.0.2F=14.98 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 35 39 2e 39 38 3b 32 30 37 2e 33 0.09=59.98;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 0a 49 9=0.I0=2.I1=00.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a 49 38 5=0.I6=0.I7=0.I8 0250 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 0a 49 =Int Contact 1.I 0260 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e 74 61 9=0.IA=Int Conta 0270 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 6e 74 ct 2.IB=0.IC=Int 0280 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 3d 34 Relay.ID=0.SH=4 0290 36 41 38 39 32 46 46 32 41 43 36 42 37 41 43 42 6A892FF2AC6B7ACB 02a0 31 34 34 35 42 31 31 34 38 31 44 38 39 30 34 0a 1445B11481D8904. 02b0 4d 44 3d 61 61 39 37 65 35 35 62 31 64 37 38 66 MD=aa97e55b1d78f 02c0 31 63 33 39 63 34 39 64 63 36 36 65 37 65 31 31 1c39c49dc66e7e11 02d0 62 32 38 0a 3c 2f 42 4f 44 59 3e 0a b28.</BODY>. No. Time Source Destination Protocol Length Info 21748 252.068853 192.168.10.32 192.168.20.3 UDP 774 Source port: 38302 Destination port: apc-3052 Frame 21748: 774 bytes on wire (6192 bits), 774 bytes captured (6192 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 38302 (38302), Dst Port: apc-3052 (3052) Data (732 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00 0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 32 31 3a 30 30 3a 31 33 0a 53 52 3d 30 31 31 =21:00:13.SR=011 0060 35 45 37 0a 53 55 3d 34 39 42 41 0a 52 44 3d 41 5E7.SU=49BA.RD=A 0070 37 30 39 0a 54 41 3d 31 39 32 2e 31 36 38 2e 32 709.TA=192.168.2 0080 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a 53 4d 0.3.UC=1.SD=0.SM 0090 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 3d 30 =2.4F=208.2.51=0 00a0 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 0a 34 8.7E=00.3E=002.4 00b0 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 37 2e 30 C=207.3.50=037.0 00c0 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 31 2f .43=028.5.78=11/ 00d0 31 39 2f 30 37 0a 36 41 3d 30 30 35 31 3a 0a 34 19/07.6A=0051:.4 00e0 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 4e 0a 7=S.63=UPS_IDEN. 00f0 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f 0a 35 66=100.0.58=NO.5 0100 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 3d 30 6=5YW.39=FF.27=0 0110 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 37 34 0.38=00.6E=IS074 0120 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 31 2f 6005481 .6D=11/ 0130 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 2d 55 19/07.01=Smart-U 0140 50 53 20 52 54 20 31 30 30 30 30 20 58 4c 20 20 PS RT 10000 XL 0150 20 0a 34 36 3d 35 39 2e 39 38 0a 34 44 3d 32 30 .46=59.98.4D=20 0160 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 35 3d 7.3.4E=205.9.45= 0170 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 31 34 336.75=229.6C=14 0180 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 0a 37 6.65=00.6F=208.7 0190 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 3d 30 1=02.70=020.72=0 01a0 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 3d 31 00.42=217.0.67=1 01b0 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 0a 35 92.62=476.17.W.5 01c0 43 3d 30 33 30 2e 30 0a 32 46 3d 31 34 2e 39 38 C=030.0.2F=14.98 01d0 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 30 30 .16=A.05=0000000 01e0 30 0a 30 39 3d 35 39 2e 39 38 3b 32 30 37 2e 33 0.09=59.98;207.3 01f0 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 4f 20 .6B=0.81E2=AUTO 0200 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d 30 0a .MC=1.E0=0.E1=0. 0210 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0a 45 E2=0.E3=0.E8=0.E 0220 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 0a 49 9=0.I0=2.I1=00.I 0230 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 0a 49 2=01.I3=0.I4=0.I 0240 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a 49 38 5=0.I6=0.I7=0.I8 0250 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 0a 49 =Int Contact 1.I 0260 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e 74 61 9=0.IA=Int Conta 0270 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 6e 74 ct 2.IB=0.IC=Int 0280 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 3d 34 Relay.ID=0.SH=4 0290 36 41 38 39 32 46 46 32 41 43 36 42 37 41 43 42 6A892FF2AC6B7ACB 02a0 31 34 34 35 42 31 31 34 38 31 44 38 39 30 34 0a 1445B11481D8904. 02b0 4d 44 3d 61 61 39 37 65 35 35 62 31 64 37 38 66 MD=aa97e55b1d78f 02c0 31 63 33 39 63 34 39 64 63 36 36 65 37 65 31 31 1c39c49dc66e7e11 02d0 62 32 38 0a 3c 2f 42 4f 44 59 3e 0a b28.</BODY>. No. Time Source Destination Protocol Length Info 21749 252.068964 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:19:12 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS3/38302 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 21749: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:19:12 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS3/38302 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 21750 252.070015 Watchgua_3c:4c:d8 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.1 Frame 21750: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21751 252.070027 Cisco_bb:96:6d Watchgua_3c:4c:d8 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 21751: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21752 252.079310 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=55191 Ack=360268 Win=63804 Len=0 Frame 21752: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55191, Ack: 360268, Len: 0 No. Time Source Destination Protocol Length Info 21753 252.096731 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1471158528, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 21753: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21754 252.096753 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1471158528, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 21754: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21755 252.096766 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1471158528, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 21755: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21756 252.096779 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1471158528, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 21756: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21757 252.103348 192.168.10.142 192.168.10.185 VNC 81 [TCP Previous segment lost] Authentication result Frame 21757: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55223, Ack: 360268, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21758 252.103383 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21746#1] rfb > xrl [ACK] Seq=360268 Ack=55191 Win=64575 Len=0 SLE=55223 SRE=55250 Frame 21758: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 360268, Ack: 55191, Len: 0 No. Time Source Destination Protocol Length Info 21759 252.112290 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 21759: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55250, Ack: 360268, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 21760 252.112324 192.168.10.185 192.168.10.142 TCP 66 [TCP Dup ACK 21746#2] rfb > xrl [ACK] Seq=360268 Ack=55191 Win=64575 Len=0 SLE=55223 SRE=55277 Frame 21760: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 360268, Ack: 55191, Len: 0 No. Time Source Destination Protocol Length Info 21761 252.114403 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3340239104, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 21761: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21762 252.114423 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3340239104, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 21762: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21763 252.114435 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3340239104, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 21763: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21764 252.114447 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3340239104, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 21764: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21765 252.136134 192.168.10.142 192.168.10.185 VNC 86 [TCP Retransmission] Authentication result Frame 21765: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55191, Ack: 360268, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 21766 252.136166 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=360268 Ack=55277 Win=64489 Len=0 Frame 21766: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 360268, Ack: 55277, Len: 0 No. Time Source Destination Protocol Length Info 21767 252.193652 192.168.10.31 192.168.20.3 UDP 776 Source port: 50764 Destination port: apc-3052 Frame 21767: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 35 32 3a 33 33 0a 53 52 3d 31 30 37 =19:52:33.SR=107 0060 43 0a 53 55 3d 32 44 38 33 31 38 36 44 0a 52 44 C.SU=2D83186D.RD 0070 3d 39 30 38 33 0a 54 41 3d 31 39 32 2e 31 36 38 =9083.TA=192.168 0080 2e 32 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a .20.3.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 37 2e 30 0a 35 31 SM=2.4F=207.0.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 33 .4C=207.3.50=033 00c0 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 3d 31 .0.43=029.1.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 37 3a 1/19/07.6A=0057: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 3d 31 746005443 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d .46=60.00.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 37 2e 33 0a 34 207.3.4E=207.3.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 32 39 2e 30 0a 32 46 3d 31 33 2e .5C=029.0.2F=13. 01d0 39 30 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 90.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 36 30 2e 30 31 3b 32 30 37 000.09=60.01;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 36 46 37 39 35 45 33 46 33 38 44 38 46 39 34 =6F795E3F38D8F94 02a0 43 38 42 42 33 39 32 43 37 38 46 31 43 32 39 32 C8BB392C78F1C292 02b0 31 0a 4d 44 3d 65 32 38 38 61 61 39 62 30 62 61 1.MD=e288aa9b0ba 02c0 33 62 39 36 62 63 64 36 30 33 39 37 61 61 65 30 3b96bcd60397aae0 02d0 31 30 32 37 33 0a 3c 2f 42 4f 44 59 3e 0a 10273.</BODY>. No. Time Source Destination Protocol Length Info 21768 252.193735 192.168.10.31 192.168.20.3 UDP 776 Source port: 50764 Destination port: apc-3052 Frame 21768: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052) Data (734 bytes) 0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00 0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A. 0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM 0050 3d 31 39 3a 35 32 3a 33 33 0a 53 52 3d 31 30 37 =19:52:33.SR=107 0060 43 0a 53 55 3d 32 44 38 33 31 38 36 44 0a 52 44 C.SU=2D83186D.RD 0070 3d 39 30 38 33 0a 54 41 3d 31 39 32 2e 31 36 38 =9083.TA=192.168 0080 2e 32 30 2e 33 0a 55 43 3d 31 0a 53 44 3d 30 0a .20.3.UC=1.SD=0. 0090 53 4d 3d 32 0a 34 46 3d 32 30 37 2e 30 0a 35 31 SM=2.4F=207.0.51 00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002 00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 33 .4C=207.3.50=033 00c0 2e 30 0a 34 33 3d 30 32 39 2e 31 0a 37 38 3d 31 .0.43=029.1.78=1 00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 37 3a 1/19/07.6A=0057: 00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE 00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO 0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27 0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0 0120 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 3d 31 746005443 .6D=1 0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart 0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL 0150 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d .46=60.00.4D= 0160 32 30 37 2e 33 0a 34 45 3d 32 30 37 2e 33 0a 34 207.3.4E=207.3.4 0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C= 0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208 0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72 01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67 01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W 01c0 0a 35 43 3d 30 32 39 2e 30 0a 32 46 3d 31 33 2e .5C=029.0.2F=13. 01d0 39 30 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 90.16=A.05=00000 01e0 30 30 30 0a 30 39 3d 36 30 2e 30 31 3b 32 30 37 000.09=60.01;207 01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT 0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1= 0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0 0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00 0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0 0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0. 0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1 0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con 0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I 0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH 0290 3d 36 46 37 39 35 45 33 46 33 38 44 38 46 39 34 =6F795E3F38D8F94 02a0 43 38 42 42 33 39 32 43 37 38 46 31 43 32 39 32 C8BB392C78F1C292 02b0 31 0a 4d 44 3d 65 32 38 38 61 61 39 62 30 62 61 1.MD=e288aa9b0ba 02c0 33 62 39 36 62 63 64 36 30 33 39 37 61 61 65 30 3b96bcd60397aae0 02d0 31 30 32 37 33 0a 3c 2f 42 4f 44 59 3e 0a 10273.</BODY>. No. Time Source Destination Protocol Length Info 21769 252.193808 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:19:12 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS2/50764 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 21769: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:19:12 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS2/50764 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 21770 252.201096 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 21770: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 360268, Ack: 55277, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 21771 252.201132 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 21771: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 361528, Ack: 55277, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 21772 252.201163 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 21772: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 362788, Ack: 55277, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 21773 252.201191 192.168.10.185 192.168.10.142 VNC 139 Authentication result Frame 21773: 139 bytes on wire (1112 bits), 139 bytes captured (1112 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 364048, Ack: 55277, Len: 85 Virtual Network Computing No. Time Source Destination Protocol Length Info 21774 252.208879 180.243.236.205 192.168.10.207 TCP 60 search-agent > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 21774: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: search-agent (1234), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 21775 252.208965 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:48:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1234 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 21775: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1234 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 21776 252.209000 192.168.10.207 180.243.236.205 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:48:04 -0400 Frame 21776: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: search-agent (1234), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21777 252.209040 180.243.236.205 192.168.10.207 TCP 60 search-agent > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 21777: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: search-agent (1234), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 21778 252.227509 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=55277 Ack=362788 Win=64240 Len=0 Frame 21778: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55277, Ack: 362788, Len: 0 No. Time Source Destination Protocol Length Info 21779 252.232155 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=55277 Ack=364048 Win=64240 Len=0 Frame 21779: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55277, Ack: 364048, Len: 0 No. Time Source Destination Protocol Length Info 21780 252.232202 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 21780: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55277, Ack: 364133, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 21781 252.232905 14.97.186.55 192.168.10.207 SMTP 97 C: MAIL FROM: <alyssa.hamphrey@xxxxxxxxxxxx> Frame 21781: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13610 (13610), Dst Port: smtp (25), Seq: 20, Ack: 311, Len: 43 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21782 252.233017 192.168.10.207 14.97.186.55 SMTP 107 S: 250 2.1.0 [email protected] OK Frame 21782: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 14.97.186.55 (14.97.186.55) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 13610 (13610), Seq: 311, Ack: 63, Len: 53 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21783 252.233075 14.97.186.55 192.168.10.207 TCP 60 13610 > smtp [ACK] Seq=63 Ack=364 Win=93076 Len=0 Frame 21783: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13610 (13610), Dst Port: smtp (25), Seq: 63, Ack: 364, Len: 0 No. Time Source Destination Protocol Length Info 21784 252.300783 188.161.220.86 192.168.10.207 TCP 60 45187 > smtp [RST, ACK] Seq=65 Ack=436 Win=93006 Len=0 Frame 21784: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45187 (45187), Dst Port: smtp (25), Seq: 65, Ack: 436, Len: 0 No. Time Source Destination Protocol Length Info 21785 252.300882 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:48:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45187 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 21785: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45187 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 21786 252.305240 188.161.220.86 192.168.10.207 TCP 62 45227 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 21786: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45227 (45227), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 21787 252.305303 192.168.10.207 188.161.220.86 TCP 62 smtp > 45227 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 21787: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45227 (45227), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 21788 252.453471 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 21788: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21789 252.453502 Intel_56:82:c5 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.109 Frame 21789: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:82:c5 (00:16:76:56:82:c5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21790 252.459572 192.168.10.185 192.168.10.142 VNC 119 Authentication result Frame 21790: 119 bytes on wire (952 bits), 119 bytes captured (952 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 364133, Ack: 55309, Len: 65 Virtual Network Computing No. Time Source Destination Protocol Length Info 21791 252.461387 192.168.10.142 192.168.10.185 VNC 86 [TCP Retransmission] Authentication result Frame 21791: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55277, Ack: 364133, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 21792 252.461420 192.168.10.185 192.168.10.142 TCP 60 [TCP Dup ACK 21790#1] rfb > xrl [ACK] Seq=364198 Ack=55309 Win=64457 Len=0 Frame 21792: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 364198, Ack: 55309, Len: 0 No. Time Source Destination Protocol Length Info 21793 252.463272 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 3 Port 47 TTL = 120 Frame 21793: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 21794 252.483584 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 21794: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55309, Ack: 364198, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 21795 252.495542 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 21795: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17557, Ack: 1292689, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21796 252.495574 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1292689 Ack=17599 Win=46594 Len=0 Frame 21796: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1292689, Ack: 17599, Len: 0 No. Time Source Destination Protocol Length Info 21797 252.496678 180.243.236.205 192.168.10.207 SMTP 71 C: EHLO xtyblx.com Frame 21797: 71 bytes on wire (568 bits), 71 bytes captured (568 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: search-agent (1234), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 17 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21798 252.496776 192.168.10.207 180.243.236.205 SMTP 246 S: 250-mail.mydomain.com Hello [180.243.236.205] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 21798: 246 bytes on wire (1968 bits), 246 bytes captured (1968 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: search-agent (1234), Seq: 122, Ack: 18, Len: 192 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21799 252.496819 180.243.236.205 192.168.10.207 TCP 60 search-agent > smtp [ACK] Seq=18 Ack=314 Win=93126 Len=0 Frame 21799: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: search-agent (1234), Dst Port: smtp (25), Seq: 18, Ack: 314, Len: 0 No. Time Source Destination Protocol Length Info 21800 252.497931 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=267221 Ack=5033 Win=1002 Len=1448 TSval=598371 TSecr=729981 Frame 21800: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 267221, Ack: 5033, Len: 1448 Data (1448 bytes) 0000 17 03 01 23 00 6f a3 4f 89 2c aa ab 78 5e 5c 91 ...#.o.O.,..x^\. 0010 0c dd 76 f2 16 6d b4 f9 53 6a 56 ac 76 36 0c 1c ..v..m..SjV.v6.. 0020 06 69 bb 3d 32 5e 1f c4 3a 2e 4e e3 98 8d 1c 4c .i.=2^..:.N....L 0030 e9 81 6f cf 01 f9 62 cc 0e 9e 33 17 43 30 43 3e ..o...b...3.C0C> 0040 af 0e 46 f3 03 36 a4 00 8b 3b 5f 90 ae 6b 44 45 ..F..6...;_..kDE 0050 af 1a fb 61 85 3d 92 a7 b7 ac bd b2 27 fb b3 03 ...a.=......'... 0060 c6 0c 77 85 2a c0 a4 46 04 71 85 fa ff 3b 45 39 ..w.*..F.q...;E9 0070 d9 d2 8d be 09 5c 7e 54 47 b4 c6 3f ad 96 af 61 .....\~TG..?...a 0080 11 f0 5d 8c 58 88 5e 2c 74 a2 9e 58 cf 64 7b 2c ..].X.^,t..X.d{, 0090 5a a8 59 c0 a2 22 1f 33 39 0e da d1 69 85 ae c5 Z.Y..".39...i... 00a0 92 75 fd 61 2a 0c f1 49 1d a1 36 12 e1 07 48 13 .u.a*..I..6...H. 00b0 af 31 82 c6 fe 2c 6e e0 1d 53 2e 81 09 50 82 7e .1...,n..S...P.~ 00c0 16 e6 f8 b2 46 5e fe 16 26 41 ed 54 53 24 9a f6 ....F^..&A.TS$.. 00d0 1c d8 df 56 25 4c 3f ed c5 ae d2 77 a3 ec 54 ba ...V%L?....w..T. 00e0 82 90 e1 27 80 2d 76 80 48 d2 35 28 cc 3d fe aa ...'.-v.H.5(.=.. 00f0 7d 38 26 34 89 65 2f 86 e9 a1 fa 87 78 e3 16 21 }8&4.e/.....x..! 0100 91 c8 43 77 ed 8d df 31 3f 3d 7b 44 ed 4d e3 e5 ..Cw...1?={D.M.. 0110 08 95 aa e6 66 46 1a d5 be 97 a4 64 b5 f4 7d 27 ....fF.....d..}' 0120 a5 7d c5 b5 c9 c2 77 c7 33 ec 47 e8 4e 4e 41 e4 .}....w.3.G.NNA. 0130 46 78 f6 6b b6 b6 17 1c a0 e5 7c 78 af c8 93 17 Fx.k......|x.... 0140 c0 8b d4 ab d9 7a 7f ab 65 c8 da f3 6c 08 c7 63 .....z..e...l..c 0150 b4 94 a4 de 44 f4 c2 59 25 ce e5 3e 5b 72 71 b9 ....D..Y%..>[rq. 0160 6d 0e db 04 07 32 ca f0 71 66 31 09 4f 46 c3 a3 m....2..qf1.OF.. 0170 14 4f f3 40 70 df 41 d5 41 67 2c ee 76 4f a4 cf .O.@xxxxxx,.vO.. 0180 3c cc b9 d3 ec 5a 1f 24 5c 7f 66 d1 4d 6a 07 ad <....Z.$\.f.Mj.. 0190 27 c9 f4 5f 67 78 8b e6 12 1c 78 e2 f2 1f 00 dd '.._gx....x..... 01a0 38 47 54 69 fa ac 99 4d 80 2e 1a 52 d2 64 28 2a 8GTi...M...R.d(* 01b0 e0 e7 d0 8d 71 ae 52 53 74 f4 55 e8 c3 95 58 38 ....q.RSt.U...X8 01c0 f0 7a 9b 91 22 0a a0 11 71 64 21 b9 2b 12 f0 a3 .z.."...qd!.+... 01d0 f7 0b bc 15 8f b0 8a 52 31 94 c1 ce da 8c e9 8b .......R1....... 01e0 19 e8 de 3d 98 28 ce cb 90 45 e9 56 ba c4 46 93 ...=.(...E.V..F. 01f0 0f 7c 46 55 a7 09 cf 3c 4e 43 1a 82 f9 fd 0a 8e .|FU...<NC...... 0200 3b d5 df 57 29 43 6f 01 8d d4 1c 63 63 77 08 5c ;..W)Co....ccw.\ 0210 f8 9a 73 4d ad b6 13 e6 db 4c dd d6 8d 3e 01 4e ..sM.....L...>.N 0220 ea ae 7e 6e 3f 5f 14 6c 90 69 c4 55 05 27 f2 ae ..~n?_.l.i.U.'.. 0230 1a fd 0c a3 ea bc 15 a4 d8 11 34 dd f4 03 dd 54 ..........4....T 0240 cd 88 36 8d 4c d6 72 6b 1e b6 6b d5 57 78 df 8f ..6.L.rk..k.Wx.. 0250 be 05 c6 ea a3 1f 55 fa 09 1c 6c ec 46 1f cb 62 ......U...l.F..b 0260 63 ba 1f 61 45 60 4f 9a 5f 00 71 6a 2b 69 49 a9 c..aE`O._.qj+iI. 0270 cb 75 f5 51 d3 f2 00 8b b1 ce 44 b0 26 e2 1d f6 .u.Q......D.&... 0280 51 27 fa fc f5 7e e1 97 9c 0c 3c a2 ca 01 b8 bf Q'...~....<..... 0290 24 d9 49 02 43 8e d5 29 ef 40 a7 48 83 6d b3 4f $.I.C..)[email protected] 02a0 c5 7a 20 48 f2 a0 5c 12 10 27 57 e6 bd 5d 70 8b .z H..\..'W..]p. 02b0 2b 73 bf 6a b7 cb 8a 6c 9f f6 11 0a b3 60 01 f3 +s.j...l.....`.. 02c0 9f 77 dc 25 23 92 48 92 bb 77 be 4f e1 92 e4 49 .w.%#.H..w.O...I 02d0 a1 67 d8 b8 43 0c 63 0d 85 65 21 78 f9 8d 67 dc .g..C.c..e!x..g. 02e0 96 95 d1 63 f3 47 79 29 6b 1d e8 59 cc 16 72 63 ...c.Gy)k..Y..rc 02f0 91 5f 2c b3 95 0a f8 c0 31 da 8d 27 94 7c 46 fa ._,.....1..'.|F. 0300 91 0f 90 9c 76 42 dd 65 1b 23 42 30 90 9d ee b9 ....vB.e.#B0.... 0310 cb 85 08 26 f0 fc fe 7e 7c 83 5d d7 86 c9 97 25 ...&...~|.]....% 0320 68 50 ae 1b 97 a6 39 9f cf 28 6d 02 60 5b 6e 6c hP....9..(m.`[nl 0330 f1 8e 6d 92 9a 5d fd 9f c1 a8 35 59 7e 46 75 a3 ..m..]....5Y~Fu. 0340 e9 1f 46 0f f0 d4 76 90 a0 d6 4f 06 63 a0 a0 95 ..F...v...O.c... 0350 0d e4 6e b7 04 3c 22 4a 9d 8a b1 2a 69 6e 50 20 ..n..<"J...*inP 0360 22 36 4e 39 9c 90 9e 72 d4 30 59 23 cc b1 4e 67 "6N9...r.0Y#..Ng 0370 19 8a a7 3c 4b 46 bb 79 f7 76 e7 5b e6 03 27 06 ...<KF.y.v.[..'. 0380 f0 ae 6c c1 40 9e a2 4e e3 55 ff 01 34 c8 e8 3f [email protected]..? 0390 1f 89 64 37 6c 20 d8 a4 ad b4 4c 87 d4 1b 30 95 ..d7l ....L...0. 03a0 d4 04 39 8a ca 4d 6d 35 4a 97 d4 83 92 e1 49 6d ..9..Mm5J.....Im 03b0 8a 57 1d cc 68 b3 9f 83 f9 6a 68 32 bf ee e6 34 .W..h....jh2...4 03c0 03 85 f2 1f 67 30 5c 9e e1 d2 e7 4a 7c 62 14 3f ....g0\....J|b.? 03d0 b6 71 4a f1 9c 65 77 36 d8 81 b7 d8 e3 7b 52 fd .qJ..ew6.....{R. 03e0 e0 09 97 04 c9 e9 1f 20 d5 89 b1 e5 a5 66 4b 49 ....... .....fKI 03f0 c5 78 c6 4a 7f 6e c7 58 4b 28 0b 75 38 c5 eb 9d .x.J.n.XK(.u8... 0400 e9 0b eb 56 50 5a ea 14 a3 d0 a8 b3 53 3b bf bc ...VPZ......S;.. 0410 b1 08 c1 02 78 16 09 b4 f7 df 18 b2 27 ed d0 b1 ....x.......'... 0420 9c d2 db 8e b8 3e 8d 8f df e5 81 18 cc 1b 9e 88 .....>.......... 0430 72 db e2 35 ad 7e 74 12 92 be 88 ae 8e 1a 33 4e r..5.~t.......3N 0440 e5 87 8b a5 f4 20 47 c3 ce b0 91 99 ab 0e 9e 27 ..... G........' 0450 86 2b 61 89 a5 18 28 6a 89 02 62 b2 d0 21 b6 81 .+a...(j..b..!.. 0460 57 b0 e6 c5 4e c5 f8 05 f1 36 58 28 62 71 dd f0 W...N....6X(bq.. 0470 4f 9f 67 17 6b 39 ba de 18 51 59 50 dc 5b 38 b4 O.g.k9...QYP.[8. 0480 58 ed 6c d4 48 75 a0 1a d9 ce 47 46 79 89 af 38 X.l.Hu....GFy..8 0490 4c 9f a6 ad f4 b5 89 76 3f a2 9f 23 05 6f c4 59 L......v?..#.o.Y 04a0 5c 56 6f 18 4a 5a 01 27 70 11 99 80 74 0e a6 fd \Vo.JZ.'p...t... 04b0 72 1c 30 6c 88 57 0a 72 2f 47 c5 60 e7 66 14 3f r.0l.W.r/G.`.f.? 04c0 8b fc fe 90 f0 7e 69 7b 7a 92 47 36 39 46 fa 67 .....~i{z.G69F.g 04d0 e9 67 d7 b8 03 8a 72 c6 00 27 87 8f 7d 12 57 c4 .g....r..'..}.W. 04e0 5a 01 2c 26 f9 ae 24 c3 63 91 25 a5 96 99 09 0d Z.,&..$.c.%..... 04f0 c7 50 ec 0d a1 56 14 45 87 ec 9f e7 fb f1 65 02 .P...V.E......e. 0500 29 88 2e 50 47 b9 f9 dc 90 66 46 56 7f d9 e6 97 )..PG....fFV.... 0510 6c 52 04 44 9c f7 ec 7d 07 5b e8 7c 85 a5 93 0e lR.D...}.[.|.... 0520 72 ba 0f b5 3d 78 c6 58 68 27 56 57 4f 9f 5c 32 r...=x.Xh'VWO.\2 0530 3f 7b 0f fd 42 27 93 dd 51 f9 ca 6e 18 36 a0 aa ?{..B'..Q..n.6.. 0540 60 2e 02 e3 cb 6c 81 38 9a 81 33 a4 52 3a a6 91 `....l.8..3.R:.. 0550 45 30 b0 38 09 7d 1a cf af 9a e8 cd 9d d9 26 d0 E0.8.}........&. 0560 06 7f fe 01 96 bf 59 f6 09 9e 91 e9 d5 3c 24 11 ......Y......<$. 0570 09 44 9f af fd 7c bc a6 cd 5e cb d6 1f b2 48 d5 .D...|...^....H. 0580 03 a4 73 f0 ab b9 04 77 a2 e1 76 49 af 77 97 c9 ..s....w..vI.w.. 0590 ee ad 31 15 d3 52 f1 7e 11 29 81 7d 46 79 51 8d ..1..R.~.).}FyQ. 05a0 d4 0d 79 36 b3 1e bf 73 ..y6...s No. Time Source Destination Protocol Length Info 21801 252.498044 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=268669 Ack=5033 Win=1002 Len=1448 TSval=598371 TSecr=729981 Frame 21801: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 268669, Ack: 5033, Len: 1448 Data (1448 bytes) 0000 e9 dc b0 10 8f c8 7e ab 95 97 f4 c3 21 ef d2 b8 ......~.....!... 0010 96 1a 20 34 07 68 00 58 3c bc 34 23 2f 79 fc a3 .. 4.h.X<.4#/y.. 0020 3b 80 27 1c 71 cd b9 fb 31 6c 12 61 58 ae 29 a1 ;.'.q...1l.aX.). 0030 7a fb e4 21 43 a3 b4 4d 20 27 93 71 8d 7d 7c c4 z..!C..M '.q.}|. 0040 83 cf 5e 13 16 7b 89 5d 7e c2 85 14 fc a3 c7 88 ..^..{.]~....... 0050 a7 1c 35 75 d4 7d 58 1c 66 e1 71 20 7b 6e 56 81 ..5u.}X.f.q {nV. 0060 36 de ad b3 c0 03 4f 63 ac bc b8 bd d7 7a f8 9d 6.....Oc.....z.. 0070 9d d9 85 ce af fc d9 e6 99 e3 2c 97 b7 26 dc e7 ..........,..&.. 0080 42 d7 b9 40 dd a2 d1 cc bc 42 38 ad 39 96 41 44 B..@xxxxxxxxxxxx 0090 cb f9 ab 61 6e 5a 42 dc cf 58 ba 3e da e1 58 42 ...anZB..X.>..XB 00a0 fb 80 00 df ed 77 ff 62 8d 54 39 25 02 fd 88 ea .....w.b.T9%.... 00b0 24 42 c6 7e 9e 10 61 f4 e6 c6 00 f8 a9 21 c8 4f $B.~..a......!.O 00c0 b8 32 ed 91 5c a1 c0 a9 07 52 f5 d1 a8 c2 b9 ab .2..\....R...... 00d0 01 01 5f 44 97 8e 92 42 ef d2 2b 57 42 ab 67 b7 .._D...B..+WB.g. 00e0 dc bf 18 93 2e 0d 7c f8 d7 6f ef 4a 3d 4a 14 b3 ......|..o.J=J.. 00f0 e1 38 69 74 d8 68 9d 55 9c 21 81 20 30 b6 48 c2 .8it.h.U.!. 0.H. 0100 91 52 50 1a 2b eb 0b 5d 65 e9 37 b5 c4 79 a4 80 .RP.+..]e.7..y.. 0110 32 31 c1 da 27 2a bd 6a 1b 19 04 ee 29 31 8a b7 21..'*.j....)1.. 0120 24 42 80 1c b3 cc 97 19 30 08 26 2a e2 fd e1 5e $B......0.&*...^ 0130 23 72 75 dc 87 50 da e2 29 96 71 2a 0c 98 8b 96 #ru..P..).q*.... 0140 4b e6 2c 36 96 6e 3e d7 71 1b e6 e1 74 a5 f7 28 K.,6.n>.q...t..( 0150 75 e7 6c a5 0f ab 93 c1 4c 11 33 95 70 2a d1 2f u.l.....L.3.p*./ 0160 da b1 8d 28 e2 f9 d7 42 2b 46 22 c8 cb 71 61 c5 ...(...B+F"..qa. 0170 30 7b a2 02 23 76 b2 7f 92 9e eb 45 0c 59 d5 eb 0{..#v.....E.Y.. 0180 65 93 64 6d 2e d4 cc d4 11 99 3a bb 77 41 1a 27 e.dm......:.wA.' 0190 46 9a 46 45 95 5d d1 ea 0d f9 53 51 89 c3 15 b5 F.FE.]....SQ.... 01a0 fd fe a6 87 18 dd aa a8 d0 02 ac d5 dd ec 77 19 ..............w. 01b0 88 62 51 43 00 19 ce 9b fa 6d 8d a5 84 39 db 7e .bQC.....m...9.~ 01c0 19 9b 9d 84 be 6a 07 34 a0 48 df 74 66 8f 11 a3 .....j.4.H.tf... 01d0 b0 41 f1 6d fb a1 26 92 57 04 c8 7f 66 eb d9 17 .A.m..&.W...f... 01e0 18 4d f6 86 1f 6b 4c 7b 93 55 73 26 e9 e5 c9 09 .M...kL{.Us&.... 01f0 a1 cc 34 13 c1 5a 19 e2 2c 9e 55 37 ee 6c 75 e8 ..4..Z..,.U7.lu. 0200 81 d8 37 26 91 67 8c a2 77 89 db b3 7a 83 49 78 ..7&.g..w...z.Ix 0210 4c c1 47 2b 94 08 61 59 6e 0e 52 eb 1d f8 bd f4 L.G+..aYn.R..... 0220 98 07 37 de 35 ae e7 01 68 9b 6e 95 8c f5 f4 cb ..7.5...h.n..... 0230 53 c8 e7 e2 c3 0a 06 17 88 b0 28 3f c0 17 3c a0 S.........(?..<. 0240 fc 88 6a d5 72 40 9b ac f8 62 e0 b4 17 76 0c 5b [email protected].[ 0250 43 db 8b 68 db 0f 1b 07 ca cc 8f be 36 ba 14 0c C..h........6... 0260 f2 c4 ba a7 23 7e c1 4e 4f 21 31 a1 1f 73 49 f7 ....#~.NO!1..sI. 0270 f3 7b 5f e3 82 6b e3 dc 86 19 c5 ab c1 7a 8a 7c .{_..k.......z.| 0280 eb f2 de c4 0c f4 60 6c ef 21 49 33 5e ff 15 d5 ......`l.!I3^... 0290 b1 e6 5a a9 84 90 a7 1b e0 fc bc 6c f1 6e 84 bc ..Z........l.n.. 02a0 56 21 e4 cc 4c ae 6b 9e 96 09 70 73 15 a8 37 78 V!..L.k...ps..7x 02b0 7d 2e e3 68 9e d7 00 b9 fc 6a 55 46 27 26 93 17 }..h.....jUF'&.. 02c0 45 a2 cc 36 f0 82 86 13 6b 92 d7 c4 e8 4f dc 20 E..6....k....O. 02d0 66 5b e8 68 8d 8f 9f 7b 59 b7 70 b1 ea 07 c2 86 f[.h...{Y.p..... 02e0 2c 8d 06 48 ca f9 ea ae b4 f3 5c b5 50 b0 8d 90 ,..H......\.P... 02f0 fe 2a 28 76 ce 6a 50 16 27 6b 13 cf 57 ae 2e 85 .*(v.jP.'k..W... 0300 9c 85 a6 07 22 2a 26 ea be 8b d5 c6 a1 fd cb c5 ...."*&......... 0310 41 3a 25 4a 18 3c 31 0a 26 d2 28 60 e7 58 ab 79 A:%J.<1.&.(`.X.y 0320 84 ff 98 fb 56 ea 5b e2 c9 3e 4a 17 77 83 5b 93 ....V.[..>J.w.[. 0330 64 3a 53 66 e5 9e d5 0e 7b 99 8f 67 58 96 a9 91 d:Sf....{..gX... 0340 9c 29 83 e9 7b 80 3a f2 73 4b 31 88 85 9a 69 52 .)..{.:.sK1...iR 0350 56 0a d2 df 01 e6 88 75 a8 3a aa 66 78 e9 72 3d V......u.:.fx.r= 0360 94 83 88 86 52 bd 94 1d 34 eb 08 8a a8 98 ce ec ....R...4....... 0370 9b 1a a4 69 14 94 23 a1 f7 7f b2 56 c9 3a 16 d3 ...i..#....V.:.. 0380 8e 49 d1 27 ae 46 69 7a ed 0b e4 f2 6c 8f a7 09 .I.'.Fiz....l... 0390 e7 4b 83 c8 fc 30 a9 4e 67 18 01 67 18 5c a7 69 .K...0.Ng..g.\.i 03a0 b7 76 0f df 53 a6 d5 5b ef 9d ae 00 b0 cd 22 b8 .v..S..[......". 03b0 3a a2 f8 01 7a 8b 38 b9 a2 99 c7 69 f6 59 03 4e :...z.8....i.Y.N 03c0 5a 60 63 25 9e b3 43 49 39 d0 d8 df 26 0d 85 59 Z`c%..CI9...&..Y 03d0 23 83 04 76 37 d0 d1 4e 76 d9 af 4c 21 a7 f3 b7 #..v7..Nv..L!... 03e0 75 ed 50 5b b8 74 76 a8 e9 08 06 fb 4a c5 4d 0d u.P[.tv.....J.M. 03f0 f3 40 6c de 8f a9 f6 b5 55 01 52 72 3e ae ef be [email protected]>... 0400 be 95 95 ab 1b 9f 2b 2a 12 91 ad 1a 03 83 7d 56 ......+*......}V 0410 e6 cc 56 97 15 2c 8e d4 b9 48 0c 96 b8 8a c7 fe ..V..,...H...... 0420 9a fd 86 e0 d8 13 92 d6 e3 70 93 9b 3c 5a f1 11 .........p..<Z.. 0430 58 c4 de 7a 7e a6 d4 5d 2e af ad 22 c7 22 ad b4 X..z~..]...".".. 0440 be 1e 1e a3 fe 84 e7 48 86 d8 5b c7 b8 04 67 2e .......H..[...g. 0450 a7 9f 0c 54 47 38 62 2e 90 c6 d5 19 25 3f af fe ...TG8b.....%?.. 0460 20 b8 0d 91 cc 73 38 a7 9e cb 8c 63 b6 1d 51 8f ....s8....c..Q. 0470 d5 a2 1e 7b ee 89 28 f7 a1 48 f8 65 6e be e4 c9 ...{..(..H.en... 0480 eb 87 98 71 f9 9c 4c 1b 7b 34 56 cc c8 12 1f 4d ...q..L.{4V....M 0490 2b fc c8 29 57 1b cd 2b 30 be 5e 6b cb ba ba c5 +..)W..+0.^k.... 04a0 b1 60 17 73 88 cf 44 a8 2c 7e 60 09 4f fd ea 1f .`.s..D.,~`.O... 04b0 ac 68 c4 44 c2 b5 ff c8 43 31 44 61 75 6d 5c 97 .h.D....C1Daum\. 04c0 51 4c e3 4f 82 4a b1 b6 74 be 13 19 a4 25 6a 32 QL.O.J..t....%j2 04d0 94 30 49 6c 74 17 22 c8 59 50 8d 03 36 8a 3c b8 .0Ilt.".YP..6.<. 04e0 b6 99 b6 92 81 19 8e 35 2b b6 5e 9f 78 55 02 f4 .......5+.^.xU.. 04f0 e1 93 50 a5 99 9c 1a 55 8b 82 a3 9b 48 b2 f8 48 ..P....U....H..H 0500 35 ce 26 1f 05 45 34 d5 c1 f9 da bf 0a 17 a2 da 5.&..E4......... 0510 06 6d d6 cb 5f 5e 72 62 6a e7 b3 d5 20 a1 32 ad .m.._^rbj... .2. 0520 21 62 38 d1 82 af ee 8b 5e 75 96 e6 9c c4 48 fd !b8.....^u....H. 0530 08 b7 a8 6b 1c fc a8 e4 88 84 bb c0 2c 34 ce 9a ...k........,4.. 0540 1e c5 84 24 d2 33 d8 82 8f ca 2c 15 3b ca ac bf ...$.3....,.;... 0550 90 ec b5 22 18 8a 30 a1 d9 01 63 3a 29 0d f1 df ..."..0...c:)... 0560 9b 6a 90 12 56 a5 ac 74 03 03 71 66 7d 08 79 ac .j..V..t..qf}.y. 0570 6e f7 bd 11 19 0d 7d 1b 02 3a 56 3d f4 66 81 4b n.....}..:V=.f.K 0580 fc 68 5a 9e 86 9b 82 3f e6 21 48 46 b4 d3 7c 23 .hZ....?.!HF..|# 0590 d9 8f 5a ac 43 85 7f 86 11 f1 05 42 f8 b7 b1 ce ..Z.C......B.... 05a0 a6 07 56 09 09 e6 be 7a ..V....z No. Time Source Destination Protocol Length Info 21802 252.498158 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=270117 Ack=5033 Win=1002 Len=1448 TSval=598371 TSecr=729981 Frame 21802: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 270117, Ack: 5033, Len: 1448 Data (1448 bytes) 0000 1a 88 a1 2d 77 aa 6a 28 04 1f af cd 5e 05 57 1e ...-w.j(....^.W. 0010 c5 56 91 4c 6b f1 69 35 4f f8 97 61 78 d6 1d fd .V.Lk.i5O..ax... 0020 3e 3e 7f 14 51 96 07 7f fb 66 ef db f3 7a 38 dd >>..Q....f...z8. 0030 09 f9 10 45 1f 57 16 7b 5d a3 e9 f0 33 70 c1 0a ...E.W.{]...3p.. 0040 9b 88 a9 ac 21 22 c0 87 b9 36 1c 65 74 ab 19 6c ....!"...6.et..l 0050 c1 1d 02 89 71 d6 13 34 1b 6c 1a c0 45 f3 62 44 ....q..4.l..E.bD 0060 0f 28 c2 43 9f 06 f0 05 b8 ac 2c 0e df 38 bb 7c .(.C......,..8.| 0070 5a e3 36 81 84 40 a9 9e fe cb 7a 7b 94 99 8c 85 [email protected]{.... 0080 93 57 e0 fc 9b 5d 2b bb 98 77 80 63 b4 86 39 aa .W...]+..w.c..9. 0090 c1 1f 46 fa 4c e4 7f 20 cc a4 8d 7f bb 6e e8 db ..F.L.. .....n.. 00a0 52 e2 b5 da bd 5d 80 95 aa ca 7a 96 94 63 a2 3e R....]....z..c.> 00b0 0a e2 20 f5 50 f8 08 c5 db b8 19 3d dc 41 cd b9 .. .P......=.A.. 00c0 ee 26 57 f7 19 82 d5 d6 3b d1 01 7d c5 d1 ee b3 .&W.....;..}.... 00d0 ac ee bd 88 99 d3 a9 4e 59 59 b1 f5 d4 e1 80 1b .......NYY...... 00e0 15 a4 5b 17 f8 2f 9c ae 78 46 9d bf 98 58 65 22 ..[../..xF...Xe" 00f0 7b 85 67 14 25 77 70 75 72 7e 23 f0 d3 62 78 67 {.g.%wpur~#..bxg 0100 28 46 2d 23 80 f0 2f a5 80 16 38 93 93 a4 8a d5 (F-#../...8..... 0110 69 49 7d 7c ee cb 3f b1 4a 4b 4c 4f ee f8 30 9c iI}|..?.JKLO..0. 0120 88 73 ea 40 65 39 73 b2 bb 31 7b f3 48 ad 00 bc [email protected]{.H... 0130 6c bb 81 78 14 fb 7f 77 86 85 6d fb 4e 98 f8 98 l..x...w..m.N... 0140 07 0c a8 a7 c5 81 7f 13 7b 9d 19 8a 77 97 e9 4e ........{...w..N 0150 87 b5 6e e8 8f 64 24 c3 b6 10 f1 20 c2 d9 5f 7e ..n..d$.... .._~ 0160 bb 90 1e 19 33 e7 fc e2 b4 0e 81 85 e9 36 f3 b7 ....3........6.. 0170 19 b2 5d 80 32 09 04 e1 39 db 55 b0 92 69 4f 4d ..].2...9.U..iOM 0180 70 04 d4 46 b7 c3 66 5a 06 66 9a f9 af db fe 76 p..F..fZ.f.....v 0190 57 a4 9c 60 f4 0b aa 26 58 05 50 46 9a 20 0c 6e W..`...&X.PF. .n 01a0 c7 49 0c 40 e1 4c 65 72 66 bd 70 a4 ce 75 f4 b7 [email protected].. 01b0 55 03 8a 79 61 53 c7 1b 9a 44 04 1f ef af 6c 67 U..yaS...D....lg 01c0 93 98 a7 9f 44 4c 5f a5 90 e2 e5 f4 8f f2 e1 51 ....DL_........Q 01d0 71 3f e7 00 f9 2b 2a 07 54 be 78 6d c1 5d 60 7a q?...+*.T.xm.]`z 01e0 ea 81 69 3e e8 35 b2 cd b4 35 23 70 d0 76 60 74 ..i>.5...5#p.v`t 01f0 a2 5e 13 12 a0 40 6b 45 d0 ae 50 e2 d7 fd 55 b5 .^[email protected]. 0200 18 a9 3e d1 09 dc 79 4e fd c4 02 6a 0e ee b4 fd ..>...yN...j.... 0210 76 3e 1d 6e 96 b1 5d 12 f4 7c 99 a1 e2 b2 90 05 v>.n..]..|...... 0220 f3 49 a4 c7 b1 b5 83 9b 6b 21 82 23 ad fd 3a 82 .I......k!.#..:. 0230 87 2d bd 46 ae 67 8d bd b6 b9 c8 b8 af ed 83 31 .-.F.g.........1 0240 77 3a 5c 44 4e 89 55 3a ca 6e 00 ba ff a5 0b f8 w:\DN.U:.n...... 0250 63 02 2f 0c 3b 73 eb bd 45 b9 08 39 4c 89 7a 31 c./.;s..E..9L.z1 0260 cb 16 2f 58 a8 7b 2c b0 55 e3 09 30 69 17 8e 13 ../X.{,.U..0i... 0270 17 db bd 4f 53 aa 2e 95 dd 39 f3 77 14 02 be 26 ...OS....9.w...& 0280 9f 62 fe 85 78 95 82 6a 80 dc cb ff 5b 9f 6b d3 .b..x..j....[.k. 0290 86 bf 68 a1 e6 72 6d 7c 89 ca 1b d9 3d 4c aa 1f ..h..rm|....=L.. 02a0 62 bc ab f3 2a ef 6b 72 9a 0e dd 80 37 e9 5b bc b...*.kr....7.[. 02b0 49 0e 87 86 52 7d e9 f3 04 17 c8 b2 70 2b c0 35 I...R}......p+.5 02c0 50 5b 08 f1 4a 30 98 61 96 10 39 bc a0 9c 1a 07 P[..J0.a..9..... 02d0 c8 64 f6 28 59 ef cf 5a 99 9d 9d d2 1c d8 fb 20 .d.(Y..Z....... 02e0 5e 08 07 c7 75 97 80 63 e9 a8 d1 08 1b a0 6d ae ^...u..c......m. 02f0 ea a6 fa 12 19 ea 43 1b d7 bf ca ec a1 c8 ac 89 ......C......... 0300 f2 43 fc b6 d4 36 4f 55 da e5 a3 79 e6 e1 18 28 .C...6OU...y...( 0310 5f 89 32 f8 0a 2b de 68 e7 13 b9 fa e7 7b 9d 5d _.2..+.h.....{.] 0320 ea f2 c2 f5 4e 4a 38 95 7e 11 1a 00 ef ee a4 35 ....NJ8.~......5 0330 f6 2c fc dd d5 3e fa 7c a7 f4 c2 20 37 99 81 2f .,...>.|... 7../ 0340 58 82 34 8f 56 e7 3c 97 df 89 3e 44 7c f0 df 72 X.4.V.<...>D|..r 0350 9e ef 5a b9 1c 61 89 c8 6a 99 eb bc 19 fb e0 e0 ..Z..a..j....... 0360 dd 1c 45 52 8f 11 35 f8 9a d4 2e d5 8a 35 6e ff ..ER..5......5n. 0370 2e 96 50 de 49 aa f8 3d d3 96 7f 13 de c8 15 4d ..P.I..=.......M 0380 01 fa 02 ac 75 33 c9 c9 59 ce ca a8 fc 21 6b 84 ....u3..Y....!k. 0390 df c6 c4 36 c1 34 f4 ca d5 4a 23 4b aa cc 1f b3 ...6.4...J#K.... 03a0 1c 80 b4 6f 45 55 79 51 b6 37 b5 fe 68 c5 5f 08 ...oEUyQ.7..h._. 03b0 8e c8 f6 9e c2 27 49 25 55 41 db 9d 5f c6 56 41 .....'I%UA.._.VA 03c0 8d 16 51 08 cf 13 45 fb 56 58 e2 da 45 2e d1 69 ..Q...E.VX..E..i 03d0 9d 47 1c 3e e2 d6 50 b6 65 0f 61 9c 90 0e 5b 86 .G.>..P.e.a...[. 03e0 68 5c f3 37 6f a5 3b 9e 9a 06 2e 00 e3 7d e5 7d h\.7o.;......}.} 03f0 8c 36 41 e2 f6 cb e6 9e 9f dc 2f d7 9b 4f 41 93 .6A......./..OA. 0400 53 b3 b6 d9 b9 6b eb 77 82 8c 9d 16 b7 8c 35 a2 S....k.w......5. 0410 9f 7f 53 cb 77 b7 be 7f 1d 79 54 95 ec a3 56 e4 ..S.w....yT...V. 0420 df 13 e1 3b d3 2c 9c 21 3c 98 d1 02 86 48 78 28 ...;.,.!<....Hx( 0430 d8 d6 10 57 3d 92 be a2 22 28 a9 0a d8 68 7a 3c ...W=..."(...hz< 0440 f1 1b 2e f9 9b f8 fe c4 f9 ac 95 24 d9 bc 20 bb ...........$.. . 0450 61 49 06 ef be 65 37 d2 74 75 17 d1 55 66 5e 54 aI...e7.tu..Uf^T 0460 32 41 df 2a d7 3c 77 73 f3 e8 82 3c 40 0b 8d 15 2A.*.<ws...<@... 0470 6b 79 18 a6 ee 8f f3 fd ed 13 a4 73 c4 49 36 a3 ky.........s.I6. 0480 1d 67 10 57 14 37 ac a3 1f 52 79 54 4e e4 67 e1 .g.W.7...RyTN.g. 0490 37 7f 19 6a 9c 06 72 12 87 22 7a be 41 17 f2 07 7..j..r.."z.A... 04a0 ad 23 2a a5 4b 9a 73 b2 73 1c 25 ed 47 86 73 39 .#*.K.s.s.%.G.s9 04b0 0c 62 cf ed d2 ac d3 c5 9c b9 b0 01 49 7c c8 83 .b..........I|.. 04c0 b9 dd e9 3a 39 5c 11 49 d4 22 e8 e4 ef 82 61 77 ...:9\.I."....aw 04d0 0e 39 c0 3d 8c 5a cc bb 7b d3 d9 09 09 25 f0 92 .9.=.Z..{....%.. 04e0 e5 39 08 24 3f ea b4 2c 05 29 5d a3 9f 42 49 9e .9.$?..,.)]..BI. 04f0 3e b2 98 15 1a 64 d4 38 c5 3e 54 bb a7 64 5f 47 >....d.8.>T..d_G 0500 2c 21 cd 31 e0 cb 3d 67 93 e0 b6 90 76 75 dc 54 ,!.1..=g....vu.T 0510 a4 cc 00 dd 8e ef f6 de 46 75 71 8f 83 24 47 28 ........Fuq..$G( 0520 80 b3 13 9e c3 92 5d 19 5f 08 ce ad 93 e4 0a ae ......]._....... 0530 7c 85 ac e2 06 22 17 65 de 18 ff 1c c0 a2 92 09 |....".e........ 0540 87 f9 72 39 7a 34 3a ea c9 f0 86 b9 97 15 b2 59 ..r9z4:........Y 0550 af de e4 10 b8 ea 6d 7c 07 ba c7 fc e1 06 04 9d ......m|........ 0560 44 ea 38 11 05 81 84 ac 64 ba 3e a8 90 2b f5 33 D.8.....d.>..+.3 0570 55 72 46 af ea 0f e0 c2 c7 b6 fe 1b 40 c8 14 b4 UrF.........@... 0580 fd bd 88 ce 2f 39 7f f8 23 24 9b 5c 4a cc d7 01 ..../9..#$.\J... 0590 09 e8 95 4c 3e 72 64 30 bd cc 86 aa 57 53 a6 55 ...L>rd0....WS.U 05a0 55 cd 0a 3c 2b 4e d7 f5 U..<+N.. No. Time Source Destination Protocol Length Info 21803 252.498248 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1234 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 21803: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1234 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 21804 252.498313 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=5033 Ack=270117 Win=65535 Len=0 TSval=730008 TSecr=598371 Frame 21804: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5033, Ack: 270117, Len: 0 No. Time Source Destination Protocol Length Info 21805 252.498373 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=5033 Ack=271565 Win=65535 Len=0 TSval=730008 TSecr=598371 Frame 21805: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5033, Ack: 271565, Len: 0 No. Time Source Destination Protocol Length Info 21806 252.498485 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=271565 Ack=5033 Win=1002 Len=1448 TSval=598371 TSecr=730008 Frame 21806: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 271565, Ack: 5033, Len: 1448 Data (1448 bytes) 0000 fe 1a cb 04 a5 9b 93 92 88 4c 31 e0 40 58 a1 ce .........L1.@X.. 0010 6e 3d 09 7e 85 ea cd 17 ee bd ce a7 e9 1d e0 2a n=.~...........* 0020 61 37 77 da 60 8d 01 8a 6b e2 21 e1 5c e8 4b 48 a7w.`...k.!.\.KH 0030 91 78 75 d1 f8 26 36 46 62 ce 78 5e ca 4b fa 0b .xu..&6Fb.x^.K.. 0040 45 5e b2 fc 0c b2 36 ff 1d 7f c3 8b 43 1b 96 02 E^....6.....C... 0050 a7 8c 88 0b 16 76 4b cb 99 71 a6 a8 cb cf 3d a8 .....vK..q....=. 0060 32 16 58 19 ef 55 d7 12 9c 52 ab b5 c8 d7 15 bd 2.X..U...R...... 0070 c0 a7 88 3e 80 f7 6b d8 c4 9e 9e 9a 4e a5 e0 c1 ...>..k.....N... 0080 0a 8f d4 fe 55 65 6b c1 89 36 34 17 62 df 3e 2c ....Uek..64.b.>, 0090 36 e4 2f 1f e6 a6 3d 24 e4 4c 8d 1f 30 41 0b f8 6./...=$.L..0A.. 00a0 99 83 1c 1d c6 66 54 b6 be 4f c9 94 f5 79 72 d1 .....fT..O...yr. 00b0 60 ee 1d 06 92 b0 45 57 4e d2 3b e2 9b e8 13 07 `.....EWN.;..... 00c0 5a d1 ba 09 67 a0 8a 38 1f ac 41 34 53 68 cb a7 Z...g..8..A4Sh.. 00d0 aa 0d c9 84 c0 26 1c 61 24 1c e6 30 77 31 af 36 .....&.a$..0w1.6 00e0 c7 88 f9 7c 86 90 62 fd 18 f8 d1 aa 40 39 22 8d ...|..b.....@9". 00f0 d1 af f8 01 9a c0 1a 03 11 c4 21 cd a3 87 a5 b3 ..........!..... 0100 96 5c 82 1c f2 48 e9 dd 30 f7 50 0e cb fc f5 9a .\...H..0.P..... 0110 71 71 27 7a cd 40 86 44 77 2d cb 8d bd 47 e8 bf qq'[email protected].. 0120 16 6e be 71 a4 73 15 18 ea 05 09 e6 4d b9 66 da .n.q.s......M.f. 0130 21 e8 d7 64 38 40 f4 38 34 d6 7c fa db db 7c ae [email protected].|...|. 0140 10 de e9 96 bc 06 b3 fb 91 a6 50 07 22 32 86 04 ..........P."2.. 0150 39 7d c6 f2 af a9 6a 6e e0 a1 a3 5c 49 d3 48 4e 9}....jn...\I.HN 0160 4f 25 df 37 8c 9a b9 86 1c 55 4f 21 a2 3e 39 f8 O%.7.....UO!.>9. 0170 7d 07 09 98 23 26 8a 37 f0 99 e6 41 ae 35 69 6c }...#&.7...A.5il 0180 68 59 91 30 24 3a c4 6e aa 22 4c 97 3d 80 db 51 hY.0$:.n."L.=..Q 0190 02 94 d4 42 9c 4b a9 7b 02 c7 7d ff d0 d3 55 de ...B.K.{..}...U. 01a0 00 99 f2 ac 4f 1a f8 ce 81 40 13 36 70 4e 35 b6 [email protected]. 01b0 14 b9 98 bb 9a 69 0c 1a 0f 9f 05 c3 66 5f f8 40 .....i......f_.@ 01c0 db 6a a1 36 7a 8e ab b1 0b 2f f2 d6 fa 35 97 bb .j.6z..../...5.. 01d0 a5 06 ef 3f 15 02 e9 64 f8 05 00 6c dd 76 2e 62 ...?...d...l.v.b 01e0 28 63 69 c2 91 ee f7 32 9d a3 cc 82 36 f1 3d 74 (ci....2....6.=t 01f0 ac d7 64 c5 df 6f d0 bb 40 d2 a4 92 34 db 16 6f [email protected] 0200 a9 f8 8f 87 77 34 11 d1 22 14 5b 3f 4e 57 86 41 ....w4..".[?NW.A 0210 bd 66 30 05 ae c6 6a 84 c4 1a 8f 67 c8 8c 52 f8 .f0...j....g..R. 0220 93 82 11 96 77 75 dc 05 91 bc bb 10 5a b0 ab 4f ....wu......Z..O 0230 da 61 ed c1 d5 fd 03 60 cc 7e bb 18 ed 7c 52 ac .a.....`.~...|R. 0240 15 6a 4f dd 02 fd 1b ec 95 ac 05 6c 72 d3 c6 ec .jO........lr... 0250 bc 22 35 10 15 bc 0b 95 ad 14 9b c2 82 4b 5a 4e ."5..........KZN 0260 f4 b9 11 5e 3e f1 4c 7b 61 cf cb 77 bc 82 e1 98 ...^>.L{a..w.... 0270 2b 3b 1b da fc ea 12 79 9c e9 23 cd 77 c5 52 55 +;.....y..#.w.RU 0280 8e ce 10 0e 64 9c 54 01 e5 47 91 f5 9b 97 8e 50 ....d.T..G.....P 0290 9d 38 8c ab 57 27 95 89 17 77 aa bd 00 f5 11 3a .8..W'...w.....: 02a0 a2 fa 56 d5 80 a1 34 65 05 91 32 dc c9 59 4f 8d ..V...4e..2..YO. 02b0 5e b2 63 ea 15 e7 c3 07 a3 7d 84 96 1d cd 5c 22 ^.c......}....\" 02c0 d1 4d 22 6e b9 b2 b3 04 08 b6 6f c1 9f d3 e1 db .M"n......o..... 02d0 67 9c 2d 75 8f e9 75 18 3b b4 98 12 c1 0f c2 0e g.-u..u.;....... 02e0 99 b7 5b 93 f5 8d ac f4 40 13 b9 64 18 39 b9 5f ..[[email protected]._ 02f0 93 17 e7 31 c5 22 a8 8b d6 5e 32 d2 57 88 fa d2 ...1."...^2.W... 0300 f8 9a 61 62 68 f0 e8 de 8c 86 04 33 51 44 36 0c ..abh......3QD6. 0310 f8 a1 c6 6f 5b 5d 9b 4c 48 fd ac ab e6 13 48 a6 ...o[].LH.....H. 0320 18 63 c4 31 f4 62 d7 9a 55 c8 36 da 5f 38 82 f4 .c.1.b..U.6._8.. 0330 7e 09 e3 a4 5d ed d4 8b c1 c3 79 89 eb a5 17 6b ~...].....y....k 0340 aa 0c 65 ed 31 04 a5 a9 21 6a 81 68 cb 7c 89 a6 ..e.1...!j.h.|.. 0350 85 6f 4d 6e 5c a5 f3 a7 54 f3 19 50 dd b5 33 e7 .oMn\...T..P..3. 0360 56 b5 5b 4c d8 9a 3d 5a 94 91 09 c5 2c b4 99 05 V.[L..=Z....,... 0370 c1 b4 88 92 cb 81 64 fe 01 11 0d 18 4d ef 18 c4 ......d.....M... 0380 b4 32 a9 de f1 18 96 ff 80 46 78 00 e0 23 74 53 .2.......Fx..#tS 0390 ff 58 83 5d 4d 77 92 61 b3 50 a3 4b 6f ef 39 04 .X.]Mw.a.P.Ko.9. 03a0 f4 54 a5 45 b6 4c 79 91 f7 98 c5 63 41 ee 5a 3f .T.E.Ly....cA.Z? 03b0 e8 cb 38 99 45 51 b6 6e 4d 35 b0 f6 ec e1 f6 5b ..8.EQ.nM5.....[ 03c0 00 8d b0 6a f9 eb fa bf e1 a6 e7 81 a6 e6 a5 3a ...j...........: 03d0 32 55 0a 9c c2 d1 8f 37 d0 9c 05 34 12 64 1d 10 2U.....7...4.d.. 03e0 ff 55 7a c3 7e fd 8e 28 6b 53 77 73 ee 51 3a 0a .Uz.~..(kSws.Q:. 03f0 d0 d9 55 8d a6 3f a3 84 fc 4c 1b ea 51 4a 07 4e ..U..?...L..QJ.N 0400 e5 90 fe 6b c1 39 b6 6e be 90 85 d6 a0 11 ee a4 ...k.9.n........ 0410 b4 0d 77 e0 d2 70 90 a1 98 1f 9c a9 37 ed 1d f0 ..w..p......7... 0420 b7 4d 4d 65 5e 4a 62 d0 2e 86 55 1e e0 7b 99 e8 .MMe^Jb...U..{.. 0430 75 88 57 75 5e 87 7e d8 d5 c7 ca 82 2d 9e 6f 38 u.Wu^.~.....-.o8 0440 a7 91 38 42 55 9e f6 a2 e3 17 ce 1d 63 6e 4d 3e ..8BU.......cnM> 0450 ae d4 40 de 6c 9b c6 6c 8f 24 f6 10 b6 3a cf c2 [email protected].$...:.. 0460 44 10 f5 e1 b9 e0 bd 3a 34 47 ca c2 25 32 e2 2c D......:4G..%2., 0470 12 9a cd 1d aa 59 b5 87 de 16 a5 0e 43 51 c1 7e .....Y......CQ.~ 0480 59 d1 de 33 24 e6 76 26 7f 2a 02 18 c5 fc 9e d1 Y..3$.v&.*...... 0490 c5 2e 95 52 17 e5 22 f2 51 57 29 16 fc d6 76 a9 ...R..".QW)...v. 04a0 03 60 cf 16 bf 25 e0 ce 1f 94 ec d1 76 ce f2 0f .`...%......v... 04b0 79 36 c1 9e 8a 0a 0b 32 cb 8a 51 59 0f 41 9d 53 y6.....2..QY.A.S 04c0 02 8c 58 e7 40 a1 26 23 8d 01 eb b4 5d 9d e0 73 ..X.@.&#....]..s 04d0 72 0b b2 21 5b c8 c9 2a ad fd a5 95 a4 a5 58 63 r..![..*......Xc 04e0 64 bf c5 0d 23 a8 ba 5c c3 b0 56 79 be b7 c2 a0 d...#..\..Vy.... 04f0 36 45 b9 b2 ca 92 c0 9c d0 84 88 34 a4 14 f1 17 6E.........4.... 0500 9e 74 e7 89 cc 57 c7 5e 6a 77 9d c7 26 e3 22 af .t...W.^jw..&.". 0510 e0 af 8c fd 9c a4 30 be 37 96 e4 6a f7 0d 28 5d ......0.7..j..(] 0520 54 2f d9 87 67 df 42 7e ef 6c 64 a5 73 19 f8 b1 T/..g.B~.ld.s... 0530 af 33 57 fc b3 78 0a e7 14 7d 16 fa 19 4a 6d bd .3W..x...}...Jm. 0540 ad 60 19 f7 42 57 7a 24 15 6a 8b be dd c5 ce 52 .`..BWz$.j.....R 0550 88 15 66 49 37 e7 d9 22 5c b8 83 8c ad ad 6d 49 ..fI7.."\.....mI 0560 b1 bc 26 f2 32 f6 98 dd ff 44 64 df a9 3a cf fd ..&.2....Dd..:.. 0570 bf 5b 11 b2 5e 77 43 30 9e 35 fb d0 9f 8a 69 a8 .[..^wC0.5....i. 0580 7d 63 a2 21 3c f4 21 81 90 18 6e bf ab 79 37 b4 }c.!<.!...n..y7. 0590 84 ee 1b f4 5a 12 76 06 26 d7 88 98 99 1f 62 5a ....Z.v.&.....bZ 05a0 3c d2 ab df b1 88 26 d3 <.....&. No. Time Source Destination Protocol Length Info 21807 252.498587 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=273013 Ack=5033 Win=1002 Len=1448 TSval=598371 TSecr=730008 Frame 21807: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 273013, Ack: 5033, Len: 1448 Data (1448 bytes) 0000 d6 c3 3d bd ea e2 a2 3e a6 53 1d 18 cf e0 7e b8 ..=....>.S....~. 0010 d5 47 a2 73 ed 77 62 16 ec 9d 52 8e 5e 93 8f e8 .G.s.wb...R.^... 0020 0e 3e 67 89 1e fc 48 c9 3d 98 0b 70 e2 eb 01 0c .>g...H.=..p.... 0030 49 db 53 fc 36 65 57 8b fb 92 79 b5 d1 2c a6 30 I.S.6eW...y..,.0 0040 00 c9 cb 5d 0d 21 0f 25 a4 c1 d7 78 12 88 8a 6a ...].!.%...x...j 0050 9f a3 b7 59 e5 2a 03 64 9b 56 19 b6 90 21 8c d3 ...Y.*.d.V...!.. 0060 9f 82 92 99 d5 7a 39 bb c9 d2 8c d7 1c 47 db ad .....z9......G.. 0070 f4 27 8c 11 ef 34 f6 14 64 aa 7b f6 5b db 56 6d .'...4..d.{.[.Vm 0080 b1 5e 27 dc 83 9c 6e 27 d9 cf 46 58 5c 75 d6 3a .^'...n'..FX\u.: 0090 71 39 bc 06 e3 40 1b 0a e3 08 a5 05 57 cd 6f 88 [email protected]. 00a0 b0 7d fa 31 95 f7 c6 af 90 5e 28 6e 15 09 61 17 .}.1.....^(n..a. 00b0 33 68 5e f8 08 0c 96 58 89 dd 78 fc 23 1a de 6f 3h^....X..x.#..o 00c0 55 aa 38 72 45 c2 12 c7 7a 52 a5 d6 b1 43 6a 95 U.8rE...zR...Cj. 00d0 07 28 3d d3 44 48 9d f7 94 48 65 f6 cc ed 1d 41 .(=.DH...He....A 00e0 95 8b f0 c4 1a 08 46 43 0e 33 73 11 76 9d 64 8d ......FC.3s.v.d. 00f0 a6 d0 e0 aa 54 ca 49 98 6f ff 78 98 4b b5 e3 26 ....T.I.o.x.K..& 0100 e2 3b 64 a8 2c af 36 6a 1b af 64 31 8d c0 2f ed .;d.,.6j..d1../. 0110 6d 4b 99 27 23 98 73 a5 9d 4b 88 db 7d 2b 8f 46 mK.'#.s..K..}+.F 0120 83 fd 6a dc 7e f1 f8 a7 44 ab ab 21 90 67 41 98 ..j.~...D..!.gA. 0130 10 5d e8 60 47 18 b9 7d fd 98 96 db 98 e3 1d e8 .].`G..}........ 0140 b9 63 1e d6 12 39 e5 ba 80 e1 11 58 53 5c 61 98 .c...9.....XS\a. 0150 92 17 f7 8d c2 e2 f9 1a 47 a6 51 86 f6 ad 0f 03 ........G.Q..... 0160 63 2b e9 be 1c b2 75 be 16 0c 2b 58 12 25 10 6e c+....u...+X.%.n 0170 0b ad a5 76 cc 7d 9e 12 a3 4e 20 ab 49 10 91 4d ...v.}...N .I..M 0180 b1 ba a7 a8 8f cf 05 a0 91 d3 12 6c 49 d2 97 33 ...........lI..3 0190 7a b5 16 f4 23 3b 9c 5a eb 03 9a 72 39 3d 7b cb z...#;.Z...r9={. 01a0 37 f0 bb 9f 8d b1 dd d2 40 e9 b2 5a 16 30 34 f8 [email protected]. 01b0 96 32 e1 42 87 7e 48 76 22 92 d1 16 84 5e 3e d1 .2.B.~Hv"....^>. 01c0 8f c0 e8 cf 3d 53 2f f7 c4 a4 dd 5a f9 02 a0 85 ....=S/....Z.... 01d0 de ae cd be ff cc e8 22 4b f2 a4 f5 47 24 46 01 ......."K...G$F. 01e0 da 8c d8 33 d1 d4 7b 5c f5 5c 81 ed d1 e1 ec fb ...3..{\.\...... 01f0 e6 b0 6b d7 15 bb f3 3d ba b5 cc 49 a2 11 17 5a ..k....=...I...Z 0200 d9 4f 9a 1f 48 90 e4 77 03 a3 31 cb aa 3f 1e d8 .O..H..w..1..?.. 0210 ce 2c 32 01 92 d4 c5 15 bc 25 88 8d 69 4b f8 d8 .,2......%..iK.. 0220 96 74 2d 0f e2 47 12 a9 45 f8 b3 55 6a de 6b e5 .t-..G..E..Uj.k. 0230 02 fa fb ab 1a 8d 23 98 58 d1 bf 81 66 33 de 80 ......#.X...f3.. 0240 c7 20 df 61 53 30 10 e3 c8 a7 2e 1c 69 c1 11 9f . .aS0......i... 0250 8f 1d 9a 9f ca 02 d0 52 ac af cf 72 b8 5e d4 d5 .......R...r.^.. 0260 b9 bf be 58 2b df 9d 2f 49 dd e9 77 fc 87 08 60 ...X+../I..w...` 0270 0f 09 cb 13 f3 54 93 38 f6 59 32 b4 02 cf c4 24 .....T.8.Y2....$ 0280 27 bf ba 6c fb ad e3 83 6e 30 92 d8 29 f9 1c d4 '..l....n0..)... 0290 bb 29 4f a0 b9 2c 3f 5d 21 1f 41 33 d9 ae b6 4f .)O..,?]!.A3...O 02a0 6d c6 7a 9d 7e 6c 49 c4 1b aa 79 61 9b 84 43 30 m.z.~lI...ya..C0 02b0 4f e7 2d c8 b1 86 26 52 6b 69 68 90 23 89 42 d6 O.-...&Rkih.#.B. 02c0 14 80 a3 76 f3 27 ac 8a f5 46 7d 33 ad be a5 4b ...v.'...F}3...K 02d0 c8 a9 a2 08 7a d9 5d 15 ac e6 83 2a b8 d1 1f 15 ....z.]....*.... 02e0 f7 3f ad bd 43 4b 7c aa 26 40 a3 6c bb b5 b0 39 .?..CK|.&@.l...9 02f0 33 8b 16 d9 54 a5 b6 45 9b de 16 f7 29 7c ee 8c 3...T..E....)|.. 0300 8e 00 10 2b d6 94 5f dd aa 7b f3 75 2d 99 54 c1 ...+.._..{.u-.T. 0310 93 c1 24 5b 36 7c 71 8d f2 d7 71 24 fe 23 c7 3b ..$[6|q...q$.#.; 0320 ad 36 ed 71 cd 5d 94 44 5a 45 b0 c7 2f cb 29 a9 .6.q.].DZE../.). 0330 1e bb 0c 18 12 5b 72 2f 1a f3 70 c3 b1 cb 75 61 .....[r/..p...ua 0340 e3 34 6c 86 99 39 f5 2d 61 e6 37 02 a1 5f 03 25 .4l..9.-a.7.._.% 0350 98 6e af 2a 11 18 3a 5b 7b d8 b6 ea b2 90 b5 38 .n.*..:[{......8 0360 8e 72 c3 c7 ae ec 2b 3a 3a 23 d7 06 3f 7d c1 8e .r....+::#..?}.. 0370 86 9b 10 26 6a 26 bb 55 bd f7 15 04 58 9a 13 2a ...&j&.U....X..* 0380 c4 9a 2e d3 a8 5b be 1f 0d 25 e6 a3 9a a2 e5 ec .....[...%...... 0390 0c 0c b8 6c 04 fa 31 34 09 6b 25 b1 38 0c 78 d4 ...l..14.k%.8.x. 03a0 de 9d 51 e7 c9 f7 b3 86 0d b7 23 06 ab 93 16 d6 ..Q.......#..... 03b0 d5 bd c9 8e 38 f5 26 27 07 70 70 1e 13 b5 f6 a1 ....8.&'.pp..... 03c0 47 17 bf 99 e9 aa 1d 29 c2 ab c2 4e 1e 49 1a 2e G......)...N.I.. 03d0 0e 4d d3 b5 c4 8d 14 e5 85 60 a0 da dc 49 0a b8 .M.......`...I.. 03e0 71 79 fe 38 da 3c 32 73 b9 ae 4d ed e8 d5 0f dc qy.8.<2s..M..... 03f0 1b ea ab 64 f4 c7 a6 8f 37 c0 3d b0 9e 2e 2e f2 ...d....7.=..... 0400 3d d3 ea 38 60 98 e0 b5 a5 b8 bf df 1b 02 05 27 =..8`..........' 0410 33 e2 ab 23 96 1d 3f 78 16 d1 57 82 dd 0b 8f 01 3..#..?x..W..... 0420 f1 08 3a cb 22 e8 80 ba 0a ae ff 4f f6 5d b0 40 ..:."......O.].@ 0430 bb 02 11 be 09 e9 b2 37 21 62 b6 76 18 2a 08 29 .......7!b.v.*.) 0440 a0 8a 57 a0 e6 aa 21 ab 9a d3 9f a4 7d 04 58 a1 ..W...!.....}.X. 0450 d6 62 50 b8 45 af f5 a0 c7 34 de 00 99 85 70 8f .bP.E....4....p. 0460 10 54 84 ba 42 8e 40 cd e3 a4 38 7a 9a 30 27 68 [email protected]'h 0470 34 6e 51 32 a0 ae 91 24 ad 0f 70 69 ed d1 d2 48 4nQ2...$..pi...H 0480 3a 75 9a cc 17 eb e0 53 1e 01 9b 63 75 81 46 99 :u.....S...cu.F. 0490 df e8 c6 ed 28 a5 4c ca a5 be c7 f3 66 e9 5a 40 ....(.L.....f.Z@ 04a0 77 37 ab 99 c6 41 56 68 bc 21 f9 9a 08 36 27 8d w7...AVh.!...6'. 04b0 ca 17 68 d3 cc 6f 45 d7 fb b8 50 28 28 a5 a1 31 ..h..oE...P((..1 04c0 eb 4b 39 2f e3 64 18 56 a9 de e9 82 3b ec 74 24 .K9/.d.V....;.t$ 04d0 d9 e3 60 69 da b9 07 72 29 db 00 5b 84 1a 68 f7 ..`i...r)..[..h. 04e0 20 d7 21 e8 56 f6 94 ab a2 c9 7d b4 73 da 3f 3d .!.V.....}.s.?= 04f0 b8 83 d0 ba 1f 87 ae bd a1 8a df a0 1c b7 87 dd ................ 0500 3f 75 60 23 c8 25 91 b1 2b d0 5e 62 f7 8f bd bc ?u`#.%..+.^b.... 0510 f9 e5 e1 dc 47 82 21 27 5f 61 5e ca e0 58 30 65 ....G.!'_a^..X0e 0520 48 fa 8d 96 6b 5a a2 f0 cc 61 49 73 17 76 0b 06 H...kZ...aIs.v.. 0530 d2 7d fc e7 2f 60 5d 24 61 0e 01 03 30 ba b3 f3 .}../`]$a...0... 0540 e3 3f 21 a8 ae 8f 66 61 fe 9e ff bf ec 7e b3 b8 .?!...fa.....~.. 0550 ab cf d4 99 06 f3 f5 7e b1 1a 2f 18 b8 a2 e8 fe .......~../..... 0560 a7 d7 2f 22 01 be b7 72 66 f6 87 13 6e fb e2 21 ../"...rf...n..! 0570 05 16 5d 5c 07 2d e1 d4 a3 2b 40 23 33 fe f1 6c ..]\.-...+@#3..l 0580 85 92 b9 ed a6 9b c2 42 b3 33 96 37 df 30 aa 1b .......B.3.7.0.. 0590 da 0b 95 50 f8 4d 7d 77 99 21 31 db e3 36 fc e4 ...P.M}w.!1..6.. 05a0 09 85 5d b1 24 da 0b bd ..].$... No. Time Source Destination Protocol Length Info 21808 252.498714 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=274461 Ack=5033 Win=1002 Len=1448 TSval=598371 TSecr=730008 Frame 21808: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 274461, Ack: 5033, Len: 1448 Data (1448 bytes) 0000 b4 cc af 04 a3 32 05 d4 4f 7f 85 fc fb 40 12 52 [email protected] 0010 09 ba bd c0 e0 a0 17 37 03 f2 f4 97 72 0b b4 b7 .......7....r... 0020 90 41 c8 00 e1 5f b2 2a a4 a1 8c d5 d1 5f 22 e8 .A..._.*....._". 0030 7b 76 27 bd 98 fe 04 1c 4b 73 57 ba 95 87 14 59 {v'.....KsW....Y 0040 7c 2b 7e d5 cd 5d 61 03 51 74 a8 e2 63 3d 39 2d |+~..]a.Qt..c=9- 0050 a6 06 13 04 0b 0f 97 1e bd 79 cf d0 e2 90 56 03 .........y....V. 0060 b8 01 4f 45 23 9a 5d fa 4a b2 2d bd 49 f7 ef a4 ..OE#.].J.-.I... 0070 9e 55 66 2c 31 f5 09 2c 3b 95 3b fd 52 62 37 d0 .Uf,1..,;.;.Rb7. 0080 db d0 b8 48 9c 62 73 10 78 94 6a 5d bf 17 b2 d6 ...H.bs.x.j].... 0090 5c 7e 71 af ce a4 23 ae 27 cd 35 19 6d 4f dc b2 \~q...#.'.5.mO.. 00a0 c2 d4 b9 29 e7 07 12 8f b0 22 08 fb 12 86 69 1c ...)....."....i. 00b0 66 18 b3 99 f6 df 7b dd c0 93 f5 04 ff 4d 87 60 f.....{......M.` 00c0 80 59 38 3c 9e f4 60 ce 58 e6 eb 4c ce b4 87 d4 .Y8<..`.X..L.... 00d0 3c d0 67 63 7d 4b e0 b2 5a 49 ce d2 29 96 6c 48 <.gc}K..ZI..).lH 00e0 12 62 f0 ea 4f bb 99 3c 07 6a 29 b0 96 87 d3 bf .b..O..<.j)..... 00f0 80 4e 25 b1 0c a2 a8 53 d3 e4 d1 f3 78 2e eb 19 .N%....S....x... 0100 57 73 eb fc 31 42 ce 6c fd 9e 2b 7f 25 d2 b8 5b Ws..1B.l..+.%..[ 0110 dd 8d a4 12 4f 21 d6 8a bc ca be 11 23 6c bc 8d ....O!......#l.. 0120 5c 32 88 c7 cb 5a fc 1a 1b 42 2b ed c6 77 73 55 \2...Z...B+..wsU 0130 aa b4 9e 57 82 40 c2 4e 09 c6 f4 ba 1d 26 55 eb [email protected].....&U. 0140 2d f3 aa ec e0 a0 c8 ef a6 0f 3c f6 16 87 b3 c9 -.........<..... 0150 f5 9a 21 cc d9 17 ed d1 5d 2f a6 c1 d2 1f 18 88 ..!.....]/...... 0160 5b 6b 53 7f 73 ae c7 b7 2f e2 fd 0b 04 e2 20 1c [kS.s.../..... . 0170 36 ac db b4 ba 6b 84 c3 45 b1 fa 49 20 77 ed b2 6....k..E..I w.. 0180 8d b6 df 3d 04 49 67 2c c3 93 ed 3c d9 d9 30 51 ...=.Ig,...<..0Q 0190 11 e1 a4 dc e1 00 56 28 14 96 88 80 90 10 c4 f9 ......V(........ 01a0 5a eb 6c 88 0e da 35 9e 29 9d 8f 02 a3 99 94 06 Z.l...5.)....... 01b0 24 d2 b2 c4 0c f7 7b 10 1e 64 82 2c a5 6c 51 81 $.....{..d.,.lQ. 01c0 e5 d1 9b ed cc ad af 1a 90 0d 15 59 e9 91 92 bf ...........Y.... 01d0 0d 93 66 93 8b 54 ca d3 cf 1b dd 41 06 0a 46 dc ..f..T.....A..F. 01e0 9d f9 62 1b 8b 18 60 f4 50 00 2c 9e e7 2d 4a 02 ..b...`.P.,..-J. 01f0 ad dd 55 a2 35 0a a5 2b 4e bb 18 3a 91 41 33 9d ..U.5..+N..:.A3. 0200 2d 1d d7 a9 8d 64 31 ce a6 2a c5 74 ab d6 cb a0 -....d1..*.t.... 0210 c5 f6 20 d2 23 3e 2c bb 38 c0 b0 2b b2 37 ee b3 .. .#>,.8..+.7.. 0220 2d 54 42 2f 70 fa fa 5b 4a 74 69 7e 1b 90 dc 6e -TB/p..[Jti~...n 0230 ca 6f a8 35 88 19 b4 5a de fd 4d 5b f9 51 9d 8f .o.5...Z..M[.Q.. 0240 ac b2 87 d9 e2 0d 68 a4 0e be 21 94 fa db 10 cf ......h...!..... 0250 3b 7b a6 b5 cd 37 ac 2f ec 8e d1 28 14 69 83 d3 ;{...7./...(.i.. 0260 01 d0 60 8b 6f bc 9f 77 61 d9 39 50 aa ab 92 a7 ..`.o..wa.9P.... 0270 5c 44 8b 44 26 69 ba 00 fa 21 a4 c2 13 43 b8 8e \D.D&i...!...C.. 0280 98 3c 08 db f1 f3 03 88 04 9a 21 4c 3e eb 77 5e .<........!L>.w^ 0290 5c aa 09 07 0c 8a 95 38 ab 11 db d6 df b1 45 2a \......8......E* 02a0 b5 e0 a7 4b 4f 2b ec b3 57 5d 7f 86 da c3 ca b0 ...KO+..W]...... 02b0 49 b5 e4 fe 88 58 a2 6d 1b bd 72 56 cc 78 de 54 I....X.m..rV.x.T 02c0 2a c9 69 d7 c2 0a ea 4b dd 57 c8 2a 82 1d 7f a4 *.i....K.W.*.... 02d0 4b ed b2 2a 85 d6 67 8d af f4 37 7a 76 63 9a b8 K..*..g...7zvc.. 02e0 eb 71 1e 72 ea a4 d1 b1 cd d6 d5 b2 06 83 f8 0a .q.r............ 02f0 2d 09 ce d8 dc e4 6b 20 ed d1 4e e8 2e 10 9b 01 -.....k ..N..... 0300 20 e4 5c 44 ef ad 52 85 43 a7 74 f2 b1 ab ce 26 .\D..R.C.t....& 0310 46 63 4e 78 98 f9 d1 53 91 84 ba ee 45 70 1a 49 FcNx...S....Ep.I 0320 18 6e f2 b0 02 f5 d6 39 7b ce a2 5e 3a b0 53 de .n.....9{..^:.S. 0330 0f a1 c9 a0 34 99 56 4a d5 e1 50 94 36 fa 98 f1 ....4.VJ..P.6... 0340 32 20 78 c4 c1 69 b7 6e e7 da 22 62 8d 36 24 ba 2 x..i.n.."b.6$. 0350 3e c1 e7 88 d5 92 89 85 aa f3 6a 13 5b a3 81 39 >.........j.[..9 0360 ab 1b f7 e9 72 61 fc 57 4d 4a fc 67 ad f0 ea 1b ....ra.WMJ.g.... 0370 a3 89 a0 b0 52 de 3d 63 64 fb 43 29 3a 75 f1 34 ....R.=cd.C):u.4 0380 0b 5f 25 28 ff ad 4e 26 67 c5 12 9f 69 6e a8 81 ._%(..N&g...in.. 0390 7a 21 a4 23 ff ba bc 0c ae b5 e3 fd 3e 8e 3c b9 z!.#........>.<. 03a0 7d a5 5b 7b 4e d3 f6 fe 70 85 ec 39 aa 73 c5 80 }.[{N...p..9.s.. 03b0 50 ae dc 67 57 c4 e6 88 54 38 02 58 12 82 ac 85 P..gW...T8.X.... 03c0 37 3b b7 4a 24 f7 81 e1 8c c7 9e 1d be 06 71 97 7;.J$.........q. 03d0 8d 82 f6 c9 5b 9a d3 18 da 9e ce c2 66 25 48 31 ....[.......f%H1 03e0 7b c3 c6 43 a3 6c 18 12 fa 8a 68 c9 e3 b9 20 4d {..C.l....h... M 03f0 6d e4 e0 90 e4 b6 3f d4 9a 64 fc 0b 01 27 03 e6 m.....?..d...'.. 0400 0a 10 78 b7 7d ff a1 f9 39 4e 16 d6 98 b0 59 00 ..x.}...9N....Y. 0410 92 cc 28 c2 4e 65 2b d3 f5 35 85 03 ab b0 82 2c ..(.Ne+..5....., 0420 70 e3 c1 01 c0 b9 81 02 63 f1 52 1e 55 c2 55 ee p.......c.R.U.U. 0430 4e 91 c4 21 15 07 98 f9 70 47 2d 8a ec 4d 37 81 N..!....pG-..M7. 0440 2c a3 8d 76 f4 1c 11 02 d1 f8 b0 4c 2e 1c b8 59 ,..v.......L...Y 0450 6a bb 55 dc ea ab b5 50 01 ee 13 d2 57 7d 67 fc j.U....P....W}g. 0460 41 34 35 1a 23 c9 18 6d 9f 5a 95 cd 4f 15 7b 26 A45.#..m.Z..O.{& 0470 fa b4 60 75 58 65 83 20 41 08 08 c7 18 cf bf 01 ..`uXe. A....... 0480 09 63 af 80 64 a7 1f 02 ba 60 85 04 b3 96 f9 fe .c..d....`...... 0490 39 e4 4e a1 97 fd df 36 55 89 d6 00 40 07 76 47 [email protected] 04a0 09 f6 84 34 50 7b dd 53 07 1f 70 71 cb 09 a9 82 ...4P{.S..pq.... 04b0 75 5a 6d 63 3c a9 cd 7d 51 fa f7 44 57 72 6e 83 uZmc<..}Q..DWrn. 04c0 08 61 fd ae 4a c7 ca 68 ca 0d 65 b8 21 64 de 53 .a..J..h..e.!d.S 04d0 a6 e8 bc 6b e8 18 04 47 3f 92 a0 bf ac b6 66 c3 ...k...G?.....f. 04e0 60 2e 5a 46 90 2f be 15 2d 92 98 93 47 cf 8a e7 `.ZF./..-...G... 04f0 cd eb 99 24 a7 3e af 74 04 e7 28 66 c0 a2 48 b5 ...$.>.t..(f..H. 0500 9b b2 5f 32 cb d4 9b dc 89 30 e6 23 04 91 46 c9 .._2.....0.#..F. 0510 f1 3c e5 41 3c 33 e0 36 12 be b9 78 a3 cd 20 9d .<.A<3.6...x.. . 0520 35 28 ae c5 42 3a 35 8a b4 56 41 23 eb b4 62 43 5(..B:5..VA#..bC 0530 6b 12 12 11 ee 04 42 8d 6b bb 06 be d6 7a 41 f8 k.....B.k....zA. 0540 1e f8 44 bc 40 41 8a e8 d1 54 d2 44 cc 76 27 a9 [email protected]'. 0550 fe f7 e8 7e 7d d3 e5 7e 9e 12 c0 39 36 61 96 d0 ...~}..~...96a.. 0560 c3 5b 64 88 d1 47 cd a3 c8 c7 62 ed c4 e5 4f 70 .[d..G....b...Op 0570 9f 05 1f 51 c3 fa dc 4b 52 47 4e dc be 05 5b 28 ...Q...KRGN...[( 0580 2f a4 db dc 04 43 30 00 bc c2 45 36 bb 2c d3 f9 /....C0...E6.,.. 0590 08 a8 2b 45 aa 69 a4 24 3f 89 3e 87 c0 96 6e d3 ..+E.i.$?.>...n. 05a0 8e e4 ae 70 41 4b 1b 5f ...pAK._ No. Time Source Destination Protocol Length Info 21809 252.498774 192.168.10.1 192.168.10.203 TCP 343 34433 > cds [PSH, ACK] Seq=275909 Ack=5033 Win=1002 Len=277 TSval=598371 TSecr=730008 Frame 21809: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 275909, Ack: 5033, Len: 277 Data (277 bytes) 0000 b0 18 9e 03 b6 51 4a 9a 15 8f 1c 8b 75 12 10 23 .....QJ.....u..# 0010 bf e6 fd d4 7f 2d c8 89 77 85 4e ba cd 09 a5 55 .....-..w.N....U 0020 27 cb e8 b1 44 a3 59 92 c4 5e 9e 8d 1e fe f2 22 '...D.Y..^....." 0030 09 b0 03 e2 50 1f da dc b3 38 52 a3 6b 47 84 f4 ....P....8R.kG.. 0040 7a f8 2b b4 e2 81 a2 38 eb 5e 2f 1a 02 50 4f 10 z.+....8.^/..PO. 0050 ab 70 1d dc 66 81 46 60 9c ac 68 93 41 ed 8f 22 .p..f.F`..h.A.." 0060 94 ec 23 15 4f 0d 9f eb 3d a1 d1 6e d4 d5 ec 9b ..#.O...=..n.... 0070 4b 7f bf b4 a5 3d 08 76 7d bf 68 65 63 32 db 31 K....=.v}.hec2.1 0080 79 46 3c 7b d4 96 52 2d 83 75 ad 96 83 5c d2 be yF<{..R-.u...\.. 0090 bf c5 d3 58 53 0d 75 de d8 94 63 6e ab 2c 4a e2 ...XS.u...cn.,J. 00a0 79 43 95 b4 20 95 91 68 c5 a7 c7 bf 44 ce ab b7 yC.. ..h....D... 00b0 61 7f 7c b6 6d 61 8c 9e e8 6d 6b a1 94 f0 af 9c a.|.ma...mk..... 00c0 76 9b 00 5b de 95 32 05 78 fd 7a 0c 5d 91 b6 db v..[..2.x.z.]... 00d0 20 a6 ea 12 5e 4d d0 9d a8 c6 2c 72 d4 96 97 a5 ...^M....,r.... 00e0 f9 5d 5f a1 51 e6 50 23 f2 6f 8a 71 e4 b8 ca d9 .]_.Q.P#.o.q.... 00f0 d4 b2 d0 09 21 fe fe fc e6 06 6f 3e 49 33 13 d0 ....!.....o>I3.. 0100 96 a0 6d 29 94 85 ed ae 51 76 f6 26 f4 a2 90 ff ..m)....Qv.&.... 0110 9d 5c ad 80 44 .\..D No. Time Source Destination Protocol Length Info 21810 252.498832 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=5033 Ack=274461 Win=65535 Len=0 TSval=730008 TSecr=598371 Frame 21810: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5033, Ack: 274461, Len: 0 No. Time Source Destination Protocol Length Info 21811 252.498881 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=5033 Ack=276186 Win=65535 Len=0 TSval=730008 TSecr=598371 Frame 21811: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5033, Ack: 276186, Len: 0 No. Time Source Destination Protocol Length Info 21812 252.498952 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1234 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 21812: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1234 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 21813 252.499017 192.168.10.1 192.168.10.203 TCP 903 34433 > cds [PSH, ACK] Seq=276186 Ack=5033 Win=1002 Len=837 TSval=598371 TSecr=730008 Frame 21813: 903 bytes on wire (7224 bits), 903 bytes captured (7224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 276186, Ack: 5033, Len: 837 Data (837 bytes) 0000 17 03 01 03 40 09 e8 cd 14 48 35 1d 32 9d c0 69 [email protected] 0010 80 05 b8 9a fe 29 b6 d2 db 7d 73 f8 1a aa f3 b7 .....)...}s..... 0020 25 06 c9 44 bb ba f6 e7 9a b4 d5 fa 19 d5 e6 4d %..D...........M 0030 7e 32 b8 70 65 fc 5f 2c 8e 07 38 ba 9d fd 61 1f ~2.pe._,..8...a. 0040 38 9c eb de 43 9b 75 5d 63 90 1d 72 47 5f ba a9 8...C.u]c..rG_.. 0050 03 98 b2 2a 72 c6 dd f2 70 c8 e3 0a 18 48 8f 77 ...*r...p....H.w 0060 83 fb 99 af 12 cb 4f a5 ca de 4d da 3b c2 90 c0 ......O...M.;... 0070 59 2b 9f ef b6 8f 61 c1 73 61 3f 85 b9 93 fa 3d Y+....a.sa?....= 0080 43 42 ee b6 d3 98 81 eb 2f 03 9d a9 d3 cf 38 c0 CB....../.....8. 0090 99 f1 60 3d 7b e3 f9 ea 1c 8e 79 31 f2 80 19 a9 ..`={.....y1.... 00a0 33 0f 45 d4 bb d0 c7 4c 0c 1c 4e bf 8d dc 4b 09 3.E....L..N...K. 00b0 e4 e8 2a 66 92 39 14 d9 32 5f ff e4 60 5e a5 71 ..*f.9..2_..`^.q 00c0 d8 23 2c 3c ec c5 7f ab 3e 3b d6 1a f6 f6 03 0e .#,<....>;...... 00d0 8b 8f cd 99 38 12 dd 65 9c a9 92 9c 68 d6 08 32 ....8..e....h..2 00e0 29 17 8c a6 4d 4f 66 e9 97 63 ea 23 0e 3c 10 e1 )...MOf..c.#.<.. 00f0 15 ca 36 dd ad 00 af b9 30 87 8a a1 ae af 8b 74 ..6.....0......t 0100 6a a3 2f 41 04 cd 7d 5b 95 6d 11 07 c5 58 71 25 j./A..}[.m...Xq% 0110 db 07 d1 12 f8 0c c6 a4 17 c6 18 ee 5f 36 11 25 ............_6.% 0120 f0 be 5d 14 aa b5 40 ff bf 24 b7 78 3f d3 9e 93 ..]...@..$.x?... 0130 d4 aa 6c f5 ed 98 b7 f7 d5 58 3f d9 4d 05 8e 0d ..l......X?.M... 0140 ae f4 f6 27 b7 75 e7 26 51 35 43 e2 52 0f c3 ec ...'.u.&Q5C.R... 0150 f8 47 5c 08 9b 23 8c 6e f7 26 6d 52 b1 75 79 0f .G\..#.n.&mR.uy. 0160 44 4a de 79 55 97 ca 85 73 00 f8 d3 b5 43 a2 de DJ.yU...s....C.. 0170 a6 4c 5a e7 fc 7f 2b 3c 3e 71 68 85 10 d1 9d 2d .LZ...+<>qh....- 0180 a9 5f cc b6 c1 b0 4d 8a b3 c9 4e fa 76 f5 97 0a ._....M...N.v... 0190 5a 2c fe 78 53 e2 35 c2 58 a8 1a aa 6c 56 37 62 Z,.xS.5.X...lV7b 01a0 18 7e eb 51 bb 55 f8 40 0f e2 25 93 db 65 6f 08 .~.Q.U.@..%..eo. 01b0 a3 b9 e2 2b d5 63 00 38 23 4b 21 62 c6 99 39 62 ...+.c.8#K!b..9b 01c0 56 eb 13 c7 bd 2c 2a e2 f0 51 a4 d1 ed e9 39 29 V....,*..Q....9) 01d0 1f 9c d6 4b 02 2d a9 dc 1a 98 54 f6 cd 65 9e 62 ...K.-....T..e.b 01e0 ab ab aa c5 45 02 7b df b8 12 93 2c ee cf e0 71 ....E.{....,...q 01f0 1b 12 d2 97 a6 a1 8d 4b 8c ba f3 37 e4 0e 5f 78 .......K...7.._x 0200 2d c1 3f be 93 d2 04 a8 63 f3 d5 8e 59 e1 79 df -.?.....c...Y.y. 0210 47 d4 85 bb ac 30 28 6b 68 55 1f 9c fa ae 14 24 G....0(khU.....$ 0220 b5 99 ec 7e a6 37 a4 91 13 1d 33 f1 ae ea d6 5f ...~.7....3...._ 0230 fb a5 8e 12 ee 32 e2 0c 08 fa 16 72 97 fe 5e 76 .....2.....r..^v 0240 20 38 9a 75 11 87 72 be 92 9f bf a2 82 8f a7 19 8.u..r......... 0250 4c 39 de 10 a5 d3 3b 85 dd b9 9f 90 fe bc 6a 2d L9....;.......j- 0260 7b e1 89 bc ab 01 07 89 96 aa b4 4b 71 28 df c1 {..........Kq(.. 0270 02 34 ff 3d 2f f2 ea a1 d5 55 d1 1a a4 50 cd 72 .4.=/....U...P.r 0280 ee c5 bd 8a d7 9a 02 07 48 f3 57 89 de 96 74 0b ........H.W...t. 0290 8c a4 0c 8c 48 01 0d 7c 5c 4d 1d 9d 19 2b 11 3f ....H..|\M...+.? 02a0 5d fd fc af 42 b8 fc ac d6 e9 47 c7 34 68 24 06 ]...B.....G.4h$. 02b0 01 0f b8 c0 5f e6 d0 0f 87 62 01 6f 07 9c 67 2b ...._....b.o..g+ 02c0 2b 36 56 27 d9 89 00 43 58 9a 71 55 62 7c 75 a4 +6V'...CX.qUb|u. 02d0 65 dc 21 f3 04 2f 45 c4 13 35 95 0e e9 58 c6 cd e.!../E..5...X.. 02e0 1a 72 d1 f2 a4 1e 9e 8a 87 5a a4 11 da f3 4e 98 .r.......Z....N. 02f0 5e fd 72 22 f4 74 07 f8 ca 1f 59 0e bc f9 c1 b9 ^.r".t....Y..... 0300 c6 6a d4 7e dd 99 9d 18 97 3a 64 04 bf 98 c5 8a .j.~.....:d..... 0310 89 46 46 ef 1d 8d 8d 16 03 a6 40 4d b2 7f 4b ec [email protected]. 0320 83 73 fa b4 29 02 1b 52 65 12 fd 7f 17 87 f9 57 .s..)..Re......W 0330 5a 4d 6f 4a 45 22 27 30 ca 43 48 49 92 49 6f 54 ZMoJE"'0.CHI.IoT 0340 40 08 87 21 60 @..!` No. Time Source Destination Protocol Length Info 21814 252.499084 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:48:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1234 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 21814: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1234 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 21815 252.499155 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:48:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1234 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 21815: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1234 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 21816 252.499234 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=277023 Ack=5033 Win=1002 Len=1448 TSval=598372 TSecr=730008 Frame 21816: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 277023, Ack: 5033, Len: 1448 Data (1448 bytes) 0000 17 03 01 03 40 20 f3 2a 5e 39 de 81 c4 ee fc cf ....@ .*^9...... 0010 a3 8c d2 1e d9 af 9d a1 a8 0f c6 04 63 12 68 43 ............c.hC 0020 98 1f 75 38 c1 6f 00 71 ee ac b2 36 42 de 9e 10 ..u8.o.q...6B... 0030 b3 77 56 7d ba ab 75 8e e7 da 4e 2d 49 b3 ae e6 .wV}..u...N-I... 0040 b3 d2 55 9c 11 bd c5 03 ff da a2 5f 06 1e 8a 84 ..U........_.... 0050 c0 c9 fc e6 d6 d6 14 21 3d 90 da fe 78 b9 77 4a .......!=...x.wJ 0060 e4 67 ea c1 ab 2c f0 13 6c 59 56 a8 0d 85 3d 9a .g...,..lYV...=. 0070 63 38 f7 da 18 59 46 9e 18 a6 4f ba 76 7c f2 f0 c8...YF...O.v|.. 0080 9e 26 b4 22 dd 90 73 31 d1 2b b2 9a 7c 09 a8 a9 .&."..s1.+..|... 0090 c8 a9 73 4d 6e 29 80 07 10 2b 9a 32 08 d9 7a 4d ..sMn)...+.2..zM 00a0 71 a6 18 bd 20 ff 9e 3b 46 20 53 45 1e 77 25 52 q... ..;F SE.w%R 00b0 71 68 cd eb cc 9d b1 d6 00 9c f7 e0 f4 93 d9 00 qh.............. 00c0 33 27 a2 78 5f 82 c0 79 68 ab 51 35 fa 2d 25 bf 3'.x_..yh.Q5.-%. 00d0 a0 b9 d2 e8 38 80 70 ab a0 41 a8 1d 04 5c 46 f7 ....8.p..A...\F. 00e0 b7 6e e1 fd d8 fa c7 89 b3 34 2a 70 3b 9d 3a 26 .n.......4*p;.:& 00f0 65 97 e5 34 11 76 e9 9f aa 17 6a 14 e3 76 a4 fb e..4.v....j..v.. 0100 8a f0 a8 7b f1 3c 27 c7 21 21 7e 77 ce 3f 04 7b ...{.<'.!!~w.?.{ 0110 22 ef 38 da 42 24 61 a1 2b 31 e4 e9 98 91 92 69 ".8.B$a.+1.....i 0120 82 eb c4 61 28 74 35 6c c4 e2 cf 5c 69 93 49 cf ...a(t5l...\i.I. 0130 5e b9 da ab 32 61 0b 82 3b b4 c2 ce 67 f5 c1 7e ^...2a..;...g..~ 0140 38 79 92 f9 d3 37 46 80 71 57 70 df 87 3a a3 94 8y...7F.qWp..:.. 0150 50 af 76 d7 97 aa cf 36 30 8a 10 bc d2 89 7f 51 P.v....60......Q 0160 94 d8 29 c6 af 57 66 d4 c1 0a 17 59 c7 2f 83 d0 ..)..Wf....Y./.. 0170 ab fb c5 52 3f 13 e4 84 0f 2b a9 76 c4 4d 47 a4 ...R?....+.v.MG. 0180 8d 9e 3e 82 d9 d5 57 e9 41 cf 3b dd 3e 16 87 7c ..>...W.A.;.>..| 0190 ec f9 f0 59 05 d4 c0 e0 b0 81 28 e1 54 80 03 d0 ...Y......(.T... 01a0 2f c7 2d 1e 4f 85 2c 73 59 7e 19 62 4f e6 8f 51 /.-.O.,sY~.bO..Q 01b0 38 65 dd 13 e9 1c 99 79 cf a7 45 ee 16 ea 34 97 8e.....y..E...4. 01c0 65 45 46 03 89 ca f7 59 0e c7 b2 2e 92 7e 68 f8 eEF....Y.....~h. 01d0 68 31 cc e4 ae 3a 58 41 2f 38 17 a6 f7 c8 cc 07 h1...:XA/8...... 01e0 9b 1e 53 e8 34 74 cd b3 71 40 8f 8d aa 8d f7 2a ..S.4t..q@.....* 01f0 1d 55 7f db cd cb d7 a0 e1 8a af e0 fc ef eb 8f .U.............. 0200 91 32 79 64 8a ac 1d 05 11 9b 79 58 dc 1d 94 79 .2yd......yX...y 0210 92 9d 94 ba b1 cf df f3 ef 8c d7 ce c7 59 1e 23 .............Y.# 0220 40 f4 43 4e 86 f7 9d 4a a9 49 bf 73 b3 8c e3 39 @.CN...J.I.s...9 0230 0e 9c c2 e6 28 9a c9 3d 68 37 03 7f 5c a1 cb ef ....(..=h7..\... 0240 c9 3a b4 e5 f6 94 db e4 30 b3 22 6d 1f 5d 6d aa .:......0."m.]m. 0250 6a 7d bb 3c c4 27 b0 59 a6 b5 eb 87 2f a1 dd a4 j}.<.'.Y..../... 0260 db db fb ce 96 dc 62 10 36 b0 bf 0d 15 26 bf 85 ......b.6....&.. 0270 b4 58 ae 66 77 9f 5e e4 ae 5e f1 a0 27 4f 01 88 .X.fw.^..^..'O.. 0280 9e c9 85 05 1e 09 96 87 c6 48 59 de c1 85 ba 2d .........HY....- 0290 d4 87 8c a3 d7 7a cb bd 6f 59 9f 97 60 72 96 7f .....z..oY..`r.. 02a0 16 87 9d 1a 13 c1 40 07 74 c5 ba 3f 86 ef 5f bf [email protected]..?.._. 02b0 76 63 3d 58 33 e5 48 df ff e6 d9 7e ad bb eb 97 vc=X3.H....~.... 02c0 1c bb 3d e6 1c 1b bf 83 e0 91 ec bc 79 aa 2a b7 ..=.........y.*. 02d0 11 a3 a8 21 a3 6a 02 aa 0b 20 0c db 7b 39 ff bd ...!.j... ..{9.. 02e0 43 86 97 ed ff e0 90 c5 75 0f 7a 87 a9 f8 90 d1 C.......u.z..... 02f0 8b ae da 7a ee 0e 2b e2 63 d5 d8 9a 6f 2d 9e 77 ...z..+.c...o-.w 0300 0d 90 e9 d1 62 37 20 72 87 8c d2 5e 5f e6 3b 07 ....b7 r...^_.;. 0310 dc d9 2a fb b6 6b 75 69 69 c6 d5 bd 0a d2 3b 1e ..*..kuii.....;. 0320 1c 70 d2 12 75 7f d7 1a 89 cb 83 dc 4f 99 54 a3 .p..u.......O.T. 0330 ae 72 cf 9f b7 78 6b 9f f6 a6 82 cd 05 79 99 79 .r...xk......y.y 0340 b7 ed 98 5e d6 17 03 01 03 50 b2 96 7b af 87 c7 ...^.....P..{... 0350 35 bd 27 34 37 a5 c2 14 a5 a7 a9 a0 3c 21 57 9f 5.'47.......<!W. 0360 30 b9 f6 f6 e2 8c 75 5c f3 c9 93 eb 42 0c cb 48 0.....u\....B..H 0370 11 49 45 35 04 32 d8 be 80 8e 95 72 a0 f9 46 c4 .IE5.2.....r..F. 0380 a1 3f 24 c6 4f 10 24 e8 08 42 74 d0 33 d4 be 73 .?$.O.$..Bt.3..s 0390 3f bb 47 dc 70 77 39 3c 73 d8 51 75 cc 3d dc c1 ?.G.pw9<s.Qu.=.. 03a0 5b 4b fa 9b 99 1c d6 fe d3 5f e0 04 ca 4f 9b 49 [K......._...O.I 03b0 62 95 b5 7a ed 23 05 57 78 93 4c 34 71 ff 78 c8 b..z.#.Wx.L4q.x. 03c0 fd 5f 23 7a 56 8b ef 35 7b ba 00 d1 aa df 5d 3b ._#zV..5{.....]; 03d0 0b 7a de a8 e3 b9 e2 47 45 6a 87 02 90 11 26 a9 .z.....GEj....&. 03e0 22 76 37 9f fa 8c 97 d4 98 fd 69 e2 35 6e 01 20 "v7.......i.5n. 03f0 bd d9 07 ca 6c bd 03 90 93 35 3d ae bc f4 e7 3f ....l....5=....? 0400 31 e2 10 34 17 40 46 66 f1 2f de f3 11 de 85 76 1..4.@Ff./.....v 0410 e6 6d 2d 68 aa b0 d8 b8 67 e9 f8 ac fa 00 75 c2 .m-h....g.....u. 0420 34 c7 14 e7 49 22 38 92 d3 81 94 37 15 e5 ba e2 4...I"8....7.... 0430 43 75 58 a7 6b 04 dc dc a6 cc 51 1c d0 b2 32 a6 CuX.k.....Q...2. 0440 55 7c c7 39 14 f6 11 e6 5c 6b 9c 3a 51 79 a9 cc U|.9....\k.:Qy.. 0450 80 26 8d 2b 7f 2e 62 d7 91 4d 23 b0 da e4 1d a8 .&.+..b..M#..... 0460 93 60 8c e1 2a 82 c4 e1 37 63 8a 83 07 a3 f9 ae .`..*...7c...... 0470 99 e9 cb 68 be ae b7 0e 1f 53 3e 85 fe 09 e7 7d ...h.....S>....} 0480 fa 80 a9 e5 dc e4 f1 25 ea 90 a7 ea 45 80 b3 cf .......%....E... 0490 00 80 ae 18 c3 0d ce 8a 89 e2 92 24 31 72 24 77 ...........$1r$w 04a0 95 45 ab 83 a9 7c 36 59 af b8 e5 de 87 b2 2e 8b .E...|6Y........ 04b0 38 df 66 da f5 c4 79 87 73 a4 6c fd 95 0d ed 3d 8.f...y.s.l....= 04c0 b9 63 22 aa e2 c0 f6 38 fd c5 fe 6e 90 15 08 8d .c"....8...n.... 04d0 5f b7 33 6d 48 a8 d9 5a 36 ab 15 70 18 d7 c1 4e _.3mH..Z6..p...N 04e0 f4 9a bd 4b 86 3d 40 1c f7 af 02 4f c1 a7 d5 e8 [email protected].... 04f0 cc ff 73 71 4a 61 67 ab cf 97 ec e1 3c 22 0a 12 ..sqJag.....<".. 0500 d0 d8 99 0b f8 3a 95 2b 7a dc 0c 85 cf d2 29 35 .....:.+z.....)5 0510 b3 ee da 45 00 86 0e 95 83 41 d6 a5 a7 cc 46 6d ...E.....A....Fm 0520 fe a3 c4 88 f3 8d f3 a2 5e 33 28 0d be 18 88 46 ........^3(....F 0530 18 8c 61 d2 4a d3 99 1b 66 26 aa 19 2f d7 70 f5 ..a.J...f&../.p. 0540 ef 62 69 37 42 e0 11 0e 81 f4 74 ec fc f2 cb e0 .bi7B.....t..... 0550 1e a7 dc 79 e8 3d 57 75 47 6d 9d 7b 6b ee 4e 91 ...y.=WuGm.{k.N. 0560 09 ce e0 86 cd 3e 79 5a 4d 02 51 eb 28 d1 e0 44 .....>yZM.Q.(..D 0570 d6 24 c2 e4 86 f2 8e 82 e6 ed 3f a7 c1 bc e5 d5 .$........?..... 0580 f8 ea 5c 4c d6 b0 65 cb 3d 74 7b 74 9d c3 e9 75 ..\L..e.=t{t...u 0590 4e e8 5a 64 72 8e ab 54 bf eb 9d ba 1e 6d 0d 07 N.Zdr..T.....m.. 05a0 85 f1 0d 7d ff 13 6e 7e ...}..n~ No. Time Source Destination Protocol Length Info 21817 252.499285 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=5033 Ack=278471 Win=65535 Len=0 TSval=730008 TSecr=598371 Frame 21817: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5033, Ack: 278471, Len: 0 No. Time Source Destination Protocol Length Info 21818 252.499341 192.168.10.1 192.168.10.203 TCP 308 34433 > cds [PSH, ACK] Seq=278471 Ack=5033 Win=1002 Len=242 TSval=598372 TSecr=730008 Frame 21818: 308 bytes on wire (2464 bits), 308 bytes captured (2464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 278471, Ack: 5033, Len: 242 Data (242 bytes) 0000 f1 77 a7 8b d1 62 ca 98 99 52 94 ca 2e 43 6b 3c .w...b...R...Ck< 0010 95 de cf a7 81 38 ac ae 34 b6 0e 2f 58 a4 8d 53 .....8..4../X..S 0020 68 c6 56 1a 60 7e 6c 88 69 09 23 c7 1f b2 4b 71 h.V.`~l.i.#...Kq 0030 ab e8 ec d3 5d df 7c 49 ad cb b8 fc 34 26 c0 6d ....].|I....4&.m 0040 ae ad 57 1f 97 1e 97 d6 49 f4 f2 07 88 9b 47 d2 ..W.....I.....G. 0050 d2 7b 48 4c 12 e0 ec eb f3 48 66 97 5f e9 43 86 .{HL.....Hf._.C. 0060 df a8 8c 34 f3 2a 0c 25 7b 77 66 6e 83 b1 69 8a ...4.*.%{wfn..i. 0070 65 c4 b7 df 0d ca b9 f2 2c f3 fe 7e 6c 3c b0 9b e.......,..~l<.. 0080 f7 e7 a7 97 1a 6b d4 c2 3c 5a 65 3d 90 b6 2c 57 .....k..<Ze=..,W 0090 5f 46 8a 42 5a fe 86 b7 8b 6b 65 83 8d 99 08 76 _F.BZ....ke....v 00a0 66 8a c9 62 89 a7 7a f2 48 52 10 0e f6 23 0c 14 f..b..z.HR...#.. 00b0 9c 05 36 d5 f7 29 f1 de b6 b4 c0 a9 01 41 c2 e6 ..6..).......A.. 00c0 72 a6 24 21 f0 e5 d5 9b a1 a9 45 d0 63 25 b1 3f r.$!......E.c%.? 00d0 ac 7b 74 cd d7 60 ba fc c7 0e 0c 11 53 82 9b bb .{t..`......S... 00e0 30 e6 18 07 48 d4 19 48 00 f3 b9 1c 2c d9 1e 97 0...H..H....,... 00f0 50 54 PT No. Time Source Destination Protocol Length Info 21819 252.499408 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1234 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 21819: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1234 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 21820 252.499472 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1234 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 21820: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1234 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 21821 252.499564 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=278713 Ack=5033 Win=1002 Len=1448 TSval=598372 TSecr=730008 Frame 21821: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 278713, Ack: 5033, Len: 1448 Data (1448 bytes) 0000 17 03 01 03 40 1d 7f 54 bb 78 71 29 9c 25 8b 3e [email protected]).%.> 0010 99 4a 2c 95 24 ad 55 08 c6 ab 8c 5d 6c 7f c2 dd .J,.$.U....]l... 0020 ec d5 90 c4 dd b1 16 00 68 7b 81 c5 3c c2 01 66 ........h{..<..f 0030 8a f7 a1 d6 d6 49 08 d4 2f b6 b8 04 b7 68 bd 89 .....I../....h.. 0040 64 b7 4c 07 00 9a 22 11 be 54 39 fe f6 68 5c bb d.L..."..T9..h\. 0050 06 f7 4f 83 94 3b 83 83 e5 9b 0b 7a 9d 38 ae 17 ..O..;.....z.8.. 0060 d3 5d b2 d3 d8 d1 b2 fc 58 df 09 2a e0 f6 9d a9 .]......X..*.... 0070 c5 d9 b7 b3 2d 18 66 1e 4d b1 d4 b7 f9 43 12 ec ....-.f.M....C.. 0080 96 39 b9 6c c9 55 8d a2 0d 4c 85 b6 6f 7c d9 19 .9.l.U...L..o|.. 0090 5d af 6e 58 90 b4 cf 9b b2 3e 1f 75 f4 db 8a 0a ].nX.....>.u.... 00a0 25 da a5 1b 28 08 ef c4 9f dd ce 8f d8 49 85 e8 %...(........I.. 00b0 c0 4a fe c5 14 94 63 6c cf 5a c2 88 27 5f e8 ac .J....cl.Z..'_.. 00c0 ad 2b 9c 36 ae 40 b7 ee ad 65 03 4e 04 66 3d 4f [email protected]=O 00d0 08 cc 45 69 08 b6 69 83 18 ea c2 97 4a 27 54 63 ..Ei..i.....J'Tc 00e0 a7 a9 bb be dd 80 37 47 57 f4 15 8c b4 80 6f 11 ......7GW.....o. 00f0 86 a1 1d 56 02 1b 54 2f 76 53 40 b0 59 2c 78 ac ...V..T/[email protected],x. 0100 bf 3e 88 ef 11 66 c1 1f bf 1c 52 b9 56 43 a5 03 .>...f....R.VC.. 0110 00 5d 71 94 19 03 c7 14 c3 8e 9a 09 ab 9c 98 21 .]q............! 0120 fa a9 c0 2a 8c 30 55 4d 5e a6 18 45 83 9f aa e8 ...*.0UM^..E.... 0130 d6 86 40 12 86 6b 86 04 98 7c 78 0e 13 ea 90 6f [email protected]...|x....o 0140 58 f0 12 f4 f9 b8 a0 50 15 b9 8d b4 b4 c7 f6 7f X......P........ 0150 ae 07 66 f5 ad 5b 18 d4 d7 8f 6c 1c f9 15 d4 9f ..f..[....l..... 0160 4b 92 a2 a2 84 f8 66 dd 00 49 73 13 47 76 c7 be K.....f..Is.Gv.. 0170 54 35 cc 76 50 d2 4c 06 fb 82 6b 18 bd 04 29 e3 T5.vP.L...k...). 0180 ee e7 f7 31 fa 62 4b bd ea d8 ea 68 b4 93 77 9d ...1.bK....h..w. 0190 91 29 a5 95 0c f1 70 3e 0e d0 f4 a0 bd fb a2 df .)....p>........ 01a0 ab 20 9c 2f 33 0c c7 11 ab d8 24 74 33 17 d4 30 . ./3.....$t3..0 01b0 2a b8 72 59 6e d1 5b 83 ab 6b 51 5d bf a0 a0 a2 *.rYn.[..kQ].... 01c0 f5 df d5 21 00 30 00 84 9e 34 01 cb 0f 0c 5b 89 ...!.0...4....[. 01d0 26 e9 6a 3a 29 a0 a3 18 52 72 1f 06 19 62 96 45 &.j:)...Rr...b.E 01e0 9e 3f 62 74 c6 c3 e5 92 b9 4c b3 82 c5 19 70 2f .?bt.....L....p/ 01f0 51 fc 6a 32 f6 8f a0 5a 9b d1 6a 24 6d 23 d0 4d Q.j2...Z..j$m#.M 0200 4c 3b 2e 61 d5 2d 5b c4 2f 2b 97 fa d2 84 9e 96 L;.a.-[./+...... 0210 0c 20 bd 3f a7 46 36 2a 80 37 ea 88 a6 a9 23 75 . .?.F6*.7....#u 0220 c7 60 62 5b eb ba 8e 62 ec 90 1a 32 a4 c8 8b 4a .`b[...b...2...J 0230 16 6c c8 2f 61 ee 22 eb 82 1f 6a 22 14 7e ce bd .l./a."...j".~.. 0240 6f 82 c6 a1 87 d4 59 de 96 4c 54 9f c6 a7 38 2a o.....Y..LT...8* 0250 10 bc 77 84 f4 eb ca b6 e3 ee 17 e5 91 96 e2 16 ..w............. 0260 a7 e4 27 bd 7f 5b 62 2f db dd b5 fe 43 0a 48 cb ..'..[b/....C.H. 0270 6c 20 7e 68 b5 e7 e5 09 5d b5 cf 3b 6b 18 78 6b l ~h....]..;k.xk 0280 e7 34 a8 65 57 4c 5c 7b d3 ea a4 e4 8e 4a 57 6c .4.eWL\{.....JWl 0290 8c e1 54 83 35 d6 db cb b0 c1 fe d9 59 5b 0b ef ..T.5.......Y[.. 02a0 94 d0 f7 a3 67 7a 52 ef 4e 88 9c 9b 57 84 c1 1a ....gzR.N...W... 02b0 ea ed 52 da 94 f1 3d f3 eb cf 47 24 fa 0d 3e 27 ..R...=...G$..>' 02c0 39 66 c5 aa 03 d0 e7 14 10 aa 56 a3 68 fd 8c 88 9f........V.h... 02d0 bc 72 fa 6e 64 d7 c6 20 e0 7b 8f fb f3 7f f3 24 .r.nd.. .{.....$ 02e0 b4 d8 44 82 17 71 35 6a 16 3e 0d 60 ba 6b 83 52 ..D..q5j.>.`.k.R 02f0 4f 47 24 31 ce 65 aa 37 be 47 23 3b 58 da 47 3d OG$1.e.7.G#;X.G= 0300 9b d8 eb 3d 26 e1 33 62 d9 6f 20 41 f8 2d 75 36 ...=&.3b.o A.-u6 0310 11 a7 ee 47 3c 12 29 a4 48 aa 84 a7 ed da d1 cc ...G<.).H....... 0320 3b a3 a9 33 8a 61 57 93 53 ab af f9 7b fb bb 5c ;..3.aW.S...{..\ 0330 ad 6b 9c 33 51 15 f6 16 25 90 ad c2 a6 81 65 80 .k.3Q...%.....e. 0340 fb 5d dc 15 14 17 03 01 03 40 45 fc e3 85 31 8b .][email protected]. 0350 70 be a1 0f e5 1c b7 54 54 17 0d b5 52 11 e4 57 p......TT...R..W 0360 57 67 e5 3e 40 46 75 ec b2 e7 87 f2 6c b6 e5 11 Wg.>@Fu.....l... 0370 01 98 59 b0 84 63 37 b3 ce 9a 60 43 87 92 f3 ed ..Y..c7...`C.... 0380 16 0f 76 70 91 0f ec 15 5a 94 50 5d 22 6c f3 80 ..vp....Z.P]"l.. 0390 de 15 ea d6 c4 0b 46 f2 16 f9 53 87 5e 55 64 26 ......F...S.^Ud& 03a0 78 27 65 78 a4 47 f4 66 1e 6b 2c 91 3d 52 af 34 x'ex.G.f.k,.=R.4 03b0 68 a1 68 08 98 ee a0 32 87 d2 c4 95 5e 6d 78 48 h.h....2....^mxH 03c0 3b 56 b9 e2 b9 4f 61 8b b5 25 b8 f5 df f1 da 66 ;V...Oa..%.....f 03d0 ce 62 03 0e 8d da 7f 56 4a be 0d 60 d7 d8 8e 09 .b.....VJ..`.... 03e0 12 56 00 9b 51 58 fc d4 64 b7 74 f1 e3 dc e4 7f .V..QX..d.t..... 03f0 a9 3b de bc c6 8a 5c f7 b9 c1 b2 f9 43 30 27 ab .;....\.....C0'. 0400 a1 67 69 9a ab 6d d2 f7 7b 7d a1 01 78 ac 3b 88 .gi..m..{}..x.;. 0410 b7 78 8d d6 95 25 d4 a2 bb cb 3e 8b e2 26 b4 a6 .x...%....>..&.. 0420 22 3c 3f e8 b0 82 90 b1 1e 4b 27 e1 1f c8 a9 f0 "<?......K'..... 0430 51 b4 c7 6f d9 d2 f3 d4 38 be cb ec cf fd f1 d0 Q..o....8....... 0440 8d 9c 08 41 7f 21 01 0d 43 f0 8d 1a ee 0d 20 4f ...A.!..C..... O 0450 e2 08 fd 8d d4 1c f6 a8 c8 53 a1 1b 72 82 6a 86 .........S..r.j. 0460 35 12 c0 64 a2 ba 63 61 0a 35 ac 7f c9 b6 56 fd 5..d..ca.5....V. 0470 c2 d0 59 20 0e 76 9d 0f 64 72 b9 19 4a e3 a1 26 ..Y .v..dr..J..& 0480 db 56 d1 97 a0 dc 91 2e 35 ac c4 7a ba 0e 53 3a .V......5..z..S: 0490 93 2e 5f d3 b5 cc f3 41 3c 84 aa f7 31 75 c5 8d .._....A<...1u.. 04a0 e2 a0 00 18 6d ba 9e 5b e0 e9 ae 96 77 1c 43 67 ....m..[....w.Cg 04b0 3c 4d 1f c2 d9 fd e7 a6 9e 27 17 a4 3e 97 f2 dc <M.......'..>... 04c0 b4 53 41 fd 3a e7 d9 84 1a 90 85 4c 0d 57 37 1d .SA.:......L.W7. 04d0 28 1f 1a 6d a8 8f fb 3f 50 a8 96 c6 80 dd cd d4 (..m...?P....... 04e0 66 3a b2 10 f4 7d 8a c1 ff cf 7d 5d a6 8e 34 86 f:...}....}]..4. 04f0 07 7a ee 83 bb d0 23 22 e6 e2 6f eb b5 2d db 76 .z....#"..o..-.v 0500 14 4e 78 21 81 b2 53 45 a7 c1 a2 22 8b a1 e9 06 .Nx!..SE...".... 0510 79 84 72 b3 e9 08 fd ee 7b 49 d1 67 a9 55 68 f3 y.r.....{I.g.Uh. 0520 b5 50 21 6e db d4 8d 46 d0 27 7d 2e f8 21 34 ea .P!n...F.'}..!4. 0530 0e 95 f1 da c8 ab 31 c0 33 d3 74 db bc a5 7e 95 ......1.3.t...~. 0540 f9 92 aa 38 df 0d 12 9d f4 89 d7 2e 8f c8 30 4d ...8..........0M 0550 0b 09 dd ab 13 bb 8e 81 d2 6c 45 3e 5a 1b bb 27 .........lE>Z..' 0560 88 a4 e5 59 8f 5c ec 1b cb 9a 71 d7 b2 82 c2 a8 ...Y.\....q..... 0570 8e 33 4d 51 61 27 c5 b9 2a db aa fa be 9b 8d 8e .3MQa'..*....... 0580 99 af 3c 06 3a fb 93 e5 1f ab 52 49 e7 49 85 a1 ..<.:.....RI.I.. 0590 c5 da 2e 72 76 4c 7d d2 e3 f8 20 26 71 52 ab 20 ...rvL}... &qR. 05a0 cf ba bd e6 cf 6f a2 fa .....o.. No. Time Source Destination Protocol Length Info 21822 252.499615 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=5033 Ack=280161 Win=65535 Len=0 TSval=730008 TSecr=598372 Frame 21822: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5033, Ack: 280161, Len: 0 No. Time Source Destination Protocol Length Info 21823 252.499679 192.168.10.1 192.168.10.203 TCP 292 34433 > cds [PSH, ACK] Seq=280161 Ack=5033 Win=1002 Len=226 TSval=598372 TSecr=730008 Frame 21823: 292 bytes on wire (2336 bits), 292 bytes captured (2336 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 280161, Ack: 5033, Len: 226 Data (226 bytes) 0000 88 21 da f1 5b 44 9c 7d 7f 82 2f 76 25 f6 0f 24 .!..[D.}../v%..$ 0010 4e bd ba 96 fa 07 2f 8b 82 f8 d4 ef 5a a8 40 63 N...../.....Z.@c 0020 b8 fd f2 9f 52 9a d6 3a 34 06 fe 9a 12 b6 fd 06 ....R..:4....... 0030 76 9d d8 bd 85 7e 68 8c 0c a8 85 89 e2 97 63 44 v....~h.......cD 0040 21 77 3a 09 9f 32 96 0f 05 57 26 41 0b 80 ad 05 !w:..2...W&A.... 0050 9d 8a 98 71 71 32 ee 92 ed 8b 34 96 02 fb 08 45 ...qq2....4....E 0060 d8 d2 e1 28 ea 7e 4e f2 01 aa c5 18 a0 4d 1c 2e ...(.~N......M.. 0070 4e 08 8c 01 f4 7c 32 5c 7b 8c 39 e5 f2 e1 a0 9d N....|2\{.9..... 0080 69 74 83 f4 9e fc 4a d7 98 71 d1 d3 92 38 ee e5 it....J..q...8.. 0090 7b d2 17 e4 47 4b 1a 04 12 f1 2d e8 21 8b a2 f2 {...GK....-.!... 00a0 b5 1f 57 17 57 3f 41 0f 46 bb 7b a0 f3 f5 98 c6 ..W.W?A.F.{..... 00b0 33 37 91 33 c6 f1 1a 39 27 f9 04 93 4a c6 38 b0 37.3...9'...J.8. 00c0 d7 23 56 df 6f 80 24 cb c5 e3 47 f4 64 11 e8 e1 .#V.o.$...G.d... 00d0 de 8f c4 e5 56 e4 10 a5 09 8d 9e b8 0b b4 3c 47 ....V.........<G 00e0 7a 3b z; No. Time Source Destination Protocol Length Info 21824 252.534134 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=5033 Ack=280387 Win=65309 Len=74 TSval=730008 TSecr=598372 Frame 21824: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5033, Ack: 280387, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 b9 de fe 32 ed bd ad c2 17 b3 24 .... ...2......$ 0010 08 a3 4e 5f de 26 26 ca 4d fd 79 a6 5c 8a 86 d5 ..N_.&&.M.y.\... 0020 64 31 aa 65 f6 17 03 01 00 20 a9 93 38 78 a4 de d1.e..... ..8x.. 0030 b5 ca e7 51 67 b1 79 2c 01 27 36 77 a5 e6 77 24 ...Qg.y,.'6w..w$ 0040 0e 81 db d0 71 60 a8 b8 04 78 ....q`...x No. Time Source Destination Protocol Length Info 21825 252.534209 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=280387 Ack=5107 Win=1002 Len=0 TSval=598381 TSecr=730008 Frame 21825: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 280387, Ack: 5107, Len: 0 No. Time Source Destination Protocol Length Info 21826 252.537139 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=5107 Ack=280387 Win=65309 Len=74 TSval=730008 TSecr=598381 Frame 21826: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5107, Ack: 280387, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 3e 6d 9a fb ba 6b 3f d3 f0 7a ad .... >m...k?..z. 0010 50 03 8a a2 3e e4 25 b2 90 8b e4 18 b0 1d d5 be P...>.%......... 0020 bb 51 54 fd 42 17 03 01 00 20 00 65 f6 35 6f 8d .QT.B.... .e.5o. 0030 ad 12 e9 1a 2d 7f d4 34 30 de 44 40 94 cb dd d2 ....-..40.D@.... 0040 f1 e2 b7 d8 ad bb d8 ff 46 b0 ........F. No. Time Source Destination Protocol Length Info 21827 252.537204 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=280387 Ack=5181 Win=1002 Len=0 TSval=598381 TSecr=730008 Frame 21827: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 280387, Ack: 5181, Len: 0 No. Time Source Destination Protocol Length Info 21828 252.538862 192.168.10.185 192.168.10.142 VNC 134 Authentication result Frame 21828: 134 bytes on wire (1072 bits), 134 bytes captured (1072 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 364198, Ack: 55341, Len: 80 Virtual Network Computing No. Time Source Destination Protocol Length Info 21829 252.539827 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=5181 Ack=280387 Win=65309 Len=74 TSval=730008 TSecr=598381 Frame 21829: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5181, Ack: 280387, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 0d 46 0c 8f de f2 04 79 42 b4 fa .... .F.....yB.. 0010 fb 59 3f 39 43 7e ab ac 92 85 4b 50 ea 6e 51 a1 .Y?9C~....KP.nQ. 0020 3b 3f 58 fd a2 17 03 01 00 20 00 3a 1a 0e 23 9f ;?X...... .:..#. 0030 1e 84 64 79 82 77 d8 5c cf 6d 98 29 77 f8 42 19 ..dy.w.\.m.)w.B. 0040 0b 27 b9 ba a0 a3 27 61 19 56 .'....'a.V No. Time Source Destination Protocol Length Info 21830 252.539891 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=280387 Ack=5255 Win=1002 Len=0 TSval=598382 TSecr=730008 Frame 21830: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 280387, Ack: 5255, Len: 0 No. Time Source Destination Protocol Length Info 21831 252.542542 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=5255 Ack=280387 Win=65309 Len=74 TSval=730008 TSecr=598382 Frame 21831: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5255, Ack: 280387, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 e8 93 19 b3 fd 22 81 5e b5 d2 47 .... .....".^..G 0010 da 6e de d7 c5 48 64 9a af b0 a7 05 01 be 37 bb .n...Hd.......7. 0020 73 7b 32 44 da 17 03 01 00 20 07 c0 02 25 69 f4 s{2D..... ...%i. 0030 8d 6b 86 85 26 5a 01 0f 92 9e a6 61 f5 e2 76 b6 .k..&Z.....a..v. 0040 a5 7a 5e a4 5b 94 d4 cb b1 c8 .z^.[..... No. Time Source Destination Protocol Length Info 21832 252.542607 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=280387 Ack=5329 Win=1002 Len=0 TSval=598383 TSecr=730008 Frame 21832: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 280387, Ack: 5329, Len: 0 No. Time Source Destination Protocol Length Info 21833 252.545175 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=5329 Ack=280387 Win=65309 Len=74 TSval=730008 TSecr=598383 Frame 21833: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5329, Ack: 280387, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 59 34 16 d9 6c 58 34 30 7f d6 b1 .... Y4..lX40... 0010 92 71 62 6e c4 09 79 12 40 29 7e 0b 8f ed 15 e3 .qbn..y.@)~..... 0020 ee 4b 25 59 6c 17 03 01 00 20 0f 29 a0 0d 0c bb .K%Yl.... .).... 0030 25 d2 e5 18 fc fc 90 47 14 48 a2 43 50 26 87 73 %......G.H.CP&.s 0040 9a e8 ed 84 3a c8 4c 25 c6 1f ....:.L%.. No. Time Source Destination Protocol Length Info 21834 252.545239 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=280387 Ack=5403 Win=1002 Len=0 TSval=598383 TSecr=730008 Frame 21834: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 280387, Ack: 5403, Len: 0 No. Time Source Destination Protocol Length Info 21835 252.547721 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=5403 Ack=280387 Win=65309 Len=74 TSval=730008 TSecr=598383 Frame 21835: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5403, Ack: 280387, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 75 26 f7 e7 81 e6 99 ee 77 be aa .... u&......w.. 0010 75 0c 45 91 37 31 ae 75 b7 4a bc ee 8d c3 f3 01 u.E.71.u.J...... 0020 d2 ef 55 6b ff 17 03 01 00 20 22 1d ea 58 7e 1d ..Uk..... "..X~. 0030 72 fc ad 75 66 c3 0b 77 9b 26 3c f2 28 fe e3 4a r..uf..w.&<.(..J 0040 7a 1d 0a 33 9c d7 6e c9 83 b7 z..3..n... No. Time Source Destination Protocol Length Info 21836 252.547789 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=280387 Ack=5477 Win=1002 Len=0 TSval=598384 TSecr=730008 Frame 21836: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 280387, Ack: 5477, Len: 0 No. Time Source Destination Protocol Length Info 21837 252.563334 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 21837: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55341, Ack: 364278, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 21838 252.573673 192.168.10.207 206.225.164.188 SMTP 474 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets Frame 21838: 474 bytes on wire (3792 bits), 474 bytes captured (3792 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 9997, Ack: 718216, Len: 420 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21839 252.573706 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=719486 Ack=10417 Win=46405 Len=0 Frame 21839: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 719486, Ack: 10417, Len: 0 No. Time Source Destination Protocol Length Info 21840 252.573734 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=10417 Ack=718216 Win=0 Len=0 Frame 21840: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 10417, Ack: 718216, Len: 0 No. Time Source Destination Protocol Length Info 21841 252.627009 188.161.220.86 192.168.10.207 TCP 60 45227 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 21841: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45227 (45227), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 21842 252.627095 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:48:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45227 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 21842: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:30 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45227 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 21843 252.627133 192.168.10.207 188.161.220.86 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:48:05 -0400 Frame 21843: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45227 (45227), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21844 252.627173 188.161.220.86 192.168.10.207 TCP 60 45227 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 21844: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45227 (45227), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 21845 252.724557 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=364278 Ack=55373 Win=64393 Len=0 Frame 21845: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 364278, Ack: 55373, Len: 0 No. Time Source Destination Protocol Length Info 21846 252.756821 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 21846: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21847 252.756852 Dell_48:43:a3 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.185 Frame 21847: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21848 252.851259 192.168.10.185 192.168.10.142 VNC 120 Authentication result Frame 21848: 120 bytes on wire (960 bits), 120 bytes captured (960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 364278, Ack: 55373, Len: 66 Virtual Network Computing No. Time Source Destination Protocol Length Info 21849 252.873401 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 21849: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55373, Ack: 364344, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 21850 252.929778 180.243.236.205 192.168.10.207 SMTP 103 C: MAIL FROM: <cadence.webster@xxxxxxxxxxxxxxxxxx> Frame 21850: 103 bytes on wire (824 bits), 103 bytes captured (824 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: search-agent (1234), Dst Port: smtp (25), Seq: 18, Ack: 314, Len: 49 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21851 252.929896 192.168.10.207 180.243.236.205 SMTP 113 S: 250 2.1.0 [email protected] OK Frame 21851: 113 bytes on wire (904 bits), 113 bytes captured (904 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: search-agent (1234), Seq: 314, Ack: 67, Len: 59 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21852 252.929976 180.243.236.205 192.168.10.207 TCP 60 search-agent > smtp [ACK] Seq=67 Ack=373 Win=93068 Len=0 Frame 21852: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: search-agent (1234), Dst Port: smtp (25), Seq: 67, Ack: 373, Len: 0 No. Time Source Destination Protocol Length Info 21853 252.949038 188.161.220.86 192.168.10.207 SMTP 71 C: EHLO cmqcci.com Frame 21853: 71 bytes on wire (568 bits), 71 bytes captured (568 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45227 (45227), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 17 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21854 252.949229 192.168.10.207 188.161.220.86 SMTP 245 S: 250-mail.mydomain.com Hello [188.161.220.86] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 21854: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45227 (45227), Seq: 122, Ack: 18, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21855 252.949269 188.161.220.86 192.168.10.207 TCP 60 45227 > smtp [ACK] Seq=18 Ack=313 Win=93128 Len=0 Frame 21855: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45227 (45227), Dst Port: smtp (25), Seq: 18, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 21856 252.949603 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:31 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45227 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 21856: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:31 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45227 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 21857 252.949673 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:31 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45227 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 21857: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:31 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45227 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 21858 252.949847 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:48:31 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45227 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 21858: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:31 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45227 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 21859 252.949922 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:48:31 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45227 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 21859: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:31 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45227 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 21860 252.950171 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:31 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45227 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 21860: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:31 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45227 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 21861 252.950239 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:31 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45227 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 21861: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:31 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45227 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 21862 252.998087 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 21839#1] 9428 > smtp [ACK] Seq=719486 Ack=10417 Win=46405 Len=0 Frame 21862: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 719486, Ack: 10417, Len: 0 No. Time Source Destination Protocol Length Info 21863 252.998122 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=10417 Ack=718216 Win=0 Len=0 Frame 21863: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 10417, Ack: 718216, Len: 0 No. Time Source Destination Protocol Length Info 21864 253.052580 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=364344 Ack=55405 Win=64361 Len=0 Frame 21864: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 364344, Ack: 55405, Len: 0 No. Time Source Destination Protocol Length Info 21865 253.112218 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1487935744, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 21865: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21866 253.112242 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1487935744, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 21866: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21867 253.112255 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1487935744, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 21867: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21868 253.112267 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1487935744, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 21868: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21869 253.130160 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3357016320, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 21869: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21870 253.130180 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3357016320, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 21870: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21871 253.130192 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3357016320, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 21871: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21872 253.130204 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3357016320, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 21872: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21873 253.138480 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 21873: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17599, Ack: 1292689, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21874 253.138516 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1292689 Ack=17641 Win=46573 Len=0 Frame 21874: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1292689, Ack: 17641, Len: 0 No. Time Source Destination Protocol Length Info 21875 253.163654 192.168.10.185 192.168.10.142 VNC 117 Authentication result Frame 21875: 117 bytes on wire (936 bits), 117 bytes captured (936 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 364344, Ack: 55405, Len: 63 Virtual Network Computing No. Time Source Destination Protocol Length Info 21876 253.187815 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 21876: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55405, Ack: 364407, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 21877 253.194340 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 21877: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 21878 253.284224 188.161.220.86 192.168.10.207 SMTP 100 C: MAIL FROM: <aubrey.miller@xxxxxxxxxxxxxxxxx> Frame 21878: 100 bytes on wire (800 bits), 100 bytes captured (800 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45227 (45227), Dst Port: smtp (25), Seq: 18, Ack: 313, Len: 46 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21879 253.284264 192.168.10.207 188.161.220.86 SMTP 110 S: 250 2.1.0 [email protected] OK Frame 21879: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45227 (45227), Seq: 313, Ack: 64, Len: 56 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21880 253.284303 188.161.220.86 192.168.10.207 TCP 60 45227 > smtp [ACK] Seq=64 Ack=369 Win=93072 Len=0 Frame 21880: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45227 (45227), Dst Port: smtp (25), Seq: 64, Ack: 369, Len: 0 No. Time Source Destination Protocol Length Info 21881 253.315813 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 21881: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 21882 253.335626 192.168.10.1 192.168.10.245 Syslog 307 LOCAL1.INFO: Oct 3 19:48:31 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1234 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eycamel@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 21882: 307 bytes on wire (2456 bits), 307 bytes captured (2456 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:31 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1234 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 21883 253.373180 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 21883: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 21884 253.373212 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 21884: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 21885 253.444217 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 21885: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 21886 253.473994 192.168.10.203 117.98.146.187 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 21886: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 117.98.146.187 (117.98.146.187) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 21887 253.490075 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=364407 Ack=55437 Win=64329 Len=0 Frame 21887: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 364407, Ack: 55437, Len: 0 No. Time Source Destination Protocol Length Info 21888 253.566466 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 21888: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 21889 253.609110 192.168.10.1 192.168.10.245 Syslog 312 LOCAL1.INFO: Oct 3 19:48:31 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45227 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eywafrikaans@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 21889: 312 bytes on wire (2496 bits), 312 bytes captured (2496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:31 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45227 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 21890 253.702346 180.243.236.205 192.168.10.207 SMTP 60 C: QUIT Frame 21890: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: search-agent (1234), Dst Port: smtp (25), Seq: 67, Ack: 373, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21891 253.702506 192.168.10.207 180.243.236.205 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 21891: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: search-agent (1234), Seq: 373, Ack: 73, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21892 253.702546 180.243.236.205 192.168.10.207 TCP 60 search-agent > smtp [ACK] Seq=73 Ack=442 Win=92998 Len=0 Frame 21892: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: search-agent (1234), Dst Port: smtp (25), Seq: 73, Ack: 442, Len: 0 No. Time Source Destination Protocol Length Info 21893 253.702577 192.168.10.207 180.243.236.205 TCP 60 smtp > search-agent [FIN, ACK] Seq=442 Ack=73 Win=65463 Len=0 Frame 21893: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: search-agent (1234), Seq: 442, Ack: 73, Len: 0 No. Time Source Destination Protocol Length Info 21894 253.702615 180.243.236.205 192.168.10.207 TCP 60 search-agent > smtp [ACK] Seq=73 Ack=443 Win=92998 Len=0 Frame 21894: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: search-agent (1234), Dst Port: smtp (25), Seq: 73, Ack: 443, Len: 0 No. Time Source Destination Protocol Length Info 21895 253.755574 192.168.10.104 192.168.10.255 BROWSER 224 Become Backup Browser Frame 21895: 224 bytes on wire (1792 bits), 224 bytes captured (1792 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.255 (192.168.10.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Length Info 21896 253.770936 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 21896: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17641, Ack: 1292689, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21897 253.770971 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1292689 Ack=17683 Win=46552 Len=0 Frame 21897: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1292689, Ack: 17683, Len: 0 No. Time Source Destination Protocol Length Info 21898 253.836223 192.168.10.190 64.74.103.148 TLSv1 91 Application Data Frame 21898: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.190 (192.168.10.190), Dst: 64.74.103.148 (64.74.103.148) Transmission Control Protocol, Src Port: wsmlb (3806), Dst Port: https (443), Seq: 297, Ack: 297, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 21899 253.836293 64.74.103.148 192.168.10.190 TCP 60 https > wsmlb [ACK] Seq=297 Ack=334 Win=65535 Len=0 Frame 21899: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Internet Protocol Version 4, Src: 64.74.103.148 (64.74.103.148), Dst: 192.168.10.190 (192.168.10.190) Transmission Control Protocol, Src Port: https (443), Dst Port: wsmlb (3806), Seq: 297, Ack: 334, Len: 0 No. Time Source Destination Protocol Length Info 21900 253.838017 Watchgua_3c:4c:d8 IntelCor_ed:1a:23 ARP 60 Who has 192.168.10.190? Tell 192.168.10.1 Frame 21900: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21901 253.838030 IntelCor_ed:1a:23 Watchgua_3c:4c:d8 ARP 60 192.168.10.190 is at 00:13:20:ed:1a:23 Frame 21901: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21902 253.857033 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 21902: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 21903 253.857074 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 21903: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 21904 253.884302 64.74.103.148 192.168.10.190 TLSv1 91 Application Data Frame 21904: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:23 (00:13:20:ed:1a:23) Internet Protocol Version 4, Src: 64.74.103.148 (64.74.103.148), Dst: 192.168.10.190 (192.168.10.190) Transmission Control Protocol, Src Port: https (443), Dst Port: wsmlb (3806), Seq: 297, Ack: 334, Len: 37 Secure Sockets Layer No. Time Source Destination Protocol Length Info 21905 253.942988 188.161.220.86 192.168.10.207 SMTP 60 C: QUIT Frame 21905: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45227 (45227), Dst Port: smtp (25), Seq: 64, Ack: 369, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21906 253.943038 192.168.10.207 188.161.220.86 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 21906: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45227 (45227), Seq: 369, Ack: 70, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21907 253.943080 188.161.220.86 192.168.10.207 TCP 60 45227 > smtp [ACK] Seq=70 Ack=438 Win=93002 Len=0 Frame 21907: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45227 (45227), Dst Port: smtp (25), Seq: 70, Ack: 438, Len: 0 No. Time Source Destination Protocol Length Info 21908 253.943109 192.168.10.207 188.161.220.86 TCP 60 smtp > 45227 [FIN, ACK] Seq=438 Ack=70 Win=65466 Len=0 Frame 21908: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45227 (45227), Seq: 438, Ack: 70, Len: 0 No. Time Source Destination Protocol Length Info 21909 253.943147 188.161.220.86 192.168.10.207 TCP 60 45227 > smtp [ACK] Seq=70 Ack=439 Win=93002 Len=0 Frame 21909: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45227 (45227), Dst Port: smtp (25), Seq: 70, Ack: 439, Len: 0 No. Time Source Destination Protocol Length Info 21910 253.985087 180.243.236.205 192.168.10.207 TCP 60 search-agent > smtp [RST, ACK] Seq=73 Ack=443 Win=92998 Len=0 Frame 21910: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: search-agent (1234), Dst Port: smtp (25), Seq: 73, Ack: 443, Len: 0 No. Time Source Destination Protocol Length Info 21911 253.985168 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:48:32 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1234 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 21911: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:32 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 180.243.236.205 7x.x.x.3 1234 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 21912 253.986260 180.243.236.205 192.168.10.207 TCP 62 visionpyramid > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 21912: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 180.243.236.205 (180.243.236.205), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: visionpyramid (1247), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 21913 253.986331 192.168.10.207 180.243.236.205 TCP 62 smtp > visionpyramid [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 21913: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: visionpyramid (1247), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 21914 254.070530 192.168.10.190 64.74.103.148 TCP 60 wsmlb > https [ACK] Seq=334 Ack=334 Win=65313 Len=0 Frame 21914: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_ed:1a:23 (00:13:20:ed:1a:23), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.190 (192.168.10.190), Dst: 64.74.103.148 (64.74.103.148) Transmission Control Protocol, Src Port: wsmlb (3806), Dst Port: https (443), Seq: 334, Ack: 334, Len: 0 No. Time Source Destination Protocol Length Info 21915 254.127858 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1504712960, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 21915: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21916 254.127882 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1504712960, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 21916: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21917 254.127894 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1504712960, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 21917: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21918 254.127906 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1504712960, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 21918: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21919 254.145708 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3373793536, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 21919: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21920 254.145732 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3373793536, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 21920: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21921 254.145745 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3373793536, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 21921: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21922 254.145757 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3373793536, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 21922: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 21923 254.216221 189.123.44.91 192.168.10.207 TCP 60 asap-tcp > smtp [FIN, ACK] Seq=71 Ack=221 Win=93220 Len=0 Frame 21923: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.44.91 (189.123.44.91), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: asap-tcp (3863), Dst Port: smtp (25), Seq: 71, Ack: 221, Len: 0 No. Time Source Destination Protocol Length Info 21924 254.216257 192.168.10.207 189.123.44.91 TCP 60 smtp > asap-tcp [ACK] Seq=221 Ack=72 Win=65465 Len=0 Frame 21924: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.44.91 (189.123.44.91) Transmission Control Protocol, Src Port: smtp (25), Dst Port: asap-tcp (3863), Seq: 221, Ack: 72, Len: 0 No. Time Source Destination Protocol Length Info 21925 254.216289 192.168.10.207 189.123.44.91 TCP 60 smtp > asap-tcp [FIN, ACK] Seq=221 Ack=72 Win=65465 Len=0 Frame 21925: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.44.91 (189.123.44.91) Transmission Control Protocol, Src Port: smtp (25), Dst Port: asap-tcp (3863), Seq: 221, Ack: 72, Len: 0 No. Time Source Destination Protocol Length Info 21926 254.216326 189.123.44.91 192.168.10.207 TCP 60 asap-tcp > smtp [ACK] Seq=72 Ack=222 Win=93220 Len=0 Frame 21926: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.44.91 (189.123.44.91), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: asap-tcp (3863), Dst Port: smtp (25), Seq: 72, Ack: 222, Len: 0 No. Time Source Destination Protocol Length Info 21927 254.216630 192.168.10.1 192.168.10.245 Syslog 201 LOCAL1.INFO: Oct 3 19:48:32 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.44.91 7x.x.x.3 3863 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 21927: 201 bytes on wire (1608 bits), 201 bytes captured (1608 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:32 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.44.91 7x.x.x.3 3863 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 21928 254.251391 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.48? Tell 192.168.10.226 Frame 21928: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21929 254.251425 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.48? Tell 192.168.10.226 Frame 21929: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21930 254.251458 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226 Frame 21930: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21931 254.251468 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226 Frame 21931: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21932 254.251481 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 21932: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21933 254.251492 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226 Frame 21933: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21934 254.251502 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a Frame 21934: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21935 254.251515 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11 Frame 21935: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21936 254.251525 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226 Frame 21936: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21937 254.251538 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226 Frame 21937: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21938 254.251548 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 21938: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21939 254.251564 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 21939: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21940 254.251606 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226 Frame 21940: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21941 254.251616 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226 Frame 21941: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21942 254.251626 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b Frame 21942: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21943 254.251659 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 21943: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21944 254.251670 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226 Frame 21944: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21945 254.251680 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226 Frame 21945: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21946 254.251690 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 21946: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21947 254.251701 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226 Frame 21947: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21948 254.251711 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b Frame 21948: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21949 254.251721 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 21949: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21950 254.251735 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64 Frame 21950: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21951 254.251746 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67 Frame 21951: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21952 254.251759 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 21952: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21953 254.251773 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d Frame 21953: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21954 254.251783 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67 Frame 21954: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21955 254.251796 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d Frame 21955: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21956 254.251807 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 21956: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21957 254.251820 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68 Frame 21957: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21958 254.251833 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226 Frame 21958: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21959 254.251844 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 21959: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21960 254.251857 Oracle_c8:69:71 Broadcast ARP 60 192.168.10.210 is at 00:03:ba:c8:69:71 Frame 21960: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_c8:69:71 (00:03:ba:c8:69:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21961 254.251870 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226 Frame 21961: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21962 254.251880 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226 Frame 21962: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21963 254.251891 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226 Frame 21963: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21964 254.251901 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226 Frame 21964: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21965 254.251911 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 21965: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21966 254.251929 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 21966: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21967 254.251940 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226 Frame 21967: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21968 254.251950 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226 Frame 21968: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21969 254.251960 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226 Frame 21969: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21970 254.251970 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226 Frame 21970: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21971 254.251980 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 21971: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21972 254.251994 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66 Frame 21972: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21973 254.252007 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80 Frame 21973: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21974 254.252017 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226 Frame 21974: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21975 254.252027 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f Frame 21975: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21976 254.252038 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5 Frame 21976: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21977 254.252048 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 21977: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21978 254.252061 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1 Frame 21978: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21979 254.252072 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b Frame 21979: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21980 254.252085 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 Frame 21980: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21981 254.252095 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 (duplicate use of 192.168.10.226 detected!) Frame 21981: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) [Duplicate IP address detected for 192.168.10.226 (00:26:b9:52:f0:f1) - also in use by 00:26:b9:52:f0:f3 (frame 21980)] Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21982 254.252105 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226 (duplicate use of 192.168.10.226 detected!) Frame 21982: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea) [Duplicate IP address detected for 192.168.10.226 (00:26:b9:52:f0:f1) - also in use by 00:26:b9:52:f0:f3 (frame 21980)] Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21983 254.252117 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91 (duplicate use of 192.168.10.226 detected!) Frame 21983: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1) [Duplicate IP address detected for 192.168.10.226 (00:26:b9:52:f0:f1) - also in use by 00:26:b9:52:f0:f3 (frame 21980)] Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 21984 254.258250 188.161.220.86 192.168.10.207 TCP 60 45227 > smtp [RST, ACK] Seq=70 Ack=439 Win=93002 Len=0 Frame 21984: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45227 (45227), Dst Port: smtp (25), Seq: 70, Ack: 439, Len: 0 No. Time Source Destination Protocol Length Info 21985 254.258366 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:48:32 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45227 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 21985: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:32 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45227 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 21986 254.262573 188.161.220.86 192.168.10.207 TCP 62 45242 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 21986: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45242 (45242), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 21987 254.262649 192.168.10.207 188.161.220.86 TCP 62 smtp > 45242 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 21987: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45242 (45242), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 21988 254.417819 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 21988: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17683, Ack: 1292689, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21989 254.417872 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1292689 Ack=17725 Win=46531 Len=0 Frame 21989: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1292689, Ack: 17725, Len: 0 No. Time Source Destination Protocol Length Info 21990 254.569315 188.161.220.86 192.168.10.207 TCP 60 45242 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 21990: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45242 (45242), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 21991 254.569404 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:48:32 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45242 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 21991: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:32 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45242 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 21992 254.569441 192.168.10.207 188.161.220.86 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:48:07 -0400 Frame 21992: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45242 (45242), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21993 254.569481 188.161.220.86 192.168.10.207 TCP 60 45242 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 21993: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45242 (45242), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 21994 254.696502 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.182? Tell 192.168.10.246 Frame 21994: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21995 254.696538 Dell_44:d0:9e Broadcast ARP 60 Who has 192.168.10.182? Tell 192.168.10.246 Frame 21995: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 21996 254.883033 188.161.220.86 192.168.10.207 SMTP 72 C: EHLO wjhdcqv.com Frame 21996: 72 bytes on wire (576 bits), 72 bytes captured (576 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45242 (45242), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 18 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21997 254.883110 192.168.10.207 188.161.220.86 SMTP 245 S: 250-mail.mydomain.com Hello [188.161.220.86] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 21997: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45242 (45242), Seq: 122, Ack: 19, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 21998 254.883154 188.161.220.86 192.168.10.207 TCP 60 45242 > smtp [ACK] Seq=19 Ack=313 Win=93128 Len=0 Frame 21998: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45242 (45242), Dst Port: smtp (25), Seq: 19, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 21999 254.883993 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=280387 Ack=5477 Win=1002 Len=1448 TSval=598968 TSecr=730008 Frame 21999: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 280387, Ack: 5477, Len: 1448 Data (1448 bytes) 0000 17 03 01 22 70 67 32 5d e4 10 48 21 d3 52 8a 27 ..."pg2]..H!.R.' 0010 03 64 b0 87 8c e3 00 4f 7e a9 00 89 60 c6 ea 72 .d.....O~...`..r 0020 8b 88 56 0d bb 6f ee 8e 83 8d d1 94 8a 59 89 94 ..V..o.......Y.. 0030 34 cc 07 a8 5e fb 28 2f f0 89 83 27 50 4e e8 22 4...^.(/...'PN." 0040 c5 e5 77 e3 c0 78 e9 2e e1 19 62 09 2d b6 25 05 ..w..x....b.-.%. 0050 a2 22 96 66 ca 49 de 1d b0 60 d7 c6 d5 c1 fb 9d .".f.I...`...... 0060 a4 a1 56 16 18 63 dd 1d ef fb fd 1a 67 74 dd 49 ..V..c......gt.I 0070 28 db b4 b0 8a ec 12 8b c1 ee 3d 4f 23 a0 9c 6c (.........=O#..l 0080 95 fb 87 f1 3d cc e7 62 84 a4 07 e3 dc 12 b4 3f ....=..b.......? 0090 55 b5 dc 05 ef 37 25 30 b1 3c d0 1d b3 7f 56 60 U....7%0.<....V` 00a0 4b 7f b3 be 9d 5a d8 44 b4 64 9d 97 dd a1 52 59 K....Z.D.d....RY 00b0 d6 e2 61 81 25 65 c3 88 7d cc b1 64 02 cf f9 6d ..a.%e..}..d...m 00c0 ef 6d 13 dc fb 12 c8 c0 0d 5d 41 7b aa a7 f3 77 .m.......]A{...w 00d0 5a f1 c2 a3 a9 12 99 0f 96 eb 9f bc 93 61 19 e9 Z............a.. 00e0 5a 08 bf a3 55 29 78 d9 88 09 49 a8 d4 cd e2 ed Z...U)x...I..... 00f0 6a 9f 29 7b f8 9e 41 13 90 e0 61 9a 1b 92 d2 3e j.){..A...a....> 0100 3c fd bf f9 02 85 4e 40 09 43 f2 6d 58 17 76 e3 <[email protected]. 0110 6e 81 44 96 6d b6 0c ee 5c 42 85 3f b3 62 65 10 n.D.m...\B.?.be. 0120 41 45 a2 dd c4 f7 d1 d8 2d 80 b3 27 d6 48 6e 5f AE......-..'.Hn_ 0130 1e c9 cd cc c2 5a 8f 0b 22 a8 a7 43 e1 23 b6 4c .....Z.."..C.#.L 0140 6a 56 99 82 a9 57 b1 92 4a b1 a6 63 cf c8 0e 06 jV...W..J..c.... 0150 6a fe be 7a 82 8a b6 0e 8d 33 17 e4 53 5f 79 85 j..z.....3..S_y. 0160 4a f6 e9 b9 50 6c 1f 5a aa ff f6 fc 42 48 ff 57 J...Pl.Z....BH.W 0170 79 f7 34 16 0f 27 24 51 da 64 bf 2d ba b4 f3 f6 y.4..'$Q.d.-.... 0180 1f 1a db ef d3 b3 77 c4 e9 ce 78 85 9c 64 54 cf ......w...x..dT. 0190 cc 3c 46 c8 da 77 3d bd 17 fd 1b f1 49 3f 94 8c .<F..w=.....I?.. 01a0 1c 3c 90 cb 07 9c 20 6d 7c d5 f2 d6 2f d4 d3 2b .<.... m|.../..+ 01b0 ea 77 b2 ab 43 c6 ed 6b 7f 19 cf 0c e7 df c1 8c .w..C..k........ 01c0 3a ae 44 c9 06 5b 09 3d 37 ec a6 48 47 f8 33 2a :.D..[.=7..HG.3* 01d0 05 c8 96 08 a2 f8 b3 aa 9e 8c cd b5 fc 48 14 05 .............H.. 01e0 0e e2 de ee 01 c4 e0 66 1d ec 74 be 2b 1f 83 4e .......f..t.+..N 01f0 76 e3 9d a6 53 d4 0a 1a 54 76 bc 61 2f 6b a6 46 v...S...Tv.a/k.F 0200 33 33 6c 89 da 4e 57 70 29 c5 69 6b bd 81 33 f6 33l..NWp).ik..3. 0210 17 2b c7 f2 0c 09 89 fb e9 8a c3 2a ae ee 51 89 .+.........*..Q. 0220 cd 2e 43 35 63 94 a3 5d e8 da 67 f5 7d 6a f1 2c ..C5c..]..g.}j., 0230 57 f9 63 ce 98 99 6b 5a db f8 05 a9 97 ec ed a0 W.c...kZ........ 0240 10 17 e1 f5 7a 20 20 9f 28 d3 4f 08 e9 4b 31 ef ....z .(.O..K1. 0250 03 ce 3b a8 d7 c6 e7 58 0e 45 ef 24 d3 a5 49 95 ..;....X.E.$..I. 0260 91 56 14 96 17 de 25 f8 19 ea 8b 69 7e 2e 82 d8 .V....%....i~... 0270 b1 c5 a6 cb ef 72 a6 a3 8e d6 5d 4d ef d9 7e 38 .....r....]M..~8 0280 a6 56 5b ba 99 f3 bf 80 b2 a6 20 b1 81 74 fe 88 .V[....... ..t.. 0290 96 09 ad 86 59 e7 be 89 a3 ba 2f 02 32 03 f7 09 ....Y...../.2... 02a0 ee 37 12 a9 d0 81 b5 ad 62 a5 aa 01 8f 80 af ab .7......b....... 02b0 33 1b ca 4f 82 c5 52 7f ee 51 58 01 c1 4b c3 92 3..O..R..QX..K.. 02c0 eb 4f 55 09 08 10 59 b2 10 e2 aa e1 91 7d 79 c7 .OU...Y......}y. 02d0 29 e9 e5 7c 72 2f 34 35 3f 6c b9 d6 7f 6e f2 d2 )..|r/45?l...n.. 02e0 30 51 94 fb 0a 02 09 45 6a b6 27 c3 f7 0a 96 cb 0Q.....Ej.'..... 02f0 dc c9 0f f3 a6 21 43 cb 56 d9 56 4d c7 4d 22 02 .....!C.V.VM.M". 0300 0b f7 17 10 73 56 22 22 78 da eb 2d dc 06 99 9b ....sV""x..-.... 0310 2c 83 e8 73 ae c2 56 2d ae a0 75 d7 ac 4e 03 7d ,..s..V-..u..N.} 0320 d0 85 9b 18 5d 48 5d ed cf e4 28 79 5a 63 4b 2b ....]H]...(yZcK+ 0330 71 97 67 fa ba 9c 13 d3 80 1f 14 98 42 2e f1 22 q.g.........B.." 0340 05 f4 08 35 a1 d3 70 5b 43 14 f6 dc d7 f7 64 9d ...5..p[C.....d. 0350 9e 12 1a 03 4e 7e 2c be 4b 7c 85 28 f6 d8 7a af ....N~,.K|.(..z. 0360 a9 23 53 d1 65 58 60 c7 e4 81 5f 9d 64 0d e1 c3 .#S.eX`..._.d... 0370 47 15 40 09 80 ba 89 c8 71 52 e1 ff 89 8d cd 54 [email protected] 0380 89 82 cb 16 aa bd b4 f9 dc 3f 6f b8 83 a4 47 74 .........?o...Gt 0390 13 1c a5 89 9f d5 da 91 98 fc 18 8f 14 71 5e b3 .............q^. 03a0 cc 21 7f 53 3c 59 c4 71 c0 e7 2d e0 12 93 fb 03 .!.S<Y.q..-..... 03b0 3b a1 9c 19 1c 21 fe bc 3e 8b 2e 9c 58 65 b7 a1 ;....!..>...Xe.. 03c0 67 ee 6a 41 55 93 3c 09 bf 14 33 51 63 e3 c8 0d g.jAU.<...3Qc... 03d0 52 8b ad d5 cd e7 c7 b1 2c 23 bb 5a 1b 64 61 d5 R.......,#.Z.da. 03e0 62 53 12 04 c3 cc 8e fa 49 03 c1 0f 43 cf 62 13 bS......I...C.b. 03f0 53 25 f9 41 2b 0c 74 25 76 d0 3f bc 3c 32 70 73 S%.A+.t%v.?.<2ps 0400 5d 86 3b 56 42 4c 13 58 01 36 8a de 9b f3 e2 14 ].;VBL.X.6...... 0410 17 07 e7 35 4d a1 47 c7 e9 84 71 47 c8 1e 4d 02 ...5M.G...qG..M. 0420 47 fe 98 8d bb 3b 9f 53 18 74 f8 bb 03 17 fc b1 G....;.S.t...... 0430 23 4b 6c ed b5 55 51 ba 8d 46 19 4d d6 9b 4f 3c #Kl..UQ..F.M..O< 0440 03 8a 51 92 ec 05 75 b4 fc 9f 94 ee 9f 79 d7 5c ..Q...u......y.\ 0450 64 d8 3a 08 b9 d8 be b7 32 cb b4 09 d2 d2 6e 53 d.:.....2.....nS 0460 c2 a5 90 96 0f f7 aa f8 25 31 f7 f1 c0 d4 94 4c ........%1.....L 0470 1b 18 bd c8 24 b4 84 b2 4b 95 9f 0c 9b e5 df 72 ....$...K......r 0480 c1 6b 0f 42 11 49 51 be bc 83 be 20 1f 9f a7 d4 .k.B.IQ.... .... 0490 98 14 d6 a2 6f 1d 71 f3 79 89 cc 6e 05 27 5b 90 ....o.q.y..n.'[. 04a0 ad 20 39 25 21 9f 27 5e 75 2c c5 98 c6 ea da d4 . 9%!.'^u,...... 04b0 16 e4 6d fa a7 4d 7e 16 fa 05 49 dd 6b 22 89 62 ..m..M~...I.k".b 04c0 11 b7 b7 24 ba af 75 66 81 74 82 cd 54 69 8b e1 ...$..uf.t..Ti.. 04d0 08 4b 09 df 8e 48 92 fb 2e cc 16 d1 c5 50 67 63 .K...H.......Pgc 04e0 20 57 64 bc b6 da 3c 23 37 4b c4 57 d1 9e 50 75 Wd...<#7K.W..Pu 04f0 2b 4d 7c d4 6f a2 49 1d 5c 3c c3 f7 88 e7 fc 4b +M|.o.I.\<.....K 0500 37 c3 fd da 24 c0 a1 9c d2 c3 f8 8a 3e 98 ab 60 7...$.......>..` 0510 61 7d 59 40 bc 3d 0a bc ed 8b 31 fc e7 14 cc 8f a}Y@.=....1..... 0520 af a6 12 2c 2f 6a 5c 53 42 c2 75 a5 5d b5 bf 18 ...,/j\SB.u.]... 0530 56 7b f4 4b 60 d8 3e 04 13 a5 a5 1b 54 01 71 92 V{.K`.>.....T.q. 0540 fb 51 6e 88 53 f9 bf b9 74 28 0a cf 00 38 14 b2 .Qn.S...t(...8.. 0550 96 5a 0d 0c b4 d0 36 ef 66 bf 56 05 14 7c 61 03 .Z....6.f.V..|a. 0560 b4 24 5c 2a 3a 3c 55 f2 cd 5e 3f fd 69 ea 67 80 .$\*:<U..^?.i.g. 0570 1c 1e 4e 9c 46 4d 0c fb f9 ec f0 dd fa d1 3d ca ..N.FM........=. 0580 ee 60 4c 52 ea f6 d3 8f 94 e5 4e 2d a6 d5 bd de .`LR......N-.... 0590 24 36 45 cf 47 5d f9 25 74 4e 38 f8 1d 74 96 28 $6E.G].%tN8..t.( 05a0 98 f6 24 f4 e3 f1 ae 7e ..$....~ No. Time Source Destination Protocol Length Info 22000 254.884104 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=281835 Ack=5477 Win=1002 Len=1448 TSval=598968 TSecr=730008 Frame 22000: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 281835, Ack: 5477, Len: 1448 Data (1448 bytes) 0000 98 0e c8 80 54 10 7e 55 9f 1e 66 32 e1 fb 56 b2 ....T.~U..f2..V. 0010 4f b0 73 72 f2 aa 25 7c 6d 89 b6 43 d8 19 a7 67 O.sr..%|m..C...g 0020 ac c4 22 e6 99 07 d5 c9 59 d9 97 57 f8 94 6f 8b ..".....Y..W..o. 0030 3f 82 3c 5d 9d de 13 4e 65 cc e8 99 1b 11 99 30 ?.<]...Ne......0 0040 41 dc 25 0e 67 14 e7 44 c6 bc 49 0c 4a e8 93 0a A.%.g..D..I.J... 0050 9b dc 09 9d a7 84 a2 72 26 1b 70 0c bf 7c 44 90 .......r&.p..|D. 0060 2e 1d e5 6d cc 2a 92 d4 34 5c 4e 81 f9 f3 15 0b ...m.*..4\N..... 0070 5e 63 32 ba a0 ce 80 64 a0 51 21 23 05 90 43 18 ^c2....d.Q!#..C. 0080 10 27 3b 37 38 89 e4 85 96 f9 38 4a 81 ce dc b9 .';78.....8J.... 0090 f6 41 84 39 c3 8a ef d2 9a 16 5c 61 98 36 be 4f .A.9......\a.6.O 00a0 18 8c 84 3b 30 94 de 4d 88 93 d5 bf 56 c7 92 63 ...;0..M....V..c 00b0 cf 30 c5 e6 6e 91 92 7c e3 32 0c 33 7d ca 32 a1 .0..n..|.2.3}.2. 00c0 3d 7d 19 ec bf 11 d4 a3 a1 38 73 fd 20 56 e4 34 =}.......8s. V.4 00d0 a1 5c a8 e9 4d b5 3c 7b 1b d7 6d 01 35 39 29 e1 .\..M.<{..m.59). 00e0 7f 27 22 e1 d4 8a 4a c9 dd 9d cc e6 57 01 08 62 .'"...J.....W..b 00f0 6c 03 5b c2 fd 61 dd 06 c9 a5 b5 55 a5 7d f8 64 l.[..a.....U.}.d 0100 f5 d0 48 4b 71 a7 bd a8 a4 24 6b d8 0e a5 de 82 ..HKq....$k..... 0110 d3 2c bd f5 2a 32 e1 db c4 e9 4f 1d 14 ca 18 34 .,..*2....O....4 0120 17 8f dd 7c 9a 93 b7 08 0f 63 42 cc e9 4b 2d 0c ...|.....cB..K-. 0130 0c 51 22 73 4f 3e e2 e4 1d a8 c5 2a f8 13 b8 3e .Q"sO>.....*...> 0140 17 33 6c 09 ff df 16 52 d3 75 8c bc f0 0d 83 8b .3l....R.u...... 0150 d4 7a 1e 57 ad e3 19 67 75 bb 96 4e 57 c7 7a f9 .z.W...gu..NW.z. 0160 b0 d9 e5 2d da 8a 29 d6 25 40 f0 be 50 52 65 d0 ...-..).%@..PRe. 0170 52 ae 70 ba 54 5c 1e 8b 60 5c c2 b2 54 f7 d2 e1 R.p.T\..`\..T... 0180 0b 20 da 40 3e 3f 43 a0 64 e1 da 66 5c f9 06 39 . .@>?C.d..f\..9 0190 00 2f 75 f3 dc a2 a4 1a 22 3c 5a 0c a9 87 32 b6 ./u....."<Z...2. 01a0 6f f1 1e 7f 50 b7 a6 1f 37 2f d2 e5 cc ea c6 46 o...P...7/.....F 01b0 21 fa 88 37 d2 9f 84 49 e1 a7 31 60 fa 13 c3 39 !..7...I..1`...9 01c0 cf a6 64 77 36 ff b8 3c ad 18 c1 c2 6e 0a 1d a8 ..dw6..<....n... 01d0 ed 78 d9 42 cb 37 26 5d d1 47 e6 87 6d 83 ff da .x.B.7&].G..m... 01e0 c2 c7 26 38 f1 2d 69 70 79 6e e7 9f 6d 44 14 e6 ..&8.-ipyn..mD.. 01f0 52 2b 6b 46 1f 4b 41 32 9f fb b8 dd 05 69 61 63 R+kF.KA2.....iac 0200 01 5d f6 f8 d5 cc 62 68 fc 99 5e e1 35 03 8f 02 .]....bh..^.5... 0210 18 44 9a 59 fa 98 c8 cb 4a 62 41 50 80 ae 00 c5 .D.Y....JbAP.... 0220 65 14 fa 34 00 be fa 61 38 b0 e2 f9 f8 54 cd b1 e..4...a8....T.. 0230 65 82 70 de 98 77 4c 20 f2 ce a3 69 fc 4a d6 20 e.p..wL ...i.J. 0240 9f a0 b9 2d 20 79 07 6e 9d d1 e7 91 83 3a 5a 9e ...- y.n.....:Z. 0250 88 59 ef 24 f9 82 f2 9a 83 17 18 41 f1 dd f4 35 .Y.$.......A...5 0260 ff c9 bf 9f 48 7b 97 0c bc d9 86 5e b6 ec c8 da ....H{.....^.... 0270 7f a6 d1 f6 0f 9e 95 c9 93 e7 6f 70 f4 20 92 28 ..........op. .( 0280 32 e6 ff b2 6e c4 0f ea 9a 0f 9c 0b b1 da 7f a4 2...n........... 0290 30 d2 23 7b 4a 61 3c ec 04 a3 64 85 00 b2 8a c4 0.#{Ja<...d..... 02a0 8f 04 39 bf 3c 6a 70 3a d9 14 1c 46 a2 c6 8c 4d ..9.<jp:...F...M 02b0 d8 ee 4a c0 10 a5 48 4f 64 59 14 e4 24 13 78 e0 ..J...HOdY..$.x. 02c0 26 58 60 1c 24 9a 6a 7d a0 4f 2a 0c 7e ea 7a 85 &X`.$.j}.O*.~.z. 02d0 20 e7 f8 0e 83 69 f6 30 11 10 39 f9 1c de 7a 14 ....i.0..9...z. 02e0 a1 5d e3 ba cc 33 ad 7c e7 e9 e6 ea 6a 01 ca cd .]...3.|....j... 02f0 2a cb 88 37 2c 47 2a d2 a8 1a a9 b4 61 0c 54 72 *..7,G*.....a.Tr 0300 8f 8a 3c 98 9f d4 15 19 28 f4 44 8d da 9d 12 d6 ..<.....(.D..... 0310 ba e3 68 53 c8 4c f5 fa 99 e4 1b 34 91 33 9e 6d ..hS.L.....4.3.m 0320 a7 1e 47 01 75 c1 04 db e1 a9 97 46 bc 2e 87 11 ..G.u......F.... 0330 47 1a a6 9b 2f 8c 63 34 b4 bf df 36 cf f5 ca 38 G.../.c4...6...8 0340 21 34 29 42 19 9f d8 48 d6 b9 81 c3 72 03 a6 f9 !4)B...H....r... 0350 07 27 0c cc 64 06 30 e0 30 fb 92 20 08 9a 48 51 .'..d.0.0.. ..HQ 0360 bd 28 1b e5 b8 55 e0 83 4b 46 5a cc 53 bd 4b 14 .(...U..KFZ.S.K. 0370 ea 86 92 76 8a 9f 1b e3 b5 60 c2 88 4a 1d 7e 29 ...v.....`..J.~) 0380 ca be 1a 04 2e 07 77 2b 44 24 86 f7 e3 0f a9 2f ......w+D$...../ 0390 bf c9 09 29 c5 59 ca 59 8e e6 79 91 8e 80 d4 a1 ...).Y.Y..y..... 03a0 09 80 02 71 4d 2d b8 de 62 7a 88 5b 44 13 97 8e ...qM-..bz.[D... 03b0 d0 33 5b cc 9a 9b 44 cb f2 8e ec 99 48 cc 0c 1e .3[...D.....H... 03c0 62 c9 aa fc 5d e9 b7 bb 62 d4 bc ae 73 56 57 19 b...]...b...sVW. 03d0 d5 9f e8 f1 e2 11 70 08 9b 39 63 8b 9f 29 34 6b ......p..9c..)4k 03e0 15 d1 c3 ba a0 ed c1 ad 7c 73 1c 85 20 e5 b7 05 ........|s.. ... 03f0 6b 27 57 f9 85 fb ed 62 a2 dc 80 20 0b 68 29 74 k'W....b... .h)t 0400 a6 c8 33 48 f9 3a 74 98 03 5b 0c 63 09 02 1a bf ..3H.:t..[.c.... 0410 6a 60 33 cb b0 e3 32 d6 ae 97 7f 5c 85 e0 dc 0b j`3...2....\.... 0420 2f 93 19 0e d6 13 d7 68 94 c3 68 7b 31 4a b5 76 /......h..h{1J.v 0430 b2 0a fc 12 f0 83 07 1b b5 b9 df 26 46 c9 e3 4e ...........&F..N 0440 c2 31 8e 22 db eb 79 aa 60 cf 88 42 4c f4 65 c8 .1."..y.`..BL.e. 0450 d9 94 1d 95 d2 0d 37 06 5b 8b 12 88 c9 6f 78 b7 ......7.[....ox. 0460 d4 4d 7a 43 ac 24 1f 3a f7 ba 01 44 2b 59 a6 15 .MzC.$.:...D+Y.. 0470 6d 09 6e d8 ea fb 72 fa d9 f8 e9 5d 4f b1 36 cc m.n...r....]O.6. 0480 12 23 16 6f 39 bc c7 dc e9 32 db 69 e0 af 7e 5c .#.o9....2.i..~\ 0490 b0 0c 6d 92 ea 46 b3 38 db b2 27 2f 7f 0a 7b 8c ..m..F.8..'/..{. 04a0 fa a1 ef 17 0f f9 22 df b8 72 85 40 98 6d 39 73 ......"[email protected] 04b0 07 2a 18 1e 4e 79 e2 4a 34 ad 37 4b 33 d9 b3 cd .*..Ny.J4.7K3... 04c0 89 14 2b fe 0a 1a 33 ad 9d 25 3f 9b 60 92 18 c9 ..+...3..%?.`... 04d0 ed 30 b1 c4 d7 8e 7e 80 9d b9 cd f9 0d 5a bc dc .0....~......Z.. 04e0 e7 27 24 88 57 ee be 6f c2 e3 d4 81 0a f6 d1 eb .'$.W..o........ 04f0 25 5c 5f 9b 50 42 5f e7 27 2e e7 59 c1 90 06 06 %\_.PB_.'..Y.... 0500 a6 ab 39 45 07 28 bc 3c d5 2a b9 ff 77 1c fc 7e ..9E.(.<.*..w..~ 0510 d3 15 2a a3 1d a6 cf 04 ce 90 c5 17 1c 0c 9c fa ..*............. 0520 0b 8d 11 57 ee 45 ef ba a0 d2 0b a7 71 7c 1d 0e ...W.E......q|.. 0530 74 90 e8 53 09 5c f2 03 7e 0b 19 ac b6 b8 f5 47 t..S.\..~......G 0540 d9 a4 0b 54 b3 15 0b 38 3b 72 d3 d0 ab ee 6f 9b ...T...8;r....o. 0550 c6 2b 70 09 92 8e a1 03 b0 ab 81 3d f1 b1 09 03 .+p........=.... 0560 81 71 98 85 0c d6 90 ef 4c 18 86 bf d6 0e 7c e1 .q......L.....|. 0570 9e d4 ce 56 29 3b 15 5a 97 11 da 6c 08 01 5f 8f ...V);.Z...l.._. 0580 d9 fb bf 8b 4d 22 da 7e 97 f0 98 27 84 a3 a6 c9 ....M".~...'.... 0590 3c 8b 3a f0 12 0a a7 1a 8f 6a 1b 8f 8f 28 99 7a <.:......j...(.z 05a0 6b 68 74 41 ef 31 3e fc khtA.1>. No. Time Source Destination Protocol Length Info 22001 254.884207 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=283283 Ack=5477 Win=1002 Len=1448 TSval=598968 TSecr=730008 Frame 22001: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 283283, Ack: 5477, Len: 1448 Data (1448 bytes) 0000 b9 c3 b8 34 26 25 b8 15 6a 06 1b 95 9d d0 69 63 ...4&%..j.....ic 0010 6b 66 ae 99 bc ad 44 38 28 7b 2f a4 be fa ba 5c kf....D8({/....\ 0020 8e af 28 a4 2c ef ac e5 49 31 5d 82 07 5c a2 62 ..(.,...I1]..\.b 0030 a3 b8 27 a8 59 3f e9 b3 81 b9 02 e9 b2 45 36 45 ..'.Y?.......E6E 0040 c4 23 20 a4 cc d5 c6 2c 71 dc 99 a0 b2 bd 81 e8 .# ....,q....... 0050 1b b2 91 0f e0 d8 06 a1 54 33 a4 0b 70 bd ed 28 ........T3..p..( 0060 1e 87 f4 cb 6f 1a df 8e 16 76 6b 00 f6 f4 12 71 ....o....vk....q 0070 36 f2 91 9d 4b b6 e4 2f 99 9b 89 7c 1b ff 49 98 6...K../...|..I. 0080 fc 21 68 76 06 06 5a 5c 6e 63 30 cd 9a 38 f3 8a .!hv..Z\nc0..8.. 0090 01 15 12 76 c7 9e 7b e2 50 9e b8 c5 53 c3 79 f9 ...v..{.P...S.y. 00a0 e3 60 45 46 bb a1 fd b8 a9 ff 85 9b 02 6d 6d 33 .`EF.........mm3 00b0 8d ee 6f 01 0b dd 93 2b 1c 21 c4 2d b9 69 1d 7c ..o....+.!.-.i.| 00c0 f2 e9 81 48 b4 2f b5 cb 5b 57 28 4d 64 d4 7d 47 ...H./..[W(Md.}G 00d0 b8 de 27 e8 4c 04 d9 89 7a 95 41 75 53 00 2c 3c ..'.L...z.AuS.,< 00e0 ac 87 45 bb c6 f6 1a f8 f0 5d ff aa 8b b6 38 90 ..E......]....8. 00f0 44 e0 f7 f4 76 ad c5 cf 23 2d 05 54 13 b6 84 76 D...v...#-.T...v 0100 5a b5 32 f5 c8 e2 6b 38 9e a3 bb f2 c1 9f 7e cf Z.2...k8......~. 0110 02 10 a9 23 3c f1 39 3d b1 24 b8 d4 6b 7e b0 72 ...#<.9=.$..k~.r 0120 21 c6 a3 20 91 a6 9c 2e 85 12 67 16 c8 1e da 69 !.. ......g....i 0130 71 af 2c 30 26 6d 3e 7e c9 61 cb d6 87 f2 ab 78 q.,0&m>~.a.....x 0140 35 e0 03 f9 db 0a ab 77 ab be fb c1 0b 01 28 3a 5......w......(: 0150 5a 1d 7b ef 76 88 1d d5 92 82 87 fb 05 62 d5 1b Z.{.v........b.. 0160 3a a1 3e c3 eb 62 f6 bd 9b 0e 6f 54 32 95 54 94 :.>..b....oT2.T. 0170 47 31 56 4f 55 76 90 a4 3d 08 ff fe d9 ca d0 9b G1VOUv..=....... 0180 eb 18 ee 80 56 8a 3f f5 67 33 4c f1 93 41 71 fe ....V.?.g3L..Aq. 0190 9a b1 c6 bc 58 ad 06 82 88 5c 60 99 e0 18 b3 39 ....X....\`....9 01a0 54 7c 0e f8 b4 f8 66 90 05 bc 69 19 64 23 b2 ad T|....f...i.d#.. 01b0 0a 3e 89 af 96 e8 b4 5d 52 74 5f 2a 0e 24 83 4a .>.....]Rt_*.$.J 01c0 0c 87 7f 86 ff 53 9e ae 12 80 7d a9 8b 0b 1d 55 .....S....}....U 01d0 7c 84 fa 6b e4 d5 a8 08 cf f2 4a 9b cd fa 2b 88 |..k......J...+. 01e0 77 fd 0f f4 35 88 6a 3f 1c 69 ee af 8c 6e 8d c9 w...5.j?.i...n.. 01f0 60 c1 2f 40 99 5e dc 00 eb 80 e3 8f 06 a6 6d 91 `./@.^........m. 0200 85 d6 af 84 59 3d 25 8b c0 c6 ef 95 9d 16 75 48 ....Y=%.......uH 0210 b0 56 60 30 a3 f5 31 50 f0 89 7c 38 a2 f1 e0 95 .V`0..1P..|8.... 0220 0b 30 28 c3 4a 01 32 0c 76 8c 0c 83 6d 45 b9 fd .0(.J.2.v...mE.. 0230 c7 d5 af 29 ac 9b 8c c2 a7 81 85 82 09 ff 2a 09 ...)..........*. 0240 cb a9 f8 4f 26 e5 58 9b 3a 43 1e f2 41 ab 78 d6 ...O&.X.:C..A.x. 0250 fb da 2a 8b 79 8a 51 ae 7a 50 3c b6 d3 f4 77 92 ..*.y.Q.zP<...w. 0260 e3 2f 9d ee 40 d9 53 ff f1 0a c4 45 a8 67 8c 0c ./[email protected].. 0270 ef 23 da 59 72 95 2b 6a 1b 9d f8 08 75 a8 86 24 .#.Yr.+j....u..$ 0280 27 3b 49 82 ca 44 8c 45 e0 f9 e3 df d0 c2 96 fe ';I..D.E........ 0290 84 bc c0 d5 82 d4 b6 68 f6 d8 4b d8 ee 6b 34 2b .......h..K..k4+ 02a0 43 be 3f 84 5e c5 13 40 5b dc be 49 f3 ec a8 d8 C.?.^..@[..I.... 02b0 86 29 90 2f 95 10 0d 90 72 eb b1 96 fc 5e 9b 8b .)./....r....^.. 02c0 58 c1 69 fc 62 2d c3 ba 8d be 22 f3 ed 27 83 b7 X.i.b-...."..'.. 02d0 2a b0 ab d6 a3 38 df 21 cd 1d 4f 04 bc 15 e4 87 *....8.!..O..... 02e0 e7 2a 51 65 6e c7 39 35 1f 32 9e ee a9 8a cc 25 .*Qen.95.2.....% 02f0 87 70 c1 b2 8f 11 8f e4 e4 82 db 65 41 50 9c 4e .p.........eAP.N 0300 e9 de 92 f2 00 5c 91 08 8b 66 1e 9b 90 24 39 b5 .....\...f...$9. 0310 fc ad f6 a2 08 b8 a9 12 3a bd 84 a1 59 8e 77 91 ........:...Y.w. 0320 6e 0e 2b 60 14 bc 66 26 c7 3a 78 91 74 9c bc 22 n.+`..f&.:x.t.." 0330 88 f1 de bd 12 5b d6 8e ee c2 e6 b0 ec ac 12 fa .....[.......... 0340 a4 92 24 ad 65 d9 16 5f 59 00 73 a4 4d e0 69 2b ..$.e.._Y.s.M.i+ 0350 c7 fb 94 7d 6d 2d 57 89 cd 27 de 69 24 54 c0 f7 ...}m-W..'.i$T.. 0360 58 1e 08 7f 52 34 bd d5 9c 53 0f 41 0a 29 48 12 X...R4...S.A.)H. 0370 ea d2 dd b4 f4 f3 6f 00 2e 67 f2 73 ba e0 a5 65 ......o..g.s...e 0380 29 c5 22 7c d7 99 43 57 87 8a af ac 63 c8 3b 58 )."|..CW....c.;X 0390 1e d2 ea 3c 50 72 a7 4c d5 25 c6 5c ee 82 60 d3 ...<Pr.L.%.\..`. 03a0 3f 01 ce 92 77 67 44 a5 3d 5b 34 f7 e4 e2 57 42 ?...wgD.=[4...WB 03b0 31 43 01 96 af 71 36 0b 08 92 fd 73 bf 90 4c 05 1C...q6....s..L. 03c0 7d 1b 8f 77 87 6f 01 a7 a9 5b ef e0 50 a7 a8 38 }..w.o...[..P..8 03d0 f8 cf ae 2a 95 15 1b cd 1e d8 09 f0 35 9e 94 94 ...*........5... 03e0 ef 9c 65 c4 80 66 80 c2 7f 4e 7f 26 4f c6 42 c4 ..e..f...N.&O.B. 03f0 e2 e1 9e 7e 4b 94 a9 af bf 06 7a cd 08 a5 a9 a1 ...~K.....z..... 0400 28 58 79 21 b7 e6 8d 2c 7f 93 0f c6 37 8b 89 3f (Xy!...,....7..? 0410 88 c9 98 50 6d b4 45 8c c6 ca 71 87 7c 59 a1 76 ...Pm.E...q.|Y.v 0420 5f 0f 0f 62 2b 3c 36 d2 5a 10 22 4d 9c 98 05 65 _..b+<6.Z."M...e 0430 a7 17 43 e8 7a cc 05 0b 0b f0 91 77 e7 09 0c 99 ..C.z......w.... 0440 58 5c 4a cb 81 25 91 a1 bd da e7 36 35 28 c9 2d X\J..%.....65(.- 0450 8c 70 82 ce 82 60 1f b4 4e 38 01 0d 23 d2 57 5a .p...`..N8..#.WZ 0460 b8 fd ea 5c 23 fb 11 12 69 5e 89 ac 0a 57 7a 8a ...\#...i^...Wz. 0470 0d 9b 79 fe e1 7e f8 63 16 7e 6d 1d 89 29 ce f1 ..y..~.c.~m..).. 0480 87 f1 a8 4d 5b e6 f0 b0 17 b9 08 41 0b ea e0 58 ...M[......A...X 0490 27 e8 b5 16 ef 5c f2 e9 4a bb 73 4f c3 6e cc e0 '....\..J.sO.n.. 04a0 23 7b 0b 05 97 ba a7 4d 1d 13 e4 53 1d 6f aa 0a #{.....M...S.o.. 04b0 6d 2b 11 8b 78 8d 02 27 73 c1 c9 8f e9 6c 64 5e m+..x..'s....ld^ 04c0 70 da 95 73 8c 5b 20 ff 7d 44 be 1d 07 23 4b c9 p..s.[ .}D...#K. 04d0 f4 d7 9d ac 0c 44 ed bc 0e 21 72 3c c2 8f 88 78 .....D...!r<...x 04e0 21 d6 c0 0d b4 83 ca 31 de d1 4b 79 41 b0 11 c6 !......1..KyA... 04f0 1a 84 c1 47 4f 66 21 d4 8e d4 83 76 f8 61 8a 34 ...GOf!....v.a.4 0500 e5 7f a3 9e dc 54 04 4d 41 8a 7a a4 2d 08 5b d3 .....T.MA.z.-.[. 0510 c5 c7 cf 04 1b 3f 65 81 e0 9b bc b2 13 6d ef e7 .....?e......m.. 0520 a2 b8 97 ea c2 67 6b ec 39 55 3e f0 8d ea 2e 9e .....gk.9U>..... 0530 33 7f bf f6 3c 54 6f ce 9e 87 f0 a1 3f 8c fa e1 3...<To.....?... 0540 bc 29 00 d0 e3 42 82 7a 8f 20 46 f3 ed ad cd 47 .)...B.z. F....G 0550 62 5b 46 27 9e fd fa 56 e0 fc 6a 0b 46 19 88 43 b[F'...V..j.F..C 0560 b8 a2 3c 46 c6 ee bb 94 4b 8e e8 2f 5c 9e f6 a8 ..<F....K../\... 0570 78 06 a3 1e 67 7e bf 9e 0f ec 8b cd c2 08 68 b5 x...g~........h. 0580 1b c7 20 e4 3e 1d 4e ee 7a 89 68 0c 49 62 fe 6b .. .>.N.z.h.Ib.k 0590 49 c4 ec 52 d5 a1 d5 aa 92 ca 78 7b bd 24 f6 c3 I..R......x{.$.. 05a0 4b 5a 0e 07 c0 4b f6 7f KZ...K.. No. Time Source Destination Protocol Length Info 22002 254.884298 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:32 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45242 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 22002: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:32 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45242 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 22003 254.884369 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=5477 Ack=284731 Win=65535 Len=0 TSval=730032 TSecr=598968 Frame 22003: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5477, Ack: 284731, Len: 0 No. Time Source Destination Protocol Length Info 22004 254.884476 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=284731 Ack=5477 Win=1002 Len=1448 TSval=598968 TSecr=730032 Frame 22004: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 284731, Ack: 5477, Len: 1448 Data (1448 bytes) 0000 e4 9c c1 93 d6 68 b5 69 96 5c e0 b4 27 73 37 56 .....h.i.\..'s7V 0010 62 a0 33 af da 51 15 8d 55 e4 eb 19 f1 60 3d 9c b.3..Q..U....`=. 0020 90 8a 25 c8 e2 a2 c9 ff 84 15 9d 0d 5f a6 ab a9 ..%........._... 0030 cb df ea 85 cc d0 4f f2 21 6f 4e 9e c6 da c8 bd ......O.!oN..... 0040 d6 73 28 41 93 94 22 c2 16 da a6 2d de 53 17 44 .s(A.."....-.S.D 0050 a3 b3 27 fd f2 53 de 47 e4 1b 83 f5 51 62 15 73 ..'..S.G....Qb.s 0060 33 de d7 46 71 88 a1 d5 82 12 77 c3 af 5e 51 bc 3..Fq.....w..^Q. 0070 b9 d2 a7 d4 2e 09 92 71 6f a0 f8 cd 1e 67 fc dc .......qo....g.. 0080 d2 42 e8 33 ac 2e 3f 50 1e 9b 7e ad ea 4c 62 33 .B.3..?P..~..Lb3 0090 25 41 6b 3e 42 6e 1a 5f fe 9f b9 99 76 ae f5 fc %Ak>Bn._....v... 00a0 3b e8 27 09 8a ae ae 83 2e d9 77 ef ad 0b b1 fe ;.'.......w..... 00b0 f5 62 55 cd c1 71 75 25 9b 25 80 47 46 e5 b2 d2 .bU..qu%.%.GF... 00c0 74 17 94 4e 56 b5 e2 13 7a d0 ef cd 5a 92 98 46 t..NV...z...Z..F 00d0 6d 8d 9d 7d ae 15 58 db b0 ae e9 77 2f 6e dc 69 m..}..X....w/n.i 00e0 b5 a0 04 d2 88 69 06 a3 3c 3c 37 c2 d0 4b ed 96 .....i..<<7..K.. 00f0 ca 53 2c 70 6d d8 a6 8c db 91 aa 8e 1c 02 57 7b .S,pm.........W{ 0100 14 21 bf b8 6b 7b 7f a5 3f aa 99 34 aa 85 db 28 .!..k{..?..4...( 0110 25 13 d3 34 a1 dc bc 12 45 f0 54 68 a6 aa ee 4a %..4....E.Th...J 0120 d2 4f ff e8 57 41 94 db 21 1b ae 6f cf 1c d6 13 .O..WA..!..o.... 0130 0e 3b 30 cb 51 4f 70 a0 c5 c5 82 7b 36 69 27 af .;0.QOp....{6i'. 0140 93 5f 8b 6e 47 49 88 a7 fc fe 66 d8 c5 87 c3 da ._.nGI....f..... 0150 5a fb 42 90 af 06 58 b9 9f d6 0a 8b f7 88 b9 5e Z.B...X........^ 0160 f8 c1 b5 7a b3 bd 89 ab 59 90 2c 5e 31 6a 71 b1 ...z....Y.,^1jq. 0170 2c ec e7 c1 e4 8c 6d 7c c0 4c 36 47 43 bd ac 5c ,.....m|.L6GC..\ 0180 f4 59 f2 a1 28 1e 39 8c ad fc e0 04 24 0f 62 cb .Y..(.9.....$.b. 0190 e1 a3 2b bb c9 e2 b0 25 a0 3a b8 9a 52 39 25 12 ..+....%.:..R9%. 01a0 b8 47 cf 64 b4 ad db 48 bc 20 09 fb 45 ca 83 07 .G.d...H. ..E... 01b0 d8 9a 89 75 8a e3 35 fe df 99 88 59 ef a3 45 4d ...u..5....Y..EM 01c0 06 ff f7 61 1a 3b d9 36 f0 3b 91 6d 7d 1d 03 6b ...a.;.6.;.m}..k 01d0 68 8d fb 33 96 48 78 c6 4d e9 5e bf 7f 4c 68 04 h..3.Hx.M.^..Lh. 01e0 ea e1 fd c7 8d 14 37 01 29 7f 44 9e 71 c7 f0 6e ......7.).D.q..n 01f0 33 1b db 2a 23 e9 f6 2a a3 92 ee b5 b3 c6 ca 31 3..*#..*.......1 0200 e6 90 14 25 9b 2c 17 f3 a0 fc d7 85 d9 2b ee 71 ...%.,.......+.q 0210 bc ba c0 59 ae bc da 7d 2d 5b 6c 9a 90 53 e2 4a ...Y...}-[l..S.J 0220 b0 45 d7 28 7c 66 e9 c5 68 2d 50 2c 85 66 e0 e1 .E.(|f..h-P,.f.. 0230 82 ae 9f ea 15 2b db e2 27 b4 b0 38 9e 9a 39 a7 .....+..'..8..9. 0240 f6 99 88 92 f6 2f ce db 7d 35 4d ad a5 db c9 ea ...../..}5M..... 0250 90 3c 5d e2 5d 86 11 f2 08 68 91 85 9d 75 6a f5 .<].]....h...uj. 0260 40 ea 0b 79 90 dd b6 ac 9e 36 54 79 42 c3 e0 de @..y.....6TyB... 0270 4a af 54 03 40 b3 4e 12 31 d6 36 a4 ad a1 bb b3 [email protected]..... 0280 25 09 bc 5f fd e8 75 fa a8 6e 82 1d 31 a2 e4 08 %.._..u..n..1... 0290 90 db 90 be 5d 25 06 36 7e 08 33 2b 71 4b ee 86 ....]%.6~.3+qK.. 02a0 16 3d 6c 12 fd 4a 56 4d f5 7d 9b b0 99 a3 ee 55 .=l..JVM.}.....U 02b0 e0 ce 6d 5d 14 65 5a b5 f0 9a a9 18 eb 75 12 77 ..m].eZ......u.w 02c0 0e 10 b5 d2 08 42 fa 14 24 17 fc 8e 71 0a 27 4f .....B..$...q.'O 02d0 4b ed 34 ba 48 0a 6e fe 04 86 f3 9c 2b d3 04 be K.4.H.n.....+... 02e0 eb f9 da 3a 99 bc d3 90 e5 55 ca 12 6a a7 c6 ac ...:.....U..j... 02f0 e4 68 c0 6a a3 68 48 9b 88 d6 6a 74 ff 26 7e ad .h.j.hH...jt.&~. 0300 cc 1c d1 24 fc 69 5c b3 1e 76 ed df 77 a0 ac e6 ...$.i\..v..w... 0310 78 c5 42 f4 b5 f6 fd cd 6f ce 3e 9c ff c8 cc 71 x.B.....o.>....q 0320 c9 37 c6 01 4c 43 7a f2 86 96 11 6a 97 09 4a f0 .7..LCz....j..J. 0330 14 5c 03 19 c1 39 dd 2f 41 a4 f4 12 3e b9 6a e6 .\...9./A...>.j. 0340 78 66 c3 68 5f d8 29 5f 3a 09 89 ee 8e f9 b3 8e xf.h_.)_:....... 0350 70 a6 cd ec 15 ea 6e 7c 61 50 95 03 56 fc 79 d3 p.....n|aP..V.y. 0360 ea 98 f8 2e cb 94 b3 e5 2f 94 cd 40 6e ab 74 3b ......../[email protected]; 0370 bc 27 61 be de 94 88 2f 9a 8a 26 c1 bf c8 db d5 .'a..../..&..... 0380 2c 68 72 36 d7 90 28 7d 39 c2 1c 9b 47 1c 6e 1f ,hr6..(}9...G.n. 0390 d8 26 5f 97 98 25 0c f5 a7 d8 d4 70 b5 56 a0 a9 .&_..%.....p.V.. 03a0 0e 48 93 fd 0d 3a bc 2e 18 b9 13 7e 13 1b 29 62 .H...:.....~..)b 03b0 89 4d 7b 6c d7 c7 18 36 05 6e 29 6f 65 b2 50 d8 .M{l...6.n)oe.P. 03c0 24 45 b1 b1 01 0d 9a ef 3c bc 82 a4 c5 6c f9 21 $E......<....l.! 03d0 aa 0f 0b b0 9b 2f 3a f8 22 75 be d1 8c df 85 74 ...../:."u.....t 03e0 68 d0 e5 f5 cc c9 af 86 de 7d 08 69 aa 6f c7 a4 h........}.i.o.. 03f0 79 7c dc 74 5a 13 8b b1 09 6f 18 09 c5 50 7f c6 y|.tZ....o...P.. 0400 bd 37 35 6a b1 1a e1 a8 77 78 45 71 53 be fc ca .75j....wxEqS... 0410 ad 3d f6 ea 10 21 8a 2d bf ec 2f 02 a1 5a 62 9b .=...!.-../..Zb. 0420 1b 40 de a7 f8 cf 15 e2 ab 2d e1 f2 34 b5 82 02 [email protected]... 0430 58 28 98 22 0b 2a 4a 86 71 f2 3b 7c 3e d1 65 6b X(.".*J.q.;|>.ek 0440 c5 a5 ee 13 19 de be 06 e7 d9 f4 9b bf b2 d4 a0 ................ 0450 97 1f 19 0d ba 3c 00 de 06 c0 04 9e 08 a2 81 a2 .....<.......... 0460 72 83 50 8e 8e 95 00 a0 2a 8f ea 26 be 20 ae 42 r.P.....*..&. .B 0470 c9 3d 34 73 2b 96 32 2d 2e 2a 76 8e e7 ca 26 f8 .=4s+.2-.*v...&. 0480 11 cb 0d eb 66 ad 3d 0c c1 a6 c2 5b fb 39 e6 68 ....f.=....[.9.h 0490 a8 e5 6b b8 a2 20 13 01 bc 72 bb 06 27 c9 3b d3 ..k.. ...r..'.;. 04a0 3b c2 b4 49 22 4d 85 f9 e1 95 de 5b e0 25 72 4f ;..I"M.....[.%rO 04b0 c7 0e 85 ce e6 65 16 cb 9c 2a 84 2c 15 0d b3 9a .....e...*.,.... 04c0 2c 14 d8 d4 27 92 d6 35 13 23 68 bd 84 65 6b 52 ,...'..5.#h..ekR 04d0 48 32 2b 03 06 0f 8e 91 7c a0 34 8d d8 ce 51 0b H2+.....|.4...Q. 04e0 3f fa e1 5c 70 18 04 03 ac 6d 24 04 59 50 90 13 ?..\p....m$.YP.. 04f0 e5 b8 11 50 32 65 d8 5c a2 cb 42 75 9c be f2 02 ...P2e.\..Bu.... 0500 1a 55 3a 42 8f 66 98 d6 dd d2 d2 17 bd 81 26 e3 .U:B.f........&. 0510 fc 46 7b 2a c5 64 cb c9 bb eb 0f 14 f4 29 12 2a .F{*.d.......).* 0520 56 6c 94 6a 2a 18 96 62 a2 0d 7d 23 e0 03 52 08 Vl.j*..b..}#..R. 0530 ba 7c 00 31 5c 95 e7 79 3c 80 8c 7d 2a 9a 58 e2 .|.1\..y<..}*.X. 0540 d9 88 d7 8a d1 5d b4 f4 d2 93 9d 53 de 4f 28 03 .....].....S.O(. 0550 e0 9c 11 62 b2 3c 77 fe 31 b5 25 05 a0 3a 5b f4 ...b.<w.1.%..:[. 0560 a1 2d 92 8d da 5f 9d 43 d8 36 15 26 85 c5 86 6d .-..._.C.6.&...m 0570 b1 8e 4e e9 18 98 a7 5c ba 9f 41 09 5a de 66 64 ..N....\..A.Z.fd 0580 1a 12 f2 0c 14 47 10 a0 a4 67 d3 d5 2f 5d c6 64 .....G...g../].d 0590 c5 90 95 83 81 93 3c 93 b0 a7 fc 03 62 d6 b7 87 ......<.....b... 05a0 86 da d5 37 55 b8 9d 47 ...7U..G No. Time Source Destination Protocol Length Info 22005 254.884568 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=286179 Ack=5477 Win=1002 Len=1448 TSval=598968 TSecr=730032 Frame 22005: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 286179, Ack: 5477, Len: 1448 Data (1448 bytes) 0000 01 10 d0 4e ef 06 7b 6e a4 d0 b5 de 1f 73 56 2b ...N..{n.....sV+ 0010 a8 1c 8e 68 19 82 f3 b5 7d 13 de b1 c3 d4 05 88 ...h....}....... 0020 81 fa 79 09 9d 85 4b 28 81 f5 6f e1 7e 42 04 17 ..y...K(..o.~B.. 0030 60 61 5e 34 ae 3d 72 55 7a de e2 9a 0c 75 52 3f `a^4.=rUz....uR? 0040 dc 2e 40 87 4f 3b 8b 9d 0a 33 3e f3 fe 76 35 cb [email protected];...3>..v5. 0050 9c b8 fd f1 02 67 20 49 33 4f 3a 36 1c a8 39 15 .....g I3O:6..9. 0060 e1 0c 40 e9 2f a7 50 e1 bc a2 21 e9 c4 ec c0 9c ..@./.P...!..... 0070 ff b9 cb 96 20 3b e8 c6 b3 c2 a2 37 b0 51 b8 ba .... ;.....7.Q.. 0080 e9 2e 00 39 c2 93 56 20 ee 78 5c 54 2b 86 3e 70 ...9..V .x\T+.>p 0090 e5 f7 27 dd e9 19 58 b1 8d 38 72 6f 79 06 c6 40 ..'...X..8roy..@ 00a0 52 7f c9 08 6a ba b5 50 f9 2a 99 ea 64 eb 13 d2 R...j..P.*..d... 00b0 4e b9 fd 4b 69 bf a7 d2 50 0d 31 99 24 d1 90 2f N..Ki...P.1.$../ 00c0 5c d5 1d 73 e0 56 39 fc 32 ad 3c 57 cf 47 cf e1 \..s.V9.2.<W.G.. 00d0 b7 de ab e7 c1 07 82 8c 32 8e 3f a0 0e c1 e0 d0 ........2.?..... 00e0 56 6d 00 83 c8 70 f9 08 e5 18 6f 5c 37 48 f0 32 Vm...p....o\7H.2 00f0 9c 89 a8 c1 62 f4 c4 36 56 88 8f d6 f0 fb 9e 3d ....b..6V......= 0100 18 ad d1 97 0f 73 5a 1f 53 d6 cb 60 fd c5 70 5c .....sZ.S..`..p\ 0110 d4 d2 f5 c7 93 59 e7 a1 38 30 9d 72 55 05 e8 f3 .....Y..80.rU... 0120 86 3d a1 1a d6 42 6d ec 20 b8 b1 84 02 9e 0d 09 .=...Bm. ....... 0130 f7 92 23 b2 36 c5 3d 25 63 79 76 fd b7 91 b1 92 ..#.6.=%cyv..... 0140 c2 64 b8 cc fc cd 89 d8 58 f5 6c 87 4b 7d 7d 6f .d......X.l.K}}o 0150 26 15 bc 4a 38 38 15 a7 7e a2 29 d6 fd c7 f2 db &..J88..~.)..... 0160 5a dd bf 43 c9 cf d7 80 2a 42 17 56 71 e0 58 01 Z..C....*B.Vq.X. 0170 2b e5 01 0c b6 d9 5e e2 99 b1 67 df 93 31 d3 3d +.....^...g..1.= 0180 d8 30 71 4f 31 24 fd 4f ba 88 ed 13 0b 8b ae 7c .0qO1$.O.......| 0190 6b 22 28 75 83 3b a2 97 bf 3e a7 d1 70 4f f2 85 k"(u.;...>..pO.. 01a0 3a dc c8 c3 07 ae eb a9 2b e9 c2 b2 b5 ea 6b 9f :.......+.....k. 01b0 98 a6 6c 74 0d 1a eb fb 06 98 5c 45 20 a5 20 c4 ..lt......\E . . 01c0 81 ca b9 af 71 69 3f de a2 e0 a9 a2 2d eb 94 bf ....qi?.....-... 01d0 8f f0 24 27 2f 89 66 f1 01 46 eb 4f 1e 71 02 ef ..$'/.f..F.O.q.. 01e0 c2 48 c5 fa f0 ed 34 63 be 31 04 26 f2 fe fd e6 .H....4c.1.&.... 01f0 b7 ce f8 69 e4 57 31 73 15 01 c4 da e0 da b8 f6 ...i.W1s........ 0200 10 62 63 39 28 3b f3 d9 5a f1 cf 16 db 01 42 16 .bc9(;..Z.....B. 0210 15 7a 21 c5 d0 23 8a 95 2b 5a 31 e5 90 71 1a d1 .z!..#..+Z1..q.. 0220 bb 5a 5f b4 87 a5 5a cc 3a f0 a3 4f e7 96 22 0f .Z_...Z.:..O..". 0230 3a be 37 dc df e9 37 42 5a 7b 41 f3 06 7d 0d 17 :.7...7BZ{A..}.. 0240 1f 57 1c a7 e5 95 03 4d df 59 30 8b 43 76 67 18 .W.....M.Y0.Cvg. 0250 18 2b fa 22 d5 d6 17 1f b6 d5 32 2f 6e f8 4f 01 .+."......2/n.O. 0260 9c 54 1c 5d 7d 2c 58 39 95 32 55 be 13 35 56 5e .T.]},X9.2U..5V^ 0270 1f 80 ca 2b a5 50 89 b3 da 32 37 5a 49 04 c0 f6 ...+.P...27ZI... 0280 1c 72 64 b8 89 52 2c ed c5 ae 29 7a 61 f1 8d fc .rd..R,...)za... 0290 de c7 0c 6e 46 5d bb 69 8f 95 a0 89 2d cb 26 c1 ...nF].i....-.&. 02a0 76 da 31 4d 88 a9 25 bd 1f 8e 28 21 fc f1 bc ab v.1M..%...(!.... 02b0 5f 43 27 14 a4 f3 5b d0 35 d9 ce 17 1d 9d 53 ea _C'...[.5.....S. 02c0 17 87 1f 6e a8 6a e8 6b 8b ce df 1f dd 3a ba 87 ...n.j.k.....:.. 02d0 a9 d3 7b 11 23 e2 19 e4 8b c9 d6 ee 77 f6 b3 9e ..{.#.......w... 02e0 c4 17 cd ac 34 f5 6e f7 fe 2d 9a c3 3c 1e 8b 32 ....4.n..-..<..2 02f0 45 bf b5 ec 5e 42 e0 17 9b df b6 7f 24 5a 50 21 E...^B......$ZP! 0300 03 87 2c 8c 56 95 16 99 cd 67 51 d0 8c 3a 76 83 ..,.V....gQ..:v. 0310 d7 e8 d0 36 d6 f9 ec b9 e9 ed 7f 90 91 77 6e 54 ...6.........wnT 0320 b3 e7 85 47 f3 a4 42 14 62 9c f7 7c 44 b1 27 6f ...G..B.b..|D.'o 0330 aa 4f 8d 43 b5 ab 9f 95 76 04 47 56 19 f1 c9 12 .O.C....v.GV.... 0340 af e6 a5 07 6a 0d 53 96 10 e3 9b c0 7a 5f 33 1a ....j.S.....z_3. 0350 a6 e5 4a 15 37 21 e6 e7 12 71 f3 09 c4 93 b6 c0 ..J.7!...q...... 0360 61 ce 2a 68 f3 76 be 1c c7 ac 83 15 18 b9 f6 f1 a.*h.v.......... 0370 a3 0c b7 d7 1e fc 7f 7e f4 97 8e 0a a3 1c 0e 37 .......~.......7 0380 08 87 be 44 29 33 e1 6f 0f 36 b7 89 23 bf e4 84 ...D)3.o.6..#... 0390 ca 46 34 6c f2 71 7f 04 94 8e 32 d8 e5 a3 64 62 .F4l.q....2...db 03a0 e3 2b a2 5b 91 46 8a c6 63 84 5b 90 06 be f2 28 .+.[.F..c.[....( 03b0 d3 a3 2a 73 83 94 ab 72 22 70 b9 2d fc c6 64 ca ..*s...r"p.-..d. 03c0 a5 09 bc 42 5d 77 a8 03 60 64 57 16 c7 a9 7e f2 ...B]w..`dW...~. 03d0 b4 3a 1c 9d ef ea 2f 54 88 b1 8f 9f 8e a7 3d ba .:..../T......=. 03e0 49 8a 68 c8 70 2c 53 40 eb c6 a6 fc 5b f3 d7 ed I.h.p,S@....[... 03f0 ee a4 30 b3 c7 0c 31 79 87 d9 5f 13 bc 50 1a 04 ..0...1y.._..P.. 0400 e1 ce 25 1b 54 12 89 42 94 d1 a5 34 d8 f9 39 90 ..%.T..B...4..9. 0410 8e 9f 9d 87 dd 23 01 c5 99 aa e5 3d 93 f5 34 ee .....#.....=..4. 0420 53 db e8 cd e8 0e bd eb 71 7e 26 66 26 57 e6 7d S.......q~&f&W.} 0430 96 91 fb 69 fa b8 cf f2 b6 8d 47 7c 4e 32 3e 41 ...i......G|N2>A 0440 88 e2 20 53 15 6e 5a 37 f5 ad 93 bf bb dc ad 94 .. S.nZ7........ 0450 55 0c 5f 60 31 82 76 c6 d0 1e 42 1b 78 1d fe a6 U._`1.v...B.x... 0460 3b f9 e7 95 16 62 12 2f 9c 22 1b 4e 4b 86 42 cb ;....b./.".NK.B. 0470 38 43 18 d0 88 02 42 ca 5b d2 32 0e dd 4a 59 d2 8C....B.[.2..JY. 0480 45 8f a6 ac 89 0e 45 11 2c 91 f3 ce c7 ac 4c 13 E.....E.,.....L. 0490 20 36 9c 00 eb 50 5e 47 17 6d 64 88 17 c4 58 c9 6...P^G.md...X. 04a0 61 ab cf bc 7d 88 39 d1 7f 5c 47 fb 6e bd 52 7e a...}.9..\G.n.R~ 04b0 0d 6e 26 2a 1c be 0d 8d 6c 37 c3 72 97 15 25 2b .n&*....l7.r..%+ 04c0 99 4b dc 17 56 d0 e6 df 4f b3 fd fa a0 02 7d 7c .K..V...O.....}| 04d0 52 6d bf 7e d3 0f 2f d2 3b 2c 54 f2 4d da 8d f1 Rm.~../.;,T.M... 04e0 2a 0f 0a 67 d3 83 8d f3 1a 8b 30 66 47 2b 9a 6a *..g......0fG+.j 04f0 dc fa 99 a3 96 df 91 bd 2b 1c e2 d6 a8 4f 91 36 ........+....O.6 0500 33 37 40 f1 36 e7 3c 45 d6 f5 c5 f3 91 56 17 9e [email protected].<E.....V.. 0510 ee ae 03 31 f3 7e 2d 8c 9f bb 63 11 1e 95 67 30 ...1.~-...c...g0 0520 12 b1 03 05 95 d8 d6 af 02 2d 1f 77 61 63 9b 64 .........-.wac.d 0530 28 1c a0 1b 0e a3 48 51 7c a0 63 cf 0f 8f ae e2 (.....HQ|.c..... 0540 f5 12 f5 80 66 33 31 f1 e2 29 88 6a 7a f9 af af ....f31..).jz... 0550 d0 63 85 b3 ab eb c8 9e 45 0e 59 7b 0e f6 38 a1 .c......E.Y{..8. 0560 66 b7 d4 ef 3b 9e 82 46 29 46 13 66 32 bc b7 29 f...;..F)F.f2..) 0570 12 5b 8a a8 a7 dc c5 17 2e 43 58 0c f2 ef 51 c6 .[.......CX...Q. 0580 7c 12 0b a2 af 7f a8 d9 07 e1 45 86 be 99 8d 3f |.........E....? 0590 ea e6 ee f4 6e e2 66 10 81 2c 20 fc a7 be 19 61 ....n.f.., ....a 05a0 e3 89 7c a3 ac 14 83 96 ..|..... No. Time Source Destination Protocol Length Info 22006 254.884668 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=287627 Ack=5477 Win=1002 Len=1448 TSval=598968 TSecr=730032 Frame 22006: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 287627, Ack: 5477, Len: 1448 Data (1448 bytes) 0000 b0 ca 04 76 73 e1 d2 d6 46 ee c4 1e 07 5f c4 9c ...vs...F...._.. 0010 92 53 6e 40 1b 76 15 08 73 d9 4b b5 b5 62 c7 08 [email protected].. 0020 4e 39 a3 67 a7 47 a7 db e2 a1 65 38 37 36 b4 95 N9.g.G....e876.. 0030 75 fc 34 34 f0 b8 47 f6 93 d5 97 9d 75 ba f8 70 u.44..G.....u..p 0040 f9 1a ce 32 31 1e 18 6a 51 5f 62 2f 8e f0 ff 74 ...21..jQ_b/...t 0050 f2 80 46 5d 4c ed 10 61 89 49 f3 60 a8 31 19 95 ..F]L..a.I.`.1.. 0060 64 0d 95 7d f3 fe 74 69 ec 01 97 3a 27 8c a8 c1 d..}..ti...:'... 0070 68 b6 8a 30 37 0d e6 7e db d0 89 61 31 94 a4 f9 h..07..~...a1... 0080 b3 b4 5c 8d 9a fd 52 93 e5 75 1e f2 11 4b be 12 ..\...R..u...K.. 0090 5c 9a f9 f0 37 80 07 d0 e3 71 e5 98 dd 93 18 d4 \...7....q...... 00a0 6d 92 83 bb 39 c0 eb 6d 77 bb 09 fa 1f 63 cb d0 m...9..mw....c.. 00b0 cb a7 86 7b da 10 05 c5 ab 83 0f 09 2b 30 4d 6e ...{........+0Mn 00c0 9e f4 0e 3b dd 4d 75 ab 79 ca b9 48 cc 66 4c 92 ...;.Mu.y..H.fL. 00d0 a8 e9 b8 b8 33 21 1d 3f 7d 2e 8c 42 70 4a de e1 ....3!.?}..BpJ.. 00e0 e9 8d ce 13 39 f5 f8 a9 81 8d d2 cc d5 6d dd e7 ....9........m.. 00f0 5f d6 d1 99 f0 63 73 0c 34 20 07 ed 84 8f 24 eb _....cs.4 ....$. 0100 bf 63 ed b8 a9 b6 2e 35 1e 53 f4 51 e8 aa c6 ee .c.....5.S.Q.... 0110 8e a3 d3 a0 87 c3 70 0b 73 e8 4d 04 1e 67 84 56 ......p.s.M..g.V 0120 04 26 13 b0 7a f5 ca 55 7c ff f6 be d9 b0 68 b7 .&..z..U|.....h. 0130 d7 e3 af 22 3d 62 dd 1d dc f8 a1 30 ee 40 a2 15 ..."=b.....0.@.. 0140 78 3a 24 9a 1c 18 49 a1 d4 8c e8 9d ef c7 bd ea x:$...I......... 0150 c3 b6 64 1b e2 15 8a 8e b7 a6 4f b0 fb 1e 2a 4b ..d.......O...*K 0160 f6 ab 84 30 d2 69 82 28 bb 5d f1 ab 26 59 f7 b6 ...0.i.(.]..&Y.. 0170 19 67 13 43 be 24 d5 8f a7 a2 6d f8 db 34 fc 75 .g.C.$....m..4.u 0180 2f 9a 95 3d cc c4 d8 d6 6a 96 28 6b 33 8f 19 9c /..=....j.(k3... 0190 6a e8 1d eb f0 eb 92 62 08 b2 7c 54 73 30 d9 6d j......b..|Ts0.m 01a0 ce 6a 81 c3 9f de e1 1c f6 9b b3 b5 de 81 a3 c6 .j.............. 01b0 82 81 2d e0 b5 f1 f7 e2 89 5b 38 87 60 bb 4f fc ..-......[8.`.O. 01c0 ee 21 01 48 ef 72 d7 23 05 df 6b e7 d3 74 ee 4a .!.H.r.#..k..t.J 01d0 bf fd b7 c4 bb ba 6d cc 47 66 c2 ab 23 88 ff 53 ......m.Gf..#..S 01e0 95 30 fa 3b 65 e5 d8 90 b9 27 e0 49 fa 23 46 0b .0.;e....'.I.#F. 01f0 a9 1e 64 ed 8f e1 89 b4 a5 11 90 c0 b2 85 83 c5 ..d............. 0200 3a f8 d4 2d 5d 84 59 db da 35 23 af e0 7e e9 25 :..-].Y..5#..~.% 0210 d1 18 13 eb a2 1a b2 41 b3 b4 25 85 00 8b 6f 78 .......A..%...ox 0220 42 14 f3 7d 9a 02 88 c1 e0 e4 00 14 cc 62 96 af B..}.........b.. 0230 67 34 70 59 95 d3 72 b5 f5 73 dc 80 e0 59 f6 b7 g4pY..r..s...Y.. 0240 f2 dc a6 46 25 e2 85 c1 fa e2 9b 30 5a 33 91 cc ...F%......0Z3.. 0250 22 f3 3d 5c 9d a8 72 f1 63 ce 20 b7 c2 d4 68 89 ".=\..r.c. ...h. 0260 11 97 d6 b1 93 a1 53 f6 ed dd fe 73 c3 f9 ee b8 ......S....s.... 0270 73 e4 0a d1 34 4a 4b 62 66 b3 50 5e 7b 28 a9 6e s...4JKbf.P^{(.n 0280 3c ff e7 f6 3d 0f ef 7a 4b b8 8c 54 1b be ac c9 <...=..zK..T.... 0290 4b fc 80 eb f0 25 db be 0a dc ab 61 31 76 c6 c5 K....%.....a1v.. 02a0 59 0f ec 1e 2d e9 92 d8 8d 2c 67 ba 93 fd c9 88 Y...-....,g..... 02b0 62 d0 49 67 a3 f5 54 ff 3b be 94 8c 84 2b 31 ff b.Ig..T.;....+1. 02c0 c7 bf eb c7 76 fa b7 d3 66 fc d8 4a d3 55 8f 1c ....v...f..J.U.. 02d0 e1 1a 20 86 82 09 d9 e3 ed 37 9b 93 79 68 24 4e .. ......7..yh$N 02e0 a2 c8 3a af 56 1d 6f 65 3a 09 e2 fe 79 40 8e 98 ..:.V.oe:...y@.. 02f0 37 ec c4 66 a6 80 c8 82 07 6e d7 c2 43 a5 d6 a8 7..f.....n..C... 0300 63 c4 6a ac bb 22 25 49 52 d9 b5 3e 2f bc ee 48 c.j.."%IR..>/..H 0310 78 8d 78 82 a8 93 75 4d cd b1 90 34 49 67 94 41 x.x...uM...4Ig.A 0320 5f 8f 10 ff d8 46 2c 7e 79 25 1a 86 4a 4a 71 da _....F,~y%..JJq. 0330 44 14 4f b0 8c 2a e7 63 c3 a0 b7 96 11 ca d0 ac D.O..*.c........ 0340 e9 c5 dc 8a 40 9b 8a 3a d3 59 4f c5 be f0 6e c4 ....@..:.YO...n. 0350 12 1c 83 1c 88 bd c0 59 cd 42 c2 45 a7 e3 49 5a .......Y.B.E..IZ 0360 bf 59 f7 c2 5c 18 a5 ce fc c9 f9 07 70 96 86 95 .Y..\.......p... 0370 94 e6 9d 9e b1 5b a0 0c 74 d7 cd b4 0c ad fc f7 .....[..t....... 0380 0a 1f 07 49 82 89 8c 7d 42 8b 5e 11 f9 11 d7 30 ...I...}B.^....0 0390 2f 1a b8 34 4f 72 ab 07 ee c2 95 58 1a af a5 63 /..4Or.....X...c 03a0 1c e2 eb 0e 4b 0d 8b e1 e3 5c 2c 5c 12 5c fa d7 ....K....\,\.\.. 03b0 f9 3f 77 5d ef ea 97 62 a2 1a 93 c3 73 20 f3 17 .?w]...b....s .. 03c0 94 4c 40 fc 4a fa 2b 2a e5 7f 80 27 cb 44 ad 6b [email protected].+*...'.D.k 03d0 ce d6 36 ac 8c 71 fa d4 47 41 18 1f a8 81 49 70 ..6..q..GA....Ip 03e0 d4 13 c2 c3 b6 ca d2 0d 7a 8d 70 f8 a2 2f c7 d2 ........z.p../.. 03f0 06 83 25 5a da 74 4e 68 02 44 d9 c5 b9 e5 83 4f ..%Z.tNh.D.....O 0400 7e dc 3b 6a df bd 71 70 d5 f4 68 96 ff b0 ae 9b ~.;j..qp..h..... 0410 18 bb 10 bd 4b ee bd 6e 53 2e 93 1f 17 bc 66 d7 ....K..nS.....f. 0420 2d e0 32 1f 32 97 7e 49 98 15 fa 8f 78 d3 c3 39 -.2.2.~I....x..9 0430 25 f9 47 55 90 b0 2e 9d c5 38 88 24 26 5d 44 fb %.GU.....8.$&]D. 0440 20 d0 3e 78 3a 52 86 4c a2 76 4b cc 02 8e 29 53 .>x:R.L.vK...)S 0450 a2 2e 9b d1 b5 4f bf b0 47 05 0a 51 6e 64 03 29 .....O..G..Qnd.) 0460 04 93 b1 59 2d 25 a2 07 73 38 a7 db c5 b4 04 e0 ...Y-%..s8...... 0470 68 68 52 a9 09 a9 34 51 a1 a7 30 7d de 39 68 9b hhR...4Q..0}.9h. 0480 ed 50 e4 cf a9 ff 2b 7d 27 cd ad af d3 fa 2e 03 .P....+}'....... 0490 41 54 34 74 de dd 79 61 58 86 c7 d1 9a 4b 78 44 AT4t..yaX....KxD 04a0 77 aa 02 8b c2 df 11 32 d7 89 4e f7 06 ff 0a f7 w......2..N..... 04b0 de 37 53 55 17 19 ee 96 40 74 0e 90 13 52 e4 58 [email protected] 04c0 04 37 19 cf e8 86 bf 9b bc b8 fb 38 5b 7d 58 37 .7.........8[}X7 04d0 6f e2 ca 83 05 cb 5d e9 89 b0 53 22 cb dc cd d6 o.....]...S".... 04e0 40 bd 70 4a 06 ca 6c 72 45 01 18 36 52 f0 a6 e6 @.pJ..lrE..6R... 04f0 d8 b9 89 42 e4 83 07 be 45 49 42 ed 86 f7 08 26 ...B....EIB....& 0500 ab 13 9d 7d 29 92 7c d3 bc 18 17 ae f6 15 b7 96 ...}).|......... 0510 ef 08 02 30 97 2b 57 0d ea 52 74 84 ff d6 84 b9 ...0.+W..Rt..... 0520 dc 9e f1 62 ea d4 a2 a2 36 1c 87 1a 5e cd 44 e0 ...b....6...^.D. 0530 0a 32 5c c5 84 4e 66 55 54 12 1a 3d b3 b1 c3 31 .2\..NfUT..=...1 0540 24 2a b9 83 96 f7 a6 13 8a 40 19 2b 7b e0 d2 19 $*.......@.+{... 0550 0f e9 4a 8c 6b d2 ac 1f ef 61 78 3e b2 9a fa c5 ..J.k....ax>.... 0560 9d 2f 95 c4 0f 6f b4 68 24 51 05 db fe 8b 70 00 ./...o.h$Q....p. 0570 20 4f 9a c6 22 a4 8c e6 10 69 83 5f 51 12 57 9d O.."....i._Q.W. 0580 6b c7 80 48 03 de be 2d fb 60 8a 31 52 d2 18 5b k..H...-.`.1R..[ 0590 7a f8 b6 de 29 6c 0f 78 81 08 58 c6 bf df 62 9b z...)l.x..X...b. 05a0 6a 49 0d 5f b1 41 f1 43 jI._.A.C No. Time Source Destination Protocol Length Info 22007 254.884723 192.168.10.1 192.168.10.203 TCP 199 34433 > cds [PSH, ACK] Seq=289075 Ack=5477 Win=1002 Len=133 TSval=598968 TSecr=730032 Frame 22007: 199 bytes on wire (1592 bits), 199 bytes captured (1592 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 289075, Ack: 5477, Len: 133 Data (133 bytes) 0000 6c 00 eb 34 09 f9 e7 09 8a 21 57 89 9a d8 8c a3 l..4.....!W..... 0010 e4 3c 9b ca 4b b3 af c6 ee 36 90 98 8c 19 97 89 .<..K....6...... 0020 fd d9 eb ef 38 5a 17 7f 6c cb a9 82 68 2a de 89 ....8Z..l...h*.. 0030 3c c3 e5 51 9d 52 25 73 02 6a d4 04 80 51 f1 c5 <..Q.R%s.j...Q.. 0040 69 8c b9 34 bd 1b 93 3b 80 6a 8c 59 4b 20 a7 6e i..4...;.j.YK .n 0050 91 5c 7c de 80 d5 e2 84 4b 72 bd 49 b1 af 91 7e .\|.....Kr.I...~ 0060 a4 15 3d d3 5f 46 f5 b1 1a 68 c7 4a 54 dc 7b 0a ..=._F...h.JT.{. 0070 13 8a df c5 5c e5 90 8d cd 63 07 2e 2c 42 7a 50 ....\....c..,BzP 0080 9f 8f d8 86 6e ....n No. Time Source Destination Protocol Length Info 22008 254.884772 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=5477 Ack=287627 Win=65535 Len=0 TSval=730032 TSecr=598968 Frame 22008: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5477, Ack: 287627, Len: 0 No. Time Source Destination Protocol Length Info 22009 254.884821 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=5477 Ack=289208 Win=65535 Len=0 TSval=730032 TSecr=598968 Frame 22009: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5477, Ack: 289208, Len: 0 No. Time Source Destination Protocol Length Info 22010 254.884892 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:32 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45242 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 22010: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:32 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45242 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 22011 254.884965 192.168.10.1 192.168.10.203 TCP 903 34433 > cds [PSH, ACK] Seq=289208 Ack=5477 Win=1002 Len=837 TSval=598968 TSecr=730032 Frame 22011: 903 bytes on wire (7224 bits), 903 bytes captured (7224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 289208, Ack: 5477, Len: 837 Data (837 bytes) 0000 17 03 01 03 40 b1 12 3d dd 4d e0 d7 f5 39 83 1c ....@..=.M...9.. 0010 14 8a ed 8a 4c a7 b1 2c 4a c4 fc 6c 26 91 16 0e ....L..,J..l&... 0020 a4 fc 09 3a 3e 71 c4 c4 67 3a d1 be a0 37 4a 87 ...:>q..g:...7J. 0030 8d ba d6 b1 e6 be aa f2 e0 c1 5c 35 38 81 fa 66 ..........\58..f 0040 b4 d8 3e 2a 6c 97 85 98 93 95 c8 d4 ee 71 1b bd ..>*l........q.. 0050 a3 c1 62 b3 11 48 b3 a0 c5 02 89 78 18 fd d2 c9 ..b..H.....x.... 0060 08 69 64 5d e1 35 f2 e2 be cb 95 db 07 b9 5e ae .id].5........^. 0070 35 fe a7 4c 31 93 5a 04 ef c1 bf f5 b2 8e ec a0 5..L1.Z......... 0080 fa 82 b3 7e 89 88 07 e8 ad c7 0c 89 57 f2 1b 0b ...~........W... 0090 a0 f6 b2 75 f5 74 65 be 47 c2 29 67 5d 05 ec b8 ...u.te.G.)g]... 00a0 82 a1 ed 6c 2b ba d3 69 5a cd 3e 3b 85 52 86 34 ...l+..iZ.>;.R.4 00b0 da c9 41 24 d1 a9 cb ed 67 7e 08 7b 4c 2f 98 02 ..A$....g~.{L/.. 00c0 64 c8 67 aa 04 6d 82 2a 56 8c d0 a6 36 00 a1 90 d.g..m.*V...6... 00d0 06 27 2b 4e 9c 18 0b a1 4a 82 79 75 6b e1 7b 7f .'+N....J.yuk.{. 00e0 81 1d f8 c5 c9 27 a2 aa b1 de 99 e7 33 4e b8 3d .....'......3N.= 00f0 a6 09 d9 d1 61 8b bc cd d1 7b 8f 5c 0f 09 0b 6f ....a....{.\...o 0100 c7 17 53 f0 17 04 62 bd 54 70 6a d4 e4 d4 cb 1b ..S...b.Tpj..... 0110 ac 2c c5 50 b5 a6 bf 2e eb a4 1f 03 89 20 0e 2c .,.P......... ., 0120 5c 97 22 fa d7 a4 97 86 94 3a 99 e0 a6 cc 3a 74 \."......:....:t 0130 d2 f8 41 cf 6b e5 b2 57 91 13 cb aa 30 68 2b b4 ..A.k..W....0h+. 0140 59 5d dd 2f e2 5d 11 51 30 ba af 87 92 00 15 ff Y]./.].Q0....... 0150 0b fb 22 57 39 80 21 16 44 b7 99 b8 18 62 fc b6 .."W9.!.D....b.. 0160 d8 61 c3 5a ff 47 74 5a 9a b8 39 b6 84 e0 c4 05 .a.Z.GtZ..9..... 0170 10 26 b3 8e 13 25 74 d2 22 73 ab 3d 93 eb 97 a9 .&...%t."s.=.... 0180 62 0d 6f 16 31 c1 95 f8 70 52 25 00 3a d4 ad 8a b.o.1...pR%.:... 0190 89 72 26 04 a2 71 05 ee 2b 01 f3 03 2b 3e b3 9a .r&..q..+...+>.. 01a0 58 e7 14 aa 69 80 6d c9 7c 0e 72 bf e8 1c 2b 52 X...i.m.|.r...+R 01b0 e8 24 0f 1b 84 94 e4 e8 75 1e 4e 2b 25 54 da a8 .$......u.N+%T.. 01c0 3d 73 5c bb 1a 43 83 d4 09 b4 13 2f 0e 94 30 37 =s\..C...../..07 01d0 af c7 8f 84 0e 4a 75 ba 83 4b 9b 5b 6a 34 c4 d4 .....Ju..K.[j4.. 01e0 49 68 04 4a 91 d7 38 cf 82 21 70 f9 3a 00 ab 3d Ih.J..8..!p.:..= 01f0 93 ee b9 5d b5 a6 a2 fd e0 40 8f fc ef 6e 74 94 ...][email protected]. 0200 31 2a c8 d1 62 0f a1 f7 2f a5 f7 8c 04 f8 6b c6 1*..b.../.....k. 0210 1a 54 72 ce 74 40 b2 5c 9b be 2f 20 84 18 d9 37 .Tr.t@.\../ ...7 0220 50 7a 42 8e c0 f7 1f d9 51 17 25 c3 68 eb 94 4b PzB.....Q.%.h..K 0230 92 9d d5 82 42 37 4c 9d 12 8f 50 b1 f4 3d 74 bc ....B7L...P..=t. 0240 19 fb f9 95 f5 56 1f 35 98 e3 6d 21 0e a9 6f fc .....V.5..m!..o. 0250 dc 62 9f a6 5c 35 0e 62 da 0b 65 4f 8e 96 2a 02 .b..\5.b..eO..*. 0260 2d 3c fd f1 4f 8b 5e 9b 42 73 ac 2b 1f aa 08 58 -<..O.^.Bs.+...X 0270 8e ff 11 48 22 ba 0e 69 ec c2 de 50 1e c4 59 cb ...H"..i...P..Y. 0280 fc 58 f6 e5 2e 71 2b ef 0d 96 6f e5 d6 b2 ea d7 .X...q+...o..... 0290 c5 48 58 8a 25 fb d7 3c eb 70 2f 2c 59 98 9a 59 .HX.%..<.p/,Y..Y 02a0 5a 7d 60 f9 c9 68 32 ee 42 56 5b 91 1b f3 45 53 Z}`..h2.BV[...ES 02b0 d9 95 f6 31 f1 d5 08 81 e4 48 46 d0 b8 ea 16 cf ...1.....HF..... 02c0 fb 79 66 b5 0c b9 6c cd d2 67 9e c7 f6 01 a3 01 .yf...l..g...... 02d0 15 97 3c 9c 29 05 88 e2 b5 95 a4 c9 d1 13 f0 9a ..<.)........... 02e0 dd 3c d5 af 40 93 46 91 ea b3 e0 78 e3 03 64 0f .<[email protected]. 02f0 52 32 e5 59 4c 78 32 9b 7a 9b 62 35 be c8 7a b3 R2.YLx2.z.b5..z. 0300 b1 59 c1 d7 22 12 4e c0 50 15 a6 f6 2d c4 40 08 .Y..".N.P...-.@. 0310 93 ec 69 78 bf f8 d5 96 c6 15 1b d0 ab ff 43 3f ..ix..........C? 0320 6b 36 80 e1 73 52 6e 02 98 ed b6 74 79 b4 52 ad k6..sRn....ty.R. 0330 ed 9f 3d d4 2a 57 5f fe df c5 15 64 ea 1f 58 93 ..=.*W_....d..X. 0340 32 a5 ad 9b 54 2...T No. Time Source Destination Protocol Length Info 22012 254.885047 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:48:32 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45242 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 22012: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:32 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45242 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 22013 254.885148 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:48:32 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45242 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 22013: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:32 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45242 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 22014 254.885237 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=290045 Ack=5477 Win=1002 Len=1448 TSval=598968 TSecr=730032 Frame 22014: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 290045, Ack: 5477, Len: 1448 Data (1448 bytes) 0000 17 03 01 03 40 85 98 28 97 bb fb 9e 30 a5 d7 f4 ....@..(....0... 0010 8e 55 a4 33 d2 aa 4f df 04 af 69 28 45 98 6c 5c .U.3..O...i(E.l\ 0020 d7 a6 e1 97 6e 5f a4 11 b7 58 4a ef 88 59 40 cb ....n_...XJ..Y@. 0030 01 f6 71 fa 01 31 91 cc f8 e5 76 33 38 70 0d 03 ..q..1....v38p.. 0040 64 91 4b be 6b 75 48 bc 16 bd 86 21 d9 2b b6 d7 d.K.kuH....!.+.. 0050 75 a4 60 c3 44 83 fa 95 c7 f5 68 28 f1 a9 5c 11 u.`.D.....h(..\. 0060 0b ee be 95 60 3d b4 6d b2 c2 74 d3 f9 05 4a 4b ....`=.m..t...JK 0070 4f 80 94 bc 91 0b fc b7 b5 55 93 ef a6 bb 17 d5 O........U...... 0080 84 3d 9e 97 11 23 20 be df 7a df 41 2f db 3f af .=...# ..z.A/.?. 0090 80 90 51 a4 ee ac 16 12 7d 12 43 77 9d df 64 89 ..Q.....}.Cw..d. 00a0 a1 7d a8 02 c2 70 2b cd 6a ce 20 03 fd 25 60 0c .}...p+.j. ..%`. 00b0 df 81 de 6e df 19 1a 8d 0c 63 08 1c 6b 87 c1 40 ...n.....c..k..@ 00c0 13 de 8b f0 e0 8c 57 a1 9b ac 20 b3 1e 23 b5 87 ......W... ..#.. 00d0 85 ca 43 31 fb a9 56 7b b9 7c bf f3 55 9f cb fa ..C1..V{.|..U... 00e0 a1 18 3d fb 38 9f 5d e7 70 8a fd 71 a0 40 e1 7e ..=.8.].p..q.@.~ 00f0 36 16 8a b9 bb 1d 93 59 af c6 f1 aa c0 21 07 21 6......Y.....!.! 0100 a0 ef 40 27 94 74 99 09 62 4e 8b 95 a9 42 5f d9 ..@'.t..bN...B_. 0110 98 69 8c 5b 7a 15 8d f2 39 db 31 a1 ca b1 75 87 .i.[z...9.1...u. 0120 c6 3e ba 7c a4 82 30 0b 1f 45 20 aa 3b 2c c8 ae .>.|..0..E .;,.. 0130 54 a7 ae a7 34 14 eb 68 2a 0f 05 bb 25 81 ee 8e T...4..h*...%... 0140 49 fc 85 96 d2 59 62 6d e3 73 4f 82 2d 17 43 c1 I....Ybm.sO.-.C. 0150 da 0b 88 ae b0 e6 1d e6 39 9c fc df 5c 99 e6 1a ........9...\... 0160 05 2a cf ee 08 07 24 22 6a b3 bf 79 77 a0 c9 8b .*....$"j..yw... 0170 81 a1 4d ce 27 0f d5 34 e3 3b 51 e7 44 56 a9 83 ..M.'..4.;Q.DV.. 0180 29 3f dd f5 75 c5 8c ba cb 33 e1 49 2e 7b 22 61 )?..u....3.I.{"a 0190 a6 2d c4 76 9f fa 5a 77 17 b4 b7 f9 1a 6e e4 bd .-.v..Zw.....n.. 01a0 63 be 7d 4c 47 c4 14 b3 f4 e4 d6 6a 18 31 4c 29 c.}LG......j.1L) 01b0 bc 6b 9a 4b 96 1b e2 b2 ed ec d7 49 47 e9 a4 2f .k.K.......IG../ 01c0 b2 6f bf f2 73 83 d2 20 9e 53 e5 3f c9 46 73 25 .o..s.. .S.?.Fs% 01d0 42 8d ba 76 00 1f a2 5e 79 68 cd 5a 14 45 28 c2 B..v...^yh.Z.E(. 01e0 e1 52 b8 06 2b 32 83 a5 11 c0 cc 27 7a 1f f6 21 .R..+2.....'z..! 01f0 2b d1 46 a6 ab 6e c4 68 3d f2 64 27 9b fb a9 e2 +.F..n.h=.d'.... 0200 34 23 ee 87 20 94 ae e3 d5 6b 6a 51 e0 45 30 27 4#.. ....kjQ.E0' 0210 e5 6e 81 91 cd 44 3b 10 84 23 2e f8 2d d5 c4 7f .n...D;..#..-... 0220 c0 43 78 72 b6 91 57 60 30 42 3f 7d 93 5c 22 b0 .Cxr..W`0B?}.\". 0230 18 3e 77 e7 50 6a 8c f0 ff 2a a2 db 63 8a 80 15 .>w.Pj...*..c... 0240 e0 07 c0 6c c1 4b d8 1f 80 f8 ad df 67 81 82 84 ...l.K......g... 0250 a7 ce c8 10 7c 31 cd 09 ec 21 fc 4a 1d db 30 14 ....|1...!.J..0. 0260 5f e3 0f e2 4c ae 28 18 74 5b 84 33 b6 2b a0 69 _...L.(.t[.3.+.i 0270 c4 bb d8 86 ff 6e 9b 60 d1 78 12 c1 78 85 7b bd .....n.`.x..x.{. 0280 bc 49 aa 86 31 c1 8b 37 8c c4 a7 d0 71 70 87 9c .I..1..7....qp.. 0290 3e f7 a4 ac db 14 68 5d 0c bc f9 28 07 32 eb 45 >.....h]...(.2.E 02a0 43 57 75 3e c8 11 bf 4a 50 66 98 66 96 9b 92 87 CWu>...JPf.f.... 02b0 9e 57 a1 1c 37 70 6f 41 46 cc d1 a0 fb d7 38 f2 .W..7poAF.....8. 02c0 98 0f b0 e0 a5 b0 60 b6 30 09 29 db 97 6e 72 c6 ......`.0.)..nr. 02d0 e2 2d 22 f5 c0 1f c1 47 04 b5 cf db ae 91 5a ea .-"....G......Z. 02e0 79 0a 68 7e df d3 1e 8f 9f 6a f8 8e e4 f8 44 27 y.h~.....j....D' 02f0 b7 36 c4 e4 b7 cf 0e e4 26 a2 a1 ef a0 5b 96 eb .6......&....[.. 0300 32 56 93 45 49 e6 c9 82 32 af fb 05 81 01 83 ab 2V.EI...2....... 0310 15 8d 02 3d 5a c2 bd 92 97 fb 4c 3f 94 69 ea 12 ...=Z.....L?.i.. 0320 26 71 59 8e 4a ea 64 b6 6e 84 fb a0 e5 4f 89 7f &qY.J.d.n....O.. 0330 2a f2 83 bc b6 f6 60 da 26 32 ee f2 da c3 c9 e6 *.....`.&2...... 0340 cc 87 8c 93 e7 17 03 01 03 50 14 4b 69 13 bc 8e .........P.Ki... 0350 ab 6c b3 9a 81 22 3e e6 2a c3 7b 9a d0 6b 3e a6 .l...">.*.{..k>. 0360 9d 68 ca 2c 7a 9d a8 c4 22 40 97 44 4c 13 29 81 .h.,z..."@.DL.). 0370 28 96 54 d6 8a cc 37 12 88 b7 8f 17 db a8 0f e3 (.T...7......... 0380 9e 85 fe 56 07 e3 a0 3a 0a a6 3d 0c 39 22 e0 29 ...V...:..=.9".) 0390 06 ba 28 b0 f9 65 bb 43 fc 6f d4 b0 58 7a 97 73 ..(..e.C.o..Xz.s 03a0 97 6a 0d 84 13 f4 b3 e3 bb 34 6c db c6 9a 8b 03 .j.......4l..... 03b0 bb fb 43 fd a3 c4 a5 e2 fb 18 a5 a0 06 0e 23 22 ..C...........#" 03c0 41 c2 29 15 5f 4b 58 a0 bf 63 df 3b 61 28 01 d1 A.)._KX..c.;a(.. 03d0 5e 7e 0b 2a 36 6b 28 0e df f0 15 f9 ef f1 7c 46 ^~.*6k(.......|F 03e0 5d 6c 89 ea 01 54 14 41 e7 dd a8 80 36 9e 2d 06 ]l...T.A....6.-. 03f0 b4 2d 09 95 fe d8 16 f8 60 b0 f8 34 3f 94 7c 18 .-......`..4?.|. 0400 fe 22 c0 35 9e 29 8d 17 25 d6 cc 8f 24 04 18 02 .".5.)..%...$... 0410 ff 2e cf e1 1c 6b 31 9b 18 15 cd ea e2 34 dd b9 .....k1......4.. 0420 51 cd 78 1b 5d 07 db 7e 44 16 de 6c 78 3f d0 ab Q.x.]..~D..lx?.. 0430 4b d2 f3 4c e6 57 b8 3e d0 66 7d 2f 6a 1a df 79 K..L.W.>.f}/j..y 0440 b2 ab 9f 73 af 63 73 94 a3 3e 95 5c 32 c1 55 16 ...s.cs..>.\2.U. 0450 87 57 62 63 9f cb 64 d9 10 a3 6f 9b 13 3d 9b 15 .Wbc..d...o..=.. 0460 a2 c3 50 6b 3b 2a f9 af 3e 25 35 c9 7b 42 b4 9b ..Pk;*..>%5.{B.. 0470 34 73 68 61 52 ad d4 7f c0 1e bb 15 f9 d1 8a 97 4shaR........... 0480 1b 96 c6 ec 32 5b a8 28 56 42 54 27 41 f5 9d 98 ....2[.(VBT'A... 0490 bb e9 86 30 ad 75 6f e2 d4 ff 72 85 2e a0 d1 95 ...0.uo...r..... 04a0 de a0 ee 0f 7b 4c 35 a6 0e 31 dc c4 08 f7 3a cb ....{L5..1....:. 04b0 65 e0 19 5d e8 82 d3 55 66 26 9c b4 7f a6 80 de e..]...Uf&...... 04c0 59 91 49 5f 7b ce 3d 7b 42 e9 7e d8 74 b0 45 ea Y.I_{.={B.~.t.E. 04d0 5c 71 6e 2d ee 10 22 2a 8f 2f 8d 68 e4 6c 4a 43 \qn-.."*./.h.lJC 04e0 06 5c 4e b2 26 31 29 ff 89 b2 24 11 31 92 1d d6 .\N.&1)...$.1... 04f0 db 50 43 ae 71 9f b5 2c d7 28 7c 0c 5f 73 08 5b .PC.q..,.(|._s.[ 0500 92 55 14 9e 1a 45 b5 be 54 00 f5 5e 7e 31 8c dd .U...E..T..^~1.. 0510 9a d7 c2 ae 17 a7 a8 d0 97 b1 60 4f 6b 65 71 2f ..........`Okeq/ 0520 64 fa 21 d7 f1 52 9b 62 21 6b 5f fe 83 5a 17 05 d.!..R.b!k_..Z.. 0530 f3 b0 75 45 20 a1 8b db 32 fb 8d 53 a4 b3 68 b7 ..uE ...2..S..h. 0540 f8 7b 78 c8 e1 76 92 e0 9e e6 41 43 a7 62 99 65 .{x..v....AC.b.e 0550 52 77 a3 9e d0 49 5d bb 8d 5d 78 a9 a4 89 ef ff Rw...I]..]x..... 0560 88 c9 c2 16 a6 ff 8a ab f5 d9 d3 32 9a 65 09 46 ...........2.e.F 0570 9f 50 ea 7f 5a a0 6f 84 aa b0 a9 35 ba 9f 89 11 .P..Z.o....5.... 0580 f6 c8 88 36 54 dc 8a b7 7d 37 63 64 1d b4 7f d3 ...6T...}7cd.... 0590 1a 41 b1 f4 17 70 ee d0 21 1c 85 8a 60 ed 43 f2 .A...p..!...`.C. 05a0 4e 6a 12 35 b7 61 85 d6 Nj.5.a.. No. Time Source Destination Protocol Length Info 22015 254.885288 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=5477 Ack=291493 Win=65535 Len=0 TSval=730032 TSecr=598968 Frame 22015: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5477, Ack: 291493, Len: 0 No. Time Source Destination Protocol Length Info 22016 254.885343 192.168.10.1 192.168.10.203 TCP 308 34433 > cds [PSH, ACK] Seq=291493 Ack=5477 Win=1002 Len=242 TSval=598968 TSecr=730032 Frame 22016: 308 bytes on wire (2464 bits), 308 bytes captured (2464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 291493, Ack: 5477, Len: 242 Data (242 bytes) 0000 3e 06 c9 a6 47 cc 32 9d 6f 9c 4e 12 6a d2 08 c5 >...G.2.o.N.j... 0010 b8 e7 7d 53 08 95 fb 96 80 ab 3f f9 26 c9 e3 ec ..}S......?.&... 0020 02 ea 9c 22 e5 09 c1 bb 67 41 70 66 6b f9 65 ae ..."....gApfk.e. 0030 9f 8a 4e 69 7e 76 ac b0 a8 a2 69 d9 ad 63 fd e8 ..Ni~v....i..c.. 0040 1d bd f8 e0 57 06 83 e6 59 6c b2 f7 04 0f 51 ff ....W...Yl....Q. 0050 19 2d 9b 86 fe 26 cc f0 83 f4 91 f5 39 5b 81 84 .-...&......9[.. 0060 ea dd 07 87 6a af 16 dc 8b b4 18 ae 14 49 78 cf ....j........Ix. 0070 30 9a 94 5f 3d 66 33 38 08 91 bf df e2 00 0a 52 0.._=f38.......R 0080 8a 29 e5 84 af bf 60 31 d9 50 eb f4 84 24 ca 6d .)....`1.P...$.m 0090 84 86 9c ac 59 12 0f 46 8f 9a 4e e0 1f 78 80 4c ....Y..F..N..x.L 00a0 e6 33 4f 7c 5d b3 04 cf e2 b1 6d fd bb f3 53 57 .3O|].....m...SW 00b0 97 8b bf 67 f9 62 12 d0 5f e6 f5 58 bf 4d 58 a5 ...g.b.._..X.MX. 00c0 38 c1 66 9f 6e 1d f0 4b 37 80 ac c5 1e 28 9f ca 8.f.n..K7....(.. 00d0 5d 42 37 32 38 3d d1 1b b3 75 b2 1c 7d db 94 98 ]B728=...u..}... 00e0 b1 9d f7 ff b0 89 8b 02 7f 41 b8 12 19 44 a2 7d .........A...D.} 00f0 f8 6e .n No. Time Source Destination Protocol Length Info 22017 254.885418 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:32 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45242 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 22017: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:32 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45242 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 22018 254.885498 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:32 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45242 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 22018: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:32 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45242 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 22019 254.885587 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=291735 Ack=5477 Win=1002 Len=1448 TSval=598968 TSecr=730032 Frame 22019: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 291735, Ack: 5477, Len: 1448 Data (1448 bytes) 0000 17 03 01 03 40 3f 69 fd cc ee 37 a3 3c 8b 20 0f ....@?i...7.<. . 0010 e9 cf d8 4f 93 e6 20 a9 65 36 7f 9f 72 01 a7 6d ...O.. .e6..r..m 0020 fd 06 5d 44 91 1f ca d4 76 a3 8c 4a cd ac 15 59 ..]D....v..J...Y 0030 47 ab 46 13 90 59 2b c6 84 22 06 85 95 2e fb a0 G.F..Y+.."...... 0040 3c 81 3b 48 7f 70 bc ba 7a d3 fb 07 2a 7b 8a 89 <.;H.p..z...*{.. 0050 ca 6c 48 64 3a 25 93 fb 06 67 75 12 73 8f 07 76 .lHd:%...gu.s..v 0060 06 e8 13 a1 b8 f2 d1 66 75 d3 3c 82 88 63 ab 4d .......fu.<..c.M 0070 de f6 f6 91 36 aa 80 ef 31 95 1e 35 d3 be c3 8e ....6...1..5.... 0080 5f 02 d4 33 90 11 cb d2 58 6f d4 0e ce 6d 12 27 _..3....Xo...m.' 0090 79 18 b9 f6 f6 aa ea 74 d4 dd 4e 51 99 36 87 5b y......t..NQ.6.[ 00a0 c2 2e c2 4a ec 43 01 9f ca 47 ef 81 83 24 37 e5 ...J.C...G...$7. 00b0 ef e6 0d 3b 60 7f 30 29 b0 a5 88 55 e7 2c bf db ...;`.0)...U.,.. 00c0 77 3b 6b 94 9b 14 28 f0 4f 1d e8 2c 34 b8 4a 66 w;k...(.O..,4.Jf 00d0 d9 ce c3 24 5f 5d a9 42 ea 77 1e 4b b8 c7 d0 3a ...$_].B.w.K...: 00e0 aa 12 c0 0b 7b 01 e9 e2 3d 1e 7b ce 4a ff 19 9a ....{...=.{.J... 00f0 d7 75 d0 74 47 99 98 93 a0 7f b1 af 85 d7 a8 ee .u.tG........... 0100 5b 58 5a 25 fb e2 fc 90 bf c5 8d c2 d4 9c f7 17 [XZ%............ 0110 02 bc 87 2c 91 1d 8e 28 e3 24 30 86 b3 eb 33 9a ...,...(.$0...3. 0120 9a a0 de df c3 bc 74 45 fb ae b0 19 6d fd ba b3 ......tE....m... 0130 3a 00 ba f8 57 7b d0 b7 94 1d 07 68 06 08 69 cb :...W{.....h..i. 0140 22 fa 29 55 9e e0 23 13 0e d5 9e ba 59 4c 12 c9 ".)U..#.....YL.. 0150 49 3c 40 c1 ab e7 c1 ac 39 6a 2c a8 34 31 3b 34 I<@.....9j,.41;4 0160 15 dc a3 a3 49 bd a5 ba 45 3c 85 5e 0a 30 93 4f ....I...E<.^.0.O 0170 a7 01 11 8d 70 4b 0b 5b e0 07 d6 50 25 31 58 27 ....pK.[...P%1X' 0180 3d 8a 72 24 ea 71 be 81 d2 e4 7d 35 9e 50 89 ac =.r$.q....}5.P.. 0190 c4 1e 4c be e8 1b 50 3e ef 36 13 e6 4c e6 8e b2 ..L...P>.6..L... 01a0 20 65 41 c5 6b 59 8d 19 63 8d a0 66 bf c6 e4 75 eA.kY..c..f...u 01b0 a0 b5 14 a9 49 89 e1 bc ec 61 38 00 10 bf a5 1d ....I....a8..... 01c0 30 81 7c a4 e8 ea 99 aa 9e 70 9b 51 de bf b4 8d 0.|......p.Q.... 01d0 cd f7 9e 31 01 f8 e4 92 4a 71 58 46 c3 d4 9c d8 ...1....JqXF.... 01e0 11 f5 9d f0 76 12 d7 65 be 7a b6 c4 10 bb da b5 ....v..e.z...... 01f0 50 02 58 d4 3e 14 d3 f0 08 71 a0 f8 9b 8d 43 38 P.X.>....q....C8 0200 e8 76 d4 b9 d9 6d be 7f e9 10 5e 87 21 c9 b4 9a .v...m....^.!... 0210 85 32 ab 7a 6e fa 38 c9 fa ef a5 10 1b 1b 56 fa .2.zn.8.......V. 0220 78 63 b7 4f 6f 73 dc ec 0d 69 fb 0d a9 93 ad 0e xc.Oos...i...... 0230 ae b5 cf 29 cb c8 07 d8 b9 ad ac 88 82 74 c6 68 ...).........t.h 0240 78 27 c3 4a 12 dd b0 31 30 b3 6a 56 a5 e8 58 9e x'.J...10.jV..X. 0250 d5 f4 02 5a ad a8 4b 45 d3 e5 59 3b cf e5 72 4b ...Z..KE..Y;..rK 0260 26 88 b4 14 da 6b d4 9a d3 cd 1d 4c eb 55 ef 4d &....k.....L.U.M 0270 0c 4d 47 5a 04 34 dd 68 b1 9a 2d 3f 0d ab b3 1d .MGZ.4.h..-?.... 0280 e6 f7 55 29 c8 cc dc e5 37 4a ee 1e 66 cd 1c 58 ..U)....7J..f..X 0290 b5 56 91 99 94 28 7f f8 b3 68 8c 74 22 54 de 38 .V...(...h.t"T.8 02a0 4c 15 16 b8 ff d4 be 5c 79 bf 97 b1 74 97 46 5e L......\y...t.F^ 02b0 ab 1f b2 ad 60 aa fb dd f0 77 5f 05 2a 4f e3 5b ....`....w_.*O.[ 02c0 d2 b4 a1 74 f1 63 a4 54 8d 4e 8d 21 bf 48 a7 43 ...t.c.T.N.!.H.C 02d0 ff dc 96 f7 22 41 58 57 74 de c4 96 89 59 c5 08 ...."AXWt....Y.. 02e0 a9 89 54 5a c1 7b a1 f6 c9 66 f1 6a b1 85 0d 11 ..TZ.{...f.j.... 02f0 77 1f 70 b7 5a b4 19 04 5c db 74 a1 f3 a0 25 3a w.p.Z...\.t...%: 0300 50 e6 ec 3b b0 08 e9 6f 53 64 3d 1e e1 2c e4 6c P..;...oSd=..,.l 0310 a2 9a e1 3a fd fd 5b 77 14 15 9f 27 91 37 19 01 ...:..[w...'.7.. 0320 77 9c 61 a0 20 80 36 2f 53 89 4a 42 db e8 f0 45 w.a. .6/S.JB...E 0330 df 5c d6 72 a9 8f d9 47 94 d6 9e 69 e6 de ac b3 .\.r...G...i.... 0340 fa 09 5e 34 83 17 03 01 03 40 3e 11 49 6e 1c 34 ..^4.....@>.In.4 0350 a6 ca 29 c6 83 f4 73 b0 0b a8 39 9d fa 83 e5 23 ..)...s...9....# 0360 1d 71 5b ac e0 74 15 49 77 93 f5 75 6a 8f 9d 0e .q[..t.Iw..uj... 0370 46 82 ac 2f ad 90 02 89 5f ef f7 83 a4 1e c4 27 F../...._......' 0380 66 b6 b9 9a 3d be d6 08 97 67 a6 91 a4 bd 8d f7 f...=....g...... 0390 1f 75 c4 c3 88 70 7c 17 fd 01 62 99 34 01 3d 36 .u...p|...b.4.=6 03a0 fe ce cf 53 72 7b 82 56 0e 3c 5a d3 fd 37 9d 3c ...Sr{.V.<Z..7.< 03b0 6e 50 56 10 84 15 de 58 cc 1b a0 a8 47 0a 82 cb nPV....X....G... 03c0 bf 72 d9 38 3e 9a 64 f2 84 ba e5 ed 0f d7 3c f5 .r.8>.d.......<. 03d0 5c 37 f9 ec ca 12 f9 cf 10 81 b5 e2 68 8a 97 e5 \7..........h... 03e0 1b 41 87 8d e5 04 3b ce cf ac 73 36 cb 61 63 d5 .A....;...s6.ac. 03f0 69 34 6a 1a 98 1c cc d1 50 2a 31 75 7d 7b a5 ed i4j.....P*1u}{.. 0400 b4 76 9d d0 aa e1 73 7a 11 c3 9c 65 78 e7 4a 94 .v....sz...ex.J. 0410 08 66 0c 28 1f 3b dd b0 50 8e 61 b1 b4 14 4f a0 .f.(.;..P.a...O. 0420 5f ac 3f 80 c6 23 55 41 e0 71 4c 4e ce a2 42 f2 _.?..#UA.qLN..B. 0430 fd 2e 06 d6 a2 c1 c6 5b 89 c9 eb d1 95 dd c7 7b .......[.......{ 0440 42 8d 97 da 91 09 78 39 83 af 72 c0 cd a6 fc ee B.....x9..r..... 0450 89 62 6d 07 26 7d 88 ca cc 3f 88 5f f2 cd 36 20 .bm.&}...?._..6 0460 3a 34 a5 c4 99 f9 1b 13 1b 63 8c 5e c0 fe 11 71 :4.......c.^...q 0470 8d 1a 7f 63 64 7a f4 33 da 2f f5 23 be 33 a6 f4 ...cdz.3./.#.3.. 0480 15 d1 89 70 69 f1 bd 61 23 c2 87 cf f4 90 e7 7b ...pi..a#......{ 0490 de a7 9e ae 44 22 1d 82 e1 3c 92 02 f2 64 79 fd ....D"...<...dy. 04a0 43 c5 82 f0 85 88 66 e1 e1 b5 89 19 f4 48 5b e9 C.....f......H[. 04b0 50 b2 da 1a 28 29 68 43 af 9d 9f c9 0f 4c 4d d9 P...()hC.....LM. 04c0 9b d7 bb b4 82 c5 ad 37 19 80 dd 54 20 c2 02 cc .......7...T ... 04d0 09 4a 32 19 b8 dc 8b 26 5e c2 78 6f f5 7d 4a c9 .J2....&^.xo.}J. 04e0 bc d0 2f 71 b6 96 8e 39 21 cf 3b f4 fd 91 dd ff ../q...9!.;..... 04f0 a2 ee 1e da 20 9e 05 a4 52 55 85 48 d3 e9 34 9e .... ...RU.H..4. 0500 6f 97 67 9e 1e 34 76 45 17 c3 16 ce ed 68 36 1e o.g..4vE.....h6. 0510 48 00 1e 3b 75 ea c4 00 22 0e a1 9e 95 4f 68 e6 H..;u..."....Oh. 0520 45 e9 2e 80 83 6e 66 09 db ff cb 40 45 8f c1 48 [email protected] 0530 ca 6a 8a cb 4e d3 06 b4 3b 79 73 4c 8a d0 e3 fb .j..N...;ysL.... 0540 cf 12 ad b1 c2 e3 60 b7 96 7a e9 24 3d ae 90 3b ......`..z.$=..; 0550 28 25 dd 01 f5 1c 5e c3 43 92 e9 2a f5 3e 13 1e (%....^.C..*.>.. 0560 4d bc 24 a9 50 20 7a 64 67 ea 0c dc dc a4 72 6e M.$.P zdg.....rn 0570 71 1e 11 18 16 6f c7 89 f8 44 e9 ea 82 02 fe 21 q....o...D.....! 0580 7d 86 7d e2 65 4d 44 fa 46 28 4e 32 c1 6e d0 8b }.}.eMD.F(N2.n.. 0590 db 35 d9 8a 7e de c3 15 66 07 f5 1c aa 1a b2 d5 .5..~...f....... 05a0 dc ca 2b ac 35 c0 70 db ..+.5.p. No. Time Source Destination Protocol Length Info 22020 254.885637 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=5477 Ack=293183 Win=65535 Len=0 TSval=730032 TSecr=598968 Frame 22020: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5477, Ack: 293183, Len: 0 No. Time Source Destination Protocol Length Info 22021 254.885691 192.168.10.1 192.168.10.203 TCP 292 34433 > cds [PSH, ACK] Seq=293183 Ack=5477 Win=1002 Len=226 TSval=598968 TSecr=730032 Frame 22021: 292 bytes on wire (2336 bits), 292 bytes captured (2336 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 293183, Ack: 5477, Len: 226 Data (226 bytes) 0000 c0 4a fb d7 64 90 55 de fc e4 ab cb 2c 08 47 15 .J..d.U.....,.G. 0010 b8 76 35 4f 52 1c 6d 48 38 ce 42 70 be cd a3 1f .v5OR.mH8.Bp.... 0020 31 69 9e 6f fa 21 c1 f5 02 a7 13 6d 66 23 bc 04 1i.o.!.....mf#.. 0030 7b c5 a2 d0 ff a5 64 20 74 a5 fe be 56 a7 d9 c5 {.....d t...V... 0040 7c 6b a2 09 64 fa 43 43 d3 4d f8 9c 5e 7b 7a ba |k..d.CC.M..^{z. 0050 91 04 4a 80 cd 96 09 fc 79 7b 74 1a 29 1a d4 46 ..J.....y{t.)..F 0060 ac d4 92 a6 d3 be 2d ab b1 a8 dc 31 5a 77 b7 56 ......-....1Zw.V 0070 94 f1 4a b9 03 89 bd 52 e4 ca ce 3f cd 89 4a 77 ..J....R...?..Jw 0080 70 c9 50 a2 a7 ae 9f 2c 70 54 ce 3c 2f 5a 51 a1 p.P....,pT.</ZQ. 0090 e1 52 f9 e5 fc 09 16 a4 84 61 24 51 e4 48 25 97 .R.......a$Q.H%. 00a0 bd a2 0e 58 13 ef 22 47 2d bc b4 b8 f8 d0 f9 84 ...X.."G-....... 00b0 8a 46 49 78 03 38 2f 49 d6 9f 9a 47 0e 0c 9b d9 .FIx.8/I...G.... 00c0 f9 1c 6d f7 dc a3 9d b7 5d 8a 42 03 38 6a ea 34 ..m.....].B.8j.4 00d0 2d 19 6a 6c 64 b4 63 e6 25 8f d4 f1 20 dc 16 b7 -.jld.c.%... ... 00e0 70 23 p# No. Time Source Destination Protocol Length Info 22022 254.918561 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=5477 Ack=293409 Win=65309 Len=74 TSval=730032 TSecr=598968 Frame 22022: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5477, Ack: 293409, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 1e 1c cf ae 22 53 7e b1 9f c4 3d .... ...."S~...= 0010 be a7 7f 4f 11 50 2f 08 97 85 d0 1d b5 8b 60 9f ...O.P/.......`. 0020 17 c4 92 0a ec 17 03 01 00 20 27 63 04 b4 7f 4f ......... 'c...O 0030 bc b0 6b 93 71 c1 9b 97 26 f1 f4 07 65 2a ef 13 ..k.q...&...e*.. 0040 e2 5f ea b6 5b 2d e7 8d 64 89 ._..[-..d. No. Time Source Destination Protocol Length Info 22023 254.918637 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=293409 Ack=5551 Win=1002 Len=0 TSval=598977 TSecr=730032 Frame 22023: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 293409, Ack: 5551, Len: 0 No. Time Source Destination Protocol Length Info 22024 254.921441 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=5551 Ack=293409 Win=65309 Len=74 TSval=730032 TSecr=598977 Frame 22024: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5551, Ack: 293409, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 7c 6f 36 95 1b 0d fb 15 f4 23 c1 .... |o6......#. 0010 d3 9c 8c 8f 46 24 aa ba d8 47 c2 b0 ba f8 fe 73 ....F$...G.....s 0020 b1 f0 b7 71 27 17 03 01 00 20 45 34 b4 7a dd b2 ...q'.... E4.z.. 0030 cf 5c 47 c9 85 0d 0a dd ff fd 6f 1d 98 f8 d0 56 .\G.......o....V 0040 33 f5 a4 87 7d 2d ee 2f d8 e0 3...}-./.. No. Time Source Destination Protocol Length Info 22025 254.921494 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=293409 Ack=5625 Win=1002 Len=0 TSval=598977 TSecr=730032 Frame 22025: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 293409, Ack: 5625, Len: 0 No. Time Source Destination Protocol Length Info 22026 254.924301 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=5625 Ack=293409 Win=65309 Len=74 TSval=730032 TSecr=598977 Frame 22026: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5625, Ack: 293409, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 fa 89 d1 5d f5 40 1a 88 d7 64 04 .... ...][email protected]. 0010 97 72 eb 40 0a 46 d6 12 22 a8 cf 76 fa 57 64 e5 [email protected].."..v.Wd. 0020 90 a6 2a 1b c0 17 03 01 00 20 5b 3b 90 43 75 6a ..*...... [;.Cuj 0030 80 97 12 51 5f 88 19 11 c0 82 df 6e 6a 51 85 02 ...Q_......njQ.. 0040 7e df 1b 25 80 61 b6 3d 51 30 ~..%.a.=Q0 No. Time Source Destination Protocol Length Info 22027 254.924368 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=293409 Ack=5699 Win=1002 Len=0 TSval=598978 TSecr=730032 Frame 22027: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 293409, Ack: 5699, Len: 0 No. Time Source Destination Protocol Length Info 22028 254.926918 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=5699 Ack=293409 Win=65309 Len=74 TSval=730032 TSecr=598978 Frame 22028: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5699, Ack: 293409, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 12 1f ef c8 9b 46 08 d6 03 ef fc .... .....F..... 0010 b4 f7 22 ef 0d 3b 5f e8 ad 55 8a 2c 79 33 9e 58 .."..;_..U.,y3.X 0020 f3 ce fa be 0c 17 03 01 00 20 b8 87 81 c8 4f 1a ......... ....O. 0030 b9 45 7f 0c d1 e3 37 00 f0 d7 e1 e1 d9 7e e4 e9 .E....7......~.. 0040 ed 3c 72 87 b5 18 b4 69 9d 5d .<r....i.] No. Time Source Destination Protocol Length Info 22029 254.926983 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=293409 Ack=5773 Win=1002 Len=0 TSval=598979 TSecr=730032 Frame 22029: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 293409, Ack: 5773, Len: 0 No. Time Source Destination Protocol Length Info 22030 254.929355 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=5773 Ack=293409 Win=65309 Len=74 TSval=730032 TSecr=598979 Frame 22030: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5773, Ack: 293409, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 f9 8c 9c f4 96 4a f6 34 ad 9a 7d .... .....J.4..} 0010 fe 50 7c f6 a2 2c c3 74 cc 54 4e 69 c6 52 0f 21 .P|..,.t.TNi.R.! 0020 f1 55 a1 5a e9 17 03 01 00 20 a5 bf 95 05 09 0b .U.Z..... ...... 0030 f6 a6 72 fb e3 a9 4d ab 69 21 01 8d 7a ef 5f 0f ..r...M.i!..z._. 0040 d8 e6 9b 55 13 8b 28 85 c6 e9 ...U..(... No. Time Source Destination Protocol Length Info 22031 254.929421 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=293409 Ack=5847 Win=1002 Len=0 TSval=598979 TSecr=730032 Frame 22031: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 293409, Ack: 5847, Len: 0 No. Time Source Destination Protocol Length Info 22032 254.932163 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=5847 Ack=293409 Win=65309 Len=74 TSval=730032 TSecr=598979 Frame 22032: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5847, Ack: 293409, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 90 a2 9b 18 77 33 65 7a ce 86 dc .... ....w3ez... 0010 6b a4 17 5f 60 11 4c 1f 99 28 c1 a9 45 41 bc e0 k.._`.L..(..EA.. 0020 f1 94 b3 88 11 17 03 01 00 20 3e c6 76 f3 bc 20 ......... >.v.. 0030 5f 3e ab 5b f7 0f ee b0 82 92 8f 69 3c d7 ca fd _>.[.......i<... 0040 8f 83 4d 39 f3 2a ac 87 c0 54 ..M9.*...T No. Time Source Destination Protocol Length Info 22033 254.932245 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=293409 Ack=5921 Win=1002 Len=0 TSval=598980 TSecr=730032 Frame 22033: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 293409, Ack: 5921, Len: 0 No. Time Source Destination Protocol Length Info 22034 255.083525 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 22034: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17725, Ack: 1292689, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22035 255.083559 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1292689 Ack=17767 Win=46510 Len=0 Frame 22035: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1292689, Ack: 17767, Len: 0 No. Time Source Destination Protocol Length Info 22036 255.143496 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1521490176, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 22036: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22037 255.143520 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1521490176, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 22037: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22038 255.143533 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1521490176, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 22038: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22039 255.143546 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1521490176, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 22039: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22040 255.161287 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3390570752, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 22040: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22041 255.161311 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3390570752, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 22041: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22042 255.161323 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3390570752, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 22042: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22043 255.161335 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3390570752, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 22043: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22044 255.196947 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 22044: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 22045 255.308473 192.168.10.246 65.32.1.65 DNS 85 Standard query PTR 169.20.60.92.in-addr.arpa Frame 22045: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65) User Datagram Protocol, Src Port: 50566 (50566), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 22046 255.315801 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 22046: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 22047 255.346445 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 22047: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 22048 255.346477 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 22048: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 22049 255.444251 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 22049: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 22050 255.566457 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 22050: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 22051 255.731776 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 22051: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17767, Ack: 1292689, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22052 255.731811 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1292689 Ack=17809 Win=46489 Len=0 Frame 22052: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1292689, Ack: 17809, Len: 0 No. Time Source Destination Protocol Length Info 22053 255.859241 188.161.220.86 192.168.10.207 SMTP 98 C: MAIL FROM: <lillian.chandter@xxxxxxxxxxxx> Frame 22053: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45242 (45242), Dst Port: smtp (25), Seq: 19, Ack: 313, Len: 44 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22054 255.859571 192.168.10.207 188.161.220.86 SMTP 108 S: 250 2.1.0 [email protected] OK Frame 22054: 108 bytes on wire (864 bits), 108 bytes captured (864 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45242 (45242), Seq: 313, Ack: 63, Len: 54 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22055 255.859621 188.161.220.86 192.168.10.207 TCP 60 45242 > smtp [ACK] Seq=63 Ack=367 Win=93074 Len=0 Frame 22055: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45242 (45242), Dst Port: smtp (25), Seq: 63, Ack: 367, Len: 0 No. Time Source Destination Protocol Length Info 22056 255.862714 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 22056: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 22057 255.862744 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 22057: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 22058 255.881936 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-02.geo.kaspersky.com Frame 22058: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: 64857 (64857), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 22059 255.882110 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-02.geo.kaspersky.com Frame 22059: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: 64857 (64857), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 22060 255.998087 206.225.164.186 192.168.10.207 TCP 60 [TCP Dup ACK 22052#1] 23308 > smtp [ACK] Seq=1292689 Ack=17809 Win=46489 Len=0 Frame 22060: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1292689, Ack: 17809, Len: 0 No. Time Source Destination Protocol Length Info 22061 256.159205 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1538267392, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 22061: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22062 256.159229 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1538267392, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 22062: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22063 256.159242 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1538267392, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 22063: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22064 256.159254 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1538267392, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 22064: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22065 256.176933 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3407347968, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 22065: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22066 256.176956 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3407347968, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 22066: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22067 256.176969 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3407347968, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 22067: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22068 256.176981 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3407347968, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 22068: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22069 256.185491 192.168.10.207 180.243.236.205 TCP 62 smtp > visionpyramid [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 22069: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 180.243.236.205 (180.243.236.205) Transmission Control Protocol, Src Port: smtp (25), Dst Port: visionpyramid (1247), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 22070 256.268458 192.168.10.1 192.168.10.245 Syslog 309 LOCAL1.INFO: Oct 3 19:48:34 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45242 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eyvstrike@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 22070: 309 bytes on wire (2472 bits), 309 bytes captured (2472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:34 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45242 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 22071 256.308204 192.168.10.220 208.67.222.222 DNS 85 Standard query PTR 169.20.60.92.in-addr.arpa Frame 22071: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 62318 (62318), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 22072 256.377423 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 22072: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17809, Ack: 1292689, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22073 256.377459 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1292689 Ack=17851 Win=46468 Len=0 Frame 22073: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1292689, Ack: 17851, Len: 0 No. Time Source Destination Protocol Length Info 22074 256.521043 192.168.10.1 192.168.10.245 Syslog 306 LOCAL1.INFO: Oct 3 19:48:34 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13610 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eyvjuicy@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 22074: 306 bytes on wire (2448 bits), 306 bytes captured (2448 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:34 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13610 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" No. Time Source Destination Protocol Length Info 22075 256.713569 208.67.222.222 192.168.10.220 DNS 130 Standard query response PTR ip-92-60-20-169.net.abissnet.al Frame 22075: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 62318 (62318) Domain Name System (response) No. Time Source Destination Protocol Length Info 22076 256.714006 Watchgua_3c:4c:d8 Dell_ad:25:f6 ARP 60 Who has 192.168.10.220? Tell 192.168.10.1 Frame 22076: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 22077 256.714039 Dell_ad:25:f6 Watchgua_3c:4c:d8 ARP 60 192.168.10.220 is at 00:22:19:ad:25:f6 Frame 22077: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_ad:25:f6 (00:22:19:ad:25:f6), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Address Resolution Protocol (reply) No. Time Source Destination Protocol Length Info 22078 256.926861 192.168.10.220 208.67.222.222 DNS 87 Standard query PTR 108.106.59.151.in-addr.arpa Frame 22078: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222) User Datagram Protocol, Src Port: 58192 (58192), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 22079 257.010097 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 22079: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17851, Ack: 1292689, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22080 257.010135 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1292689 Ack=17893 Win=46447 Len=0 Frame 22080: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1292689, Ack: 17893, Len: 0 No. Time Source Destination Protocol Length Info 22081 257.010277 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 22081: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17893, Ack: 1292689, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22082 257.010307 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1292689 Ack=17935 Win=46426 Len=0 Frame 22082: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1292689, Ack: 17935, Len: 0 No. Time Source Destination Protocol Length Info 22083 257.174685 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1555044608, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 22083: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22084 257.174710 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1555044608, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 22084: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22085 257.174723 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1555044608, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 22085: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22086 257.174735 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1555044608, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 22086: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22087 257.192508 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3424125184, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 22087: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22088 257.192531 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3424125184, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 22088: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22089 257.192543 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3424125184, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 22089: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22090 257.192555 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3424125184, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 22090: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22091 257.194816 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 22091: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 22092 257.264403 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 4 Port 48 TTL = 120 Frame 22092: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e) Link Layer Discovery Protocol No. Time Source Destination Protocol Length Info 22093 257.294667 14.97.186.55 192.168.10.207 SMTP 60 C: QUIT Frame 22093: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13610 (13610), Dst Port: smtp (25), Seq: 63, Ack: 364, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22094 257.294704 192.168.10.207 14.97.186.55 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 22094: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 14.97.186.55 (14.97.186.55) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 13610 (13610), Seq: 364, Ack: 69, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22095 257.294788 14.97.186.55 192.168.10.207 TCP 60 13610 > smtp [ACK] Seq=69 Ack=433 Win=93008 Len=0 Frame 22095: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13610 (13610), Dst Port: smtp (25), Seq: 69, Ack: 433, Len: 0 No. Time Source Destination Protocol Length Info 22096 257.294818 192.168.10.207 14.97.186.55 TCP 60 smtp > 13610 [FIN, ACK] Seq=433 Ack=69 Win=65467 Len=0 Frame 22096: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 14.97.186.55 (14.97.186.55) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 13610 (13610), Seq: 433, Ack: 69, Len: 0 No. Time Source Destination Protocol Length Info 22097 257.294857 14.97.186.55 192.168.10.207 TCP 60 13610 > smtp [ACK] Seq=69 Ack=434 Win=93008 Len=0 Frame 22097: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13610 (13610), Dst Port: smtp (25), Seq: 69, Ack: 434, Len: 0 No. Time Source Destination Protocol Length Info 22098 257.315805 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 22098: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 22099 257.319425 208.67.222.222 192.168.10.220 DNS 87 Standard query response, No such name Frame 22099: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_ad:25:f6 (00:22:19:ad:25:f6) Internet Protocol Version 4, Src: 208.67.222.222 (208.67.222.222), Dst: 192.168.10.220 (192.168.10.220) User Datagram Protocol, Src Port: domain (53), Dst Port: 58192 (58192) Domain Name System (response) No. Time Source Destination Protocol Length Info 22100 257.321401 192.168.10.203 151.59.106.108 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 22100: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 151.59.106.108 (151.59.106.108) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 22101 257.344719 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 22101: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 22102 257.344751 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 22102: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 22103 257.444111 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 22103: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 22104 257.566360 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 22104: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 22105 257.679445 fe80::9e8e:99ff:fe88:e94c ff02::1:2 DHCPv6 128 Solicit XID: 0x282f CID: 00020000000b9c8e9988e94c Frame 22105: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: HewlettP_88:e9:4c (9c:8e:99:88:e9:4c), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02) Internet Protocol Version 6, Src: fe80::9e8e:99ff:fe88:e94c (fe80::9e8e:99ff:fe88:e94c), Dst: ff02::1:2 (ff02::1:2) User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547) DHCPv6 No. Time Source Destination Protocol Length Info 22106 257.679500 fe80::9e8e:99ff:fe88:e94c ff02::1:2 DHCPv6 128 Solicit XID: 0x282f CID: 00020000000b9c8e9988e94c Frame 22106: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) Ethernet II, Src: HewlettP_88:e9:4c (9c:8e:99:88:e9:4c), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02) Internet Protocol Version 6, Src: fe80::9e8e:99ff:fe88:e94c (fe80::9e8e:99ff:fe88:e94c), Dst: ff02::1:2 (ff02::1:2) User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547) DHCPv6 No. Time Source Destination Protocol Length Info 22107 257.794922 192.168.10.207 189.123.220.16 TCP 62 smtp > 49308 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 22107: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49308 (49308), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 22108 257.840568 188.161.220.86 192.168.10.207 SMTP 60 C: QUIT Frame 22108: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45242 (45242), Dst Port: smtp (25), Seq: 63, Ack: 367, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22109 257.840651 192.168.10.207 188.161.220.86 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 22109: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45242 (45242), Seq: 367, Ack: 69, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22110 257.840730 188.161.220.86 192.168.10.207 TCP 60 45242 > smtp [ACK] Seq=69 Ack=436 Win=93004 Len=0 Frame 22110: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45242 (45242), Dst Port: smtp (25), Seq: 69, Ack: 436, Len: 0 No. Time Source Destination Protocol Length Info 22111 257.840760 192.168.10.207 188.161.220.86 TCP 60 smtp > 45242 [FIN, ACK] Seq=436 Ack=69 Win=65467 Len=0 Frame 22111: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45242 (45242), Seq: 436, Ack: 69, Len: 0 No. Time Source Destination Protocol Length Info 22112 257.840798 188.161.220.86 192.168.10.207 TCP 60 45242 > smtp [ACK] Seq=69 Ack=437 Win=93004 Len=0 Frame 22112: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45242 (45242), Dst Port: smtp (25), Seq: 69, Ack: 437, Len: 0 No. Time Source Destination Protocol Length Info 22113 257.853445 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 22113: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 22114 257.853475 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 22114: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 22115 257.862283 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 22115: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55437, Ack: 364407, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 22116 257.884987 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 22116: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55464, Ack: 364407, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 22117 257.885020 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=364407 Ack=55491 Win=65535 Len=0 Frame 22117: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 364407, Ack: 55491, Len: 0 No. Time Source Destination Protocol Length Info 22118 257.910950 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 22118: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55491, Ack: 364407, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 22119 257.919014 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 22119: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55518, Ack: 364407, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 22120 257.919052 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=364407 Ack=55545 Win=65481 Len=0 Frame 22120: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 364407, Ack: 55545, Len: 0 No. Time Source Destination Protocol Length Info 22121 257.926266 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 22121: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55545, Ack: 364407, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 22122 257.932046 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 22122: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55572, Ack: 364407, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 22123 257.932083 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=364407 Ack=55599 Win=65427 Len=0 Frame 22123: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 364407, Ack: 55599, Len: 0 No. Time Source Destination Protocol Length Info 22124 257.960333 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 22124: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55599, Ack: 364407, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 22125 257.964123 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 22125: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55626, Ack: 364407, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 22126 257.964157 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=364407 Ack=55653 Win=65373 Len=0 Frame 22126: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 364407, Ack: 55653, Len: 0 No. Time Source Destination Protocol Length Info 22127 257.968698 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 22127: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55653, Ack: 364407, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 22128 257.982568 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 22128: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55680, Ack: 364407, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 22129 257.982601 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=364407 Ack=55707 Win=65319 Len=0 Frame 22129: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 364407, Ack: 55707, Len: 0 No. Time Source Destination Protocol Length Info 22130 257.990353 189.123.220.16 192.168.10.207 TCP 60 49308 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 22130: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49308 (49308), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 22131 257.990563 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49308 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 22131: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49308 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 22132 257.990596 192.168.10.207 189.123.220.16 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:48:10 -0400 Frame 22132: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49308 (49308), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22133 257.990678 189.123.220.16 192.168.10.207 TCP 60 49308 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 22133: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49308 (49308), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 22134 257.990720 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 22134: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55707, Ack: 364407, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 22135 257.997551 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 22135: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55734, Ack: 364407, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 22136 257.997581 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=364407 Ack=55761 Win=65265 Len=0 Frame 22136: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 364407, Ack: 55761, Len: 0 No. Time Source Destination Protocol Length Info 22137 258.009742 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 22137: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55761, Ack: 364407, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 22138 258.014014 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 22138: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55788, Ack: 364407, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 22139 258.014056 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=364407 Ack=55815 Win=65211 Len=0 Frame 22139: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 364407, Ack: 55815, Len: 0 No. Time Source Destination Protocol Length Info 22140 258.031379 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 22140: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55815, Ack: 364407, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 22141 258.042322 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 22141: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55842, Ack: 364407, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 22142 258.042353 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=364407 Ack=55869 Win=65157 Len=0 Frame 22142: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 364407, Ack: 55869, Len: 0 No. Time Source Destination Protocol Length Info 22143 258.056701 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 22143: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55869, Ack: 364407, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 22144 258.056758 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 22144: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55896, Ack: 364407, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 22145 258.056788 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=364407 Ack=55923 Win=65103 Len=0 Frame 22145: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 364407, Ack: 55923, Len: 0 No. Time Source Destination Protocol Length Info 22146 258.058675 192.168.10.221 24.143.205.27 TCP 60 4794 > http [RST, ACK] Seq=3035 Ack=432 Win=0 Len=0 Frame 22146: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.27 (24.143.205.27) Transmission Control Protocol, Src Port: 4794 (4794), Dst Port: http (80), Seq: 3035, Ack: 432, Len: 0 No. Time Source Destination Protocol Length Info 22147 258.062149 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 22147: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55923, Ack: 364407, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 22148 258.069662 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 22148: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55950, Ack: 364407, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 22149 258.069696 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=364407 Ack=55977 Win=65049 Len=0 Frame 22149: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 364407, Ack: 55977, Len: 0 No. Time Source Destination Protocol Length Info 22150 258.128137 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 22150: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 55977, Ack: 364407, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 22151 258.160186 188.161.220.86 192.168.10.207 TCP 60 45242 > smtp [RST, ACK] Seq=69 Ack=437 Win=93004 Len=0 Frame 22151: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45242 (45242), Dst Port: smtp (25), Seq: 69, Ack: 437, Len: 0 No. Time Source Destination Protocol Length Info 22152 258.160279 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45242 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 22152: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45242 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 22153 258.164612 188.161.220.86 192.168.10.207 TCP 62 45273 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 22153: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45273 (45273), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 22154 258.164672 192.168.10.207 188.161.220.86 TCP 62 smtp > 45273 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 22154: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45273 (45273), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 22155 258.170140 189.123.220.16 192.168.10.207 SMTP 72 C: EHLO qadnqyn.com Frame 22155: 72 bytes on wire (576 bits), 72 bytes captured (576 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49308 (49308), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 18 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22156 258.170490 192.168.10.207 189.123.220.16 SMTP 245 S: 250-mail.mydomain.com Hello [189.123.220.16] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 22156: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49308 (49308), Seq: 122, Ack: 19, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22157 258.170520 189.123.220.16 192.168.10.207 TCP 60 49308 > smtp [ACK] Seq=19 Ack=313 Win=93128 Len=0 Frame 22157: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49308 (49308), Dst Port: smtp (25), Seq: 19, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 22158 258.170839 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49308 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 22158: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49308 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 22159 258.170928 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49308 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 22159: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49308 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 22160 258.171087 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49308 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 22160: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49308 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 22161 258.171194 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49308 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 22161: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49308 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 22162 258.171315 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49308 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 22162: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49308 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 22163 258.171477 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49308 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 22163: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49308 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 22164 258.190222 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1571821824, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 22164: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22165 258.190238 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1571821824, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 22165: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22166 258.190246 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1571821824, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 22166: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22167 258.190254 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1571821824, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 22167: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22168 258.208073 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3440902400, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 22168: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22169 258.208089 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3440902400, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 22169: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22170 258.208097 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3440902400, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 22170: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22171 258.208105 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3440902400, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 22171: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22172 258.302428 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=364407 Ack=56004 Win=65022 Len=0 Frame 22172: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 364407, Ack: 56004, Len: 0 No. Time Source Destination Protocol Length Info 22173 258.309636 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 22173: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17935, Ack: 1292689, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22174 258.309654 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1292689 Ack=17977 Win=46405 Len=0 Frame 22174: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1292689, Ack: 17977, Len: 0 No. Time Source Destination Protocol Length Info 22175 258.344370 14.97.186.55 192.168.10.207 TCP 62 13653 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 22175: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13653 (13653), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 22176 258.344409 192.168.10.207 14.97.186.55 TCP 62 smtp > 13653 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 22176: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 14.97.186.55 (14.97.186.55) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 13653 (13653), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 22177 258.346871 14.97.186.55 192.168.10.207 TCP 60 13610 > smtp [RST, ACK] Seq=69 Ack=434 Win=93008 Len=0 Frame 22177: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13610 (13610), Dst Port: smtp (25), Seq: 69, Ack: 434, Len: 0 No. Time Source Destination Protocol Length Info 22178 258.347024 192.168.10.1 192.168.10.245 Syslog 201 LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13610 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 22178: 201 bytes on wire (1608 bits), 201 bytes captured (1608 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13610 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 22179 258.350975 189.123.220.16 192.168.10.207 SMTP 107 C: MAIL FROM: <aaliyah.jenkin@xxxxxxxxxxxxxxxxxxxxxxx> Frame 22179: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49308 (49308), Dst Port: smtp (25), Seq: 19, Ack: 313, Len: 53 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22180 258.351270 192.168.10.207 189.123.220.16 SMTP 117 S: 250 2.1.0 [email protected] OK Frame 22180: 117 bytes on wire (936 bits), 117 bytes captured (936 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49308 (49308), Seq: 313, Ack: 72, Len: 63 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22181 258.351298 189.123.220.16 192.168.10.207 TCP 60 49308 > smtp [ACK] Seq=72 Ack=376 Win=93064 Len=0 Frame 22181: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49308 (49308), Dst Port: smtp (25), Seq: 72, Ack: 376, Len: 0 No. Time Source Destination Protocol Length Info 22182 258.514806 188.161.220.86 192.168.10.207 TCP 60 45273 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 22182: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45273 (45273), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 22183 258.514917 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45273 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 22183: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45273 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 22184 258.515006 192.168.10.207 188.161.220.86 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:48:11 -0400 Frame 22184: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45273 (45273), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22185 258.515090 188.161.220.86 192.168.10.207 TCP 60 45273 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 22185: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45273 (45273), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 22186 258.535264 192.168.10.1 192.168.10.245 Syslog 308 LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49308 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="ezdevote@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 22186: 308 bytes on wire (2464 bits), 308 bytes captured (2464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49308 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 22187 258.724975 14.97.186.55 192.168.10.207 TCP 60 13653 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 22187: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13653 (13653), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 22188 258.725223 192.168.10.207 14.97.186.55 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:48:11 -0400 Frame 22188: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 14.97.186.55 (14.97.186.55) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 13653 (13653), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22189 258.725634 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=293409 Ack=5921 Win=1002 Len=1448 TSval=599928 TSecr=730032 Frame 22189: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 293409, Ack: 5921, Len: 1448 Data (1448 bytes) 0000 17 03 01 22 a0 28 1b 9c 85 c2 ff 3d 68 a0 34 f6 ...".(.....=h.4. 0010 71 79 98 66 3f d2 12 f1 57 bf fa 12 7b 21 4b 1e qy.f?...W...{!K. 0020 fe 5a 93 19 e5 10 4a 0c d1 1f d3 62 39 5f c1 95 .Z....J....b9_.. 0030 1a 95 54 b2 b7 b4 0e 5b 6e b9 01 c0 fd 43 0e ed ..T....[n....C.. 0040 9e 4f a6 72 76 b4 81 d1 e8 5c ec a6 46 a3 e4 91 .O.rv....\..F... 0050 b8 7d 13 44 ef 1b c2 cd 46 c8 55 b2 67 46 d0 6e .}.D....F.U.gF.n 0060 d9 45 fd b7 d4 24 5a 0f 98 9b a3 61 09 37 b8 16 .E...$Z....a.7.. 0070 e1 cd ab b2 8d c0 01 74 59 40 90 31 5d 63 49 6c [email protected]]cIl 0080 98 39 68 fa a2 bf 92 d3 fa 30 5c a4 c9 25 65 45 .9h......0\..%eE 0090 65 c8 34 e3 a8 87 5c 9b 2d 4a 02 4b e4 ba 26 d4 e.4...\.-J.K..&. 00a0 1b d7 ad 22 56 63 01 16 cd 0f 6a 89 47 e0 f2 fd ..."Vc....j.G... 00b0 a7 75 5c 88 6f e2 d5 db 2a 20 e8 a8 88 d7 7c 83 .u\.o...* ....|. 00c0 20 61 1c f5 91 c9 5d 5c 10 73 9e 13 71 bf c6 6c a....]\.s..q..l 00d0 9b 7f 3d 9d 81 1c de 20 50 e7 9f 34 36 cf 10 fd ..=.... P..46... 00e0 c3 17 18 89 92 7e 09 96 2b 2f c6 20 6d ce 22 35 .....~..+/. m."5 00f0 64 d0 23 c9 db 37 64 5a b6 50 29 00 2d b0 95 13 d.#..7dZ.P).-... 0100 31 50 90 1f 25 0e 55 09 ca fa 73 73 ba 6e 9f 0e 1P..%.U...ss.n.. 0110 1f 85 97 65 53 76 2b a6 66 37 3f 5c 1f f9 2d 95 ...eSv+.f7?\..-. 0120 06 bd d8 0f 86 99 93 4c ca 9a 3f 84 83 cb 31 8b .......L..?...1. 0130 66 7c d1 db cd aa aa a6 62 7b eb a8 03 d0 63 1e f|......b{....c. 0140 68 61 f3 7b 38 ae de 78 8e 52 b1 79 11 11 fd 16 ha.{8..x.R.y.... 0150 bb a0 9c c8 f0 f7 f7 cd 96 db bb 88 4e 0a 33 f9 ............N.3. 0160 f8 a0 4d cb be a6 fb e2 ee 44 f4 cd 7b ad ab 1c ..M......D..{... 0170 b7 c4 d4 18 a0 e5 89 9d 8f fb 4c f0 51 5a 05 f8 ..........L.QZ.. 0180 46 f3 f6 63 e3 f8 f4 5a b5 23 2f 25 bd 86 83 f0 F..c...Z.#/%.... 0190 1f f7 1e ed 6a 4f 0e 50 6e f4 c1 88 00 46 82 1e ....jO.Pn....F.. 01a0 52 16 13 e4 bd eb cb 14 08 a1 eb 24 36 77 f8 50 R..........$6w.P 01b0 c5 16 64 a6 e1 8c 40 74 ec eb fa c1 e0 45 53 bd ..d...@xxxxxxxx. 01c0 a2 50 35 92 28 db 14 4a cb ed f6 db 3c 05 9a 84 .P5.(..J....<... 01d0 31 a7 cb 9f 3e 0c 1a 9c 3c 41 c4 87 de 93 21 bd 1...>...<A....!. 01e0 2d f8 67 b5 9d 0f 39 b5 09 f4 9a 72 f0 11 fa ca -.g...9....r.... 01f0 3c 6a 9d 4f a5 30 ab 31 93 c1 f5 41 4d d1 43 54 <j.O.0.1...AM.CT 0200 4f a8 42 ec f2 b2 a8 0b 6a aa 45 78 dc 8b b2 38 O.B.....j.Ex...8 0210 55 18 cf 4b 47 64 be bc 65 3a 85 0f de 24 3d 87 U..KGd..e:...$=. 0220 4f d7 b1 40 c7 31 0f 4c 3c 43 05 20 04 f3 4c 16 [email protected]<C. ..L. 0230 63 ad 6e b2 83 ec ac cb 19 87 ab a2 d2 90 f9 ab c.n............. 0240 dd 0a 38 9f 83 0f 5e ff e7 84 c6 80 36 17 cc 12 ..8...^.....6... 0250 f8 2a a9 3b 9a d4 6e 56 04 11 f5 cc 0b 3b c5 5b .*.;..nV.....;.[ 0260 8f fa 2c f6 d2 f5 61 09 7c ec 56 27 1c 31 f5 cd ..,...a.|.V'.1.. 0270 e0 70 a6 aa d3 30 d1 3a 4f 8f 67 51 a3 0e 1f f1 .p...0.:O.gQ.... 0280 bd 44 95 85 92 7a 3d c3 6f e6 e2 da f8 4e f2 aa .D...z=.o....N.. 0290 19 17 f9 3d ee ea 36 15 28 e1 86 ef d3 12 b2 dd ...=..6.(....... 02a0 c2 b0 6a 27 a4 03 95 21 5f 9e 9c 5b 28 fc ac 91 ..j'...!_..[(... 02b0 e2 60 0f 74 3c 0d aa 38 ea 8f ab 20 e7 d5 d6 f7 .`.t<..8... .... 02c0 1f 42 eb 4e 72 fc 50 e7 54 b8 a4 db dd cd 4e 77 .B.Nr.P.T.....Nw 02d0 c5 65 1e 42 f4 36 e0 90 88 9b 46 b0 41 2f ec 5d .e.B.6....F.A/.] 02e0 b4 16 a1 dd 12 f9 0c 77 25 02 41 9f 2d 5f 41 d0 .......w%.A.-_A. 02f0 1a 00 ef 2a 7f 35 cf 45 06 c0 5b e7 f2 71 80 a2 ...*.5.E..[..q.. 0300 82 3c 85 51 2c e6 6e 92 90 92 0b 6b ca 8f 2e 95 .<.Q,.n....k.... 0310 ed 95 90 90 16 68 e1 f6 28 7c 69 c6 da 48 98 11 .....h..(|i..H.. 0320 00 66 1e dc a2 28 4a 2f 9d ba 06 1b 43 6c 24 e0 .f...(J/....Cl$. 0330 83 3c d0 84 52 c6 50 7b 69 74 01 f9 de d3 0f 6d .<..R.P{it.....m 0340 ac 22 b5 0f c4 dd 62 85 ec 6d 40 f7 c3 eb df a1 ."....b..m@..... 0350 30 10 12 24 ae 3f 7a d4 8d f7 ba 0b f5 32 f8 51 0..$.?z......2.Q 0360 48 5d 2c 19 c1 b3 5b fc 18 51 1b c3 cd 39 0a 88 H],...[..Q...9.. 0370 58 e5 51 5a 42 02 8d 47 e4 0e c6 0f 52 4e 1b a2 X.QZB..G....RN.. 0380 d1 a8 9c 2f e4 60 7b 42 28 24 c9 ae 0a f3 18 e7 .../.`{B($...... 0390 ea 38 2c a9 f5 75 1b 2a 4c 18 b6 d1 54 4e 6e 0f .8,..u.*L...TNn. 03a0 5d c3 83 22 f5 c0 7d 2c 96 aa 91 28 d9 c4 96 d6 ].."..},...(.... 03b0 8f 1b 8a 92 c6 4e f4 cd be 26 aa 31 c8 a4 bf 38 .....N...&.1...8 03c0 33 1d 92 24 12 15 0c 95 d1 87 72 34 c3 c3 ad b2 3..$......r4.... 03d0 ca af e1 01 8d 86 fd ad 62 79 d5 47 30 59 bb a8 ........by.G0Y.. 03e0 77 91 13 88 ad b0 61 10 19 7e 79 74 d1 ec af b7 w.....a..~yt.... 03f0 c6 ea 72 8a 58 48 13 fd a8 cb f6 5e 31 09 a2 4a ..r.XH.....^1..J 0400 02 27 c3 af 7a cc 4c af ea 16 10 22 ac 70 f0 6a .'..z.L....".p.j 0410 3c 7c d3 9d f6 4e 6b bb 01 1a 0a fe e2 19 47 5a <|...Nk.......GZ 0420 b8 c0 33 46 3b b6 af 63 a6 d4 a2 3d b6 9a c8 f7 ..3F;..c...=.... 0430 27 e6 4f dd f6 b4 a3 24 9c 46 fb 78 8e e8 1d 5f '.O....$.F.x..._ 0440 b6 50 60 9a cf 89 81 71 56 c9 6d a0 6a 58 1e ff .P`....qV.m.jX.. 0450 f3 50 8b e5 f9 1a 7b 22 02 3b e8 2a 8e 38 c1 88 .P....{".;.*.8.. 0460 52 4f ff 86 e4 04 4e 8a 9f 6e b5 ef 0d 0f c1 0c RO....N..n...... 0470 43 2e bf 7d 20 3d e6 70 5f bb 8e 79 fe 49 10 2c C..} =.p_..y.I., 0480 7f 12 5c 40 e0 21 6c 99 f2 3b 16 23 38 9f e2 3f ..\@.!l..;.#8..? 0490 c5 4e 21 1e f7 6f 4c d0 a5 07 78 64 b7 d1 df 32 .N!..oL...xd...2 04a0 30 28 9d 99 d3 bd 09 56 3c f2 c5 07 e7 f7 d1 06 0(.....V<....... 04b0 6f 61 a5 67 3d 4a 04 af 36 e6 b9 81 cf 70 c5 79 oa.g=J..6....p.y 04c0 5a 06 05 2b bb ea 41 43 7e 25 e2 18 ab c7 bb a2 Z..+..AC~%...... 04d0 18 66 a3 32 22 04 70 80 fb a4 57 39 c8 3b c3 f2 .f.2".p...W9.;.. 04e0 0f 28 ff 01 12 8c e2 5b 83 3d a1 4e 28 f9 4d 12 .(.....[.=.N(.M. 04f0 a7 4a 53 9d f9 cc d3 c7 40 5a cd 8f 2a a1 98 1e .JS.....@Z..*... 0500 1e a2 6d c9 47 78 5c 9b f6 ad eb 15 44 b2 56 64 ..m.Gx\.....D.Vd 0510 0c 87 9a a6 3e 3a e3 be 12 fc 0e 11 a6 51 51 cc ....>:.......QQ. 0520 04 e1 0f b3 48 be 69 b5 c3 15 8e b9 90 df a4 d5 ....H.i......... 0530 46 70 1e 28 4d ed fd f1 e8 d4 88 a6 26 3a c9 fc Fp.(M.......&:.. 0540 13 38 c3 a0 bd e6 0d e6 d4 9e 09 84 8a ba 4e e6 .8............N. 0550 9b ed b9 81 26 dd 17 6d 4f c8 24 41 8c af de 06 ....&..mO.$A.... 0560 79 4d 80 5c 82 b7 34 07 86 f8 7f 76 40 6b 0e 09 yM.\..4....v@k.. 0570 44 27 79 75 c7 cb 39 a1 3a 8f c5 e3 b5 77 4a 75 D'yu..9.:....wJu 0580 85 21 73 6e 36 25 7d b8 83 11 fb 85 3b 18 eb c5 .!sn6%}.....;... 0590 e2 38 bb fb 93 01 de 5d 1c e2 e2 7d 46 e9 9a 74 .8.....]...}F..t 05a0 d5 4f cf c2 ab 1f 62 01 .O....b. No. Time Source Destination Protocol Length Info 22190 258.725692 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=294857 Ack=5921 Win=1002 Len=1448 TSval=599928 TSecr=730032 Frame 22190: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 294857, Ack: 5921, Len: 1448 Data (1448 bytes) 0000 93 f7 8e 8b eb cc 40 b4 41 80 4c c8 2a 4a 41 bc [email protected].*JA. 0010 78 57 31 e8 96 4f 0e 03 d6 9f 14 2b 58 9b 5e 74 xW1..O.....+X.^t 0020 0c a7 39 43 9f 43 d6 e9 53 08 17 27 0c d6 84 89 ..9C.C..S..'.... 0030 91 e7 e1 da 1b c0 40 50 d9 2e 01 d8 f9 19 43 61 [email protected] 0040 31 56 05 44 f4 29 8e 18 42 fd e6 ba 68 5b 2c a7 1V.D.)..B...h[,. 0050 12 9d 86 8b 0c 3c cb 72 98 d3 95 71 75 ed b0 f1 .....<.r...qu... 0060 1f 31 37 c9 68 39 4b 9f 30 01 5a 56 11 58 d3 f0 .17.h9K.0.ZV.X.. 0070 5a 71 23 47 9a ea 48 b6 4b 72 e0 c4 6b 23 72 64 Zq#G..H.Kr..k#rd 0080 a5 0c 73 7b b3 92 c8 0d d5 2d e4 71 07 c4 b1 dd ..s{.....-.q.... 0090 27 d5 8e 29 10 5f 87 99 e6 fe ff 0c d3 bf 64 73 '..)._........ds 00a0 e5 44 33 ed f3 3a 67 d8 7b 4b 45 70 e5 77 37 a4 .D3..:g.{KEp.w7. 00b0 78 78 19 42 f3 73 13 91 be b1 6e 2d df db c7 c0 xx.B.s....n-.... 00c0 af 64 e7 ef a8 ad 15 a9 82 2e 6f c8 c1 5c 40 ab .d........o..\@. 00d0 0e a2 5f 1c 0b b2 12 49 36 d6 8c 3c 8f 32 3d 3a .._....I6..<.2=: 00e0 ac 7e 55 21 63 88 36 d3 63 22 dd da 61 a3 bb c3 .~U!c.6.c"..a... 00f0 d7 7d 48 94 a1 6c 39 e3 84 e0 ef 9b ee 53 63 cc .}H..l9......Sc. 0100 21 5c ad 16 08 3f 60 e7 73 b6 28 b5 cf b8 e3 1e !\...?`.s.(..... 0110 1b 5a 11 9c f2 95 13 64 9a b4 a4 a1 b5 47 91 66 .Z.....d.....G.f 0120 06 53 7c 76 46 73 17 e8 5d ac 10 0f c4 db 50 b4 .S|vFs..].....P. 0130 f1 59 60 a7 cc b4 4e f5 ae 2e 0c 11 d2 8c 1e 34 .Y`...N........4 0140 5a 6f f2 51 24 b7 de fc 28 fc 6f 10 91 5f d3 bb Zo.Q$...(.o.._.. 0150 a4 46 d9 14 3a 40 a2 35 a8 b9 f4 09 cb 40 90 9d .F..:@.5.....@.. 0160 37 dc 24 f5 e8 30 d4 e4 03 58 cf 49 d7 a9 18 f9 7.$..0...X.I.... 0170 bd 56 ee cd 65 65 eb d5 59 70 b3 bf 0e 4e 88 75 .V..ee..Yp...N.u 0180 0f 28 91 2c ee a6 8e 35 7f 50 90 f9 6c 29 95 ba .(.,...5.P..l).. 0190 d6 8d ff af 15 b5 ae 4a 25 3a 6c 0a f2 35 55 c4 .......J%:l..5U. 01a0 4c 67 a1 21 db ee f7 44 12 8d 7f f6 20 a7 1e 5a Lg.!...D.... ..Z 01b0 1c be af 45 45 a4 30 bd 53 ab 9a 54 76 6d dd 58 ...EE.0.S..Tvm.X 01c0 65 1b b4 1a de 7d d0 2d 75 9b dc 63 99 33 dd 8e e....}.-u..c.3.. 01d0 11 7b c7 ac b5 d3 d6 e9 ba 75 ba 15 c9 6f 45 11 .{.......u...oE. 01e0 f2 44 13 78 7b 82 bd ec 81 56 57 40 72 6d 36 62 .D.x{....VW@rm6b 01f0 ff f3 58 b1 44 ef 43 f7 f1 67 8a 2c ff 0f 9f 41 ..X.D.C..g.,...A 0200 ba 72 4b 63 7e 8b 94 7c 53 9e 17 c1 3e 87 19 90 .rKc~..|S...>... 0210 e0 20 a0 2e ba 33 ac 4c 3d 13 09 9c b0 b8 8a 40 . ...3.L=......@ 0220 cf 48 47 08 2e 33 f8 d2 87 b0 8d 11 f7 1b a5 7b .HG..3.........{ 0230 21 95 b8 ec 5b 9d 2b c6 e2 5f 18 0e 75 3d 3e 5f !...[.+.._..u=>_ 0240 b4 49 8c c2 00 9f 91 4b 92 7e 74 67 c3 4c d3 31 .I.....K.~tg.L.1 0250 a1 ab 27 a6 55 95 b8 a4 21 36 6a 5b 41 c1 f8 64 ..'.U...!6j[A..d 0260 85 44 a5 42 39 0f 9b 9b 36 1e 58 f1 e9 c2 2f 73 .D.B9...6.X.../s 0270 d5 b1 4b 9c 25 ee 4e d9 8d 6f 31 e8 a5 85 99 98 ..K.%.N..o1..... 0280 02 75 68 a2 f6 26 5f 2f 64 1b b8 91 6d d3 5b b7 .uh..&_/d...m.[. 0290 28 48 0f 36 5f 0c 06 52 d9 c3 22 ae 73 04 4c 20 (H.6_..R..".s.L 02a0 e7 fc a5 77 0f 98 b8 58 e7 20 02 d4 d4 85 7e ed ...w...X. ....~. 02b0 67 5f 9b 35 1c ef 4c 59 4c ee 26 5c b8 08 7d ff g_.5..LYL.&\..}. 02c0 1f 82 3f 37 8b 56 99 f2 22 af fe 90 d3 4b 94 f8 ..?7.V.."....K.. 02d0 78 35 e4 18 5f b4 9f a7 69 3d c2 67 97 cd f8 03 x5.._...i=.g.... 02e0 c8 c8 04 1d 91 4d a6 d4 b7 81 67 3f 6d 9d 35 6c .....M....g?m.5l 02f0 92 52 f2 e7 b6 53 a3 9c 6f cd 67 c5 b9 ea a4 ca .R...S..o.g..... 0300 6c aa ab 75 85 c9 51 2a 5f 4e db 4f 82 e2 32 eb l..u..Q*_N.O..2. 0310 a6 31 03 64 09 07 ff cc df 39 c8 f9 04 d3 fb 63 .1.d.....9.....c 0320 eb f0 15 1f 4c 12 ff 75 b3 c1 49 9f f6 c2 2e af ....L..u..I..... 0330 12 5d 37 e7 71 1c 88 19 14 d0 e9 d4 82 64 80 60 .]7.q........d.` 0340 af 7f eb 57 4d 6f 8c 74 c7 60 42 56 6a 22 65 37 ...WMo.t.`BVj"e7 0350 df d0 fd e8 98 c0 66 8a 42 f2 2e ba 9d 9c 49 c9 ......f.B.....I. 0360 63 81 18 93 08 ab 0c 33 ff 8d d4 d0 88 8d 9a 62 c......3.......b 0370 04 e9 ef 21 c9 34 50 12 14 cb 62 54 30 f7 f3 d2 ...!.4P...bT0... 0380 2d ac a7 36 11 9b 6d ab 25 6c 79 92 10 e8 e3 ca -..6..m.%ly..... 0390 e7 76 2e fa d0 14 ee 2b 70 82 69 9c e4 c4 f7 6d .v.....+p.i....m 03a0 5d e9 51 20 6a 8b df 16 fe f2 e1 fe d8 b2 e0 c4 ].Q j........... 03b0 29 cc 90 e5 96 63 04 90 e1 6b 09 57 60 2c 07 00 )....c...k.W`,.. 03c0 ae 15 66 69 aa a6 bd ed cc e0 ad 83 16 7b d5 f9 ..fi.........{.. 03d0 be 72 93 20 b6 b7 ed c9 6a 4f e8 f5 c2 a8 fe 6e .r. ....jO.....n 03e0 d4 c5 78 f7 3d 38 b5 e9 eb d2 f7 73 03 54 3c 94 ..x.=8.....s.T<. 03f0 a9 9b 9f c2 d7 ab 64 6f c2 50 fc c5 66 dd c4 c9 ......do.P..f... 0400 15 86 e2 bb ff 82 1b ae f1 ba 29 3f 72 90 06 cb ..........)?r... 0410 83 9d 44 e7 39 e4 52 9e 7b 56 b3 7f f8 11 a8 fb ..D.9.R.{V...... 0420 18 be 59 43 54 c6 4b f3 fb b2 43 b9 33 16 d5 0c ..YCT.K...C.3... 0430 ae 6d ca 2a 1d c9 19 f4 1a 6f 06 9d 19 c0 e2 2e .m.*.....o...... 0440 9a 0f f4 60 15 1b d9 a1 39 ab e8 d0 01 8a 82 8a ...`....9....... 0450 7b b4 e4 f6 04 1a 06 fd f1 9b e9 69 72 27 d7 26 {..........ir'.& 0460 34 46 89 34 8e 52 d7 1b bb d5 a6 d5 26 0d 6f bb 4F.4.R......&.o. 0470 ea 74 78 45 86 4e eb b5 6c 6f 94 6f 05 2b 32 d9 .txE.N..lo.o.+2. 0480 47 e0 f6 04 08 ec 5e c1 ec 1f 4b cb c9 8e e4 b1 G.....^...K..... 0490 dd 48 d6 75 4c c8 f1 bf 58 26 95 76 3a 1f 87 ce .H.uL...X&.v:... 04a0 75 e2 22 dd 48 1d d8 9d 47 52 d3 a1 58 70 23 a9 u.".H...GR..Xp#. 04b0 cc 04 ad bd d8 1c 89 b8 ad 66 0b 24 de 70 ee 5c .........f.$.p.\ 04c0 28 68 eb 20 0b 4e ab 41 3f e7 f4 cc 4a 7d 37 9c (h. .N.A?...J}7. 04d0 4f 46 9d 21 5e cc 0a 15 24 42 82 f1 f8 29 48 a6 OF.!^...$B...)H. 04e0 04 5b 2a a9 8b 04 61 e0 52 1c b3 d7 4e a5 87 01 .[*...a.R...N... 04f0 8b 00 c0 0c fc 4e 31 ef d4 15 37 de 47 b8 07 7b .....N1...7.G..{ 0500 c2 a1 8c 65 2b 6f 9f 3c da 69 0e c9 4f 4b 56 59 ...e+o.<.i..OKVY 0510 8e eb 65 cf 8c c2 cc ab 6e be ef f8 57 98 2f 28 ..e.....n...W./( 0520 bd 16 83 32 45 1b 19 0b e5 92 5d 4f 64 eb 41 13 ...2E.....]Od.A. 0530 19 8f d3 e7 f2 12 5f 2a 51 51 c6 08 c7 e8 e9 a8 ......_*QQ...... 0540 60 91 a6 5a dd 84 b5 6d 59 82 32 b1 89 a4 fb 6a `..Z...mY.2....j 0550 2f 31 d9 f5 fc 7f 60 15 07 60 7c 8c cb 2b c0 1e /1....`..`|..+.. 0560 80 57 b5 71 ac 5b 09 02 91 a7 b0 64 01 d1 e7 d4 .W.q.[.....d.... 0570 8b c7 bc a0 bb bb 6f 73 6b 21 ed 84 55 79 54 54 ......osk!..UyTT 0580 7f dd 93 eb 2d d5 31 56 e5 82 53 27 b6 c3 0d b8 ....-.1V..S'.... 0590 3a 58 ad 51 bc 4a fc 67 eb 81 43 24 2f 72 0a 78 :X.Q.J.g..C$/r.x 05a0 8a 4f a7 5d 7a fb 51 cd .O.]z.Q. No. Time Source Destination Protocol Length Info 22191 258.725751 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=296305 Ack=5921 Win=1002 Len=1448 TSval=599928 TSecr=730032 Frame 22191: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 296305, Ack: 5921, Len: 1448 Data (1448 bytes) 0000 cb 22 a1 18 97 1c d2 4c ff d9 b4 62 a7 4f 67 ca .".....L...b.Og. 0010 e2 eb f7 68 21 01 b4 d2 95 d4 63 bf 2b 33 fa 25 ...h!.....c.+3.% 0020 c6 bf e3 32 9b 42 6c c3 60 5a 23 9d a2 39 eb 27 ...2.Bl.`Z#..9.' 0030 4b 90 45 66 7c 99 25 3d 04 eb d1 f3 5c 4e 20 e7 K.Ef|.%=....\N . 0040 11 5b bf e1 b0 0a 77 f0 8e f9 42 a3 84 58 14 29 .[....w...B..X.) 0050 85 13 64 df 9f 97 08 40 e1 02 c1 d1 cf 17 b7 86 ..d....@........ 0060 4d 5f d2 39 13 29 1d 47 84 a9 25 6f 37 7d 8a 80 M_.9.).G..%o7}.. 0070 91 a2 4c 22 85 8f a7 e3 6f da 29 bf 0a b0 9d 3b ..L"....o.)....; 0080 25 0a ca 33 65 60 d4 f4 67 46 c3 bf 7f 43 ce df %..3e`..gF...C.. 0090 9b a3 e7 3b 76 1a 29 8f da 9d 43 8f a9 93 3f 7d ...;v.)...C...?} 00a0 4f 30 72 d0 6e 6e f9 46 5b 04 61 3c 82 11 d0 cc O0r.nn.F[.a<.... 00b0 c6 b4 89 16 08 5e 6b 50 5a 2c 2a e9 9a f6 c0 9c .....^kPZ,*..... 00c0 f3 42 9c 3f d4 d1 7d 38 e7 9f 0f ef ec d7 a6 cf .B.?..}8........ 00d0 0e c1 48 8a a1 7c c6 05 a5 9a 33 1f 12 87 fc f8 ..H..|....3..... 00e0 a0 db c2 93 90 3b 2a 4c 94 05 27 e3 24 dc 58 a6 .....;*L..'.$.X. 00f0 8d 33 63 9c 6a 67 4e 61 45 94 35 73 b8 b2 00 52 .3c.jgNaE.5s...R 0100 19 98 4c 1c 8f eb 63 fd f1 61 63 5d 27 45 76 7a ..L...c..ac]'Evz 0110 18 44 1a be e4 97 bf d0 8d 15 f2 d3 1e c8 73 14 .D............s. 0120 f9 bd f5 e1 06 8d 89 db ce 9a cd 67 b0 a9 30 10 ...........g..0. 0130 66 16 f1 5f 75 16 44 3a 05 60 c2 ed c1 81 98 b9 f.._u.D:.`...... 0140 9a 96 ab 18 9d 6b 3a 5b 65 b3 85 93 e8 28 03 e6 .....k:[e....(.. 0150 4f 66 48 3f 59 bd e8 9f 8c 5d dc e3 4d 45 d1 ab OfH?Y....]..ME.. 0160 bd 80 da b7 3b 08 1b 5e 05 bc 33 de 2b a2 ab fc ....;..^..3.+... 0170 81 39 47 61 bb 61 a0 d8 77 59 0c a1 f3 5e 60 6d .9Ga.a..wY...^`m 0180 6e 9e e9 47 b9 7b c0 b3 b7 d0 c8 27 89 78 4a 86 n..G.{.....'.xJ. 0190 be 9b 49 69 31 04 fc 2f b2 06 f9 1d 13 4f 04 86 ..Ii1../.....O.. 01a0 97 dc 99 41 f7 b3 60 39 f6 ef ed 80 47 1a b6 bc ...A..`9....G... 01b0 5e 61 0b 18 7b 47 d1 e6 e3 e6 66 0d 7e 99 c4 c4 ^a..{G....f.~... 01c0 08 f2 13 c9 b4 de f8 4d ee 2a 11 28 ab bb 9a 8a .......M.*.(.... 01d0 fe cc bd 9a 86 18 f5 a0 c9 ff 4c 47 8f 90 49 de ..........LG..I. 01e0 7a 13 08 95 6c 8f fb 09 ac 25 60 11 00 26 b1 3d z...l....%`..&.= 01f0 32 21 a0 23 d6 45 ed 3d a3 b5 d9 dd 49 a5 7a 75 2!.#.E.=....I.zu 0200 11 b4 2d fd 3a 02 41 b6 d9 e7 36 20 76 36 f1 b2 ..-.:.A...6 v6.. 0210 7c bc 4c 7e 4d 38 86 0e 65 77 1d 79 c8 95 70 78 |.L~M8..ew.y..px 0220 94 55 15 de 4c b0 ae 9e 6c b2 9f e9 b4 8f 2e 1b .U..L...l....... 0230 07 2f d1 b3 bd b9 71 46 42 94 67 29 60 1b bb 3e ./....qFB.g)`..> 0240 9d 69 c9 45 f4 35 ce 8f c8 be f0 9d ee 07 6b c9 .i.E.5........k. 0250 24 94 fc 13 9a c3 e6 62 d1 d5 34 61 54 fb bf 9a $......b..4aT... 0260 09 85 9f 9b bc 91 6f 8a 5c da 48 e7 a0 3d e4 0a ......o.\.H..=.. 0270 cd 11 4d 2f a9 08 44 3d 53 4e 83 20 85 94 f2 2c ..M/..D=SN. ..., 0280 2a f0 38 e9 76 ce 21 90 02 12 df 7a 23 e5 0e 60 *.8.v.!....z#..` 0290 c2 17 28 3f cc 22 29 c7 22 11 df 5b 49 8e 98 55 ..(?.")."..[I..U 02a0 a1 88 d9 42 e7 66 43 5f 99 35 af f2 9f ff c1 7e ...B.fC_.5.....~ 02b0 71 ab 99 fc 3f e9 23 8c 8c ef 7a 42 01 fb 91 70 q...?.#...zB...p 02c0 77 08 95 3c fb a4 2a af 66 f4 e4 4f ff 77 bc 3f w..<..*.f..O.w.? 02d0 18 a4 bf 17 83 a4 29 56 bd b5 fd 27 3c dc 6e 7c ......)V...'<.n| 02e0 3b 63 69 3c cd 51 bb f2 92 0e c7 15 5f ab f7 d0 ;ci<.Q......_... 02f0 2e 6a a4 6d 41 49 e2 72 d1 41 26 4f d0 c5 a7 bf .j.mAI.r.A&O.... 0300 80 47 eb cc bb 94 d9 9d 0b 77 d5 08 ac e4 ed 3c .G.......w.....< 0310 96 30 2e ab 63 f7 92 fe 10 88 48 cb df e7 25 03 .0..c.....H...%. 0320 6d e2 52 cb 0e 30 77 ac 17 1a 75 0e 81 df d4 6c m.R..0w...u....l 0330 d2 f0 9c c4 74 86 e8 49 d4 7b 51 97 29 21 af c1 ....t..I.{Q.)!.. 0340 f3 2c f5 33 43 d7 14 72 09 ac 8a 90 2f c0 75 ce .,.3C..r..../.u. 0350 e8 64 f0 f9 ef 49 77 65 32 fa af d8 aa f6 b1 70 .d...Iwe2......p 0360 3f bc cb 24 6e 7b 79 77 aa 5c d4 a9 01 28 08 ab ?..$n{yw.\...(.. 0370 52 48 1b b1 90 c2 74 ab 37 ea 8f df 1b 9d c1 1f RH....t.7....... 0380 27 17 12 e3 d2 97 8e 11 e9 20 82 c0 5a f0 15 ab '........ ..Z... 0390 bd 5c e6 57 b2 7d b8 96 4d d6 f4 cc cf a0 70 12 .\.W.}..M.....p. 03a0 f4 8c 44 92 e1 72 a7 c8 14 be ec cc 30 d5 f4 ce ..D..r......0... 03b0 c2 70 3c f4 bb 51 d6 08 ea fd f6 ca 9e 52 93 1b .p<..Q.......R.. 03c0 aa 2d cb 6c 29 b2 35 f5 77 b7 ad 34 c1 f8 25 7c .-.l).5.w..4..%| 03d0 4e 67 eb 71 94 4e ef 69 3f 0d 3d 72 1a 3b 82 f6 Ng.q.N.i?.=r.;.. 03e0 e1 b1 d5 5e a0 15 3d d1 f3 7c 90 22 ab 9a 9b a5 ...^..=..|.".... 03f0 ac fe 4f 16 18 d4 8d 96 40 43 19 ec 00 6c ca 63 [email protected] 0400 ff 93 3d 24 59 3c f5 5e e2 51 1c 16 66 48 78 44 ..=$Y<.^.Q..fHxD 0410 d5 d2 e7 3b d5 23 3c a3 76 68 9b f3 89 29 5b 34 ...;.#<.vh...)[4 0420 0c 77 b5 58 6b 01 db 20 7e a6 67 22 6e e1 d3 3e .w.Xk.. ~.g"n..> 0430 71 7f ec a7 9f d4 33 4a ad c8 97 ea 14 ee 86 32 q.....3J.......2 0440 47 fc 4e be 73 77 7e 8e 95 56 d9 5c 8f c0 bf fd G.N.sw~..V.\.... 0450 03 10 3b 18 f8 7b a8 99 55 7a 1f 53 90 11 42 da ..;..{..Uz.S..B. 0460 fa 69 17 3f 4f a6 10 1c 1d bc 7a d8 e0 df 5d 26 .i.?O.....z...]& 0470 94 01 49 6e 5f 2f ce 35 1c 8b 14 7b 6e 88 c4 fa ..In_/.5...{n... 0480 97 d5 58 ce 31 48 2e 97 68 08 9e 7e 77 54 21 ef ..X.1H..h..~wT!. 0490 e5 26 66 1f 35 07 f3 4d 70 15 46 04 03 d3 4f 82 .&f.5..Mp.F...O. 04a0 95 0e 3f bb 6f b3 9b 33 69 80 07 af 93 6a 50 89 ..?.o..3i....jP. 04b0 83 d8 02 ea b4 a3 53 d1 5f 3f b3 f3 8f 44 f1 78 ......S._?...D.x 04c0 a5 3b fb 29 8a 17 24 f2 9c 59 86 2e 32 e2 05 37 .;.)..$..Y..2..7 04d0 a9 dd 38 ed 1d ae fd 9a 03 5b bc 3e b0 09 54 2b ..8......[.>..T+ 04e0 ef 0b 0f 7f f2 0a 17 ff 37 e3 fe b5 13 60 1f d3 ........7....`.. 04f0 d5 aa 59 07 b1 ef c7 89 ce bb 6a 99 ed 6f ac d6 ..Y.......j..o.. 0500 3f 57 7d 1b 30 28 08 5f 3c 5d b6 e6 dc 71 01 5e ?W}.0(._<]...q.^ 0510 09 bf d4 0e f2 86 a1 e8 67 59 78 98 fd e7 ff 06 ........gYx..... 0520 04 4e 09 61 26 63 9f 01 fa 06 68 bb 26 f6 f7 78 .N.a&c....h.&..x 0530 45 be 99 54 58 ab 5d 71 ec de f8 05 7f 7a d9 72 E..TX.]q.....z.r 0540 81 90 98 59 8a 18 03 e6 bc 0e 80 bf 15 01 7f 4c ...Y...........L 0550 0b 39 60 06 1e 0a 3d e1 5e 9a 91 7d 8f 9f 8e 6d .9`...=.^..}...m 0560 3c 19 e4 34 55 02 62 78 26 af 1a ca 66 c7 72 1e <..4U.bx&...f.r. 0570 a8 02 24 d5 76 a3 76 c5 eb 09 f0 a3 09 10 08 42 ..$.v.v........B 0580 70 38 73 9e 92 ab 9e 5a b9 a2 5f fb 81 d6 82 dc p8s....Z.._..... 0590 57 81 eb 03 07 7c d0 5a 3c e2 b4 4a 63 93 65 2a W....|.Z<..Jc.e* 05a0 9b 4c b0 37 57 6d 9e c8 .L.7Wm.. No. Time Source Destination Protocol Length Info 22192 258.725795 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13653 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 22192: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13653 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 22193 258.725823 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=5921 Ack=297753 Win=65535 Len=0 TSval=730070 TSecr=599928 Frame 22193: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5921, Ack: 297753, Len: 0 No. Time Source Destination Protocol Length Info 22194 258.725867 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=297753 Ack=5921 Win=1002 Len=1448 TSval=599928 TSecr=730070 Frame 22194: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 297753, Ack: 5921, Len: 1448 Data (1448 bytes) 0000 b4 75 da 57 04 87 53 09 bb 16 53 92 42 c0 ec 11 .u.W..S...S.B... 0010 c4 83 e3 c7 f2 09 32 af 34 c1 df f9 94 6c d2 57 ......2.4....l.W 0020 59 d7 b3 b2 0c 12 1c 3c b8 3e dc b8 a5 b2 4e bf Y......<.>....N. 0030 48 0e 22 d4 de 53 24 10 93 39 85 6c da 37 be 27 H."..S$..9.l.7.' 0040 35 8d 60 16 f7 cb 7b b4 0e 0b 9d 49 90 50 a8 d5 5.`...{....I.P.. 0050 6b af 1c 59 37 d3 30 fe e1 4a 19 51 f4 9a cc f3 k..Y7.0..J.Q.... 0060 ba 12 f8 5d 5a 0e 6b 2f 98 ac 77 ce 53 ef 7f 3f ...]Z.k/..w.S..? 0070 b5 a5 fd e6 16 a7 c3 67 04 e5 c3 a5 c9 2b da ad .......g.....+.. 0080 f8 f1 04 af 21 63 f8 04 a3 d3 69 53 9a 60 93 31 ....!c....iS.`.1 0090 df b3 85 17 e0 39 8e 38 57 4a c1 07 83 0c 7b 3a .....9.8WJ....{: 00a0 0d 16 7a d6 8e 3e ce b6 76 8c 81 01 05 87 aa 2a ..z..>..v......* 00b0 1d d0 59 1a 44 b8 5d 10 98 c9 de 7d 63 7c d8 ca ..Y.D.]....}c|.. 00c0 79 49 04 9e e9 73 28 54 0e c8 db 3c ef 1d ca f2 yI...s(T...<.... 00d0 68 5a fa 2d fc c5 79 36 91 f9 06 c7 33 6d a5 e2 hZ.-..y6....3m.. 00e0 7e 27 95 9e ef de bf 52 36 8c 05 33 c1 5f ad 15 ~'.....R6..3._.. 00f0 5c 13 81 5f 6c 1a ba 94 51 d4 70 92 45 8e e2 46 \.._l...Q.p.E..F 0100 e4 51 9e 7d 29 fe a0 2f 7a 2a 02 41 b8 79 40 92 .Q.})../z*.A.y@. 0110 40 db 3a f4 6b 4d 80 87 82 9c eb fc c9 70 c7 eb @.:.kM.......p.. 0120 80 df 0b 03 c8 07 09 12 93 63 7a cc 5a 09 f4 33 .........cz.Z..3 0130 66 3e 4f 9a 10 c0 0d fa 78 c8 6e b3 9f 8b 0e e1 f>O.....x.n..... 0140 3d 5f f9 89 4f b2 91 70 b0 13 a5 c7 a1 c7 ce 5a =_..O..p.......Z 0150 aa fd e7 69 87 44 9c d1 6b e7 b2 45 29 eb 91 4e ...i.D..k..E)..N 0160 4e 62 6a ab c3 35 51 85 8a e2 7b 39 2c bd cb 39 Nbj..5Q...{9,..9 0170 56 f9 de 9d 72 58 20 cf e0 50 be 81 43 ec 76 c8 V...rX ..P..C.v. 0180 cf 77 73 9f 92 a3 86 1b e5 84 4c 48 3e 37 dd 0b .ws.......LH>7.. 0190 57 26 50 72 f1 32 2c 93 7f 3a 48 34 0d 49 ce 59 W&Pr.2,..:H4.I.Y 01a0 18 cf 26 1d bc f8 cc 6b e2 30 21 e7 8a dd 60 7f ..&....k.0!...`. 01b0 95 b9 57 a0 91 f5 f4 ce ce 95 03 10 84 ea 28 1e ..W...........(. 01c0 dc 18 a7 29 cc 21 1f 62 1e 87 f3 1a eb c0 43 58 ...).!.b......CX 01d0 42 d9 58 9e c3 10 c0 40 c3 af d6 0e 56 cb 61 02 [email protected]. 01e0 63 ab bb 10 51 11 20 a8 0a ae e8 83 04 84 17 55 c...Q. ........U 01f0 ee 1d f2 cb b5 11 c7 7e 95 4b 5a bb 03 87 9f b4 .......~.KZ..... 0200 6f d8 c7 d9 90 0e dd 6f bf 28 6b 2f e1 58 c3 ae o......o.(k/.X.. 0210 91 a3 ac 95 27 d6 52 0d d5 f2 42 ec 54 18 e3 fc ....'.R...B.T... 0220 99 1e 90 20 1e c4 a9 ad 6b 3d 43 52 a3 44 f2 33 ... ....k=CR.D.3 0230 a4 ea b8 b6 2e e7 a5 10 22 5c c1 3f ad 26 a5 b0 ........"\.?.&.. 0240 8c ee ca e2 55 75 da b7 2e 3a 8f 48 b3 09 80 5c ....Uu...:.H...\ 0250 6c 62 a9 56 bb 86 ce f4 dc b0 c8 a3 66 d5 6d 59 lb.V........f.mY 0260 bd 10 31 fd 95 6f 86 6d 8a 06 a1 03 73 c0 9a 4f ..1..o.m....s..O 0270 3f b8 af 23 cb f6 04 f5 b9 a0 b1 48 c7 4b c4 dd ?..#.......H.K.. 0280 c4 8d 44 16 28 ec 1b 73 79 75 d7 19 e2 cc df d5 ..D.(..syu...... 0290 fc 58 af 76 35 a9 2f af 43 99 db 48 43 05 c4 81 .X.v5./.C..HC... 02a0 81 83 65 e2 5f 2d 83 4e ae 6c 82 14 61 f5 3c 1a ..e._-.N.l..a.<. 02b0 96 b1 a0 49 ed e1 0c 35 b9 ac 8f 63 c1 09 1b f0 ...I...5...c.... 02c0 d3 e1 1c de e9 fc fc 40 f7 be 3d 7e 2b 7a 44 22 .......@..=~+zD" 02d0 e2 68 ec f2 17 17 de 5b 5a 0c 1f 8b 93 85 a9 5f .h.....[Z......_ 02e0 de b2 be 56 5e 8a 02 e5 b8 38 7c 61 67 93 e1 c0 ...V^....8|ag... 02f0 e4 f2 a8 89 89 2f f2 12 1f fc 8a 06 db 9e 23 53 ...../........#S 0300 22 22 13 ab 15 b9 da 31 12 d9 ea f6 22 8b e7 01 "".....1...."... 0310 07 b0 8b b0 c2 7c f2 2a 8c d8 62 04 02 c9 b0 bf .....|.*..b..... 0320 f7 a3 c6 86 4d 20 36 63 d6 1d c6 d8 2e 70 1b ed ....M 6c.....p.. 0330 cd 67 ce 34 8d 77 8f f8 b4 4b 7c 47 47 b5 96 17 .g.4.w...K|GG... 0340 f5 a1 40 6c 0a d8 44 1c a9 cc d0 03 8a 70 f1 94 [email protected].. 0350 a9 0c 04 15 17 cf 82 80 28 b2 e8 37 c4 b3 da b5 ........(..7.... 0360 8a dc 24 bb 66 1b dd 8b 19 01 b2 ad 82 17 a4 92 ..$.f........... 0370 7d 56 9f 40 3d 7c f8 5b 9b 47 cd 48 dc f7 a6 34 }V.@=|.[.G.H...4 0380 f6 dc d3 52 4f 16 eb b5 60 41 1a 99 0f ce 33 54 ...RO...`A....3T 0390 f7 7f 22 f2 6c 14 a4 59 bc 5a 58 b7 df 01 e7 02 ..".l..Y.ZX..... 03a0 23 1d 98 a1 1c 77 b6 b5 69 f5 46 89 bf f1 a6 2a #....w..i.F....* 03b0 62 a1 82 5f 55 b9 fd dc 4b 89 ea 92 ac 05 a4 46 b.._U...K......F 03c0 21 df 22 b4 25 63 4c 41 ee 2c ed 55 78 2a c2 ea !.".%cLA.,.Ux*.. 03d0 80 de 92 62 43 98 ba 60 48 eb 27 76 46 c2 dd f9 ...bC..`H.'vF... 03e0 d7 e1 af 01 a9 27 a2 86 db 89 7f e0 0d 21 9a 03 .....'.......!.. 03f0 fd d2 46 5b d1 a5 26 8a 4f a8 ae de 81 ad 47 07 ..F[..&.O.....G. 0400 92 eb a7 76 66 23 78 e9 f9 bb 72 84 67 62 1d 43 ...vf#x...r.gb.C 0410 fb 02 be 29 0a b1 bf a8 96 a8 fa a3 df a1 84 ec ...)............ 0420 37 a4 b7 1a b4 8d 6b 7d 12 36 39 01 2a 33 d1 b9 7.....k}.69.*3.. 0430 fe 4d 0d 76 a2 79 e9 75 4f bf 50 96 d2 e4 11 fd .M.v.y.uO.P..... 0440 61 db ce 9b 0b 6b 5d 8e e7 00 56 2b be cb d4 81 a....k]...V+.... 0450 86 d2 39 a1 25 42 b6 02 05 f4 54 53 43 d6 99 da ..9.%B....TSC... 0460 02 f3 24 0f 17 0b f6 4b 77 3d bd 43 90 b1 4a 66 ..$....Kw=.C..Jf 0470 b6 d5 97 da 7e 39 a0 9f ee cd 18 93 67 49 59 9d ....~9......gIY. 0480 5b b3 f1 c7 68 1d 5c 78 d2 a5 23 c1 98 71 dc 53 [...h.\x..#..q.S 0490 5e 25 f9 2b 89 9b 37 0a d6 71 c1 16 2c a9 cc 33 ^%.+..7..q..,..3 04a0 15 7a 4e c4 60 af 64 cf ad 6d cc 4a 33 00 74 98 .zN.`.d..m.J3.t. 04b0 8f bb 46 6a af 8e dc e1 4b e3 8f b1 0f 74 14 c5 ..Fj....K....t.. 04c0 dd cb 2f b4 f8 39 ea 72 7e d2 3f a1 e7 b9 84 b2 ../..9.r~.?..... 04d0 8f 91 2f 43 e7 40 dc 9a 98 6a c4 25 ad 1b 89 12 ../[email protected].%.... 04e0 e4 6e 1e 11 e9 a0 1f 6a 27 7b 2d d7 ca a6 67 44 .n.....j'{-...gD 04f0 56 82 94 23 51 a1 5d 2c e0 d5 9f 15 98 42 a8 f8 V..#Q.],.....B.. 0500 96 b8 5d 5f 25 08 a4 3f e6 10 a9 28 13 8b 40 f0 ..]_%..?...(..@. 0510 47 88 10 e4 b4 36 55 59 0c ca 73 cd 6c 29 c0 03 G....6UY..s.l).. 0520 fa 62 40 6a f8 4b b7 0a 06 f0 a0 3d 0e c4 a6 1f [email protected].....=.... 0530 7f 1d 33 b0 b8 2c 57 4d bc 2f 8b 58 b0 7e 79 3b ..3..,WM./.X.~y; 0540 6a 05 98 66 c1 1f 16 2f 0a 67 14 de 4f 89 84 74 j..f.../.g..O..t 0550 7d 57 a6 b6 db 0e bb 06 eb 30 1e 86 8a 05 4f 28 }W.......0....O( 0560 ce 57 d8 19 3f ab c9 cb ce b4 a8 db 18 a5 88 0f .W..?........... 0570 85 7b e8 31 21 69 be b0 1f 0e 0b ec c8 30 2c c2 .{.1!i.......0,. 0580 a1 96 ad 1d 2d e5 2b 67 d0 72 e8 09 a4 d2 be 06 ....-.+g.r...... 0590 62 07 77 72 08 3c 12 20 92 93 d1 13 91 85 5f 98 b.wr.<. ......_. 05a0 d1 be 16 4e fe dd af b1 ...N.... No. Time Source Destination Protocol Length Info 22195 258.725912 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=299201 Ack=5921 Win=1002 Len=1448 TSval=599928 TSecr=730070 Frame 22195: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 299201, Ack: 5921, Len: 1448 Data (1448 bytes) 0000 a4 77 e8 05 d4 b8 55 82 64 ea 72 a0 70 d7 0e 54 .w....U.d.r.p..T 0010 4f 5b b5 89 dc 03 0f fa 95 e0 73 b5 d3 63 28 b3 O[........s..c(. 0020 e8 3a b5 75 f1 f8 b2 00 ed 61 73 e6 ef c1 9a 9f .:.u.....as..... 0030 50 0b 0f 29 8f 1f bb 8e 7f 91 bf 00 48 95 a2 46 P..)........H..F 0040 f9 44 94 a6 01 90 cd fa 8f d4 c2 e3 1d c1 ef 89 .D.............. 0050 d6 af 3c 26 f1 a9 7e 5b 38 0a 13 b1 85 c3 6b 49 ..<&..~[8.....kI 0060 99 77 46 e3 f9 ed 74 6b 67 1f 1c 77 a8 f6 52 4e .wF...tkg..w..RN 0070 c8 ea c4 59 bf c5 a6 e0 67 98 a0 b6 1f 64 63 8b ...Y....g....dc. 0080 97 0c a4 ab 08 3f 4c c4 cf 39 71 c1 ab 56 ad 98 .....?L..9q..V.. 0090 41 21 20 5c b7 c6 1f e6 5d cc 58 ac d5 37 a5 5a A! \....].X..7.Z 00a0 f0 68 89 08 3a 52 8a 55 7c a3 01 85 45 46 9c a3 .h..:R.U|...EF.. 00b0 d1 32 ff 74 04 57 17 9d 4a b6 0d d4 36 15 e0 3c .2.t.W..J...6..< 00c0 f6 36 7f 26 31 52 9f 13 a7 34 7c 93 75 45 36 37 .6.&1R...4|.uE67 00d0 f6 48 85 80 3b bc c6 ac 1d 0a 3d d2 b8 15 7d 1b .H..;.....=...}. 00e0 e5 f2 03 c4 b2 88 59 b6 2d e7 92 dd 4b 4d 0e 08 ......Y.-...KM.. 00f0 de fc f8 a5 7f 68 ec 64 51 44 1e 22 7c 89 5c 3d .....h.dQD."|.\= 0100 5f c3 0f 3a 96 da 8a 7f 14 30 70 89 41 25 a9 d1 _..:.....0p.A%.. 0110 ac da cc 10 7b d2 21 07 31 89 89 db cd 27 b3 00 ....{.!.1....'.. 0120 8b 55 09 ee de 9b e6 1c 6f 6f 3b 0b f7 03 55 4d .U......oo;...UM 0130 b5 d4 17 b5 10 01 06 17 b0 47 8d 6a 6d 30 34 d4 .........G.jm04. 0140 97 8c 5a be 97 75 1f 61 e8 b3 39 39 58 89 a1 83 ..Z..u.a..99X... 0150 9e d0 90 69 c8 6d 59 43 19 4e 60 2b 56 f7 3b ac ...i.mYC.N`+V.;. 0160 89 ad e2 47 57 47 2a 50 48 be d5 2c 4c 0d f2 29 ...GWG*PH..,L..) 0170 d2 82 2b 1c 87 a2 63 90 ef d5 55 47 b8 0a 40 1b ..+...c...UG..@. 0180 1d cc 6a af 89 ca 37 4d 48 0a 04 b4 5c 21 33 68 ..j...7MH...\!3h 0190 ca e1 72 4b 1a 7d 04 0b 55 db 9f 87 d9 ac 6e 5d ..rK.}..U.....n] 01a0 85 69 b7 df 30 cd 9f 63 4b 7f 03 e4 75 d3 e6 a7 .i..0..cK...u... 01b0 6d 3e e2 8e ea 64 a5 f8 c8 67 bf db ae 96 1b 3c m>...d...g.....< 01c0 aa e9 cd 35 ac 70 86 d9 d9 c4 ba 96 84 ef 92 80 ...5.p.......... 01d0 ac af ff 02 a6 96 67 40 78 4b 88 c2 ac 05 b9 10 ......g@xK...... 01e0 be 24 70 f3 20 2b 32 b7 7b 81 8b 48 0b c9 1c b0 .$p. +2.{..H.... 01f0 35 6b 2c d9 7e fd ac 67 09 ef 92 3c 7c 01 6a 5c 5k,.~..g...<|.j\ 0200 a8 2c a0 b2 b1 cf 62 7a c0 26 50 e9 20 35 a2 36 .,....bz.&P. 5.6 0210 c9 9e 16 b1 0d d3 a8 d8 97 36 11 c2 58 c5 43 0c .........6..X.C. 0220 7f 0d 39 c5 9a 78 d3 02 7c fd 2a 2a 39 a2 c3 70 ..9..x..|.**9..p 0230 52 1a 6e 45 b4 d1 77 cf 7c a0 2a 56 70 07 72 c6 R.nE..w.|.*Vp.r. 0240 a7 6b d1 5c 78 bb b5 28 0e 7e 8b 36 6b dc 0d 4c .k.\x..(.~.6k..L 0250 d1 9a 90 1b fb 3f b6 73 d3 77 2e e1 01 c5 b5 2b .....?.s.w.....+ 0260 af 6c e2 c6 a3 d9 52 0d b7 25 67 b4 2d fa 36 0a .l....R..%g.-.6. 0270 75 15 49 7d 86 67 64 e4 3d cf aa a5 b0 08 d3 23 u.I}.gd.=......# 0280 06 cf bd 6c f2 f7 bc 12 d7 e4 db 36 4c 13 62 c8 ...l.......6L.b. 0290 29 e3 de fc af e7 a4 03 31 05 a6 eb 5f 7c 08 13 ).......1..._|.. 02a0 b7 9f 7f 21 4f 98 48 f5 90 da 19 00 34 43 ef 04 ...!O.H.....4C.. 02b0 07 68 8e 01 cb 8f 77 c4 61 db 63 13 1f a6 a1 9a .h....w.a.c..... 02c0 17 47 08 63 14 92 6e b8 c5 86 d9 61 ad 89 dc 66 .G.c..n....a...f 02d0 1b 66 b2 5e aa 11 b8 f5 07 96 cd 9a bc ec 19 7a .f.^...........z 02e0 a9 e5 d2 4e 2d 00 ce ac fd 8f 29 07 5a 53 f2 c8 ...N-.....).ZS.. 02f0 fd 38 93 48 4e 02 ae c9 8e 07 84 00 31 61 81 f8 .8.HN.......1a.. 0300 47 ed 94 cc 06 e2 d2 be a8 6c 19 6f 59 92 14 b6 G........l.oY... 0310 cb 26 e1 f4 e2 0a 53 b9 fb 38 c5 01 16 44 05 a3 .&....S..8...D.. 0320 4b cb 55 e4 7d 0b b1 2c 93 95 48 85 96 49 81 a0 K.U.}..,..H..I.. 0330 09 56 c7 33 70 b1 bd 2a bd 9c 8a 7d a2 fb 11 81 .V.3p..*...}.... 0340 08 20 14 8d 32 2f 34 92 08 2d e5 7e 0a 68 c2 56 . ..2/4..-.~.h.V 0350 c8 c5 ae ff b4 4c a9 e4 0f f8 2f f9 2d e3 1e 3c .....L..../.-..< 0360 12 7a fb 4d d7 12 05 67 c0 83 ef 7b 4d cf 2a 12 .z.M...g...{M.*. 0370 f6 c6 87 f7 6e 71 58 1e 4b 22 89 37 29 79 ae fb ....nqX.K".7)y.. 0380 f2 bb 7f 25 09 2f f3 44 7c 54 1d 2e 3e de 8c be ...%./.D|T..>... 0390 6f 5c ae b9 b1 7f 64 7e 07 fc 80 16 8d f2 9d bf o\....d~........ 03a0 59 61 9e fb bb 6d 27 cb 34 1b 3f 60 92 20 39 96 Ya...m'.4.?`. 9. 03b0 a7 6f 0f 53 d4 bb 07 e7 0e 34 7e 7f 2e 36 0b 50 .o.S.....4~..6.P 03c0 de 07 ce b5 5b 10 eb 95 84 c4 f5 2b a4 86 2f 5b ....[......+../[ 03d0 50 e6 c0 64 1e 9a 88 32 6d 34 5b 78 4f a0 23 39 P..d...2m4[xO.#9 03e0 25 b5 9a 9a f4 92 1a 0e 94 53 53 9e 65 75 a9 52 %........SS.eu.R 03f0 f0 4f b0 82 e7 bd 57 d7 d6 79 ab e7 90 1d da 67 .O....W..y.....g 0400 5e e6 a0 b9 b4 b6 f9 f4 2e 6c 47 fd bb 5a 9c 46 ^........lG..Z.F 0410 16 c9 42 0a 95 9a f8 63 3e 6c 67 ad 00 a5 e5 4d ..B....c>lg....M 0420 9b 5e 43 15 07 0f 12 14 b1 49 7d 33 9a 4d 9a 34 .^C......I}3.M.4 0430 c1 d2 99 9c 7f d9 2b 64 ad 84 b3 4b 9b 22 27 62 ......+d...K."'b 0440 f3 c6 af 2f c4 55 3c da c7 2e a3 a7 12 25 bc 33 .../.U<......%.3 0450 9d 92 8e e0 2d 6a 45 46 2d 17 84 f0 22 9e 5b 6f ....-jEF-...".[o 0460 df c9 23 42 6f 61 9d 5f fb 82 c9 1c bb d4 47 b6 ..#Boa._......G. 0470 9e 9b 1e 8f d3 28 34 fb 4f 9e 9e 93 e8 a6 54 bf .....(4.O.....T. 0480 62 bb 47 b0 dd 4a 53 51 02 34 2e b9 95 09 e6 cb b.G..JSQ.4...... 0490 dc 3c c2 78 e4 4f 74 f7 ca 8c e4 ee ec aa 8d b6 .<.x.Ot......... 04a0 7e cc 19 3f 0d db 82 4e 1e 6a 39 90 e4 8a ef 14 ~..?...N.j9..... 04b0 0f a0 db 67 a2 3b f7 eb 26 c4 8e 15 52 a1 1c e8 ...g.;..&...R... 04c0 9f 67 a5 fa bc a6 48 19 72 0d 0c 88 47 6f 3b 4d .g....H.r...Go;M 04d0 f8 63 02 6b 96 64 61 8e 3d 23 47 b5 78 82 0f a7 .c.k.da.=#G.x... 04e0 c7 ae d2 c4 4f 67 59 ce 9d f8 7f 26 be d4 8a 6b ....OgY....&...k 04f0 73 b1 ee 56 05 1c e2 eb 2b 1b 37 e3 3e 41 e6 00 s..V....+.7.>A.. 0500 43 22 fc f9 3b b5 5a 17 9c 6d bb 75 58 cd 46 57 C"..;.Z..m.uX.FW 0510 f7 c1 4f 10 3f 31 d6 18 80 82 ce e6 cf f5 48 7e ..O.?1........H~ 0520 5d b6 34 cf fb 64 0d 7f f0 83 ab b5 b6 02 db 72 ].4..d.........r 0530 15 41 88 9f 67 fd e8 81 71 99 3d 7c ed d1 76 bd .A..g...q.=|..v. 0540 54 b4 ad c5 84 9e ae e2 fc e3 71 6e 13 0f 24 f2 T.........qn..$. 0550 da b7 0f 64 1c 7f 38 b4 41 c5 a3 0d 94 a5 f3 57 ...d..8.A......W 0560 b5 d3 f6 5a c9 ee c3 b8 09 44 e7 80 f9 04 22 4c ...Z.....D...."L 0570 77 a1 c0 16 36 c9 4f 41 8a 47 f4 ba 29 6e 1c 9d w...6.OA.G..)n.. 0580 0e 98 48 a6 57 c9 fc f5 41 31 1c ce e7 f7 51 11 ..H.W...A1....Q. 0590 7a ef d4 de 38 9d 0a 68 de 60 54 f1 5f 48 7c 8e z...8..h.`T._H|. 05a0 d6 cb 69 4d 61 29 b2 5d ..iMa).] No. Time Source Destination Protocol Length Info 22196 258.725961 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=300649 Ack=5921 Win=1002 Len=1448 TSval=599928 TSecr=730070 Frame 22196: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 300649, Ack: 5921, Len: 1448 Data (1448 bytes) 0000 13 45 f0 ab 96 84 02 a3 45 51 af c3 1c 05 c2 24 .E......EQ.....$ 0010 10 0a 4e 94 d7 01 bc 2b f5 09 ab 8c d3 84 86 ab ..N....+........ 0020 7a 9d 6a fe 98 51 91 fb f0 b7 e8 4a d6 9e cc cb z.j..Q.....J.... 0030 19 1b 3b 09 9c 45 3d b2 0a ce 77 e1 1d d6 7d 86 ..;..E=...w...}. 0040 70 9d af d9 56 2d a3 ba c8 ee 01 6f 5d cd c8 f4 p...V-.....o]... 0050 4f 1b c6 42 0d b2 d3 6d f0 e1 4f 43 38 cf 76 9d O..B...m..OC8.v. 0060 53 f1 6a 14 a7 0b 51 28 57 81 8e 69 e5 24 5c 85 S.j...Q(W..i.$\. 0070 e2 eb 51 93 e5 fc 75 ec 79 6d 2a 20 7b 1a db 23 ..Q...u.ym* {..# 0080 e7 53 44 04 69 22 2b 39 f1 32 2c 49 5a 2b 98 a5 .SD.i"+9.2,IZ+.. 0090 3d 94 6d 22 d1 1a 82 4b fc 80 bd e8 0d 16 a7 34 =.m"...K.......4 00a0 03 14 50 18 40 d7 d8 99 2f f1 90 60 07 f2 18 3c ..P.@.../..`...< 00b0 6e 39 b1 d2 0b ca 28 14 bf 48 c4 79 d1 a6 ce b8 n9....(..H.y.... 00c0 40 1a 43 58 24 e5 98 27 f4 1e 55 cd 77 18 35 28 @.CX$..'..U.w.5( 00d0 cc cb 36 4a 77 fe 5c ee 74 5d 76 43 35 08 f1 a0 ..6Jw.\.t]vC5... 00e0 ae b3 a1 30 d4 f3 b5 ed de 10 d7 31 f3 c5 27 47 ...0.......1..'G 00f0 8b 10 42 c9 b7 94 17 c8 bf 10 e5 f1 ff 95 72 a8 ..B...........r. 0100 17 dc c1 21 77 f9 da 74 c8 53 64 4c 21 4f 97 85 ...!w..t.SdL!O.. 0110 0c cf 54 4b c3 8d 8a 72 cc a4 69 e9 31 2f a8 08 ..TK...r..i.1/.. 0120 fc 02 9c e6 41 a3 a1 ff bb aa d1 81 f2 2d f4 ca ....A........-.. 0130 7a 8f 1c 19 66 e0 12 bd b0 33 75 d1 9d d6 c7 c1 z...f....3u..... 0140 66 5a ad a7 5b 31 42 32 0f 5f 4a 3d 29 0c f5 db fZ..[1B2._J=)... 0150 db 55 a4 15 9a 44 0b 23 bc 82 d3 c4 58 43 18 c1 .U...D.#....XC.. 0160 64 01 6c 82 2d 89 22 73 fe 2d 9d 81 9b a4 f0 d9 d.l.-."s.-...... 0170 6b 5f 08 1e e1 b7 54 09 4b 48 ba ce d3 82 83 d8 k_....T.KH...... 0180 7a 18 ad a3 4b 22 9c 4d 56 da 54 80 14 47 c1 8c z...K".MV.T..G.. 0190 6b 20 cd b3 a5 d7 9f b9 2e 23 41 34 ad 97 42 29 k .......#A4..B) 01a0 d6 32 b7 8b c0 ac 3d 7b c9 e7 f2 b1 17 31 c0 35 .2....={.....1.5 01b0 16 1c a2 ef 59 ba 3c e5 6a 47 9f c8 dc e1 44 6c ....Y.<.jG....Dl 01c0 91 a0 47 aa 0a 43 45 fd 52 0f d1 6a 2d d1 25 7a ..G..CE.R..j-.%z 01d0 71 17 fe 1b a6 4a be e9 d6 08 c6 dc ab 09 f8 74 q....J.........t 01e0 df 93 44 87 78 35 d8 b6 0d db 23 e2 50 68 59 e0 ..D.x5....#.PhY. 01f0 39 49 6e 05 99 fc 77 00 f0 4e 02 38 84 e0 c3 34 9In...w..N.8...4 0200 83 8b 1c 4d 0c dc 34 a1 78 0f e1 db 5d ab 1c c8 ...M..4.x...]... 0210 22 39 05 74 b7 12 e2 1b d9 3a 8c 57 01 2d fb 2d "9.t.....:.W.-.- 0220 9d b4 8d d9 a4 29 43 ed 96 71 b6 d4 ee 7b 85 db .....)C..q...{.. 0230 a1 97 59 80 c7 ba 03 5b 61 9d 1f 11 4b 64 a5 fe ..Y....[a...Kd.. 0240 91 9c b5 57 fe 1a ff 2d 38 d9 f1 a0 53 f6 dd 85 ...W...-8...S... 0250 d4 76 0a e7 de 45 b4 9b 0a f7 af 19 0a 5e b4 50 .v...E.......^.P 0260 47 c6 43 17 a2 cf 4b 7c f4 02 5e 66 c8 55 e9 07 G.C...K|..^f.U.. 0270 b4 e1 3c 5a 7c 26 32 fb 2f af 91 30 bf 73 3d a2 ..<Z|&2./..0.s=. 0280 8a 7f ab 87 7f 8b 7f 79 c0 e5 55 22 9a 95 5f a9 .......y..U".._. 0290 e7 bd 89 f0 84 5c 5c c7 62 8e 8d c0 5a 9a 6b 0d .....\\.b...Z.k. 02a0 0f 2b 6b 3d 58 ae e3 86 63 2f 5b 65 17 57 fb ea .+k=X...c/[e.W.. 02b0 3b 47 c7 f1 b0 2d 22 d0 ab 2f 63 4c 0c 2b fd b6 ;G...-"../cL.+.. 02c0 ad 7d f7 33 e3 a2 22 b8 4b b1 20 78 78 cd 75 2d .}.3..".K. xx.u- 02d0 40 94 d6 2d 29 9e 2a 7a c2 35 32 92 28 73 69 71 @..-).*z.52.(siq 02e0 c9 f5 51 a7 ad a2 4a 84 f8 c3 48 23 57 9d c5 47 ..Q...J...H#W..G 02f0 76 4d 89 39 7f d8 18 69 e6 94 91 7c f1 50 ae 4c vM.9...i...|.P.L 0300 28 b8 37 4f 9e 4c 59 fa 1c c0 b3 b5 1e 52 ad e2 (.7O.LY......R.. 0310 27 77 68 59 9a d2 eb 89 73 84 e3 ff 6e bd 68 f8 'whY....s...n.h. 0320 7f 73 23 ab 12 d7 7e 8d 4b a4 0e 4a 60 df e5 2e .s#...~.K..J`... 0330 33 88 69 e2 7a 82 b8 a4 9c ee c9 2c e6 f4 57 e5 3.i.z......,..W. 0340 5c 1a 26 f0 a7 77 08 16 33 29 09 7c bf 77 b7 84 \.&..w..3).|.w.. 0350 22 a0 96 97 1c d9 ee 7b 15 66 08 f1 e7 aa 53 95 "......{.f....S. 0360 52 c0 90 ac a4 32 a2 57 5b ab 3f 39 12 5e 3a d2 R....2.W[.?9.^:. 0370 1e 0e 71 c1 a0 0a e2 d4 3c 3e 7c 98 34 22 2c a0 ..q.....<>|.4",. 0380 61 d3 da 2e 36 7e 54 4e 0b 31 c1 d5 c0 69 d7 9f a...6~TN.1...i.. 0390 c1 23 66 a8 fe 88 73 16 18 78 3a 1f bf 02 f0 57 .#f...s..x:....W 03a0 39 59 0b 4a 32 2b 88 6b f5 f2 81 9d 2e 9b 2a af 9Y.J2+.k......*. 03b0 4f d2 01 7e 39 38 d3 63 89 b3 7b ba 66 9d 64 38 O..~98.c..{.f.d8 03c0 25 4f 71 6b 1e 58 a0 e1 c3 bd 96 71 9f 96 e6 47 %Oqk.X.....q...G 03d0 91 8d 24 9b a0 82 bd 42 3e 97 4f 73 4e 52 95 d2 ..$....B>.OsNR.. 03e0 ef 52 30 b2 ed 02 d6 a0 84 8d a6 fc 43 36 fd 90 .R0.........C6.. 03f0 14 e6 58 96 65 50 0d f3 71 25 ad 46 1f 9e 58 ab ..X.eP..q%.F..X. 0400 84 e3 43 d2 9a 1f 39 34 b9 4a c0 63 2f f4 9e 89 ..C...94.J.c/... 0410 a0 64 11 0e d4 2d a0 54 bb 82 97 01 63 7f 77 59 .d...-.T....c.wY 0420 49 81 73 86 2c 0c d8 23 7c d4 64 75 93 90 e6 9b I.s.,..#|.du.... 0430 ee 46 49 d2 35 13 84 db 6d 0d 6a fb bf 93 1d b7 .FI.5...m.j..... 0440 29 f0 39 0d a0 ba 21 56 50 34 df a2 59 cf 1c b6 ).9...!VP4..Y... 0450 d1 86 3a 27 6c cd 9c 98 8e 4a 3b 9e fd 5e 6d 1d ..:'l....J;..^m. 0460 f8 da 3a 0b bf ec c5 ba 8f ff 83 cb bf 3d ed 3c ..:..........=.< 0470 71 8b 9b 06 8a 89 c0 66 ab 0f b8 fa 52 3f 56 15 q......f....R?V. 0480 e8 cb 7e d2 0b ea 56 8c a7 af cc 5e 10 f9 3e a5 ..~...V....^..>. 0490 29 d2 9b a0 e4 6a 00 08 41 a1 c1 f6 bc a4 f4 ab )....j..A....... 04a0 13 5e 7e 72 50 a3 2f 93 24 92 8c 41 ae fe 94 88 .^~rP./.$..A.... 04b0 1a c8 d3 3e a1 4c 42 fc e9 23 f5 5f 6d 70 1b 5a ...>.LB..#._mp.Z 04c0 27 25 3b a4 92 de c6 2f 96 a6 86 24 4d e0 9d 82 '%;..../...$M... 04d0 de c8 37 0e d6 fd 96 d3 1d 1d ec e7 fb 86 48 c0 ..7...........H. 04e0 48 42 10 9c 4c 72 7b 0b b7 f8 e6 6e fe bf ea 90 HB..Lr{....n.... 04f0 2f a1 b9 bd 5e ce f6 34 d2 85 0d 7e f5 7a a8 2c /...^..4...~.z., 0500 db c0 17 79 67 02 34 01 4b 1a 1e ed 4c f3 47 72 ...yg.4.K...L.Gr 0510 43 04 90 3a f3 3f fa 8c 29 02 f0 be 5f c7 4d bb C..:.?..)..._.M. 0520 6d 39 c1 cf 0f f3 ef 7c 53 d1 76 35 1f 5e 73 1c m9.....|S.v5.^s. 0530 62 e8 3c da 2d bf 80 6d f8 f9 72 a3 db e2 d4 97 b.<.-..m..r..... 0540 1b 38 24 8c 25 69 33 7e 4d 4a b5 c2 21 a5 70 72 .8$.%i3~MJ..!.pr 0550 93 ba ce c4 c6 6b 09 20 8d 40 07 69 9b 2f 3b f0 .....k. [email protected]./;. 0560 01 52 5f 73 e1 fd d9 7c 71 45 8e f5 1b d4 aa df .R_s...|qE...... 0570 c8 22 f1 93 bd f7 dd 7b 76 f9 d6 00 21 75 20 f0 .".....{v...!u . 0580 5a 2c 2e d4 83 fa f2 b3 a5 c4 d8 0f 0c 9f a5 d5 Z,.............. 0590 ee 1d e1 16 a3 92 71 a2 f6 68 3c da 48 89 c2 ea ......q..h<.H... 05a0 a6 10 18 26 5c 36 ad 02 ...&\6.. No. Time Source Destination Protocol Length Info 22197 258.725991 192.168.10.1 192.168.10.203 TCP 247 34433 > cds [PSH, ACK] Seq=302097 Ack=5921 Win=1002 Len=181 TSval=599928 TSecr=730070 Frame 22197: 247 bytes on wire (1976 bits), 247 bytes captured (1976 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 302097, Ack: 5921, Len: 181 Data (181 bytes) 0000 4d 12 6d 4f 3d 84 86 20 5f 7a d0 6c 97 f1 a3 fd M.mO=.. _z.l.... 0010 42 b7 78 43 5a 68 6b 1a 8e a1 f2 c7 0e 18 56 9e B.xCZhk.......V. 0020 00 3f 1e 32 1f 32 38 77 ee 16 72 86 70 1e 2f 6c .?.2.28w..r.p./l 0030 2d 1a 37 b0 13 1d 5c d2 de a5 8c 34 77 5c 38 2c -.7...\....4w\8, 0040 30 a8 91 e2 a0 86 16 3a d8 0b e4 2c c3 d0 1e 27 0......:...,...' 0050 36 9c 52 9c 40 0c 67 b7 15 fa 9e 64 f1 6c ff 4b [email protected] 0060 14 53 6c c0 d6 7c 1e c3 cf 22 ae 84 02 cd a0 80 .Sl..|..."...... 0070 70 50 94 e2 78 d7 e0 c0 ce 52 87 29 7f 95 9a 92 pP..x....R.).... 0080 c0 a2 e6 1e b5 1d 5e 2f 7c b5 0e df 9b cc 5f 88 ......^/|....._. 0090 9d 57 d2 67 39 17 99 9b ed ef 6c a9 f1 c0 d1 ec .W.g9.....l..... 00a0 60 52 97 49 1f 77 51 1d 75 e0 18 07 6f 39 16 62 `R.I.wQ.u...o9.b 00b0 dc be af 29 ea ...). No. Time Source Destination Protocol Length Info 22198 258.726023 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=5921 Ack=300649 Win=65535 Len=0 TSval=730070 TSecr=599928 Frame 22198: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5921, Ack: 300649, Len: 0 No. Time Source Destination Protocol Length Info 22199 258.726051 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=5921 Ack=302278 Win=65535 Len=0 TSval=730070 TSecr=599928 Frame 22199: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5921, Ack: 302278, Len: 0 No. Time Source Destination Protocol Length Info 22200 258.726074 14.97.186.55 192.168.10.207 TCP 60 13653 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 22200: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13653 (13653), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 22201 258.730514 189.123.220.16 192.168.10.207 SMTP 60 C: QUIT Frame 22201: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49308 (49308), Dst Port: smtp (25), Seq: 72, Ack: 376, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22202 258.730582 192.168.10.207 189.123.220.16 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 22202: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49308 (49308), Seq: 376, Ack: 78, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22203 258.730606 189.123.220.16 192.168.10.207 TCP 60 49308 > smtp [ACK] Seq=78 Ack=445 Win=92996 Len=0 Frame 22203: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49308 (49308), Dst Port: smtp (25), Seq: 78, Ack: 445, Len: 0 No. Time Source Destination Protocol Length Info 22204 258.730625 192.168.10.207 189.123.220.16 TCP 60 smtp > 49308 [FIN, ACK] Seq=445 Ack=78 Win=65458 Len=0 Frame 22204: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49308 (49308), Seq: 445, Ack: 78, Len: 0 No. Time Source Destination Protocol Length Info 22205 258.730652 189.123.220.16 192.168.10.207 TCP 60 49308 > smtp [ACK] Seq=78 Ack=446 Win=92996 Len=0 Frame 22205: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49308 (49308), Dst Port: smtp (25), Seq: 78, Ack: 446, Len: 0 No. Time Source Destination Protocol Length Info 22206 258.738831 59.177.163.27 192.168.10.207 TCP 62 27664 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 22206: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 59.177.163.27 (59.177.163.27), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 27664 (27664), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 22207 258.738877 192.168.10.207 59.177.163.27 TCP 62 smtp > 27664 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 22207: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 59.177.163.27 (59.177.163.27) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 27664 (27664), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 22208 258.761893 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=5921 Ack=302278 Win=65535 Len=74 TSval=730070 TSecr=599928 Frame 22208: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5921, Ack: 302278, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 2a 01 1a 9b 05 07 b5 80 9e 24 63 .... *........$c 0010 6d 18 ad c9 6c ff c8 8b 4b da 61 81 a2 42 ee e5 m...l...K.a..B.. 0020 c2 31 29 d6 18 17 03 01 00 20 19 2d 20 12 ea 25 .1)...... .- ..% 0030 9d cc 5b 0a e3 4a 51 7a 72 59 5f 84 0b b2 43 a5 ..[..JQzrY_...C. 0040 3b 45 d4 bb 01 37 55 12 7f 21 ;E...7U..! No. Time Source Destination Protocol Length Info 22209 258.761931 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=302278 Ack=5995 Win=1002 Len=0 TSval=599937 TSecr=730070 Frame 22209: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 302278, Ack: 5995, Len: 0 No. Time Source Destination Protocol Length Info 22210 258.820581 192.168.10.203 151.59.106.108 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 22210: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 151.59.106.108 (151.59.106.108) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 22211 258.832424 188.161.220.86 192.168.10.207 SMTP 73 C: EHLO gtxrouyk.com Frame 22211: 73 bytes on wire (584 bits), 73 bytes captured (584 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45273 (45273), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 19 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22212 258.832650 192.168.10.207 188.161.220.86 SMTP 245 S: 250-mail.mydomain.com Hello [188.161.220.86] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 22212: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45273 (45273), Seq: 122, Ack: 20, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22213 258.832691 188.161.220.86 192.168.10.207 TCP 60 45273 > smtp [ACK] Seq=20 Ack=313 Win=93128 Len=0 Frame 22213: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45273 (45273), Dst Port: smtp (25), Seq: 20, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 22214 258.833013 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45273 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 22214: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45273 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 22215 258.833082 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45273 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 22215: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45273 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 22216 258.833255 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45273 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 22216: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45273 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 22217 258.833357 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45273 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 22217: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45273 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 22218 258.833524 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45273 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 22218: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45273 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 22219 258.833590 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45273 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 22219: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45273 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 22220 258.907092 189.123.220.16 192.168.10.207 TCP 62 49396 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 22220: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49396 (49396), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 22221 258.907139 192.168.10.207 189.123.220.16 TCP 62 smtp > 49396 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 22221: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49396 (49396), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 22222 258.907216 189.123.220.16 192.168.10.207 TCP 60 49308 > smtp [RST, ACK] Seq=78 Ack=446 Win=92996 Len=0 Frame 22222: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49308 (49308), Dst Port: smtp (25), Seq: 78, Ack: 446, Len: 0 No. Time Source Destination Protocol Length Info 22223 258.907370 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49308 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 22223: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:36 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49308 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 22224 258.969381 186.86.195.96 192.168.10.207 TCP 62 50660 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 22224: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 186.86.195.96 (186.86.195.96), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 50660 (50660), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 22225 258.969426 192.168.10.207 186.86.195.96 TCP 62 smtp > 50660 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 22225: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 186.86.195.96 (186.86.195.96) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 50660 (50660), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 22226 258.998150 206.225.164.188 192.168.10.207 TCP 60 [TCP Dup ACK 21839#2] 9428 > smtp [ACK] Seq=719486 Ack=10417 Win=46405 Len=0 Frame 22226: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 719486, Ack: 10417, Len: 0 No. Time Source Destination Protocol Length Info 22227 258.998181 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=10417 Ack=718216 Win=0 Len=0 Frame 22227: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 10417, Ack: 718216, Len: 0 No. Time Source Destination Protocol Length Info 22228 259.025120 186.86.195.96 192.168.10.207 TCP 62 50661 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 22228: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 186.86.195.96 (186.86.195.96), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 50661 (50661), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 22229 259.025294 192.168.10.207 186.86.195.96 TCP 62 smtp > 50661 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 22229: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 186.86.195.96 (186.86.195.96) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 50661 (50661), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 22230 259.083966 189.123.220.16 192.168.10.207 TCP 60 49396 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 22230: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49396 (49396), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 22231 259.084111 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49396 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 22231: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49396 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 22232 259.084162 192.168.10.207 189.123.220.16 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:48:11 -0400 Frame 22232: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49396 (49396), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22233 259.084193 189.123.220.16 192.168.10.207 TCP 60 49396 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 22233: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49396 (49396), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 22234 259.084923 186.86.195.96 192.168.10.207 TCP 60 50660 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 22234: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 186.86.195.96 (186.86.195.96), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 50660 (50660), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 22235 259.085119 192.168.10.1 192.168.10.245 Syslog 204 LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 186.86.195.96 7x.x.x.3 50660 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 22235: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 186.86.195.96 7x.x.x.3 50660 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 22236 259.085142 192.168.10.207 186.86.195.96 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:48:11 -0400 Frame 22236: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 186.86.195.96 (186.86.195.96) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 50660 (50660), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22237 259.085190 186.86.195.96 192.168.10.207 TCP 60 50660 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 22237: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 186.86.195.96 (186.86.195.96), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 50660 (50660), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 22238 259.177832 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 22238: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 22239 259.177862 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99 Frame 22239: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info 22240 259.193155 186.86.195.96 192.168.10.207 SMTP 76 C: HELO rbn-db1a9a90db3 Frame 22240: 76 bytes on wire (608 bits), 76 bytes captured (608 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 186.86.195.96 (186.86.195.96), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 50660 (50660), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 22 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22241 259.193183 192.168.10.207 186.86.195.96 SMTP 102 S: 250 mail.mydomain.com Hello [186.86.195.96] Frame 22241: 102 bytes on wire (816 bits), 102 bytes captured (816 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 186.86.195.96 (186.86.195.96) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 50660 (50660), Seq: 122, Ack: 23, Len: 48 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22242 259.193212 186.86.195.96 192.168.10.207 TCP 60 50660 > smtp [ACK] Seq=23 Ack=170 Win=93270 Len=0 Frame 22242: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 186.86.195.96 (186.86.195.96), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 50660 (50660), Dst Port: smtp (25), Seq: 23, Ack: 170, Len: 0 No. Time Source Destination Protocol Length Info 22243 259.194185 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 22243: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 22244 259.197785 188.161.220.86 192.168.10.207 SMTP 99 C: MAIL FROM: <victoria.nash@xxxxxxxxxxxxxxxx> Frame 22244: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45273 (45273), Dst Port: smtp (25), Seq: 20, Ack: 313, Len: 45 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22245 259.197979 192.168.10.207 188.161.220.86 SMTP 109 S: 250 2.1.0 [email protected] OK Frame 22245: 109 bytes on wire (872 bits), 109 bytes captured (872 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45273 (45273), Seq: 313, Ack: 65, Len: 55 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22246 259.198009 188.161.220.86 192.168.10.207 TCP 60 45273 > smtp [ACK] Seq=65 Ack=368 Win=93072 Len=0 Frame 22246: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45273 (45273), Dst Port: smtp (25), Seq: 65, Ack: 368, Len: 0 No. Time Source Destination Protocol Length Info 22247 259.200760 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=10417 Ack=718216 Win=17732 Len=0 Frame 22247: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 10417, Ack: 718216, Len: 0 No. Time Source Destination Protocol Length Info 22248 259.200797 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 22247#1] smtp > 9428 [ACK] Seq=10417 Ack=718216 Win=17732 Len=0 Frame 22248: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 10417, Ack: 718216, Len: 0 No. Time Source Destination Protocol Length Info 22249 259.200829 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22249: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 719486, Ack: 10417, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22250 259.200858 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22250: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 720866, Ack: 10417, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22251 259.200894 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22251: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 722246, Ack: 10417, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22252 259.200917 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22252: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 723626, Ack: 10417, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22253 259.200940 206.225.164.188 192.168.10.207 SMTP 1271 C: DATA fragment, 1217 bytes Frame 22253: 1271 bytes on wire (10168 bits), 1271 bytes captured (10168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 725006, Ack: 10417, Len: 1217 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22254 259.200965 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22254: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 726223, Ack: 10417, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22255 259.200987 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 22247#2] smtp > 9428 [ACK] Seq=10417 Ack=718216 Win=17732 Len=0 Frame 22255: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 10417, Ack: 718216, Len: 0 No. Time Source Destination Protocol Length Info 22256 259.201008 192.168.10.207 206.225.164.188 SMTP 306 S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets Frame 22256: 306 bytes on wire (2448 bits), 306 bytes captured (2448 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 10417, Ack: 718216, Len: 252 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22257 259.201029 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 22256#1] smtp > 9428 [ACK] Seq=10669 Ack=718216 Win=17732 Len=0 Frame 22257: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 10669, Ack: 718216, Len: 0 No. Time Source Destination Protocol Length Info 22258 259.201050 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 22256#2] smtp > 9428 [ACK] Seq=10669 Ack=718216 Win=17732 Len=0 Frame 22258: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 10669, Ack: 718216, Len: 0 No. Time Source Destination Protocol Length Info 22259 259.201071 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 22256#3] smtp > 9428 [ACK] Seq=10669 Ack=718216 Win=17732 Len=0 Frame 22259: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 10669, Ack: 718216, Len: 0 No. Time Source Destination Protocol Length Info 22260 259.201091 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 22256#4] smtp > 9428 [ACK] Seq=10669 Ack=718216 Win=17732 Len=0 Frame 22260: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 10669, Ack: 718216, Len: 0 No. Time Source Destination Protocol Length Info 22261 259.201113 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=727603 Ack=10669 Win=46279 Len=0 Frame 22261: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 727603, Ack: 10669, Len: 0 No. Time Source Destination Protocol Length Info 22262 259.201136 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 22256#5] smtp > 9428 [ACK] Seq=10669 Ack=718216 Win=17732 Len=0 Frame 22262: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 10669, Ack: 718216, Len: 0 No. Time Source Destination Protocol Length Info 22263 259.201158 206.225.164.188 192.168.10.207 SMTP 1324 [TCP Fast Retransmission] C: DATA fragment, 1270 bytes Frame 22263: 1324 bytes on wire (10592 bits), 1324 bytes captured (10592 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 718216, Ack: 10669, Len: 1270 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22264 259.201180 206.225.164.188 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes Frame 22264: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 719486, Ack: 10669, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22265 259.201202 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22265: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 727603, Ack: 10669, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22266 259.201225 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22266: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 728983, Ack: 10669, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22267 259.201247 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=10669 Ack=727603 Win=8345 Len=0 Frame 22267: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 10669, Ack: 727603, Len: 0 No. Time Source Destination Protocol Length Info 22268 259.201282 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 22267#1] smtp > 9428 [ACK] Seq=10669 Ack=727603 Win=8345 Len=0 Frame 22268: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 10669, Ack: 727603, Len: 0 No. Time Source Destination Protocol Length Info 22269 259.201302 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=10669 Ack=730363 Win=5585 Len=0 Frame 22269: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 10669, Ack: 730363, Len: 0 No. Time Source Destination Protocol Length Info 22270 259.201324 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22270: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 730363, Ack: 10669, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22271 259.201347 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22271: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 731743, Ack: 10669, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22272 259.201369 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22272: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 733123, Ack: 10669, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22273 259.201391 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22273: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 734503, Ack: 10669, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22274 259.201415 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=10669 Ack=733123 Win=2825 Len=0 Frame 22274: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 10669, Ack: 733123, Len: 0 No. Time Source Destination Protocol Length Info 22275 259.201435 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=10669 Ack=735883 Win=65 Len=0 Frame 22275: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 10669, Ack: 735883, Len: 0 No. Time Source Destination Protocol Length Info 22276 259.205897 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1588599040, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 22276: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22277 259.205916 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1588599040, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 22277: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22278 259.205929 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1588599040, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 22278: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22279 259.205941 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1588599040, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 22279: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22280 259.223755 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3457679616, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 22280: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22281 259.223774 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3457679616, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 22281: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22282 259.223787 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3457679616, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 22282: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22283 259.223799 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3457679616, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 22283: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22284 259.266682 189.123.220.16 192.168.10.207 SMTP 73 C: EHLO qsgeqgwx.com Frame 22284: 73 bytes on wire (584 bits), 73 bytes captured (584 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49396 (49396), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 19 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22285 259.266943 192.168.10.207 189.123.220.16 SMTP 245 S: 250-mail.mydomain.com Hello [189.123.220.16] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 22285: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49396 (49396), Seq: 122, Ack: 20, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22286 259.266983 189.123.220.16 192.168.10.207 TCP 60 49396 > smtp [ACK] Seq=20 Ack=313 Win=93128 Len=0 Frame 22286: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49396 (49396), Dst Port: smtp (25), Seq: 20, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 22287 259.267298 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49396 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 22287: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49396 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 22288 259.267367 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49396 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 22288: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49396 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 22289 259.267429 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49396 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 22289: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49396 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 22290 259.267484 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49396 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 22290: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49396 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 22291 259.268402 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=302278 Ack=5995 Win=1002 Len=1448 TSval=600064 TSecr=730070 Frame 22291: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 302278, Ack: 5995, Len: 1448 Data (1448 bytes) 0000 17 03 01 22 e0 45 20 98 4a 4a 37 5f fd 49 82 88 ...".E .JJ7_.I.. 0010 9f 02 75 e3 2a e6 89 e3 17 21 c3 1f f5 03 ff ed ..u.*....!...... 0020 ee 78 76 d9 da ef 59 4d 7d 50 7e 75 6e 47 1b 71 .xv...YM}P~unG.q 0030 e8 9e a6 26 fc 01 e9 8f a9 a1 11 73 ae ca 7c fa ...&.......s..|. 0040 d5 81 e0 85 5e 9e 2b c2 f5 38 92 e2 7a 59 0d 54 ....^.+..8..zY.T 0050 c0 ed d6 9f 34 bc 08 d4 99 74 69 85 f8 61 63 e2 ....4....ti..ac. 0060 5a 2e c4 a7 6d 58 d2 5c 33 e2 c0 db 63 32 c6 6e Z...mX.\3...c2.n 0070 f9 73 db c0 e1 e8 23 a7 c0 28 17 ee 2d 33 c8 2e .s....#..(..-3.. 0080 3c 44 31 82 3c c1 66 34 0e b4 22 13 84 cb 7d 72 <D1.<.f4.."...}r 0090 45 24 86 a5 ce c3 41 5c c1 1d 86 e2 4a 44 c7 b2 E$....A\....JD.. 00a0 ef ae 85 c6 fc 70 ba c7 24 35 36 ce 79 d2 21 e4 .....p..$56.y.!. 00b0 32 6e f0 88 53 70 6a 85 37 fb f6 ed 93 df f0 0d 2n..Spj.7....... 00c0 56 a3 00 2e 42 3b 5f 91 73 82 19 20 04 f0 db 7b V...B;_.s.. ...{ 00d0 76 f1 4c 35 c5 a9 10 04 64 1d b2 85 73 72 da 8d v.L5....d...sr.. 00e0 5c 17 c9 2d 7a c6 5c 8d 4c 49 8a 46 17 59 7c 2a \..-z.\.LI.F.Y|* 00f0 72 2e b2 0c 3e 54 1d b2 13 ff 0d 5c 59 62 a1 42 r...>T.....\Yb.B 0100 17 e3 df 2d 22 60 bc 0a 78 4b 64 82 45 a3 84 95 ...-"`..xKd.E... 0110 42 c7 ff c7 bd 51 31 0c 58 b6 8e a6 c6 e9 c5 6f B....Q1.X......o 0120 1b f1 02 3a 31 6a bc 49 b6 5b b9 17 4b 96 08 4d ...:1j.I.[..K..M 0130 3a 93 c1 83 a1 8c 64 c6 27 af a2 8b 06 08 bf f0 :.....d.'....... 0140 37 88 95 e4 bd 5d 03 29 21 29 09 eb be cf 4d fa 7....].)!)....M. 0150 42 94 f9 bb 86 49 84 ab 62 85 4e f2 74 48 ef 65 B....I..b.N.tH.e 0160 eb 03 64 ee a2 b2 18 2c a8 f4 af af 6f 94 4f 58 ..d....,....o.OX 0170 0d 3b 4e 22 fa 26 da 47 57 ce 96 a8 d1 0f 4b 9e .;N".&.GW.....K. 0180 00 31 5e fe a3 4d 34 c7 58 6b 75 17 2c 0f 54 21 .1^..M4.Xku.,.T! 0190 4f 0d ea 89 d2 22 d9 9c a4 94 01 45 c6 c9 11 40 O....".....E...@ 01a0 49 48 46 7c 13 17 2c de e3 eb 91 d9 01 98 04 bc IHF|..,......... 01b0 69 8e 8e 55 77 1f 98 03 5c 6d 59 3f 97 d5 0a 90 i..Uw...\mY?.... 01c0 f1 af 1b 5a 0e 17 c2 71 58 46 98 62 73 9c 03 18 ...Z...qXF.bs... 01d0 02 62 af 7a e0 86 d2 81 1c 5f 66 66 fd 0b ee ac .b.z....._ff.... 01e0 2c 60 ac d4 bd e2 01 73 bd 0e 8a 87 c3 9b 82 90 ,`.....s........ 01f0 c7 af 9e 2d b1 b1 95 e8 4f cd 05 e8 b0 0b ff a9 ...-....O....... 0200 fc 68 a8 d7 a6 b8 9f 30 0a 59 99 20 df 5f f1 53 .h.....0.Y. ._.S 0210 ce 7b a7 d4 38 d5 3c 6a e1 0f ac 33 d3 e9 f4 b5 .{..8.<j...3.... 0220 5d 46 9e 2b 5c 18 38 b3 24 ca ae 90 bf 50 07 75 ]F.+\.8.$....P.u 0230 1b bb d8 4d 14 4a da d9 20 e9 41 e3 85 af 42 41 ...M.J.. .A...BA 0240 7b 98 15 d1 f9 be 7e 53 15 d7 56 fa 69 6d 67 be {.....~S..V.img. 0250 80 d1 92 38 17 ee d1 a5 70 a3 4c 64 a2 56 78 73 ...8....p.Ld.Vxs 0260 aa ee 60 43 91 b8 61 ff 77 e0 b0 5b 26 d6 f1 23 ..`C..a.w..[&..# 0270 db 24 e6 7d 18 df 32 2f da 4f be 36 7e 00 25 cf .$.}..2/.O.6~.%. 0280 71 e0 55 bb f7 fe e9 8f 08 e8 a9 f9 65 27 98 b5 q.U.........e'.. 0290 d2 b6 98 8d a8 09 94 ed 9c 83 b8 92 10 14 81 c6 ................ 02a0 0e 20 6a 39 5e aa c6 af 69 58 79 e8 27 a9 3f af . j9^...iXy.'.?. 02b0 04 8c 05 dc 76 f1 8b d5 a4 3d 0a 37 a7 16 5b 59 ....v....=.7..[Y 02c0 fc 68 ef 5a 54 a4 d3 98 0d ed ec 68 c8 e6 73 45 .h.ZT......h..sE 02d0 f5 6a 92 61 06 2e c9 ad 57 f2 e1 e0 af b2 1c 7c .j.a....W......| 02e0 eb 4f f5 79 af 3f 65 f9 28 08 3c 95 b0 2a b9 1c .O.y.?e.(.<..*.. 02f0 37 e7 0a 5c ba 5d 45 98 99 b0 6e 31 f0 92 dd c5 7..\.]E...n1.... 0300 c0 78 e0 e8 64 9d 8c 0d fb 04 10 8b d3 63 ab 0f .x..d........c.. 0310 68 91 ef 29 b6 b8 3b 01 79 62 71 2a 06 75 3d aa h..)..;.ybq*.u=. 0320 ac f2 40 83 57 b6 53 8f e6 aa 4d 3a b4 9c ce cd [email protected]:.... 0330 43 d5 85 2f a0 f5 15 19 9c b0 2f ca 6e 9c 1d 8b C../....../.n... 0340 be a2 2e fd 41 3c f5 94 85 69 6b d5 31 5d 8b 87 ....A<...ik.1].. 0350 55 3e 7b c8 f0 16 0e b4 01 64 cf 32 6f 21 b5 ef U>{......d.2o!.. 0360 28 78 0c c7 17 4a 9d 5f 4f f6 d8 79 f2 2c 0f 23 (x...J._O..y.,.# 0370 92 0a 0e 4d f7 1c c3 c6 7e c0 2c 99 4e 8c 7c 00 ...M....~.,.N.|. 0380 a7 24 72 3a bf 4c d4 dd 5d af 49 06 ff df 5f ea .$r:.L..].I..._. 0390 ce f7 f9 99 28 97 e5 13 fc c3 bb b0 3d e5 a4 b7 ....(.......=... 03a0 72 43 c9 9f 9e d7 e2 a7 3c a4 e6 d2 98 9d b5 03 rC......<....... 03b0 9a d2 3f 46 c4 ba d9 f9 37 af 30 d0 d0 43 ab e6 ..?F....7.0..C.. 03c0 f8 1b bb e3 43 57 4c ee e6 a7 73 4b 6d 48 03 33 ....CWL...sKmH.3 03d0 18 12 f1 8c 42 ad 2d a9 bd bb c8 e6 ff 4d 03 53 ....B.-......M.S 03e0 bd af f5 e7 db 8a 25 18 15 c8 0f 54 41 2b 97 15 ......%....TA+.. 03f0 31 e1 da 11 bd fb 84 bd 35 82 3b 91 01 59 e6 ad 1.......5.;..Y.. 0400 97 2d 19 9e 0d c5 bb 4e a0 b5 f1 20 c1 d4 aa d5 .-.....N... .... 0410 96 3c f8 e1 94 08 18 37 d7 48 05 95 75 84 23 24 .<.....7.H..u.#$ 0420 01 93 f1 4d 7c d5 14 c7 c2 9d 29 7e e8 af 4d a9 ...M|.....)~..M. 0430 4e 3c 6f df 3c 91 1d 6c 9e 90 7a a9 9f 48 b4 27 N<o.<..l..z..H.' 0440 9a ce 57 c6 c3 77 58 ca 56 c7 be a6 53 b4 60 55 ..W..wX.V...S.`U 0450 2f 42 5e fd 01 4d dc d7 39 7e af 80 eb 32 1b b6 /B^..M..9~...2.. 0460 7e bb a8 53 ef 6f ff 03 ae 9c e1 fb a6 92 67 1b ~..S.o........g. 0470 98 eb ea 99 72 ec bb a1 64 12 d1 95 e4 62 3f d4 ....r...d....b?. 0480 b9 3e 57 45 16 d8 d0 e1 6f e5 ec c5 4c 70 b6 e8 .>WE....o...Lp.. 0490 0a e2 ac 5b 12 92 8b fe 79 67 b6 c8 b5 3e da d8 ...[....yg...>.. 04a0 80 9f e6 65 ab bf 74 6f 91 72 95 fd 0f 66 47 0d ...e..to.r...fG. 04b0 35 99 f2 c6 35 3e d7 25 ad 3c 98 ad e3 7f 14 5c 5...5>.%.<.....\ 04c0 8e a1 c2 d0 0d 82 04 72 86 84 08 36 d0 b0 9c 9c .......r...6.... 04d0 c8 73 91 4f b7 a5 7b ce f5 57 c2 be 40 69 c7 bb .s.O..{..W..@i.. 04e0 83 c9 cc 67 9d 2e 5b d8 ae bc 86 83 61 a5 b1 95 ...g..[.....a... 04f0 4c 51 ab 4a 52 0a 92 47 67 a0 4d cf 1d e8 36 92 LQ.JR..Gg.M...6. 0500 46 85 26 81 97 76 3c 6f 17 ae cf 24 41 06 1a e6 F.&..v<o...$A... 0510 a2 64 a5 40 b3 cb be 48 b6 a7 a3 98 b5 a1 0d 80 [email protected]........ 0520 59 2c 4b 75 86 34 54 6f 17 e9 97 a6 92 f7 8c b4 Y,Ku.4To........ 0530 ae 14 73 0c a2 b1 24 b5 13 d6 d3 1a 05 9e 68 08 ..s...$.......h. 0540 0d 2c f8 4b 17 66 9d bb b7 03 c3 51 87 c8 5e 28 .,.K.f.....Q..^( 0550 34 31 3f 3c 4d 35 68 41 22 e7 22 2e f0 06 3d 83 41?<M5hA"."...=. 0560 d5 31 ce 4f 85 32 ac c4 e1 3b f6 8b 07 ce 78 6b .1.O.2...;....xk 0570 58 63 82 98 aa 44 00 65 1d 6d 5b 78 3b d8 bb ad Xc...D.e.m[x;... 0580 1b 9b 4b 5a 70 f3 c1 9f a0 43 52 9c 70 a3 8e ba ..KZp....CR.p... 0590 3a e0 48 76 11 42 06 53 0b be 26 ea 2f e0 52 66 :.Hv.B.S..&./.Rf 05a0 9c 67 1a a5 c0 c4 cf c7 .g...... No. Time Source Destination Protocol Length Info 22292 259.268467 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=303726 Ack=5995 Win=1002 Len=1448 TSval=600064 TSecr=730070 Frame 22292: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 303726, Ack: 5995, Len: 1448 Data (1448 bytes) 0000 dc 59 bf c5 c0 bc 78 67 81 75 b1 8b 30 99 4e ba .Y....xg.u..0.N. 0010 e3 16 06 4b e5 61 b9 4e 47 00 0b 93 e7 b7 0a ae ...K.a.NG....... 0020 b9 e5 5c 55 de bf 94 e0 f7 50 c3 ff 29 28 39 35 ..\U.....P..)(95 0030 03 5e 36 8e 0b 04 cc 30 b1 35 61 f3 d3 1c a8 14 .^6....0.5a..... 0040 06 22 35 f5 75 ec ad 43 a0 f9 5f 79 3f 6d 4d 9e ."5.u..C.._y?mM. 0050 55 59 38 3b 67 32 23 bc 51 30 38 bf 57 90 ae 14 UY8;g2#.Q08.W... 0060 d8 d8 80 18 3c cf e0 c1 ad 0d ea 65 a4 ea d6 68 ....<......e...h 0070 f1 bc 9a 4d f2 c9 32 f0 29 28 7f 87 12 91 86 83 ...M..2.)(...... 0080 93 db a3 aa 65 0d 53 59 4d 25 eb 97 76 fe f1 15 ....e.SYM%..v... 0090 d6 d8 8d 87 c9 75 d0 36 b3 91 bc 26 88 94 e5 5e .....u.6...&...^ 00a0 16 84 25 90 38 03 00 ba b6 71 7a 45 eb c6 16 1b ..%.8....qzE.... 00b0 9a 19 46 39 76 57 08 1a 1c 39 83 8c 2f 56 c2 52 ..F9vW...9../V.R 00c0 a9 0d 99 94 64 98 4f fb 2f 48 99 d9 3c 4a a5 4a ....d.O./H..<J.J 00d0 48 21 86 d5 84 b1 0a ce 91 6e 6a 24 92 3c ba 4e H!.......nj$.<.N 00e0 47 1e 3f 19 68 af 90 22 49 84 9c 6f 4b ee 81 ee G.?.h.."I..oK... 00f0 9d ab a9 a4 29 7d a5 fb 6d 32 9a 34 dd 5b f8 8e ....)}..m2.4.[.. 0100 96 2c 47 52 76 ac 7e fd f8 46 9e 8f 6c 56 86 c1 .,GRv.~..F..lV.. 0110 5a fa f7 42 c3 24 59 55 0a 71 17 de ab 2f 09 b2 Z..B.$YU.q.../.. 0120 4b 2d 94 8e 2a 96 cd 69 3f 9b 33 1f 3d 6a fd 5d K-..*..i?.3.=j.] 0130 9f cb 9d 51 01 40 2c a5 58 ec 5b a8 b9 19 d7 2d ...Q.@,.X.[....- 0140 33 af 24 19 8b 5a 51 20 52 30 42 3b da d7 78 4c 3.$..ZQ R0B;..xL 0150 8f 41 d6 2d b8 4b f8 f9 64 1c f5 a7 ba b8 6e 63 .A.-.K..d.....nc 0160 d3 05 4c 3f 1a 4d a2 4c 3c e2 01 8f 72 61 c3 29 ..L?.M.L<...ra.) 0170 98 ac 6c 41 69 7e 57 a5 bb c9 29 09 8c 3f 31 62 ..lAi~W...)..?1b 0180 b3 c3 4b b4 ea 36 3a 1d dd 91 3b 8b c3 40 9a a7 ..K..6:...;..@.. 0190 8c 0c 77 39 82 7d eb f1 cc db 3d 17 67 37 9f 81 ..w9.}....=.g7.. 01a0 c5 e5 8d 45 4a 01 0c 75 04 74 d9 14 ef b7 ac 88 ...EJ..u.t...... 01b0 c5 ad 88 75 2c ea c0 fa 6e a9 c5 94 a3 3c e1 bd ...u,...n....<.. 01c0 f9 57 44 c0 72 df 6f e9 b3 e1 1b 64 f8 fe 26 28 .WD.r.o....d..&( 01d0 d6 b3 8d f0 93 8d 67 cc eb b9 07 94 97 33 df cf ......g......3.. 01e0 d5 f2 92 22 75 6e 49 7c 50 61 62 f7 f6 6f d7 46 ..."unI|Pab..o.F 01f0 4d 49 84 71 82 19 bd 82 0c f6 8e 1a ae 18 b4 eb MI.q............ 0200 d1 4e 15 18 d5 3a d2 81 1c bd 81 af 50 c3 4e 69 .N...:......P.Ni 0210 0f 74 d6 d8 e3 84 76 e6 ed 74 7b 1b 6f c8 79 0b .t....v..t{.o.y. 0220 4f a6 6c c6 e2 b1 8f 1d 06 d5 dd 38 b1 72 5a 91 O.l........8.rZ. 0230 4d 68 21 e6 c2 de fb e2 c5 a6 0f 26 c6 d2 44 22 Mh!........&..D" 0240 c4 79 27 02 6f 51 69 bb 47 6c 5b 14 70 6d f8 1d .y'.oQi.Gl[.pm.. 0250 68 96 31 aa b3 eb 6b db 9a c3 be 54 5f 0d 1a 0f h.1...k....T_... 0260 88 87 66 8a 3f d6 38 98 54 8f b8 c6 cf 2a 0d 9d ..f.?.8.T....*.. 0270 19 3d ab 7f 50 41 4c 12 91 4a 0b f1 60 5c 5b ad .=..PAL..J..`\[. 0280 cb e8 f2 82 43 df 41 69 ec eb 08 77 26 f8 43 21 ....C.Ai...w&.C! 0290 cd 21 26 c2 db 1e b7 07 e8 5c c3 de dd f6 0d 25 .!&......\.....% 02a0 38 a8 7b 95 c2 c6 fe 45 30 25 87 ef f1 08 75 25 8.{....E0%....u% 02b0 a0 6a f5 5b dd 1d 0b 47 2b dd a5 20 df 20 20 23 .j.[...G+.. . # 02c0 fa a7 9c 75 8b 7e fb b9 0f 08 05 e9 c7 7f db cf ...u.~.......... 02d0 b3 06 dc 23 b2 e7 32 7e 48 29 91 8a 6d 22 8d 43 ...#..2~H)..m".C 02e0 12 c9 1e 3e 09 84 64 e6 6a 24 6d a9 66 ee 59 47 ...>..d.j$m.f.YG 02f0 1e dc f2 cd f1 58 0e 36 07 03 59 7c 0f cb 52 9f .....X.6..Y|..R. 0300 79 64 4b c1 d4 94 1d a3 98 5d 6c 94 55 80 1c a2 ydK......]l.U... 0310 3b f7 bd bc ba 17 ca ea fb 88 94 4d 28 da 0a 91 ;..........M(... 0320 d0 ea bf 91 12 5b 3d a3 a9 c8 34 d1 de df 7f 7b .....[=...4....{ 0330 5d c4 d0 fc f3 6f 07 85 93 c8 3d cc 75 43 a9 e6 ]....o....=.uC.. 0340 f4 51 c7 a9 3d 41 18 9c 47 78 6f b6 77 76 f7 7d .Q..=A..Gxo.wv.} 0350 73 3f 92 ab d1 fe e2 85 32 1f 78 7d a7 62 70 c0 s?......2.x}.bp. 0360 9f cf bd b0 16 05 de 9a fd 9f a6 d6 cb ae 7f be ................ 0370 c9 e0 13 38 60 77 83 fb dd d9 18 78 50 b9 7c 0a ...8`w.....xP.|. 0380 cd 0e 9c fb a5 a8 e7 66 af 79 1f 82 09 c2 d9 a1 .......f.y...... 0390 d4 46 04 0c c7 e2 d8 c7 a1 06 86 8b 5c da 09 e7 .F..........\... 03a0 3b 9a df 80 4a f7 96 08 dc 43 71 4d df 44 f7 9a ;...J....CqM.D.. 03b0 3f 84 cf 12 a0 70 e6 f9 42 cc 63 1a a4 e7 3f dc ?....p..B.c...?. 03c0 7a 76 d2 77 c4 02 6d d5 91 9c 09 5b c3 dc 85 8f zv.w..m....[.... 03d0 ee 47 91 55 f1 20 44 b0 88 86 5d bb b0 cb a9 25 .G.U. D...]....% 03e0 5d ff 52 f9 39 e5 e2 09 5a 27 f5 aa c4 62 02 e0 ].R.9...Z'...b.. 03f0 95 b8 c4 41 8f da 42 77 d4 eb ab 99 ca 40 de 44 [email protected] 0400 0a 1f d1 56 84 dc 4d 7f 33 ed 7c 54 22 6e 23 71 ...V..M.3.|T"n#q 0410 36 e3 7c a1 c9 8e 80 41 cb b0 97 da 7e db 0f 39 6.|....A....~..9 0420 f8 bb 36 7a a6 ec e7 14 d4 fb d5 91 4c 1a 2a d8 ..6z........L.*. 0430 80 72 1a 54 e0 e1 e2 33 36 c2 29 5f 68 e9 66 18 .r.T...36.)_h.f. 0440 98 24 43 e9 38 8c d4 04 f1 0c c2 80 2c 63 85 21 .$C.8.......,c.! 0450 44 96 a1 0e ea b8 5e bd 38 61 f4 64 58 d7 90 c9 D.....^.8a.dX... 0460 da d3 0f c4 1f 63 10 1e f2 70 3f a8 54 5c ca 38 .....c...p?.T\.8 0470 4e a0 71 3a fc 2e da ac 54 da 6d 5e 0f bd f4 99 N.q:....T.m^.... 0480 5a f1 8c 19 f7 bb d3 11 59 2d fd ec a1 0d ed 32 Z.......Y-.....2 0490 5c 87 6d 46 cc b0 4e fd fe 38 22 ce fd 03 f6 37 \.mF..N..8"....7 04a0 a9 79 be f6 49 14 de 30 d3 bd 2e 69 f4 c3 3f 20 .y..I..0...i..? 04b0 2f 68 cf 8f 4b 2d a5 e5 82 eb 1a 9b 5c 67 40 b2 /h..K-......\g@. 04c0 20 82 8d bc 28 d8 5b 23 cf 75 ae 1f fc 74 67 e9 ...(.[#.u...tg. 04d0 cd cc b9 43 31 1f 18 65 c1 d4 bf e4 13 c0 27 4c ...C1..e......'L 04e0 32 5e 27 34 df 4d 0c 25 dd 34 da c1 a5 63 c7 ef 2^'4.M.%.4...c.. 04f0 15 b3 0d b7 3b 2e 90 6b 04 5f 9d f1 37 a5 29 e5 ....;..k._..7.). 0500 fa 4c 6b 67 ea a0 8c 05 fe 57 56 74 15 fa 1b 9a .Lkg.....WVt.... 0510 42 02 4a 1b 8b 5d f1 06 30 89 24 f2 1f 6f 22 0d B.J..]..0.$..o". 0520 c3 d1 c7 2c e9 fb 79 45 a3 1e c0 73 b9 2d 17 c2 ...,..yE...s.-.. 0530 86 eb 81 cf 49 15 bf 86 62 b6 02 84 de 32 50 99 ....I...b....2P. 0540 36 01 fb 5f fa 6c e8 17 9f 7f ba 7f 66 e9 aa e4 6.._.l......f... 0550 0b 89 a2 89 d8 99 2f 0d 2c 75 3f 11 70 00 fa b9 ....../.,u?.p... 0560 94 50 00 26 b3 25 a2 c6 3c fe f2 ad 42 6c 67 c7 .P.&.%..<...Blg. 0570 6f fa c6 df f6 00 bd 7a 13 a2 fd 3d e6 45 2b 79 o......z...=.E+y 0580 df 1c 9e 0d 3e e5 da da c1 9a 0a a2 68 1c 79 16 ....>.......h.y. 0590 89 b5 bf ce 56 a5 6a 70 67 12 f2 f1 86 a3 fd 00 ....V.jpg....... 05a0 5a 1e 4e 04 a5 9a 2e 11 Z.N..... No. Time Source Destination Protocol Length Info 22293 259.268534 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=305174 Ack=5995 Win=1002 Len=1448 TSval=600064 TSecr=730070 Frame 22293: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 305174, Ack: 5995, Len: 1448 Data (1448 bytes) 0000 8a 7d 61 e3 d0 6a ea e6 ff 61 27 29 8f bb 7e 72 .}a..j...a')..~r 0010 28 8f 54 95 ba c2 6f 8f 93 c0 28 aa ae 4a 19 9b (.T...o...(..J.. 0020 8a 9e 79 ea 64 d5 4b 34 0b b0 ca 37 ab 92 46 2b ..y.d.K4...7..F+ 0030 db cc e7 23 8c 0a 5b d5 e4 4a e6 5d f2 8d c4 cc ...#..[..J.].... 0040 70 68 99 4e 0a dc c0 b1 06 d6 61 f3 3b 7c 3e a3 ph.N......a.;|>. 0050 bc 7c c3 52 0e 87 d6 d0 ac 5d 38 d0 83 7c 1f 00 .|.R.....]8..|.. 0060 2c 60 86 ad 71 87 fd 5f 6a ed 61 3e c8 3a 2a 50 ,`..q.._j.a>.:*P 0070 5c 2f d0 ba 83 17 6e 91 fa 64 72 6e 38 9f 5a 88 \/....n..drn8.Z. 0080 83 43 7a 07 40 be c7 a1 72 18 f4 da fb f1 2f 62 [email protected]...../b 0090 0b 28 37 21 e0 fc 0c c9 70 35 3f 4e 48 2b ba 9a .(7!....p5?NH+.. 00a0 65 b0 13 a6 a9 16 06 3c 87 a2 dc b5 05 56 e8 0c e......<.....V.. 00b0 29 8a 5f 1d 3e 49 98 8d f0 6d 26 86 f7 62 4e ad )._.>I...m&..bN. 00c0 b4 52 76 c9 83 f0 92 5a df a8 c8 2a 5f 4a 90 29 .Rv....Z...*_J.) 00d0 93 9c 49 93 24 6c 1f 87 6e 46 8d d2 1a 42 a9 ea ..I.$l..nF...B.. 00e0 07 7a 08 fc 5d a6 bc 59 a5 22 1c f0 fb 15 9a c5 .z..]..Y."...... 00f0 5b eb cd ab 25 1e f9 87 18 6a 3a 3b 44 6e 21 b2 [...%....j:;Dn!. 0100 01 2d b9 39 62 9b 3f fb 1d 7f c0 49 28 9c ab e0 .-.9b.?....I(... 0110 8f 8b 6a 68 96 aa de 58 a8 bc 4d 12 34 52 a2 2b ..jh...X..M.4R.+ 0120 55 4b d7 1f 45 bb cb e9 d6 7b bb ac 2c 91 7b e9 UK..E....{..,.{. 0130 da d7 12 a9 8e 56 81 79 32 df c4 dc 93 f8 1e 15 .....V.y2....... 0140 6b b6 5a f8 69 8a a1 4f d6 2b ac 3d 4b ce 61 76 k.Z.i..O.+.=K.av 0150 5f 1b 2f 46 7c cf b4 31 c1 9b bf 5f a0 db 00 1e _./F|..1..._.... 0160 0a b9 df a5 50 16 85 c4 f4 c3 30 f2 e5 9b d5 8e ....P.....0..... 0170 8e 6d 4b b3 61 64 de 8b 17 95 e0 79 51 e7 13 a6 .mK.ad.....yQ... 0180 fc 88 d8 ba 10 f5 3c 56 a9 57 83 0c 7a a4 c9 23 ......<V.W..z..# 0190 81 f3 bd 2a c3 ad 50 8e ac 0d 90 08 b8 ee fa 98 ...*..P......... 01a0 f1 0c 33 28 ba b0 75 e8 d0 66 0b c2 92 c2 05 79 ..3(..u..f.....y 01b0 0b 12 30 ae 0f dc f6 04 42 6a f1 a4 63 e2 ce a0 ..0.....Bj..c... 01c0 da 47 8d 48 68 34 11 be 38 4b 02 87 0f 78 05 62 .G.Hh4..8K...x.b 01d0 f9 0e e7 e7 72 60 65 3d 6f 43 5d 6a 81 f6 5e 2f ....r`e=oC]j..^/ 01e0 9a ae c3 bd e6 46 9a 9a e0 21 69 2c 44 4d bd 9d .....F...!i,DM.. 01f0 1a 7b 8a 68 56 35 82 8c 5f 4a 10 32 3f 83 b6 2d .{.hV5.._J.2?..- 0200 1e 6c 97 ff 52 18 ef 1d 2c 78 aa 33 10 a2 e3 53 .l..R...,x.3...S 0210 93 8e 86 75 8e 12 cf 6c 47 a6 46 17 b8 71 c0 e3 ...u...lG.F..q.. 0220 69 ed 98 48 96 f3 fa 7e a6 67 54 81 64 26 de 06 i..H...~.gT.d&.. 0230 67 5d b1 e5 01 cc 26 f2 54 ea 1f cb 24 af 32 5c g]....&.T...$.2\ 0240 10 f7 fe b0 ff 5d ba cb 14 00 4f ac d8 69 ce 44 .....]....O..i.D 0250 25 97 55 dc f8 76 06 bf 43 1f 33 0e 07 b4 a6 f7 %.U..v..C.3..... 0260 68 cf b4 46 19 a6 05 cc 3f 3f 91 d0 db 4d 42 38 h..F....??...MB8 0270 9d fa b2 8f 6e 92 50 29 1b 88 bd 83 c2 8d 43 68 ....n.P)......Ch 0280 bf 2c ee f2 f3 11 c2 91 b6 b7 a5 d7 9b 18 e6 7b .,.............{ 0290 35 0e 4c 0d 57 b0 9b 07 f0 11 e8 44 a4 d3 44 71 5.L.W......D..Dq 02a0 90 6a 6e 52 5b aa 7c 1a 9f a8 de 63 f9 30 18 51 .jnR[.|....c.0.Q 02b0 92 65 ac dd 8e cd 5a 43 4b 3f 47 26 0a 20 15 71 .e....ZCK?G&. .q 02c0 25 a8 b3 3d af 0f 35 a5 2b 34 b3 ac e1 01 ad f0 %..=..5.+4...... 02d0 e3 c7 9c aa 30 a6 f9 96 7d d0 e7 73 9f cf 45 76 ....0...}..s..Ev 02e0 2a 84 23 d5 84 b1 13 82 d0 c6 7f d0 e3 3b 77 e5 *.#..........;w. 02f0 1b 3a c3 aa 70 a9 d2 b6 57 18 07 ef 3f 0e cb 8a .:..p...W...?... 0300 3c 3b 71 e0 82 45 19 a4 67 c4 9c 12 07 fb 8f 3e <;q..E..g......> 0310 6a 7e 60 36 42 4f 5e 7e 4d a3 c7 da 82 f9 ed 93 j~`6BO^~M....... 0320 33 d8 af bd 2e 19 58 a4 e6 c4 55 58 ee 42 aa 52 3.....X...UX.B.R 0330 64 dc 7d 4f 51 8e dc a7 40 b8 78 d1 da 11 6d df d.}[email protected]. 0340 b1 65 53 d9 1d 57 b1 3d d7 7c a6 44 f1 4f b2 6d .eS..W.=.|.D.O.m 0350 bc 72 b7 71 e1 8a 9d 2d a4 5e 4e 3e cc 7e 54 1f .r.q...-.^N>.~T. 0360 06 bf 2d ce d4 35 7a 76 f1 ac 14 b0 2d 54 85 8e ..-..5zv....-T.. 0370 13 ea cf 6a 6c 04 30 32 c3 f5 5f 88 54 e1 94 37 ...jl.02.._.T..7 0380 6f d9 85 1a 9c 67 dc b5 a0 61 96 e3 81 55 e1 2b o....g...a...U.+ 0390 d4 a9 23 ae 08 4a 79 7f 3d ab 50 c9 56 e5 82 6f ..#..Jy.=.P.V..o 03a0 ad 47 27 91 1f c0 e5 32 ac 57 1d d3 e0 71 79 f0 .G'....2.W...qy. 03b0 0e 8f 71 8c 38 34 bf f9 e0 8b 32 41 6c 5d 00 2a ..q.84....2Al].* 03c0 33 a0 98 43 40 68 61 b4 7a bc 63 e0 38 4d d3 e4 [email protected].. 03d0 bb 18 89 59 be 49 f4 dc b7 d9 97 51 7c 33 03 c2 ...Y.I.....Q|3.. 03e0 36 2b 57 70 a3 f3 1b f0 c9 e6 45 3f 88 48 8a fb 6+Wp......E?.H.. 03f0 b7 03 c7 ed 56 6c 4a 36 0d c1 2b 4a 7d ba f9 f5 ....VlJ6..+J}... 0400 8b d7 00 e2 ae 23 91 11 fc ba 6f 70 8f 7a c1 a8 .....#....op.z.. 0410 7d 97 5f ed 1d f6 26 a0 3e 36 5c a9 f1 c3 24 61 }._...&.>6\...$a 0420 37 2e d5 59 72 fc 57 ee ee 8b 91 a9 d2 97 d3 76 7..Yr.W........v 0430 29 b2 1c 4d a8 4e 55 a5 3b a7 9e b4 42 e7 5d d1 )..M.NU.;...B.]. 0440 d3 da bb 20 7e 4d a6 d4 40 89 ee b7 dc 85 53 eb ... [email protected]. 0450 3a a9 20 52 f1 c7 78 4e 00 8a e8 c7 98 b9 37 1f :. R..xN......7. 0460 bc 83 50 38 17 89 05 04 bd 23 48 9d 22 4e 2c df ..P8.....#H."N,. 0470 bd 34 c4 85 e8 95 59 1c 4f d9 fc 3c 45 23 a2 73 .4....Y.O..<E#.s 0480 24 b1 ce 06 78 e8 a3 13 93 67 ce 3d 30 a7 e6 d7 $...x....g.=0... 0490 79 b2 b4 65 60 84 e2 f9 b0 0c 6c f1 90 c8 2d e8 y..e`.....l...-. 04a0 46 f9 ee 3b c7 a9 e9 e3 68 f6 65 bd a8 00 a9 c8 F..;....h.e..... 04b0 f2 00 2a 2b ac fe 07 6c f8 fa 90 fe cc 05 c9 48 ..*+...l.......H 04c0 75 66 bf a4 80 05 99 84 b8 40 80 ab b1 30 56 a5 [email protected]. 04d0 8f a7 4a 96 5e 82 3a f3 2d d5 54 b9 43 f4 ee 9d ..J.^.:.-.T.C... 04e0 b6 6f a1 a8 0d 16 47 c2 5b e2 67 8a 3f eb a1 b7 .o....G.[.g.?... 04f0 60 b8 bc ba 8b e3 13 ac a7 e4 15 80 2b 5d 09 6f `...........+].o 0500 4b d2 df 75 19 09 14 48 63 a1 96 56 f8 24 7c 08 K..u...Hc..V.$|. 0510 f2 d6 f1 bd 0e 59 25 4d 3a f8 f1 4f 79 1d ee 75 .....Y%M:..Oy..u 0520 25 66 21 5e 67 fd 10 c2 94 4c e4 db 68 6c 67 59 %f!^g....L..hlgY 0530 0c 39 a0 64 69 72 1f da c4 4b b7 97 0b 2b 5c 20 .9.dir...K...+\ 0540 7b 34 6c 49 55 11 e5 74 c0 b3 60 76 32 1a d6 50 {4lIU..t..`v2..P 0550 e9 e6 55 e8 8d 27 b3 22 51 69 4b a9 c5 8a 28 5a ..U..'."QiK...(Z 0560 28 a7 6f 35 1e e6 39 a5 97 d2 6d 9f 98 d5 88 57 (.o5..9...m....W 0570 ef f9 e7 95 8b e3 a0 07 d4 1b 34 aa f6 17 be e5 ..........4..... 0580 8f 5e 10 e2 df ba 5d 8d 26 87 52 50 50 c4 8c b6 .^....].&.RPP... 0590 1f 8b 91 03 1f 8c 7a ed 52 76 da 5d be e4 70 23 ......z.Rv.]..p# 05a0 62 11 86 69 7d b4 5d 1b b..i}.]. No. Time Source Destination Protocol Length Info 22294 259.268586 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49396 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 22294: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49396 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 22295 259.268624 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=5995 Ack=305174 Win=65535 Len=0 TSval=730075 TSecr=600064 Frame 22295: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5995, Ack: 305174, Len: 0 No. Time Source Destination Protocol Length Info 22296 259.268693 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=306622 Ack=5995 Win=1002 Len=1448 TSval=600064 TSecr=730075 Frame 22296: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 306622, Ack: 5995, Len: 1448 Data (1448 bytes) 0000 e9 13 4e 01 27 e2 0c d0 7b b9 81 32 a0 06 16 3d ..N.'...{..2...= 0010 ca c0 93 13 3e 57 c9 f6 1d 06 d6 05 0b 84 d8 eb ....>W.......... 0020 ec 8f 1d 68 1c 31 10 91 fd 23 e9 f2 3c c0 6a 45 ...h.1...#..<.jE 0030 51 85 e5 61 7a ce e7 5b f4 dd 74 44 f2 b5 79 7e Q..az..[..tD..y~ 0040 28 32 95 90 91 9e 0c d6 7c cb 14 4d cf 35 a4 66 (2......|..M.5.f 0050 bb 22 ac 99 d4 5b 56 7c 24 b9 13 3e b0 27 fe c1 ."...[V|$..>.'.. 0060 1b 12 bf 44 07 39 9e e7 e4 7a f4 84 c4 c8 60 59 ...D.9...z....`Y 0070 37 9f cc 39 b4 bf 3c a5 cc 6e 83 8c b3 65 23 88 7..9..<..n...e#. 0080 d9 6d 58 9b c1 41 24 04 96 43 8b 4b f8 41 92 fc .mX..A$..C.K.A.. 0090 f8 bb 24 64 54 9c f1 22 03 dc 79 3f f4 c4 92 42 ..$dT.."..y?...B 00a0 5e ce 32 18 fb bd 87 73 55 f7 41 d9 53 7f 7f db ^.2....sU.A.S... 00b0 87 45 fb b5 85 a1 a1 e3 66 10 6a 9a 56 eb 36 2b .E......f.j.V.6+ 00c0 a0 e6 11 47 e9 f5 4f 4d b8 15 f7 5d 7c ce 4e f0 ...G..OM...]|.N. 00d0 8e 58 c2 bf 61 65 5e 4e 76 e6 d6 16 db 41 da 51 .X..ae^Nv....A.Q 00e0 d2 62 f2 66 3b ff da 4b c5 c3 46 ac 54 7e 6a fa .b.f;..K..F.T~j. 00f0 d1 2f 07 50 29 54 90 b8 31 7e 38 a1 17 ee c3 4f ./.P)T..1~8....O 0100 95 cf f6 77 45 af d3 c6 f8 9f 95 c6 2b 5d ca 6b ...wE.......+].k 0110 e8 1d 12 19 c1 dc d7 ea 61 cb 5c 43 e1 cb 61 5e ........a.\C..a^ 0120 cd c2 1e d5 77 98 f0 12 58 9a 70 aa d0 88 e6 32 ....w...X.p....2 0130 82 64 24 57 39 8c 64 5f 8d 13 15 ca 2e ff 1b c5 .d$W9.d_........ 0140 5a e7 20 bc 64 82 be b6 0d e0 50 d9 bb 9b 41 0f Z. .d.....P...A. 0150 7a 6c 2c 66 92 e7 fc 20 2c 25 09 57 64 44 a4 9e zl,f... ,%.WdD.. 0160 3c 27 49 32 f5 cb aa 85 9e 51 61 8c fa 95 ac a1 <'I2.....Qa..... 0170 b1 6c 8c fc 0e 3b d3 0e cb 2f 55 ed e6 bd 75 5a .l...;.../U...uZ 0180 01 cc 85 01 20 89 08 31 85 c2 e1 61 4b af 7c c1 .... ..1...aK.|. 0190 b1 a5 c1 fc f7 b1 5f 75 43 d5 f8 b7 af 7a f4 f0 ......_uC....z.. 01a0 c8 66 89 89 82 67 3c 07 97 ca 2f f5 16 ec 2b a4 .f...g<.../...+. 01b0 01 4b ae 2e 24 0a 2b 53 05 05 0f 9c f8 44 ed dc .K..$.+S.....D.. 01c0 1d c6 da fe d5 4d 19 fe c7 2e cf 8b f0 b1 d6 ff .....M.......... 01d0 f8 1d 05 f7 3e 8f 72 99 ff e1 20 55 ce 29 8d c0 ....>.r... U.).. 01e0 e5 07 5c 17 67 71 29 a2 2b 22 6d 93 1f d8 d6 ee ..\.gq).+"m..... 01f0 d0 57 77 51 45 a5 74 78 2d c7 fd 53 2a fe 58 38 .WwQE.tx-..S*.X8 0200 00 99 5a 18 8e db 98 2f c6 fe 34 e3 6e 57 ed eb ..Z..../..4.nW.. 0210 97 49 37 41 b2 fe f4 50 a9 ab 05 13 bf 29 74 e4 .I7A...P.....)t. 0220 f7 10 23 c4 a1 c4 b6 a9 7e 1e a5 e9 2b 19 73 7f ..#.....~...+.s. 0230 b8 d4 27 84 52 7d d4 bd 46 fd 09 98 14 e5 ce eb ..'.R}..F....... 0240 a8 c7 9f 3b be 0d b3 f5 20 3f 7c 2b 8e 02 42 78 ...;.... ?|+..Bx 0250 70 bc 01 2e f9 86 ba 7a 52 30 54 ef 07 3f 37 64 p......zR0T..?7d 0260 71 97 41 fa 40 c4 cb a2 29 17 d4 d3 cd f5 45 aa q.A.@...).....E. 0270 5b de fc 66 12 86 4c e0 3a db ae 2c d9 78 e1 86 [..f..L.:..,.x.. 0280 2b a1 27 17 db f3 4f 68 bb 11 5c 7c 97 10 8f 53 +.'...Oh..\|...S 0290 79 f4 d0 eb f8 66 b0 5c 29 86 ab 33 72 ac 1e 67 y....f.\)..3r..g 02a0 ce 00 fb cb 10 a4 5b 15 49 93 be 2c 32 85 35 48 ......[.I..,2.5H 02b0 5a ef e6 16 6e 25 17 43 58 d2 43 23 73 ef 3f c0 Z...n%.CX.C#s.?. 02c0 b2 10 e8 94 9d 43 59 a7 98 99 55 86 30 9b 77 49 .....CY...U.0.wI 02d0 dd e2 60 a8 17 84 5b 37 e7 1b 2e ea 40 41 27 66 ..`...[7....@A'f 02e0 6b 9a cc 25 71 04 21 be fa dc 87 e2 3c ee 24 2d k..%q.!.....<.$- 02f0 f9 3b 95 19 08 b5 7b 55 67 70 23 8b a8 a0 0a db .;....{Ugp#..... 0300 df f2 cf f2 6b 26 96 66 73 ce e2 77 ec 83 de 9f ....k&.fs..w.... 0310 b0 f2 2e 91 f1 77 9d a9 61 35 22 57 31 68 86 60 .....w..a5"W1h.` 0320 9f 0e a4 98 71 97 b3 d9 fa a9 0c 3a 24 e6 d0 df ....q......:$... 0330 08 cf 04 a9 37 9c 97 8c 4e 2c 80 c4 52 d9 2a 9a ....7...N,..R.*. 0340 ec b2 0b 7b f2 1e 7a 47 86 34 3c 50 c6 94 c4 96 ...{..zG.4<P.... 0350 7a 33 f1 90 d2 9f 24 3f 58 a2 6d e7 82 53 76 84 z3....$?X.m..Sv. 0360 37 6c 38 32 72 61 2b 82 46 41 d2 63 b3 70 38 e0 7l82ra+.FA.c.p8. 0370 e6 c1 7f 89 1c 4e ce 8f c2 e1 b0 0d f1 d4 bc b4 .....N.......... 0380 02 04 2e cb 50 eb c6 1a b3 c0 58 9a 34 d0 13 1c ....P.....X.4... 0390 fe f2 90 98 2b ba be 73 2b 91 4a ea 74 f9 09 bd ....+..s+.J.t... 03a0 35 c5 b6 3f cc ab 0c 2e 89 e7 1b 50 62 7d 98 80 5..?.......Pb}.. 03b0 d2 85 53 bc 00 e8 08 f9 39 27 ee f3 71 90 82 ad ..S.....9'..q... 03c0 5f 5e 54 3b 13 73 7a 9b b6 be f0 33 53 05 42 2b _^T;.sz....3S.B+ 03d0 8a 2d 7a 81 af 3f d3 f1 a9 87 b7 cd b9 e3 42 8c .-z..?........B. 03e0 27 e7 b7 7b 02 87 19 6e f6 b1 5c 3d c7 92 16 d5 '..{...n..\=.... 03f0 fd 8f 6a 74 be 85 ba 38 db e9 a0 e8 95 41 95 17 ..jt...8.....A.. 0400 98 99 ce e7 cf 73 3e 63 f9 82 7d 26 60 12 0f eb .....s>c..}&`... 0410 fa db 04 43 0a b2 dd 8a 80 5f 26 b4 9b a1 84 70 ...C....._&....p 0420 51 11 9f 76 6b 5b 55 1b 58 8e 37 57 15 64 61 fc Q..vk[U.X.7W.da. 0430 ce c8 1f 08 af 4e 90 21 57 40 fe e4 1d 1d 31 9d [email protected]. 0440 69 98 91 0f 4b 7c 31 33 f7 b1 4d 95 ac b8 2d 22 i...K|13..M...-" 0450 5e fa f4 ba 3b da 8c a3 01 d6 a5 38 8a 22 ff 68 ^...;......8.".h 0460 f3 bf 95 6d e9 84 c7 03 d5 95 5a 58 99 aa c2 dd ...m......ZX.... 0470 fa 60 cc 60 28 9f 15 74 4f 85 e2 63 bb 5e b1 36 .`.`(..tO..c.^.6 0480 01 4b 8e 75 d2 62 8c 4e 54 16 a3 bd 6c e8 a0 9b .K.u.b.NT...l... 0490 82 63 49 dc 76 7e 31 62 86 e5 c0 d2 e2 bf 40 ae .cI.v~1b......@. 04a0 3a e4 60 02 40 d0 e2 a4 1f a3 6b 06 d4 39 12 ac :.`[email protected].. 04b0 71 5e 5c 07 f9 0a 9a d7 79 70 43 89 45 71 b4 ac q^\.....ypC.Eq.. 04c0 19 42 0d d6 06 61 cd 80 ef 2d 27 e8 36 6f e0 11 .B...a...-'.6o.. 04d0 b2 bc ca 5f 53 5d 35 ab 20 0f 68 8b 28 9c af 3e ..._S]5. .h.(..> 04e0 16 a0 03 14 08 38 6c 9d 32 58 b2 dd 72 03 d0 20 .....8l.2X..r.. 04f0 26 91 d6 ae aa 9b 2b 30 1f a6 53 8c 62 28 6c 6c &.....+0..S.b(ll 0500 a3 7e b8 7e 4d cc d2 ce 7b 24 7e 31 d3 3a 5d 04 .~.~M...{$~1.:]. 0510 57 5c 20 89 9a 36 c2 0f 3b 8d 07 ea 89 89 d6 78 W\ ..6..;......x 0520 68 99 ed 62 95 0c be d6 d3 fd 96 48 3d 90 dc 3c h..b.......H=..< 0530 2f 04 74 f5 49 60 48 9b fc 1a 6c f1 71 6e 20 94 /.t.I`H...l.qn . 0540 9c 86 92 ac 59 56 29 ee 96 bc 3f 31 bb b9 f1 07 ....YV)...?1.... 0550 47 af 83 81 e3 aa 73 81 df 22 a1 21 95 1b ed 93 G.....s..".!.... 0560 e0 88 61 11 ea c1 2b 16 85 65 2a 74 66 b7 b8 07 ..a...+..e*tf... 0570 74 ef 9a 7d 31 56 a2 09 f1 0e ae ab 2f bb e0 c7 t..}1V....../... 0580 f2 97 82 8b 8d 35 a2 be 05 9e a1 b9 c5 f6 fc 2a .....5.........* 0590 83 38 38 10 6c 28 02 dd 15 63 90 59 6c ef 0a e1 .88.l(...c.Yl... 05a0 7c bf 98 1d 6e a6 87 55 |...n..U No. Time Source Destination Protocol Length Info 22297 259.268756 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=308070 Ack=5995 Win=1002 Len=1448 TSval=600064 TSecr=730075 Frame 22297: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 308070, Ack: 5995, Len: 1448 Data (1448 bytes) 0000 96 ba b8 37 b0 e4 c9 15 63 9d c1 62 f6 bc 29 70 ...7....c..b..)p 0010 74 9a bc e1 92 bf 06 67 bb 35 70 44 27 37 e8 28 t......g.5pD'7.( 0020 70 7c b1 b2 91 01 6a 99 aa 20 1b 28 cc 33 14 80 p|....j.. .(.3.. 0030 ee fb 2e 81 ee 3d 2a 88 e7 fd 6c da 66 33 a6 72 .....=*...l.f3.r 0040 cf 6f 4c 20 4c c2 be b3 65 32 39 a8 8a c2 7f 3a .oL L...e29....: 0050 60 5e 85 da 5d 8d 6d a4 54 21 6e a0 93 17 67 05 `^..].m.T!n...g. 0060 db 54 4d 50 fe 62 f6 a9 13 f1 bd 9c 69 bb 70 22 .TMP.b......i.p" 0070 ce 3a e3 9b 8c 34 8f 1e b9 63 68 3b 85 9b 25 d9 .:...4...ch;..%. 0080 7a eb fa bd cf 00 b8 b9 f6 d1 51 dd 42 3b c4 8d z.........Q.B;.. 0090 62 a1 8e ff a6 3d 68 5e 5a 0a ff a6 f2 21 a2 47 b....=h^Z....!.G 00a0 b4 ad b9 e3 e4 7f e6 73 29 7c 46 a0 9a 9d ee f2 .......s)|F..... 00b0 f0 c2 57 44 a1 f1 95 42 ff d8 ad 33 5f eb 4c 9a ..WD...B...3_.L. 00c0 f9 d9 0b d9 64 7c 03 fd d6 36 d0 76 6e 12 0a 33 ....d|...6.vn..3 00d0 a2 33 7a 37 01 49 e6 e7 f5 b3 26 e8 61 14 f6 e4 .3z7.I....&.a... 00e0 3a 86 cf e2 93 c3 b7 de 15 3b e0 b5 84 40 92 cb :........;...@.. 00f0 27 da e1 1c ce eb 66 9e f1 45 9b e1 3a 29 75 00 '.....f..E..:)u. 0100 db 86 f7 18 91 a6 dc 21 3d 4d 62 a7 fe 84 a8 93 .......!=Mb..... 0110 1a aa a5 db 1a fd e8 f9 43 b5 8c 78 11 fc 83 0a ........C..x.... 0120 cd 73 c5 8a cf f7 ed 74 d6 98 7a 5b fe cb 81 e5 .s.....t..z[.... 0130 5b 9a b4 60 d3 6e d6 ce 7d a6 db 00 09 89 3d 62 [..`.n..}.....=b 0140 6c 74 5c c9 ba 2a b5 14 23 a4 4c 08 5f dc 40 c6 lt\..*..#.L._.@. 0150 79 4e 77 3f 45 70 45 25 c7 9d e0 68 e1 f0 cf e1 yNw?EpE%...h.... 0160 d6 a4 f5 53 39 a0 50 4b a3 5e 29 16 06 2c 95 3b ...S9.PK.^)..,.; 0170 8b 86 9f 93 e7 8d 0d a0 1c 96 22 12 75 c6 dc 59 ..........".u..Y 0180 64 fa 8e 92 22 5e 88 a8 f2 0f 53 c6 fb fd 86 8c d..."^....S..... 0190 96 31 5a 5c eb 9c 7d a8 4c b5 df a4 3a 3d 8d d0 .1Z\..}.L...:=.. 01a0 e6 89 51 56 c6 4a dd 7a 14 4f 9c bf 8e 43 7e 57 ..QV.J.z.O...C~W 01b0 e2 a0 a9 94 98 1e 96 f0 aa ca 87 b7 66 c2 e2 a6 ............f... 01c0 3e da 69 02 be b6 3f cf 6a de b4 58 22 24 c1 1d >.i...?.j..X"$.. 01d0 74 12 bc 9c ba 4c ef 2a 1a a2 22 e9 07 19 52 c7 t....L.*.."...R. 01e0 31 a7 ad 7a 01 f8 eb 51 91 ef 21 07 59 0a f6 44 1..z...Q..!.Y..D 01f0 b5 67 ba 53 1c 0c b2 9b 91 e5 9c af c2 e5 40 62 .g.S..........@b 0200 28 cc e7 d4 a4 06 62 84 fe ff 69 29 20 5e fc 27 (.....b...i) ^.' 0210 44 e8 e8 af 40 7f 9c 82 98 7d c3 46 bf 6d a8 34 D...@....}.F.m.4 0220 f4 df f8 29 23 40 3d 06 68 67 8e 69 3f 2f 18 40 ...)#@=.hg.i?/.@ 0230 6c 43 b3 4c 53 e0 86 95 d1 c7 20 8d 51 6e 51 c5 lC.LS..... .QnQ. 0240 d2 43 10 38 b3 a5 89 4c 0a a7 82 ab 23 a0 b2 eb .C.8...L....#... 0250 c7 6c 25 8b bd 00 0a 4a ef e3 39 4c e0 15 c9 ee .l%....J..9L.... 0260 59 4d 52 71 9f 0a c9 6d 2f 59 a6 ad 14 ff 14 86 YMRq...m/Y...... 0270 7f f2 da 8b 61 5c 42 55 0d c4 ef ba 2e eb 8c 5b ....a\BU.......[ 0280 7b 8a 28 d4 cd 3f 57 03 06 0e 5f 18 35 7d 32 19 {.(..?W..._.5}2. 0290 95 95 0a 8b 64 d6 3c 88 72 70 c0 1f dd db 46 33 ....d.<.rp....F3 02a0 b7 53 3a 5f c5 7c f2 57 cd 62 4e e8 ec dc ab 00 .S:_.|.W.bN..... 02b0 b7 88 3d d7 50 18 a6 5d 6e 20 47 0a 88 ff 7e a0 ..=.P..]n G...~. 02c0 1a 1f 4c 43 9e 7d cb b0 f3 8c a2 6b ba 7e 03 b9 ..LC.}.....k.~.. 02d0 76 60 76 14 48 75 a2 24 e9 b7 b6 b5 c7 17 27 d5 v`v.Hu.$......'. 02e0 ef 78 2d f5 22 a0 fa 00 3d 50 f1 03 31 56 df 2b .x-."...=P..1V.+ 02f0 db 20 ea 6a ae ee c4 21 d6 0a 23 c8 ca fd b1 4c . .j...!..#....L 0300 d5 70 ce 0d 8f 20 70 d1 46 9b 94 c8 9a 7b bb e0 .p... p.F....{.. 0310 af 6b ad 69 c0 01 02 45 62 bd d2 6c d6 04 01 f0 .k.i...Eb..l.... 0320 88 e3 1f d0 a1 5d 06 37 df 85 22 5c 9f 81 d0 35 .....].7.."\...5 0330 fc 3b c5 8c 4a ad eb 30 e9 9e 1c dd 66 7b db 0d .;..J..0....f{.. 0340 25 42 b0 04 33 2d 2a 24 af 58 09 ce db b7 c4 7e %B..3-*$.X.....~ 0350 fa 4c 5d f3 21 98 63 6d c5 a9 12 9e 07 96 51 f2 .L].!.cm......Q. 0360 c7 ad 02 40 08 ab 93 f2 73 cf c8 72 3d e4 78 08 [email protected]=.x. 0370 4b 87 af 99 28 e4 96 7a b4 9b 59 92 fa 6b 4a 97 K...(..z..Y..kJ. 0380 75 2b 3d 2b dc 4d 15 10 a8 31 82 a8 3c fe 4f 31 u+=+.M...1..<.O1 0390 63 d8 60 06 bb ef dd 2f 54 f0 ee 6d 93 73 c5 af c.`..../T..m.s.. 03a0 a8 dd 1e ef 6f 01 fd dd 31 a9 aa 3b 06 45 48 2c ....o...1..;.EH, 03b0 d3 81 d7 72 b2 1a ff 5b 3c b9 ee e1 64 2e 1c e4 ...r...[<...d... 03c0 96 9f 56 ac a4 a2 80 56 eb ac c0 ba bb 7f 4e d3 ..V....V......N. 03d0 13 5a b0 9f da 9b d5 7d 0f 34 ff e0 e8 4a 68 b5 .Z.....}.4...Jh. 03e0 fe d0 f6 ef 03 f0 e7 11 81 54 5c 0f 3e 01 7b 10 .........T\.>.{. 03f0 aa 1c 5e ed fe 71 db d7 71 cb 8f fb cb bc 44 d5 ..^..q..q.....D. 0400 39 a9 8f ca 85 18 db 1d 09 f7 7b 88 7a cc 6e 44 9.........{.z.nD 0410 93 12 6d ec fb d4 ef 40 f5 50 e1 9a d0 b0 f3 7b [email protected].....{ 0420 4e 6a 21 f5 c1 c4 81 47 b6 6b d1 c2 f3 1d 64 76 Nj!....G.k....dv 0430 59 e7 e1 2f 6c 58 ba dc c5 ef 9c d0 30 f1 1a 30 Y../lX......0..0 0440 0b ce a1 6e ad b9 36 22 bc 44 c9 7d fd 32 1c 7b ...n..6".D.}.2.{ 0450 78 1d 9f 07 fc 9f cb d9 49 ce a4 57 e8 55 e8 6a x.......I..W.U.j 0460 f3 13 17 47 aa 10 43 0c cc bb 88 b9 ee 6c cc 05 ...G..C......l.. 0470 2d ba c3 98 57 70 22 6a 8a a7 b5 03 fa 89 16 5f -...Wp"j......._ 0480 27 d1 74 ca 5b 8b c2 79 cd 95 85 28 23 0c eb d2 '.t.[..y...(#... 0490 b1 2c 2f 82 a6 a8 a8 ee 76 da 8f a3 3a 20 a9 12 .,/.....v...: .. 04a0 7d c2 71 94 7f ac 42 a2 57 a9 e0 15 91 83 a0 4f }.q...B.W......O 04b0 b1 6c e9 0d 60 f8 eb 7f d0 bc e3 a5 fd 0a 97 3e .l..`..........> 04c0 c6 bc 05 15 06 a1 6e 04 1c d8 48 a3 13 4a e8 16 ......n...H..J.. 04d0 03 1a 9f 72 e7 7d bd 4c 97 1a af a3 17 4c 62 cc ...r.}.L.....Lb. 04e0 3c a0 84 ce d6 62 78 1c b2 22 90 da 82 2e 76 9f <....bx.."....v. 04f0 14 b5 f0 d9 aa a0 97 a8 ec 76 68 83 47 97 ce 03 .........vh.G... 0500 16 ae 8b e6 dd e0 8b 92 5c 6f d5 1b 3a b5 de 5b ........\o..:..[ 0510 15 74 61 f3 09 30 12 30 40 8f 9c ca d5 ac 3c cf .ta..0.0@.....<. 0520 0e 72 22 d3 7d 2b 95 67 37 10 95 ca f1 e2 44 16 .r".}+.g7.....D. 0530 f8 70 c5 6c 79 40 21 c1 a3 60 3a e9 1e 4d 7d a3 .p.ly@!..`:..M}. 0540 c2 36 44 f1 b0 7e b6 bc 54 68 3a 69 05 a0 5b 1a .6D..~..Th:i..[. 0550 9b e6 6b 02 55 30 1f c7 92 c4 4a c6 b8 89 33 e9 ..k.U0....J...3. 0560 49 81 1e d7 9d 77 d3 11 4d f0 29 13 a3 f3 8e 3f I....w..M.)....? 0570 f1 47 b6 8d 0f 8c 5d 08 b8 30 cb 48 2f a8 44 25 .G....]..0.H/.D% 0580 4b 14 08 51 2d df f0 b4 28 fc e2 74 74 98 99 e8 K..Q-...(..tt... 0590 cc df cd 30 57 d4 a4 9b 07 94 3b a8 6c 7b a2 27 ...0W.....;.l{.' 05a0 de 83 5f 90 75 81 1f 71 .._.u..q No. Time Source Destination Protocol Length Info 22298 259.268852 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=309518 Ack=5995 Win=1002 Len=1448 TSval=600064 TSecr=730075 Frame 22298: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 309518, Ack: 5995, Len: 1448 Data (1448 bytes) 0000 38 19 61 3c b5 49 22 c6 a8 b9 e7 91 05 ec 2c 60 8.a<.I".......,` 0010 26 c3 d3 5f 40 d4 79 9e 35 a0 7d 5a e2 71 2e d3 &[email protected].}Z.q.. 0020 c6 4f 1b f0 e3 20 3b 6c ae 25 09 d4 c6 17 92 75 .O... ;l.%.....u 0030 02 23 3d 85 a5 2f df b5 39 b0 02 d8 79 0d 10 b7 .#=../..9...y... 0040 4b 43 37 1c a9 76 0c 1a 53 8d 7f 84 4f 2d 97 f0 KC7..v..S...O-.. 0050 17 fc 57 9d 3d 81 aa 35 ab 27 93 d5 c9 6d f2 4b ..W.=..5.'...m.K 0060 c0 9f 9b 99 59 43 58 d0 8d b5 29 14 d5 57 25 70 ....YCX...)..W%p 0070 77 9f ed c5 fd 7a a9 30 25 6b 78 f0 89 ff 59 b5 w....z.0%kx...Y. 0080 d3 c2 fe 9e c4 ab 26 32 9e cf 98 9f f1 65 18 9c ......&2.....e.. 0090 c6 b5 fa 3d 81 45 f3 dd 28 93 50 c0 79 82 91 88 ...=.E..(.P.y... 00a0 41 3f 0b 7a e0 ff 55 e5 68 39 3c c0 bb 34 6e b0 A?.z..U.h9<..4n. 00b0 cc 89 5e 6d 03 41 ae ff 34 3a ed cd 53 90 dd 08 ..^m.A..4:..S... 00c0 c7 93 e1 56 1b d0 a8 9d 81 19 8d 3d 82 f9 a3 18 ...V.......=.... 00d0 b2 c1 01 9b 9e 5d 88 e7 13 de d3 35 61 38 32 c1 .....].....5a82. 00e0 98 9a 70 f4 6c c5 12 35 38 3a 89 09 f3 74 b3 b6 ..p.l..58:...t.. 00f0 26 a2 84 46 ef fc 03 a0 52 fa 9c 15 d9 74 33 65 &..F....R....t3e 0100 11 0b 63 09 71 19 85 5e 34 27 68 f8 b0 f2 7d 5d ..c.q..^4'h...}] 0110 c6 df 7d a5 52 7a 0b 66 3a ef 81 a4 b9 bb ad b7 ..}.Rz.f:....... 0120 3e 28 c5 fd 54 54 06 23 ac 32 3f d4 17 9f b2 e0 >(..TT.#.2?..... 0130 f4 86 45 30 ab bb ee b9 8f 8f 55 37 c1 3e 06 0e ..E0......U7.>.. 0140 e7 2f cc be 86 0e 76 17 db 04 38 ce 68 f3 af b6 ./....v...8.h... 0150 92 00 82 81 0f f5 52 40 2e 46 0e 54 03 15 88 ce [email protected].... 0160 8f 14 3b 37 84 fa e0 ae df c1 91 0d 2f 93 2b 43 ..;7......../.+C 0170 e1 1a 3d 50 1b 93 40 83 ff fd 97 5f 02 fd a2 f9 ..=P..@...._.... 0180 f5 cf 5b 33 c3 1d 3a 05 96 61 59 d1 1d bf 82 eb ..[3..:..aY..... 0190 95 c7 c3 b9 91 2c cc d2 2b 34 57 87 85 b9 b0 ce .....,..+4W..... 01a0 dd 66 f3 63 f7 41 af 5b 36 e9 b2 f0 e1 05 5d 7e .f.c.A.[6.....]~ 01b0 ce 59 45 45 14 61 a0 33 a3 5a bb b2 a7 ac 92 70 .YEE.a.3.Z.....p 01c0 e7 da a2 ed 08 c0 e1 b1 cd 9b 03 f8 ca 22 bd 3a .............".: 01d0 28 f9 73 fc b3 99 9e 81 78 78 7b 1b a0 98 a9 4e (.s.....xx{....N 01e0 e0 b8 2a 32 96 18 63 6e 7d af 09 bf 63 18 30 71 ..*2..cn}...c.0q 01f0 f2 a2 2a 2d ef 8a cd 63 a5 cc ea e0 ec 26 33 c2 ..*-...c.....&3. 0200 19 a1 55 4d 8e d0 8f 6c fa bc a7 91 2b 7f f2 74 ..UM...l....+..t 0210 77 16 d7 51 e6 dd 4f f2 07 af e6 8e 48 66 6d fa w..Q..O.....Hfm. 0220 98 c6 59 60 85 19 15 82 c9 50 98 bb 1e f5 a8 23 ..Y`.....P.....# 0230 21 e9 77 2a dd 96 c7 bc c4 97 9a 5c c0 0c b1 1c !.w*.......\.... 0240 62 2b 24 1d ef b6 80 8d 49 d2 3e 7a b1 7d f5 9d b+$.....I.>z.}.. 0250 16 5d 1d d2 8a f7 31 ab cf 43 3f e5 97 94 4a 22 .]....1..C?...J" 0260 f7 cd 4f d4 c0 0f 7d 17 26 8f 69 42 2a be dd 02 ..O...}.&.iB*... 0270 1a 6e 32 83 39 71 d6 b2 ca 94 8b 4a d1 d3 dd 6e .n2.9q.....J...n 0280 5a d8 66 66 a8 2c fd 3e 3e bc 9c 75 1f 84 f8 0c Z.ff.,.>>..u.... 0290 b1 5e db 02 17 1e 8b fc f2 cc e0 5c 28 11 03 27 .^.........\(..' 02a0 8a 74 4d 3f 50 72 43 2d e7 e4 d0 72 37 9d 93 6f .tM?PrC-...r7..o 02b0 50 1f 97 f9 e0 83 20 a5 25 a7 d5 98 e4 0d 95 90 P..... .%....... 02c0 f9 13 82 7d b7 6c 0b 6a 4b 79 58 d1 99 50 d2 99 ...}.l.jKyX..P.. 02d0 ce 65 38 83 e0 00 3f 58 96 fa 79 52 44 c2 78 3d .e8...?X..yRD.x= 02e0 a6 13 5a 9b 0b 9b 5d 1e 3e 56 c4 3c 34 b1 c9 e0 ..Z...].>V.<4... 02f0 d8 67 af 2e c2 6f e2 f3 50 cd 08 aa 99 f8 f8 33 .g...o..P......3 0300 9c 6c 15 78 fd f3 1f 74 0a 5b 43 71 7c a0 76 29 .l.x...t.[Cq|.v) 0310 ae ce 94 bf 7d 88 1c d6 a6 cd 73 d2 80 3a 4e b5 ....}.....s..:N. 0320 f0 c5 f2 fd 1f ae 63 7e a3 47 8d 92 48 64 0e 28 ......c~.G..Hd.( 0330 0c eb 52 dc f7 d7 77 31 60 3f f2 60 28 38 92 b8 ..R...w1`?.`(8.. 0340 47 e4 76 88 28 2c 2f b3 b1 f5 fa 91 96 ac 99 8c G.v.(,/......... 0350 d8 73 e2 76 eb 03 c5 08 ca 4b 7e 6b 86 00 71 4b .s.v.....K~k..qK 0360 23 47 4b 07 c5 ed a4 27 cc f3 f5 8b 27 ab 03 9a #GK....'....'... 0370 40 93 3d 68 12 f9 9c fc 33 3e 64 f6 48 41 9e 6d @.=h....3>d.HA.m 0380 a2 6f c6 9e 9a 40 9d 5e e8 3e 52 53 8f 03 33 a3 .o...@.^.>RS..3. 0390 c0 28 fe 27 1f 11 58 81 c2 d7 78 1e 29 e7 91 ed .(.'..X...x.)... 03a0 0f 89 d9 e2 e8 fc 54 72 be db 2e 94 cf cf 9a e3 ......Tr........ 03b0 4a b8 75 0e 82 81 46 43 29 72 45 de 55 24 b1 7b J.u...FC)rE.U$.{ 03c0 8e 27 bd 79 49 e4 05 2a 71 15 b1 2a 40 53 e4 90 .'.yI..*q..*@S.. 03d0 78 9e 0e 72 6c 9c 89 e4 02 ce 5f 68 19 51 e3 72 x..rl....._h.Q.r 03e0 e3 24 65 31 71 1b 7a 89 b4 29 73 45 5f 1f 93 c2 .$e1q.z..)sE_... 03f0 28 36 5d e4 53 07 63 64 03 fb 55 ea 7c f4 02 47 (6].S.cd..U.|..G 0400 f8 a8 50 17 eb ca 08 6f 4b d0 1b e9 9d 8f c4 cf ..P....oK....... 0410 27 13 4e c6 0f d2 c9 2a f6 7e e9 f8 9e 86 19 7c '.N....*.~.....| 0420 2a bc 0f 2d bd e8 1b 02 ab fc ad 77 e8 3a ac f0 *..-.......w.:.. 0430 80 1a 7a c7 0d 54 32 c6 08 42 d9 af b5 a1 1f 6d ..z..T2..B.....m 0440 db 1d f1 33 e8 51 17 ba 3f f7 eb 89 dd d8 38 1c ...3.Q..?.....8. 0450 ab 0e 9a 8a 44 11 c8 7b c3 95 61 db 1a 17 ba c3 ....D..{..a..... 0460 13 6e 22 3e 20 6e 4f a3 96 02 03 f3 e4 8a a6 45 .n"> nO........E 0470 8c 80 76 05 ed 05 c9 b0 90 54 7a 4a 20 60 81 9d ..v......TzJ `.. 0480 98 ff 60 e7 e9 e0 4c 6a f6 fa 67 02 45 bd 3c e0 ..`...Lj..g.E.<. 0490 80 47 df 14 43 15 6c f1 9d d7 f7 44 44 59 b1 71 .G..C.l....DDY.q 04a0 7c 98 f6 af 30 ed 2d f0 31 77 3d 84 85 b5 4c 13 |...0.-.1w=...L. 04b0 64 54 04 ae 58 23 70 9d 00 ab 21 77 1b 06 c0 08 dT..X#p...!w.... 04c0 82 5b 36 50 38 f3 43 95 ce ac 3c 13 59 41 3a 33 .[6P8.C...<.YA:3 04d0 fd b5 25 d2 37 5e ca 67 26 b7 64 12 60 83 4c 08 ..%.7^.g&.d.`.L. 04e0 08 22 cd d8 d3 4c fa ad 57 c9 17 bb 44 3b 68 7d ."...L..W...D;h} 04f0 2b e0 dc e3 90 4e de f2 86 8a 6b a1 07 17 95 78 +....N....k....x 0500 f5 58 13 be 85 da 1c f5 10 48 e7 a6 a1 b9 df 92 .X.......H...... 0510 3b 65 bd 2b 60 dd 46 2e 0d 1f fd 92 bf 96 5a da ;e.+`.F.......Z. 0520 d2 df b3 cf 55 5f ac a0 a0 e3 b6 26 f7 53 de 1b ....U_.....&.S.. 0530 33 e7 1f 3b 4f 58 a8 f6 ff e8 06 a7 32 15 62 75 3..;OX......2.bu 0540 d1 0d ec 49 6e d2 cd b6 dc 7a ac c2 27 00 36 08 ...In....z..'.6. 0550 97 b1 9f f5 70 5f d3 7e 6f ed 47 38 d1 77 e5 c6 ....p_.~o.G8.w.. 0560 bc 9a 9d 07 70 ab 8c 51 7f 13 03 c8 98 97 e7 c3 ....p..Q........ 0570 4b 3d 54 29 a0 45 3d ca fa 99 de 9a 81 5a e1 6a K=T).E=......Z.j 0580 fa d8 96 45 ad aa af ed 1a 08 33 c6 56 20 48 f4 ...E......3.V H. 0590 d9 9a 9f 14 2b cf 98 5c 16 d8 0a 9b 41 0f 98 e6 ....+..\....A... 05a0 2b e4 fc ea c1 eb 0b 84 +....... No. Time Source Destination Protocol Length Info 22299 259.268891 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=5995 Ack=308070 Win=65535 Len=0 TSval=730075 TSecr=600064 Frame 22299: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5995, Ack: 308070, Len: 0 No. Time Source Destination Protocol Length Info 22300 259.268943 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49396 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 22300: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49396 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 22301 259.268980 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=5995 Ack=310966 Win=65535 Len=0 TSval=730075 TSecr=600064 Frame 22301: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5995, Ack: 310966, Len: 0 No. Time Source Destination Protocol Length Info 22302 259.269023 192.168.10.1 192.168.10.203 TCP 311 34433 > cds [PSH, ACK] Seq=310966 Ack=5995 Win=1002 Len=245 TSval=600064 TSecr=730075 Frame 22302: 311 bytes on wire (2488 bits), 311 bytes captured (2488 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 310966, Ack: 5995, Len: 245 Data (245 bytes) 0000 63 71 5d dd ac 41 4e a7 29 f5 60 dd 3f ce 2e f2 cq]..AN.).`.?... 0010 c2 44 b2 45 de e2 2d 2d 7e 74 ec 62 43 86 97 0d .D.E..--~t.bC... 0020 4e 4a 71 87 e5 9c d2 80 cb 18 f0 e8 7d ac d8 b2 NJq.........}... 0030 a3 f3 89 77 b5 73 23 01 6a b3 bf 6a 0d 96 37 9b ...w.s#.j..j..7. 0040 aa 60 c2 e3 f1 97 5b 67 d4 3a f5 0e b2 87 43 8d .`....[g.:....C. 0050 b4 fd 42 aa c9 f4 9f d4 4f f9 3d 81 fc 0f 5d 58 ..B.....O.=...]X 0060 8c 81 a0 75 ad a4 c6 97 ad 03 d3 68 1b 8b c5 6a ...u.......h...j 0070 6b 1d 39 c0 10 8c 94 80 9c 77 22 3f 76 26 71 28 k.9......w"?v&q( 0080 8f d9 de 66 e6 7b 58 34 46 cd 43 7e 89 cb f7 c0 ...f.{X4F.C~.... 0090 2d 5d 38 64 70 bf 4d c7 a3 83 67 d1 78 38 04 33 -]8dp.M...g.x8.3 00a0 b4 b5 f4 94 75 9d cb b6 96 76 93 b6 b6 6b 98 63 ....u....v...k.c 00b0 eb 66 f1 19 2a 24 6c 50 14 5a be b3 ad 3b 57 04 .f..*$lP.Z...;W. 00c0 44 a1 a0 2c bb 6b 26 6b 74 6b 28 5f 81 95 c9 66 D..,.k&ktk(_...f 00d0 31 1a b9 6f bc 68 38 d9 d2 b3 77 d0 25 55 1a 68 1..o.h8...w.%U.h 00e0 d9 16 cf 6a 04 6b 54 1d 4a 0c 55 ce ae 4c 51 8e ...j.kT.J.U..LQ. 00f0 25 67 9d a3 0c %g... No. Time Source Destination Protocol Length Info 22303 259.315790 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 22303: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 22304 259.316395 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=5995 Ack=311211 Win=65290 Len=74 TSval=730076 TSecr=600064 Frame 22304: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 5995, Ack: 311211, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 f2 e8 f5 75 89 0f 97 75 e7 72 09 .... ...u...u.r. 0010 c9 fe d8 8b e3 5b a9 ab c9 ea 90 3a 4b a3 04 11 .....[.....:K... 0020 f3 64 96 91 1e 17 03 01 00 20 d9 8c 09 41 fd 5b .d....... ...A.[ 0030 b2 e8 4f 2b 46 c8 49 3b 7d e0 ed 8b 49 5f d0 d9 ..O+F.I;}...I_.. 0040 ac 55 07 2f 2b fb 6f 1c 6b d7 .U./+.o.k. No. Time Source Destination Protocol Length Info 22305 259.316526 192.168.10.1 192.168.10.203 TCP 903 34433 > cds [PSH, ACK] Seq=311211 Ack=6069 Win=1002 Len=837 TSval=600076 TSecr=730076 Frame 22305: 903 bytes on wire (7224 bits), 903 bytes captured (7224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 311211, Ack: 6069, Len: 837 Data (837 bytes) 0000 17 03 01 03 40 f1 23 ea 99 53 2f a0 84 f8 f3 68 ....@.#..S/....h 0010 49 f4 73 eb 6d 02 56 d0 8a 0e 5b 0d 70 6e 4d 06 I.s.m.V...[.pnM. 0020 43 51 d4 e1 8e 22 51 81 04 c5 66 17 de da d6 44 CQ..."Q...f....D 0030 e1 9c a7 72 ac 1b 41 1c d2 97 84 5a 58 5b ab e2 ...r..A....ZX[.. 0040 b9 13 22 da d3 a6 f4 fa 4a b8 c7 45 0e 35 aa 0e ..".....J..E.5.. 0050 6b 5d 20 0b f9 c4 40 21 cd 89 0d 0b ad 70 a2 b8 k] ...@!.....p.. 0060 34 fe 71 66 a5 3e cc 1f 5f a4 03 06 53 83 37 e1 4.qf.>.._...S.7. 0070 cc 32 37 71 4e 13 6a 98 0c f5 d3 d9 9a 46 f2 92 .27qN.j......F.. 0080 1b 51 7b 74 bb 3d cf 7f 07 e2 85 00 d7 78 99 45 .Q{t.=.......x.E 0090 78 39 a8 6d 18 eb e5 9b 25 35 27 08 95 51 e5 45 x9.m....%5'..Q.E 00a0 67 1c 52 f5 57 47 f1 1c 4f ca 32 a4 c2 82 d8 78 g.R.WG..O.2....x 00b0 4b c6 b4 25 91 41 e4 d7 1d c3 19 44 e5 f2 25 d4 K..%.A.....D..%. 00c0 78 c9 e1 5d 02 b8 e3 be c8 03 cb 69 eb 83 53 af x..].......i..S. 00d0 93 23 e7 93 23 fd d0 d3 ce 7c db 11 e5 fc 1f c3 .#..#....|...... 00e0 cc 32 c4 80 e8 71 fa 69 cc 9c 2a 65 e6 37 ab bf .2...q.i..*e.7.. 00f0 cb 9f bb b9 6e b1 ac 8d f3 f0 03 c6 fc b1 e8 e3 ....n........... 0100 cc d5 c9 ea f5 e7 76 c8 af 4e 27 16 af 75 78 a0 ......v..N'..ux. 0110 17 2c f4 6f 07 ea 77 d9 dd 13 ff a0 35 90 bf 48 .,.o..w.....5..H 0120 94 90 4c 84 ae 95 3a dc 60 63 6c 14 85 2d 66 b1 ..L...:.`cl..-f. 0130 2a 6e d2 f0 4c d5 6a c9 38 35 07 21 f2 92 a6 77 *n..L.j.85.!...w 0140 f7 14 d9 7f f7 65 2a d8 05 c2 db ac 8f 73 a1 1c .....e*......s.. 0150 55 82 bc 64 f8 e4 b4 59 de 09 a6 6c 95 61 82 85 U..d...Y...l.a.. 0160 27 49 c9 7a b1 f4 1c 3d c4 77 c3 47 f8 be de 9d 'I.z...=.w.G.... 0170 86 25 49 aa e5 4c 36 b1 d8 05 4b 17 42 de 56 59 .%I..L6...K.B.VY 0180 2f 55 c9 8f d8 ed cb 4b ab a0 7b 13 05 37 ef aa /U.....K..{..7.. 0190 a7 0e 87 94 8b 1b 5a b6 50 1c 08 5c a4 ca 1b 29 ......Z.P..\...) 01a0 48 fb 4b 06 88 3b f2 f4 cc 6d bb d4 9c bc 52 00 H.K..;...m....R. 01b0 d7 2b d5 7e 7b 6a 95 3a 93 82 e4 03 89 67 d9 e4 .+.~{j.:.....g.. 01c0 e8 09 d2 87 00 80 54 a9 0f 8a 49 e6 5a 02 79 b7 ......T...I.Z.y. 01d0 f6 2e d4 13 87 2e 53 3d c8 3d b2 3d 96 91 6e 7a ......S=.=.=..nz 01e0 ad b3 17 fb 75 9b fc 37 a5 25 73 a0 be 2d 6d 82 ....u..7.%s..-m. 01f0 0d ba c1 2b 10 57 43 3b 72 20 c4 75 a2 c6 da 10 ...+.WC;r .u.... 0200 11 61 8b 45 cf 20 2d 48 73 30 86 39 c5 1f 99 15 .a.E. -Hs0.9.... 0210 b4 8f a1 e9 21 03 ad dd a0 f7 ab b7 eb 3b de d8 ....!........;.. 0220 c9 f8 db 2b 57 74 22 78 44 ff 28 3f 3c bc 18 9f ...+Wt"xD.(?<... 0230 84 aa 07 d7 11 6e 10 d9 e0 31 ae 0a 5d fd 03 f8 .....n...1..]... 0240 4d ba 6f 77 f4 15 54 9f d7 27 6d 58 7d 1a 43 70 M.ow..T..'mX}.Cp 0250 15 90 9e 81 e1 2e ae 6e 13 75 cb fb 43 0e b4 45 .......n.u..C..E 0260 f8 f5 07 65 eb b4 f7 0c 57 eb b1 2a b5 8d bc ce ...e....W..*.... 0270 a7 e0 ad 0f e3 ae 7b e3 34 f1 34 94 4e f8 7b f8 ......{.4.4.N.{. 0280 93 18 5b 4f 32 50 69 cf d5 88 42 9d df 89 30 a1 ..[O2Pi...B...0. 0290 2e 3d 29 a6 6e 04 31 ee 74 18 1e 1e 39 ce 46 ee .=).n.1.t...9.F. 02a0 1e b6 3b cd 48 b5 b5 2b 59 39 e7 26 5d 14 62 6f ..;.H..+Y9.&].bo 02b0 a9 9f 6d ec 32 76 ef af 4b 1b cc 78 b2 76 77 c5 ..m.2v..K..x.vw. 02c0 d6 0c 27 ea 1b 74 3f 82 08 26 eb 5e b1 05 45 64 ..'..t?..&.^..Ed 02d0 d5 1d b8 f3 bc c9 8b 87 48 f4 91 68 3b 40 2b aa ........H..h;@+. 02e0 e9 87 a9 1d a3 9e 43 85 6c 97 ca e0 32 6e c3 8a ......C.l...2n.. 02f0 f2 9d 65 cf c4 75 0e b5 50 62 cc d2 93 c6 0f d2 ..e..u..Pb...... 0300 9c 49 8e b1 2d fa 72 7b df 2b 44 9a 0f 83 3f c6 .I..-.r{.+D...?. 0310 bc 08 28 5f eb 25 26 8d cb ee 9e f4 84 05 1d 80 ..(_.%&......... 0320 f9 a8 a6 f4 8e 6d 59 60 96 97 99 83 1b cd 56 c4 .....mY`......V. 0330 86 e2 43 8a c2 a0 49 0c 8e fa 60 ea 54 15 dd 61 ..C...I...`.T..a 0340 ab 8b bf 44 95 ...D. No. Time Source Destination Protocol Length Info 22306 259.319297 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=6069 Ack=312048 Win=64453 Len=74 TSval=730076 TSecr=600076 Frame 22306: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 6069, Ack: 312048, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 8b 30 35 96 5e a5 3c fc ba 64 ce .... .05.^.<..d. 0010 15 6f 6d 56 00 93 70 3b 30 54 51 f7 66 38 69 78 .omV..p;0TQ.f8ix 0020 5b 51 ec 92 53 17 03 01 00 20 5f 34 12 54 41 e6 [Q..S.... _4.TA. 0030 82 21 48 54 90 a0 26 ff 14 f3 99 ef 20 f2 0a a3 .!HT..&..... ... 0040 76 8f b3 8c 90 68 a4 d3 ea d2 v....h.... No. Time Source Destination Protocol Length Info 22307 259.321196 186.86.195.96 192.168.10.207 SMTP 100 C: MAIL FROM: <vaoutburst@xxxxxxxxxxxxxxxxxxxx> Frame 22307: 100 bytes on wire (800 bits), 100 bytes captured (800 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 186.86.195.96 (186.86.195.96), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 50660 (50660), Dst Port: smtp (25), Seq: 23, Ack: 170, Len: 46 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22308 259.321474 192.168.10.207 186.86.195.96 SMTP 110 S: 250 2.1.0 [email protected] OK Frame 22308: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 186.86.195.96 (186.86.195.96) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 50660 (50660), Seq: 170, Ack: 69, Len: 56 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22309 259.321523 186.86.195.96 192.168.10.207 TCP 60 50660 > smtp [ACK] Seq=69 Ack=226 Win=93214 Len=0 Frame 22309: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 186.86.195.96 (186.86.195.96), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 50660 (50660), Dst Port: smtp (25), Seq: 69, Ack: 226, Len: 0 No. Time Source Destination Protocol Length Info 22310 259.333372 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 22310: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 17977, Ack: 1292689, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22311 259.333406 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1292689 Ack=18019 Win=46384 Len=0 Frame 22311: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1292689, Ack: 18019, Len: 0 No. Time Source Destination Protocol Length Info 22312 259.334021 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 22312: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 56004, Ack: 364407, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 22313 259.342329 192.168.10.142 192.168.10.185 VNC 81 Authentication result Frame 22313: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 56031, Ack: 364407, Len: 27 Virtual Network Computing No. Time Source Destination Protocol Length Info 22314 259.342368 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=364407 Ack=56058 Win=64968 Len=0 Frame 22314: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 364407, Ack: 56058, Len: 0 No. Time Source Destination Protocol Length Info 22315 259.350292 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 22315: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 22316 259.350322 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 22316: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 22317 259.358219 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=312048 Ack=6143 Win=1002 Len=0 TSval=600087 TSecr=730076 Frame 22317: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 312048, Ack: 6143, Len: 0 No. Time Source Destination Protocol Length Info 22318 259.404649 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 22318: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 364407, Ack: 56058, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 22319 259.404686 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 22319: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 365667, Ack: 56058, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 22320 259.404716 192.168.10.185 192.168.10.142 VNC 1314 Authentication result Frame 22320: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 366927, Ack: 56058, Len: 1260 Virtual Network Computing No. Time Source Destination Protocol Length Info 22321 259.404744 192.168.10.185 192.168.10.142 VNC 370 Authentication result Frame 22321: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 368187, Ack: 56058, Len: 316 Virtual Network Computing No. Time Source Destination Protocol Length Info 22322 259.428447 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=56058 Ack=366927 Win=64240 Len=0 Frame 22322: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 56058, Ack: 366927, Len: 0 No. Time Source Destination Protocol Length Info 22323 259.428483 192.168.10.185 192.168.10.142 VNC 737 Authentication result Frame 22323: 737 bytes on wire (5896 bits), 737 bytes captured (5896 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 368503, Ack: 56058, Len: 683 Virtual Network Computing No. Time Source Destination Protocol Length Info 22324 259.432393 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=56058 Ack=368187 Win=64240 Len=0 Frame 22324: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 56058, Ack: 368187, Len: 0 No. Time Source Destination Protocol Length Info 22325 259.444196 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 22325: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 22326 259.445832 192.168.10.1 192.168.10.245 Syslog 314 LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 186.86.195.96 7x.x.x.3 50660 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="vaoutburst@xxxxxxxxxxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 22326: 314 bytes on wire (2512 bits), 314 bytes captured (2512 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 186.86.195.96 7x.x.x.3 50660 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default No. Time Source Destination Protocol Length Info 22327 259.450244 192.168.10.142 192.168.10.185 TCP 60 xrl > rfb [ACK] Seq=56058 Ack=369186 Win=63241 Len=0 Frame 22327: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 56058, Ack: 369186, Len: 0 No. Time Source Destination Protocol Length Info 22328 259.458382 192.168.10.142 192.168.10.185 VNC 86 Authentication result Frame 22328: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_48:43:a3 (00:21:9b:48:43:a3) Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.185 (192.168.10.185) Transmission Control Protocol, Src Port: xrl (1104), Dst Port: rfb (5900), Seq: 56058, Ack: 369186, Len: 32 Virtual Network Computing No. Time Source Destination Protocol Length Info 22329 259.462750 189.123.220.16 192.168.10.207 SMTP 93 C: MAIL FROM: <sophia.ryder@xxxxxxxxxxx> Frame 22329: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49396 (49396), Dst Port: smtp (25), Seq: 20, Ack: 313, Len: 39 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22330 259.462847 192.168.10.207 189.123.220.16 SMTP 103 S: 250 2.1.0 [email protected] OK Frame 22330: 103 bytes on wire (824 bits), 103 bytes captured (824 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49396 (49396), Seq: 313, Ack: 59, Len: 49 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22331 259.462939 189.123.220.16 192.168.10.207 TCP 60 49396 > smtp [ACK] Seq=59 Ack=362 Win=93078 Len=0 Frame 22331: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49396 (49396), Dst Port: smtp (25), Seq: 59, Ack: 362, Len: 0 No. Time Source Destination Protocol Length Info 22332 259.505829 192.168.10.185 192.168.10.142 TCP 60 rfb > xrl [ACK] Seq=369186 Ack=56090 Win=64936 Len=0 Frame 22332: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_48:43:a3 (00:21:9b:48:43:a3), Dst: Cisco_04:98:91 (00:0f:34:04:98:91) Internet Protocol Version 4, Src: 192.168.10.185 (192.168.10.185), Dst: 192.168.10.142 (192.168.10.142) Transmission Control Protocol, Src Port: rfb (5900), Dst Port: xrl (1104), Seq: 369186, Ack: 56090, Len: 0 No. Time Source Destination Protocol Length Info 22333 259.553726 186.86.195.96 192.168.10.207 TCP 60 50660 > smtp [FIN, ACK] Seq=69 Ack=226 Win=93214 Len=0 Frame 22333: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 186.86.195.96 (186.86.195.96), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 50660 (50660), Dst Port: smtp (25), Seq: 69, Ack: 226, Len: 0 No. Time Source Destination Protocol Length Info 22334 259.553762 192.168.10.207 186.86.195.96 TCP 60 smtp > 50660 [ACK] Seq=226 Ack=70 Win=65467 Len=0 Frame 22334: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 186.86.195.96 (186.86.195.96) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 50660 (50660), Seq: 226, Ack: 70, Len: 0 No. Time Source Destination Protocol Length Info 22335 259.553795 192.168.10.207 186.86.195.96 TCP 60 smtp > 50660 [FIN, ACK] Seq=226 Ack=70 Win=65467 Len=0 Frame 22335: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 186.86.195.96 (186.86.195.96) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 50660 (50660), Seq: 226, Ack: 70, Len: 0 No. Time Source Destination Protocol Length Info 22336 259.553832 186.86.195.96 192.168.10.207 TCP 60 50660 > smtp [ACK] Seq=70 Ack=227 Win=93214 Len=0 Frame 22336: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 186.86.195.96 (186.86.195.96), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 50660 (50660), Dst Port: smtp (25), Seq: 70, Ack: 227, Len: 0 No. Time Source Destination Protocol Length Info 22337 259.554087 192.168.10.1 192.168.10.245 Syslog 202 LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 186.86.195.96 7x.x.x.3 50660 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 22337: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 186.86.195.96 7x.x.x.3 50660 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 22338 259.566348 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 22338: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 22339 259.585471 192.168.10.1 192.168.10.245 Syslog 312 LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45273 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eyvpriceless@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 22339: 312 bytes on wire (2496 bits), 312 bytes captured (2496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45273 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 22340 259.639073 192.168.10.1 192.168.10.245 Syslog 309 LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49396 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="ezcracked@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 22340: 309 bytes on wire (2472 bits), 309 bytes captured (2472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:37 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49396 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 22341 259.818206 189.123.220.16 192.168.10.207 SMTP 60 C: QUIT Frame 22341: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49396 (49396), Dst Port: smtp (25), Seq: 59, Ack: 362, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22342 259.818305 192.168.10.207 189.123.220.16 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 22342: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49396 (49396), Seq: 362, Ack: 65, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22343 259.818387 192.168.10.207 189.123.220.16 TCP 60 smtp > 49396 [FIN, ACK] Seq=431 Ack=65 Win=65471 Len=0 Frame 22343: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49396 (49396), Seq: 431, Ack: 65, Len: 0 No. Time Source Destination Protocol Length Info 22344 259.818429 189.123.220.16 192.168.10.207 TCP 60 49396 > smtp [ACK] Seq=65 Ack=431 Win=93010 Len=0 Frame 22344: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49396 (49396), Dst Port: smtp (25), Seq: 65, Ack: 431, Len: 0 No. Time Source Destination Protocol Length Info 22345 259.818464 189.123.220.16 192.168.10.207 TCP 60 49396 > smtp [ACK] Seq=65 Ack=432 Win=93010 Len=0 Frame 22345: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49396 (49396), Dst Port: smtp (25), Seq: 65, Ack: 432, Len: 0 No. Time Source Destination Protocol Length Info 22346 259.851674 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 22346: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 22347 259.851705 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request) Frame 22347: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 22348 259.907048 188.161.220.86 192.168.10.207 SMTP 60 C: QUIT Frame 22348: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45273 (45273), Dst Port: smtp (25), Seq: 65, Ack: 368, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22349 259.907084 192.168.10.207 188.161.220.86 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 22349: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45273 (45273), Seq: 368, Ack: 71, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22350 259.907126 188.161.220.86 192.168.10.207 TCP 60 45273 > smtp [ACK] Seq=71 Ack=437 Win=93004 Len=0 Frame 22350: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45273 (45273), Dst Port: smtp (25), Seq: 71, Ack: 437, Len: 0 No. Time Source Destination Protocol Length Info 22351 259.907155 192.168.10.207 188.161.220.86 TCP 60 smtp > 45273 [FIN, ACK] Seq=437 Ack=71 Win=65465 Len=0 Frame 22351: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 188.161.220.86 (188.161.220.86) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 45273 (45273), Seq: 437, Ack: 71, Len: 0 No. Time Source Destination Protocol Length Info 22352 259.907190 188.161.220.86 192.168.10.207 TCP 60 45273 > smtp [ACK] Seq=71 Ack=438 Win=93004 Len=0 Frame 22352: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45273 (45273), Dst Port: smtp (25), Seq: 71, Ack: 438, Len: 0 No. Time Source Destination Protocol Length Info 22353 259.987451 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 22353: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 18019, Ack: 1292689, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22354 259.987489 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1292689 Ack=18061 Win=46363 Len=0 Frame 22354: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1292689, Ack: 18061, Len: 0 No. Time Source Destination Protocol Length Info 22355 259.995512 189.123.220.16 192.168.10.207 TCP 62 49402 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400 Frame 22355: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49402 (49402), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Length Info 22356 259.995583 192.168.10.207 189.123.220.16 TCP 62 smtp > 49402 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 Frame 22356: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49402 (49402), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 22357 259.995631 189.123.220.16 192.168.10.207 TCP 60 49396 > smtp [RST, ACK] Seq=65 Ack=432 Win=93010 Len=0 Frame 22357: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49396 (49396), Dst Port: smtp (25), Seq: 65, Ack: 432, Len: 0 No. Time Source Destination Protocol Length Info 22358 259.995713 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49396 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 22358: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49396 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 22359 260.084216 14.97.186.55 192.168.10.207 SMTP 72 C: EHLO wxkkbig.com Frame 22359: 72 bytes on wire (576 bits), 72 bytes captured (576 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13653 (13653), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 18 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22360 260.084368 192.168.10.207 14.97.186.55 SMTP 243 S: 250-mail.mydomain.com Hello [14.97.186.55] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 22360: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 14.97.186.55 (14.97.186.55) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 13653 (13653), Seq: 122, Ack: 19, Len: 189 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22361 260.084417 14.97.186.55 192.168.10.207 TCP 60 13653 > smtp [ACK] Seq=19 Ack=311 Win=93130 Len=0 Frame 22361: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 14.97.186.55 (14.97.186.55), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 13653 (13653), Dst Port: smtp (25), Seq: 19, Ack: 311, Len: 0 No. Time Source Destination Protocol Length Info 22362 260.084781 192.168.10.1 192.168.10.245 Syslog 270 LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13653 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 22362: 270 bytes on wire (2160 bits), 270 bytes captured (2160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13653 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" No. Time Source Destination Protocol Length Info 22363 260.084860 192.168.10.1 192.168.10.245 Syslog 276 LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13653 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 22363: 276 bytes on wire (2208 bits), 276 bytes captured (2208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13653 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELI No. Time Source Destination Protocol Length Info 22364 260.084954 192.168.10.1 192.168.10.245 Syslog 269 LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13653 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 22364: 269 bytes on wire (2152 bits), 269 bytes captured (2152 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13653 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 22365 260.085117 192.168.10.1 192.168.10.245 Syslog 285 LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13653 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 22365: 285 bytes on wire (2280 bits), 285 bytes captured (2280 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13653 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANC No. Time Source Destination Protocol Length Info 22366 260.085195 192.168.10.1 192.168.10.245 Syslog 276 LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13653 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 22366: 276 bytes on wire (2208 bits), 276 bytes captured (2208 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13653 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARY No. Time Source Destination Protocol Length Info 22367 260.085418 192.168.10.1 192.168.10.245 Syslog 270 LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13653 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 22367: 270 bytes on wire (2160 bits), 270 bytes captured (2160 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 14.97.186.55 7x.x.x.3 13653 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" No. Time Source Destination Protocol Length Info 22368 260.175124 189.123.220.16 192.168.10.207 TCP 60 49402 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0 Frame 22368: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49402 (49402), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Length Info 22369 260.175251 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49402 25 msg="Conn Begin" (SMTP-proxy-incoming-00) Frame 22369: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49402 25 msg="Conn Begin" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 22370 260.175324 192.168.10.207 189.123.220.16 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:48:12 -0400 Frame 22370: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49402 (49402), Seq: 1, Ack: 1, Len: 121 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22371 260.175364 189.123.220.16 192.168.10.207 TCP 60 49402 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0 Frame 22371: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49402 (49402), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0 No. Time Source Destination Protocol Length Info 22372 260.221680 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1605376256, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 22372: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22373 260.221703 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1605376256, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 22373: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22374 260.221717 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1605376256, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 22374: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22375 260.221729 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1605376256, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 22375: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22376 260.239375 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3474456832, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 22376: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22377 260.239398 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3474456832, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 22377: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22378 260.239411 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3474456832, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 22378: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22379 260.239424 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3474456832, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 22379: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22380 260.239897 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 22380: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 10669, Ack: 735883, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22381 260.239929 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=735883 Ack=10711 Win=46258 Len=0 Frame 22381: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 735883, Ack: 10711, Len: 0 No. Time Source Destination Protocol Length Info 22382 260.268020 188.161.220.86 192.168.10.207 TCP 60 45273 > smtp [RST, ACK] Seq=71 Ack=438 Win=93004 Len=0 Frame 22382: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 188.161.220.86 (188.161.220.86), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 45273 (45273), Dst Port: smtp (25), Seq: 71, Ack: 438, Len: 0 No. Time Source Destination Protocol Length Info 22383 260.268100 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45273 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 22383: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 188.161.220.86 7x.x.x.3 45273 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 22384 260.320602 192.168.10.203 151.59.106.108 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> Frame 22384: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 151.59.106.108 (151.59.106.108) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Length Info 22385 260.352273 189.123.220.16 192.168.10.207 SMTP 73 C: EHLO eqsldnoc.com Frame 22385: 73 bytes on wire (584 bits), 73 bytes captured (584 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49402 (49402), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 19 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22386 260.352472 192.168.10.207 189.123.220.16 SMTP 245 S: 250-mail.mydomain.com Hello [189.123.220.16] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK Frame 22386: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49402 (49402), Seq: 122, Ack: 20, Len: 191 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22387 260.352514 189.123.220.16 192.168.10.207 TCP 60 49402 > smtp [ACK] Seq=20 Ack=313 Win=93128 Len=0 Frame 22387: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49402 (49402), Dst Port: smtp (25), Seq: 20, Ack: 313, Len: 0 No. Time Source Destination Protocol Length Info 22388 260.353267 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=312048 Ack=6143 Win=1002 Len=1448 TSval=600335 TSecr=730076 Frame 22388: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 312048, Ack: 6143, Len: 1448 Data (1448 bytes) 0000 17 03 01 22 f0 ce 27 19 1f f4 f2 17 92 23 4d a0 ..."..'......#M. 0010 09 a9 eb bd ca d7 45 e8 4e 32 1c 15 96 83 66 16 ......E.N2....f. 0020 11 b3 08 77 b2 b9 c2 48 1a 57 5f ea c7 fc 6b 99 ...w...H.W_...k. 0030 c7 28 d7 2e f6 c1 a0 8d 71 ff 5d 52 18 29 bf 13 .(......q.]R.).. 0040 ce c5 14 52 fa 64 7b a6 74 57 b5 0d 9f 18 0a 17 ...R.d{.tW...... 0050 e9 05 76 ba fb a4 6a 49 44 3a 2d ed f9 08 2f c6 ..v...jID:-.../. 0060 24 5d be 40 d1 d6 76 7b fd 80 08 dc 20 40 35 fe $][email protected]{.... @5. 0070 02 c7 dd 0f d1 7c c7 1d 20 4c 1e 69 38 c3 af b4 .....|.. L.i8... 0080 70 b5 a9 9c 33 44 c6 ff 35 26 bd 92 7b 10 7f b5 p...3D..5&..{... 0090 b9 71 5e 94 0a d7 dd 8a 8e 40 79 93 e8 60 5e ed .q^......@y..`^. 00a0 3b 7a 86 85 16 a3 e1 6b 6a ca c3 c6 be 1f cd 7c ;z.....kj......| 00b0 9c 79 2a 67 ac eb f4 69 bf af 63 89 8e bf d9 1b .y*g...i..c..... 00c0 0f 2c bf 12 d1 93 0f ae 21 87 7b 11 0f 82 12 a1 .,......!.{..... 00d0 0b 9c b5 82 ad 1c 38 0b 3c e3 1a 9c 27 72 14 0f ......8.<...'r.. 00e0 22 73 d2 0e 52 75 87 57 10 2b a6 f8 54 28 b1 eb "s..Ru.W.+..T(.. 00f0 79 e2 5d 92 8c 80 d0 f5 e8 f8 8f 82 0a d2 70 ed y.]...........p. 0100 32 58 4a d3 49 59 6b 68 dc d8 16 21 69 e9 d7 38 2XJ.IYkh...!i..8 0110 ab 5c 85 0c 2a 2a 75 a9 0a c0 c3 ac b9 d0 37 37 .\..**u.......77 0120 cb 2d c4 f8 71 69 49 1b 59 d4 80 9c f3 16 54 0a .-..qiI.Y.....T. 0130 9e 0f ae 11 8a 90 a8 c3 56 ff 91 2d 1f 7b 3e 91 ........V..-.{>. 0140 42 e4 28 52 c2 6d 78 70 c6 da 11 88 44 9d fd 34 B.(R.mxp....D..4 0150 a1 54 aa 49 13 54 38 7e dd 02 ec d1 ab b4 8c 08 .T.I.T8~........ 0160 a8 ad 92 5d 65 b5 96 3f 79 4c 53 77 5a fa 4d 1f ...]e..?yLSwZ.M. 0170 19 e9 ad 8f dc 8a 4b a6 99 52 20 59 ab cb 92 39 ......K..R Y...9 0180 58 51 37 c8 be 5e d1 f2 d2 15 64 38 b7 b1 ab 89 XQ7..^....d8.... 0190 dd f1 3e 75 f7 49 09 72 99 fb d1 e0 0c 06 dc 7d ..>u.I.r.......} 01a0 34 98 94 4a 38 ed ba 7c e5 83 a3 8d 6d 24 c9 30 4..J8..|....m$.0 01b0 eb 05 55 7c 4b cf cc f2 9a 1a 50 ae 42 15 46 28 ..U|K.....P.B.F( 01c0 b3 c8 92 4f ab 56 af 23 76 57 96 89 4b db d6 54 ...O.V.#vW..K..T 01d0 65 7d ff bf 8b 96 41 a1 49 20 5f 35 de eb c8 09 e}....A.I _5.... 01e0 5a 2a 06 21 41 2a 88 e3 0f 16 9d dd f9 2a 51 23 Z*.!A*.......*Q# 01f0 d1 16 01 50 33 b7 d3 09 60 42 3f f8 ea 7e fd b7 ...P3...`B?..~.. 0200 d2 f8 d6 58 fb 35 fe 20 d5 51 d0 f1 91 e4 4c bb ...X.5. .Q....L. 0210 cf 29 b3 2d 0a f2 d2 81 ba 24 c7 ce fe 89 3d e8 .).-.....$....=. 0220 5f 79 2a ef f2 79 d2 aa e4 a4 0a 31 b2 59 f2 97 _y*..y.....1.Y.. 0230 0b 74 6f 34 30 cc c4 69 43 9b eb cc ff 9a ff 4f .to40..iC......O 0240 48 c0 1c 9e e1 69 5f e1 cb 88 ff 10 44 c3 03 6b H....i_.....D..k 0250 01 0b 66 59 cf ac e1 62 25 96 97 20 e0 13 b9 3f ..fY...b%.. ...? 0260 37 6c 54 a5 d3 20 da 1f 28 d3 6d 3b 1a da 87 c0 7lT.. ..(.m;.... 0270 06 23 39 d3 03 d0 22 0e 67 45 57 62 db 95 ba 74 .#9...".gEWb...t 0280 68 30 e0 0f 85 93 c6 54 5b 38 39 ff 59 01 6f 76 h0.....T[89.Y.ov 0290 df e0 c3 ca 7e 7f 04 91 06 6a 48 23 4a 0d 3a e9 ....~....jH#J.:. 02a0 b7 2d 7a e5 5f ed 70 fa a3 28 ec 08 0d 52 1e 4b .-z._.p..(...R.K 02b0 cd 89 fc 73 40 b5 49 ba 49 a5 4b a8 6c b9 f8 ec [email protected]... 02c0 10 11 99 20 95 4a 83 63 37 12 c6 b7 9f 48 b0 ea ... .J.c7....H.. 02d0 df 95 f2 3d ee c3 94 ad d8 b0 3a bf 26 65 b2 1c ...=......:.&e.. 02e0 1a 4b b3 96 e3 d3 2d fb 79 a0 61 17 04 ae b0 43 .K....-.y.a....C 02f0 d7 7b 28 f4 24 5a 6d a3 2b df 48 d8 84 e3 3d 19 .{(.$Zm.+.H...=. 0300 a8 53 5a 6e 2b 64 f0 ca 3d c2 cd f0 d6 e1 09 c4 .SZn+d..=....... 0310 12 b4 b1 16 cc 7e a8 e7 cd a8 5a ec 86 3b a0 4d .....~....Z..;.M 0320 18 8b b5 66 81 50 b7 e1 91 88 12 97 0e ef 12 84 ...f.P.......... 0330 1f bf 75 e7 82 ce 53 99 65 3f 71 07 7f b4 73 8a ..u...S.e?q...s. 0340 03 9a cb 39 c9 73 f5 de c2 2c dd ee bc 3d 05 9e ...9.s...,...=.. 0350 8c 5c 56 10 c2 60 de 4c ff dd 79 cb e8 ad 2f b4 .\V..`.L..y.../. 0360 b8 8b 4e 7f 35 a3 0a 25 10 0b f8 6a 16 6c b1 35 ..N.5..%...j.l.5 0370 6a 6d 74 01 26 de 9a 17 4c 05 85 39 7e 30 74 d6 jmt.&...L..9~0t. 0380 b9 43 7c ce bb bf 48 b8 af 85 2c 5c 62 7e 17 b3 .C|...H...,\b~.. 0390 f7 a8 07 76 68 9d 11 08 14 c0 70 46 26 f7 aa 36 ...vh.....pF&..6 03a0 4c 27 c9 a3 64 63 af 14 05 18 ea 6b b6 4c b3 99 L'..dc.....k.L.. 03b0 68 3a cf be 32 1e 59 07 6c ac 09 f8 50 43 8f 32 h:..2.Y.l...PC.2 03c0 96 b3 19 73 8e d3 1a 58 aa 2c e1 30 08 c8 03 fa ...s...X.,.0.... 03d0 78 b7 a5 a6 5b 59 e8 c6 8c 79 dd 6e 6f 5e e9 f9 x...[Y...y.no^.. 03e0 ce 37 2b a7 36 a0 05 2d a0 e4 4d 4c c4 a3 cc 31 .7+.6..-..ML...1 03f0 22 29 c7 eb 43 86 e1 c9 be 1c a1 f7 cb 34 7a a1 ")..C........4z. 0400 f4 8d d2 70 f4 65 e5 02 e0 2f 23 47 dc 78 6e 89 ...p.e.../#G.xn. 0410 72 89 20 6b 5f c0 a8 ed d8 0c e3 76 97 11 54 23 r. k_......v..T# 0420 89 11 aa 19 26 24 dc 40 97 ad 30 06 bd ab 00 23 ....&[email protected]....# 0430 7a 3e 04 f0 01 fe 35 2b 33 75 44 dd 6e 7d 05 90 z>....5+3uD.n}.. 0440 35 a9 39 3c 6f 15 7b 1c 9c 3f 72 8c 53 0b ae f7 5.9<o.{..?r.S... 0450 3e bd 4e 2d 69 9a bb 47 50 b7 65 97 06 dd 2b a3 >.N-i..GP.e...+. 0460 ae ef b0 18 9d 75 37 98 77 cc 6b 18 74 02 57 6e .....u7.w.k.t.Wn 0470 b4 f5 13 34 e6 43 fe 3d aa 32 ff 48 d5 32 28 c5 ...4.C.=.2.H.2(. 0480 bf 1a 9a 7d a2 3b 05 f8 5d 68 e7 5f 6c f0 5e 8e ...}.;..]h._l.^. 0490 2c 5a 95 89 d0 86 6f 1b 77 c7 2d 18 fa ac f1 23 ,Z....o.w.-....# 04a0 6d 0a d8 bb 19 8b 20 75 f4 fe 01 f2 81 73 dd 95 m..... u.....s.. 04b0 7d 7d db b8 66 e2 5a 7a b6 30 b1 f7 43 61 06 ea }}..f.Zz.0..Ca.. 04c0 93 ca 0f d2 ef a7 eb cc 60 6b 77 bb 78 84 4a 28 ........`kw.x.J( 04d0 5c f3 bb 6e a2 f8 4e c3 47 d6 d7 6c 29 89 74 13 \..n..N.G..l).t. 04e0 80 00 e5 27 bf 03 e5 7f 8a 39 8d 13 d1 51 26 16 ...'.....9...Q&. 04f0 bc 73 0d 21 af 59 0b 5f 96 29 e5 78 82 79 a7 e3 .s.!.Y._.).x.y.. 0500 a3 8e 77 88 50 d6 bb 75 03 ef 9a 07 58 e5 14 ce ..w.P..u....X... 0510 b6 75 f2 0c 54 eb b5 c9 33 e7 17 6a ad 59 41 59 .u..T...3..j.YAY 0520 b0 23 3c 9b 2b 2e 6e 77 24 a6 fd 07 ac e8 87 2b .#<.+.nw$......+ 0530 9c 90 a8 ca c5 18 45 f0 4e 25 24 d5 38 d3 d9 b5 ......E.N%$.8... 0540 21 47 3e ae a1 6c 3e 07 5a ae 0e e1 41 99 84 16 !G>..l>.Z...A... 0550 ce e1 30 e7 99 6c 19 77 69 31 46 07 6c 98 d5 a9 ..0..l.wi1F.l... 0560 e5 ec a4 88 e3 d0 41 e2 99 86 7a d3 39 9a 91 a6 ......A...z.9... 0570 24 a6 d9 71 00 58 2c 69 de fa ff a1 fc 3f 03 f8 $..q.X,i.....?.. 0580 c8 e5 8c f3 d6 01 b1 4e 83 14 17 db 06 65 bf d5 .......N.....e.. 0590 de 71 cb 46 9e bb 52 51 5c 0d 72 ef 14 1d 52 23 .q.F..RQ\.r...R# 05a0 9f bb eb 0b 82 80 5c cb ......\. No. Time Source Destination Protocol Length Info 22389 260.353361 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=313496 Ack=6143 Win=1002 Len=1448 TSval=600335 TSecr=730076 Frame 22389: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 313496, Ack: 6143, Len: 1448 Data (1448 bytes) 0000 22 21 8d 7b cd 79 a1 f6 91 ae c5 47 ec 0a cb c0 "!.{.y.....G.... 0010 37 ca 2f f1 4d 43 13 8f 93 7e e1 0f 2a c6 fd be 7./.MC...~..*... 0020 a7 ff ee c3 b2 8a ca d5 a9 11 80 ee 5d 98 78 2a ............].x* 0030 3a 21 cf 55 0c 19 11 f5 3d 53 91 a0 21 47 6b 04 :!.U....=S..!Gk. 0040 94 d9 b2 f9 08 29 3a ba c9 e3 6b 72 ba 3d de 0b .....):...kr.=.. 0050 67 a2 12 d7 ae c8 64 2f ee a2 6e f4 e5 f5 a3 fb g.....d/..n..... 0060 0b 9e a0 2a d2 2e 5f 82 cd a4 72 cd 4e 9f ae 45 ...*.._...r.N..E 0070 ff 3b 8c cb ef 30 ad 24 bd 73 ab 69 39 d8 ce ca .;...0.$.s.i9... 0080 ee 44 7a 44 05 8a 8f fd 3d 00 36 ee 35 38 17 1a .DzD....=.6.58.. 0090 24 95 d5 d2 c9 96 db 08 e1 71 c6 f5 56 54 cb 2e $........q..VT.. 00a0 7e 59 3b 1b 6d 41 a5 3d 0e 50 15 3d d0 e0 e0 9e ~Y;.mA.=.P.=.... 00b0 ce 84 76 c5 92 d1 15 42 0b e0 8c aa f8 18 71 7f ..v....B......q. 00c0 61 64 33 67 ba a2 28 93 ea 63 c6 b4 f4 ca e4 f2 ad3g..(..c...... 00d0 ba 77 fa 3d f5 3c cc 2c 20 58 23 3e 4e d2 e8 e8 .w.=.<., X#>N... 00e0 9b aa 2a 7f ef 46 8b ba af bf e1 87 5a b8 01 0e ..*..F......Z... 00f0 5d 59 27 c4 63 43 44 8f ef 64 99 25 d4 6f 1b 29 ]Y'.cCD..d.%.o.) 0100 fa 1e 84 5b c0 3f c5 27 a2 d6 bf 70 cd 4b 91 21 ...[.?.'...p.K.! 0110 e6 56 41 05 bf a8 3c a2 18 c0 32 05 80 25 c2 2b .VA...<...2..%.+ 0120 66 44 a6 df e6 c0 dd f2 75 89 b6 d2 b9 91 35 47 fD......u.....5G 0130 ad fd 8f 78 c6 69 0c b2 3f eb 4b 97 27 7c 85 40 ...x.i..?.K.'|.@ 0140 2e 2a 10 d6 55 7e d7 10 6e af 02 2b ab 54 2c f7 .*..U~..n..+.T,. 0150 13 16 d7 19 ed 9b cb 83 91 90 b8 4a 85 03 94 ad ...........J.... 0160 ca 8c 18 a3 02 d0 4f db 86 7c d9 7d 7e b1 7f e1 ......O..|.}~... 0170 3c 0e 78 47 fd 08 4d c1 d0 36 86 f0 75 00 e4 07 <.xG..M..6..u... 0180 b4 6f 05 a2 fb 01 5d 33 a4 1a d5 04 9d bb 18 9e .o....]3........ 0190 8a ce 0d 63 a8 8f 15 e8 fc b8 0d 78 88 51 e1 3a ...c.......x.Q.: 01a0 5b da 9b ab 31 1d a9 a3 48 db dd ad 84 48 38 2e [...1...H....H8. 01b0 f9 8e a2 33 9a 67 e4 97 6c 3e ff 30 da 72 30 e6 ...3.g..l>.0.r0. 01c0 d9 0c 97 63 9f f7 28 3d f4 31 f4 0b e0 ee 27 b4 ...c..(=.1....'. 01d0 bf 92 47 22 92 27 11 06 42 11 32 0a f9 0d 7a 01 ..G".'..B.2...z. 01e0 a7 7d 28 3e 59 4a 28 78 1f 2d 56 dd b1 85 a9 44 .}(>YJ(x.-V....D 01f0 30 06 df a4 8f 7e 80 38 ec ca b4 64 ad 0b 18 f2 0....~.8...d.... 0200 8b 61 a9 5e cd 96 77 9f 70 c0 02 26 a5 f2 24 06 .a.^..w.p..&..$. 0210 d0 34 55 87 1a 8d 55 c8 d8 d4 da 49 ab 39 0f 6d .4U...U....I.9.m 0220 bd 26 49 2d 2d eb 76 a4 4c e4 c9 e5 9f ac ea 53 .&I--.v.L......S 0230 66 a6 63 0b 9e 38 88 d1 3b 92 6c d8 a9 3b 51 ff f.c..8..;.l..;Q. 0240 3b 8b 91 5a 89 82 46 c7 42 45 bd ac c6 2d 6a 3d ;..Z..F.BE...-j= 0250 44 21 04 29 aa 61 34 ea 41 be 0c 66 b6 93 eb 29 D!.).a4.A..f...) 0260 c4 a1 a7 e2 70 df eb 73 13 28 41 cd d3 9f 40 0f ....p..s.(A...@. 0270 ff 78 be 77 b0 29 b4 bb 96 37 64 48 1d 60 ac 7e .x.w.)...7dH.`.~ 0280 a8 74 da 65 6f 96 e2 72 be 4b 95 70 9c 0d 6f a0 .t.eo..r.K.p..o. 0290 05 98 4d 61 3b 73 28 32 53 a9 b3 1f 8b c3 88 62 ..Ma;s(2S......b 02a0 59 75 d8 3c 4c 64 a8 b2 79 f6 ae 6a 85 c9 c2 c7 Yu.<Ld..y..j.... 02b0 40 fa 0c da 3f ae 30 74 f2 fd 86 da a0 99 56 cf @...?.0t......V. 02c0 b1 a6 a7 5a 6e cf 73 0a 21 75 f6 97 52 3f 5c 22 ...Zn.s.!u..R?\" 02d0 b2 55 82 d8 f5 2e 9d 26 4e b8 fb 45 fe 36 d0 e7 .U.....&N..E.6.. 02e0 1a f4 b8 23 2b b3 8b a2 1a d5 c8 b3 68 77 ce c0 ...#+.......hw.. 02f0 11 ae 77 60 f2 1e f2 41 eb b9 1c 69 2a 29 8d 82 ..w`...A...i*).. 0300 40 bb 3c 5a 17 9d ce 9f 85 a5 da 64 26 36 6b 0a @.<Z.......d&6k. 0310 d5 d0 db 79 c5 92 ad a2 d7 31 5e fa ba 18 ee e9 ...y.....1^..... 0320 41 12 3c 57 f3 72 18 8f 27 2f 25 5c 80 da f2 c7 A.<W.r..'/%\.... 0330 ac 32 d4 1e a8 90 94 5e d8 b6 60 d6 16 68 10 5e .2.....^..`..h.^ 0340 34 57 ff 9e 6c c9 9d 51 3f 1f 80 5a c2 9b de 66 4W..l..Q?..Z...f 0350 57 04 a1 71 d0 88 21 d1 ae 4f cf 46 c8 4d 22 0f W..q..!..O.F.M". 0360 06 d4 d7 31 73 75 77 8f 54 fb 12 95 3b d5 9a bf ...1suw.T...;... 0370 56 6e 20 da 8b 8c d6 ca 64 f0 28 9b f4 d0 5d 9e Vn .....d.(...]. 0380 a3 ae 41 c5 b5 78 fa ff 7b 8a 8f fd 78 a9 7b 5b ..A..x..{...x.{[ 0390 99 9b fd 2e 96 c1 8a c3 2d 2e 99 a7 72 7a 0f e2 ........-...rz.. 03a0 09 35 c7 a0 f9 4a db 5e fe 9e 71 cc ee 8d bd a0 .5...J.^..q..... 03b0 62 f2 e2 92 05 18 6c 87 93 5d d0 54 07 74 86 f8 b.....l..].T.t.. 03c0 fc 7c 5a ef 58 97 54 9c 89 c6 47 8e 72 89 65 c1 .|Z.X.T...G.r.e. 03d0 87 25 70 79 01 0f 2d 69 fd e5 c6 53 be 9f e9 77 .%py..-i...S...w 03e0 5a 95 70 99 4c 82 9e b2 bb d7 cc 89 4a 13 82 c1 Z.p.L.......J... 03f0 d5 42 6b 98 2e 9f de d1 b8 12 e2 2d f7 40 28 39 .Bk........-.@(9 0400 5b b9 5f b2 08 de 34 4a 4a be 13 fa 39 d3 89 53 [._...4JJ...9..S 0410 6c f3 21 47 ef 84 14 37 cd ec c5 13 da d1 93 b2 l.!G...7........ 0420 6a 33 5a ec 67 2b 6f 50 8b e3 45 c8 0d d9 1d 16 j3Z.g+oP..E..... 0430 a8 2e f8 24 ac 88 b2 63 c8 96 db 8d bb 46 ec 00 ...$...c.....F.. 0440 e7 a1 65 4b 7d a8 d9 f0 c7 c1 f5 93 c9 fc d5 67 ..eK}..........g 0450 a8 c4 4c e3 28 fd b8 e8 7b c3 1b b2 4b 17 87 78 ..L.(...{...K..x 0460 2e f1 20 4e 19 be 9a 29 16 47 51 04 3f 92 68 5e .. N...).GQ.?.h^ 0470 73 ff e7 74 66 a5 6d 25 a5 85 76 a4 e2 d9 d2 b4 s..tf.m%..v..... 0480 10 28 96 a1 0b fe bf 3b 41 71 ed d3 0c fb c6 21 .(.....;Aq.....! 0490 8c 7d 4a aa b6 ca ac 5a ec 30 0a 57 0b 9a a4 36 .}J....Z.0.W...6 04a0 c4 70 76 3b bd 3f 28 fd 6e 96 68 bf e5 19 aa 3c .pv;.?(.n.h....< 04b0 3b 1e a6 ac ef 55 af e9 e8 4d ba 5e ea 31 aa d9 ;....U...M.^.1.. 04c0 6f fd cb 50 08 f0 70 37 b4 4f 68 77 98 9f 63 44 o..P..p7.Ohw..cD 04d0 9c d3 36 4a cf 1e 31 67 54 b0 5f 9e 08 50 83 e5 ..6J..1gT._..P.. 04e0 86 38 74 3b 0a 18 59 6a 7f a1 c3 b7 c1 14 be 3e .8t;..Yj.......> 04f0 b8 23 18 52 aa 19 e6 16 5a 0f cb e5 ac 77 57 60 .#.R....Z....wW` 0500 f3 10 d9 91 a0 06 f0 43 9a 1a 8c 32 29 24 37 46 .......C...2)$7F 0510 39 bc dc 68 19 20 0e d5 84 e2 cf 2c 93 69 05 8d 9..h. .....,.i.. 0520 1f 46 f8 01 e7 a3 3a 8c e9 d2 d5 c7 d2 fc f7 1c .F....:......... 0530 34 96 19 a2 08 23 f4 16 3b de 00 66 19 83 60 c7 4....#..;..f..`. 0540 dc 72 92 fd 70 09 1e 81 98 b8 47 49 6c 5a f2 fd .r..p.....GIlZ.. 0550 2e 7f db 18 1c 91 ad 89 43 da 5e 21 ba a2 9b 2a ........C.^!...* 0560 f8 f3 c5 7c bc 71 14 bc 27 39 a5 66 5b 0a 7c 1a ...|.q..'9.f[.|. 0570 a7 ae 26 e6 56 80 ed bc ae 40 14 d3 f1 a3 f7 f7 ..&.V....@...... 0580 18 f4 60 2b 2d b3 fa ff 61 e0 9f 0d dd 6d 13 22 ..`+-...a....m." 0590 c3 6d 73 df 08 a4 85 f2 5e ad b6 5a 61 cb cd 74 .ms.....^..Za..t 05a0 31 b5 56 e0 aa 29 12 42 1.V..).B No. Time Source Destination Protocol Length Info 22390 260.353619 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=314944 Ack=6143 Win=1002 Len=1448 TSval=600335 TSecr=730076 Frame 22390: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 314944, Ack: 6143, Len: 1448 Data (1448 bytes) 0000 06 ba ff f5 d2 1f 16 fd c3 e9 a7 fe e6 14 27 7e ..............'~ 0010 58 11 73 17 52 98 97 a7 ff 25 31 58 4e 88 f8 e1 X.s.R....%1XN... 0020 e7 02 39 15 50 f1 60 63 c6 b4 20 0b 23 f4 1e 61 ..9.P.`c.. .#..a 0030 28 a9 fb 9a 34 2c 00 e4 ac 24 a0 b6 92 b2 7a bd (...4,...$....z. 0040 53 d5 2a 35 b7 5c 00 72 a3 0f 30 2a af c5 c7 c8 S.*5.\.r..0*.... 0050 89 b6 ba 17 54 97 7e 70 a7 24 3a 23 41 79 5c 04 ....T.~p.$:#Ay\. 0060 35 98 d4 98 c1 d8 6b 89 cb 38 c3 fc 16 6f 42 7e 5.....k..8...oB~ 0070 83 9b ea eb 95 23 c2 57 8f 68 1d 42 67 3b 11 bf .....#.W.h.Bg;.. 0080 ac 16 7a dc d2 cb 36 67 55 75 d9 39 30 60 70 e0 ..z...6gUu.90`p. 0090 fa 75 4f c9 81 e3 67 74 9f 4e b3 0d c2 d6 95 e4 .uO...gt.N...... 00a0 e6 db 1f 12 b9 61 66 62 16 ce ca 31 3d ce 60 7e .....afb...1=.`~ 00b0 7c 66 50 c4 1c c9 e2 cb c9 e8 69 2b 76 e5 83 9c |fP.......i+v... 00c0 24 4e 81 d9 65 2d 2f ea 6b 66 c6 67 86 21 e2 97 $N..e-/.kf.g.!.. 00d0 a0 8a 6b 90 94 2e cf 28 9e 90 ed e7 83 2f 69 de ..k....(...../i. 00e0 46 30 0c 59 a2 92 9a ee 5a 7e 82 9c b2 4b ed c1 F0.Y....Z~...K.. 00f0 f7 bf fd 78 5a 44 16 67 86 9e d1 f8 06 c7 2b c2 ...xZD.g......+. 0100 2e e4 92 2e e9 0b a4 7d 2c ac 93 80 a1 d4 16 36 .......},......6 0110 6d 7f d5 2b bf 5c 23 0a 43 01 d6 44 38 25 8f 39 m..+.\#.C..D8%.9 0120 c8 41 91 3f a8 22 de ca 6f 35 4d ef 86 60 e8 a4 .A.?."..o5M..`.. 0130 95 4c 62 fa e7 a9 16 9d 25 fb 49 c9 1f 59 65 d4 .Lb.....%.I..Ye. 0140 12 33 9a d6 cb 56 63 43 71 c1 b5 15 f8 d6 da 20 .3...VcCq...... 0150 4a 7b 8d ef 5f 89 a5 eb 57 7a 91 3c 47 ba 8d d6 J{.._...Wz.<G... 0160 56 52 5c 1e c4 c8 06 25 d5 19 40 66 b9 48 fb c0 VR\....%[email protected].. 0170 26 4b 1d 28 97 30 d4 24 3d ec b4 78 4b 69 cb 5b &K.(.0.$=..xKi.[ 0180 a1 21 2a 5b a2 95 cc 25 b6 99 34 c6 9a 11 75 0e .!*[...%..4...u. 0190 3a 7c 33 73 38 71 b5 96 d8 56 1e ad 63 44 fe d5 :|3s8q...V..cD.. 01a0 92 54 11 53 6a bb 09 9e 12 be 7d 46 bb b2 82 33 .T.Sj.....}F...3 01b0 7c bf b0 e5 f8 24 0c 99 f4 e9 52 8e e7 61 33 7f |....$....R..a3. 01c0 1e 72 33 71 74 84 85 b7 78 6d 78 2d dd df 5a d5 .r3qt...xmx-..Z. 01d0 5d 11 43 60 c0 b1 02 0d 6d d3 a6 3a d2 c5 1c d1 ].C`....m..:.... 01e0 0d fd 81 5f d4 58 9a de 63 31 2c 19 1a 15 c8 d4 ..._.X..c1,..... 01f0 a5 34 0f 42 af c7 e2 b6 e7 de 04 3b ac 38 6b e1 .4.B.......;.8k. 0200 37 1e 48 30 32 a0 5c 75 25 72 93 8e 0f af ec b2 7.H02.\u%r...... 0210 04 9b e0 26 03 a5 b8 be 00 eb 6c 6d 9f c6 25 d2 ...&......lm..%. 0220 0f 9d 6e 86 42 46 a9 c3 1a bb c5 2b ae 84 29 b1 ..n.BF.....+..). 0230 ff 43 56 85 2a ec 08 57 48 23 2e af 4e dc e6 df .CV.*..WH#..N... 0240 8f bb 12 d0 ea 5a 0c 1e 55 72 c7 d4 e9 ea 6f 7a .....Z..Ur....oz 0250 d1 91 3b 4e a1 30 9b 49 22 cb 8a 19 5c 7b e9 4f ..;N.0.I"...\{.O 0260 8c 4b ed 7e 20 2c 36 45 d7 7d a8 66 ff d0 5f 79 .K.~ ,6E.}.f.._y 0270 00 23 23 b2 b6 84 84 37 ad d6 50 91 86 9e 4c d3 .##....7..P...L. 0280 8a 3d 2a 25 52 a8 d5 bc e6 68 86 fa f5 87 b7 2b .=*%R....h.....+ 0290 67 17 58 b9 bb a3 5f 3a a3 b2 37 66 c3 e9 80 7a g.X..._:..7f...z 02a0 4e ca e1 d4 61 33 1e 04 66 f5 b7 65 a6 03 79 5e N...a3..f..e..y^ 02b0 1e a2 39 0f 67 c6 99 80 47 f9 0d fc 74 a4 71 81 ..9.g...G...t.q. 02c0 61 b8 23 5b 82 5c 8c 93 87 4c 05 bb 56 ee 5d bd a.#[.\...L..V.]. 02d0 31 a6 d5 8b e6 03 46 d2 ca 7d 3d ae 19 81 90 9b 1.....F..}=..... 02e0 7a ef ba 65 c0 d2 6c a7 28 00 7d c3 7b 6e 46 eb z..e..l.(.}.{nF. 02f0 08 64 fe e3 46 a6 bd e6 05 98 cb 7f 8b 00 85 ec .d..F........... 0300 1f 5c 16 12 64 2d 7e 50 f1 fa 27 41 8f 77 a5 56 .\..d-~P..'A.w.V 0310 21 1b 4d 25 9d d1 5a d2 e5 23 ed 34 d4 e0 37 a0 !.M%..Z..#.4..7. 0320 0c d3 f5 4c 05 a9 d2 d6 8c 9a b4 c6 5e 2a d5 cf ...L........^*.. 0330 ab f2 00 a1 37 f7 f5 4f 16 6a c5 7d 0e 63 7f d4 ....7..O.j.}.c.. 0340 d1 62 1d e3 6e 4d 38 0c d2 c6 87 54 f7 98 c0 59 .b..nM8....T...Y 0350 33 39 07 e7 64 8d 90 01 f8 be f9 9d 27 f8 51 94 39..d.......'.Q. 0360 6a b4 97 8e 2d d8 ac fc 6f fa e2 b5 8a 12 21 9b j...-...o.....!. 0370 37 46 e6 0c d5 06 0f 63 cb 02 9b ee 5e e1 b5 7c 7F.....c....^..| 0380 c9 cf 8f 59 08 00 06 43 50 19 a7 a1 63 af d5 f6 ...Y...CP...c... 0390 11 44 c1 59 f6 84 c0 1b 0c 92 13 3a e5 93 5d 43 .D.Y.......:..]C 03a0 09 d0 f5 80 31 4b 0a 28 d6 28 23 01 be d8 d0 13 ....1K.(.(#..... 03b0 17 7d 95 3c cd 26 8d 47 17 e3 5e 53 67 2e d0 89 .}.<.&.G..^Sg... 03c0 8f 2f a5 d4 d7 d1 04 cf 5c 6c b1 97 46 56 4a d8 ./......\l..FVJ. 03d0 20 02 04 79 b5 91 5e f4 03 45 b4 65 72 4b a9 90 ..y..^..E.erK.. 03e0 e5 0c 35 8b 4e ad 56 7c ec ad f9 ad ec 51 91 e2 ..5.N.V|.....Q.. 03f0 fa b1 8b 59 02 19 b7 56 be ab bf dc 0f 9b c8 d6 ...Y...V........ 0400 a8 aa 12 a0 77 48 97 02 b6 39 28 21 97 ab 8c 5e ....wH...9(!...^ 0410 0b 92 f5 dc da 28 58 34 79 86 43 0e de 4d 83 fc .....(X4y.C..M.. 0420 a6 bd 12 0a e7 29 55 b0 c3 65 91 a3 ec 49 1c 21 .....)U..e...I.! 0430 24 aa 32 fc 2a f1 6e 08 7a 52 dd 1e ce 80 02 4d $.2.*.n.zR.....M 0440 e2 ae 66 49 5f 93 83 c4 10 29 cd 18 fa 28 90 b1 ..fI_....)...(.. 0450 e0 fa d5 7f ba a0 85 39 37 3d d0 2c 30 26 96 1b .......97=.,0&.. 0460 94 21 7c 87 64 f6 7d 50 b7 27 22 60 e0 aa 6a 94 .!|.d.}P.'"`..j. 0470 c5 03 79 36 4a cb 4a e3 11 4d 62 31 77 28 96 41 ..y6J.J..Mb1w(.A 0480 3d 87 7d cc a6 a1 d6 18 76 de 67 60 b3 ed 7f 5c =.}.....v.g`...\ 0490 ca 06 ac 8f 54 64 69 1f dc ea 2e f9 c1 c0 9b 57 ....Tdi........W 04a0 58 3c e1 08 34 18 76 94 ff 27 d0 80 24 be 2a 1e X<..4.v..'..$.*. 04b0 75 71 6b 7d 85 3e 3f f2 43 76 eb cc 8c 65 79 01 uqk}.>?.Cv...ey. 04c0 46 bb 5d 1d 45 d6 8d 25 bb fe d8 47 b7 0f b8 a8 F.].E..%...G.... 04d0 dc 5e 6e 73 e3 75 c9 a4 39 84 0f de dc e6 3c 35 .^ns.u..9.....<5 04e0 7a e8 9a b8 2e 14 7f e7 10 18 76 bb 62 8e 70 df z.........v.b.p. 04f0 1d cc 14 9f 0d 95 58 1c 96 7b 08 9e f7 c0 69 25 ......X..{....i% 0500 79 31 04 38 50 29 d9 23 a6 4d a3 13 d3 0b 18 f7 y1.8P).#.M...... 0510 df 3a 19 62 8f 26 33 e8 9a b5 48 a6 88 e7 57 4b .:.b.&3...H...WK 0520 3b 10 ee 23 97 47 d0 33 8f 45 7b 2c 00 8c 37 b0 ;..#.G.3.E{,..7. 0530 87 22 0f 06 b3 c8 9e d2 ef bd 76 a9 41 bf ba 59 ."........v.A..Y 0540 be 26 04 cf bd 34 cd ab 48 46 02 4d 0f 01 d2 31 .&...4..HF.M...1 0550 1a 69 1b bd 2c d7 21 92 65 39 14 ca a9 dc 4d 7a .i..,.!.e9....Mz 0560 97 24 b3 1d ec 55 05 3d 1f ca cc 3e a4 f9 5a 90 .$...U.=...>..Z. 0570 ae 6c 3b d5 57 6c ef 4a 0e 6b 3c fd 27 09 30 af .l;.Wl.J.k<.'.0. 0580 62 29 18 85 68 ce 4f f0 bf 26 97 9c e3 d0 03 67 b)..h.O..&.....g 0590 28 aa b7 5c 3b 53 c4 9b 30 4e 3b 8f 59 23 7d f7 (..\;S..0N;.Y#}. 05a0 9c 12 a3 f9 ff af 09 69 .......i No. Time Source Destination Protocol Length Info 22391 260.353721 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49402 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00) Frame 22391: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49402 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN No. Time Source Destination Protocol Length Info 22392 260.353777 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=6143 Ack=314944 Win=65535 Len=0 TSval=730086 TSecr=600335 Frame 22392: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 6143, Ack: 314944, Len: 0 No. Time Source Destination Protocol Length Info 22393 260.353868 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=316392 Ack=6143 Win=1002 Len=1448 TSval=600335 TSecr=730086 Frame 22393: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 316392, Ack: 6143, Len: 1448 Data (1448 bytes) 0000 3d 14 7a 4d 09 db e9 46 f9 29 5c 16 58 5c 1b d4 =.zM...F.)\.X\.. 0010 dd 5c f3 9e b1 aa ad 6d b0 3f 90 3d bc 26 f7 eb .\.....m.?.=.&.. 0020 cb 69 6c f6 15 37 f2 be 7e 4e 3a 08 3e 5d 41 27 .il..7..~N:.>]A' 0030 15 4e 2f 7c df b4 9d a0 32 4b a7 d5 77 2b 73 c6 .N/|....2K..w+s. 0040 08 a8 e3 06 e7 ed f6 6e 5c 02 90 33 15 c2 f4 a3 .......n\..3.... 0050 7a fd 94 55 12 16 d5 41 3c 09 f2 e6 52 5b cc 30 z..U...A<...R[.0 0060 8a 8d 1c 21 c3 2b e5 39 9d e0 be fe 97 62 ca 41 ...!.+.9.....b.A 0070 f6 e2 f7 77 12 c5 ff c9 a2 a4 d9 f6 76 a6 cf 94 ...w........v... 0080 6c 17 a6 7f 0a 46 73 38 ae 6b e4 d8 45 78 5e ee l....Fs8.k..Ex^. 0090 2e 41 3f 3b 00 8f cd a5 7a 9f 01 cf e0 e9 9d e2 .A?;....z....... 00a0 22 cd 25 90 bf e5 07 05 fd 5d 59 9e c9 6e 00 9d ".%......]Y..n.. 00b0 59 51 29 da dc bb 47 4c 95 1b 97 31 35 0d be be YQ)...GL...15... 00c0 3f a9 9d 1f a3 e7 e5 55 94 03 68 50 7f 2e 53 9a ?......U..hP..S. 00d0 63 64 00 cd 0f d5 9b 7e 99 15 35 7c 8d e0 75 b2 cd.....~..5|..u. 00e0 f7 55 36 e1 60 d0 25 a8 e2 b9 01 7a 2c 36 ee fc .U6.`.%....z,6.. 00f0 48 d2 71 a4 27 1d ff 01 b7 1f 67 91 a6 24 18 a7 H.q.'.....g..$.. 0100 62 0a 97 36 77 db ce 53 38 4f f7 a1 c2 3b ad 68 b..6w..S8O...;.h 0110 d7 64 45 b0 cb 1b f1 72 b3 9c f7 6d b8 b0 c7 05 .dE....r...m.... 0120 d8 d4 38 e0 68 e5 43 f4 8f 50 46 b1 45 27 5c 5c ..8.h.C..PF.E'\\ 0130 1d 8e 2f 4a 47 26 93 f9 3e 8e c7 1b 82 ef 40 2b ../JG&..>.....@+ 0140 8d 21 62 60 2b ea 9f 17 16 68 61 00 19 bc 9e 61 .!b`+....ha....a 0150 af 6b f5 48 f6 21 56 97 9d 25 78 db 72 04 8e 7b .k.H.!V..%x.r..{ 0160 00 25 bd 8c 4d 0b 4c 3f e5 53 7a 5f db 58 d1 56 .%..M.L?.Sz_.X.V 0170 6c 1b b8 ab 11 e9 db 2f c6 02 a4 19 70 67 fc e3 l....../....pg.. 0180 d6 63 4c 0d 9d f3 81 33 63 e6 18 1a 3a c2 ef 44 .cL....3c...:..D 0190 d0 83 94 8a 8a 38 4e 17 19 fd 84 5d 09 ac c4 99 .....8N....].... 01a0 21 fc a7 b7 6d 1d cb 38 ff 6e e4 e8 40 69 e2 41 [email protected] 01b0 4f 6b 82 d3 45 42 fb 4c d4 5a cc 97 c3 73 04 ac Ok..EB.L.Z...s.. 01c0 4a 65 5b 52 af 8a e4 e3 a4 d5 92 ea b2 6f a0 b0 Je[R.........o.. 01d0 b1 9d 7c 6d 80 60 90 2f a8 32 22 66 f5 c2 c9 8d ..|m.`./.2"f.... 01e0 4e e0 55 c5 40 bf 70 ac 50 46 6f 0b fb 73 05 f9 [email protected].. 01f0 54 38 29 59 11 8a 77 19 3f e7 d6 7c 9f bd 86 af T8)Y..w.?..|.... 0200 0f 51 bf ea b4 49 61 4f 4b 58 e7 7f 1e af 76 a3 .Q...IaOKX....v. 0210 64 16 9e 67 1c 2d 19 e5 1d 85 d7 3d 34 9c ba 4c d..g.-.....=4..L 0220 f7 f6 72 38 af 3e 70 4f 9a 6f 2c a0 c4 02 44 b8 ..r8.>pO.o,...D. 0230 55 8f 9a 7d 37 35 2b f1 7f 41 33 ab 05 6e 1b 3a U..}75+..A3..n.: 0240 b8 f0 4a 1c 2f 94 6b b7 d7 9d cf f3 b3 4b fc d4 ..J./.k......K.. 0250 75 c8 00 95 20 ec 78 de ee 35 c8 84 74 2c 13 57 u... .x..5..t,.W 0260 31 63 a3 fe ba 47 4a 78 94 6d 9e 2a 3c 57 f0 cb 1c...GJx.m.*<W.. 0270 e1 31 d6 66 d9 b0 e7 35 cf c7 c6 27 34 bd df 95 .1.f...5...'4... 0280 75 06 6f 48 82 d1 70 84 21 1f f8 44 27 5c f5 e8 u.oH..p.!..D'\.. 0290 09 52 08 65 9d 1e 4f ee 27 55 64 56 f5 14 4d 9a .R.e..O.'UdV..M. 02a0 1a db 14 b7 56 63 98 a6 7e ec 79 e7 78 f5 8d aa ....Vc..~.y.x... 02b0 78 e1 e0 b3 ee 4a ea 00 8f d2 68 77 d8 26 30 b6 x....J....hw.&0. 02c0 7b ef 44 cb 24 b5 e2 28 12 b5 cf ba f0 25 7e 8c {.D.$..(.....%~. 02d0 45 d4 f7 c3 03 9e b0 d7 a0 bc 6e 9e a5 6d cd 75 E.........n..m.u 02e0 93 3b bc f6 d2 40 ba 9e c9 e2 bd d3 f2 5a 5d c3 .;[email protected]]. 02f0 0a fc ed 34 68 e2 05 aa ee e3 10 57 3d 05 d7 ad ...4h......W=... 0300 ed 60 71 4b 18 13 32 4d ad fb 3b f6 eb f7 c6 5d .`qK..2M..;....] 0310 e6 fb 6c 7d 77 7f e7 a1 71 40 ee 78 71 72 fd 8a ..l}[email protected].. 0320 9d 14 2b 84 51 24 f4 d3 cc 3a 6b 55 00 9d 01 63 ..+.Q$...:kU...c 0330 5d ba ee bc bb 59 a5 e6 2a 25 b5 0c f5 1a ac ac ]....Y..*%...... 0340 06 21 a3 67 50 b8 9a 44 b3 16 27 e8 c1 fb 11 6e .!.gP..D..'....n 0350 d2 1d 6b 04 63 d4 0c 81 3d 89 9d a9 26 19 9d b3 ..k.c...=...&... 0360 1c 97 3c 0d 2d c7 9d 5c b9 36 5f 6f 85 65 af a8 ..<.-..\.6_o.e.. 0370 c3 60 af 77 fa 91 73 12 fe fc 39 3e cf 1f 78 c1 .`.w..s...9>..x. 0380 ea 17 81 44 12 bd ea 05 fd 43 4e 38 ba c4 d6 3d ...D.....CN8...= 0390 f7 d0 67 16 8c 9f 65 c3 46 99 bd d1 f9 bc f8 2a ..g...e.F......* 03a0 a8 2a c6 93 51 93 4b 8b 1a ad 6d f4 51 e1 b0 e0 .*..Q.K...m.Q... 03b0 96 24 92 51 e0 73 3c 7e 0c 66 19 3a 1f 5c ca b3 .$.Q.s<~.f.:.\.. 03c0 69 65 be 45 0a 80 79 1a 31 b2 f9 c5 6b de 7f 0a ie.E..y.1...k... 03d0 96 6c 50 9f 01 55 d2 91 24 fe 8e d3 9a 19 b5 e3 .lP..U..$....... 03e0 00 65 39 de 72 7f 3b e2 18 5a 8d da b2 89 1c 65 .e9.r.;..Z.....e 03f0 73 ed dd 5e 8f 72 af 7c 58 2c 97 ef d0 ba 36 f5 s..^.r.|X,....6. 0400 0a 63 2c b5 17 cf 84 17 5c 55 9f f1 f3 f6 66 a2 .c,.....\U....f. 0410 6e 70 06 45 2d 98 ec 3d c6 f9 ab 62 e9 0d 19 ef np.E-..=...b.... 0420 4c ee bb 17 26 93 c7 25 0c 4a fb 92 fe 53 02 b1 L...&..%.J...S.. 0430 48 57 ac 83 42 ab c1 17 ff ea 5e ba 80 9b 75 e7 HW..B.....^...u. 0440 ec 9c 95 cb d4 3e f0 8a 48 47 84 83 41 5b 01 42 .....>..HG..A[.B 0450 7c 8c f8 c4 3e 9b a3 5f 67 ba 74 da 5f 20 41 5a |...>.._g.t._ AZ 0460 3a 97 c1 84 50 93 a2 96 30 40 ef 00 df 2b 3e 26 :...P...0@...+>& 0470 2e 3e bb f3 7d f6 e0 02 25 df 12 c0 db b2 48 ed .>..}...%.....H. 0480 11 db bd 03 e3 b5 05 78 af 65 35 f0 b8 86 3a 97 .......x.e5...:. 0490 ac 13 b7 cb 5f 8e 06 71 10 30 a0 59 0d 1d bd fb ...._..q.0.Y.... 04a0 e9 93 8e f7 3d 75 4d 84 bd 08 3c 20 13 5e 64 dd ....=uM...< .^d. 04b0 be cc 15 ef 35 0e 78 e9 b4 2e 39 87 88 09 85 84 ....5.x...9..... 04c0 07 81 84 1b 67 23 cf dd e5 3b 5a 47 ab 0e cc db ....g#...;ZG.... 04d0 6e e7 71 a6 7c 45 25 b0 a4 39 36 65 93 8f 41 4b n.q.|E%..96e..AK 04e0 0b ce 17 e2 01 83 6f 4f 9b cb ed 19 8d 6b 18 03 ......oO.....k.. 04f0 0d ac b0 fc 76 fa 28 8f 9c 13 71 24 eb f4 d1 64 ....v.(...q$...d 0500 9f 9c 9e 2d 75 d0 f8 c5 d4 4c 07 f2 e7 8b cc f7 ...-u....L...... 0510 40 cc 64 48 33 62 7f a4 33 45 d4 7a 7b 55 5d 70 @.dH3b..3E.z{U]p 0520 b0 58 63 bb 85 c6 6a 9d 59 06 ca da 24 4b 18 94 .Xc...j.Y...$K.. 0530 28 76 16 9a c0 7d 3d 25 62 63 26 dc e9 aa 95 df (v...}=%bc&..... 0540 e4 d4 d8 ba 14 a4 32 ec 85 75 e6 37 8a 1f de c9 ......2..u.7.... 0550 0c 8b 25 e2 56 97 d6 2f 04 74 a4 86 62 a5 ee e7 ..%.V../.t..b... 0560 26 07 01 0c e8 cb 97 9d 45 8b 81 94 5c c1 c4 5b &.......E...\..[ 0570 5c f3 f5 b7 c0 b4 6f 48 58 05 87 7b 3d 6e e9 50 \.....oHX..{=n.P 0580 74 d2 d0 7b 65 70 b0 ec 86 a5 36 fe 69 4a 1d 65 t..{ep....6.iJ.e 0590 fb 12 72 3a 59 22 0a 0d ca 50 35 48 4a 5e db 79 ..r:Y"...P5HJ^.y 05a0 e3 b7 07 b6 1b a9 e1 82 ........ No. Time Source Destination Protocol Length Info 22394 260.353955 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=317840 Ack=6143 Win=1002 Len=1448 TSval=600335 TSecr=730086 Frame 22394: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 317840, Ack: 6143, Len: 1448 Data (1448 bytes) 0000 cb 7e 71 fb 5d c5 ea f5 41 79 f7 ab c6 80 80 1a .~q.]...Ay...... 0010 c0 4f 58 73 98 9b d8 ac 6f d0 cc d2 7a 1b 3d 65 .OXs....o...z.=e 0020 b3 73 bd 6a d0 36 b4 74 c4 f4 8e 99 c9 a7 4b 31 .s.j.6.t......K1 0030 c6 29 ab 30 49 14 0c 6d 2b 4a db 11 e6 37 f5 55 .).0I..m+J...7.U 0040 98 7c 84 d6 40 d2 3f 16 76 17 28 e7 9c 49 68 4a .|..@.?.v.(..IhJ 0050 c2 d0 6a fe 08 1f 3a c9 6c f8 a5 54 32 d4 e5 8e ..j...:.l..T2... 0060 ba 76 64 5d 4c b6 ec d6 b9 6c 1a fc fb 90 d6 da .vd]L....l...... 0070 b1 db d1 e4 96 0a 16 e4 5f 30 69 11 f9 29 2e 17 ........_0i..).. 0080 8d 0d 62 a7 49 9f 5a c1 66 c4 ec f4 67 0a 40 ea ..b.I.Z.f...g.@. 0090 d9 1f 6e e8 78 df 81 d8 b8 72 0d 7c f2 b1 48 ad ..n.x....r.|..H. 00a0 29 49 9f 04 fb 8d 1c 63 a2 d1 c0 10 ea fc 04 29 )I.....c.......) 00b0 c5 49 a3 1c 57 85 30 03 f1 13 57 3e 89 b7 23 5a .I..W.0...W>..#Z 00c0 ac 6f 2d 6e d5 99 18 b8 18 a0 71 00 81 8c 31 12 .o-n......q...1. 00d0 72 39 7d 4e f8 a9 14 2b 04 a2 b2 66 33 c4 54 b5 r9}N...+...f3.T. 00e0 33 4c 70 82 6f 3a 1c 56 68 eb e5 dd df 5c 45 75 3Lp.o:.Vh....\Eu 00f0 0d 6c c0 d5 c4 33 6a 18 8b cc f0 9f 6e 2d 50 5f .l...3j.....n-P_ 0100 12 02 78 25 22 8d d7 2b 07 93 bf 2a 60 4c 4b 60 ..x%"..+...*`LK` 0110 aa fc 12 f3 7d e5 2e ce f7 64 2c 9c 77 f3 53 57 ....}....d,.w.SW 0120 f8 8a 6e 64 ba 43 15 8a b2 07 d9 26 a7 9f d4 3f ..nd.C.....&...? 0130 24 e3 02 fe 6a 64 51 c9 fb 63 c6 52 0b 8b d4 38 $...jdQ..c.R...8 0140 ae 89 05 82 10 25 e2 88 80 5c 20 76 98 f2 1d 7f .....%...\ v.... 0150 37 f3 f0 7e 8e 4d 55 3f c8 bb 29 57 b7 e7 fc ad 7..~.MU?..)W.... 0160 61 ab 78 9e e2 71 cd ba 4a 8e 8e 10 c2 f2 fb 9a a.x..q..J....... 0170 50 ee ee be 87 57 16 79 af ac 7b 3c 66 40 5a d9 P....W.y..{<f@Z. 0180 0d 3d 2b c2 d5 75 13 2d 8e 81 6a ce ea 38 28 f6 .=+..u.-..j..8(. 0190 9d f4 df 34 2f a0 f0 a5 38 45 c1 66 7a c7 81 ed ...4/...8E.fz... 01a0 f7 18 d2 17 1e f8 ba af fe 30 29 c9 36 e3 f0 84 .........0).6... 01b0 82 15 76 ca f4 e4 04 6f 16 12 88 0b 52 f7 72 c7 ..v....o....R.r. 01c0 95 c3 1e c7 b5 14 68 fd eb 63 51 3d 4f 84 d0 ab ......h..cQ=O... 01d0 f0 8a 20 86 77 ae aa ee 27 56 db c7 51 98 82 b9 .. .w...'V..Q... 01e0 9a 50 c7 46 6a c8 c1 6f 66 13 5f 81 fc b6 3d fd .P.Fj..of._...=. 01f0 58 03 55 6a 9b c2 b5 65 1d c4 ee b0 67 e9 1a 42 X.Uj...e....g..B 0200 db 09 e6 5b e9 55 5f fd fb b5 da 46 68 b5 eb 92 ...[.U_....Fh... 0210 32 29 76 71 77 96 a4 6b 1e 77 d9 d5 4a a0 c1 ad 2)vqw..k.w..J... 0220 dc 68 37 ec 65 ba d1 63 99 91 a1 96 43 5e f4 f8 .h7.e..c....C^.. 0230 bc a7 bd b2 0c 9c 09 66 9e b5 27 be e9 d3 22 a7 .......f..'...". 0240 41 ec a8 92 54 5c 79 d2 1d e8 fa f5 69 4b 2b 0e A...T\y.....iK+. 0250 a0 3e 8b 91 64 e6 3d 12 0b b4 11 2a 6e 67 27 3e .>..d.=....*ng'> 0260 4b fa 71 18 7f bb dc 25 d6 be e1 0e b3 4b eb ef K.q....%.....K.. 0270 c1 38 3c a6 1c 4a ae 2e d9 ba d6 ea cb 81 0a 04 .8<..J.......... 0280 cb 9f 2d 43 39 a3 3b cb 31 a5 10 d1 5d 35 de 08 ..-C9.;.1...]5.. 0290 c6 41 c1 fc 67 90 37 a5 3f 8e db 30 50 eb 54 0a .A..g.7.?..0P.T. 02a0 44 83 c2 44 66 61 67 6b 5b 73 72 56 e2 11 a4 3a D..Dfagk[srV...: 02b0 67 19 77 93 f5 01 9e 7d 12 97 ac 35 36 04 f4 bb g.w....}...56... 02c0 31 d8 1e 3c 98 8a 6a dc 55 a7 de 4d 9f 39 6e 16 1..<..j.U..M.9n. 02d0 81 17 da c6 a1 0b 7c d9 59 2c 06 0d 8c fc 94 8e ......|.Y,...... 02e0 13 fc fd d7 0b 6b 6d b4 36 8e 54 7c ef db e1 dd .....km.6.T|.... 02f0 60 17 82 a5 32 bb 99 e3 71 ce 18 01 e1 d5 f4 41 `...2...q......A 0300 91 c8 82 17 fd 1b f5 cb c7 ec 7c 2b 49 64 26 c0 ..........|+Id&. 0310 e9 41 c1 86 08 d5 eb 92 8f af db ae d3 94 57 86 .A............W. 0320 ec 78 be 35 1a 6a ed a6 bc cd 26 8a f3 80 2d 18 .x.5.j....&...-. 0330 da 21 c2 7a 2b 72 92 ae bb 9a be c6 0a 22 ca 8a .!.z+r.......".. 0340 c0 cc b8 ce 3b e5 5e ef 36 05 47 94 3f 35 1e fd ....;.^.6.G.?5.. 0350 f8 45 45 6f f2 90 f7 10 51 4e ed 5e 66 b1 e5 f5 .EEo....QN.^f... 0360 60 8e 47 0b 10 51 ec b6 fe 86 94 8b 5c 45 57 69 `.G..Q......\EWi 0370 47 b6 a3 ef af b5 9b fe 89 c1 1e 73 82 fc 9e 36 G..........s...6 0380 83 5e 90 b7 2c 88 e8 25 62 92 95 ac bd 79 3c 4a .^..,..%b....y<J 0390 f1 7c 58 bc 5c e1 06 16 09 3e dc 0b cf 3a c7 d8 .|X.\....>...:.. 03a0 51 a4 85 aa c2 61 6d a7 13 c7 5e 86 d4 06 6d 6e Q....am...^...mn 03b0 8f bd 21 db 96 25 a4 10 c2 85 3e 4f 0d 4f d4 1d ..!..%....>O.O.. 03c0 85 e0 cd 89 bc 22 9e 21 c8 6e 6a 3e 92 c5 87 a2 .....".!.nj>.... 03d0 96 de 25 83 04 4a a9 40 70 08 84 e7 7d c3 24 cf ..%..J.@p...}.$. 03e0 54 08 fd 44 bf ee 4f ad 78 86 c5 4f d5 e3 e3 df T..D..O.x..O.... 03f0 78 51 50 19 87 5f 18 fc 54 7c c7 c3 25 4f 66 d1 xQP.._..T|..%Of. 0400 7c 91 cd 7a b5 b8 e5 32 62 2d 2a f8 88 4a da 01 |..z...2b-*..J.. 0410 5e e4 83 e3 56 04 d1 71 86 ce b1 f8 3b 59 e2 55 ^...V..q....;Y.U 0420 bb 94 e3 8c e3 1e fc 2c 7c a0 a0 c6 d5 f7 5c 1a .......,|.....\. 0430 fa f3 2c 75 de 02 0f 1b ef 5f 0d 12 63 f8 61 01 ..,u....._..c.a. 0440 06 17 01 51 ed d5 21 d7 ae fd 74 26 d1 1f 79 eb ...Q..!...t&..y. 0450 64 2e e4 60 ab 07 0a 1a 90 bc 19 c9 91 e1 b2 13 d..`............ 0460 1a 23 38 24 7a 5e 18 11 57 4b 47 09 a8 ae f1 35 .#8$z^..WKG....5 0470 4e 26 6a ae e2 39 79 01 33 80 00 31 c2 09 ab 25 N&j..9y.3..1...% 0480 a4 97 f6 1a df cc 2a f5 c5 da a9 59 1f 43 c7 72 ......*....Y.C.r 0490 7d 2e 7c 13 5a 30 8e a8 4b cf 72 b5 23 5d 4c ff }.|.Z0..K.r.#]L. 04a0 04 14 ae b6 57 98 b4 7c 05 a1 6e bc b2 ab 12 e7 ....W..|..n..... 04b0 4e 1c 25 75 56 c1 0f c7 d2 5b c2 25 b4 28 49 37 N.%uV....[.%.(I7 04c0 9b 44 09 57 ad 27 eb 83 57 e6 54 6c f3 b1 4d a2 .D.W.'..W.Tl..M. 04d0 1c 22 ad c3 e9 b8 58 93 23 a8 b0 c6 b8 67 ba e9 ."....X.#....g.. 04e0 2f e7 05 71 b8 fd a2 9f 4c dd f4 79 1e d0 8d df /..q....L..y.... 04f0 8c 0e 15 a6 92 81 0e 0d 19 2e 68 cc 00 85 a0 ee ..........h..... 0500 3b 66 23 dc 19 7c 97 01 78 de 5e 64 a5 41 ca 44 ;f#..|..x.^d.A.D 0510 45 06 74 90 61 af e1 8e f3 5d 5a a1 8e 73 19 2a E.t.a....]Z..s.* 0520 cc 7d b3 e0 a3 50 9b a0 d6 df ea 39 fc 7a 3e b7 .}...P.....9.z>. 0530 63 b7 0b ce b8 1f f9 53 89 55 53 83 c2 94 8c 8d c......S.US..... 0540 3a 13 cd 0d 95 c7 18 ec e2 69 a8 4a 6c 3b 20 ec :........i.Jl; . 0550 d4 ba ff e2 0e 48 98 58 69 eb 77 a6 54 b6 1c b0 .....H.Xi.w.T... 0560 85 b9 be 6e 28 0f 20 50 66 6a 9d 11 d9 00 5f e1 ...n(. Pfj...._. 0570 71 30 66 88 6e c8 7f ec 05 11 2c fb a8 e9 8d e8 q0f.n.....,..... 0580 3e f4 f6 8e ef 3d f8 3f 10 da dd 87 6e 0f ea df >....=.?....n... 0590 ee 79 7c ae e2 c3 fc 92 ab d4 e9 08 c9 bb 7b a2 .y|...........{. 05a0 68 20 e7 05 bd 85 45 db h ....E. No. Time Source Destination Protocol Length Info 22395 260.354045 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=319288 Ack=6143 Win=1002 Len=1448 TSval=600335 TSecr=730086 Frame 22395: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 319288, Ack: 6143, Len: 1448 Data (1448 bytes) 0000 93 8b 31 a8 45 f6 99 3d ce e9 c4 b9 7c 72 8d 67 ..1.E..=....|r.g 0010 71 33 de 47 f0 a7 a5 99 cc a8 34 9c 9b 86 51 17 q3.G......4...Q. 0020 d5 61 ac 4f 21 a1 f8 bd d8 98 70 ef 8c 91 39 72 .a.O!.....p...9r 0030 68 71 15 f9 72 fb a3 5a 92 3f 31 75 cb 4d 8e d4 hq..r..Z.?1u.M.. 0040 ed 7c 0b 19 74 c3 eb 2b b1 3a 47 10 f5 62 90 9f .|..t..+.:G..b.. 0050 d5 2d 4a 93 5d 44 2c ec 35 f8 11 cc c7 37 c3 36 .-J.]D,.5....7.6 0060 6a 9a 16 a5 e4 b4 52 24 4a 44 0a 2f 67 ac 6d c1 j.....R$JD./g.m. 0070 cd ff 57 81 f9 85 a0 09 e9 38 49 4b e4 75 68 3d ..W......8IK.uh= 0080 5c 8a bd 65 f6 70 7b 38 fa 6a f8 35 6a 2c e9 71 \..e.p{8.j.5j,.q 0090 1e bc 68 b4 91 a9 ef 2a c1 0e e9 42 94 51 3d a7 ..h....*...B.Q=. 00a0 25 85 a5 ac 76 6d 70 be c8 fd 35 09 cc d2 20 d9 %...vmp...5... . 00b0 9d fd d9 cb 95 1e f2 48 28 58 e8 de ea 02 b2 63 .......H(X.....c 00c0 88 ec 12 6a 23 f4 d1 c5 7b 3e 83 04 c7 a0 27 26 ...j#...{>....'& 00d0 5b 25 09 b5 85 e3 eb 7d 9f 4f 67 8b ee cd 51 6c [%.....}.Og...Ql 00e0 a8 8a 22 9e 40 5b fd 36 18 08 b7 05 5e 81 06 77 ..".@[.6....^..w 00f0 25 64 84 0f f5 04 de 7b 18 0e b3 a4 4a 2a 51 a5 %d.....{....J*Q. 0100 69 3d 4a 97 14 11 d6 f9 91 30 63 c5 06 b5 eb af i=J......0c..... 0110 37 f7 33 b2 ec c5 6a 57 4d 6f 94 92 87 d3 04 61 7.3...jWMo.....a 0120 f4 05 79 45 8e 86 51 cf 2b d4 0d 18 b3 d5 32 93 ..yE..Q.+.....2. 0130 9a ff 1e 27 07 56 1b 66 dd 0e d9 fa 07 a6 25 74 ...'.V.f......%t 0140 19 1d 4d d1 7c e9 cb ef c6 26 d9 6d b6 0c d6 d5 ..M.|....&.m.... 0150 30 b5 89 8e 09 3e 3d 9e a6 63 6a 85 5d dd 38 65 0....>=..cj.].8e 0160 97 3f 5b d2 60 db 46 88 97 f3 e0 64 71 40 71 97 .?[.`.F....dq@q. 0170 74 37 37 8d ce ea cd ce 4e 07 02 5d 4f ad 60 d9 t77.....N..]O.`. 0180 70 66 a1 dc 93 6f a8 96 a1 b0 79 68 27 7c 9b 27 pf...o....yh'|.' 0190 2c 58 7c 9b 16 cc b3 4e ab 76 89 92 f4 0d da 30 ,X|....N.v.....0 01a0 57 f0 9c a4 6a 82 6d 3c 61 ba 50 ce de 81 86 fd W...j.m<a.P..... 01b0 0b 42 5a ca f4 ac 1e c5 3f e7 6d a9 e2 45 51 c3 .BZ.....?.m..EQ. 01c0 68 f2 42 8e f6 3f 53 94 02 be 3e c3 38 61 ad 5d h.B..?S...>.8a.] 01d0 69 f8 ac 16 2e 1e 7f 01 69 27 d3 d4 d6 af ef 6b i.......i'.....k 01e0 26 0e 71 d4 16 ed b0 a5 8a f2 eb 5a 58 de 7d ae &.q........ZX.}. 01f0 e5 27 c7 79 cf 44 78 bd bb 3b da ec fd 76 0b 08 .'.y.Dx..;...v.. 0200 0a 6a d8 2c 53 35 89 44 52 97 f4 d7 2f 92 06 b2 .j.,S5.DR.../... 0210 19 d8 75 1d 06 fc 84 14 10 e6 9b 87 88 13 27 1d ..u...........'. 0220 fb 0b 7e cf 19 00 b9 93 6f 77 d0 05 06 4d fe a5 ..~.....ow...M.. 0230 cc c9 f8 dc b0 d3 06 b5 23 43 0d 97 ec f3 12 5a ........#C.....Z 0240 d8 11 49 97 8e 67 67 c3 06 49 7f b6 ce 83 7a 49 ..I..gg..I....zI 0250 c8 bb 30 cc 53 3d a0 60 8d 59 1d 26 39 98 28 24 ..0.S=.`.Y.&9.($ 0260 04 26 7e 34 5e e8 06 77 23 4b f3 50 f2 17 69 8c .&~4^..w#K.P..i. 0270 08 c7 f6 c6 d6 8e b5 b0 fa 8a 2b 6a b3 f8 97 2d ..........+j...- 0280 c0 1f ec 49 a9 1d fc 29 8f 42 32 eb 04 3b cb 84 ...I...).B2..;.. 0290 69 d2 97 4c 67 75 9d 75 e7 ac 8e 11 7e 96 18 66 i..Lgu.u....~..f 02a0 c9 14 a7 61 20 b6 ac f3 a6 43 24 f6 47 e6 de 1a ...a ....C$.G... 02b0 1f f8 41 83 e3 03 e9 be ca ca e0 ea da 18 52 3a ..A...........R: 02c0 2b 9e 44 2e 76 2c 6b 66 6c b5 60 cf 96 1e aa 40 +.D.v,kfl.`....@ 02d0 46 99 d1 f9 76 15 ec 18 1f 2a 18 01 cc 29 16 1f F...v....*...).. 02e0 71 c4 a8 f8 13 b7 23 55 5d 39 52 42 fe a7 6c 1b q.....#U]9RB..l. 02f0 06 b6 ec 18 98 69 5d 93 82 11 66 1e d8 b3 25 fc .....i]...f...%. 0300 aa 35 87 6d ee 45 e4 37 ec 25 7f 43 98 00 c7 9b .5.m.E.7.%.C.... 0310 fc e4 1c 8d a2 d5 e3 db e6 ed a6 45 80 04 c5 de ...........E.... 0320 be ad d1 4a fb 87 ac 07 6c 6e 17 76 53 60 3e ae ...J....ln.vS`>. 0330 84 b7 92 bf 0d ce 7c f3 e9 25 c5 74 7a d3 fc b8 ......|..%.tz... 0340 a0 6c 12 b9 a9 2b 5d 1f 4c b3 67 45 37 51 14 a3 .l...+].L.gE7Q.. 0350 48 30 6d e5 06 e6 ff 3c 70 90 31 61 ac 7f 2d 08 H0m....<p.1a..-. 0360 21 b9 43 09 17 15 13 46 27 27 37 11 a7 14 7b 69 !.C....F''7...{i 0370 d2 b3 47 70 9a b1 f6 8c e9 2c 79 b6 62 5b d1 2a ..Gp.....,y.b[.* 0380 63 4c a3 8c df 4e 75 19 cb 4f e9 bf 70 3f 3d 78 cL...Nu..O..p?=x 0390 5e 80 86 c6 8b de 92 15 b8 78 cc f6 15 69 67 81 ^........x...ig. 03a0 30 87 9f fb 70 e7 42 a3 90 5a e1 73 44 ec 21 1c 0...p.B..Z.sD.!. 03b0 4f b6 5d 7d ca 3a c1 f9 b9 03 ea 8f 82 56 20 75 O.]}.:.......V u 03c0 aa b4 f3 71 b0 ef 84 f8 e9 99 a5 8c c4 0d f1 23 ...q...........# 03d0 93 ae a0 70 a5 e3 49 a7 20 c6 70 46 32 a5 94 37 ...p..I. .pF2..7 03e0 94 ef 2d a2 4e 58 53 ac 15 38 32 76 31 f0 4e 7c ..-.NXS..82v1.N| 03f0 1f 3e ec 36 35 a3 41 62 2e 7e 73 87 70 17 ec 2b .>.65.Ab.~s.p..+ 0400 3b 5b c6 14 53 db d9 ba a8 e8 17 96 db e0 d0 6a ;[..S..........j 0410 c0 a1 00 d6 3e 42 9c 9b b1 a4 16 b8 3e 5c 2e d4 ....>B......>\.. 0420 49 32 76 b2 a5 2c aa 84 05 80 37 f3 3f 28 4c cf I2v..,....7.?(L. 0430 db ea 79 51 62 6f 13 03 1a 3a 8d ad 7d e5 05 67 ..yQbo...:..}..g 0440 c1 13 9e 93 c7 78 af 8a df 96 01 5f 70 83 12 ff .....x....._p... 0450 55 6b be d5 fc df ee 99 4e 3a 67 65 48 27 92 22 Uk......N:geH'." 0460 37 3b 42 ed b2 d9 f3 32 2c e3 3e 37 d9 6f 9c 74 7;B....2,.>7.o.t 0470 e8 36 64 5d 99 99 dc f0 fb 60 8b 77 e2 4d a5 73 .6d].....`.w.M.s 0480 01 f3 90 ac d2 9b 8a e0 be 83 2f 64 a0 e3 d6 04 ........../d.... 0490 cf 8c d3 cc 43 77 57 d4 4f a2 80 c7 4d fe 9d b0 ....CwW.O...M... 04a0 3d cf c0 36 38 ab c6 86 bb aa 8c d2 db d1 9d 1f =..68........... 04b0 e2 36 8b 14 b7 d7 09 90 f0 55 02 e2 9c ac 80 7c .6.......U.....| 04c0 a1 4f 3e 86 d1 9c 0b 1c 8b 8b da 99 15 bc 4b 91 .O>...........K. 04d0 25 46 a1 0e 33 11 fc 96 58 81 ac f8 ef f1 36 aa %F..3...X.....6. 04e0 83 55 1f 4e 62 f8 59 53 3b 75 d2 b6 25 94 bc 07 .U.Nb.YS;u..%... 04f0 05 82 5e 2a 71 36 3e 38 f6 75 5b 26 6f f9 1b c0 ..^*q6>8.u[&o... 0500 7a d4 ed 83 b6 b9 4a 63 dc 6e 12 62 73 ca d2 ea z.....Jc.n.bs... 0510 dc 15 75 f6 b4 7d 74 c0 f5 6e c5 3f 1e db de 97 ..u..}t..n.?.... 0520 e2 e1 ca 19 3b 68 9e 2f fa 98 28 57 a3 e9 ae 6a ....;h./..(W...j 0530 26 c9 07 0e 36 d9 dd 91 9c 9b ba 28 01 a5 7e 38 &...6......(..~8 0540 ce af f0 1a dc df cf 48 9f f7 92 d1 09 9e e4 5f .......H......._ 0550 ef 5a 78 21 b6 7b 4c 35 79 89 6f cd 49 d5 61 9c .Zx!.{L5y.o.I.a. 0560 18 1e 4d 03 a2 f4 3a 43 7a 16 38 2e ca 91 0f 84 ..M...:Cz.8..... 0570 2d 56 d2 11 a4 ef 9c 98 24 41 a7 8f 4e 1b 2a 9d -V......$A..N.*. 0580 86 9e d0 0f 87 a1 51 54 15 db 25 89 a0 05 95 78 ......QT..%....x 0590 bd a8 a3 25 f6 21 b6 4d 58 75 fb c6 01 76 fe 0b ...%.!.MXu...v.. 05a0 1f c4 00 05 c7 e2 6f 3a ......o: No. Time Source Destination Protocol Length Info 22396 260.354107 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=6143 Ack=317840 Win=65535 Len=0 TSval=730086 TSecr=600335 Frame 22396: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 6143, Ack: 317840, Len: 0 No. Time Source Destination Protocol Length Info 22397 260.354162 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=6143 Ack=320736 Win=65535 Len=0 TSval=730086 TSecr=600335 Frame 22397: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 6143, Ack: 320736, Len: 0 No. Time Source Destination Protocol Length Info 22398 260.354220 192.168.10.1 192.168.10.203 TCP 327 34433 > cds [PSH, ACK] Seq=320736 Ack=6143 Win=1002 Len=261 TSval=600335 TSecr=730086 Frame 22398: 327 bytes on wire (2616 bits), 327 bytes captured (2616 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 320736, Ack: 6143, Len: 261 Data (261 bytes) 0000 28 90 1d 92 f6 17 2e d0 8e 82 a9 e7 14 5b c9 ba (............[.. 0010 f6 16 37 d3 53 70 73 44 f3 00 b7 f1 a3 af 3d 84 ..7.SpsD......=. 0020 d8 ef 44 77 f7 b6 1e 7c e0 4c 97 ec 18 c9 c9 d1 ..Dw...|.L...... 0030 b9 cb 5b 3a 3e 81 13 37 e3 99 ad 3c 01 b1 8b 2c ..[:>..7...<..., 0040 39 db 05 6d c7 f0 67 8f fe 8f 08 c4 cd ea cb c7 9..m..g......... 0050 0e f4 8a a9 e2 4c 68 da d7 83 5b be 2c 1f 30 46 .....Lh...[.,.0F 0060 45 1c a6 fa 1d c4 5e 46 b8 e4 77 79 c6 ea 14 bd E.....^F..wy.... 0070 99 d7 ff b1 83 26 cf 40 80 e6 28 b7 22 1a 3b 04 .....&.@..(.".;. 0080 86 86 8a 2f 58 08 e5 a7 6e 3a 40 26 0f ab 4f 9c .../X...n:@&..O. 0090 a1 68 69 a5 c7 ba e3 e9 b3 2c 94 e9 df d1 7a bc .hi......,....z. 00a0 cf a0 56 49 20 c0 c5 b5 b0 0f fc 39 e7 7a 45 c8 ..VI ......9.zE. 00b0 3f ad 1f 23 cf 9c 0e e4 c6 51 7d c4 6c 6b 18 86 ?..#.....Q}.lk.. 00c0 92 0c 55 eb 0d 3d 35 dc d4 7d 5c 85 e6 5d 94 a5 ..U..=5..}\..].. 00d0 1e 5c 95 1b 29 63 a4 da ca e4 14 52 ad 01 10 9a .\..)c.....R.... 00e0 54 02 cf ec fd 65 4d 0a f5 42 ce 14 ef 22 de b9 T....eM..B...".. 00f0 d2 f1 e0 fc 22 66 4b d8 22 0b 02 85 ca 03 d5 28 ...."fK."......( 0100 ee ea 5a de 98 ..Z.. No. Time Source Destination Protocol Length Info 22399 260.354293 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49402 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00) Frame 22399: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49402 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE No. Time Source Destination Protocol Length Info 22400 260.354369 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49402 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00) Frame 22400: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49402 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" No. Time Source Destination Protocol Length Info 22401 260.354469 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=320997 Ack=6143 Win=1002 Len=1448 TSval=600335 TSecr=730086 Frame 22401: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 320997, Ack: 6143, Len: 1448 Data (1448 bytes) 0000 17 03 01 03 40 ee e5 3d a6 ed b5 32 9f c8 29 84 ....@..=...2..). 0010 47 96 1d 37 3b aa 73 85 e1 c6 28 7f 92 a0 0e 43 G..7;.s...(....C 0020 f3 32 4d 00 15 b3 a6 68 65 d5 b2 5c 6a 5a 0c e7 .2M....he..\jZ.. 0030 e0 26 c7 66 86 20 eb fc a5 b1 46 98 c5 b5 5b cd .&.f. ....F...[. 0040 59 9f 63 b2 ce 91 c6 2b 77 a7 c8 77 32 58 2f 0c Y.c....+w..w2X/. 0050 be be 08 ab b0 49 20 e6 20 89 4a 68 da 23 62 97 .....I . .Jh.#b. 0060 4d 5a 45 f4 15 40 b9 61 54 60 fc d7 fc e8 5e 53 [email protected]`....^S 0070 b4 78 70 4e 89 97 52 a8 41 cc c6 78 1d 1e ee 4c .xpN..R.A..x...L 0080 af 8d 9d 56 f4 06 89 27 55 74 13 9b 18 07 27 47 ...V...'Ut....'G 0090 e0 16 d1 e9 38 5b 56 49 bb f3 fe 17 ad bd 4c b4 ....8[VI......L. 00a0 9c 99 41 d6 bc b2 2d a6 26 da bf 6b b1 4d 07 3d ..A...-.&..k.M.= 00b0 a1 29 78 f9 82 8b 38 50 09 cd f7 f0 cf fb f1 87 .)x...8P........ 00c0 06 55 d4 48 3f b1 8f 64 04 ad 1f 70 0a 69 9e a3 .U.H?..d...p.i.. 00d0 82 03 bd 61 5e 7c 18 f2 41 05 91 89 8b 8a 1c 6f ...a^|..A......o 00e0 cb d8 79 fd d2 dc bd 08 66 8e c7 95 21 e1 69 d9 ..y.....f...!.i. 00f0 2b 69 cb 9c 6b 3f ff 67 36 ee 95 ec e6 c5 21 66 +i..k?.g6.....!f 0100 ff c1 c1 44 25 16 b3 8f 23 5d fd 84 21 e1 76 94 ...D%...#]..!.v. 0110 c6 4c b5 6b 2a 87 87 c0 00 4f 68 54 0e f9 5d 70 .L.k*....OhT..]p 0120 70 0d f7 7d 53 70 d9 e8 c7 39 83 6e ac f0 b9 7b p..}Sp...9.n...{ 0130 35 d3 7f 00 6c 96 fb 4f 20 81 7e e8 e9 6c 2c 3b 5...l..O .~..l,; 0140 9a 37 84 57 0d 34 d0 de 78 5d f1 70 4b 92 00 9c .7.W.4..x].pK... 0150 b3 51 bb 5f 2a fc 81 db ac 45 77 4e 86 71 32 2a .Q._*....EwN.q2* 0160 ca 77 75 8b de 93 32 a5 bc 45 7c 70 d0 19 72 d1 .wu...2..E|p..r. 0170 76 34 50 a8 1d ff 19 f0 2a e0 59 56 33 08 85 0c v4P.....*.YV3... 0180 37 a1 c4 b1 38 e8 eb d8 81 72 0d 85 f5 cf 16 8e 7...8....r...... 0190 81 af e0 97 44 43 36 dc f1 93 79 3c dc 9e b7 d4 ....DC6...y<.... 01a0 ec e1 59 90 3a 89 47 95 00 9b 87 fc 69 e2 5a 9a ..Y.:.G.....i.Z. 01b0 fd b2 ff e0 ec 49 26 62 1a 29 bf fa db e6 5e d2 .....I&b.)....^. 01c0 5c 09 28 c6 ea 40 31 b4 29 52 67 93 8e b8 5f de \.(..@1.)Rg..._. 01d0 44 75 87 7c 0e 22 62 a5 ad 97 61 ba 7d ac 73 8a Du.|."b...a.}.s. 01e0 ef 09 9d 7b 87 f2 54 e1 70 1e 0e 3a 00 a2 ce 3f ...{..T.p..:...? 01f0 93 cb 2f d1 15 e5 7f 94 7d 70 54 78 be 35 6e d9 ../.....}pTx.5n. 0200 8c 8c 40 b5 94 15 36 56 1c 16 a7 9e 90 11 0d 05 [email protected]........ 0210 d8 af 32 ac 13 f8 cb da f0 ab a3 ee 45 fd 29 7c ..2.........E.)| 0220 e9 aa c3 8d 9a bf 3d c1 a1 9b f3 14 c8 93 65 6c ......=.......el 0230 fb f0 1b 3a 60 96 38 df 09 9b 3c 23 d1 88 7b 8e ...:`.8...<#..{. 0240 06 f8 4c 2a 72 31 f6 95 bc b1 93 43 d3 ca 5b 8f ..L*r1.....C..[. 0250 d3 3d bc 4f 7b 91 b3 ea ba 35 48 10 02 53 59 64 .=.O{....5H..SYd 0260 24 d5 d5 ca ff ae 96 4f a5 1f 87 5c a9 c9 6a 30 $......O...\..j0 0270 e9 54 98 29 a1 8f 37 a4 36 41 16 fd aa 4b 24 65 .T.)..7.6A...K$e 0280 99 f6 6b a2 5b de c9 5d db 3d 89 15 f8 4f a9 12 ..k.[..].=...O.. 0290 fb fc 6d f8 4d 4d 6a e3 57 d1 01 db 03 19 0d 45 ..m.MMj.W......E 02a0 0a 8c 40 40 31 c8 df db b3 0f fd 53 11 87 98 73 ..@@1......S...s 02b0 17 6b 51 1e 67 c7 b6 55 7a ce 7f 99 c2 47 40 b5 .kQ.g..Uz....G@. 02c0 2a 87 53 d8 6f 1b ef 84 57 16 22 e2 18 dd 06 1a *.S.o...W."..... 02d0 d9 99 35 50 ac fa 92 1a b2 aa e4 10 57 02 21 98 ..5P........W.!. 02e0 af 16 37 40 ad c8 87 75 f8 f0 00 89 7b 2a d2 69 [email protected]....{*.i 02f0 b0 8d c0 55 40 ce 6c 0b 4a d5 4a cd f4 3d 52 ef [email protected]..=R. 0300 29 e8 17 bc 7d c2 b1 3d bc 51 d9 48 56 cd 4b 8a )...}..=.Q.HV.K. 0310 94 b3 50 3b f8 ad c2 ba d6 64 c1 ed 8f 84 1e 47 ..P;.....d.....G 0320 af 92 91 ef bb 1b 06 f2 46 31 1e 8b 30 2e 37 76 ........F1..0.7v 0330 29 50 ec dd 56 20 24 e7 2c 37 96 ea 75 8c 61 38 )P..V $.,7..u.a8 0340 0a d3 84 f9 e2 17 03 01 03 40 02 c2 e1 0c ab 47 [email protected] 0350 d2 c8 98 a7 8a 57 2a 94 a6 32 0d df cf 41 3b cf .....W*..2...A;. 0360 d7 a1 3a 65 db 41 ad 09 e4 39 57 0c 0e b5 ae a4 ..:e.A...9W..... 0370 68 7f e2 b7 a2 fd f8 0e 36 a6 f4 e7 a4 88 20 aa h.......6..... . 0380 84 e1 66 c6 82 45 14 51 c8 b1 fa 93 94 4a 99 f9 ..f..E.Q.....J.. 0390 52 fe 73 b4 d4 14 de b5 f4 8e 86 18 3f 28 8a 8a R.s.........?(.. 03a0 c0 44 1b 8f 45 6a 8d 0f b4 bb ab 84 f9 af b9 1a .D..Ej.......... 03b0 8c a1 86 45 71 76 76 49 ce 83 51 0d 8f 99 78 64 ...EqvvI..Q...xd 03c0 fb cc f8 91 0c 20 e8 cc 3b 0d 8b 76 fb aa 53 fc ..... ..;..v..S. 03d0 8f 96 c1 3f 9f 88 d6 d3 31 e0 66 e9 cb f0 2e 6e ...?....1.f....n 03e0 da c9 17 68 87 37 0e ee 12 f9 04 98 89 89 d5 d0 ...h.7.......... 03f0 3b a2 f0 8c af d4 e2 c2 12 3f 99 aa e2 41 26 08 ;........?...A&. 0400 4b 61 d4 32 8e 21 6a eb dc 04 af 7e a2 a5 5c d0 Ka.2.!j....~..\. 0410 f7 aa 00 01 34 99 76 9a 34 5b d2 b9 bf 20 59 38 ....4.v.4[... Y8 0420 14 6c f0 50 34 e6 08 ec 76 79 49 d0 8e 5d 34 35 .l.P4...vyI..]45 0430 d0 18 1f ce 03 c0 eb f8 f6 e9 d7 b4 33 2b d7 21 ............3+.! 0440 f3 a9 3e 12 f7 f2 70 d5 68 cf 6c ae b0 1a e5 13 ..>...p.h.l..... 0450 a6 70 79 1f 56 88 2a 9c 15 ff 08 70 d1 5c 07 5b .py.V.*....p.\.[ 0460 57 92 67 54 f1 87 4b 53 d4 c3 ee 41 47 28 7d 64 W.gT..KS...AG(}d 0470 71 1d 6d 7e 14 54 43 43 00 77 63 53 b3 20 30 d5 q.m~.TCC.wcS. 0. 0480 79 02 67 9f 0c df 8f 3c 0b 44 4c d5 ed 53 53 e7 y.g....<.DL..SS. 0490 c2 e5 f8 e6 46 be 45 72 a2 09 d7 39 94 e4 9c 4b ....F.Er...9...K 04a0 22 13 c7 8e e5 b3 7b e4 72 4b 86 3e dd 7a 70 8f ".....{.rK.>.zp. 04b0 15 76 94 c6 ce 74 ec d0 b3 21 c5 b9 04 1f 7e 86 .v...t...!....~. 04c0 c7 ed 46 67 c1 4f 7a 79 2c 34 73 05 6d 6b dc b3 ..Fg.Ozy,4s.mk.. 04d0 2e ad aa 03 1a 79 96 f2 99 fc 00 46 a0 c0 7d b7 .....y.....F..}. 04e0 e6 1c c7 28 ed 1b e2 bc 32 44 2f c1 49 32 57 5f ...(....2D/.I2W_ 04f0 24 68 83 5c 05 e9 96 8e f7 3a 5d a6 bf ec 0f 95 $h.\.....:]..... 0500 2e 9a 2a 11 21 1f 52 6d d7 33 1b ec dc 03 8c df ..*.!.Rm.3...... 0510 69 35 ac 57 fc d0 5e 49 da 16 56 ad b2 13 3d 0f i5.W..^I..V...=. 0520 d1 f1 60 eb 8c 11 1c 0c 2f ad 99 d3 7f 6d db 27 ..`...../....m.' 0530 76 c6 a0 67 55 74 5e f6 98 0d ce c1 07 e7 d9 7c v..gUt^........| 0540 30 e5 47 c3 2d 30 da 99 02 d9 43 5c 19 ae 72 50 0.G.-0....C\..rP 0550 de 1f 49 f4 b5 e0 81 db 56 c3 12 a1 0f 66 d0 f5 ..I.....V....f.. 0560 0f b5 8d b6 52 88 57 a9 d7 56 94 f7 52 36 03 d1 ....R.W..V..R6.. 0570 29 3f ea f5 d2 d1 ce 99 2e 5e ea 6b 21 f5 2a d0 )?.......^.k!.*. 0580 a9 b3 46 f1 68 da da a4 60 26 c3 54 9e 7a ef e8 ..F.h...`&.T.z.. 0590 65 61 71 34 1f 0f 4c 84 8c 8d 47 63 d6 7c 38 66 eaq4..L...Gc.|8f 05a0 92 61 d8 41 fd 5e 9d fe .a.A.^.. No. Time Source Destination Protocol Length Info 22402 260.354524 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=6143 Ack=322445 Win=65535 Len=0 TSval=730086 TSecr=600335 Frame 22402: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 6143, Ack: 322445, Len: 0 No. Time Source Destination Protocol Length Info 22403 260.354583 192.168.10.1 192.168.10.203 TCP 292 34433 > cds [PSH, ACK] Seq=322445 Ack=6143 Win=1002 Len=226 TSval=600335 TSecr=730086 Frame 22403: 292 bytes on wire (2336 bits), 292 bytes captured (2336 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 322445, Ack: 6143, Len: 226 Data (226 bytes) 0000 a3 6a 5f 9d b0 bf 08 f0 d3 d1 5e 7b 89 7b bf cf .j_.......^{.{.. 0010 d6 e9 cc 5a 11 ca c5 ae 2e d7 8a b2 60 c7 f8 ec ...Z........`... 0020 66 5f f9 8c 81 1c d8 fb 86 90 85 f0 bb f2 7e a7 f_............~. 0030 9f c4 de b8 89 28 2c 30 e9 c6 2a 16 a5 68 29 16 .....(,0..*..h). 0040 70 f3 8d c8 73 7f 04 5d 1d 15 ff eb 57 d0 ce 1a p...s..]....W... 0050 67 ac 8f 38 9c 81 75 28 91 ac 4f a1 eb a5 65 df g..8..u(..O...e. 0060 45 de 33 05 1e 00 e3 2e 54 3d 37 d7 d3 4b b6 ed E.3.....T=7..K.. 0070 b4 f1 4c ea fa 29 f9 46 09 47 f0 43 3a 38 c5 f9 ..L..).F.G.C:8.. 0080 9d be f0 95 8d 8d e4 8c 4b 7a 10 85 c6 b0 85 80 ........Kz...... 0090 e4 7a a6 53 c2 ef 25 6f 28 a9 10 f5 48 b9 7b ec .z.S..%o(...H.{. 00a0 81 af 75 e4 85 be b8 11 6c 75 f6 83 3b 62 20 87 ..u.....lu..;b . 00b0 a9 d4 34 50 f0 f4 23 02 12 5a 85 35 28 44 92 66 ..4P..#..Z.5(D.f 00c0 65 88 d9 e5 f7 da 9e eb 35 a6 5b 1c 9b e9 ad 2b e.......5.[....+ 00d0 11 26 b1 6d 37 0b 03 6f c1 be fd 63 8b 96 27 89 .&.m7..o...c..'. 00e0 64 f5 d. No. Time Source Destination Protocol Length Info 22404 260.354663 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49402 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00) Frame 22404: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49402 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA No. Time Source Destination Protocol Length Info 22405 260.354736 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49402 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00) Frame 22405: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49402 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA No. Time Source Destination Protocol Length Info 22406 260.354829 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=322671 Ack=6143 Win=1002 Len=1448 TSval=600336 TSecr=730086 Frame 22406: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 322671, Ack: 6143, Len: 1448 Data (1448 bytes) 0000 17 03 01 03 50 51 9b fa 1d 30 b7 a1 a1 41 95 af ....PQ...0...A.. 0010 6f ef 3f 9a 3f 4d 69 6b 92 81 07 49 3d 8c fb 7e o.?.?Mik...I=..~ 0020 3b 6e 34 8c 56 91 e7 78 ef 52 88 b5 c4 b7 7d a7 ;n4.V..x.R....}. 0030 82 54 06 d3 b6 06 f6 22 02 5b 57 be 81 ab e2 ab .T.....".[W..... 0040 7c 7a d7 ee cd 3e 40 86 e0 ba 8b 17 96 00 93 76 |z...>@........v 0050 d0 54 f5 42 73 d8 c2 c6 5e 29 6f 2c c5 11 25 03 .T.Bs...^)o,..%. 0060 4e fe a9 43 a7 d3 b0 77 8a 41 aa fe 4f 0e 03 03 N..C...w.A..O... 0070 bf 76 8f 55 84 59 54 da 40 12 69 91 ad 19 65 23 [email protected]# 0080 76 f6 94 0b a4 24 d4 9b 62 59 17 93 6a 1a ef 10 v....$..bY..j... 0090 b4 61 90 06 46 7a fe 12 41 02 bb 8c 28 e1 cd 9f .a..Fz..A...(... 00a0 85 47 c6 56 bc f4 97 49 00 ef e7 5a c8 cb 2e 05 .G.V...I...Z.... 00b0 b8 1b 51 d2 83 75 a5 55 60 b3 6e 92 91 5c 37 7d ..Q..u.U`.n..\7} 00c0 2a fe 6d 88 19 2d ab 5c 1c 58 e7 6f da 03 e1 2b *.m..-.\.X.o...+ 00d0 09 fe f2 45 c8 e6 c1 7a 06 aa b1 e3 58 03 87 58 ...E...z....X..X 00e0 09 7d 68 e4 50 14 5a 37 4c 00 d2 e7 fe 98 51 4f .}h.P.Z7L.....QO 00f0 40 15 e1 ea 85 4c 85 fc 3e bc 45 35 d5 3c fe 06 @....L..>.E5.<.. 0100 74 24 af 0a 17 ab 93 e5 c5 c9 70 59 30 bf 7a 59 t$........pY0.zY 0110 47 f5 54 58 19 62 63 91 42 6a f2 d8 ea e6 76 c0 G.TX.bc.Bj....v. 0120 7c db c9 6a 4a 3a eb ff d6 30 07 b7 0d b1 c0 ba |..jJ:...0...... 0130 84 c4 d7 cd fa 1b 83 a3 1b 07 d9 07 21 3c 72 3f ............!<r? 0140 97 92 c0 48 9d 0c 22 4f 8d 75 65 d9 bc c0 d4 3f ...H.."O.ue....? 0150 2b c9 11 01 45 56 69 b6 cf b8 0d 4c f9 17 f9 5f +...EVi....L..._ 0160 1d 5e ac 75 a2 ea ed 64 6b 7f c2 f3 28 03 df a7 .^.u...dk...(... 0170 1b 1b 0d 63 c7 ce 34 24 a6 ac 1f 26 0f ff 46 80 ...c..4$...&..F. 0180 89 53 c5 1e a7 fb c0 b5 28 a6 d9 4f 81 2d d9 dc .S......(..O.-.. 0190 1a a4 82 47 e1 48 55 5f 24 cb 81 f0 14 08 37 7a ...G.HU_$.....7z 01a0 a8 36 93 02 53 ae 29 89 76 1e f8 9f 23 2b ba 37 .6..S.).v...#+.7 01b0 59 8c e5 2b db da 65 a8 c9 cb 9d 7d 2d 86 50 6d Y..+..e....}-.Pm 01c0 37 23 29 c3 15 27 32 59 38 48 7d e0 f6 58 bd 20 7#)..'2Y8H}..X. 01d0 b7 5f 5a 9c 23 77 eb 38 55 c2 db a4 8e 1c d6 c6 ._Z.#w.8U....... 01e0 cc e5 62 17 07 db 25 19 c5 b0 a1 0d 95 a9 47 be ..b...%.......G. 01f0 27 93 f6 43 f8 b0 82 ab 63 eb 6c b4 03 dd 02 88 '..C....c.l..... 0200 5c 20 a2 fe ac 90 c1 c6 33 f7 1e e2 7f 5b 10 f2 \ ......3....[.. 0210 3e e6 a8 84 da d5 9a fb ae f1 3f 3e 9b 29 16 ac >.........?>.).. 0220 10 a3 2e bf dd de 36 c2 34 14 91 5e f7 27 b2 52 ......6.4..^.'.R 0230 e6 ea 43 82 8d eb 77 1b e6 9e fa 9d a6 a6 bf 07 ..C...w......... 0240 69 07 76 2e 90 fe 54 54 22 94 67 5d 77 5a 86 92 i.v...TT".g]wZ.. 0250 ea ae 00 ef c2 1d 7d 53 c9 91 99 80 25 d6 c1 02 ......}S....%... 0260 1d 4b e1 6f d7 5d 39 75 cd c6 fe c0 a9 68 fd 51 .K.o.]9u.....h.Q 0270 53 45 c8 ed 11 53 6e ad 8b d2 e5 b5 bb 3c 46 84 SE...Sn......<F. 0280 41 fc 7c d7 24 75 7e 7a df 55 a0 81 74 cb 11 2f A.|.$u~z.U..t../ 0290 ed cb 23 e5 b9 bd 02 8d 2b 67 cc 51 1d 7f 49 b1 ..#.....+g.Q..I. 02a0 ee 5d cb c9 a6 df d1 d2 02 69 07 c7 e8 10 35 c1 .].......i....5. 02b0 f1 5f 07 52 e5 c7 16 db 0a 26 d8 02 0a f7 00 08 ._.R.....&...... 02c0 78 43 f7 df 00 80 b4 36 eb 82 47 d2 b6 96 fb 7b xC.....6..G....{ 02d0 80 01 81 12 0d 41 91 d6 df 5b 2f 92 62 2d 5f 78 .....A...[/.b-_x 02e0 2f 8a e8 3e 5d e4 b2 e6 da 85 77 b5 63 87 45 e4 /..>].....w.c.E. 02f0 38 f6 40 23 e3 8c 45 0b 19 27 d5 de 70 b0 e1 c5 8.@#..E..'..p... 0300 d9 2c 0b c9 b2 87 d3 80 ef 5b cf b7 04 54 71 a2 .,.......[...Tq. 0310 8f be 02 47 1d f0 e6 c9 50 dc 9c 19 3f 27 82 67 ...G....P...?'.g 0320 31 22 d2 b0 92 d9 40 5f 06 d6 aa 2a 5a 5e a5 84 1"....@_...*Z^.. 0330 b4 84 9b 8d c4 97 7e 5d 5e 21 d5 c7 fb 53 2c 66 ......~]^!...S,f 0340 4b 23 52 e2 4a 57 6b 2e 2b 1d 10 84 c1 bd e4 a5 K#R.JWk.+....... 0350 c1 af b6 c0 d0 17 03 01 03 40 8a a2 f4 30 96 dc [email protected].. 0360 ab 58 28 4c 19 06 77 61 75 6b a6 7e 27 28 c7 29 .X(L..wauk.~'(.) 0370 c7 38 9a b4 2b b1 73 92 86 eb 99 f1 0b e6 1b a4 .8..+.s......... 0380 70 8b 33 50 96 d8 c0 0a f3 19 20 a3 2f 60 db dd p.3P...... ./`.. 0390 89 46 56 e7 08 fd c8 f6 66 71 cc 9c aa 6d 3e 30 .FV.....fq...m>0 03a0 91 6d 1a 76 1b 1d ea 8d aa 5e 2e 33 7f 83 ac 1f .m.v.....^.3.... 03b0 f9 79 d3 ca 35 c1 ba 65 3d c9 62 9a f4 0e b1 5a .y..5..e=.b....Z 03c0 81 e2 88 6b f6 b7 e2 ff dd fe fe 26 37 1b 91 60 ...k.......&7..` 03d0 17 c7 ae 10 22 22 47 aa 46 59 42 57 c4 c3 48 64 ....""G.FYBW..Hd 03e0 c7 d7 c9 f5 e9 96 49 84 2a 02 92 9f 30 a4 53 4b ......I.*...0.SK 03f0 60 3d a1 a0 97 40 a9 6c d8 a4 4a 55 7a 13 02 e5 `[email protected]... 0400 1a 86 28 21 5a f8 b5 35 98 16 29 9a 15 2c 21 21 ..(!Z..5..)..,!! 0410 e5 0a cf ee 72 55 77 c4 0e f9 86 4f 9b b4 fc 4c ....rUw....O...L 0420 ca b0 19 b0 34 52 27 fe fd d2 75 15 83 7e c4 5a ....4R'...u..~.Z 0430 b3 b0 77 ea 3b 08 66 98 73 49 6f 25 9d f4 76 3b ..w.;.f.sIo%..v; 0440 64 d2 88 11 14 6a 73 03 1e 99 36 d6 f7 37 6a 9f d....js...6..7j. 0450 b6 3a 84 dd 1e 8f 63 87 c3 ff 7a 4c 06 e7 d0 fb .:....c...zL.... 0460 26 f2 37 3d c4 2a a2 5e 26 e9 14 1c ee 25 5e c9 &.7=.*.^&....%^. 0470 5f f7 f3 75 9c 88 87 23 e7 c8 d0 87 eb 75 d3 3a _..u...#.....u.: 0480 72 e4 f9 9e 59 9d f3 a2 6c 08 a4 7e 48 fd cc 92 r...Y...l..~H... 0490 f7 66 cb 01 dd c9 8c 1d b4 25 c4 44 a0 14 eb 66 .f.......%.D...f 04a0 e1 d1 5a cf 04 4b c0 c1 3f 5b 76 37 83 55 59 a0 ..Z..K..?[v7.UY. 04b0 3e 00 25 e7 99 9d 10 0e 12 4c 86 42 e3 99 bf ad >.%......L.B.... 04c0 42 f3 76 95 1d 4b 6d 51 59 12 a1 50 ff fb ff 44 B.v..KmQY..P...D 04d0 45 04 1e 80 cc a7 37 99 41 01 37 ca f8 44 b2 15 E.....7.A.7..D.. 04e0 ac 73 5c f4 44 da ed ba 57 cf fb 50 68 de 96 3f .s\.D...W..Ph..? 04f0 a8 1c 00 ea c9 be 0f 31 80 ed 82 b2 b7 53 2e 88 .......1.....S.. 0500 ba 2f b6 a2 eb 77 e9 b3 c3 42 8a fa 37 e9 92 58 ./...w...B..7..X 0510 37 aa fd d8 49 5d b7 18 7a 51 a9 9e 5b 01 96 e8 7...I]..zQ..[... 0520 a7 e6 23 31 5a 35 8e a3 56 03 b1 00 a3 8d 17 c9 ..#1Z5..V....... 0530 cb c1 0e 12 d3 d4 e6 8a 29 19 61 70 7e 80 4c 48 ........).ap~.LH 0540 cc 4f a0 08 46 cc fd e4 a0 c9 c6 da dc 4c ab 46 .O..F........L.F 0550 6e 5e cc 26 37 6e a1 f9 81 ae bb c6 9f 0a 7a 06 n^.&7n........z. 0560 80 9c 0e 48 37 e9 b1 12 f3 51 90 65 d9 99 e2 54 ...H7....Q.e...T 0570 41 e5 17 a5 df 2e f5 73 7d 9c 65 95 91 a0 07 1a A......s}.e..... 0580 82 d7 8d 12 12 1a 6b 4c f3 78 e7 e9 c7 12 ca d5 ......kL.x...... 0590 39 6f 88 ac 44 14 51 06 1c 88 65 0b eb 85 fb fa 9o..D.Q...e..... 05a0 32 46 dd 06 28 c7 bc b7 2F..(... No. Time Source Destination Protocol Length Info 22407 260.354882 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=6143 Ack=324119 Win=65535 Len=0 TSval=730086 TSecr=600335 Frame 22407: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 6143, Ack: 324119, Len: 0 No. Time Source Destination Protocol Length Info 22408 260.354945 192.168.10.1 192.168.10.203 TCP 308 34433 > cds [PSH, ACK] Seq=324119 Ack=6143 Win=1002 Len=242 TSval=600336 TSecr=730086 Frame 22408: 308 bytes on wire (2464 bits), 308 bytes captured (2464 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 324119, Ack: 6143, Len: 242 Data (242 bytes) 0000 9d b1 73 c1 8f 36 a3 4a d5 77 31 b8 3f b3 27 43 ..s..6.J.w1.?.'C 0010 bd bd 8e 22 95 41 c7 b8 64 7c 5b 4c 55 1f 6d db ...".A..d|[LU.m. 0020 42 70 7c 3e e8 55 69 a6 cd 15 2f 9f 8a ba c6 b4 Bp|>.Ui.../..... 0030 c8 27 ed b2 f3 86 f7 e9 35 28 1a 3b ae 8f 39 2d .'......5(.;..9- 0040 1c 01 94 fe d3 1c 3a 84 64 26 6c 9a 85 ae 2a e6 ......:.d&l...*. 0050 dd 13 ef 0c e1 c3 54 c2 61 45 2e 88 ce 1a 90 17 ......T.aE...... 0060 16 a1 7f 0f 90 d3 85 72 67 c1 ad 53 6d 54 cf ad .......rg..SmT.. 0070 e0 78 26 f4 24 bf d5 ab 62 f6 2b 24 db 8e 8b 54 .x&.$...b.+$...T 0080 e9 c7 bc 08 64 c1 96 38 3b 3a 55 04 d0 1c 58 e7 ....d..8;:U...X. 0090 62 84 4c 24 ae e0 b7 0d e3 92 b6 06 23 a3 cd 09 b.L$........#... 00a0 43 97 ba 47 e8 bf fc ef b9 d4 2a c9 15 8e 4d 80 C..G......*...M. 00b0 4f f9 0c 37 a2 6a 6b 2f da eb c1 42 db 77 b5 e5 O..7.jk/...B.w.. 00c0 23 52 38 cb c2 fe db c5 de a8 9f 86 19 7a aa 24 #R8..........z.$ 00d0 ab 76 fb 27 44 8b 44 be ec 9b 7e 80 f5 ef 48 cf .v.'D.D...~...H. 00e0 af 60 00 b8 c1 0f 43 f7 88 a6 67 27 67 42 2c b8 .`....C...g'gB,. 00f0 7d 03 }. No. Time Source Destination Protocol Length Info 22409 260.355018 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49402 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00) Frame 22409: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49402 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY No. Time Source Destination Protocol Length Info 22410 260.390423 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=6143 Ack=324361 Win=65293 Len=74 TSval=730086 TSecr=600336 Frame 22410: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 6143, Ack: 324361, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 c0 09 a1 77 2a 2f 3f 9c 60 a8 47 .... ...w*/?.`.G 0010 2d 21 3b ec a6 27 2b 06 9b a6 bf 56 e4 0a e1 76 -!;..'+....V...v 0020 9c a4 fa 0b 46 17 03 01 00 20 45 ae d4 69 4a 23 ....F.... E..iJ# 0030 49 8c 88 4a 55 16 33 b7 cb f6 15 a0 ce 19 fa e0 I..JU.3......... 0040 92 64 fe c4 a0 3e 4e a8 db 62 .d...>N..b No. Time Source Destination Protocol Length Info 22411 260.390537 192.168.10.1 192.168.10.203 TCP 903 34433 > cds [PSH, ACK] Seq=324361 Ack=6217 Win=1002 Len=837 TSval=600345 TSecr=730086 Frame 22411: 903 bytes on wire (7224 bits), 903 bytes captured (7224 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 324361, Ack: 6217, Len: 837 Data (837 bytes) 0000 17 03 01 03 40 50 46 f4 c6 f7 35 90 d2 92 53 d0 [email protected]. 0010 98 9c ac b7 d5 10 60 8d 02 0f bc a6 8f 5b ea c7 ......`......[.. 0020 35 a2 b1 9a 6e 09 53 0f 1c 8e 50 1a 92 2d c3 23 5...n.S...P..-.# 0030 c7 94 37 63 84 db 7b 5c 8d e8 39 78 81 28 cd f5 ..7c..{\..9x.(.. 0040 cb 84 47 54 4b cc 61 ba 94 18 a8 94 78 13 e3 49 ..GTK.a.....x..I 0050 89 8a a1 e8 8f ed 9e 59 88 74 6e 6e b9 ca a9 5d .......Y.tnn...] 0060 5e 36 47 93 38 e5 13 25 b9 40 fc 07 e2 d3 84 f5 ^6G.8..%.@...... 0070 d6 82 ad 75 69 35 14 a1 13 e6 c1 89 17 ec 2f bf ...ui5......../. 0080 c1 23 a2 1e 6b ed 22 c5 53 37 e3 c4 3c a3 47 b6 .#..k.".S7..<.G. 0090 61 e9 19 ad 6c f4 89 70 cb 1c 64 e3 05 60 e7 5a a...l..p..d..`.Z 00a0 48 ad ec c7 d5 25 4b ac 0c 8a b6 7e 49 33 a4 ee H....%K....~I3.. 00b0 d3 1b f0 cc e1 89 1f 08 be 74 0c 77 ab d7 bd 2a .........t.w...* 00c0 f4 06 7f 5a 3f fa 03 ff 6f eb 8e 81 bb 40 45 01 ...Z?...o....@E. 00d0 8b b9 10 cd ea 7e b6 24 67 88 b6 87 de 90 6e 05 .....~.$g.....n. 00e0 86 a1 e7 a7 90 c1 23 98 af e9 2c d7 5c 71 50 9a ......#...,.\qP. 00f0 f3 76 a1 6d 28 c5 00 5d 7c 81 75 c6 bd b3 3d 21 .v.m(..]|.u...=! 0100 12 c6 63 4e 09 77 8c 88 5b 5c 4a 44 06 75 b9 26 ..cN.w..[\JD.u.& 0110 6a 30 cc f8 a1 78 c4 d7 29 a4 ad 34 73 b1 69 e8 j0...x..)..4s.i. 0120 9f 57 a0 6b 27 69 20 d1 24 39 9f 42 7f 41 45 73 .W.k'i .$9.B.AEs 0130 0b 1a 86 8e a5 bd 76 f4 4c b0 e7 bb 9a ed 4d 97 ......v.L.....M. 0140 30 46 03 38 f5 8d 13 31 96 ab b6 36 23 0b 22 96 0F.8...1...6#.". 0150 d3 f4 aa 04 14 d2 23 32 98 b8 56 90 17 b5 2e 21 ......#2..V....! 0160 6b 48 02 b0 7a 7f 36 88 28 32 a2 44 d8 b5 8d 85 kH..z.6.(2.D.... 0170 c5 a1 27 ee b9 8f 20 8e 39 4a e9 4d 24 6f 0a bd ..'... .9J.M$o.. 0180 69 71 98 f2 36 ba f3 b0 f5 4f 56 e4 b8 ef 3b 6c iq..6....OV...;l 0190 a1 2d 81 7f 16 8a d5 c1 a1 5d c1 d6 76 6b 38 ec .-.......]..vk8. 01a0 c3 ef 7a aa d2 b2 61 61 2b 68 6d f6 90 c2 f6 29 ..z...aa+hm....) 01b0 e0 67 be 63 b9 34 98 e2 f6 37 1e 09 8f 9e 6b 8b .g.c.4...7....k. 01c0 43 cb 68 9d e3 95 31 69 8b 4a 87 0e 85 54 77 ca C.h...1i.J...Tw. 01d0 a8 63 c7 fd 49 e6 0c dc 95 04 8e d0 22 76 46 0c .c..I......."vF. 01e0 bf 00 78 bb c2 94 19 8e c3 55 33 ed 11 a1 28 c0 ..x......U3...(. 01f0 73 91 ac 40 c9 af 7c ee 49 83 61 41 eb 5f ed b7 s..@..|.I.aA._.. 0200 5d 20 5d b8 39 7d b9 10 e2 1a 03 3d f5 b6 5d 19 ] ].9}.....=..]. 0210 b5 e2 d8 c1 5f 21 2c d5 96 b7 3f 55 13 86 75 48 ...._!,...?U..uH 0220 97 65 54 34 69 5c 84 c6 07 4b a7 33 5c 17 04 34 .eT4i\...K.3\..4 0230 6f bd c2 af 89 6a 5b 75 f2 68 96 bf a4 16 5a 8c o....j[u.h....Z. 0240 ac aa 26 fc db b6 2c 82 78 8a 18 fd 9e 92 c0 7d ..&...,.x......} 0250 d4 85 81 d5 88 81 29 b2 4e da 5e 0b f3 16 c4 74 ......).N.^....t 0260 24 6b a8 a5 1a 73 5f 62 92 51 a0 4b 10 fa 95 7e $k...s_b.Q.K...~ 0270 53 98 54 bd 97 47 7b be 8c ce 3a 19 71 4a 9b e1 S.T..G{...:.qJ.. 0280 93 f2 a0 d5 b3 88 56 1c 40 57 63 27 85 43 1d 96 ......V.@Wc'.C.. 0290 22 36 b2 11 c7 22 5e d7 da a3 70 a1 41 6f 51 07 "6..."^...p.AoQ. 02a0 e1 d4 16 53 e3 cc 50 0e 7c ec 19 02 de 67 40 af ...S..P.|....g@. 02b0 de ba 63 10 87 9b af 86 96 84 8e 28 65 97 d2 58 ..c........(e..X 02c0 44 7c b7 f8 de 18 6f 92 16 f3 ba 80 2a 36 fb 4a D|....o.....*6.J 02d0 4b 3e 4d 23 ae 9d 9c 45 e9 21 53 fb e7 53 24 b5 K>M#...E.!S..S$. 02e0 f8 62 d1 f0 bf bc 91 37 a6 ca af eb db d4 86 cd .b.....7........ 02f0 fc 5a f2 ae 9e 71 dd a7 18 f6 64 ca 29 66 a4 8e .Z...q....d.)f.. 0300 5f 52 0f f9 d2 99 5e b6 f2 39 49 d2 1a f2 1c bd _R....^..9I..... 0310 37 dd 09 ae fc 29 19 44 45 e5 f3 29 f7 96 d4 27 7....).DE..)...' 0320 c8 94 71 75 3c 85 97 6b 61 f0 85 70 e3 b3 59 40 ..qu<..ka..p..Y@ 0330 36 9a eb 98 8f 64 a1 a2 d8 15 f9 f4 0e 73 e0 d6 6....d.......s.. 0340 43 5d bd f3 38 C]..8 No. Time Source Destination Protocol Length Info 22412 260.393121 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=6217 Ack=325198 Win=64456 Len=74 TSval=730086 TSecr=600345 Frame 22412: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 6217, Ack: 325198, Len: 74 Data (74 bytes) 0000 17 03 01 00 20 46 72 af ef c1 8b b2 87 4d 7b 99 .... Fr......M{. 0010 f5 f8 44 8f 1d f6 92 bf bc e5 12 94 58 aa 90 4c ..D.........X..L 0020 1a d4 2b 5b 29 17 03 01 00 20 c2 9f 4a 65 b6 52 ..+[).... ..Je.R 0030 a7 63 50 2d 8c 0e 96 21 53 77 6b fb 60 b8 22 36 .cP-...!Swk.`."6 0040 64 65 10 b9 2d 6d 4b 76 53 cd de..-mKvS. No. Time Source Destination Protocol Length Info 22413 260.400037 192.168.10.30 192.168.20.3 UDP 673 Source port: 34427 Destination port: apc-3052 Frame 22413: 673 bytes on wire (5384 bits), 673 bytes captured (5384 bits) Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (631 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 44 54 3d 31 30 .168.10.30.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 31 38 3a 34 /03/2011.TM=18:4 0040 38 3a 31 36 0a 53 52 3d 31 42 0a 53 55 3d 37 42 8:16.SR=1B.SU=7B 0050 31 33 35 31 36 35 0a 52 44 3d 44 36 46 39 0a 54 135165.RD=D6F9.T 0060 41 3d 31 39 32 2e 31 36 38 2e 32 30 2e 33 0a 50 A=192.168.20.3.P 0070 54 3d 33 30 35 32 0a 43 4c 3d 43 30 41 38 30 41 T=3052.CL=C0A80A 0080 44 42 0a 43 4c 3d 43 30 41 38 30 41 44 30 0a 43 DB.CL=C0A80AD0.C 0090 4c 3d 43 30 41 38 30 41 43 42 0a 43 4c 3d 43 30 L=C0A80ACB.CL=C0 00a0 41 38 30 41 43 43 0a 43 4c 3d 43 30 41 38 30 41 A80ACC.CL=C0A80A 00b0 43 45 0a 43 4c 3d 43 30 41 38 30 41 44 43 0a 43 CE.CL=C0A80ADC.C 00c0 4c 3d 43 30 41 38 30 41 43 46 0a 43 4c 3d 43 30 L=C0A80ACF.CL=C0 00d0 41 38 30 41 43 44 0a 43 4c 3d 43 30 41 38 30 41 A80ACD.CL=C0A80A 00e0 46 30 0a 43 4c 3d 43 30 41 38 30 41 43 39 0a 43 F0.CL=C0A80AC9.C 00f0 4c 3d 43 30 41 38 30 41 31 30 0a 43 4c 3d 43 30 L=C0A80A10.CL=C0 0100 41 38 30 41 30 44 0a 43 4c 3d 43 30 41 38 30 41 A80A0D.CL=C0A80A 0110 30 46 0a 43 4c 3d 43 30 41 38 30 41 30 43 0a 43 0F.CL=C0A80A0C.C 0120 4c 3d 43 30 41 38 30 41 44 31 0a 43 4c 3d 43 30 L=C0A80AD1.CL=C0 0130 41 38 30 41 43 41 0a 43 4c 3d 43 30 41 38 30 41 A80ACA.CL=C0A80A 0140 46 41 0a 43 4c 3d 43 30 41 38 30 41 44 38 0a 43 FA.CL=C0A80AD8.C 0150 4c 3d 43 30 41 38 30 41 32 37 0a 43 4c 3d 43 30 L=C0A80A27.CL=C0 0160 41 38 30 41 44 39 0a 43 4c 3d 43 30 41 38 30 41 A80AD9.CL=C0A80A 0170 44 33 0a 43 4c 3d 43 30 41 38 30 41 44 32 0a 43 D3.CL=C0A80AD2.C 0180 4c 3d 43 30 41 38 30 41 45 32 0a 43 4c 3d 43 30 L=C0A80AE2.CL=C0 0190 41 38 30 41 45 33 0a 43 4c 3d 43 30 41 38 30 41 A80AE3.CL=C0A80A 01a0 44 45 0a 43 4c 3d 43 30 41 38 31 34 30 33 0a 43 DE.CL=C0A81403.C 01b0 4c 3d 43 30 41 38 30 41 46 36 0a 43 4c 3d 43 30 L=C0A80AF6.CL=C0 01c0 41 38 30 41 31 31 0a 43 4c 3d 30 30 0a 43 4c 3d A80A11.CL=00.CL= 01d0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 01e0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01f0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0200 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0210 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0220 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0230 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0240 4c 3d 30 30 0a 43 4c 3d 30 30 0a 4d 44 3d 35 34 L=00.CL=00.MD=54 0250 34 34 39 36 32 35 35 39 32 66 62 63 66 34 39 34 449625592fbcf494 0260 36 39 32 37 65 65 61 66 64 33 37 34 31 61 0a 3c 6927eeafd3741a.< 0270 2f 42 4f 44 59 3e 0a /BODY>. No. Time Source Destination Protocol Length Info 22414 260.400286 192.168.10.30 192.168.20.3 UDP 673 Source port: 34427 Destination port: apc-3052 Frame 22414: 673 bytes on wire (5384 bits), 673 bytes captured (5384 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d) Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.20.3 (192.168.20.3) User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052) Data (631 bytes) 0000 4d 41 43 4f 4e 46 49 47 0a 3c 42 4f 44 59 3e 0a MACONFIG.<BODY>. 0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192 0020 2e 31 36 38 2e 31 30 2e 33 30 0a 44 54 3d 31 30 .168.10.30.DT=10 0030 2f 30 33 2f 32 30 31 31 0a 54 4d 3d 31 38 3a 34 /03/2011.TM=18:4 0040 38 3a 31 36 0a 53 52 3d 31 42 0a 53 55 3d 37 42 8:16.SR=1B.SU=7B 0050 31 33 35 31 36 35 0a 52 44 3d 44 36 46 39 0a 54 135165.RD=D6F9.T 0060 41 3d 31 39 32 2e 31 36 38 2e 32 30 2e 33 0a 50 A=192.168.20.3.P 0070 54 3d 33 30 35 32 0a 43 4c 3d 43 30 41 38 30 41 T=3052.CL=C0A80A 0080 44 42 0a 43 4c 3d 43 30 41 38 30 41 44 30 0a 43 DB.CL=C0A80AD0.C 0090 4c 3d 43 30 41 38 30 41 43 42 0a 43 4c 3d 43 30 L=C0A80ACB.CL=C0 00a0 41 38 30 41 43 43 0a 43 4c 3d 43 30 41 38 30 41 A80ACC.CL=C0A80A 00b0 43 45 0a 43 4c 3d 43 30 41 38 30 41 44 43 0a 43 CE.CL=C0A80ADC.C 00c0 4c 3d 43 30 41 38 30 41 43 46 0a 43 4c 3d 43 30 L=C0A80ACF.CL=C0 00d0 41 38 30 41 43 44 0a 43 4c 3d 43 30 41 38 30 41 A80ACD.CL=C0A80A 00e0 46 30 0a 43 4c 3d 43 30 41 38 30 41 43 39 0a 43 F0.CL=C0A80AC9.C 00f0 4c 3d 43 30 41 38 30 41 31 30 0a 43 4c 3d 43 30 L=C0A80A10.CL=C0 0100 41 38 30 41 30 44 0a 43 4c 3d 43 30 41 38 30 41 A80A0D.CL=C0A80A 0110 30 46 0a 43 4c 3d 43 30 41 38 30 41 30 43 0a 43 0F.CL=C0A80A0C.C 0120 4c 3d 43 30 41 38 30 41 44 31 0a 43 4c 3d 43 30 L=C0A80AD1.CL=C0 0130 41 38 30 41 43 41 0a 43 4c 3d 43 30 41 38 30 41 A80ACA.CL=C0A80A 0140 46 41 0a 43 4c 3d 43 30 41 38 30 41 44 38 0a 43 FA.CL=C0A80AD8.C 0150 4c 3d 43 30 41 38 30 41 32 37 0a 43 4c 3d 43 30 L=C0A80A27.CL=C0 0160 41 38 30 41 44 39 0a 43 4c 3d 43 30 41 38 30 41 A80AD9.CL=C0A80A 0170 44 33 0a 43 4c 3d 43 30 41 38 30 41 44 32 0a 43 D3.CL=C0A80AD2.C 0180 4c 3d 43 30 41 38 30 41 45 32 0a 43 4c 3d 43 30 L=C0A80AE2.CL=C0 0190 41 38 30 41 45 33 0a 43 4c 3d 43 30 41 38 30 41 A80AE3.CL=C0A80A 01a0 44 45 0a 43 4c 3d 43 30 41 38 31 34 30 33 0a 43 DE.CL=C0A81403.C 01b0 4c 3d 43 30 41 38 30 41 46 36 0a 43 4c 3d 43 30 L=C0A80AF6.CL=C0 01c0 41 38 30 41 31 31 0a 43 4c 3d 30 30 0a 43 4c 3d A80A11.CL=00.CL= 01d0 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 01e0 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 01f0 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0200 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0210 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 L=00.CL=00.CL=00 0220 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d .CL=00.CL=00.CL= 0230 30 30 0a 43 4c 3d 30 30 0a 43 4c 3d 30 30 0a 43 00.CL=00.CL=00.C 0240 4c 3d 30 30 0a 43 4c 3d 30 30 0a 4d 44 3d 35 34 L=00.CL=00.MD=54 0250 34 34 39 36 32 35 35 39 32 66 62 63 66 34 39 34 449625592fbcf494 0260 36 39 32 37 65 65 61 66 64 33 37 34 31 61 0a 3c 6927eeafd3741a.< 0270 2f 42 4f 44 59 3e 0a /BODY>. No. Time Source Destination Protocol Length Info 22415 260.400372 192.168.10.46 192.168.10.245 Syslog 202 LOCAL4.WARNING: Oct 03 2011 19:19:20 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS1/34427 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n Frame 22415: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514) Syslog message: LOCAL4.WARNING: Oct 03 2011 19:19:20 ciscoasa : %ASA-4-106023: Deny udp src inside:UPS1/34427 dst dmz1:WebServer/3052 by access-group "inside_access_in" [0xbe9efe96, 0x0]\n No. Time Source Destination Protocol Length Info 22416 260.430214 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=325198 Ack=6291 Win=1002 Len=0 TSval=600355 TSecr=730086 Frame 22416: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 325198, Ack: 6291, Len: 0 No. Time Source Destination Protocol Length Info 22417 260.430298 192.168.10.203 192.168.10.1 TCP 362 cds > 34433 [PSH, ACK] Seq=6291 Ack=325198 Win=64456 Len=296 TSval=730087 TSecr=600355 Frame 22417: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1) Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 6291, Ack: 325198, Len: 296 Data (296 bytes) 0000 17 03 01 00 20 85 3f bf 90 b9 af 89 5c 60 47 db .... .?.....\`G. 0010 61 f9 51 5e 37 52 c8 0f 46 32 42 40 75 13 bd 6d a.Q^[email protected] 0020 e9 3d 39 90 6e 17 03 01 00 20 71 a9 3f b1 ca 76 .=9.n.... q.?..v 0030 b6 f2 e0 e6 4e b0 3c 90 6c 18 f5 eb b7 e1 09 70 ....N.<.l......p 0040 a2 c9 d1 dd fc 21 92 20 d5 d4 17 03 01 00 20 77 .....!. ...... w 0050 2f d3 b6 02 e3 19 3c eb e6 35 d8 78 1d d6 6f 9a /.....<..5.x..o. 0060 26 7f 3b 7d de 67 52 f0 4a 85 b0 3e 86 ba 3e 17 &.;}.gR.J..>..>. 0070 03 01 00 20 aa 9d 0b 5a 44 a0 48 b3 1f c8 70 9f ... ...ZD.H...p. 0080 42 49 26 78 8c 62 7c c3 de 63 6a 9e 5c 3c 38 4e BI&x.b|..cj.\<8N 0090 25 59 ff 39 17 03 01 00 20 9c 8b a4 9d 4d 2e 49 %Y.9.... ....M.I 00a0 6c 15 20 a2 66 8c 73 d8 1f 3b a2 06 c5 66 c9 8e l. .f.s..;...f.. 00b0 01 0c b9 ed 5c 2c b8 da 95 17 03 01 00 20 21 3b ....\,....... !; 00c0 c5 1d fd 0e 6a 65 42 29 2f 1f ac 0c 85 8c 87 31 ....jeB)/......1 00d0 c5 85 30 1b ba bd aa 3d 68 06 84 dd 91 82 17 03 ..0....=h....... 00e0 01 00 20 03 86 3f 6b fe 61 80 d1 89 b9 cd a1 7b .. ..?k.a......{ 00f0 f4 35 43 37 82 ba 66 66 90 58 a6 e1 b1 00 c2 16 .5C7..ff.X...... 0100 d0 a9 3a 17 03 01 00 20 dd f1 c5 a2 6b a9 b7 28 ..:.... ....k..( 0110 76 dc c8 65 94 8a c1 b5 72 99 1e 92 4d a6 8c 41 v..e....r...M..A 0120 ff 83 0a 11 37 e2 9d 17 ....7... No. Time Source Destination Protocol Length Info 22418 260.430350 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=325198 Ack=6587 Win=1002 Len=0 TSval=600355 TSecr=730087 Frame 22418: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203) Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 325198, Ack: 6587, Len: 0 No. Time Source Destination Protocol Length Info 22419 260.531751 189.123.220.16 192.168.10.207 SMTP 108 C: MAIL FROM: <madeline.morrison@xxxxxxxxxxxxxxxxxxxxx> Frame 22419: 108 bytes on wire (864 bits), 108 bytes captured (864 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49402 (49402), Dst Port: smtp (25), Seq: 20, Ack: 313, Len: 54 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22420 260.531879 192.168.10.207 189.123.220.16 SMTP 118 S: 250 2.1.0 [email protected] OK Frame 22420: 118 bytes on wire (944 bits), 118 bytes captured (944 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49402 (49402), Seq: 313, Ack: 74, Len: 64 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22421 260.531927 189.123.220.16 192.168.10.207 TCP 60 49402 > smtp [ACK] Seq=74 Ack=377 Win=93064 Len=0 Frame 22421: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49402 (49402), Dst Port: smtp (25), Seq: 74, Ack: 377, Len: 0 No. Time Source Destination Protocol Length Info 22422 260.646759 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 22422: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 18061, Ack: 1292689, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22423 260.646794 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1292689 Ack=18103 Win=46342 Len=0 Frame 22423: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1292689, Ack: 18103, Len: 0 No. Time Source Destination Protocol Length Info 22424 260.716287 192.168.10.1 192.168.10.245 Syslog 313 LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49402 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="ezconfinement@xxxxxxxxxxxx" (SMTP-proxy-incoming-00) Frame 22424: 313 bytes on wire (2504 bits), 313 bytes captured (2504 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) [truncated] Syslog message: LOCAL1.INFO: Oct 3 19:48:38 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49402 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul No. Time Source Destination Protocol Length Info 22425 260.894085 189.123.220.16 192.168.10.207 SMTP 60 C: QUIT Frame 22425: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49402 (49402), Dst Port: smtp (25), Seq: 74, Ack: 377, Len: 6 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22426 260.894125 192.168.10.207 189.123.220.16 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel Frame 22426: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49402 (49402), Seq: 377, Ack: 80, Len: 69 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22427 260.894167 192.168.10.207 189.123.220.16 TCP 60 smtp > 49402 [FIN, ACK] Seq=446 Ack=80 Win=65456 Len=0 Frame 22427: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 189.123.220.16 (189.123.220.16) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 49402 (49402), Seq: 446, Ack: 80, Len: 0 No. Time Source Destination Protocol Length Info 22428 260.894207 189.123.220.16 192.168.10.207 TCP 60 49402 > smtp [ACK] Seq=80 Ack=446 Win=92994 Len=0 Frame 22428: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49402 (49402), Dst Port: smtp (25), Seq: 80, Ack: 446, Len: 0 No. Time Source Destination Protocol Length Info 22429 260.894243 189.123.220.16 192.168.10.207 TCP 60 49402 > smtp [ACK] Seq=80 Ack=447 Win=92994 Len=0 Frame 22429: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49402 (49402), Dst Port: smtp (25), Seq: 80, Ack: 447, Len: 0 No. Time Source Destination Protocol Length Info 22430 260.991673 192.168.10.246 65.32.1.70 DNS 85 Standard query PTR 169.20.60.92.in-addr.arpa Frame 22430: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.70 (65.32.1.70) User Datagram Protocol, Src Port: 50566 (50566), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Length Info 22431 261.074370 189.123.220.16 192.168.10.207 TCP 60 49402 > smtp [RST, ACK] Seq=80 Ack=447 Win=92994 Len=0 Frame 22431: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 189.123.220.16 (189.123.220.16), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 49402 (49402), Dst Port: smtp (25), Seq: 80, Ack: 447, Len: 0 No. Time Source Destination Protocol Length Info 22432 261.074470 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:48:39 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49402 25 msg="Conn End" (SMTP-proxy-incoming-00) Frame 22432: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97) Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245) User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514) Syslog message: LOCAL1.INFO: Oct 3 19:48:39 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 189.123.220.16 7x.x.x.3 49402 25 msg="Conn End" (SMTP-proxy-incoming-00) No. Time Source Destination Protocol Length Info 22433 261.194318 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097 Frame 22433: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 22434 261.229192 65.32.1.70 192.168.10.246 DNS 130 Standard query response PTR ip-92-60-20-169.net.abissnet.al Frame 22434: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e) Internet Protocol Version 4, Src: 65.32.1.70 (65.32.1.70), Dst: 192.168.10.246 (192.168.10.246) User Datagram Protocol, Src Port: domain (53), Dst Port: 50566 (50566) Domain Name System (response) No. Time Source Destination Protocol Length Info 22435 261.237293 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1622153472, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 22435: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22436 261.237315 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1622153472, Sender ID 512, Team ID 00:04:23:e2:03:6c Frame 22436: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22437 261.237327 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1622153472, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 22437: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22438 261.237340 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1622153472, Sender ID 256, Team ID 00:04:23:e2:03:6c Frame 22438: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22439 261.255140 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3491234048, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 22439: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22440 261.255165 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3491234048, Sender ID 512, Team ID 00:13:72:5e:a8:82 Frame 22440: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22441 261.255178 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3491234048, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 22441: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22442 261.255190 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3491234048, Sender ID 256, Team ID 00:13:72:5e:a8:82 Frame 22442: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Intel ANS probe No. Time Source Destination Protocol Length Info 22443 261.279759 192.168.10.207 206.225.164.188 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets Frame 22443: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 10711, Ack: 735883, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22444 261.279794 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=735883 Ack=10753 Win=46237 Len=0 Frame 22444: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 735883, Ack: 10753, Len: 0 No. Time Source Destination Protocol Length Info 22445 261.289724 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets Frame 22445: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 18103, Ack: 1292689, Len: 42 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22446 261.289756 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=1292689 Ack=18145 Win=46321 Len=0 Frame 22446: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1292689, Ack: 18145, Len: 0 No. Time Source Destination Protocol Length Info 22447 261.289848 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=18145 Ack=1292689 Win=17594 Len=0 Frame 22447: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 18145, Ack: 1292689, Len: 0 No. Time Source Destination Protocol Length Info 22448 261.289877 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 22447#1] smtp > 23308 [ACK] Seq=18145 Ack=1292689 Win=17594 Len=0 Frame 22448: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 18145, Ack: 1292689, Len: 0 No. Time Source Destination Protocol Length Info 22449 261.289967 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22449: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1292689, Ack: 18145, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22450 261.289998 206.225.164.186 192.168.10.207 SMTP 1023 C: DATA fragment, 969 bytes Frame 22450: 1023 bytes on wire (8184 bits), 1023 bytes captured (8184 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1294069, Ack: 18145, Len: 969 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22451 261.290027 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22451: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1295038, Ack: 18145, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22452 261.290056 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22452: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1296418, Ack: 18145, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22453 261.290084 206.225.164.186 192.168.10.207 SMTP 87 C: DATA fragment, 33 bytes Frame 22453: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1297798, Ack: 18145, Len: 33 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22454 261.290113 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22454: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1297831, Ack: 18145, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22455 261.290150 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22455: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1299211, Ack: 18145, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22456 261.290179 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22456: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1300591, Ack: 18145, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22457 261.290208 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22457: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1301971, Ack: 18145, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22458 261.290237 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=18145 Ack=1296418 Win=13865 Len=0 Frame 22458: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 18145, Ack: 1296418, Len: 0 No. Time Source Destination Protocol Length Info 22459 261.290266 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22459: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1303351, Ack: 18145, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22460 261.290295 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=18145 Ack=1301971 Win=8312 Len=0 Frame 22460: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 18145, Ack: 1301971, Len: 0 No. Time Source Destination Protocol Length Info 22461 261.290324 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22461: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1304731, Ack: 18145, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22462 261.290353 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22462: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1306111, Ack: 18145, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22463 261.290382 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=18145 Ack=1304731 Win=5552 Len=0 Frame 22463: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 18145, Ack: 1304731, Len: 0 No. Time Source Destination Protocol Length Info 22464 261.290414 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22464: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1307491, Ack: 18145, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22465 261.290443 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22465: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1308871, Ack: 18145, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22466 261.290472 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes Frame 22466: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd) Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207) Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1310251, Ack: 18145, Len: 1380 Simple Mail Transfer Protocol No. Time Source Destination Protocol Length Info 22467 261.290501 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=18145 Ack=1307491 Win=2792 Len=0 Frame 22467: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 18145, Ack: 1307491, Len: 0 No. Time Source Destination Protocol Length Info 22468 261.290528 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=18145 Ack=1310251 Win=32 Len=0 Frame 22468: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 18145, Ack: 1310251, Len: 0 No. Time Source Destination Protocol Length Info 22469 261.315823 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9 Frame 22469: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 22470 261.341164 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 22470: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 22471 261.341198 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request) Frame 22471: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Length Info 22472 261.416198 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=18145 Ack=1310283 Win=0 Len=0 Frame 22472: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8) Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 18145, Ack: 1310283, Len: 0 No. Time Source Destination Protocol Length Info 22473 261.444067 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092 Frame 22473: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time Source Destination Protocol Length Info 22474 261.566369 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc Frame 22474: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol
- Follow-Ups:
- [Wireshark-users] L2CP and Slow Network
- From: Josue Del Valle
- [Wireshark-users] L2CP and Slow Network
- Prev by Date: Re: [Wireshark-users] Very, very elementary question - how do I make sense of the trace?
- Next by Date: [Wireshark-users] L2CP and Slow Network
- Previous by thread: Re: [Wireshark-users] Very, very elementary question - how do I make sense of the trace?
- Next by thread: [Wireshark-users] L2CP and Slow Network
- Index(es):